Welcome
Administering
Learn how to administer the product.
Administering Rational® ClearQuest®
Learn how to administer the Rational® ClearQuest®.
Using LDAP with Rational® ClearQuest®
Overview of user authentication methods available with Rational® ClearQuest®.
Setting up LDAP authentication
Overview of LDAP setup procedures.
LDAP configuration steps for Rational® ClearQuest®
Introduction to basic LDAP configuration commands.
Step 6: Set the authentication algorithm to CQ_FIRST
Enable LDAP authentication.

IBM ClearQuest 10.0.9
Overview
Learn general information about the product.
Installing
Learn how to install the product.
Upgrading and migrating
Learn how to upgrade and migrate data for the product.
Administering
Learn how to administer the product.
- Administering Rational® ClearQuest®
  Learn how to administer the Rational® ClearQuest®.
  - Reconfiguring ClearQuest® to use a different JRE
    When you change the Java Runtime Environment (JRE) for Rational® ClearQuest®, you must reconfigure the product to make it work with the new JRE.
  - Managing databases
    Describes the different types of databases that the administrator can create and manage
  - Managing user accounts
    Use the User Administration tool to set up and administer users and user groups. Rational® ClearQuest® stores information about users and user groups in the user database and schema repository.
  - Configuring query limits on result sets
    You can configure query limits on the size of result sets to improve system performance, availability, and scalability.
  - Using LDAP with Rational® ClearQuest®
    Overview of user authentication methods available with Rational® ClearQuest®.
    - LDAP authentication model
      Description of the LDAP authentication processing model.
    - Before you set up LDAP
      Tasks to be completed as a prerequisite to setting up LDAP authentication, and information about supported LDAP servers and platforms.
    - Setting up LDAP authentication
      Overview of LDAP setup procedures.
      - Collecting LDAP information
        Describes information required and questions to be answered in order to set up LDAP for Rational® ClearQuest®
      - LDAP configuration steps for Rational® ClearQuest®
        Introduction to basic LDAP configuration commands.
        Step 1: Set the authentication algorithm to CQ_ONLY
        Authenticating users in a Rational® ClearQuest® database set.
        Step 2: Set the Rational® ClearQuest® LDAP connection information
        Step 3: Set the LDAP search criteria
        Step 4: Set the Rational® ClearQuest®-LDAP mapping criteria
        Use the installutil setcqldapmap subcommand to identify the Rational® ClearQuest® user profile field and the LDAP user attribute that Rational ClearQuest uses to map a user account in the Rational ClearQuest database set to a user account in the LDAP directory.
        Step 5: Validate the LDAP configuration information
        Step 6: Set the authentication algorithm to CQ_FIRST
        Enable LDAP authentication.
        Step 7: Set a user's authentication mode
        Set the user's authentication mode for LDAP.
        Step 8: Test for LDAP authentication
        Test your database set's LDAP settings.
      - MultiSite considerations
        Factors to keep in mind when setting up LDAP authentication at a site using Rational® ClearQuest® MultiSite.
      - Disabling LDAP authentication
        Commands to use in disabling LDAP authentication.
      - Common LDAP configurations
        You can configure Rational® ClearQuest® LDAP authentication in a variety of ways. This topic describes three common configurations and shows examples of the installutil subcommand entries used to achieve the configurations.
      - Enabling SSL Encryption with GSKit
        Overview of SSL encryption and use of a key database to store your digital security certificates.
      - Configuring Rational® ClearQuest® with LDAP user authentication for TLS 1.2 to support NIST SP 800-131A guidelines
        You must configure LDAP for Rational® ClearQuest® authentication to support Transport Layer Security 1.2 (TLS 1.2) and NIST SP 800-131A guidelines.
      - TLS 1.0/1.1 ciphers disabled by default for secure LDAP connections
        Several insecure TLS 1.0/1/1 ciphers are now disabled by default in Rational® ClearQuest® v9.0.1. You will not be able to log in to Rational ClearQuest via LDAP authentication if one of the disabled ciphers are used.
      - Configure FIPS 140-2 approved data encryption
        ClearQuest® supports FIPS 140-2 approved data encryption.
      - Quick-reference LDAP worksheet
        Checklist of required information and steps to configure a Rational® ClearQuest®
    - Syntax
    - GUI changes to support LDAP
      The Rational® ClearQuest® GUI has been updated to support LDAP authentication.
    - Summary: performing LDAP-related administrative tasks
      Some administrative tasks can be accomplished by using installutil subcommands.
  - Workspace folder permissions overview
    Rational® ClearQuest® uses a role-based access control (RBAC) model for enforcing workspace folder permissions. The workspace folder permissions feature requires that your schema repository and user databases are at feature level 6 or later.
  - Optimistic and pessimistic record locking
    Overview of optimistic and pessimistic locking implementations in Rational® ClearQuest®.
  - Configuring ClearQuest® core logging and tracing
    This section describes how to configure logging and tracing for ClearQuest® core.
- Administering Rational® ClearQuest® Web
  This section discusses how to administer Rational® ClearQuest® Web.
- Administering Rational® ClearQuest® Multisite
  Administering Rational® ClearQuest® Multisite
Reporting
Learn how to generate reports for the product.
Developing
Learn how to develop schemas by using the Rational® ClearQuest® Designer.
Managing change and releases
Learn how to manage change and release in the product.
Integrating
You can integrate Rational® ClearQuest® with other software by adding packages to existing schema.
Extending product function
Learn how to extend the product.
Reference
Review reference information for the product.
Tutorials

Step 6: Set the authentication algorithm to CQ_FIRST

Enable LDAP authentication.

Procedure

Enable LDAP authentication by using the installutil setauthenticationalgorithm subcommand to change the authentication algorithm to CQ_FIRST. This causes ClearQuest® to search the database for a user profile record with a Login name field value that matches the user name entered in the logon window. If ClearQuest® finds a match and the user profile record is marked for ClearQuest® authentication, then traditional authentication is performed. If ClearQuest® finds a match and the user profile record is marked for LDAP authentication, or if ClearQuest® does not find a match, then ClearQuest® attempts to authenticate the user against LDAP.

Example

installutil setauthenticationalgorithm dbset_name cq_user cq_password CQ_FIRST