IBM WebSphere V5.0 Security - CGISecurity

Figure B-25 New WebSphere administrator user in Active DirectoryConfiguring WebSphere to use Active DirectoryNow that we have created our WebSphere administrator ID, we can configureWebSphere to use Active Directory as its user registry. To configure ActiveDirectory as the user registry for WebSphere, follow these steps.1. Start the WebSphere Administrators console and log in. Select Security ->User Registries -> LDAP.2. Provide the following information on the LDAP configuration page:– Server User ID: enter your Active Directory user ID. We entered wasadmin(this is the same ID created in the Active Directory registry in the previoussection).– Server User Password: enter the password for your administrator ID.– Tyep: Active Directory– Port: 389– Base Distinguished Name: enter the location within Active Directory whereyour WebSphere users will be defined. For Active Directory, you must usethis field to define the starting point for WebSphere to use whenperforming searches. In our example, we entereddc=tivoli,dc=svo,dc=dfw,dc=ibm,dc=com, the base suffix for ourWindows domain tivoli.– Bind Distinguished Name: enter the DN of your WebSphere administratoruser. This field is required when using Active Directory as a user registry.By default, Active Directory does not allow anonymous users to accessAppendix B. LDAP configurations 489