LDAP Server

Enter the name of the LDAP server to which OpenSSO will be connected in the format host.domain:portnumber. If more than one entry is entered, an attempt is made to connect to the first host in the list. The next entry in the list is tried only if the attempt to connect to the current host fails.

Optionally, a server identifier and site identifier can be appended to the value of the LDAP Server attribute for redundancy. In this case, the format is host.domain:portnumber|serverID|siteID. These identifiers are assigned to the server when they are configured globally.

• serverID specifies a particular server as the primary LDAP server and others as secondary and tertiary (as defined) fallback servers. (If no number is specified, the LDAP server is primary.) The identifier is displayed in the OpenSSO console.

  1. Click the Configuration tab, click the Servers and Sites tab.

  2. Click the appropriate Server Name.

  3. Under the Advanced tab, see the value of the com.iplanet.am.lbcookie.value property — for example, 01.

  4. Click the Configuration tab, click the Servers and Sites tab.

• siteID is not currently displayed in the OpenSSO console. It is a two digit number generated internally by OpenSSO — for example, 02. To find this value, use an LDAP browser to find ou=accesspoint,ou=site_name,ou=com-sun-identity sites,ou=default,ou=GlobalConfig,ou=iPlanetAMPlatformService,ou=services,root-suffix. Under this DN, see sunkeyvalue:primary-siteid=site-id for the site identifier.

This configuration should not be changed for the OpenSSO embedded data store as it may cause inconsistent behavior.