安装配置 LDAP 过程

以下只是经过在　RF 4.1 下测试，如果有问题请指证

-------------------------------------------------------------------
第一部分:安装 IDS

第二部分: IDS加入用户
 导入管理员用户
 清单如下:
---------------------
version: 1

# NOTE: you must edit this file before importing it and replace all
# occurrences of the default suffix "dc=unis,dc=com" with the suffix
# that your LDAP server is configured for.

dn: dc=unis,dc=com
objectclass: domain
objectclass: top
# Add lines according to this scheme that correspond to your suffix
dc: unis,dc=com
dc: unis

dn: cn=users,dc=unis,dc=com
objectclass: container
objectclass: top
cn: users

dn: cn=groups,dc=unis,dc=com
objectclass: top
objectclass: container
cn: groups

dn: uid=wpsadmin,cn=users,dc=unis,dc=com
objectclass: organizationalPerson
objectclass: person
objectclass: top
objectclass: inetOrgPerson
uid: wpsadmin
userpassword: wpsadmin
sn: admin
givenName: wps
cn: wps admin

dn: uid=wpsbind,cn=users,dc=unis,dc=com
objectclass: top
objectclass: person
objectclass: organizationalPerson
objectclass: inetOrgPerson
uid: wpsbind
userpassword: wpsbind
sn: bind
givenName: wps
cn: wps bind

dn: cn=wpsadmins,cn=groups,dc=unis,dc=com
objectclass: groupOfUniqueNames
objectclass: top
uniquemember: uid=wpsadmin,cn=users,dc=unis,dc=com
cn: wpsadmins

---------------------

第三部分:
1.修改Portal机器上的 wpconfig.properties 文件

WasUserid    uid=wpsbind,cn=users,dc=unis,dc=com
WasPassword    wpsbind
PortalAdminId    uid=wpsadmin,cn=users,dc=unis,dc=com
PortalAdminIdShort   建议为空
PortalAdminPwd    wpsadmin
PortalAdminGroupId   cn=wpsadmins,cn=groups,dc=unis,dc=com
PortalAdminGroupIdShort  建议为空
WpsContentAdministrators  cn=wpsadmins,cn=groups,dc=unis,dc=com
WpsContentAdministratorsShort  建议为空
WpsDocReviewer    cn=wpsadmins,cn=groups,dc=unis,dc=com
WpsDocReviewerShort   wpsDocReviewer
LTPAPassword    password/wpsbind
LTPATimeout    120
SSODomainName    iic.unis.com
WmmDefaultRealm   portal
LDAPHostName    ids.unis.com
LDAPPort    389
LDAPAdminUId    cn=root
LDAPAdminPwd    root
LDAPServerType    IBM_DIRECTORY_SERVER
WmmSystemId    uid=wpsadmin,cn=users,dc=unis,dc=com
WmmSystemIdPassword   wpsadmin
LDAPSuffix    dc=unis,dc=com
LdapUserPrefix    uid
LDAPUserSuffix    cn=users
LdapGroupPrefix   cn
LDAPUserObjectClass   inetOrgPerson
LDAPGroupObjectClass   groupOfUniqueNames
LDAPGroupMember   uniqueMember
LDAPsslEnabled    false

注:在执行下面配置任务之前,分别打开DB2IDS 机器和WP01 机器的
C:\WINNT\system32\drivers\etc 目录下的hosts 文件,确认文件中有以下几行:
192.168.0.58 db2ids db2.iic.unis.com ids.unis.com
192.168.0.54 wp01 wp01.iic.unis.com

2. 验证修改是否成功,如果不通过重复前边的修改工作
 WPSconfig.bat validate-wmmur-ldap
3. 增加安全性
 WPSconfig.bat enable-security-wmmur-ldap

4. 使修改生效,重启服务器
 stopServer.bat server1
 stopServer.bat WebSphere_Portal
 startServer.bat server1
 startServer.bat WebSphere_Portal

5. 验证 IDS 是否与 Portal 集成
 1) http://wp01.iic.unis.com:9090/admin
 2) http://wp01.iic.unis.com:9081/wps/portal
 3) 注册测试用户brown
 4) 在命令行输入
  ldapsearch -b "dc=iic,dc=ibm,dc=com" -h db2ids "uid=brown"
 5) 验证是否能够登录
  http://wp01.iic.unis.com:9081/wps/portal
管理LDAP URL
http://localhost:9080/IDSWebApp/IDSjsp/Login.jsp

------------------------------------------------------------
手工配置 LDAP 使用 DB2

1. 输入 管理员 DN/密码为 cn=root / password
2. 建立配置使用DB2数据库
 1) db2 create db ldapdb using codeset UTF-8 territory US
 2) 修改 LDAP目录\etc\ibmslapd.conf 文件
 3) 找到
 --------------------------------------------
 dn: cn=Directory,cn=RDBM Backends,cn=IBM Directory,cn=Schemas,cn=Configuration
 objectclass: top
        ..........
 ibm-slapdLanguageTagsEnabled: FALSE
 --------------------------------------------
 4) 把这段代码替换为
--------------------------------------------------------------------------
dn: cn=Directory, cn=RDBM Backends, cn=IBM Directory, cn=Schemas,cn=Configuration
cn: Directory
ibm-slapdBulkloadErrors: /var/bulkload.log
ibm-slapdCLIErrors: /var/db2cli.log
ibm-slapdDbConnections: 15
ibm-slapdDbInstance: DB2
ibm-slapdDbLocation: D:
ibm-slapdDbName: LDAPDB
ibm-slapdDbUserID: db2admin
ibm-slapdDbUserPW:>13a+3/XrZ94t7BsC7Oo2q3iVkZ//kfKBY1DXieU14hWE6v4Y3uryXvOx2ENx6BWVnHDImAe9XCKVLCLp9xC9lYTEz6Kol8hkQeWh88NN4C597YNMZzFMqrK0QME59MS2O+a61SMxC3C4fZlXtCmwgadzjY/dB7rr8h<
ibm-slapdLanguageTagsEnabled: FALSE
ibm-slapdPagedResAllowNonAdmin: TRUE
ibm-slapdPagedResLmt: 3
ibm-slapdPlugin: database /bin/libback-rdbm.dll rdbm_backend_init
ibm-slapdPlugin: replication /bin/libldaprepl.dll replInit
ibm-slapdPlugin: extendedop /bin/libback-rdbm.dll initUniqueAttr
ibm-slapdReadOnly: FALSE
ibm-slapdSortKeyLimit: 3
ibm-slapdSortSrchAllowNonAdmin: TRUE
ibm-slapdSuffix: cn=localhost
ibm-slapdSuffix: cn=pwdpolicy
ibm-slapdSuffix: cn=ibmpolicies
ibm-slapdSuffix: dc=iic,dc=ibm, dc=com
objectclass: top
objectclass: ibm-slapdConfigEntry
objectclass: ibm-slapdRdbmBackend
-------------------------------------------------------------------------

 5) 在控制台使用 设置ibmslapd.conf文件中的db2admin管理员口令
  ldapcfg -w db2admin
  ldapsearch -h db2ids -s base objectclass=*

 

－－－－－－－－－－－－－－－－－－－－－－－
 首先LDAP 必须有以下组和用户
 wpsadmins
 可选组：
  wpsContentAdministrators
  wpsDocReviewer
  wcmadmins
 
 
 
 WPSconfig.bat secure-portal-ldap -DWasPassword=wsadmin -DPortalAdminPwd=wsadmin -DLTPAPassword=wsadmin -DLDAPAdminPwd=root -DLDAPBindPassword=root -DWmmSystemIdPassword=root
 
 
 cd D:\IBMPrg\WebSphere\PortalServer\config
 d:
 WPSconfig.bat secure-portal-ldap -DWasPassword=wpsadmin -DPortalAdminPwd=wpsadmin -DLTPAPassword=wpsadmin -DLDAPAdminPwd=root -DLDAPBindPassword=root -DWmmSystemIdPassword=wpsadmin
 
 
 --------------------------
D:\Ibmprg\WebSphere\AppServer\logs\wsadmin.traceout

－－－－－－－－－－－－－－－－－－－－
rpm -ev ldap-server-5.2-1
rpm -ev ldap-webadmin-5.2-1
rpm -ev ldap-client-5.2-1
rpm -ev ldap-msg-xxx-5.2-1.i386.rpm (Where xxx is language dependent.)
rpm -ev ldap-html-xxx-5.2-1.i386.rpm (Where xxx is language dependent.)

建立LDAP 数据库
DB2 CREATE database LDAPDB using codeset UTF-8 territory us