TSAM Plus LDAP Configuration File

The Oracle TSAM Plus LDAP configuration file is similar to the Oracle Tuxedo GAUTHSVR configuration file.

LDAP Configuration File

Although the default values for the LDAP configuration file are usually sufficient, you can choose to configure it with different names. Therefore, you should be aware of the following requirements for the LDAP configuration file:

•	The LDAP configuration file is a plain text file.

•	Keywords are case-sensitive, but their order does not matter. The keyword format is keyword=value.

•	Blank lines or lines starting with a # sign are treated as comments, and are ignored.

•	The upper limit of a line is 255 characters. If a line exceeds this upper limit, it is truncated.

•	The Principal must have privileges to access the LDAP database (usually the LDAP administrator).

Table 3‑1 lists the LDAP configuration file keywords.

 

Table 3‑1 LDAP Configuration File Keywords

Configuration Keyword	Value Type	Description
Host	string	The host name or IP address of the LDAP server.The default value is localhost.
Port	numeric	The port number on which the LDAP server is listening.The default value is 389.
Principal		The Distinguished Name (DN) of the LDAP user that is used to connect to the LDAP server.
Credential		The credential (generally a password) used to authenticate the LDAP user that is defined in the Principal attribute.
UserObjectClass	string	The LDAP object class that stores users. The default is person.
UserBaseDN	string	The base distinguished name (DN) of the tree in the LDAP directory that contains users. The default is ou=people, o=example.com
UserFromNameFilter	string	An LDAP search filter for finding a user given the name of the user. The default is (&(cn=%u)(objectclass=person))
UserUIDAttrName	string	The attribute name of an LDAP user object that specifies the UID of the user or the UID and GID of the user in a fixed format. The default value is userid.
UserGroupAttrNames	string	The attribute names of an LDAP user object that specify the groups the user belongs to. This attribute can contain three types of values: GID, group CN and group DN. One type of value for each configuration. More names are separated by comma. The default value is usergroups.
RetrieveUIDAndGID	boolean	It should always be "true"
UIDAttrValueType	string	It should always be "UIDAndGID"
UseZOSRACF	boolean	Specifies whether the LDAP server is z/OS RACF LDAP server. The default is false.
SSLEnabled	boolean	Specifies that SSL is used to connect to the LDAP server
ConnectTimeout	numeric	The maximum number of seconds to wait for the LDAP connection to be established. If set to 0, there is no maximum time limit. The default value is 0.

Weblogic Embedded LDAP Server LDAP Configuration File Example

Listing 3‑1 shows a Weblogic embedded LDAP server LDAP configuration file example.

Listing 3‑1 Weblogic Embedded LDAP Server LDAP Configuration File Example

Host = localhost
Port = 7001
Principal = cn=Admin
Credential = aaa
UserObjectClass = person
UserBaseDN = ou=people,ou=myrealm,dc=base_domain
UserFromNameFilter = (&(uid=%u)(objectclass=person))
UserUIDAttrName = description
UserGroupAttrNames=wlsMemberOf
RetrieveUIDAndGID = true
UIDAttrValueType = UIDAndGID
UseZOSRACF=false
SSLEnabled=false
ConnectTimeout=5