I have Domino 6 configured as my LDAP directory for WebSphere V5. Individual users can log in fine and are authenticated as expected, however groups don’t seem to be recognised whenever I try and sign in as an individual who is listed in the group.
This led me to try and test my LDAP server using the remote browsing tool (ldap://myserver) and this does not find antone listed in my directory!!!
Am I missing a trick or is this a bug???
Many thanks in advance.
Chris Kyte.
Subject: Configuring LDAP in R6
Is Directory Assistance set up, if you need it?Did you reboot after adding groups?
Who can “Administer the Server from a browser” in the Security tab.
Subject: RE: Configuring LDAP in R6
Joe,
Thanks for your response, since then I think I have made a little progress. I can now externally browse my LDAP directory for both user and groups which makes me think that Domino is not the problem. I am now thinking it’s a problem with the LDAP filters that Websphere is using to browse the groups so I am concentrating my search around the Websphere end. However, if you or anyone else have any pearls of inspiration then they would be much appreciated!!!
Thanks for your time,
Chris Kyte.
Subject: RE: Configuring LDAP in R6
Thanks for your response, since then I think I have made a little progress. I can now externally browse my LDAP directory for both user and groups which makes me think that Domino is not the problem. I am now thinking it’s a problem with the LDAP filters that Websphere is using to browse the groups so I am concentrating my search around the Websphere end. However, if you or anyone else have any pearls of inspiration then they would be much appreciated!!!
If you’re up for examining filters, put LDAPDEBUG=1 in your Notes.ini and you’ll see the requests the Domino LDAP server is processing.
Subject: RE: Configuring LDAP in R6
Basically there is a required LDAP attribute that seems to be missing from the Domino LDAP schema so you need to manually added it to the Schema.nsf!!!
Try this IBM doc…
http://publib.boulder.ibm.com/pvc/wp/502/ent/en/InfoCenter/wpf/cfg_domino.html
The required section is :
LDAP configuration settings for Domino 6.0.x and 6.5.
Subject: RE: Configuring LDAP in R6
Basically there is a required LDAP attribute that seems to be missing from the Domino LDAP schema so you need to manually added it to the Schema.nsf!!!
Try this IBM doc…
http://publib.boulder.ibm.com/pvc/wp/502/ent/en/InfoCenter/wpf/cfg_domino.html
The required section is :
LDAP configuration settings for Domino 6.0.x and 6.5.
If you are referring to “Step 1: Add the HTTP-HostName attribute to the schema”, this was a bug that was fixed in 6.04. Here’s the SPR # for your reference.
JTHN5TLUQ7 - HTTP_HostName and 2 other attribute types are missing from LDAP schema