ldapconfl

Information Center

Specifying the LDAP directory information

This task is part of setting up and using LDAP.

To configure Host On-Demand to use an LDAP directory, complete the following fields on the Host On-Demand Administration Directory Service window:

LDAP Type
Choose the type of LDAP server from the dropdown list. The supported options are:
  • IBM LDAP - Select this option when connecting to IBM Tivoli Directory Server.
  • OpenLDAP - Select this option to connect to an OpenLDAP server.
  • Microsoft AD - Select this option when connecting to Microsoft Active Directory.
This configuration allows Host On-Demand to apply the correct schema and handle connections based on the selected server type.
Destination Address
Type the IP address of the LDAP directory. Use either the host name or dotted decimal format. The default is the IP address of the Host On-Demand server.
Destination Port
Type the TCP/IP port on which the LDAP server will accept a connection from an LDAP client. The default port is 389.
Administrator Distinguished Name
Type the distinguished name (DN) of the directory administrator that allows Host On-Demand to update information. You must use the LDAP string representation for distinguished names (for example, 
cn=Chris Smith,o=IBM,c=US
).
Administrator Password
Type the directory administrator's password.
Distinguished Name Suffix
Type the distinguished name (DN) of the highest entry in the directory information tree (DIT) for which information will be saved. Host On-Demand will store all of its configuration information below this suffix in the DIT. You must use the LDAP string representation for distinguished names (for example, cn=HOD,o=IBM,c=US).
If you change the directory service from the private directory on the local machine to LDAP, you must restart the Service Manager to migrate the Redirector information into LDAP. The Redirector Service window in the Administration Utility is not updated with the Redirector information for the LDAP directory service until you restart the Service Manager.
SSL/TLS
  • Yes - Enables an encrypted connection with SSL or TLS.
    • Ensure that the LDAP server is set up for secure communication and the secure port (usually 636) is specified in the Destination Port field.
  • No - Connects with standard, unencrypted LDAP.

Directory schema

An LDAP directory server is shipped with a predefined schema. The object classes that a directory server can store and the attributes that these objects can contain are defined by its schema. The schema defines which object classes can be created and where they may be located within the DIT. In addition, the schema defines the syntax of an object's attributes and specifies which attributes are required and which are optional.