HP J4813A User Manual page 120

Using Identity Driven Manager
Using the User Import Wizard
3-66
Editing IDM Configuration for LDAP Import
The IDM server includes several configuration files that contain information
used to import User information from LDAP files. The default configuration
settings will work if you are using MS Active Directory as the LDAP Server
directory. If you are using any other LDAP directory source (for example
Novell Edirectory) you will need to modify the
~Program Files\Hewlett-Packard\PNM\server\config\IDMImportServerComp.scp
Following is an example of the
Comments are indicated by "//".
LDAP_SERVER_CONFIG {
//Port where LDAP server receives bind request.
PORT=389
SSL_PORT=636
BATCH_SIZE=50
COUNT_LIMIT=0
SASL_CONFIGURATION {
// This section is for SSL configuration: Digest MD5, Kerberos V5 and External.
QOP=auth-conf,auth-int,auth
// Quality of protection. Valid values are 1 and more of "auth-conf", auth-
int", "auth" separated by ",".
ENCRYPTION_STRENGTH=high,medium,low
// Strength of encryption. Valid values are 1 and more of "high", "medium",
"low" separated by ",".
MUTUAL_AUTHENTICATION=true
// If both LDAP server and IDM server wants to authenticate each other.
}
KERBEROS_JAAS_CONFIG {
// This section is for Kerberos authentication method.
KERBEROS_AUTH_MODULE=IDMKerberos
// Kerberos authentication module name. If this entry is changed, you must also
change the module name in idm_kerberos_jass.conf file.
KERBEROS_JAAS_CONFIG_FILE=config/
idm_kerberos_jaas.conf
configuration.
}
}
(Example continued on next page)
DMImportServerComp.scp file
// Port where LDAP server receives SSL bind requests.
// Internal to IDM.
// Internal to IDM.
// configuration file for JAAS Kerberos
LDAP Directory
settings in:
for reference.