LDAP Bind

 4 Replies
 0 Subscribed to this topic
 16 Subscribed to this forum
Sort:
Author
Messages
Mick
Veteran Member Send Private Message
Posts: 82
Veteran Member
Hello,
Looking for some direction on how to perfom an LDAP Bind.
Pros
Cons

How long does this process take?

We are AIX 6.1 in test
9.0.1.8, MSP6
ADAM container.

Any help would be greatly appreciated.
Thank you


Kwane McNeal
Veteran Member Send Private Message
Posts: 479
Veteran Member
Mick,
It's pretty straight forward to perform.

Steps in LSF:
0) Use ssoconfig to backup all the services (just as a protective step)
1) run ldapbind, follow the prompts

If you have all of the information for the authentication repository, shouldn't take more than 15 minutes from start to finish.

The only con I can think of for a non-production environment is if you need to impersonate (aka login as) a user, and you bound to a production authentication source (eg: Production AD forest), you'll have to find some other way to do that.
Also make sure you have the meta accounts (eg: lawson, pfadmin, etc) created in your authentication before you bind, or you'll lose the ability to login as those accounts until you do.

Kwane
505-433-7744
Mick
Veteran Member Send Private Message
Posts: 82
Veteran Member
Thank you for the response.
So you said 'Also make sure you have the meta accounts (eg: lawson, pfadmin, etc) created in your authentication before you bind, or you'll lose the ability to login as those accounts until you do.'
Where do I ensure those are there?
Mick
Veteran Member Send Private Message
Posts: 82
Veteran Member
ok so you said:
Also make sure you have the meta accounts (eg: lawson, pfadmin, etc) created in your authentication before you bind, or you'll lose the ability to login as those accounts until you do.

how can I or where do I ensure the lawson pfadmin, are in the authentication ?
Thanks again...
Kwane McNeal
Veteran Member Send Private Message
Posts: 479
Veteran Member
check in the authentication source...

so if you're binding to AD, make sure you have an account in it for 'lawson'. Likewise for NDS, OID, etc...