LDAP Setup and Configuration for OnDemand on Windows

[sreddy]

I am fairly new the this platform and will try to keep it simple.

I am trying to setup Active Directory Authentication on Content Manager On Demand 9 installed on Windows. And then add an existing user to the system and setup permissions on an application. And then access OnDemand as that user.

The instructions at this link were helpful in understanding and help me enable the LDAP on the system.
http://www-01.ibm.com/support/docview.wss?rs=0&uid=swg21366645

When I open the administrative console, I do not see the option to add (and validate) active directory user. I only see the option to create a user.

1) How to add active directory user to the system.
2) Can we leverage active directory groups
3) The above link talks about trace logs, which helps troubleshoot the LDAP connection. I was able to locate that using the instructions from http://www-01.ibm.com/support/docview.wss?rs=0&uid=swg21330810. But when I open the file, it is not readable. Am I missing something.
4) Any additional documentation (for windows) would be helpful.

[SunnyManeeth]

Hello sreddy,

    Am also looking for the same configuration, can you help me on this if you have worked on it.

Thanks
Sunny

[Mike]

1) How to add active directory user to the system.
I'm guessing there are multiple ways to do it, but I just put the Active directory username as the OnDemand username. Then I configure the BIND attribute to bind based on the username.
2) Can we leverage active directory groups
I haven't figured out how to do this if there is, we've just put a policy in place where user's request access and we add their usernames into OD.
3) The above link talks about trace logs, which helps troubleshoot the LDAP connection. I was able to locate that using the instructions from http://www-01.ibm.com/support/docview.wss?rs=0&uid=swg21330810. But when I open the file, it is not readable. Am I missing something.
I don't know why your trace.settings file would be unreadable. It's just a text file, so you should be able to open it with a text editor (I just opened one on a Windows server to be sure). It may try to open as a DB2 object, but just open it with Notepad or something.
4) Any additional documentation (for windows) would be helpful.
All the documentation I found for it was not helpful, I just had to test and test until I got the settings correct.

Hope that helps a bit.