IBM WebSphere V5.0 Security - CGISecurity

The LDAP realm is read from the WebSphere Import File and specifies theLDAP host name included in the WebSphere LDAP settings. This name mustalso coincide with those in the Host Name field specified in the LDAPconfiguration settings in the Directory Assistance database. When a port isspecified in the WebSphere LDAP configuration settings, it will be included inthe LTPA key export file in the following format:\:389.In our example the line was as follows:secsvr01.security.itso.ibm.com\:389.But when the LTPA keys are imported in Domino in the LDAP Realm Name,the backslash disappears:secsvr01.security.itso.ibm.com:389.Make sure you add a backslash (\) prior to the colon (:) and replace the valueabove with the following: secsvr01.security.itso.ibm.com\:389.The LTPA version denotes the version of the WebSphere LTPAimplementation. It is read from the LTPA importing file.12.Click the Save and Close button. The document will be saved. To check if thedocument is present in the Domino Directory, select Server -> WebConfigurations and expand the * - All Servers section. The new documentcreated should be displayed as Web SSO configuration for LtpaToken.13.You have now completed the configuration steps for Single Sign-On onDomino. Now we need to tell the server to use this configuration and enableSingle Sign-On in Domino server. Open the Server Document and select thePorts -> Internet Ports -> Web tab. Make sure that in the Server Document,the TCP/IP port status is enabled and the Anonymous Authentication optionis set to No, as shown below.Appendix C. Single Sign-On with Lotus Domino 501