LDAP Bind

 4 Replies
 0 Subscribed to this topic
 15 Subscribed to this forum
Sort:
Author
Messages
Mick
Veteran Member
Posts: 82
Veteran Member
    Hello,
    Looking for some direction on how to perfom an LDAP Bind.
    Pros
    Cons

    How long does this process take?

    We are AIX 6.1 in test
    9.0.1.8, MSP6
    ADAM container.

    Any help would be greatly appreciated.
    Thank you


    Kwane McNeal
    Veteran Member
    Posts: 479
    Veteran Member
      Mick,
      It's pretty straight forward to perform.

      Steps in LSF:
      0) Use ssoconfig to backup all the services (just as a protective step)
      1) run ldapbind, follow the prompts

      If you have all of the information for the authentication repository, shouldn't take more than 15 minutes from start to finish.

      The only con I can think of for a non-production environment is if you need to impersonate (aka login as) a user, and you bound to a production authentication source (eg: Production AD forest), you'll have to find some other way to do that.
      Also make sure you have the meta accounts (eg: lawson, pfadmin, etc) created in your authentication before you bind, or you'll lose the ability to login as those accounts until you do.

      Kwane
      505-433-7744
      Mick
      Veteran Member
      Posts: 82
      Veteran Member
        Thank you for the response.
        So you said 'Also make sure you have the meta accounts (eg: lawson, pfadmin, etc) created in your authentication before you bind, or you'll lose the ability to login as those accounts until you do.'
        Where do I ensure those are there?
        Mick
        Veteran Member
        Posts: 82
        Veteran Member
          ok so you said:
          Also make sure you have the meta accounts (eg: lawson, pfadmin, etc) created in your authentication before you bind, or you'll lose the ability to login as those accounts until you do.

          how can I or where do I ensure the lawson pfadmin, are in the authentication ?
          Thanks again...
          Kwane McNeal
          Veteran Member
          Posts: 479
          Veteran Member
            check in the authentication source...

            so if you're binding to AD, make sure you have an account in it for 'lawson'. Likewise for NDS, OID, etc...