IBM WebSphere V5.0 Security - CGISecurity

Configuring WebSphere to use exact DN mapping
The following steps will show you how to configure WebSphere Application
Server to use Exact Distinguished Name (DN) mapping.
1. Log in to the WebSphere Administration Console.
2. Select Security -> User Registries -> LDAP.
3. Select Advanced LDAP Settings on the LDAP page.
4. Set the Certificate Map Mode to EXACT_DN in the Configuration panel.
5. Make sure that the Certificate Filter field is empty.
6. Click OK and save the configuration for WebSphere.
7. Stop and restart the server to make the changes available.
For testing, use the same steps described previously with the certificate filter
option in “Testing the client side certificate” on page 296.
You can follow the operation of the authentication if you have tracing enabled for
security. You should be able to find in your trace.log file something similar to the
following example.
Example 10-6 trace.log
...
[10/14/02 19:39:38:318 EDT] 7a376025 > UOW=
source=com.ibm.ws.security.registry.ldap.LdapRegistryImpl org=IBM
prod=WebSphere component=Application Server
mapCertificate
[10/14/02 19:39:38:318 EDT] 7a376025 > UOW=
source=com.ibm.ws.security.registry.ldap.LdapRegistryImpl org=IBM
prod=WebSphere component=Application Server
search
[10/14/02 19:39:38:328 EDT] 7a376025 d UOW=
source=com.ibm.ws.security.registry.ldap.LdapRegistryImpl org=IBM
prod=WebSphere component=Application Server
DN: CN=manager01, O=itso
...
[10/14/02 19:39:38:348 EDT] 7a376025 d UOW=
source=com.ibm.ws.security.registry.ldap.LdapRegistryImpl org=IBM
prod=WebSphere component=Application Server
securityName = parm1=CN=manager01, O=itso
[10/14/02 19:39:38:348 EDT] 7a376025 d UOW=
source=com.ibm.ws.security.registry.ldap.LdapRegistryImpl org=IBM
prod=WebSphere component=Application Server
attributes = parm1={uid=uid: manager01, objectclass=objectclass:
inetOrgPerson, ePerson, organizationalPerson, person, top, cn=cn: Joe,
manager01}
300 IBM WebSphere V5.0 Security Handbook