IBM Tivoli Identity Manager:...

$: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-00/zh_TW/PDF/svrrln45mst.pdfy \¬ Tivoli Identity Manager w B y ÷ y í A P yi α∩z±$
IBM Tivoli Identity Manager

N

4.5

GI11-2741-00

IBM Tivoli Identity Manager

N

4.5

GI11-2741-00

G

bΩTΣΣúºeA²\¬ 35 yNzñΩTC

@q]2003 9 δ

úDbsqñtíAhqA≤ Tivoli Identity Manager 4.5.0 ]ús 5724–C34Hß≥MqC

© Copyright International Business Machines Corporation 2003. All rights reserved.

²

eÑ . . . . . . . . . . . . . . . . vA∩H . . . . . . . . . . . . . . vy . . . . . . . . . . . . . . . . . v

Tivoli Identity Manager °Aw . . . . . . vúy . . . . . . . . . . . . . vi÷y . . . . . . . . . . . . . . viuWsy . . . . . . . . . . . . . vii

≤Uuπ . . . . . . . . . . . . . . . viipnΘΣñ . . . . . . . . . . . . viiD . . . . . . . . . . . . . . vii

1 ÷≤ . . . . . . . . . . 1Nq . . . . . . . . . . . 1 Adobe Acrobat Reader 4.05 ≤¬ 1

2 tD . . . . . . . . . . . 3WebSphere D . . . . . . . . . . . 3

Tivoli Identity Manager] WebSphereUNIX @tMwΘDU¡ . . . . . . . 3Tivoli Identity Manager] WebSphereWindows @tMwΘDU¡ . . . . . . 4Tivoli Identity Manager °AΩw]WebSphere . . . . . . . . . . . . . 4Tivoli Identity Manager °A²°A]WebSphere . . . . . . . . . . . . . 5WebSphere M HTTP °A Tivoli IdentityManager °AnΘ . . . . . . . . . 5Σ Web s² . . . . . . . . . . . 6

WebLogic D . . . . . . . . . . . 7UNIX Tivoli Identity Manager]WebLogic@tMwΘDU¡ . . . . . 7Windows Tivoli Identity Manager]WebLogic@tMwΘDU¡ . . . . . 7

Tivoli Identity Manager °AΩw]WebLogic . . . . . . . . . . . . . . 8Tivoli Identity Manager °A²°A]WebLogic . . . . . . . . . . . . . . 8WebLogic °A Tivoli Identity Manager °AnΘ . . . . . . . . . . . . . . . 8Σ Web s² . . . . . . . . . . . 9

3 nΘ¡εBDMµMΦ 11nΘ¡ε . . . . . . . . . . . . . . . 11WebLogic DMµMΦ . . . . . . . . 12 Tivoli Identity Manager WebSphere ⌠¡ε 12wDMµMΦ . . . . . . . . . . 13ΩDMµMΦ . . . . . . . . . . 15²°ADMµMΦ . . . . . . . . 15WebSphere MQ DMµMΦ . . . . . . 16NzíDMµMΦ . . . . . . . . 17ΣLDMµMΦ . . . . . . . . . . 18ContainerSearch JavaScript Wµ . . . . . . 19

4 σ≤N . . . . . . . . 21Policy and Organization Administration Guide PuWí±AeΩTs . . . . . . . . . 21

5 ΩN . . . . . . . . 23

6 wD . . . . . . . . . . 25

². N. . . . . . . . . . . . 35 . . . . . . . . . . . . . . . . . 36

. . . . . . . . . . . . . . . . 37

© Copyright IBM Corp. 2003 iii

iv IBM Tivoli Identity Manager: N

eÑ

Tivoli Identity Manager NúsΩTApDMµMΦAH

íiC

A∩H

ΓUA∩HAObv⌠qútWwB@znΘtMw

zC¬πtMw zºCA¬]πUCU

zºG

v ²°A

v Ωw°A

v WebSphere® Embedded Messaging Σ

v WebSphere Application Server WebLogic

v IBM HTTP Server

y

\¬ Tivoli Identity Manager wBy÷yíA Pyi

α∩z±CMwznyºßA\ⁿAbuWsyq

yC

Tivoli Identity Manager °Aw

UO Tivoli Identity Manager °AwñyG

v Tivoli Identity Manager uWU

w∩ Tivoli Identity Manager z@AúπXíuWíDDC

v UNIX Windows Tivoli Identity Manager °AwΓU] WebSphere

WebLogicCAXz⌠C

ú Tivoli Identity Manager wΩTC

v Tivoli Identity Manager Policy and Organization Administration Guide

ú Tivoli Identity Manager z@DDC

v Tivoli Identity Manager °AtmΓU

úµ@°AMO Tivoli Identity Manager tmtmΩTC

v Tivoli Identity Manager @δΓU

ú Tivoli Identity Manager ΩTC

v Tivoli Identity Manager N

ú Tivoli Identity Manager nwΘDAHΣLíBíMΣLΣ

ΩTC

v Tivoli Identity Manager Troubleshooting Guide

ú Tivoli Identity Manager úΣLMDΩTC

© Copyright IBM Corp. 2003 v

úy

pGnΩTAF Tivoli Identity Manager úCziHqU

CmoyG

v WebSphere Application Server

http://www.ibm.com/software/webservers/appserv/support.html

: Uo≈u⌡MµANíwMtm WebSphere Application ServerA

Bí÷úBw O@C÷Mo≈MµbIΩOsA²

biαwgLFCpßNϕAΩΩTMµC

– IBM WebSphere Application Server V5.0 System Management and ConfigurationA

IBM ⌡

– IBM WebSphere Application Server V5.0 SecurityAIBM ⌡

v WebLogic Application Server

http://e-docs.bea.com/

v Ωw°A

– IBM DB2

http://www.ibm.com/software/data/db2/udb/support.html

http://www.ibm.com/software/data/db2

– Oracle

http://technet.oracle.com/documentation/content.html

– Microsoft SQL Server 2000

http://msdn.microsoft.com/library/

v ²°Aí

– IBM Directory Server

http://www.ibm.com/software/network/directory

– Sun ONE Directory Server


v WebSphere Embedded Messaging Σ] IBM MQSeries

http://www.ibm.com/software/ts/mqseries

v Web Proxy °A

– IBM HTTP Server

http://www.ibm.com/software/webservers/httpservers/library.html

– Microsoft IIS HTTP Server

http://www.microsoft.com/technet/prodtechnol/iis/default.asp

– Apache HTTP Server

http://httpd.apache.org/docs-project

÷y

ziHbUCyΣ Tivoli Identity Manager °A÷ΩTG

v Tivoli Software Library úFU Tivoli yApABΩu@ϕBdB

⌡MqHτCziHbUz⌠Σ Tivoli Software LibraryG

vi IBM Tivoli Identity Manager: N

http://www-4.ibm.com/software/webservers/appserv/support.html

http://e-docs.bea.com/

http://www-4.ibm.com/software/data/db2/udb/support.html

http://www.ibm.com/software/data/db2

http://technet.oracle.com/documentation/content.html

http://msdn.microsoft.com/library/


http://wwws.sun.com/software/sunone/

http://www-4.ibm.com/software/ts/mqseries

http://www-3.ibm.com/software/webservers/httpservers/library.html

http://www.microsoft.com/technet/prodtechnol/iis/default.asp

http://httpd.apache.org/docs-project

http://www.ibm.com/software/tivoli/library/

v Tivoli Software Glossary t\h Tivoli nΘ÷NywqCziHb Tivoli

Software Library ⌠¬ΓΣ Glossary Σ Tivoli Software GlossaryAúL

uσC


uWsy

ziHQuWΦíb Tivoli Software Library Σú IBM yAiΓíσ

≤µí (PDF) WσrOyÑ (HTML) µíAΓµíπC

http://www.ibm.com/software/tivoli/library

pGnbwñMΣúyAbuwv¬ΓΣ÷@UúΓUCMß

buTivoli nΘΩTñvWMΣB÷@UúWC

úy]ANBwΓUBΓUBzΓUHoΓ

UC

: FTOαCL PDF yAb Adobe Acrobat uCLv°íñA∩

X∩]zun÷@U → CLANα≈o∩C

≤Uuπ

úσ≤tUCSAiHUz≤UuπG

v σ≤ HTML M PDF ΓµíAi²Me¬nΘC

v σ≤ñvúNσrAi²°FveC

pnΘΣñ

bV IBM Tivoli nΘΣñDºeA²yX IBM Tivoli nΘΣñ⌠

A⌠pUG

http://www.ibm.com/software/sysmgmt/products/support/

pGznBUAQ IBM Software Support Guide]⌠pUñyz

ΦkApnΘΣñC

http://techsupport.services.ibm.com/guides/handbook.html

ΓUNúUCΩTG

v ⁿΣn²MΩµnD

v qX]zbΩaw

v bpßΣñºeA¼ΩTMµ

D

ΓUNw∩SϕⁿJM@AH@twⁿOM⌠AhD

C

UOrΘDG

eÑ vii




http://www.ibm.com/software/sysmgmt/products/support/

http://techsupport.services.ibm.com/guides/handbook.html

Θ ΘrNϕziH∩°í÷sBµAHXbΓU

ⁿO]deñⁿOhúC

ÑerΘ ÑerΘ¼σrANϕeBWⁿOΘXC

Θ ΘrNϕ⌠wqMApG

v ⌠W

v W

v W

v sW

v t

v ⌠

% ± (%) Nϕ C Shell eú]XbΓUdñCz

t C Shell eúiαú@C

# ½ (#) Nϕ²HW]¬svñΓnJº[

eúC

viii IBM Tivoli Identity Manager: N

1 ÷≤

w∩ IBM® Tivoli® Identity Manager NCo≈uNvσ≤

t Tivoli Identity Manager sNΩTC

: Nu²ÑAyñΩT¬≤úΣLyuWíñΩTC

Nq

UCqϕµCσ≤ oGΘºß∩σ≤ ≤C

ϕ 1. q

Θ DD

2003 9 δ oµ 1

Adobe Acrobat Reader 4.05 ≤¬

DGA Adobe Acrobat Reader 4.05 ≤¬ °s Tivoli

Identity Manager σ≤CziqUC⌠o Adobe Acrobat ReaderG

http://www.adobe.com/products/acrobat/readstep2.html

© Copyright IBM Corp. 2003 1

http://www.adobe.com/products/acrobat/readstep2.html

2 IBM Tivoli Identity Manager: N

2 tD

UCtmí Tivoli Identity Manager nwΘDC

: oDOylIΩCXDCΩTiα≤sAPzßΣñNϕpAHoo≤sC

WebSphere D

íπnwΘDAα² Tivoli Identity Manager °A WebSphere

Application ServerC

Tivoli Identity Manager] WebSphere UNIX @tMwΘD

U¡

UϕNⁿXw UNIX @tBíHwΘDU¡Coú]tΣ

L⌡µDCpG⌡µ°A¼úu@ApAbP@íqúW

í°AMΩw°AANboíqúWtBwΘΩ]W[

RAMC

ϕ 2. Tivoli Identity Manager @tMwΘDU¡

@t í OΘU¡BiíHΣLwΘD

AIX 5.1¹ pGOft WebSphere Application Server

Tivoli Identity Manager °AAM

5100–03 @M≤M APAR IY36884 ≤s

C

v RAMG1 GB

v BzGt 375 MHz ≤

IBM 604e Bz

v i íG/tmp π 1 GB i

íCpG Tivoli Identity Manager n

w

WebSphere Application ServerAWAS_HOME

Nπ 800 MB i íA

/var hπ 300 MB i íC

tm 500 MB /itim45C

: wºeA²o IBM DB2 ]wC

Solaris 8² 2003 3 δºßoµíO v RAMG1 GB

v BzGt 440 MHz ≤

Solaris Sparc Bz

v i íG/tmp π 1 GB i

íCpG Tivoli Identity Manager n

w

WebSphere Application ServerAWAS_HOME

Nπ 800 MB i íA

/var hπ 300 MB i íC

tm 500 MB /itim45C

: wºeA²o IBM DB2 ]wC


ϕ 2. Tivoli Identity Manager @tMwΘDU¡ (≥)


1. ÷≤s AIX ΩTA\ http://techsupport.services.ibm.com/server/mlfixes/43/10/01to10.htmlC

2. SolarisGúFΣLí]wºATivoli Identity Manager nDb /etc/system ñπUC

MxG

v set shmsys:shminfo_shmmax = 4294967295

v set shmsys:shminfo_shmseg = 1024

v set shmsys:shminfo_shmmni = 1024

v set semsys:seminfo_semaem = 16384

v set semsys:seminfo_semmni = 1024

v set semsys:seminfo_semmap = 1026

v set semsys:seminfo_semmns = 16384

v set msgsys:msginfo_msgmap = 1026

v set semsys:seminfo_semopm = 100

v set semsys:seminfo_semmnu = 2048

v set semsys:seminfo_semume = 256

v set msgsys:msginfo_msgmax = 65535

v set rlim_fd_cur=1024

Tivoli Identity Manager] WebSphere Windows @tMwΘ

DU¡

UϕNⁿXw Windows @tBíHwΘDU¡Coú

]tΣL⌡µDCpG⌡µ°A¼úu@ApAbP@íqúW

í°AMΩw°AANboíqúWAtΣLwΘΩ

]W[ RAMC



Windows 2000 Advanced

Server

Service Pack 3 ≤s v RAMG1 GB OΘ

v BzGt 1 GHz ≤ Intel

Pentium

v i íGtemp ²π 1.5

GB i íCAUz

ú 1.1 GB i íG

– Tivoli Identity Manager °A 500 MB

\itim45 ²

– WebSphere Application Server 600 MB

Tivoli Identity Manager °AΩw] WebSphereUϕNCX Tivoli Identity Manager °AiΩw] WebSphereG


http://techsupport.services.ibm.com/server/mlfixes/43/10/01to10.html

ϕ 4. Tivoli Identity Manager °AiΩw] WebSphere

Ωw MM≤

í

AIX 5.1 Solaris 8 W i n d o w s 2 0 0 0Advanced Server

IBM DB2 Universal Database °

°A¹ M IBM DB2 ⌡

µß

v 8.1]tM≤ 2

v 7.2]tM≤ 9

U U U

Oracle 8.1.7 U U U

Microsoft SQL Server SQL Server 2000 U

:

1. IBM DB2 nDπUCi íG

v wAbz Tivoli Identity Manager Ωw²U]p /home/db2inst1AOd 1 GB íC

Tivoli Identity Manager °A²°A] WebSphereUϕNCX WebSphere Tivoli Identity Manager °Ai²°AG

ϕ 5. WebSphere Tivoli Identity Manager °Ai²°A

²°A MM≤í AIX Solaris 8 W i n d o w s 2 0 0 0Advanced Server

IBM Directory Server v 5.1]tM≤ 1

v 4.1]tM≤ 2]Windows

NT W 4.1.1

U

b AIX 5.1

U U

Sun ONE Directory

Server¹

5.1 U

b AIX 4.3.3]úO 5.1

W

U U

1. P]dUz⌠G

http://wwws.sun.com/software/download/inter_ecom.html#dirserv

WebSphere M HTTP °A Tivoli Identity Manager °AnΘ

UϕNCX Tivoli Identity Manager °A WebSphere M HTTP °AG

2 tD 5

ϕ 6. WebSphere M HTTP °A Tivoli Identity Manager °AnΘ

nΘ M≤ í

IBM HTTP Server¹ 1.3.26 WebSphere M≤ 2

:

1. bM WebSphere M≤º

eA²÷¼ HTTP °A

C

2. bO⌠ñAbw

IBM HTTP Server qú

WⁿJ WebSphere M≤A

Σñiα]At WebSphere

Application Server Network

Deployment qúC

—

WebSphere Application Server

Base²

5.0 WebSphere Fix Pack 2 ÷UCAMUC

íG

v APAR SOV62778]\U

3C

v APAR PQ75794

v APAR PQ77263


Network Deployment²

5.0 WebSphere Fix Pack 2 MUzíG

v APAR SOV62778]\U

3C

1. IBM HTTP Server O]tb WebSphere Application Server wñC

2. P WebSphere Application Server @e JDKAOΣ JDKC IBM ΣLúºWw

JDKAúbΣºCC

3. pGzOHΓΦíwM≤ 2 (WebSphere Application Server Base)ANR CD W ibmorb.jar s

WAS_HOME/java/jre/lib/ext ²UCMßbwF WebSphere Application Server Network Deployment q

úWANR CD W ibmorb.jar As WAS_NDM_HOME/java/jre/lib/ext ²UCpGzbw WebSphere

5.0 M≤ 2 ºßAw⌠≤ WebSphere JDK íAh²p WebSphere ΣHAαs

ibmorb.jar C

Σ Web s²

UC Web s²uΣ WindowsG

v t Service Pack 2 Internet Explorer 5.5


v Netscape 4.75

:

1. CookieC

2. únqP@ßqúΓWs²Ñq@CoΓÑq@OQ°

P@Ñq@ IDA]Ωiαú DC

3. pGO Internet ExplorerAⁿw Java Runtime Environment (JRE)Cs

²AMß÷@Uuπ –> ⌠⌠⌠∩AA÷@UuiÑvAMßSM

µAbⁿ Java 2 V1.3.1_04 ∩∩AMß½s≈C


WebLogic D

íπnwΘDAα² Tivoli Identity Manager °A

WebLogicC

UNIX Tivoli Identity Manager] WebLogic@tMwΘD

U¡

UϕNⁿXw@tBíHwΘDU¡Coú]tΣL

⌡µDC



AIX 5.1¹ pGOft WebLogic Tivoli Identity

Manager °AAM 5100–02 @M≤≤sC

: z 5100–03 @M≤C

v RAMG1 GB

v BzGt 375 MHz ≤

IBM 604e Bz

v i íG/tmp π 500 MB

i íCAú 150 MB

/itim45C BEA_HOME π 300 MB

íC

HP-UX 11i 2002 12 δ Quality Pack v RAMG1 GB

v BzGt 440 MHz ≤


i íCAú 150 MB


íC

Solaris 8 2002 7 δºßoµíO v RAMG1 GB

v BzGt 440 MHz ≤

Solaris Sparc


i íCAú 150 MB


íC

1. ÷≤s AIX ΩTA\ http://techsupport.services.ibm.com/server/mlfixes/43/10/01to10.htmlC

Windows Tivoli Identity Manager] WebLogic@tMwΘ

DU¡

UϕNⁿXw@tBíHwΘDU¡Coú]tΣL

⌡µDC

2 tD 7

http://techsupport.services.ibm.com/server/mlfixes/43/10/01to10.html



Windows 2000 Advanced

Server

Service Pack 3 ≤s v RAMG1 GB OΘ

v BzGt 500 MHz ≤

Intel Pentium

v i íGtemp ²π 500 MB

i íCAú 150 MB


íC

Tivoli Identity Manager °AΩw] WebLogicUϕNCX Tivoli Identity Manager °AiΩw] WebLogicG

ϕ 9. Tivoli Identity Manager °AiΩw] WebLogic

Ωw MM≤í AIX 5.1 Solaris 8 Windows 2000A d v a n c e dServer

Oracle 8.1.7 U U U

Microsoft SQL Server SQL Server 2000 U

Tivoli Identity Manager °A²°A] WebLogicUϕNCX WebLogic Tivoli Identity Manager °AAº²°AG

ϕ 10. WebLogic Tivoli Identity Manager °AAº²°A

²°A AIX Solaris 8 Windows 2000 AdvancedServer

S u n O N E D i r e c t o r y

Server¹

5.1 U

b AIX 4.3.3WAúO 5.1

U U

1. P]dUz⌠G

http://wwws.sun.com/software/download/inter_ecom.html#dirserv

WebLogic °A Tivoli Identity Manager °AnΘ

UϕNCX WebLogic °A Tivoli Identity Manager °AnΘG

ϕ 11. WebLogic °A Tivoli Identity Manager °AnΘ

í

WebLogic t Service Pack 3 7.0

]7.0.3.0

: H WebLogic Ab AIX Ww JDK

1.3.1_06 ≤sC


Σ Web s²

UC Web s²uΣ WindowsG



v Netscape 4.75

:

1. CookieC

2. únqP@ßqúΓWs²Ñq@CoΓÑq@OQ°

P@Ñq@ IDA]Ωiαú DC

3. pGO Internet ExplorerAⁿw Java Runtime Environment (JRE)Cs

²AMß÷@Uuπ –> ⌠⌠⌠∩AA÷@UuiÑvAMßSM

µAbⁿ Java 2 V1.3.1_04 ∩∩AMß½s≈C

2 tD 9

3 nΘ¡εBDMµMΦ

ínΘ¡εBDµMΦC

nΘ¡ε

UC¡εG

v busWvu∩vAí (dsml) ∩W÷@UßAb\αOW#

GC

pGznMΣu∩vAí∩º∩dA÷@U –> zA

í –> ∩Aí (dsml) CbWUΘJ dsml ⌠ß÷@U

AoApGbΣñ@ UI O¿ñΣoANπu¿\v

TºC²Oúb WF O¿ñ⌡µ⌠≤ÑCϕzß≥n⌡µY dsml

¼≤@AonDó C

µMΦkGtN dsml wb WF O¿WC

: zHPWMmAN dsml ±b UI M WF qúWC

v Tivoli Identity Manager SúΦk²zbSO°i]píñíXC

v b Tivoli Identity Manager RúAíßAiαYX@ΣúAíΩw

º¼pCYYXoº¼pAAíQRúC

v Ad-Hoc°i\αúA≤\αOtmCb\αOwñumnDvεC

ñAwwº Ad-Hoc °iΩPBnDOu#v¼AC

v bww \α WebSphere ⌠ñAϕzn⌡µí API d]⌡µz

ví API gíAziαJ Tivoli Identity Manager

°AOº¼pCpGzJHUoº¼pG

com.ibm.websphere.csi.CSIExceptionGSECJ0053EGIs (Home)enroleejb.HomeHome ALkO /UNAUTHENTICATED ...

ϕznN WebSphere w ∩Mw ñΓtmsAun÷@U

Everyone ∩ANiMoDC\ Tivoli Identity Manager wΓUñ

u² DGw qvAHo÷ib WebSphere zDx≤BΣ

∩ΩTC

v bh½zµzíµ]jqjMBsWHnJMnX

ñOΘú¼º¼pCQb HP-UX 11i W⌡µ WebLogic

Application ServerAooº¼pCúαQb HP-UX H¡xW⌡µ

WebSphere Application Server WebLogic Application Server doº

¼pC

v extensions/examples/workflow/erPersonStatusExample.html M

extensions/examples/workflow/person_modify.xml b Person Modify Start Activity

Completion Script ñC∩UC ScriptG

var person = Entity.get();var changes = person.getChanges();var result = "none";

if(changes != null && changes.length > 0) for (i =0 ; i < changes.length ; i++)


var op = changes[i].op;if(op == 1 || op == 2)

var name = changes[i].attr;if(name == "erpersonstatus")

var values = changes[i].valuesif(values[0] == 1) result = "suspend"; else result = "restore";

action.set(result);

WebLogic DMµMΦ

í WebLogic DMµMΦC

v WebLogic Ww∩µn²úm Script LkTB@C

µMΦkG⌡µUC@G

1. ⌡µúµn² ScriptG

build SelfReg

o Script s ValidateData.javaA²ú sr.war C

2. ñ≥ Jar TºC

3. sHUoΓG

itim_client.jarenroleagent.jar

qG

ITIM_HOME/lib/

G

ITIM_HOME/extensions/examples/selfregistration/sr/WEB-INF/lib/

4. N ITIM_HOME/extensions/examples/selfregistration/sr/en ²J

WebLogic íO⌠ñCo@⌡µΦípUG≤s manifest A

«N ITIM_HOME/extensions/examples/selfregistration/sr/en ²s

ITIM_HOME/extensions/examples/selfregistration/sr/WEB-INF/classes/

²CπMN ITIM_HOME/extensions/examples/selfregistration/sr/en

²sWO⌠ñA]w]AWebLogic #NªJC

5. pGznípµn²íAQ WebLogic zDxⁿV

ITIM_HOME/extensions/examples/selfregistration/sr/ ²C

Tivoli Identity Manager WebSphere ⌠¡ε

pGnb WebSphere ⌠UR≈ Tivoli Identity ManagerA[εUC¡εG


v Tivoli Identity Manager ]O@tOPΦCFKo w qTM

tmDAzúnb@ Tivoli Identity Manager OϕñA@HW

@t¼C

v b\αOϕñAúnΓu!vMuu@yvOO¿A±bP

@íqúWC

v pGP@íqúWh WebSphere Application Server ΩAuΣñ@Ω

°AiH¿ Tivoli Identity Manager O¿C

v WebSphere Application Server e\zbP@íqúWAw Network Deployment

Manager MO¿CTwoíqúπnOΘBt Mi íAHtX

Bu@qC

wDMµMΦ

w WebSphere Application Server iαo@DAΣñ]AUCDG

v bzw AIX Solaris Aµ@°AApGPw Tivoli Identity Manager

M WebSphere Application Server BaseAzNLkq CD wC

µMΦkG⌡µUC@G

1. N Tivoli Identity Manager wíszbw≈W²ñ]

w≈n 300 MB i íC

– AIX: instAIX-WAS.bin

– Solaris: instSOL-WAS.bin

2. q²⌡µ Tivoli Identity Manager wíA w Tivoli Identity Manager

M WebSphere Application Server BaseC

v wíAw∩°i íj≤i íC

µMΦkG°wCW[i íC½slwC

v wíAw∩°iⁿXAt#w WebSphere Application Server

í PQ76707C

µMΦkG∩Cí PQ76707 úTCMT

íO PQ77263C

v wºßAτñ°iAAϕzs Network Deployment

Manager zDx]°iCpAzDxo ClassNotFound

C]Σú adminconsole.ear C

iαµMΦkGúw Network Deployment ManagerCW[i

íC½slwC

v wiµíA∩ WebSphere MQ s mqm iµndΣúⁿwsC

µMΦkG°wCn WebSphere MQ sMC½wC

v ≈Ñq@]p vnc Ñq@ⁿúÑq@A

Tivoli Identity Manager wLk¿CTºiαⁿX jmsserver w

εCΣßnwiαXTºAªⁿXDXb enrole.ear C

µMΦkGN Tivoli Identity Manager wbqú@tWCú

n vnc Ñq@ⁿúúÑq@ w Tivoli Identity ManagerC

v bOW WebSphere Application Server w Tivoli Identity Manager ATº

iαⁿX jmsserver b⌡µA²ΩW jmsserver wεCziαbw

Tivoli Identity Manager ºeNwgHΓΦíε JMS °AC

3 nΘ¡εBDMµMΦ 13

µMΦkGñTº≥wCQ¿ Tivoli Identity Manager wº

ßAAHΓΦí jmsserver C⌡µUC@G

1. s WebSphere Application Server zDxC

2. ÷@U°A –> JMS °AC

3. b JMS °AMµñA∩TIW JMS °AAMß÷@UC

v ϕzb Windows 2000 Ww Tivoli Identity Manager AWebsphere Embedded

Messaging Publish and Subscribe Aí #CHΓΦíªP

MUCTºG

LkbqúW Websphere Embedded Messaging Publish andSubscribeWAS__server1 AíC 1075G÷YAíúsbAwRú

µMΦkGñTº≥⌡µCTivoli Identity Manager ún Websphere

Embedded Messaging Publish and Subscribe AíCúnAíC

v b Windows 2000 WAϕz≤s Tivoli Identity Manager Q Tivoli Identity Manager

w w Tivoli Identity Manager M WebSphere Application Server ºßAz

iαLknJ Tivoli Identity ManagerC

µMΦkG½stFt½sßiα≤Y⌠]wM

WebSphere Embedded Messaging ΣεCDCd

WAS_HOME\logs\server1\SystemOut.log AHPO⌠≤P WebSphere

Embedded Messaging ΣεCzí÷º¼pC

v ϕ Tivoli Identity Manager w WebSphere Application Server Awd

WAS_HOME\log.txtAHP WebSphere Application Server LnwOQ¿C

pGTºⁿXLkA°wP WebSphere

Application Server wó ]C

DiαXbUCaΦG

– i íC

– zⁿw ID Sv¡Cb Windows WA u@

í@tvMuHAínJvv¡C

– WebSphere Embedded Messaging Σwiαwgó Cd

mq-prereq.log AHTwOLk⌡µªndC

A\P WebSphere Application Server w÷σ≤AHA WebSphere

Application Server wiαó ΣL]C

v wí#N Tivoli Identity Manager íw²sWíw⌠CA

FTP qT≤w]p RACF M AS/400Nzí @tíwA

]]tbD≈tíw⌠ñC

NUCΩTsWD≈tíw⌠ñG

AIX

LIBPATH=/lib/aix:"$WAS_LIBPATH":$LIBPATHexport LIBPATH ;;PROTOCOL_DIR=$ITIM_HOME/lib/aixexport PROTOCOL_DIR ;;

Solaris


LD_LIBRARY_PATH=/lib/sun:"$WAS_LIBPATH":$LD_LIBRARY_PATHexport LD_LIBRARY_PATH ;;PROTOCOL_DIR=$ITIM_HOME/lib/sunexport PROTOCOL_DIR ;;

HP-UX

SHLIB_PATH=/lib/sun:"$WAS_LIBPATH":$SHLIB_PATHexport SHLIB_PATH ;;PROTOCOL_DIR=$ITIM_HOME/lib/hpux11export PROTOCOL_DIR ;;

Windows 2000N /lib/nt esúF libdelref.dll H \winnt\system32

ñC

o≤iαMb WebSphere Application Server startServer.shAMb

l startServer.sh M ScriptC

ΩDMµMΦ

Tivoli Identity Manager ⌡÷DMµMΦ]AHUUG

v ϕ Tivoli Identity Manager q 4.4 # 4.5 AtπUCTºG

com.ibm.db2.jdbc.DB2Exception:[IBM][CLI Driver][DB2/NT]SQL0601Nn½≤WPWPC

µMΦGúw Tivoli Identity Manager úq²MΩw ú Tivoli

Identity Manager Ω⌡CzHΓΦí úΩ⌡C

v ⌠Ob enRoleHiddenAttributes.properties ñⁿwCziαµY⌠

i@δC

µMΦkGq enRoleHiddenAttributes.properties úC

v uµWv° úiWL 100 r$AhLkWCX 100

r$¡ε°WbπúΘµC

µMΦkGúnΘJ° j≤ 100 r$uµWvC

v pG ITIM_HOME/bin/db2config ⁿOb⌡µAWebSphere Application Server ú

Ob⌡µñAziαNLk Tivoli Identity ManagerC

µMΦGε½s WebSphere Application ServerC Tivoli Identity

ManagerCt@ kO½s WebSphere Application ServerAs WebSphere

zDxAMßDx\αϕ½s Tivoli Identity ManagerC

v ww≤@O Tivoli Identity Manager °A wC

µMΦGpGzn Tivoli Identity Manager Nzí w≤@A

z²pΓ°APNzíºítºAAtº w≤@

C

²°ADMµMΦ

²°A÷DMµMΦ]AHUUG

v w IBM Directory Server MM≤ 1 ºßAϕzní½sAX

UCTºG

CNTR0019EGBzΦk "send" oDíº¼pCº¼pΩG32GSo½≤


µMΦGñTºCoAN½sC

WebSphere MQ DMµMΦ

WebSphere MQ ÷DMµMΦ]AHUUG

v TºⁿX WebSphere MQ εCsu]iαOb SendMessage DCQueue

Connection Factory MaεC]wⁿGOTA²u@y (itim_wf) Mu@

ym (itim_wf_pending) εCB≤úTLk¼AC

Tº∩diα]AHUUG

CNTR0019EGBzΦk "send" oDíº¼pCº¼pΩG]πΩ...

Connection Manager qΩ JMS$ITIM Queue Connection Factory$JMSManagedConnection@1010457898 Ωt¼Y½suC¼º¼pOjavax.jms.JMSExceptionGMQJMS2008GLk MQ εC

µMΦG]H AIX ⌡µUC@A ½ WebSphere MQ εCG

1. b /usr/WebSphere/AppServer ²ñAΘJUCⁿOG

deletemq.sh

úΩµWBIWεCWCzib

createMQ.nodename_jmsserver.log ñΣoA≤

/usr/WebSphere/AppServer/logs ²ñCpAΘJG

./deletemq.sh ITIM-45AIXCluster1 faith jmsserver

Tw#≥⌡µ⌠≤ mqm CpGb⌡µñA½sqúC

2. b /usr/WebSphere/AppServer ²ñAΘJUCⁿOG

createmq.sh

úΩµWBIWεCWCzib

createMQ.nodename_jmsserver.log ñΣoA≤

/usr/WebSphere/AppServer/logs ²ñCpAΘJG

./createmq.sh ITIM-45AIXCluster1 faith jmsserver

v o WebSphere MQ suyóC÷M¼≈ íMΩΘOΘiA²

toXUCTºG

AMQ7463GεCzí WAS_timwin7_jmsserver ΘxwíC

AXⁿUCTºAohTºPΩú¼¼p÷G

MQJE001G¿X 2A] 2102

µMΦGgJΘxO²A]ΘxwíoX AMQ7463 TºAHQ

CεCzíRDC

TºyqL¬NiαJo¼pCúLApGzn≥gJΘxAz

NUCGbεCzítmñ≤o W[ΘxCºßA

zε½sεCzíCAz]iNΘx¡[jCpGno

≥ AzRú½εCzíC

v εCsuo UC JMS º¼pG

MQJMS2005GLk ’<identifier>_server1’ MQQueueManager


µMΦGLCY]b∩εCzíiµß]qDsuAH

WebSphere MQ]bñOⁿ Embedded Messaging ServerP WebSphere

í≤P@í≈A@o oí ⌠⌠DCpGssuAiαN

úo oDCúLAEmbedded Messaging Server OßsuAH

ssuúOitm∩C

NzíDMµMΦ

Tivoli Identity Manager Nzí÷DMµMΦ]AHUUG

v Tivoli Identity Manager °AMNzíΣíºíµ½Ωº°A

]µV[KC ΣO@ß]VOAi τ⌠⌠sut@

íº¡OC

: bu²WAoqz¬≤TiΣVO°AMNzíoGΩTñzMC

v Tivoli Identity Manager 4.4.x Nzí²Q Tivoli Identity Manager

4.5 %HAα⌡µC 4.4.x NzíAOⁿiP IBM

Directory Server eftNzíC

µMΦGQwAí]wºßANi Tivoli Identity Manager 4.5

⌡µoNzíC⌡µUC@A ¿NzíAí]ww

G

1. ⌡µNzíAí]wwⁿOC⌡µßAt

agentnameprofile ² - ]NO@NzíWA[rΩ ″profile″CpAWindows NT ²OG

nt40profile

agentnameprofile ²ñ]t@W resource.def C

2. N agentnameprofile ²esUC²G

– Windows: ’itim45\data\remote resources’

– UNIX: ITIM_HOME/data/remote resources

: pGNzí]ww&íwgQTITIM_HOME/data/remote_resources/<agentnameprofile> ²ANúA

⌡µoBJC

3. UCΦísΦ remote resources ²ñ resource.def O⌠»z

íC

– N com.access360.enrole ∩ com.ibm.itimC

– N com.access360 ∩ com.ibmC

4. N config_remote_services ⁿO±mbUC²ñG

– Windows: itim45\bin

– UNIX: ITIM_HOME/bin

b config_remote_services ⁿOñATwwUCΦí]w JAVA_HOMEG

– WebSphere: %WAS_HOME%\AppServer\java

– WebLogic: %BEA_HOME%\jdk131_06

5. ⌡µUCⁿOG


’itim45\bin\unix\config_remote_services’ agentnameprofile

Σñ agentnameprofile Oe@BJ²WC

6. pGznPNzí]wbOi@A¼A Tivoli Identity

Manager í!C÷@U –> zA –> sWCdX\

αϕAHPNzíAí]wOsbC

ΣLDMµMΦ

ΣLDMµMΦ]AHUUG

v b AIX W Tivoli Identity Manager ApGW° WL¡xWw

¡εANLkbßCpAziQ my8chars oWQbßC²L

kQ° WL 8 r$W]p my9charss bßC

µMΦGNW¡ε¡xM° ∩ Tivoli Identity Manager ¡

OhAHεC÷≤¡OhΩTA\ Tivoli Identity

Manager Policy and Organization Administration GuideC

v DGTivoli Identity Manager Applet LkⁿJAHo u@yDC

µMΦGb Internet Explorer ñApGu⌠⌠⌠∩v∩uiÑv

Ww∩u Java 2 version for <applet>vAún∩uJava í

εev Proxy Ws²]wCpGoΓú∩ATivoli

Identity Manager Applet NLkⁿJC

pGznMΣu Java 2 version for <applet>vA Internet ExplorerA

Mß÷@Uuπ –> ⌠⌠⌠∩CuiÑvMµC

pGznMΣuJava íεevA÷@Ul –> ]w –> εxCb

uεxvWA÷ΓU Java í<>C∩ Proxies C

ATw WebSphere Application Server M≤ 2 ]wgMw Web

°AqúWC²ε WebSphere Web °AíAAwM≤CM

M≤ 2 ºßApGDOsbAM 5.0.0B5.0.1 5.0.2

WebSphere Plug-in Cumulative FixCoí≤UC]NΘJb

P@µG

http://www.ibm.com/support/docview.wss?rs=180&context=SSEQTP&q=plugin+&uid=swg24004524&loc=en_US&cs=utf-8&lang=en

v DG Tivoli Identity Manager ú W(sº¼pC

µMΦG≡MRú Tivoli Identity Manager AMßS½sANú

W(sº¼pCoO≤ Tivoli Identity Manager l² server ²U

.lok y¿CRúo .lok AMß½s Tivoli Identity ManagerC

v DGSearchMO.toString() ñ NullPointerException

µMΦGTivoli Identity Manager 4.5 úΣN WebSphere Application Server

HTTP Ñq@l@ú≈εCb WebSphere Application Server W IBM

HttpSession lP SearchMO.toString() Φkñ NullPointerExceptionC

v DGxsCL°i

pGznH PDF µí CSV µíxs°iAq°iΘX°í\αϕ∩

ñ∩tssCs²²AMßΘJWxsσ≤CiH

CL PDF M CSV µí°iCCSV °ii²CLLk±íµ@°

iCp≤CL CSV °iG

– bú °i∩ CSV °iµíC


– ÷@Uuv->utssvAMß∩utss¼v uMicrosoft Excel

í»vC

– úmMW xs°iC

– Microsoft Excel ΣL⌠≤ XLS ¬°iC

– CL∩ CLσ≤C

v DGLkPOb⌡µPBAPß@PB¼AC

µMΦG¼AπbuMµvuΩvµñCHUO

iαG

– úPB⌠≤Ω

– iµñ

– L

– ¿ß@PBΘMí

v ∩hoApG÷@UeXAMß÷@U½]ALk½]

w∩µC

µMΦG²÷@U½]Cún÷eXAMß÷@U½]C

v N Service.createEntity() Φkíp ßAΦkLkB@C

µMΦGúnb ßWoΦkCb API íñAO Service

Γ createEntity ΦkúwgYN@oC

v ϕ Tivoli Identity Manager P IBM Directory Integrator ºíRW⌠wqúPA

úXTºC

v µMΦGLC

v ÷@UusW/∩HvϕµW½]ßAS½]ñΓCpAHUNO

Lk½]ñΓG

1. nJ Tivoli Identity ManagerC

2. ÷@UC

3. ÷@UzHC

4. ÷@UsWC

5. ∩YHeXC

6. bñΓñ∩@C

7. ÷@U½]C

µMΦGu½]vúA≤oµC÷@UjMAijMsWC÷@U

RúAiqoµRúñΓC

ContainerSearch JavaScript Wµ

w]Aiq Tivoli Identity Manager uu@y]pívMuAí∩v

ñBz ContainerSearch JavaScript ExtensionCContainerSearch JavaScript Extension i

Ω@ OrganizationalContainerSearch OC

xsjMykpUG

searchByFilter(String containerName, String filter, [int scope])

pG


var locationContainer = new containerSearch();var thisLocation = locationContainer.searchByFilter("Location", "(l=Raleigh)", 2);

oO API Javadoc ≤UC²ñG

ITIM_HOME/extensions/api/com/ibm/itim/dataservices/model/domain/


4 σ≤N

íúσ≤DMµMΦC

Policy and Organization Administration Guide PuWí±AeΩTs

Tivoli Identity Manager Policy and Organization Administration Guide Púú

uWí±AeΩTsCΓºAu²ΓUñΩTC


5 ΩN

UCMΦBzªσ≤ñDG

v bΘσñALkb Microsoft Outlook Express ¬ Tivoli Identity Manager e

l≤qñD«C

µMΦkGTºMµANibTºMµñ¬D«CAz]i÷@U

TºMµñTºAbt°íñoi¬D«C


6 wD

HUO Tivoli Identity Manager 4.5 wDG

: NzíwDO²bC@NzíúO Readme ñC

v iQsWSW ACIC

v iQPAíQsWs¡OhC

v izLÑq@OTºñµ@nJG sw] Tivoli Identity

Manager C

v jM UI ñ≥bßC

v Lk ACI ú∩SwDAí¼sv]∩DDAí¼

svCzuαA¼ =uDAí¼v ACIAªvTD

Aí¼C

v pG ACI Wñµ(AACI synchronizer óC

v úDNuLonDvXiiπugvuδvíAhu°mnDvñ

úXwbW) 12:00 Γß 01:00 íC

v uAd-Hoc °i\αv>u⌡µ°iv>uU@wwPBBzvSπ

lΘC

v Ad-Hoc °i\αGLkú ÷ ACI MuACI \ivvkϕ°iC

v Ad-Hoc °i\αGbu]p⌡vñALk∩MubßvMu]wvo

ΓC

v Ad-Hoc °i\αuΩPBvñSi YΩPB\αu⌡

µv÷sCoPΣL w≤/µ÷ú@PC

v Ad-Hoc °i\αGⁿJu]p⌡vñΩΘºAN NetScape M Internet

Explorer Γ±A NetScape αtC

v Ad-Hoc °i\αPBnDLkb\αOñC

v Qh½OW]P² µsWHsW\αóABú

X⌠≤TºC

v sWsµAYuµWvµO AOúπiT

ºCoOo b÷@u½]v÷sºßCusWvϕµ]ps

WHBµúoDC

v LksW∩W° j≤ 128 r$uµvumvC

v ApplicationFactory javadoc úπC

v AS/400 NzíLk Tivoli Identity Manager 4.5 ServerC

v LkbjMLoñ⌠C

v pGzLujMv>uAí∩hv πAí∩hANLkπ

]²zLuv>uAí∩hvNiπC

v ϕGO A÷@Uu jMGvWuW@v÷sßAs²πL

C

v ujMv>uu@y]pvW÷sPΣLjMW÷sú

@PC


v YOQh]Σñú∩ ″erchangepswdrequired = FALSE″ MuUnJn≤KXHv Tivoli Identity Manager bßAnJ Tivoli Identity

Manager ≤KXC

v iq≤KXqGAPI úúIs HσrπsKX]ozαH

qll≤NªeC

v bíAQhH ≤AñΓ] SQL ó C

v ≤ Tivoli Identity Manager bß ID ] JNDI ó C

v uhPzΓUv 6 uqtz ITIM s úv@GB

J 3 ñOuRúvorA² GUI eW∩oOu úvC

v Tivoli Identity Manager weWñσr¼pC

v iµñσwAuw WebSpherev]uOvBuvoOσ

]YesBNoC

v WebSphere Wuñσwv÷siαHσπC

v WebLogic Wuñσwv÷siαHσπC

v iµ Tivoli Identity Manager ñσwASw]∩i∩w¼C

v ñσweún½µC

v ITIM_HOME/extensions/doc/applications/applications.html ñO

com.ibm.itim.apps.impl.WebspherePlatformContextFactory O

com.ibm.itim.apps.impl.websphere.WebSpherePlatformContextFactoryC

v NwbuΩΘ¼vh∩Yi@Aku∩v

úOutwqvC

v NwbuΩΘvh∩Yi@Aku∩vúO

uwqvC

v ÷@U Tivoli Identity Manager GUI ñu½sπzv÷sßA≡#MµYC

v Ñq@OßHY÷@UuvAπC

v b Tivoli Identity Manager úHñσ WAS wíñA°íWu÷

¼v÷s (″X″) LkB@C

v ≤yÑ⌠M Styles.css ²ú≤ enrole.xslANLkq GUI ΓmMr¼C

v Tivoli Identity Manager API ñwúA com.ibm.itim.apps.AuthenticationExecptionC

Noº¼p úC

v GMT íO²w¿º DSML ú nDAPtíúPC

v µGtjqMµ LDAP DB2 o VípC

v utmzsW¡zíve@tmC

v utmvπ¬½CñC

v qϕµñujMLovΘJµu⌠wqvd≥uA≤ubßvϕµC

v pGSqll≤MuLd/#vAuKXvñu≤KXvN

ΩC

v \αOíñ/∩/RúbßÑ@Ab⌡µºe²πu#vA

Bjπ@C

v DAíbßAiαOⁿu#ú [DAMLContext.executeRequest] D≈

URLvA²bßC


v buµv]úO²U¡OhßALkd½

hWC

v Tivoli Identity Manager GUI ñ#wπqKXWhC

v qKXWhßANLkAC

v w]AΩw]]NO IBM DB2M²]]NO LDAPKXHσrπ

beñC

v qϕµWΘΘJµbxsⁿwΘºe²∩ªC

v DB/2 b Tivoli Identity Manager µºßXí ΩwDC

v ITIM #ºßARACF NzíLkB@C

v Tivoli Identity Manager qll≤qñ DBCS D«µLkAϕaπC

v w] ACI @HσπC

v wíñ Exchange2000 Agent w]w²O C:\tivoli\agents\NTAgentC

v Y+uhvbßAiQ¿uRúbß APIvC

v RúHGYb⌡µwwRú@ºeNwgRúuwwRúHvA

uwwRúHvπQ¿C²OARúúsbHA

#C

v Tivoli Identity Manager API RúAíATivoli Identity Manager Θxñ

π ServiceLockNotFoundExceptionA²AíQQRúC

v u]p°iv>uw²vLkbuívµñπTC

v tjqⁿvT]50,000) ºhAiαy¿ JMS ΩwC

v jq JAHMµπt wCC

v iAíMµπt wCC

v Rúu@yl,óC

v RúAMß÷@UuvAú íC

v n¡εuⁿw Tivoli Identity Manager ΓΩTevWuΓvMu°A

Wv° C

v 6999 ºßAdsml 20 K ú \αεC

v ¿AñΓ≤ºßA@OⁿGdbumvnDñC

v ⌡µbßΩΘ¼@Oⁿ[K±ó C

v n@δΓU≤C

v b WebSphere ñ⌡µ Java 2 w AOñú Tivoli Identity Manager óC

v u°iv>u⌡µ°iveW ″Enter″ ΣQ°u°vúOuTwvCbNetscape 4.75 ñA]oDπnJeC

v ∩MúeAΩΘtmy¿óC

v uHv½≤±mWhñC

v s@sñΓo C

v pGbn≤KXípU nJo OANπúT

TºC

v bñAπ/nDí#µíC

v jqPnJAXunJó vTºC

v extensions/doc/applications/applications.html ≥F 5]íOC

6 wD 27

v eXhnDAJI±bu]pu@yvC

v hHπWPAπHMµNⁿGICHMµO

πW AHmWMπWúPHAN#gLC

v WebSphere l\αºßATivoli Identity Manager W\α¿LkC

v sTºt Tivoli Identity Manager Windows WebLogic wíñl

r$C

v qU Netscape s²ñ°AtMµuíevLkTπC

NetScape úΣ • C

v uHR ú v]u@yO/½Hh½C

v IBM Directory Integrator iP Tivoli Identity Manager ñuBΓ≤vftA

H≤s Tivoli Identity Manager ñA² IBM Directory Integrator Lkδ

≤ DistinguishedName]pñΓBz¼º⌠≤#≤C

v ∩ DSMLv2 JNDI siµ IBM Directory Integrator suAú úT

GC

v bu /°w¿nDvñAQnDWπbuD«vµñC

v °iApGS∩uAívANπúTTºCTºú

∩u]wvúOuAívC

v iµuΩú vsuSτúTRW⌠wqC

v W[ enrole_data ϕµ íjpC

v IBM Directory Integrator Ωú AíLRW⌠wqú Gu

H, schema.[namingcontexts] Wwv

v #Aϕπ Tivoli Identity Manager qll≤qñ]tvC

v uWíuRúHv@ñAúTⁿyC

v uw¿wveú÷@UuU@Bv÷sA²÷súsbA¿w

T÷sOu¿v÷sC

v wßA πHjMo í ó C

v b AIX W Netscape s²Ñq@ nJo í Ñq@OC

v πΘσ°ih≤e°iC

v DistinguishedName Javadoc qYú ″enRole″C

v Javascript entity.getProperty(″erPassword″) S#KKXC

v u!tmveσr¼úMC

v iµwA]σr¼-pbYR ULkoMíC

v ″Installing Tivoli Identity Manager″]bw Tivoli Identity Manageroyl

σσσkúTC

v uAñΓv LDAP Lo°≤Lk]t µCpG LDAP Lo°≤ñt

µAsWHßNúⁿúuAñΓvC

v LifecycleManager Javadoc úπC

v bu@y]pñßFhíºßANLkAsHMµC

v lok ITIM.sh Lk⌡µC

v ϕΘxU UjAWindows ñ ″log4j.appender.Logger.MaxBackupIndex=10″ úú ″10″ CF ″2MB″ ¡εAuN itim.log ∩gwC

v °µ$WúΘµC


v LksW°híC

v LksW°hWAB°hWúΘµC

v b\αOñALTPA Oß≥nJó C

v ujεiÑvbs²ñú C

v b HPUX ¡xWAϕ Tivoli Identity Manager b WebLogic ñ⌡µAXO

Θ¬ípC

v ϕuAñΓvwqWhFúTykAOⁿTºúMíA≤

íC

v u∩bßv⌠úΘJKXA²WS⌠≤KXµC

v ∩hAMß÷@UeXM½]ºßA#½]∩µC

v N erPersonStatus ∩ú@ºßA#°bßC

v h½µzb Tivoli Identity Manager úñjMAY

com.ibm.itim.webclient.search.SearchUtility.bindToSession ñú PtrC

v LkPW wqh½¡OhCoO] Tivoli Identity Manager

º LDAP ñ erGlobalIdAΩWNC@h@CpG

PW wqh½hAß∩≤oípiαoVcC

v u103K bß 25K sv uMVS RACF Nzí RECONvLkb Tivoli Identity

Manager 4.5 í°AW¿nDC

v pGnJΘJKXúTANetScape s² 4.75 #uúϕnDvTºC

v b Netscape 4.75 ñAqs²Ñq@ iµ Tivoli Identity Manager nJ

AXuÑq@OvTº]pG½NiHC

v b Netscape 4.75 ñAMµ-AHLkeu>wq¡Oh>sW

>Aí>A¼v

v b Netscape 4.75 ñApGú≤⌠≤ ITIM sAeWNúsu

>zbßuITIM svvµ

v ⌡µ Ad-Hoc °iANetscape s²jqú Acrobat Reader G

s²°íAHúoú÷¼o°íC

v pGíD°ANetScape s²NLkππuITIM sívCíí

IA] NetScape nLk ΣσrΘµC

v u.úvvTΘµC

v jMπuΣú⌠≤GvTºAB ACI TεjMC

v RúuBP vXu#≥vvTºAPΣLu#≥vvTºúú

@PC

v Novell Netware Nzíσ≤Síp≤tmuAívϕµ Σh½u≡¼

cvu⌠wqvC

v Tivoli Identity Manager °A÷≈íYX NullPointerExceptionC

v ϕAíS]wAcom.ibm.itim.dataservices.model.domain.AccountTable c

l API ñX NullPointerExceptionC

v uDAívhAX OBJECT_NOT_FOUND º¼pC

v uWíS]t²uW@vC

v í JavaScript uWíπµíPΣLíeµíúPC

v uWíGuw¿nDΩvqñúTµ IDC

6 wD 29

v uWíGn≤suFKXHvMuKXLd/#v÷ΩTC

v Oracle u50K DSML ú vWσC

v Oracle .ddl t µAo µ SQLPLUS &ío DC

v Tivoli Identity Manager wí≤s ORACLE_JDBC_DRIVER_PATH WebSphere

⌠C

v KXú Lkú tSϕr$KXC

v KXhGul≡vAíRd≥Lkoºw@C

v wquKXvhºßAúTaIµuKXhv\ivC

v KXPBGúTatmu DNvA]SXTºA@u

O@hSB PasswordSynchServlet º NullPointerException ΘxTºC

v umnDveNµ@Hu//Rúvπ¼uh

vúOuµ@vC

v H ACIGϕ∩vΩT²∩voDAeW

π C

v H ACIGpG±∩LHABo L@A≥AϕπΩO

L@ºeµ÷ATºNπ/úTΩCpG÷

¼Ñq@AsÑq@AMß½s⌡µ@ANπTT

ºC

v PersonManager.getPeople() API Lk⌡µl≡hjMC

v w∩ 30K ANh≤ Tivoli Identity Manager M Windows

2000 bßAfΘxOmC

v process.auditEvent() LkbuflvñπΩC

v process.id JavaScript #úTC

v jq dsml ú OºßABzLk#¿C

v ″parameters.eruid[0]″ ] Scripting óC

v h UIGúAíΩMjM@C

v ITIM #ºßARACF LkB@C

v pGb Tivoli Identity Manager b⌡µ½stm Tivoli Identity Manager ΩwA

Nb≤KXo ≡CBπu#Q¿zu¡zívbß

KX≤CyßA½APzu¡zívzpvoC

v ]hb⌡µPnDB≤⌡µñ¼AGnJó Coíu

b mw¿nDípUo C

v RequestManager APIGonDmnD] SQL º¼pó C

v usW/∩HvMusW/∩±HvϕµWu½]v÷sLk½]

ñΓC

v utm > Ld#vWu½]v\αLk⌡µuLdwqívC

v QuΘv½]µtΘANΘ]µδ≈@ΘA

úOµΘMíC

v bß>≤KXGtúBzubß ACI KXv\iv]YugJvvO

DENYA C


v uKXvWu°v÷sLk°÷¼uKXvC÷@U

Wu°v÷sßAªoºΩ@PuMúv÷s\αPA]

ªuMúu@KXvσrµñΩΘJC

v b Acrobat 5.x ñALkw]W xs Ad-Hoc °iC

v wnD hbßAbmnDMµñú VcGC

v wHαeApGbαeo ºeRúa OUANqΣl OU ñRú

HCHdbBABOⁿAϕTºC

v wuvhApGbh¿ºeRúñΓANPuúv

¿ hAúXAϕC

v jM -> Lo°≤jMGnjM¼ñ#tijMs∩uA

í∩hvC

v jMGµWjMΣúHC

v ÷¼ Tivoli Identity Manager Dns²ºß÷¼ujM/sWv°íC

v Weblogic µn²]m selfRegGúDuΩnΘv² ’en’]b ’sr’

²ºU≤ Web íO⌠ñAhNó C

v ϕ DSML ú Aµn²≡MεC

v ⁿJ°AApGzLs² nJAN#UCGu°A⌡µⁿño

F Servlet.Engine.Transports : 2981]

<ERROR:com.ibm.itim.webclient.logon.LogonMediator> RemoteExceptionvC

v Aí∩h ACIGpG∩@DAB÷@UhAµNú

π¬C

v uAí∩hvTºúTA%H∩AJ≤@C

v uAí∩h ScriptvTºúTA%H∩AJ≤@C

v SelfRegistrationManager oX SchemaViolation °iC

v #]wAuπKXWhv]t ″true″C

v jqPnJO]wo UCGXtmº¼pABí°

AñX CPU jΘC

v b°ñAAd-Hoc °iñpr¼±jAα²H\¬°iC

v µwHAú h½C

v Q¿ Tivoli Identity Manager úwºßAú ÷Lk ú²

TºC

v YuAñΓ ACIvNu∩@v] DENYAi∩uAñΓvC

v WebLogic WuxWwv÷siαHσπC

v ²eípb URL http://host:port/tenant/main.jsp ºU Tenant zuπAwúA

ípC

v Nzíúúsb URL AAíqT#úTºC

v u@δΓUvñσrºC

v ⌡µh≤ vTP GUI íµjqbßAo OC]iαO

] DB2 APP_CTL_HEAP_SZ -pC

v Y WebSphere w tmATivoli Identity Manager API LkB@C

v ϕuQ¿ve⌠bDeßATivoli Identity Manager w/#@

ϕⁿC

6 wD 31

v Tivoli Identity Manager 4.5 wí]WebSphere LkN Tivoli Identity Manager

íw²sWíw⌠C

v Tivoli Identity Manager weú°óCbuⁿw WAS M HTTPServer w

mveñ÷@UTwßAúNJI #uTivoli Identity Manager wv

eC

v ϕ WAS wó AX Tivoli Identity Manager wTº]túT

σk -″WAS install might failed″C

v Tivoli Identity Manager #úOd Java w ñw úC

v Tivoli Identity Manager #úsq Jar C

v Tivoli Identity Manager #úOd enRoleAuthentication.properties ñ Factory ]

wC

v Tivoli Identity Manager #úBz Proxy °AC

v b WebSphere zDxñnOATivoli Identity Manager πC

v uTivoli Identity Manager qll≤qvt½úΩTAπF HTML

WC

v uµ÷# vs²πMv 150 AíC

v °ΓUGJ÷OⁿTºΣΩTC

v wú]w IBM Directory Server DB2 Ωwπ(C

v úΣNzíP Tivoli Identity Manager °AºíV SSL OC

v LkzL Java Script obßKXC

v UI qGtúBzujMεp≤ujMπvv∩]@NujMε

v°PQ∩C

v #∩usGv∩A²s UI qGC

v íú¼ATivoli Identity Manager UNIX wNLkδ²ñ≤C

v N UNIX wíq CD stC

v ∩u°vATIM wíutmveñNX/ΦσyÑ⌠º#

uO/v÷sσrC

v Weblogic ñw# Tivoli Identity Manager 4.3 -> 4.5G#≤s SSL H

CAKeyStore ⌠A]PuyY½w z]#HHú≈xswLkn

DßπvC

v Tivoli Identity Manager 4.4 -> 4.5 #GΘxñ HTTP TºC

v N Tivoli Identity Manager 4.3 UNIX °A# 4.5 ºßA LkRúw@o

I T I M _ H O M E / b i n / a i x , s o l a r i s , h p u x ²Cq²]úOs

ITIM_HOME/bin/unix ²ñ⌡µ ScriptAPhóC

v DSML ú ⌡µΩ≤πOD« dnAúOHW

dnC dsml ú ≤sHΩAC@w∩H½≤úπH

OnDCnDΩThπQnD dnC

v iNu± ACIvuívµ%¬g\ivC²b

±AoLíµiwqC

v NτdsWuqll≤vµC

v bvTh]p 3000 nDíALkπu°mn

DvCΘxñπOTºC


v ∩ñΓAYñΓWµdAúπiTºC

v Web íO enroleCO itim ∩C

v Weblogic OGpGbsWjq]HR ú ½sπzHMµAN

Xg]ΘxñX NotSerializableExceptionCWeblogic Service Pack SP4

]\iHoDC

v w Tivoli Identity Manager ºßAWEMPS AíLkC

v Windows 2000 NzíbßeGunJv\αLkB@]]º¼p

π °íC

v uu@y]pívúBzu@y ACI \ivC

v Tivoli Identity Manager #ºßAu@yπ@Lk⌡µC

v u@y clientactivitytimeout ]o-CAHiµ d]qúbß≤

úbßo OC]zNw] 60 ∩ 2400 ≤¬C

v H@u@yqGΓzAí úπiαπ

PC

v ∩DOíUHºu@y Script ºßAb LDAP ñ≤≥ªH

½≤CªuvT JavaScript ∩C

v u@y]píú0\q START α½ ENDC

v u@y]píGNíµ ΣLIAα½°≤QMúC

v N q∩≤A ⌡µhIµAu@y( XuOΘú

¼vC]W[OniHoDC

v ″AND″ Xu@yAu⌠≥W@ºΩC

v buu@y¼AveñAzLuHR ú v≤H BU AπO

uΩ≤v¼AúOu BU ≤v¼C

v ⁿw°≤O false Au@y UNTIL jΘ⌡µC

v tqll≤qó u@y]±ΦíA]tm SMTP °ALó

AbflñπuQ¿vC

6 wD 33

². N

σ≤Yw∩ IBM bⁿΩúºúPAoFbΣLΩañAIBM úúo

ú≤ñúUúBA\αCóϕa IBM NϕAHo

ϕaeúúMAº÷ΩTCo≈σ≤bú IBM úBíAA

úϕtuα IBM úBíACun#I/ IBM z]úvA

⌠≤\αϕúBíAúiHN IBM úBíACúLA⌠≤

D IBM úBíAAµtd@⌠Mτd⌠C

o≈σ≤íDDeAIBM iα ΣMQMQ0Cúo≈σ≤úNϕ

úoMQvCziHúXvdA τHG

IBM Director of LicensingIBM CorporationNorth Castle DriveArmonk, NY 10504-1785U.S.A.

pGO÷$ (DBCS) ΩTvdAóbΩ IBM z]úíA

úXvdA τHG

IBM World Trade Asia CorporationLicensing2-31 Roppongi 3-chome, Minato-kuTokyo 106-0032, Japan

UCq¿úA≤Ω°PϕakΦΣLΩaGInternational Business

Machines Corporation) uypzúXAúú⌠≤tºOAΣ

ñ]ABú¡≤úH,WwBiSwºA⌠tOCab

Swµ÷WAú0\útOA]Aonú@wAXzC

oΩTñiαNWLΩWC]AIBM wqFNqß

eJsñCIBM H∩iM/≤XúúM/íAút

µqC

o≈ΩTñú⌠≤D IBM ⌠uAIBM úo⌠úOCo⌠

úΩúO IBM úΩeApGno⌠ΩAz

µßIC

IBM oHUAϕΦíG+zú⌠≤ΩTAL∩ztdC

pGí≥vHF (i) bOíMΣLí]]Aíºíµ½

ΩTAH (ii) ¼µ½ΩTA]n÷ΩTAóG

IBM Corporation2ZA4/10111400 Burnet RoadAustin, TX 78758U.S.A.


oΩTiAϕ°oAbYípUIOΦoC

IBM ≥≤Φº IBM ΩívX]⌠≤PÑX°AúΩTú

víPΣAvΩC

Bt⌠≤αΩAObⁿε⌠UoXAPbΣL@⌠UoX

GAiαjtºCqΩObotWAúOPΣLqt

WqΩ@CAqΩiαOzL[Hw⌠AΩGúú

oPCσTΣSw⌠AΩC

úºD IBM úΩTAúAΣoGnΣL&DC

IBM #LoúA]LkToD IBM ú⌡µαBe⌠≤∩

úΣLDiO LC÷D IBM úαDóúC

UCⁿJO International Business Machines Corporation bⁿΩ/ΣLΩa

UG

AIX

DB2

IBM

IBM x

SecureWay

Tivoli

Tivoli x

Universal Database

WebSphere

Lotus O Lotus Development Corporation / IBM Corporation UC

Domino O International Business Machines Corporation M Lotus Development Corporation

bⁿΩ/ΣLΩaC

MicrosoftBWindowsBWindows NT M Windows xO Microsoft Corporation bⁿΩ

/ΣLΩaC

UNIX O The Open Group bⁿΩΣLΩaUC

Java™ MH Java ≥ªMxAO Sun

Microsystems, Inc. bⁿΩMΣLΩaUC

ΣL&qBúAWAiαOTAxC


(HñσrAσrASϕº

CC

efΣ Windows 2000 Advanced Server 4, 8

Σ, p vii

σ≤

≤Uuπ vii

÷ v, vi

uWs vii

IBM DB2 vi

IBM Directory Server vi

IBM HTTP Server vi

Oracle vi

SQL Server 2000 vi

Sun ONE Directory Server vi

Web Proxy °A vi

WebLogic Application Server vi

WebSphere Application Server vi

WebSphere Embedded Messaging Σ vi

e¡fnΘ

°A

IBM HTTP Server 6

WebSphere Application Server Base 6

WebSphere Application Server Network Deployment 6

σ≤ v

eCf°A

nΘ

IBM HTTP Server 6



@t

Σ AIX h 3, 7

Σ HP-UX h 7

Σ Solaris h 3, 7

Σ Windows 2000 Advanced Server 4, 8

eKf≤Uuπ, σ≤ vii

eEf÷σ≤ v, vi

¡ε

P@íqúW UIBWF O¿ 13

PΦ@t 13

h WebSphere Application Server Ω, P@íqú 13

eQfy

v

≤Uuπ vii

D vii

÷ vi

uWs vii

IBM DB2 vi

IBM Directory Server vi

IBM HTTP Server vi

Oracle vi

SQL Server 2000 vi

Sun ONE Directory Server vi

Tivoli Identity Manager v

Web Proxy °A vi

WebLogic Application Server vi

WebSphere Application Server vi

WebSphere Embedded Messaging Σ vi

, Solaris 4

tm


Tivoli Identity Manager 12

eQ@f≥D

s², uΣ Windows 6, 9

AIX 3, 7

HP-UX 7

IBM DB2 5

IBM Directory Server 5

IBM HTTP Server 6

Microsoft SQL Server 5

Microsoft SQL server 8

Oracle 5, 8

Solaris 3, 7

Sun ONE Directory Server 5, 8

WebLogic 8



Windows 2000 Advanced Server 4, 8

Θr viii


Θr viii

eQGfÑerΘ viii

eQfD, ñ vii

eQCfpΣ vii

eGQ¡f[ v

AAIX, Σh 3, 7

HHP-UX, Σh 7

IIBM DB2

WebSphere Application Server 5

IBM DB2 σ≤ vi

IBM Directory Server

σ≤ vi

IBM HTTP Server

σ≤ vi

nΘ 6

JJDK, P WebSphere Application Server @e 6

MMicrosoft SQL Server


Microsoft SQL Server, WebLogic 8

OOracle

WebLogic 8


Oracle σ≤ vi

SSolaris

Σh 3, 7

Tivoli Identity Manager 4

SQL Server 2000 σ≤ vi

Sun ONE Directory Server

σ≤ vi

IBM Directory Server 5

WebLogic 8


TTivoli Identity Manager

tm

WebSphere Application Server ¡ε 12

WWeb Proxy °A

σ≤ vi

Web s², uΣ Windows 6, 9

WebLogic

Σh 8

Microsoft SQL Server Σh 8

Oracle Σh 8

Sun ONE Directory Server Σh 8

WebLogic Application Server σ≤ vi


nΘ

Σ JDK 6

tm

Tivoli Identity Manager ¡ε 12

IBM DB2 Σh 5

IBM Directory Server Σh 5

Microsoft SQL Server Σh 5

Oracle Σh 5

Sun ONE Directory Server Σh 5

WebSphere Application Server Base

nΘ 6

WebSphere Application Server Network Deployment

nΘ 6

WebSphere Application Server σ≤ vi

WebSphere Embedded Messaging Σ

σ≤ vi


íX: 5724–C34

Denmark by IBM Danmark A/S

GI11-2741-00

IBM Tivoli Identity Manager:...

Documents

Transcript of IBM Tivoli Identity Manager:...