test

Sun Java System Federation Manager 7.0 User's Guide

ProcedureTo Set LDAP as the Default Authentication Module for an Organization

  1. Use the following template, modify ROOT SUFFIX to reflect that of the organization.


    <?xml version="1.0" encoding="ISO-8859-1"?>
<!--
    Copyright (c) 2005 Sun Microsystems, Inc. All rights reserved
    Use is subject to license terms.
-->

<!DOCTYPE Requests
    PUBLIC "-//iPlanet//Sun Java System Access Manager 2005Q4 Admin CLI DTD//EN"
    "jar://com/iplanet/am/admin/cli/amAdmin.dtd"

<!--  CREATE REQUESTS -->

<Requests>
<OrganizationRequests DN="ROOT SUFFIX">
   <ModifyServiceTemplate serviceName="iPlanetAMAuthService" 
    schemaType="Organization">
     <AttributeValuePair>
       <Attribute name="iplanet-am-auth-org-config" />
         <Value>&lt;AttributeValuePair&gt;&lt;Value&gt;com.sun.identity.
          authentication.modules.ldap.LDAP REQUIRED&lt;/Value&gt;&lt;
          /AttributeValuePair&gt;</Value>
     </AttributeValuePair>
   </ModifyServiceTemplate>
</OrganizationRequests>
</Requests>

  2. Modify the following template to change the administrator's default authentication module to LDAP.


    <?xml version="1.0" encoding="ISO-8859-1"?>
<!--
    Copyright (c) 2005 Sun Microsystems, Inc. All rights reserved
    Use is subject to license terms.
-->

<!DOCTYPE Requests
    PUBLIC "-//iPlanet//Sun Java System Access Manager 2005Q4 Admin CLI DTD//EN"    
    "jar://com/iplanet/am/admin/cli/amAdmin.dtd">

<!--  CREATE REQUESTS -->

<Requests>
<OrganizationRequests DN="ROOT SUFFIX">
   <ModifyServiceTemplate serviceName="iPlanetAMAuthService"
    schemaType="Organization">
     <AttributeValuePair>
       <Attribute name="iplanet-am-auth-admin-auth-module" />
         <Value>
           &lt;AttributeValuePair&gt;&lt;Value&gt;com.sun.identity.
           authentication.modules.ldap.LDAP REQUIRED&lt;/Value&gt;&lt;
           /AttributeValuePair&gt;
         </Value>
     </AttributeValuePair>
   </ModifyServiceTemplate>
</OrganizationRequests>
</Requests>

  3. Load the modified XML files using amadmin and the format /FederationManager-base/fm/bin/amadmin —u amadmin —w password —i war—staging—directory -t name-of-XML-file.