Deploying IBM Workplace Services Express on the IBM eServer iSeries Server

340 Deploying IBM Workplace Services Express on the IBM Eserver iSeries Server

Recommended object classes and attributes

Each supported LDAP server can base their implementation on different object classes as

listed in Table A-1.

Table A-1 Supported LDAP servers and their recommended property values

For each directory server’s user LDAPUserObjectClass, as well as, each group’s

LDAPGroupObjectClass, Workplace Services Express requires unique identifiers, which are

listed in Table A-2.

Table A-2 Supported LDAP servers and their unique identifier attributes

In addition, each user LDAPUserObjectClass requires the following attributes:

򐂰 uid: User ID or short name

򐂰 cn: Common name

򐂰 givenName: Given name

򐂰 sn: Sir name

򐂰 Mail: Local e-mail address

Property IBM Directory Server Domino

LDAPSuffix dc=yourco,dc=com

1

1. The Domino LDAP directory does not have an LDAP suffix. In the iSeries Create IBM Work-

place wizard, you can select your organization (for example, o=itso) or *ROOT as your users

container.

LDAPUserPrefix uid cn

LDAPUserSuffix cn=users o=yourco

LDAPGroupPrefix cn cn

LDAPGroupSuffix cn=groups

2

2. In Domino, groups are not created under an LDAP suffix. In the iSeries Create IBM Work-

place wizard, select *ROOT as the LDAP suffix.

LDAPUserObjectClass inetOrgPerson dominoPerson

LDAPGroupObjectClass groupOfUniqueNames dominoGroup

LDAPGroupMember uniqueMember member

Object class IBM Directory Server Domino

LDAPUserObjectClass inetOrgPerson dominoPerson

LDAPGroupObjectClass groupOfUniqueNames dominoGroup

Unique identifier ibm-entryUuid dominoUNID

Important: Do not attempt to configure a Workplace Services Express instance without

the paired attribute=value unique identifier attribute for your respective LDAP server.

Otherwise, the enable-security-ldap task fails when you configure a new Workplace

Service Express server or configure security on an existing one.