22.12.2012 Views

Front cover - IBM Redbooks

Front cover - IBM Redbooks

Front cover - IBM Redbooks

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

CN=David Hinkle<br />

EmpID=1234<br />

Dept=ISSL<br />

CN=David Hinkle<br />

EmpID=1234<br />

Phone=555-1234<br />

UID=DH9876<br />

Mail=dave@ibm.com<br />

Figure 8-14 Combination architecture of metadirectory with master LDAP repository directory<br />

344 Lotus Security Handbook<br />

database 1 database 3<br />

database 2<br />

metadirectory<br />

CN=David Hinkle<br />

EmpID=1234<br />

Dept=ISSL<br />

Mail=dave@ibm.com<br />

UID=DH9876<br />

Phone=555-1234<br />

Notesname=CN=David Hinkle,OU=Phoenix,O=<strong>IBM</strong><br />

CN=David Hinkle<br />

EmpID=1234<br />

Dept=LPS ISSL<br />

Mail=dave@ibm.com<br />

Notesname=David Hinkle/Phoenix/<strong>IBM</strong><br />

master LDAP directory<br />

In this example, our master LDAP directory contains all the aggregated<br />

attributes. It also illustrates how directory synchronization has been used<br />

between database 3 and our master LDAP directory. In this case, database 3<br />

represents a Domino directory, and in order to use the LDAP directory for<br />

Domino access control, we have synchronized the Notes hierarchical name into<br />

the master LDAP directory. We demonstrate a practical application of this type of<br />

name synchronization for performing Domino ACL name mapping when an<br />

LDAP directory is used for Web user authentication in . Also, it is a good time for us to point out that the synchronization in<br />

Figure 8-14 could be accomplished using three assembly lines configured in <strong>IBM</strong><br />

Tivoli Directory Integrator, and the master LDAP directory could be implemented<br />

with <strong>IBM</strong> Directory Server.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!