View
8
Download
0
Category
Preview:
Citation preview
IBM Tivoli Identity Manager
N
4.5
GI11-2741-00
IBM Tivoli Identity Manager
N
4.5
GI11-2741-00
G
bΩTΣΣúºeA²\¬ 35 yNzñΩTC
@q]2003 9 δ
úDbsqñtíAhqA≤ Tivoli Identity Manager 4.5.0 ]ús 5724–C34Hß≥MqC
© Copyright International Business Machines Corporation 2003. All rights reserved.
²
eÑ . . . . . . . . . . . . . . . . vA∩H . . . . . . . . . . . . . . vy . . . . . . . . . . . . . . . . . v
Tivoli Identity Manager °Aw . . . . . . vúy . . . . . . . . . . . . . vi÷y . . . . . . . . . . . . . . viuWsy . . . . . . . . . . . . . vii
≤Uuπ . . . . . . . . . . . . . . . viipnΘΣñ . . . . . . . . . . . . viiD . . . . . . . . . . . . . . vii
1 ÷≤ . . . . . . . . . . 1Nq . . . . . . . . . . . 1 Adobe Acrobat Reader 4.05 ≤¬ 1
2 tD . . . . . . . . . . . 3WebSphere D . . . . . . . . . . . 3
Tivoli Identity Manager] WebSphereUNIX @tMwΘDU¡ . . . . . . . 3Tivoli Identity Manager] WebSphereWindows @tMwΘDU¡ . . . . . . 4Tivoli Identity Manager °AΩw]WebSphere . . . . . . . . . . . . . 4Tivoli Identity Manager °A²°A]WebSphere . . . . . . . . . . . . . 5WebSphere M HTTP °A Tivoli IdentityManager °AnΘ . . . . . . . . . 5Σ Web s² . . . . . . . . . . . 6
WebLogic D . . . . . . . . . . . 7UNIX Tivoli Identity Manager]WebLogic@tMwΘDU¡ . . . . . 7Windows Tivoli Identity Manager]WebLogic@tMwΘDU¡ . . . . . 7
Tivoli Identity Manager °AΩw]WebLogic . . . . . . . . . . . . . . 8Tivoli Identity Manager °A²°A]WebLogic . . . . . . . . . . . . . . 8WebLogic °A Tivoli Identity Manager °AnΘ . . . . . . . . . . . . . . . 8Σ Web s² . . . . . . . . . . . 9
3 nΘ¡εBDMµMΦ 11nΘ¡ε . . . . . . . . . . . . . . . 11WebLogic DMµMΦ . . . . . . . . 12 Tivoli Identity Manager WebSphere ⌠¡ε 12wDMµMΦ . . . . . . . . . . 13ΩDMµMΦ . . . . . . . . . . 15²°ADMµMΦ . . . . . . . . 15WebSphere MQ DMµMΦ . . . . . . 16NzíDMµMΦ . . . . . . . . 17ΣLDMµMΦ . . . . . . . . . . 18ContainerSearch JavaScript Wµ . . . . . . 19
4 σ≤N . . . . . . . . 21Policy and Organization Administration Guide PuWí±AeΩTs . . . . . . . . . 21
5 ΩN . . . . . . . . 23
6 wD . . . . . . . . . . 25
². N. . . . . . . . . . . . 35 . . . . . . . . . . . . . . . . . 36
. . . . . . . . . . . . . . . . 37
© Copyright IBM Corp. 2003 iii
iv IBM Tivoli Identity Manager: N
eÑ
Tivoli Identity Manager NúsΩTApDMµMΦAH
íiC
A∩H
ΓUA∩HAObv⌠qútWwB@znΘtMw
zC¬πtMw zºCA¬]πUCU
zºG
v ²°A
v Ωw°A
v WebSphere® Embedded Messaging Σ
v WebSphere Application Server WebLogic
v IBM HTTP Server
y
\¬ Tivoli Identity Manager wBy÷yíA Pyi
α∩z±CMwznyºßA\ⁿAbuWsyq
yC
Tivoli Identity Manager °Aw
UO Tivoli Identity Manager °AwñyG
v Tivoli Identity Manager uWU
w∩ Tivoli Identity Manager z@AúπXíuWíDDC
v UNIX Windows Tivoli Identity Manager °AwΓU] WebSphere
WebLogicCAXz⌠C
ú Tivoli Identity Manager wΩTC
v Tivoli Identity Manager Policy and Organization Administration Guide
ú Tivoli Identity Manager z@DDC
v Tivoli Identity Manager °AtmΓU
úµ@°AMO Tivoli Identity Manager tmtmΩTC
v Tivoli Identity Manager @δΓU
ú Tivoli Identity Manager ΩTC
v Tivoli Identity Manager N
ú Tivoli Identity Manager nwΘDAHΣLíBíMΣLΣ
ΩTC
v Tivoli Identity Manager Troubleshooting Guide
ú Tivoli Identity Manager úΣLMDΩTC
© Copyright IBM Corp. 2003 v
úy
pGnΩTAF Tivoli Identity Manager úCziHqU
CmoyG
v WebSphere Application Server
http://www.ibm.com/software/webservers/appserv/support.html
: Uo≈u⌡MµANíwMtm WebSphere Application ServerA
Bí÷úBw O@C÷Mo≈MµbIΩOsA²
biαwgLFCpßNϕAΩΩTMµC
– IBM WebSphere Application Server V5.0 System Management and ConfigurationA
IBM ⌡
– IBM WebSphere Application Server V5.0 SecurityAIBM ⌡
v WebLogic Application Server
http://e-docs.bea.com/
v Ωw°A
– IBM DB2
http://www.ibm.com/software/data/db2/udb/support.html
http://www.ibm.com/software/data/db2
– Oracle
http://technet.oracle.com/documentation/content.html
– Microsoft SQL Server 2000
http://msdn.microsoft.com/library/
v ²°Aí
– IBM Directory Server
http://www.ibm.com/software/network/directory
– Sun ONE Directory Server
http://www.ibm.com/software/network/directory
v WebSphere Embedded Messaging Σ] IBM MQSeries
http://www.ibm.com/software/ts/mqseries
v Web Proxy °A
– IBM HTTP Server
http://www.ibm.com/software/webservers/httpservers/library.html
– Microsoft IIS HTTP Server
http://www.microsoft.com/technet/prodtechnol/iis/default.asp
– Apache HTTP Server
http://httpd.apache.org/docs-project
÷y
ziHbUCyΣ Tivoli Identity Manager °A÷ΩTG
v Tivoli Software Library úFU Tivoli yApABΩu@ϕBdB
⌡MqHτCziHbUz⌠Σ Tivoli Software LibraryG
vi IBM Tivoli Identity Manager: N
http://www.ibm.com/software/tivoli/library/
v Tivoli Software Glossary t\h Tivoli nΘ÷NywqCziHb Tivoli
Software Library ⌠¬ΓΣ Glossary Σ Tivoli Software GlossaryAúL
uσC
http://www.ibm.com/software/tivoli/library/
uWsy
ziHQuWΦíb Tivoli Software Library Σú IBM yAiΓíσ
≤µí (PDF) WσrOyÑ (HTML) µíAΓµíπC
http://www.ibm.com/software/tivoli/library
pGnbwñMΣúyAbuwv¬ΓΣ÷@UúΓUCMß
buTivoli nΘΩTñvWMΣB÷@UúWC
úy]ANBwΓUBΓUBzΓUHoΓ
UC
: FTOαCL PDF yAb Adobe Acrobat uCLv°íñA∩
X∩]zun÷@U → CLANα≈o∩C
≤Uuπ
úσ≤tUCSAiHUz≤UuπG
v σ≤ HTML M PDF ΓµíAi²Me¬nΘC
v σ≤ñvúNσrAi²°FveC
pnΘΣñ
bV IBM Tivoli nΘΣñDºeA²yX IBM Tivoli nΘΣñ⌠
A⌠pUG
http://www.ibm.com/software/sysmgmt/products/support/
pGznBUAQ IBM Software Support Guide]⌠pUñyz
ΦkApnΘΣñC
http://techsupport.services.ibm.com/guides/handbook.html
ΓUNúUCΩTG
v ⁿΣn²MΩµnD
v qX]zbΩaw
v bpßΣñºeA¼ΩTMµ
D
ΓUNw∩SϕⁿJM@AH@twⁿOM⌠AhD
C
UOrΘDG
eÑ vii
Θ ΘrNϕziH∩°í÷sBµAHXbΓU
ⁿO]deñⁿOhúC
ÑerΘ ÑerΘ¼σrANϕeBWⁿOΘXC
Θ ΘrNϕ⌠wqMApG
v ⌠W
v W
v W
v sW
v t
v ⌠
% ± (%) Nϕ C Shell eú]XbΓUdñCz
t C Shell eúiαú@C
# ½ (#) Nϕ²HW]¬svñΓnJº[
eúC
viii IBM Tivoli Identity Manager: N
1 ÷≤
w∩ IBM® Tivoli® Identity Manager NCo≈uNvσ≤
t Tivoli Identity Manager sNΩTC
: Nu²ÑAyñΩT¬≤úΣLyuWíñΩTC
Nq
UCqϕµCσ≤ oGΘºß∩σ≤ ≤C
ϕ 1. q
Θ DD
2003 9 δ oµ 1
Adobe Acrobat Reader 4.05 ≤¬
DGA Adobe Acrobat Reader 4.05 ≤¬ °s Tivoli
Identity Manager σ≤CziqUC⌠o Adobe Acrobat ReaderG
http://www.adobe.com/products/acrobat/readstep2.html
© Copyright IBM Corp. 2003 1
2 IBM Tivoli Identity Manager: N
2 tD
UCtmí Tivoli Identity Manager nwΘDC
: oDOylIΩCXDCΩTiα≤sAPzßΣñNϕpAHoo≤sC
WebSphere D
íπnwΘDAα² Tivoli Identity Manager °A WebSphere
Application ServerC
Tivoli Identity Manager] WebSphere UNIX @tMwΘD
U¡
UϕNⁿXw UNIX @tBíHwΘDU¡Coú]tΣ
L⌡µDCpG⌡µ°A¼úu@ApAbP@íqúW
í°AMΩw°AANboíqúWtBwΘΩ]W[
RAMC
ϕ 2. Tivoli Identity Manager @tMwΘDU¡
@t í OΘU¡BiíHΣLwΘD
AIX 5.1¹ pGOft WebSphere Application Server
Tivoli Identity Manager °AAM
5100–03 @M≤M APAR IY36884 ≤s
C
v RAMG1 GB
v BzGt 375 MHz ≤
IBM 604e Bz
v i íG/tmp π 1 GB i
íCpG Tivoli Identity Manager n
w
WebSphere Application ServerAWAS_HOME
Nπ 800 MB i íA
/var hπ 300 MB i íC
tm 500 MB /itim45C
: wºeA²o IBM DB2 ]wC
Solaris 8² 2003 3 δºßoµíO v RAMG1 GB
v BzGt 440 MHz ≤
Solaris Sparc Bz
v i íG/tmp π 1 GB i
íCpG Tivoli Identity Manager n
w
WebSphere Application ServerAWAS_HOME
Nπ 800 MB i íA
/var hπ 300 MB i íC
tm 500 MB /itim45C
: wºeA²o IBM DB2 ]wC
© Copyright IBM Corp. 2003 3
ϕ 2. Tivoli Identity Manager @tMwΘDU¡ (≥)
@t í OΘU¡BiíHΣLwΘD
1. ÷≤s AIX ΩTA\ http://techsupport.services.ibm.com/server/mlfixes/43/10/01to10.htmlC
2. SolarisGúFΣLí]wºATivoli Identity Manager nDb /etc/system ñπUC
MxG
v set shmsys:shminfo_shmmax = 4294967295
v set shmsys:shminfo_shmseg = 1024
v set shmsys:shminfo_shmmni = 1024
v set semsys:seminfo_semaem = 16384
v set semsys:seminfo_semmni = 1024
v set semsys:seminfo_semmap = 1026
v set semsys:seminfo_semmns = 16384
v set msgsys:msginfo_msgmap = 1026
v set semsys:seminfo_semopm = 100
v set semsys:seminfo_semmnu = 2048
v set semsys:seminfo_semume = 256
v set msgsys:msginfo_msgmax = 65535
v set rlim_fd_cur=1024
Tivoli Identity Manager] WebSphere Windows @tMwΘ
DU¡
UϕNⁿXw Windows @tBíHwΘDU¡Coú
]tΣL⌡µDCpG⌡µ°A¼úu@ApAbP@íqúW
í°AMΩw°AANboíqúWAtΣLwΘΩ
]W[ RAMC
ϕ 3. Tivoli Identity Manager @tMwΘDU¡
@t í OΘU¡BiíHΣLwΘD
Windows 2000 Advanced
Server
Service Pack 3 ≤s v RAMG1 GB OΘ
v BzGt 1 GHz ≤ Intel
Pentium
v i íGtemp ²π 1.5
GB i íCAUz
ú 1.1 GB i íG
– Tivoli Identity Manager °A 500 MB
\itim45 ²
– WebSphere Application Server 600 MB
Tivoli Identity Manager °AΩw] WebSphereUϕNCX Tivoli Identity Manager °AiΩw] WebSphereG
4 IBM Tivoli Identity Manager: N
ϕ 4. Tivoli Identity Manager °AiΩw] WebSphere
Ωw MM≤
í
AIX 5.1 Solaris 8 W i n d o w s 2 0 0 0Advanced Server
IBM DB2 Universal Database °
°A¹ M IBM DB2 ⌡
µß
v 8.1]tM≤ 2
v 7.2]tM≤ 9
U U U
Oracle 8.1.7 U U U
Microsoft SQL Server SQL Server 2000 U
:
1. IBM DB2 nDπUCi íG
v wAbz Tivoli Identity Manager Ωw²U]p /home/db2inst1AOd 1 GB íC
Tivoli Identity Manager °A²°A] WebSphereUϕNCX WebSphere Tivoli Identity Manager °Ai²°AG
ϕ 5. WebSphere Tivoli Identity Manager °Ai²°A
²°A MM≤í AIX Solaris 8 W i n d o w s 2 0 0 0Advanced Server
IBM Directory Server v 5.1]tM≤ 1
v 4.1]tM≤ 2]Windows
NT W 4.1.1
U
b AIX 5.1
U U
Sun ONE Directory
Server¹
5.1 U
b AIX 4.3.3]úO 5.1
W
U U
1. P]dUz⌠G
http://wwws.sun.com/software/download/inter_ecom.html#dirserv
WebSphere M HTTP °A Tivoli Identity Manager °AnΘ
UϕNCX Tivoli Identity Manager °A WebSphere M HTTP °AG
2 tD 5
ϕ 6. WebSphere M HTTP °A Tivoli Identity Manager °AnΘ
nΘ M≤ í
IBM HTTP Server¹ 1.3.26 WebSphere M≤ 2
:
1. bM WebSphere M≤º
eA²÷¼ HTTP °A
C
2. bO⌠ñAbw
IBM HTTP Server qú
WⁿJ WebSphere M≤A
Σñiα]At WebSphere
Application Server Network
Deployment qúC
—
WebSphere Application Server
Base²
5.0 WebSphere Fix Pack 2 ÷UCAMUC
íG
v APAR SOV62778]\U
3C
v APAR PQ75794
v APAR PQ77263
WebSphere Application Server
Network Deployment²
5.0 WebSphere Fix Pack 2 MUzíG
v APAR SOV62778]\U
3C
1. IBM HTTP Server O]tb WebSphere Application Server wñC
2. P WebSphere Application Server @e JDKAOΣ JDKC IBM ΣLúºWw
JDKAúbΣºCC
3. pGzOHΓΦíwM≤ 2 (WebSphere Application Server Base)ANR CD W ibmorb.jar s
WAS_HOME/java/jre/lib/ext ²UCMßbwF WebSphere Application Server Network Deployment q
úWANR CD W ibmorb.jar As WAS_NDM_HOME/java/jre/lib/ext ²UCpGzbw WebSphere
5.0 M≤ 2 ºßAw⌠≤ WebSphere JDK íAh²p WebSphere ΣHAαs
ibmorb.jar C
Σ Web s²
UC Web s²uΣ WindowsG
v t Service Pack 2 Internet Explorer 5.5
v t Service Pack 1 Internet Explorer 6.0
v Netscape 4.75
:
1. CookieC
2. únqP@ßqúΓWs²Ñq@CoΓÑq@OQ°
P@Ñq@ IDA]Ωiαú DC
3. pGO Internet ExplorerAⁿw Java Runtime Environment (JRE)Cs
²AMß÷@Uuπ –> ⌠⌠⌠∩AA÷@UuiÑvAMßSM
µAbⁿ Java 2 V1.3.1_04 ∩∩AMß½s≈C
6 IBM Tivoli Identity Manager: N
WebLogic D
íπnwΘDAα² Tivoli Identity Manager °A
WebLogicC
UNIX Tivoli Identity Manager] WebLogic@tMwΘD
U¡
UϕNⁿXw@tBíHwΘDU¡Coú]tΣL
⌡µDC
ϕ 7. Tivoli Identity Manager @tMwΘDU¡
@t í OΘU¡BiíHΣLwΘD
AIX 5.1¹ pGOft WebLogic Tivoli Identity
Manager °AAM 5100–02 @M≤≤sC
: z 5100–03 @M≤C
v RAMG1 GB
v BzGt 375 MHz ≤
IBM 604e Bz
v i íG/tmp π 500 MB
i íCAú 150 MB
/itim45C BEA_HOME π 300 MB
íC
HP-UX 11i 2002 12 δ Quality Pack v RAMG1 GB
v BzGt 440 MHz ≤
v i íG/tmp π 500 MB
i íCAú 150 MB
/itim45C BEA_HOME π 300 MB
íC
Solaris 8 2002 7 δºßoµíO v RAMG1 GB
v BzGt 440 MHz ≤
Solaris Sparc
v i íG/tmp π 500 MB
i íCAú 150 MB
/itim45C BEA_HOME π 300 MB
íC
1. ÷≤s AIX ΩTA\ http://techsupport.services.ibm.com/server/mlfixes/43/10/01to10.htmlC
Windows Tivoli Identity Manager] WebLogic@tMwΘ
DU¡
UϕNⁿXw@tBíHwΘDU¡Coú]tΣL
⌡µDC
2 tD 7
ϕ 8. Tivoli Identity Manager @tMwΘDU¡
@t í OΘU¡BiíHΣLwΘD
Windows 2000 Advanced
Server
Service Pack 3 ≤s v RAMG1 GB OΘ
v BzGt 500 MHz ≤
Intel Pentium
v i íGtemp ²π 500 MB
i íCAú 150 MB
/itim45C BEA_HOME π 300 MB
íC
Tivoli Identity Manager °AΩw] WebLogicUϕNCX Tivoli Identity Manager °AiΩw] WebLogicG
ϕ 9. Tivoli Identity Manager °AiΩw] WebLogic
Ωw MM≤í AIX 5.1 Solaris 8 Windows 2000A d v a n c e dServer
Oracle 8.1.7 U U U
Microsoft SQL Server SQL Server 2000 U
Tivoli Identity Manager °A²°A] WebLogicUϕNCX WebLogic Tivoli Identity Manager °AAº²°AG
ϕ 10. WebLogic Tivoli Identity Manager °AAº²°A
²°A AIX Solaris 8 Windows 2000 AdvancedServer
S u n O N E D i r e c t o r y
Server¹
5.1 U
b AIX 4.3.3WAúO 5.1
U U
1. P]dUz⌠G
http://wwws.sun.com/software/download/inter_ecom.html#dirserv
WebLogic °A Tivoli Identity Manager °AnΘ
UϕNCX WebLogic °A Tivoli Identity Manager °AnΘG
ϕ 11. WebLogic °A Tivoli Identity Manager °AnΘ
í
WebLogic t Service Pack 3 7.0
]7.0.3.0
: H WebLogic Ab AIX Ww JDK
1.3.1_06 ≤sC
8 IBM Tivoli Identity Manager: N
Σ Web s²
UC Web s²uΣ WindowsG
v t Service Pack 2 Internet Explorer 5.5
v t Service Pack 1 Internet Explorer 6.0
v Netscape 4.75
:
1. CookieC
2. únqP@ßqúΓWs²Ñq@CoΓÑq@OQ°
P@Ñq@ IDA]Ωiαú DC
3. pGO Internet ExplorerAⁿw Java Runtime Environment (JRE)Cs
²AMß÷@Uuπ –> ⌠⌠⌠∩AA÷@UuiÑvAMßSM
µAbⁿ Java 2 V1.3.1_04 ∩∩AMß½s≈C
2 tD 9
10 IBM Tivoli Identity Manager: N
3 nΘ¡εBDMµMΦ
ínΘ¡εBDµMΦC
nΘ¡ε
UC¡εG
v busWvu∩vAí (dsml) ∩W÷@UßAb\αOW#
GC
pGznMΣu∩vAí∩º∩dA÷@U –> zA
í –> ∩Aí (dsml) CbWUΘJ dsml ⌠ß÷@U
AoApGbΣñ@ UI O¿ñΣoANπu¿\v
TºC²Oúb WF O¿ñ⌡µ⌠≤ÑCϕzß≥n⌡µY dsml
¼≤@AonDó C
µMΦkGtN dsml wb WF O¿WC
: zHPWMmAN dsml ±b UI M WF qúWC
v Tivoli Identity Manager SúΦk²zbSO°i]píñíXC
v b Tivoli Identity Manager RúAíßAiαYX@ΣúAíΩw
º¼pCYYXoº¼pAAíQRúC
v Ad-Hoc°i\αúA≤\αOtmCb\αOwñumnDvεC
ñAwwº Ad-Hoc °iΩPBnDOu#v¼AC
v bww \α WebSphere ⌠ñAϕzn⌡µí API d]⌡µz
ví API gíAziαJ Tivoli Identity Manager
°AOº¼pCpGzJHUoº¼pG
com.ibm.websphere.csi.CSIExceptionGSECJ0053EGIs (Home)enroleejb.HomeHome ALkO /UNAUTHENTICATED ...
ϕznN WebSphere w ∩Mw ñΓtmsAun÷@U
Everyone ∩ANiMoDC\ Tivoli Identity Manager wΓUñ
u² DGw qvAHo÷ib WebSphere zDx≤BΣ
∩ΩTC
v bh½zµzíµ]jqjMBsWHnJMnX
ñOΘú¼º¼pCQb HP-UX 11i W⌡µ WebLogic
Application ServerAooº¼pCúαQb HP-UX H¡xW⌡µ
WebSphere Application Server WebLogic Application Server doº
¼pC
v extensions/examples/workflow/erPersonStatusExample.html M
extensions/examples/workflow/person_modify.xml b Person Modify Start Activity
Completion Script ñC∩UC ScriptG
var person = Entity.get();var changes = person.getChanges();var result = "none";
if(changes != null && changes.length > 0) for (i =0 ; i < changes.length ; i++)
© Copyright IBM Corp. 2003 11
var op = changes[i].op;if(op == 1 || op == 2)
var name = changes[i].attr;if(name == "erpersonstatus")
var values = changes[i].valuesif(values[0] == 1) result = "suspend"; else result = "restore";
action.set(result);
WebLogic DMµMΦ
í WebLogic DMµMΦC
v WebLogic Ww∩µn²úm Script LkTB@C
µMΦkG⌡µUC@G
1. ⌡µúµn² ScriptG
build SelfReg
o Script s ValidateData.javaA²ú sr.war C
2. ñ≥ Jar TºC
3. sHUoΓG
itim_client.jarenroleagent.jar
qG
ITIM_HOME/lib/
G
ITIM_HOME/extensions/examples/selfregistration/sr/WEB-INF/lib/
4. N ITIM_HOME/extensions/examples/selfregistration/sr/en ²J
WebLogic íO⌠ñCo@⌡µΦípUG≤s manifest A
«N ITIM_HOME/extensions/examples/selfregistration/sr/en ²s
ITIM_HOME/extensions/examples/selfregistration/sr/WEB-INF/classes/
²CπMN ITIM_HOME/extensions/examples/selfregistration/sr/en
²sWO⌠ñA]w]AWebLogic #NªJC
5. pGznípµn²íAQ WebLogic zDxⁿV
ITIM_HOME/extensions/examples/selfregistration/sr/ ²C
Tivoli Identity Manager WebSphere ⌠¡ε
pGnb WebSphere ⌠UR≈ Tivoli Identity ManagerA[εUC¡εG
12 IBM Tivoli Identity Manager: N
v Tivoli Identity Manager ]O@tOPΦCFKo w qTM
tmDAzúnb@ Tivoli Identity Manager OϕñA@HW
@t¼C
v b\αOϕñAúnΓu!vMuu@yvOO¿A±bP
@íqúWC
v pGP@íqúWh WebSphere Application Server ΩAuΣñ@Ω
°AiH¿ Tivoli Identity Manager O¿C
v WebSphere Application Server e\zbP@íqúWAw Network Deployment
Manager MO¿CTwoíqúπnOΘBt Mi íAHtX
Bu@qC
wDMµMΦ
w WebSphere Application Server iαo@DAΣñ]AUCDG
v bzw AIX Solaris Aµ@°AApGPw Tivoli Identity Manager
M WebSphere Application Server BaseAzNLkq CD wC
µMΦkG⌡µUC@G
1. N Tivoli Identity Manager wíszbw≈W²ñ]
w≈n 300 MB i íC
– AIX: instAIX-WAS.bin
– Solaris: instSOL-WAS.bin
2. q²⌡µ Tivoli Identity Manager wíA w Tivoli Identity Manager
M WebSphere Application Server BaseC
v wíAw∩°i íj≤i íC
µMΦkG°wCW[i íC½slwC
v wíAw∩°iⁿXAt#w WebSphere Application Server
í PQ76707C
µMΦkG∩Cí PQ76707 úTCMT
íO PQ77263C
v wºßAτñ°iAAϕzs Network Deployment
Manager zDx]°iCpAzDxo ClassNotFound
C]Σú adminconsole.ear C
iαµMΦkGúw Network Deployment ManagerCW[i
íC½slwC
v wiµíA∩ WebSphere MQ s mqm iµndΣúⁿwsC
µMΦkG°wCn WebSphere MQ sMC½wC
v ≈Ñq@]p vnc Ñq@ⁿúÑq@A
Tivoli Identity Manager wLk¿CTºiαⁿX jmsserver w
εCΣßnwiαXTºAªⁿXDXb enrole.ear C
µMΦkGN Tivoli Identity Manager wbqú@tWCú
n vnc Ñq@ⁿúúÑq@ w Tivoli Identity ManagerC
v bOW WebSphere Application Server w Tivoli Identity Manager ATº
iαⁿX jmsserver b⌡µA²ΩW jmsserver wεCziαbw
Tivoli Identity Manager ºeNwgHΓΦíε JMS °AC
3 nΘ¡εBDMµMΦ 13
µMΦkGñTº≥wCQ¿ Tivoli Identity Manager wº
ßAAHΓΦí jmsserver C⌡µUC@G
1. s WebSphere Application Server zDxC
2. ÷@U°A –> JMS °AC
3. b JMS °AMµñA∩TIW JMS °AAMß÷@UC
v ϕzb Windows 2000 Ww Tivoli Identity Manager AWebsphere Embedded
Messaging Publish and Subscribe Aí #CHΓΦíªP
MUCTºG
LkbqúW Websphere Embedded Messaging Publish andSubscribeWAS__server1 AíC 1075G÷YAíúsbAwRú
µMΦkGñTº≥⌡µCTivoli Identity Manager ún Websphere
Embedded Messaging Publish and Subscribe AíCúnAíC
v b Windows 2000 WAϕz≤s Tivoli Identity Manager Q Tivoli Identity Manager
w w Tivoli Identity Manager M WebSphere Application Server ºßAz
iαLknJ Tivoli Identity ManagerC
µMΦkG½stFt½sßiα≤Y⌠]wM
WebSphere Embedded Messaging ΣεCDCd
WAS_HOME\logs\server1\SystemOut.log AHPO⌠≤P WebSphere
Embedded Messaging ΣεCzí÷º¼pC
v ϕ Tivoli Identity Manager w WebSphere Application Server Awd
WAS_HOME\log.txtAHP WebSphere Application Server LnwOQ¿C
pGTºⁿXLkA°wP WebSphere
Application Server wó ]C
DiαXbUCaΦG
– i íC
– zⁿw ID Sv¡Cb Windows WA u@
í@tvMuHAínJvv¡C
– WebSphere Embedded Messaging Σwiαwgó Cd
mq-prereq.log AHTwOLk⌡µªndC
A\P WebSphere Application Server w÷σ≤AHA WebSphere
Application Server wiαó ΣL]C
v wí#N Tivoli Identity Manager íw²sWíw⌠CA
FTP qT≤w]p RACF M AS/400Nzí @tíwA
]]tbD≈tíw⌠ñC
NUCΩTsWD≈tíw⌠ñG
AIX
LIBPATH=/lib/aix:"$WAS_LIBPATH":$LIBPATHexport LIBPATH ;;PROTOCOL_DIR=$ITIM_HOME/lib/aixexport PROTOCOL_DIR ;;
Solaris
14 IBM Tivoli Identity Manager: N
LD_LIBRARY_PATH=/lib/sun:"$WAS_LIBPATH":$LD_LIBRARY_PATHexport LD_LIBRARY_PATH ;;PROTOCOL_DIR=$ITIM_HOME/lib/sunexport PROTOCOL_DIR ;;
HP-UX
SHLIB_PATH=/lib/sun:"$WAS_LIBPATH":$SHLIB_PATHexport SHLIB_PATH ;;PROTOCOL_DIR=$ITIM_HOME/lib/hpux11export PROTOCOL_DIR ;;
Windows 2000N /lib/nt esúF libdelref.dll H \winnt\system32
ñC
o≤iαMb WebSphere Application Server startServer.shAMb
l startServer.sh M ScriptC
ΩDMµMΦ
Tivoli Identity Manager ⌡÷DMµMΦ]AHUUG
v ϕ Tivoli Identity Manager q 4.4 # 4.5 AtπUCTºG
com.ibm.db2.jdbc.DB2Exception:[IBM][CLI Driver][DB2/NT]SQL0601Nn½≤WPWPC
µMΦGúw Tivoli Identity Manager úq²MΩw ú Tivoli
Identity Manager Ω⌡CzHΓΦí úΩ⌡C
v ⌠Ob enRoleHiddenAttributes.properties ñⁿwCziαµY⌠
i@δC
µMΦkGq enRoleHiddenAttributes.properties úC
v uµWv° úiWL 100 r$AhLkWCX 100
r$¡ε°WbπúΘµC
µMΦkGúnΘJ° j≤ 100 r$uµWvC
v pG ITIM_HOME/bin/db2config ⁿOb⌡µAWebSphere Application Server ú
Ob⌡µñAziαNLk Tivoli Identity ManagerC
µMΦGε½s WebSphere Application ServerC Tivoli Identity
ManagerCt@ kO½s WebSphere Application ServerAs WebSphere
zDxAMßDx\αϕ½s Tivoli Identity ManagerC
v ww≤@O Tivoli Identity Manager °A wC
µMΦGpGzn Tivoli Identity Manager Nzí w≤@A
z²pΓ°APNzíºítºAAtº w≤@
C
²°ADMµMΦ
²°A÷DMµMΦ]AHUUG
v w IBM Directory Server MM≤ 1 ºßAϕzní½sAX
UCTºG
CNTR0019EGBzΦk "send" oDíº¼pCº¼pΩG32GSo½≤
3 nΘ¡εBDMµMΦ 15
µMΦGñTºCoAN½sC
WebSphere MQ DMµMΦ
WebSphere MQ ÷DMµMΦ]AHUUG
v TºⁿX WebSphere MQ εCsu]iαOb SendMessage DCQueue
Connection Factory MaεC]wⁿGOTA²u@y (itim_wf) Mu@
ym (itim_wf_pending) εCB≤úTLk¼AC
Tº∩diα]AHUUG
CNTR0019EGBzΦk "send" oDíº¼pCº¼pΩG]πΩ...
Connection Manager qΩ JMS$ITIM Queue Connection Factory$JMSManagedConnection@1010457898 Ωt¼Y½suC¼º¼pOjavax.jms.JMSExceptionGMQJMS2008GLk MQ εC
µMΦG]H AIX ⌡µUC@A ½ WebSphere MQ εCG
1. b /usr/WebSphere/AppServer ²ñAΘJUCⁿOG
deletemq.sh
úΩµWBIWεCWCzib
createMQ.nodename_jmsserver.log ñΣoA≤
/usr/WebSphere/AppServer/logs ²ñCpAΘJG
./deletemq.sh ITIM-45AIXCluster1 faith jmsserver
Tw#≥⌡µ⌠≤ mqm CpGb⌡µñA½sqúC
2. b /usr/WebSphere/AppServer ²ñAΘJUCⁿOG
createmq.sh
úΩµWBIWεCWCzib
createMQ.nodename_jmsserver.log ñΣoA≤
/usr/WebSphere/AppServer/logs ²ñCpAΘJG
./createmq.sh ITIM-45AIXCluster1 faith jmsserver
v o WebSphere MQ suyóC÷M¼≈ íMΩΘOΘiA²
toXUCTºG
AMQ7463GεCzí WAS_timwin7_jmsserver ΘxwíC
AXⁿUCTºAohTºPΩú¼¼p÷G
MQJE001G¿X 2A] 2102
µMΦGgJΘxO²A]ΘxwíoX AMQ7463 TºAHQ
CεCzíRDC
TºyqL¬NiαJo¼pCúLApGzn≥gJΘxAz
NUCGbεCzítmñ≤o W[ΘxCºßA
zε½sεCzíCAz]iNΘx¡[jCpGno
≥ AzRú½εCzíC
v εCsuo UC JMS º¼pG
MQJMS2005GLk ’<identifier>_server1’ MQQueueManager
16 IBM Tivoli Identity Manager: N
µMΦGLCY]b∩εCzíiµß]qDsuAH
WebSphere MQ]bñOⁿ Embedded Messaging ServerP WebSphere
í≤P@í≈A@o oí ⌠⌠DCpGssuAiαN
úo oDCúLAEmbedded Messaging Server OßsuAH
ssuúOitm∩C
NzíDMµMΦ
Tivoli Identity Manager Nzí÷DMµMΦ]AHUUG
v Tivoli Identity Manager °AMNzíΣíºíµ½Ωº°A
]µV[KC ΣO@ß]VOAi τ⌠⌠sut@
íº¡OC
: bu²WAoqz¬≤TiΣVO°AMNzíoGΩTñzMC
v Tivoli Identity Manager 4.4.x Nzí²Q Tivoli Identity Manager
4.5 %HAα⌡µC 4.4.x NzíAOⁿiP IBM
Directory Server eftNzíC
µMΦGQwAí]wºßANi Tivoli Identity Manager 4.5
⌡µoNzíC⌡µUC@A ¿NzíAí]ww
G
1. ⌡µNzíAí]wwⁿOC⌡µßAt
agentnameprofile ² - ]NO@NzíWA[rΩ ″profile″CpAWindows NT ²OG
nt40profile
agentnameprofile ²ñ]t@W resource.def C
2. N agentnameprofile ²esUC²G
– Windows: ’itim45\data\remote resources’
– UNIX: ITIM_HOME/data/remote resources
: pGNzí]ww&íwgQTITIM_HOME/data/remote_resources/<agentnameprofile> ²ANúA
⌡µoBJC
3. UCΦísΦ remote resources ²ñ resource.def O⌠»z
íC
– N com.access360.enrole ∩ com.ibm.itimC
– N com.access360 ∩ com.ibmC
4. N config_remote_services ⁿO±mbUC²ñG
– Windows: itim45\bin
– UNIX: ITIM_HOME/bin
b config_remote_services ⁿOñATwwUCΦí]w JAVA_HOMEG
– WebSphere: %WAS_HOME%\AppServer\java
– WebLogic: %BEA_HOME%\jdk131_06
5. ⌡µUCⁿOG
3 nΘ¡εBDMµMΦ 17
’itim45\bin\unix\config_remote_services’ agentnameprofile
Σñ agentnameprofile Oe@BJ²WC
6. pGznPNzí]wbOi@A¼A Tivoli Identity
Manager í!C÷@U –> zA –> sWCdX\
αϕAHPNzíAí]wOsbC
ΣLDMµMΦ
ΣLDMµMΦ]AHUUG
v b AIX W Tivoli Identity Manager ApGW° WL¡xWw
¡εANLkbßCpAziQ my8chars oWQbßC²L
kQ° WL 8 r$W]p my9charss bßC
µMΦGNW¡ε¡xM° ∩ Tivoli Identity Manager ¡
OhAHεC÷≤¡OhΩTA\ Tivoli Identity
Manager Policy and Organization Administration GuideC
v DGTivoli Identity Manager Applet LkⁿJAHo u@yDC
µMΦGb Internet Explorer ñApGu⌠⌠⌠∩v∩uiÑv
Ww∩u Java 2 version for <applet>vAún∩uJava í
εev Proxy Ws²]wCpGoΓú∩ATivoli
Identity Manager Applet NLkⁿJC
pGznMΣu Java 2 version for <applet>vA Internet ExplorerA
Mß÷@Uuπ –> ⌠⌠⌠∩CuiÑvMµC
pGznMΣuJava íεevA÷@Ul –> ]w –> εxCb
uεxvWA÷ΓU Java í<>C∩ Proxies C
ATw WebSphere Application Server M≤ 2 ]wgMw Web
°AqúWC²ε WebSphere Web °AíAAwM≤CM
M≤ 2 ºßApGDOsbAM 5.0.0B5.0.1 5.0.2
WebSphere Plug-in Cumulative FixCoí≤UC]NΘJb
P@µG
http://www.ibm.com/support/docview.wss?rs=180&context=SSEQTP&q=plugin+&uid=swg24004524&loc=en_US&cs=utf-8&lang=en
v DG Tivoli Identity Manager ú W(sº¼pC
µMΦG≡MRú Tivoli Identity Manager AMßS½sANú
W(sº¼pCoO≤ Tivoli Identity Manager l² server ²U
.lok y¿CRúo .lok AMß½s Tivoli Identity ManagerC
v DGSearchMO.toString() ñ NullPointerException
µMΦGTivoli Identity Manager 4.5 úΣN WebSphere Application Server
HTTP Ñq@l@ú≈εCb WebSphere Application Server W IBM
HttpSession lP SearchMO.toString() Φkñ NullPointerExceptionC
v DGxsCL°i
pGznH PDF µí CSV µíxs°iAq°iΘX°í\αϕ∩
ñ∩tssCs²²AMßΘJWxsσ≤CiH
CL PDF M CSV µí°iCCSV °ii²CLLk±íµ@°
iCp≤CL CSV °iG
– bú °i∩ CSV °iµíC
18 IBM Tivoli Identity Manager: N
– ÷@Uuv->utssvAMß∩utss¼v uMicrosoft Excel
í»vC
– úmMW xs°iC
– Microsoft Excel ΣL⌠≤ XLS ¬°iC
– CL∩ CLσ≤C
v DGLkPOb⌡µPBAPß@PB¼AC
µMΦG¼AπbuMµvuΩvµñCHUO
iαG
– úPB⌠≤Ω
– iµñ
– L
– ¿ß@PBΘMí
v ∩hoApG÷@UeXAMß÷@U½]ALk½]
w∩µC
µMΦG²÷@U½]Cún÷eXAMß÷@U½]C
v N Service.createEntity() Φkíp ßAΦkLkB@C
µMΦGúnb ßWoΦkCb API íñAO Service
Γ createEntity ΦkúwgYN@oC
v ϕ Tivoli Identity Manager P IBM Directory Integrator ºíRW⌠wqúPA
úXTºC
v µMΦGLC
v ÷@UusW/∩HvϕµW½]ßAS½]ñΓCpAHUNO
Lk½]ñΓG
1. nJ Tivoli Identity ManagerC
2. ÷@UC
3. ÷@UzHC
4. ÷@UsWC
5. ∩YHeXC
6. bñΓñ∩@C
7. ÷@U½]C
µMΦGu½]vúA≤oµC÷@UjMAijMsWC÷@U
RúAiqoµRúñΓC
ContainerSearch JavaScript Wµ
w]Aiq Tivoli Identity Manager uu@y]pívMuAí∩v
ñBz ContainerSearch JavaScript ExtensionCContainerSearch JavaScript Extension i
Ω@ OrganizationalContainerSearch OC
xsjMykpUG
searchByFilter(String containerName, String filter, [int scope])
pG
3 nΘ¡εBDMµMΦ 19
var locationContainer = new containerSearch();var thisLocation = locationContainer.searchByFilter("Location", "(l=Raleigh)", 2);
oO API Javadoc ≤UC²ñG
ITIM_HOME/extensions/api/com/ibm/itim/dataservices/model/domain/
20 IBM Tivoli Identity Manager: N
4 σ≤N
íúσ≤DMµMΦC
Policy and Organization Administration Guide PuWí±AeΩTs
Tivoli Identity Manager Policy and Organization Administration Guide Púú
uWí±AeΩTsCΓºAu²ΓUñΩTC
© Copyright IBM Corp. 2003 21
22 IBM Tivoli Identity Manager: N
5 ΩN
UCMΦBzªσ≤ñDG
v bΘσñALkb Microsoft Outlook Express ¬ Tivoli Identity Manager e
l≤qñD«C
µMΦkGTºMµANibTºMµñ¬D«CAz]i÷@U
TºMµñTºAbt°íñoi¬D«C
© Copyright IBM Corp. 2003 23
24 IBM Tivoli Identity Manager: N
6 wD
HUO Tivoli Identity Manager 4.5 wDG
: NzíwDO²bC@NzíúO Readme ñC
v iQsWSW ACIC
v iQPAíQsWs¡OhC
v izLÑq@OTºñµ@nJG sw] Tivoli Identity
Manager C
v jM UI ñ≥bßC
v Lk ACI ú∩SwDAí¼sv]∩DDAí¼
svCzuαA¼ =uDAí¼v ACIAªvTD
Aí¼C
v pG ACI Wñµ(AACI synchronizer óC
v úDNuLonDvXiiπugvuδvíAhu°mnDvñ
úXwbW) 12:00 Γß 01:00 íC
v uAd-Hoc °i\αv>u⌡µ°iv>uU@wwPBBzvSπ
lΘC
v Ad-Hoc °i\αGLkú ÷ ACI MuACI \ivvkϕ°iC
v Ad-Hoc °i\αGbu]p⌡vñALk∩MubßvMu]wvo
ΓC
v Ad-Hoc °i\αuΩPBvñSi YΩPB\αu⌡
µv÷sCoPΣL w≤/µ÷ú@PC
v Ad-Hoc °i\αGⁿJu]p⌡vñΩΘºAN NetScape M Internet
Explorer Γ±A NetScape αtC
v Ad-Hoc °i\αPBnDLkb\αOñC
v Qh½OW]P² µsWHsW\αóABú
X⌠≤TºC
v sWsµAYuµWvµO AOúπiT
ºCoOo b÷@u½]v÷sºßCusWvϕµ]ps
WHBµúoDC
v LksW∩W° j≤ 128 r$uµvumvC
v ApplicationFactory javadoc úπC
v AS/400 NzíLk Tivoli Identity Manager 4.5 ServerC
v LkbjMLoñ⌠C
v pGzLujMv>uAí∩hv πAí∩hANLkπ
]²zLuv>uAí∩hvNiπC
v ϕGO A÷@Uu jMGvWuW@v÷sßAs²πL
C
v ujMv>uu@y]pvW÷sPΣLjMW÷sú
@PC
© Copyright IBM Corp. 2003 25
v YOQh]Σñú∩ ″erchangepswdrequired = FALSE″ MuUnJn≤KXHv Tivoli Identity Manager bßAnJ Tivoli Identity
Manager ≤KXC
v iq≤KXqGAPI úúIs HσrπsKX]ozαH
qll≤NªeC
v bíAQhH ≤AñΓ] SQL ó C
v ≤ Tivoli Identity Manager bß ID ] JNDI ó C
v uhPzΓUv 6 uqtz ITIM s úv@GB
J 3 ñOuRúvorA² GUI eW∩oOu úvC
v Tivoli Identity Manager weWñσr¼pC
v iµñσwAuw WebSpherev]uOvBuvoOσ
]YesBNoC
v WebSphere Wuñσwv÷siαHσπC
v WebLogic Wuñσwv÷siαHσπC
v iµ Tivoli Identity Manager ñσwASw]∩i∩w¼C
v ñσweún½µC
v ITIM_HOME/extensions/doc/applications/applications.html ñO
com.ibm.itim.apps.impl.WebspherePlatformContextFactory O
com.ibm.itim.apps.impl.websphere.WebSpherePlatformContextFactoryC
v NwbuΩΘ¼vh∩Yi@Aku∩v
úOutwqvC
v NwbuΩΘvh∩Yi@Aku∩vúO
uwqvC
v ÷@U Tivoli Identity Manager GUI ñu½sπzv÷sßA≡#MµYC
v Ñq@OßHY÷@UuvAπC
v b Tivoli Identity Manager úHñσ WAS wíñA°íWu÷
¼v÷s (″X″) LkB@C
v ≤yÑ⌠M Styles.css ²ú≤ enrole.xslANLkq GUI ΓmMr¼C
v Tivoli Identity Manager API ñwúA com.ibm.itim.apps.AuthenticationExecptionC
Noº¼p úC
v GMT íO²w¿º DSML ú nDAPtíúPC
v µGtjqMµ LDAP DB2 o VípC
v utmzsW¡zíve@tmC
v utmvπ¬½CñC
v qϕµñujMLovΘJµu⌠wqvd≥uA≤ubßvϕµC
v pGSqll≤MuLd/#vAuKXvñu≤KXvN
ΩC
v \αOíñ/∩/RúbßÑ@Ab⌡µºe²πu#vA
Bjπ@C
v DAíbßAiαOⁿu#ú [DAMLContext.executeRequest] D≈
URLvA²bßC
26 IBM Tivoli Identity Manager: N
v buµv]úO²U¡OhßALkd½
hWC
v Tivoli Identity Manager GUI ñ#wπqKXWhC
v qKXWhßANLkAC
v w]AΩw]]NO IBM DB2M²]]NO LDAPKXHσrπ
beñC
v qϕµWΘΘJµbxsⁿwΘºe²∩ªC
v DB/2 b Tivoli Identity Manager µºßXí ΩwDC
v ITIM #ºßARACF NzíLkB@C
v Tivoli Identity Manager qll≤qñ DBCS D«µLkAϕaπC
v w] ACI @HσπC
v wíñ Exchange2000 Agent w]w²O C:\tivoli\agents\NTAgentC
v Y+uhvbßAiQ¿uRúbß APIvC
v RúHGYb⌡µwwRú@ºeNwgRúuwwRúHvA
uwwRúHvπQ¿C²OARúúsbHA
#C
v Tivoli Identity Manager API RúAíATivoli Identity Manager Θxñ
π ServiceLockNotFoundExceptionA²AíQQRúC
v u]p°iv>uw²vLkbuívµñπTC
v tjqⁿvT]50,000) ºhAiαy¿ JMS ΩwC
v jq JAHMµπt wCC
v iAíMµπt wCC
v Rúu@yl,óC
v RúAMß÷@UuvAú íC
v n¡εuⁿw Tivoli Identity Manager ΓΩTevWuΓvMu°A
Wv° C
v 6999 ºßAdsml 20 K ú \αεC
v ¿AñΓ≤ºßA@OⁿGdbumvnDñC
v ⌡µbßΩΘ¼@Oⁿ[K±ó C
v n@δΓU≤C
v b WebSphere ñ⌡µ Java 2 w AOñú Tivoli Identity Manager óC
v u°iv>u⌡µ°iveW ″Enter″ ΣQ°u°vúOuTwvCbNetscape 4.75 ñA]oDπnJeC
v ∩MúeAΩΘtmy¿óC
v uHv½≤±mWhñC
v s@sñΓo C
v pGbn≤KXípU nJo OANπúT
TºC
v bñAπ/nDí#µíC
v jqPnJAXunJó vTºC
v extensions/doc/applications/applications.html ≥F 5]íOC
6 wD 27
v eXhnDAJI±bu]pu@yvC
v hHπWPAπHMµNⁿGICHMµO
πW AHmWMπWúPHAN#gLC
v WebSphere l\αºßATivoli Identity Manager W\α¿LkC
v sTºt Tivoli Identity Manager Windows WebLogic wíñl
r$C
v qU Netscape s²ñ°AtMµuíevLkTπC
NetScape úΣ • C
v uHR ú v]u@yO/½Hh½C
v IBM Directory Integrator iP Tivoli Identity Manager ñuBΓ≤vftA
H≤s Tivoli Identity Manager ñA² IBM Directory Integrator Lkδ
≤ DistinguishedName]pñΓBz¼º⌠≤#≤C
v ∩ DSMLv2 JNDI siµ IBM Directory Integrator suAú úT
GC
v bu /°w¿nDvñAQnDWπbuD«vµñC
v °iApGS∩uAívANπúTTºCTºú
∩u]wvúOuAívC
v iµuΩú vsuSτúTRW⌠wqC
v W[ enrole_data ϕµ íjpC
v IBM Directory Integrator Ωú AíLRW⌠wqú Gu
H, schema.[namingcontexts] Wwv
v #Aϕπ Tivoli Identity Manager qll≤qñ]tvC
v uWíuRúHv@ñAúTⁿyC
v uw¿wveú÷@UuU@Bv÷sA²÷súsbA¿w
T÷sOu¿v÷sC
v wßA πHjMo í ó C
v b AIX W Netscape s²Ñq@ nJo í Ñq@OC
v πΘσ°ih≤e°iC
v DistinguishedName Javadoc qYú ″enRole″C
v Javascript entity.getProperty(″erPassword″) S#KKXC
v u!tmveσr¼úMC
v iµwA]σr¼-pbYR ULkoMíC
v ″Installing Tivoli Identity Manager″]bw Tivoli Identity Manageroyl
σσσkúTC
v uAñΓv LDAP Lo°≤Lk]t µCpG LDAP Lo°≤ñt
µAsWHßNúⁿúuAñΓvC
v LifecycleManager Javadoc úπC
v bu@y]pñßFhíºßANLkAsHMµC
v lok ITIM.sh Lk⌡µC
v ϕΘxU UjAWindows ñ ″log4j.appender.Logger.MaxBackupIndex=10″ úú ″10″ CF ″2MB″ ¡εAuN itim.log ∩gwC
v °µ$WúΘµC
28 IBM Tivoli Identity Manager: N
v LksW°híC
v LksW°hWAB°hWúΘµC
v b\αOñALTPA Oß≥nJó C
v ujεiÑvbs²ñú C
v b HPUX ¡xWAϕ Tivoli Identity Manager b WebLogic ñ⌡µAXO
骡pC
v ϕuAñΓvwqWhFúTykAOⁿTºúMíA≤
íC
v u∩bßv⌠úΘJKXA²WS⌠≤KXµC
v ∩hAMß÷@UeXM½]ºßA#½]∩µC
v N erPersonStatus ∩ú@ºßA#°bßC
v h½µzb Tivoli Identity Manager úñjMAY
com.ibm.itim.webclient.search.SearchUtility.bindToSession ñú PtrC
v LkPW wqh½¡OhCoO] Tivoli Identity Manager
º LDAP ñ erGlobalIdAΩWNC@h@CpG
PW wqh½hAß∩≤oípiαoVcC
v u103K bß 25K sv uMVS RACF Nzí RECONvLkb Tivoli Identity
Manager 4.5 í°AW¿nDC
v pGnJΘJKXúTANetScape s² 4.75 #uúϕnDvTºC
v b Netscape 4.75 ñAqs²Ñq@ iµ Tivoli Identity Manager nJ
AXuÑq@OvTº]pG½NiHC
v b Netscape 4.75 ñAMµ-AHLkeu>wq¡Oh>sW
>Aí>A¼v
v b Netscape 4.75 ñApGú≤⌠≤ ITIM sAeWNúsu
>zbßuITIM svvµ
v ⌡µ Ad-Hoc °iANetscape s²jqú Acrobat Reader G
s²°íAHúoú÷¼o°íC
v pGíD°ANetScape s²NLkππuITIM sívCíí
IA] NetScape nLk ΣσrΘµC
v u.úvvTΘµC
v jMπuΣú⌠≤GvTºAB ACI TεjMC
v RúuBP vXu#≥vvTºAPΣLu#≥vvTºúú
@PC
v Novell Netware Nzíσ≤Síp≤tmuAívϕµ Σh½u≡¼
cvu⌠wqvC
v Tivoli Identity Manager °A÷≈íYX NullPointerExceptionC
v ϕAíS]wAcom.ibm.itim.dataservices.model.domain.AccountTable c
l API ñX NullPointerExceptionC
v uDAívhAX OBJECT_NOT_FOUND º¼pC
v uWíS]t²uW@vC
v í JavaScript uWíπµíPΣLíeµíúPC
v uWíGuw¿nDΩvqñúTµ IDC
6 wD 29
v uWíGn≤suFKXHvMuKXLd/#v÷ΩTC
v Oracle u50K DSML ú vWσC
v Oracle .ddl t µAo µ SQLPLUS &ío DC
v Tivoli Identity Manager wí≤s ORACLE_JDBC_DRIVER_PATH WebSphere
⌠C
v KXú Lkú tSϕr$KXC
v KXhGul≡vAíRd≥Lkoºw@C
v wquKXvhºßAúTaIµuKXhv\ivC
v KXPBGúTatmu DNvA]SXTºA@u
O@hSB PasswordSynchServlet º NullPointerException ΘxTºC
v umnDveNµ@Hu//Rúvπ¼uh
vúOuµ@vC
v H ACIGϕ∩vΩT²∩voDAeW
π C
v H ACIGpG±∩LHABo L@A≥AϕπΩO
L@ºeµ÷ATºNπ/úTΩCpG÷
¼Ñq@AsÑq@AMß½s⌡µ@ANπTT
ºC
v PersonManager.getPeople() API Lk⌡µl≡hjMC
v w∩ 30K ANh≤ Tivoli Identity Manager M Windows
2000 bßAfΘxOmC
v process.auditEvent() LkbuflvñπΩC
v process.id JavaScript #úTC
v jq dsml ú OºßABzLk#¿C
v ″parameters.eruid[0]″ ] Scripting óC
v h UIGúAíΩMjM@C
v ITIM #ºßARACF LkB@C
v pGb Tivoli Identity Manager b⌡µ½stm Tivoli Identity Manager ΩwA
Nb≤KXo ≡CBπu#Q¿zu¡zívbß
KX≤CyßA½APzu¡zívzpvoC
v ]hb⌡µPnDB≤⌡µñ¼AGnJó Coíu
b mw¿nDípUo C
v RequestManager APIGonDmnD] SQL º¼pó C
v usW/∩HvMusW/∩±HvϕµWu½]v÷sLk½]
ñΓC
v utm > Ld#vWu½]v\αLk⌡µuLdwqívC
v QuΘv½]µtΘANΘ]µδ≈@ΘA
úOµΘMíC
v bß>≤KXGtúBzubß ACI KXv\iv]YugJvvO
DENYA C
30 IBM Tivoli Identity Manager: N
v uKXvWu°v÷sLk°÷¼uKXvC÷@U
Wu°v÷sßAªoºΩ@PuMúv÷s\αPA]
ªuMúu@KXvσrµñΩΘJC
v b Acrobat 5.x ñALkw]W xs Ad-Hoc °iC
v wnD hbßAbmnDMµñú VcGC
v wHαeApGbαeo ºeRúa OUANqΣl OU ñRú
HCHdbBABOⁿAϕTºC
v wuvhApGbh¿ºeRúñΓANPuúv
¿ hAúXAϕC
v jM -> Lo°≤jMGnjM¼ñ#tijMs∩uA
í∩hvC
v jMGµWjMΣúHC
v ÷¼ Tivoli Identity Manager Dns²ºß÷¼ujM/sWv°íC
v Weblogic µn²]m selfRegGúDuΩnΘv² ’en’]b ’sr’
²ºU≤ Web íO⌠ñAhNó C
v ϕ DSML ú Aµn²≡MεC
v ⁿJ°AApGzLs² nJAN#UCGu°A⌡µⁿño
F Servlet.Engine.Transports : 2981]
<ERROR:com.ibm.itim.webclient.logon.LogonMediator> RemoteExceptionvC
v Aí∩h ACIGpG∩@DAB÷@UhAµNú
π¬C
v uAí∩hvTºúTA%H∩AJ≤@C
v uAí∩h ScriptvTºúTA%H∩AJ≤@C
v SelfRegistrationManager oX SchemaViolation °iC
v #]wAuπKXWhv]t ″true″C
v jqPnJO]wo UCGXtmº¼pABí°
AñX CPU jΘC
v b°ñAAd-Hoc °iñpr¼±jAα²H\¬°iC
v µwHAú h½C
v Q¿ Tivoli Identity Manager úwºßAú ÷Lk ú²
TºC
v YuAñΓ ACIvNu∩@v] DENYAi∩uAñΓvC
v WebLogic WuxWwv÷siαHσπC
v ²eípb URL http://host:port/tenant/main.jsp ºU Tenant zuπAwúA
ípC
v Nzíúúsb URL AAíqT#úTºC
v u@δΓUvñσrºC
v ⌡µh≤ vTP GUI íµjqbßAo OC]iαO
] DB2 APP_CTL_HEAP_SZ -pC
v Y WebSphere w tmATivoli Identity Manager API LkB@C
v ϕuQ¿ve⌠bDeßATivoli Identity Manager w/#@
ϕⁿC
6 wD 31
v Tivoli Identity Manager 4.5 wí]WebSphere LkN Tivoli Identity Manager
íw²sWíw⌠C
v Tivoli Identity Manager weú°óCbuⁿw WAS M HTTPServer w
mveñ÷@UTwßAúNJI #uTivoli Identity Manager wv
eC
v ϕ WAS wó AX Tivoli Identity Manager wTº]túT
σk -″WAS install might failed″C
v Tivoli Identity Manager #úOd Java w ñw úC
v Tivoli Identity Manager #úsq Jar C
v Tivoli Identity Manager #úOd enRoleAuthentication.properties ñ Factory ]
wC
v Tivoli Identity Manager #úBz Proxy °AC
v b WebSphere zDxñnOATivoli Identity Manager πC
v uTivoli Identity Manager qll≤qvt½úΩTAπF HTML
WC
v uµ÷# vs²πMv 150 AíC
v °ΓUGJ÷OⁿTºΣΩTC
v wú]w IBM Directory Server DB2 Ωwπ(C
v úΣNzíP Tivoli Identity Manager °AºíV SSL OC
v LkzL Java Script obßKXC
v UI qGtúBzujMεp≤ujMπvv∩]@NujMε
v°PQ∩C
v #∩usGv∩A²s UI qGC
v íú¼ATivoli Identity Manager UNIX wNLkδ²ñ≤C
v N UNIX wíq CD stC
v ∩u°vATIM wíutmveñNX/ΦσyÑ⌠º#
uO/v÷sσrC
v Weblogic ñw# Tivoli Identity Manager 4.3 -> 4.5G#≤s SSL H
CAKeyStore ⌠A]PuyY½w z]#HHú≈xswLkn
DßπvC
v Tivoli Identity Manager 4.4 -> 4.5 #GΘxñ HTTP TºC
v N Tivoli Identity Manager 4.3 UNIX °A# 4.5 ºßA LkRúw@o
I T I M _ H O M E / b i n / a i x , s o l a r i s , h p u x ²Cq²]úOs
ITIM_HOME/bin/unix ²ñ⌡µ ScriptAPhóC
v DSML ú ⌡µΩ≤πOD« dnAúOHW
dnC dsml ú ≤sHΩAC@w∩H½≤úπH
OnDCnDΩThπQnD dnC
v iNu± ACIvuívµ%¬g\ivC²b
±AoLíµiwqC
v NτdsWuqll≤vµC
v bvTh]p 3000 nDíALkπu°mn
DvCΘxñπOTºC
32 IBM Tivoli Identity Manager: N
v ∩ñΓAYñΓWµdAúπiTºC
v Web íO enroleCO itim ∩C
v Weblogic OGpGbsWjq]HR ú ½sπzHMµAN
Xg]ΘxñX NotSerializableExceptionCWeblogic Service Pack SP4
]\iHoDC
v w Tivoli Identity Manager ºßAWEMPS AíLkC
v Windows 2000 NzíbßeGunJv\αLkB@]]º¼p
π °íC
v uu@y]pívúBzu@y ACI \ivC
v Tivoli Identity Manager #ºßAu@yπ@Lk⌡µC
v u@y clientactivitytimeout ]o-CAHiµ d]qúbß≤
úbßo OC]zNw] 60 ∩ 2400 ≤¬C
v H@u@yqGΓzAí úπiαπ
PC
v ∩DOíUHºu@y Script ºßAb LDAP ñ≤≥ªH
½≤CªuvT JavaScript ∩C
v u@y]píú0\q START α½ ENDC
v u@y]píGNíµ ΣLIAα½°≤QMúC
v N q∩≤A ⌡µhIµAu@y( XuOΘú
¼vC]W[OniHoDC
v ″AND″ Xu@yAu⌠≥W@ºΩC
v buu@y¼AveñAzLuHR ú v≤H BU AπO
uΩ≤v¼AúOu BU ≤v¼C
v ⁿw°≤O false Au@y UNTIL jΘ⌡µC
v tqll≤qó u@y]±ΦíA]tm SMTP °ALó
AbflñπuQ¿vC
6 wD 33
34 IBM Tivoli Identity Manager: N
². N
σ≤Yw∩ IBM bⁿΩúºúPAoFbΣLΩañAIBM úúo
ú≤ñúUúBA\αCóϕa IBM NϕAHo
ϕaeúúMAº÷ΩTCo≈σ≤bú IBM úBíAA
úϕtuα IBM úBíACun#I/ IBM z]úvA
⌠≤\αϕúBíAúiHN IBM úBíACúLA⌠≤
D IBM úBíAAµtd@⌠Mτd⌠C
o≈σ≤íDDeAIBM iα ΣMQMQ0Cúo≈σ≤úNϕ
úoMQvCziHúXvdA τHG
IBM Director of LicensingIBM CorporationNorth Castle DriveArmonk, NY 10504-1785U.S.A.
pGO÷$ (DBCS) ΩTvdAóbΩ IBM z]úíA
úXvdA τHG
IBM World Trade Asia CorporationLicensing2-31 Roppongi 3-chome, Minato-kuTokyo 106-0032, Japan
UCq¿úA≤Ω°PϕakΦΣLΩaGInternational Business
Machines Corporation) uypzúXAúú⌠≤tºOAΣ
ñ]ABú¡≤úH,WwBiSwºA⌠tOCab
Swµ÷WAú0\útOA]Aonú@wAXzC
oΩTñiαNWLΩWC]AIBM wqFNqß
eJsñCIBM H∩iM/≤XúúM/íAút
µqC
o≈ΩTñú⌠≤D IBM ⌠uAIBM úo⌠úOCo⌠
úΩúO IBM úΩeApGno⌠ΩAz
µßIC
IBM oHUAϕΦíG+zú⌠≤ΩTAL∩ztdC
pGí≥vHF (i) bOíMΣLí]]Aíºíµ½
ΩTAH (ii) ¼µ½ΩTA]n÷ΩTAóG
IBM Corporation2ZA4/10111400 Burnet RoadAustin, TX 78758U.S.A.
© Copyright IBM Corp. 2003 35
oΩTiAϕ°oAbYípUIOΦoC
IBM ≥≤Φº IBM ΩívX]⌠≤PÑX°AúΩTú
víPΣAvΩC
Bt⌠≤αΩAObⁿε⌠UoXAPbΣL@⌠UoX
GAiαjtºCqΩObotWAúOPΣLqt
WqΩ@CAqΩiαOzL[Hw⌠AΩGúú
oPCσTΣSw⌠AΩC
úºD IBM úΩTAúAΣoGnΣL&DC
IBM #LoúA]LkToD IBM ú⌡µαBe⌠≤∩
úΣLDiO LC÷D IBM úαDóúC
UCⁿJO International Business Machines Corporation bⁿΩ/ΣLΩa
UG
AIX
DB2
IBM
IBM x
SecureWay
Tivoli
Tivoli x
Universal Database
WebSphere
Lotus O Lotus Development Corporation / IBM Corporation UC
Domino O International Business Machines Corporation M Lotus Development Corporation
bⁿΩ/ΣLΩaC
MicrosoftBWindowsBWindows NT M Windows xO Microsoft Corporation bⁿΩ
/ΣLΩaC
UNIX O The Open Group bⁿΩΣLΩaUC
Java™ MH Java ≥ªMxAO Sun
Microsystems, Inc. bⁿΩMΣLΩaUC
ΣL&qBúAWAiαOTAxC
36 IBM Tivoli Identity Manager: N
(HñσrAσrASϕº
CC
efΣ Windows 2000 Advanced Server 4, 8
Σ, p vii
σ≤
≤Uuπ vii
÷ v, vi
uWs vii
IBM DB2 vi
IBM Directory Server vi
IBM HTTP Server vi
Oracle vi
SQL Server 2000 vi
Sun ONE Directory Server vi
Web Proxy °A vi
WebLogic Application Server vi
WebSphere Application Server vi
WebSphere Embedded Messaging Σ vi
e¡fnΘ
°A
IBM HTTP Server 6
WebSphere Application Server Base 6
WebSphere Application Server Network Deployment 6
σ≤ v
eCf°A
nΘ
IBM HTTP Server 6
WebSphere Application Server Base 6
WebSphere Application Server Network Deployment 6
@t
Σ AIX h 3, 7
Σ HP-UX h 7
Σ Solaris h 3, 7
Σ Windows 2000 Advanced Server 4, 8
eKf≤Uuπ, σ≤ vii
eEf÷σ≤ v, vi
¡ε
P@íqúW UIBWF O¿ 13
PΦ@t 13
h WebSphere Application Server Ω, P@íqú 13
eQfy
v
≤Uuπ vii
D vii
÷ vi
uWs vii
IBM DB2 vi
IBM Directory Server vi
IBM HTTP Server vi
Oracle vi
SQL Server 2000 vi
Sun ONE Directory Server vi
Tivoli Identity Manager v
Web Proxy °A vi
WebLogic Application Server vi
WebSphere Application Server vi
WebSphere Embedded Messaging Σ vi
, Solaris 4
tm
WebSphere Application Server
Tivoli Identity Manager 12
eQ@f≥D
s², uΣ Windows 6, 9
AIX 3, 7
HP-UX 7
IBM DB2 5
IBM Directory Server 5
IBM HTTP Server 6
Microsoft SQL Server 5
Microsoft SQL server 8
Oracle 5, 8
Solaris 3, 7
Sun ONE Directory Server 5, 8
WebLogic 8
WebSphere Application Server Base 6
WebSphere Application Server Network Deployment 6
Windows 2000 Advanced Server 4, 8
Θr viii
© Copyright IBM Corp. 2003 37
Θr viii
eQGfÑerΘ viii
eQfD, ñ vii
eQCfpΣ vii
eGQ¡f[ v
AAIX, Σh 3, 7
HHP-UX, Σh 7
IIBM DB2
WebSphere Application Server 5
IBM DB2 σ≤ vi
IBM Directory Server
σ≤ vi
IBM HTTP Server
σ≤ vi
nΘ 6
JJDK, P WebSphere Application Server @e 6
MMicrosoft SQL Server
WebSphere Application Server 5
Microsoft SQL Server, WebLogic 8
OOracle
WebLogic 8
WebSphere Application Server 5
Oracle σ≤ vi
SSolaris
Σh 3, 7
Tivoli Identity Manager 4
SQL Server 2000 σ≤ vi
Sun ONE Directory Server
σ≤ vi
IBM Directory Server 5
WebLogic 8
WebSphere Application Server 5
TTivoli Identity Manager
tm
WebSphere Application Server ¡ε 12
WWeb Proxy °A
σ≤ vi
Web s², uΣ Windows 6, 9
WebLogic
Σh 8
Microsoft SQL Server Σh 8
Oracle Σh 8
Sun ONE Directory Server Σh 8
WebLogic Application Server σ≤ vi
WebSphere Application Server
nΘ
Σ JDK 6
tm
Tivoli Identity Manager ¡ε 12
IBM DB2 Σh 5
IBM Directory Server Σh 5
Microsoft SQL Server Σh 5
Oracle Σh 5
Sun ONE Directory Server Σh 5
WebSphere Application Server Base
nΘ 6
WebSphere Application Server Network Deployment
nΘ 6
WebSphere Application Server σ≤ vi
WebSphere Embedded Messaging Σ
σ≤ vi
38 IBM Tivoli Identity Manager: N
íX: 5724–C34
Denmark by IBM Danmark A/S
GI11-2741-00
Recommended