MLDAP ESM Security Manager

You will also need to configure a Security Manager using the MLDAP ESM module (mldap_esm).

Here you will need to set a number of configuration options, since the defaults are designed for the simple LDAP configuration using ADAM and the Micro Focus user class:

• Set Connection Path to the IP address and port of the LDAP server (eg ad-host:389)
• Set Authorized ID to the DN of a user with appropriate permissions for the LDAP repository (eg CN=Administrator,CN=users,DC=somecorp,DC=com ). This user needs at least read access to the containers for user definitions, MSS user groups, and MSS resource access rules, and their contents. If you want to use the MFDS administration console to change user groups and resource access rules, this ID will also need update access to those portions of the repository.
• Set Password to the password for the user specified in Authorized ID.
• In Configuration Information, you will need to set a number of LDAP parameters:

  [LDAP]
  base=DN-suffix
  user class=user-class
  user container=user-container
  group container=group-container
  resource container=resource-container

  DN-suffix	The common part of the DN for your user container, MSS group container, and MSS resource rules container. For example, if your users are in CN=users,DC=somecorp,DC=com, and your MSS containers are in CN=MF,DC=somecorp,DC=com, you could set base to DC=somecorp,DC=com.
  user-class	The LDAP object class used for your users; in this example, it would be user.
  user-container	The DN of the container for user objects, without the "base" suffix, eg CN=users.
  group-container	The DN of the container for MSS user group objects, without the "base" suffix, eg CN=Enterprise Server Groups,CN=MF.
  resource-container	The DN of the container for resource access class containers (which in turn hold resource access definition objects), without the "base" suffix, eg CN=Enterprise Server Resources,CN=MF.

Note that we have named this Security Manager "Active Directory", to indicate that it is our general AD-based security manager.