Tivoli Identity Manager -...

Tivoli® Identity Manager

"P5w

f> 4.6

G152-0647-03

��

Tivoli® Identity Manager

"P5w

f> 4.6

G152-0647-03

��

"b:

Z9C>JO0d'VDz7.0,kDAZ 63 3D=< B, :yw;PDE"#

Z~f(2005 j 6 B)

>f>JCZ Tivoli Identity Manager V4.6(z7E 5724-C34)0yPsx"PfM^)f,1=ZBf>PmPyw

*9#

>f>zfK G152-0647-02#

>z7|, Adaptx(;vbQD XSLT &mw)#(C) 1998-2002 Keith Visco and Contributors.

© Copyright International Business Machines Corporation 2003,2005. All rights reserved.

?<

Z 1 B XZ>"Pf . . . . . . . . . 1"P5w^)fz7G< . . . . . . . . . . 1>"PfPDBvZ] . . . . . . . . . . . 1>"PfP;FvD~qw&\ . . . . . . . . 2;FvD"f;DrOzDJdw . . . . . . . 3;cICTP4^)JbD APAR . . . . . . . 5vfoM`XE" . . . . . . . . . . . . . 6

Tivoli Identity Manager b . . . . . . . . . 6X8m~z7vfo . . . . . . . . . . . 8`Xvfo . . . . . . . . . . . . . 10CJ*zvfo . . . . . . . . . . . . 10

Z 2 B 2~Mm~hs . . . . . . . . 11#9'VD&\ri~ . . . . . . . . . . . 11Java KP173(JRE)M IBM Development Kit forJava hs . . . . . . . . . . . . . . . 12UNIX hs . . . . . . . . . . . . . . 12

AIX hs . . . . . . . . . . . . . . 12Solaris hs . . . . . . . . . . . . . 13Linux hs. . . . . . . . . . . . . . 14

Windows hs . . . . . . . . . . . . . 14}]bhs . . . . . . . . . . . . . . 15?<~qwhs . . . . . . . . . . . . . 17WebSphere Application Server Base M?p\mwh

s . . . . . . . . . . . . . . . . . 18IBM Tivoli Directory Integrator hs . . . . . . 19\'VD Web /@w . . . . . . . . . . . 19Crystal Report z7 . . . . . . . . . . . . 20\'VDJdw6p . . . . . . . . . . . 20

Z 3 B Q*D^F"JbMd(=( . . 21z720M}%DJbMd(=( . . . . . . . 21Tivoli Identity Manager ^F . . . . . . . . . 22Yw53JbMd(=( . . . . . . . . . . 22IBM Tivoli Directory Integrator JbMd(=( . . 23WebSphere MQ JbMd(=( . . . . . . . 24

JdwM~qJbMd(=( . . . . . . . . 25}]M|{JbMd(=( . . . . . . . . . 27/@wJbMd(=( . . . . . . . . . . . 29(fJbMd(=( . . . . . . . . . . . 29Tivoli Identity Manager C'SZJbMd(=( . . 30_TJbMd(=( . . . . . . . . . . . 32mI(JbMd(=( . . . . . . . . . . . 33?<~qwJbMd(=( . . . . . . . . . 34d{JbMd(=( . . . . . . . . . . . 35

Z 4 B D5|B . . . . . . . . . . 37vfojb|D . . . . . . . . . . . . . 3720kdC8OJb0d(l( . . . . . . . . 37{"MgSJ~Jb0bv=8 . . . . . . . . 38E"PDJb0bv=8 . . . . . . . . . . 39zJ/Jb0bv=8 . . . . . . . . . . . 54Adobe Acrobat Reader hs . . . . . . . . . 55

Z 5 B 203qM^)| . . . . . . . 57203q . . . . . . . . . . . . . . . 57i$^)|6p . . . . . . . . . . . . . 57q!^)| . . . . . . . . . . . . . . 58

=< A. 'VE" . . . . . . . . . . 59Qw*6b . . . . . . . . . . . . . . 59

Qw>X53rxgODE"PD . . . . . . 59QwrXx . . . . . . . . . . . . . 59

q!^) . . . . . . . . . . . . . . . 60*5 IBM m~'V. . . . . . . . . . . . 60

7(JbD5q0l . . . . . . . . . . 61hvJb"U/30E" . . . . . . . . . 61r IBM m~'Va;Jb . . . . . . . . 61

=< B. yw . . . . . . . . . . . . 63Lj . . . . . . . . . . . . . . . . . 64

© Copyright IBM Corp. 2003,2005 iii

iv IBM Tivoli Identity Manager: "P5w

Z 1 B XZ>"Pf

6-9C6IBM® Tivoli® Identity Manager "P5w7#>"P5wD5|,PC Tivoli

Identity Manager "PfD<uE",|(nB"<DE"(}g,JbMd(=()T

09!ICT#

":>vfoPDE"+fz>z7d{Dvfor*zozPDE"#

"P5w^)fz7G<

TB^)fz7G<mPvKTC"P5wf>wvDyP|D:

m 1. ^)fz7G<

UZ wb

2005 j 6 B "<DZ~f

>"PfPDBvZ]

TBG>"PfPDBvr|D}D&\:

v )&_T#b

a)!n,TZ5Ja;|D.0i4I_T|Dx<BDJ'|D#

v <v - <k

Z Tivoli Identity Manager bTMzz73.dF/E",|(z|\ZYwMfr

DE""$ww}L"~q"_T"yP_"VE>Mi/G+#

v z|\Zfr

Jm\m1T/%"B~,T09(#X4"zDB~r;BTli5VT//#

z|\ZfrJm\m1+frkw* Tivoli Identity Manager B~a{KPDz|

\ZYwX*p4#

v $wwLv?

mSKyZ$wwLD_T5),IT*Nq(}g,1SJ'&m"_T|D"

-wrm]|D)wC(F$wwL#gSJ~#eJma_(F">X/M{C

6p#$wwLEH6.VJmTH$1dKPDxL|_DEH6,4P\kk

sHU#|D#

v }4PNq

mSKTB&\:

– (FK<0E"ks(RFI)ZcT43'VD5qwL

– `vNqnMNqnVi

– Nqa>

– +Nqn*"Ad{K

© Copyright IBM Corp. 2003,2005 1

– +Nqnx(T@9d{KCJ

– tC$w%SU=T8>$w%GqI&jI

– tCOfT/(T>*Nqn

v J'II

IT8( JavaScript E>6pJ'-wZdDJ'yP_#

v gSJ~JV

JV&\+`FDgSJ~(*O"=;v(*P,T8(D1ddt+C{mD

(**"xC'#

v =S1!(f

=S1!(fa)G$wwLn/D`XE",|(J'0K1"_T"Z(")

&Yw"K<M\x"~q"CJXFnT0-w3FE"#

v m])x"$wwLMd{&\PDIluTv?#

v d{&\,|(\m1YwsF"G<O$"TD\&T0 Tivoli Identity Manager

~qwMJdw.dD+r2+WSVc(SSL)O$#

v T=S=(OD20'VMX8&CLrD|D,gByv:

– Z 11 3D:#9'VD&\ri~;

– Z 11 3DZ 2 B, :2~Mm~hs;

v JObPDxE"i/M<u+7TDd{|D#

>"PfP;FvD~qw&\

;Fvb)&\#I\9Pd{;FvD&\ZK"4Pv#PX|È",kND

IBM Tivoli Identity Manager Information CenterT0 /extensions/API ?<PD

deprecated_list.html D~#

v ;Fv9C CA_CERT_DIR tT#IBM Tivoli Identity Manager Information Center

M*zozP9CKtTD>};}7#

bG9C;FvtTD>}od:

env.put("com.ibm.daml.jndi.DAMLContext.CA_CERT_DIR", certDirLocation);

*|};FvtTD9C,kjITBNq:

1. }%|,Z;vN}k CA_CERT_DIR V{.`,DP#}g,}%;vT>D

P:

Hashtable env = new Hashtable();env.put (Context.INITIAL_CONTEXT_FACTORY,"com.ibm.daml.jndi.DAMLContextFactory");env.put(Context.SECURITY_PRINCIPAL, serviceUserName);env.put(Context.SECURITY_CREDENTIALS, servicePassword);env.put("com.ibm.daml.jndi.DAMLContext.CA_CERT_DIR", certDirLocation);env.put(Context.PROVIDER_URL, providerURL);env.put("com.ibm.daml.jndi.DAMLContext.URL_TARGET_DN", serviceDN);DirContext damlContext = new InitialDirContext (env);

2. *Z9C Java |{?<SZ(JNDI)m])xLr1?p2+(E,k7#Z

JNDI Lr9CD Java ibz(VM)ENbPQ-20Kd"Jdw$iDPD

Dd"_()p_)$i#|d;M WebSphere Application Server 9CD Java

VM I\`,,+";Gs_#1!DENb76{G JRE\lib\security\cacerts,d

2 IBM Tivoli Identity Manager: "P5w

P JRE G}Z9CD Java KP173D;C(}g WAS_HOME\java\jre)#b

IT(}9C WebSphere Application Server IBM Key Management 5CLr

(ikeyman)GUI $_r Java 2+WSV)9(JSSE)keytool 5CLr

(keytool)4jI#PX|È",kND IBM Tivoli Identity Manager Information

Center#

v j)0CJXFE"(ACI)1Q-|D*0CJXFn(ACI)1#

v OBD JavaScript )9

OBD JavaScript )9C4'VT0f>D Tivoli Identity Manager,&1vCZZ

( $ w w # O B D J a v a S c r i p t ) 9 D ; ) X ( Z J ' D & \ , | (

getService()"isAccountDataChanged() M getAccountParameter() ;\&CZ;kJ'

`XDYw$ww#OBD JavaScript )9Z+4D"PfPI\;Fv9C#

v gSJ~#e(F

gSJ~#e(F;O*G;FvC4(F(*#eD=(#PX9C<NC'g

f(GUI)(F IBM Tivoli Identity Manager (*#eD|È",kND IBM Tivoli

Identity Manager Information Center#

v w*$w%/,Z]jGDJ4x

;Fv9CJ4xw*$w%/,Z]jG#

v enRole2ldif.properties D~

;Fv9CKtTD~#|T0CZ enRole 3.x = 4.4 D(F#

v 3) JavaScript )9}C

– OBDTs`M

TZ JavaScript )9,;Fv9CKTs`M#&C9CBD JavaScript )9(}

g Process M Activity)M`X}] JavaScript#(i;*+OBD JavaScript )

9CZ(F$ww#

– Enrole.getAttributeValue()

v 1?pZ;v6LM'zO1,Service.createEntity() =(+;\$w#\bZ6LM

'zO9Cb)=(#` Service D=v createEntity =(Z API ozPyjG*

;Fv9C#

v ;Fv9C signIn =(#;Pf;=(#ExternalLogonServlet `wC LogonMediator

PD signIn =(#

signIn =(h* Home bean PD getLogonInfo =((+VZ2;FvbV=()#

;FvD"f;DrOzDJdw

;FvrZ3)f>Dz7Pf;KZ 4 3Dm 2 PD Tivoli Identity Manager Jdw#

sxf>Dz7'V3)Jdw#b)"P5w"<1CmGnBD#JdwD10

PmI\;,#

Tivoli Identity Manager ~qw<uD5b|, Tivoli Identity Manager 5)DJdw

i~DD5#ZTB Web >cR=JdwD5:

http://publib.boulder.ibm.com/tividd/td/tdprodlist.html

Z 1 B XZ>"Pf 3


Z A-Z z7PmP%w I V{,;s%w IBM Tivoli Identity Manager 4S#

ZTB Web >cR= Tivoli Identity Manager Jdw:

http://www.lotus.com/services/passport.nsf/WebDocs/

Passport_Advantage_Home

m 2. ;FvDrf;DJdw

z7DJdw ;FvD?j53f> \'VD?j53f>

ACF2 6.3 6.4,vICw~q<(#

Cisco ACS — 3.2

Clarify 8 12

CLI-X yPf> ^#Xk9C IBM Tivoli

Directory Integrator z7a)

D,Sw4(/I#

Documentum — 4.2

Entrust — 6"7

GroupWise — 6.5

HP-UX 10.20"11.0 11i"11i V2

HP-UX NIS 10.20"11.0 11i"11i V2

IBM AIX 4.3"5.0 5.1"5.2"5.3

IBM OS/400 V4 V5

IBM DB2 UDB 7.x 8.1

IBM Informix® 7.3 9.2

IBM Lotus Domino (Windows) 4.x"5.x 6.0"6.5

IBM Lotus Domino (AIX) yPf> POKTJdwD AIX f>

D'V#

IBM RACF(z/OS) OS/390 2.9"2.10 M zOS

1.1"1.2"1.3

1.4"1.5"1.6

IBM Tivoli Access Manager — 4.1"5.1

IBM VMS 5.x"6.x"7.0"7.1 7.2"7.3

LDAP-X yPf> ^#Xk9C IBM Tivoli


D LDAP ,Sw4(/I#

Linux(x86) RedHat 7"8"9 M SuSE

7"8"9

RHEL 2.1"3.0 M SLES 9

Microsoft Exchange 5.5 2000 M 2003,\ Windows

AD Jdw'V

Microsoft SQL Server 6.5"7.0 2000

Microsoft Windows 2000 M 2003 I Windows AD Jdw!z

Microsoft Windows AD — 2000"2003#\ Windows AD

J d w ' V # P O K T

Windows 2000 JdwD'

V#


http://www.lotus.com/services/passport.nsf/WebDocs/Passport_Advantage_Home


m 2. ;FvDrf;DJdw (x)

z7DJdw ;FvD?j53f> \'VD?j53f>

Windows Local — 2000"2003"XP#f;CZ

>XJ'\mD Windows NT

zmLrD9C#

Microsoft Windows NT 4.0 ^#POK'V#

Novell NDS eDirectory — 8.7

Oracle Database 7.x"8.x 9i"10g

Oracle ERP — 11i

PeopleTools — 8.18"8.19"8.43"8.45

RDBMS-X yPf> ^#Xk9C IBM Tivoli


D}]b,Sw4(/I#

Remedy — 5.1

RSA ACE/Server 3.x"4.x"5.0"5.1 5.2

SAP R/3 — 4.6c"4.6d"6.10"6.20

SAP Enterprise Portal — 6

Siebel 7.5 ^#Xk9C IBM Tivoli


D Siebel Web service ,Sw

4(/I#

Sun Solaris 6"7 8"9

Sun Solaris NIS yPf> ^#POK'V#

Sybase 10"11 12

Teradata Database yPf> ^#POK'V#

Top Secret 5.1 5.2,vICw~q<(#

Tru64 UNIX — 5.1a

UPA — MAPI"Notes 6"6.5#W!9

C Tivoli Identity Manager

Work Order &\#

;cICTP4^)JbD APARTBZ(LrVv(f(APAR)hv;cICT14^)DJb:

APAR hv

IY71026 Zz9C"DD Windows M'zG<=xPUooT|D Tivoli Identity

Manager ~qwO1,Kms{"amsXTUovV:

You are not authorized to perform this operation.

IY71972 1Qwi}KwVNP1Y51,ZJ'm%PmsXT> Windows 2000

i{#

IY72116 Z%w/@4%.s;P!qG+x4(BD SAP J'+'\,if Java

}ivgms#

IY71238 &C+~xFtT|,ZQwgfDtTPmP#

Z 1 B XZ>"Pf 5

vfoM`XE"

DA Tivoli Identity Manager bDhv#*7(D)=SvfoI\aTzPyoz,

kDAZ 8 3D:X8m~z7vfo;MZ 10 3D:`Xvfo;#Z7(h*D

vfo.s,kNDZ 10 3D:CJ*zvfo;PD8>E"#

Tivoli Identity Manager bTivoli Identity Manager <uD5bPDvfo4UTB`p9I:

v "PE"

v 20"dCM(FDf.

v *zC'oz

v ~qw20MdC

v Jb7(

v <u9dJO

v Jdw20MdC

"PE":

v 6IBM Tivoli Identity Manager "P5w7

a) Tivoli Identity Manager Dm~M2~*s,T09d^)Lr"9!Md{'

VE"#

v IBM Tivoli Identity Manager D50kHDA1(,

Pv Tivoli Identity Manager vfo#

20"dCM(FDf.:

IBM Tivoli Identity Manager Planning for Deployment Guide hvKz7Di~"&\

M\&,bMz7gN0li/Dy!a9,i\\mz75)D<r,"i\+m

]\m\&/I=zz73PD_T#

*zC'oz:

a)yP Tivoli Identity Manager \mNqD*zozwbME"PD#E"PD|(

.0Z IBM Tivoli Identity Manager Gonfiguration Guide M IBM Tivoli Identity Manager

Policy and Organization Administration Guide Pa)DE"#

~qw20MdC:

IBM Tivoli Identity Manager Server Installation and Configuration Guide for WebSphere

Environmentsa) Tivoli Identity Manager 20MdCE"#

.0Z IBM Tivoli Identity Manager Configuration Guide Pa)DdCE"VZ|,Z

Installation Guide r IBM Tivoli Identity Manager Information Center P#

Jb7(:

IBM Tivoli Identity Manager Problem Determination Guide a) Tivoli Identity Manager

z7DJb7("U>G<M{"E"#


<u9dJO:

TB<u9dJOI*"_r_d{T>z7PK$Dia):

v IBM Tivoli Identity Manager Performance Tuning Guide

a)wZ Tivoli Identity Manager ~qwTCZzz73yhDE"#TB Web >

ca)KE":



/@E"PD0<u9dJO1?V#

v TB Web >ca)l$iMW$i:

http://www.ibm.com/software/sysmgmt/products/support/

IBMTivoliIdentityManager.html

/@A0'01`pD0Tz1?V"%wl$i4S#

v TB Web >ca)<u5w:

http://www.redbooks.ibm.com/redbooks.nsf/tips/

v TB Web >ca)VN8O:

http://www.ibm.com/software/sysmgmt/products/support/Field_Guides.html

v *q!d{ Tivoli Identity Manager J4D)9Pm,kQwTB IBM developerWorks

Web >c:

http://www.ibm.com/developerworks/

Jdw20MdC:

Tivoli Identity Manager ~qw<uD5b|, Tivoli Identity Manager 5)DJdw

i~DD5#ZTB Web >cR=JdwD5:



ZTB Web >cR= Tivoli Identity Manager Jdw:

http://www.lotus.com/services/passport.nsf/WebDocs/

Passport_Advantage_Home

<IM`5:

Tivoli Identity Manager L}=8-GTBwb:

v F.

v y>M_6\m

v 20MdC

v $ww

Z 1 B XZ>"Pf 7


http://www.ibm.com/software/sysmgmt/products/support/IBMTivoliIdentityManager.html








z9IT!qks(FJOzh*D`5#PX|È""8>E"MF.,kCJ

TB IBM Tivoli Education Web >c:

http://www.ibm.com/software/tivoli/education

z9ITrTBL}a)XcDX7"MgSJ~:

v @z:[email protected]

v G+Xx:[email protected]

v 7^"P+0G^(EMEA):[email protected]

TB Web >cPI\aa)d{D<IM<u`5E"

v IBM (5O$

http://www.ibm.com/certify/

Qw0identity manager1iRa)DNLMO$#

v Tivoli m~Dib<uPD,;Z:

http://www.cgselearning.com/tivoliskills/

v Tivoli <u;;,;Z:


supp_tech_exch.html

X8m~z7vfo

*P'X9C>iPDE",zXk_8;)TZ Tivoli Identity Manager ~qwX8

Dz7D*6#TB;Ca)Kb)vfo:

v Yw53

– IBM AIX®

http://www16.boulder.ibm.com/pseries/en_US/infocenter/base/aix52.htm

– Sun Solaris

http://docs.sun.com/db?q=solaris+9

– Red Hat Linux™

http://www.redhat.com/docs/

– Microsoft® Windows Server™ 2003

http://www.microsoft.com/windowsserver2003/proddoc/default.mspx

v }]b~qw

– IBM DB2 (C}]b™

- 'V:http://www.ibm.com/software/data/db2/udb/support.html

- E"PD:http://publib.boulder.ibm.com/infocenter/db2help/index.jsp

- D5:http://www.ibm.com/cgi-bin/db2www/data/db2/udb/

winos2unix/support/v8pubs.d2w/en_main

- DB2® z75P:http://www.ibm.com/software/data/db2


http://www.ibm.com/software/tivoli/education

http://www.ibm.com/certify/

http://www.cgselearning.com/tivoliskills/

http://www.ibm.com/software/sysmgmt/products/support/supp_tech_exch.html

http://www.ibm.com/software/sysmgmt/products/support/supp_tech_exch.html





http://www.ibm.com/software/data/db2/udb/support.html

http://publib.boulder.ibm.com/infocenter/db2help/index.jsp

http://www.ibm.com/cgi-bin/db2www/data/db2/udb/winos2unix/support/v8pubs.d2w/en_main


http://www.ibm.com/software/data/db2

- ^)|:http://www.ibm.com/software/data/db2/udb/support/downloadv8.html

- 53*s:http://www.ibm.com/software/data/db2/udb/sysreqs.html

– Oracle

http://www.oracle.com/technology/documentation/index.html

http://otn.oracle.com/tech/index.html

http://otn.oracle.com/tech/linux/index.html

– Microsoft SQL Server 2000

http://www.msdn.com/library/

http://www.microsoft.com/sql/

v ?<~qw&CLr

– IBM Tivoli Directory Server

f> 5.2:http://publib.boulder.ibm.com/tividd/td/IBMDS/IDSapinst52/

en_US/HTML/ldapinst.htm

f> 6.0:http://publib.boulder.ibm.com/infocenter/tiv2help/index.jsp?

toc=/com.ibm.IBMDS.doc/toc.xml

– Sun ONE Directory Server

http://docs.sun.com/app/docs/coll/S1_DirectoryServer_52

v IBM WebSphere® Application Server

d{E";Zz7?<Pr Web >cO#

http://publib.boulder.ibm.com/infocenter/ws51help/index.jsp

http://www.redbooks.ibm.com/

v WebSphere 6k={"+]

http://www.ibm.com/software/integration/wmq/

v IBM HTTP Server

http://www.ibm.com/software/webservers/httpservers/library.html

v Web zm~qw

– IBM HTTP Server

http://www.ibm.com/software/webservers/httpservers/library.html

– Microsoft IIS HTTP Server

http://www.microsoft.com/technet/prodtechnol/iis/default.asp

– Apache HTTP Server

http://httpd.apache.org/docs-project

Z 1 B XZ>"Pf 9

http://www.ibm.com/software/data/db2/udb/support/downloadv8.html

http://www.ibm.com/software/data/db2/udb/sysreqs.html






http://publib.boulder.ibm.com/tividd/td/IBMDS/IDSapinst52/en_US/HTML/ldapinst.htm


http://publib.boulder.ibm.com/infocenter/tiv2help/index.jsp?toc=/com.ibm.IBMDS.doc/toc.xml





http://www.ibm.com/software/integration/wmq/

http://www-3.ibm.com/software/webservers/httpservers/library.html

http://www-3.ibm.com/software/webservers/httpservers/library.html

http://www.microsoft.com/technet/prodtechnol/iis/default.asp

http://httpd.apache.org/docs-project

`Xvfo

ISTBvfoq!k Tivoli Identity Manager ~qw`XDE":

v Tivoli m~ba)wV Tivoli vfo,gW$i"}]m"]>"l$iT0yw

/#Tivoli m~bITZTB Web OqC:

http://www.ibm.com/software/tivoli/literature/

v Tivoli Software Glossary |,m`k Tivoli m~`XD<uuoD(e#IT(}T

Bx7D Tivoli Software Library Web 3fOD Glossary 4S,q! Tivoli Software

Glossary:

http://publib.boulder.ibm.com/tividd/glossary/tivoliglossarymst.htm

CJ*zvfo

IBM Z Tivoli m~E"PDD Web >cO+<>z7Md{yP Tivoli z7Dvf

o(1|GICT0|B1)#CJ;ZTB Web X7D Tivoli m~E"PD:


%w A-Z PmPD I V8,;s%w IBM Tivoli Identity Manager 4SCJz7

b#

":g{zZd{GE=s!D=EOr! PDF D5,kZD~→r!0ZPhC9

Adobe Reader \Z>X=EOr!E=s!3fD!n#


http://www.ibm.com/software/tivoli/literature/

http://publib.boulder.ibm.com/tividd/glossary/tivoliglossarymst.htm


Z 2 B 2~Mm~hs

>ZhvK WebSphere Application Server OKPD Tivoli Identity Manager ~qwD

m~M2~hs#Z/:73P,20 Tivoli Identity Manager ~qw0,kH20

WebSphere Application Server 0dX8m~#PX|È",kND IBM Tivoli Identity

Manager Server Installation and Configuration Guide for WebSphere Environments#

PvKX82~MX8m~Dn!5#b)5\;xPG#y>DTZ Tivoli Identity

Manager D9C#zh*9CkzDzz73`&DOsD5#PX|È",kND

IBM Tivoli Identity Manager Planning for Deployment Guide MIBM Tivoli Identity Manager

Performance Tuning Guide <u9dJO#

>vfoPmwDhsZEH6=f*_ZZ Tivoli Identity Manager vfoPa0D

NNd{hs#b)hs{OvfoFw1Div#PXI\DTKE"D|B,k

kzDM''Vzm*5#

#9'VD&\ri~

K"PfD Tivoli Identity Manager #9'VH0'VDTB&\rm~T0Yw53

i~:

v Yw53

– AIX V4.3.3 M V5.1

– Solaris V8

– Windows 2000 Advanced Server

– Red Hat Linux Enterprise for Intel (x86) AS 2.1(vZK 2.4)

v Web &CLr~qw

– WebSphere Application Server V5.0.x

1Z AIX O6X WebSphere Application Server V5.0.2 1,";j+}%yPD

i~#IBM <u'Va) aixclean.sh M odmcleanup.sh E>4jIC}%Yw#

mb,XkZ20 WebSphere Application Server V5.1 .0V/>} /usr/WebSphere

?<#*q!PX*5 IBM <u'VDd{E",kNDZ 59 3D=< A, :'

VE";#

*q!PX(F WebSphere Application Server M WebSphere MQ 73(|(8

]MV4)Dd{E",kCJ WebSphere Application Server E"PD#

– WebSphere Application Server &\/:;\'V#

– WebLogic Server V7.0.3.0

v }]b

– gZFix Pack 8 D DB2 (C}]b V7.2 M V8.1#

;x,x Fix Pack 8 D DB2 UDB V8.1 G\'VD,"RH,Z DB2 UDB

V8.2.1#PX|È",kND Z 15 3D:}]bhs;#

– Oracle V8i

v ?<~qw


– IBM Tivoli Directory Server V4.1 M V5.1

– Sun ONE Directory Server V5.1

v /@w

– Netscape yPH0\'VDf>

v gZb)zmLr 4.5 f>D Tivoli Identity Manager zmLr#VZ,Z Tivoli

Identity Manager R4.6 PzmLrF*Jdw#PX|È",kND Z 20 3D:\

'VDJdw6p;#

Java KP173(JRE)M IBM Development Kit for Java hs

Tivoli Identity Manager h* Java KP173 V1.4#PXh* Java e~D$ww"

_Trm%hFw applet D|È",kND IBM Tivoli Identity Manager Information

Center#

Tivoli Identity Manager V4.6 9CZ WAS_HOME/java ?<PI WebSphere Application

Server V5.1 &sa)D IBM Development Kit for Java 1.4.2#

UNIX hs

Bm8vK20D UNIX Yw53"9!MnM2~*s#b)5;|,d{KP1h

s#KP`V~qw`M1,gZ;(FczOKP&CLr~qwM}]b~q

w,CFcz+h*nbD2~J4(|`D RAM)#

AIX hsm 3 8vKCZ20D IBM AIX Yw53"9!MnM2~hs#

m 3. Z WebSphere Application Server OxP20D}LP,kT Tivoli Identity Manager D AIX Yw53MnM2

~hs

Yw53 9!r,$6phs nM2~hs

AIX 5.2 M 5.3 ,$6p 3

kNDBfD" 1 A" 4#

v RAM:2 GB

v &mw:IBM 604e &mw,375 MHz r|l

v ICELUd:

– /tmp - 512 MB

– ITIM_HOME - 500 MB


m 3. Z WebSphere Application Server OxP20D}LP,kT Tivoli Identity Manager D AIX Yw53MnM2

~hs (x)


1. S AIX V5.1 (F= AIX V5.2 IT}%4T DB2 V8.1 z7?<D{E4S,g= libdb2.a D4S#zXk8]

Tivoli Identity Manager DB2 }]b"6X DB2"+ AIX V5.1 }6A V5.2"XB20 DB2,;sV4 DB2 }]

b#

2. *7(,$6p,kdkTB|n:

bash-2.05a# oslevel -r

a{G;u`FZTBZ]Dod,m>,$6p* 03:

5200-03

3. Z20 AIX V5.3 .0,I\h*+FczODL~}6=nBf>#PX|È",kCJTB Web >c:

http://www.ibm.com/servers/eserver/support/pseries/news/2004/08/53installtips.html

http://techsupport.services.ibm.com/server/mdownload

4. WebSphere Application Server \mwz9C1!KZ 9090#AIX wsmserver xLI\TyZ Web D53\mw~

qw9CKZ 9090#PXbvKe;D=hD|È",kND IBM Tivoli Identity Manager Server Installation and

Configuration Guide for WebSphere Environments#

PXhsDd{E",kCJTB Web >c:

v ^)

http://www.ibm.com/servers/eserver/support/pseries/aixfixes.html

v D5


http://publib.boulder.ibm.com/infocenter/pseries/index.jsp

Solaris hsm 4 8vKCZ20D Sun Solaris Yw53"9!MnM2~hs#

m 4. Z WebSphere Application Server OxP20D}LP,kT Tivoli Identity Manager D Solaris Yw53MnM

2~hs


Solaris 9

kNDBfD" 1#

WebSphere Application Server

V5.1.1 2003 j 11 BD(i9

!/:

v RAM:2 GB

v &mw:Solaris Sparc &mw,440 MHz r|l

v ICELUd:

– /tmp - 512 MB


Z 2 B 2~Mm~hs 13

http://www.ibm.com/servers/eserver/support/pseries/news/2004/08/53installtips.html

http://techsupport.services.ibm.com/server/mdownload

http://www.ibm.com/servers/eserver/support/pseries/aixfixes.html


http://publib.boulder.ibm.com/infocenter/pseries/index.jsp

m 4. Z WebSphere Application Server OxP20D}LP,kT Tivoli Identity Manager D Solaris Yw53MnM

2~hs (x)


1. Tivoli Identity Manager _P WebSphere Application Server M WebSphere 6k={"+]DX8m~,h*nbD

ZKhC#Z Solaris 9 O,*q!7#X8m~liDD~MnbxL,kCJTB Web >c:

http://publib.boulder.ibm.com/infocenter/ws51help/index.jsp?

topic=/com.ibm.websphere.base.doc/info/aes/relnotes/relnotes_aes.html

2. *q!PX WebSphere Application Server X8m~D|È",kCJTB Web >c:

http://www.ibm.com/software/webservers/appserv/doc/

v51/prereqs/was_v511.htm


v 20D5PhvD2~Mm~hs


v 9!

http://sunsolve.sun.com/private-cgi/show.pl?target=patches/patch-access

Linux hsm 5 8vKCZ20D RedHat Linux Yw53"9!MnM2~hs:

m 5. Z WebSphere Application Server OxP20D}LP,kT Tivoli Identity Manager D Linux Yw53MnM2

~hs


RedHat Linux Enterprise

for Intel (x86) 3.0 for

IA32

|B 3. PXd{X8Nq,k

NDBfD" 1#

v RAM:2 GB

v &mw:Intel &mw,500 MHz r|l

v ICELUd:

– /tmp - 512 MB


1. k7#a)KZjb*0<8 Red Hat Enterprise Linux 3(RHEL 3)4KP WebSphere Application Server V5.1 z

71D<u5wPhvDd{Hvu~#PX|È",kCJTB Web X7:

http://www-1.ibm.com/support/docview.wss?uid=swg21164634

*q!PXhsDd{E",kCJK Web >c:


Windows hs

Z 15 3Dm 6 8vKCZ20D Microsoft Windows Yw53"9!MnM2~hs#

b)5;|(nbDKP1hs#KP`V~qw`M1,gZ;(FczOKP&

CLr~qwM}]b~qw,CFcz+h*nbD2~J4(|`D RAM)#


http://publib.boulder.ibm.com/infocenter/ws51help/index.jsp?topic=/com.ibm.websphere.base.doc/info/aes/relnotes/relnotes_aes.html

http://publib.boulder.ibm.com/infocenter/ws51help/index.jsp?topic=/com.ibm.websphere.base.doc/info/aes/relnotes/relnotes_aes.html

http://www.ibm.com/software/webservers/appserv/doc/v51/prereqs/was_v511.htm



http://sunsolve.sun.com/private-cgi/show.pl?target=patches/patch-access

http://www-1.ibm.com/support/docview.wss?uid=swg21164634


m 6. Z WebSphere Application Server OxP20D}LP,kT Tivoli Identity Manager D Windows Yw53Mn

M2~hs


Windows Server 2003

Standard Edition

^ v RAM:2 GB DZfUd

v &mw:Intel Pentium `&mw,1 GHz r|

l

v ICELUd:

– /tmp - 512 MB


Windows Server 2003, s

5^)f


v <u'V

http://www.microsoft.com/windowsserver2003/support/default.mspx

v D5


}]bhs

m 7 PvKTZ WebSphere Application Server OKPD Tivoli Identity Manager ~

qwy'VD}]b#*X(}]b8(Kf>"^)|r9!#}]bZvV!P

jG(U)D=(O\='V#P)ivBh* JDBC }/Lr#*q!PXdC~q

wM JDBC }/LrD|È",kND IBM Tivoli Identity Manager Server Installation

and Configuration Guide for WebSphere Environments#

m 7. Z WebSphere Application Server OKPD Tivoli Identity Manager ~qwDIC}]b

}]b ^)|"9!M,

$6phs

AIX 5.2 M

5.3Solaris 9 R e d H a t

LinuxW i n d o w sS e r v e r2 0 0 3S t a n d a r dEdition

Windows Server2003, s5^)f

DB2 (C}]b s

5~qwf 8.2

kNDBfD" 1#

^)| 1 U

kNDBf

D" 2 A"

4 T0"

6#

U U U U

Oracle V9i

kNDBfD" 5#

" P f 2

(9.2.0.5)

U U U U U

Microsoft SQL Server

2000

Service Pack 3a U U

Z 2 B 2~Mm~hs 15

http://www.microsoft.com/windowsserver2003/support/default.mspx


m 7. Z WebSphere Application Server OKPD Tivoli Identity Manager ~qwDIC}]b (x)

}]b ^)|"9!M,

$6phs

AIX 5.2 M


LinuxW i n d o w sS e r v e r2 0 0 3S t a n d a r dEdition


1. DB2 UDB V8.2.1 H,ZxP^)| 8 D DB2 UDB V8.1#

2. S AIX V5.1 (F= AIX V5.2 IT}%4T DB2 V8.1 z7?<D{E4S,g= libdb2.a D4S#zXk8]

Tivoli Identity Manager DB2 }]b"6X DB2"+ AIX V5.1 }6A V5.2"XB20 DB2,;sV4 DB2 }]

b#

3. g{!qK DB2 UDB,Tivoli Identity Manager 20Lr+Z DB2 ~qwy$tDFczO$Vd 1 GB }]b

mUd#k7#KICELUdZ DB2 ~qwOIC#PX}]bmUdD|È",kND IBM Tivoli Identity

Manager Performance Tuning Guide <u9dJO#

4. JDBC }/Lra)=6LFczO}]bD,(T#DB2 UDB z7a)`M 2 D Java }]b,S}/Lr,F

* DB2 UDB KP1M'z#SQL Server 2000 JDBC }/LrG JNetDirect JSQLConnect V3.3.0,C}/LrZ Tivoli

Identity Manager 20}LPa)#Oracle 9i R2 z79C V9.2.0.5 JDBC }/Lr(ojdbc14.jar),C}/Lr;Z

Tivoli Identity Manager z7b0Pa)#

Z20 Tivoli Identity Manager ~qw.0,kS Oracle Database Server 20D ORACLE_HOME/ora92/jdbc/lib/ ?

<Pq!K JDBC }/Lr(ojdbc14.jar)#z9IT!qSTB Web >cBXC}/Lr:

http://www.oracle.com/technology/software/tech/java/

sqlj_jdbc/index.html

5. Oracle 20h*AY 512 MB RAM MHZ53omZfr 1 GB DELUd,!~_POsD;v#20LrZ

/tmp ?<Ph*n` 400 MB Ud#PXd{ELUdhs"XbYw53hsM9!D|È",kND Oracle

a)D20D5#

6. IBM Tivoli Directory Integrator V6.0 M IBM Tivoli Directory Server V5.2 h*xP Fix Pack 8 D DB2 (C}]b

V8.1 rxP Fix Pack 1 D V8.2#

PX}]bhsD|È",kCJTB Web >c:

v IBM DB2 (C}]b


http://publib.boulder.ibm.com/infocenter/db2help/index.jsp(E"PD)



http://www.ibm.com/software/data/db2/udb/sysreqs.html(Yw53Hvu~)

http://www.ibm.com/cgi-bin/db2www/data/db2/udb/

winos2unix/support/v8pubs.d2w/en_main

v Oracle





http://www.oracle.com/technology/software/tech/java/sqlj_jdbc/index.html

http://www.oracle.com/technology/software/tech/java/sqlj_jdbc/index.html


http://publib.boulder.ibm.com/infocenter/db2help/index.jsp



http://www.ibm.com/software/data/db2/udb/sysreqs.html






v Microsoft SQL Server 2000



?<~qwhs

m 8 PvKTZ WebSphere Application Server OKPD Tivoli Identity Manager ~

qwICD?<~qw#*x(?<~qw8(Kf>"^)|r9!#?<~qw

ZvV!PjG(U)D=(O\'V#

m 8. TZ WebSphere Application Server OKPD Tivoli Identity Manager ~qwICD?<~qw

?<~qw ^)|"9!

M,$6ph

s

AIX 5.2 M 5.3 Solaris 9 Redhat Linux Windows Server2003, StandardEdition


I B M T i v o l i

Directory Server

V5.2

kNDBfD

" 1#

^)| 2 U

kND" 2#

U U

kND" 3#

U U

I B M T i v o l i

Directory Server

V6.0

U U U U U

S u n O N E

Directory Server

V5.2

U kND" 4# U U

1. IBM Tivoli Directory Server V5.2 h*xP^)| 8 D DB2 (C}]b V8.1 rxP^)| 1 D V8.2#mb,k

7#q!nBD}Cj{TD~ libdelref.a#

2. IBM Tivoli Directory Server V6.0 h* AIX 5.2 ,$6p 5#

g{h*Z;( AIX 5.2 ,$6p 3 DFczO20 Tivoli Identity Manager,rXkZm;( AIX 5.2 ,$6p

5 DFczO20 IBM Tivoli Directory Server V6.0#

3. v RedHat Linux Enterprise V3.0#

4. Sun ONE Directory Server V5.2 ;'V RedHat Linux Enterprise for Intel (x86) 3.0 for IA32#PX|È",kC

JTB Web >c:

http://www.sun.com/software/products/directory_srvr/home_directory.xml


*q!PXhsD|È",kCJTB Web >c:

v IBM Tivoli Directory Server

– 2~Mm~hsT0D5





Z 2 B 2~Mm~hs 17








– ^)


IBMDirectoryServer.html

v Sun ONE Directory Server

– C(0,$

http://www.sun.com/software/products/directory_srvr_ee/index.html

http://www.sun.com/download/index.jsp

– D5


WebSphere Application Server Base M?p\mwhs

Tivoli Identity Manager V4.6 9CZ WAS_HOME/java ?<PI WebSphere Application

Server V5.1 &sa)D IBM Development Kit for Java 1.4.2#

9C@"20D Java *"$_d(4T IBM rd{)&L);\'V#

m 9 PvKkT WebSphere Application Server Base M WebSphere Application Server

xg?pz7D Tivoli Identity Manager ~qwX8m~:

m 9. kT WebSphere Application Server D Tivoli Identity Manager ~qwX8m~

&CLr~qw ^)|hs [}^) d{ APAR

WebSphere Application

Server Base z7 V5.1

^)| 1 3

kNDBfD" 1#

PK00346"PK02976 M

PK02640

kND" 2#

WebSphere Application

S e r v e r x g ? p z 7

V 5 . 1 D?p\mw?

V#kND" 3#

PK00346 M PK02976

kND" 2#

1. &C[}^) 3,;s&C APAR#

2. 9C&C WebSphere [}^)D,;v|B$_&CK APAR#

3. !4Duo0?p\mw1C4m> Tivoli Identity Manager z7m~||, WebSphere Application Server xg?

pz7D?p\mw?V,+;|,d{?V#

4. 1Z AIX O6X WebSphere Application Server V5.0.2 1,";j+}%yPDi~#IBM <u'Va) aixclean.sh

M odmcleanup.sh E>4jIC}%Yw#mb,XkZ20 WebSphere Application Server V5.1 .0V/>}

/usr/WebSphere ?<#*q!PX*5 IBM <u'VDd{E",kNDZ 59 3D=< A, :'VE";#

*q!PX(F WebSphere Application Server M WebSphere MQ 73(|(8]MV4)Dd{E",kCJ

WebSphere Application Server E"PD#


v 2~Mm~hs

http://www.ibm.com/software/webservers/appserv/doc/latest/prereq.html


http://www.ibm.com/software/sysmgmt/products/support/IBMDirectoryServer.html

http://www.ibm.com/software/sysmgmt/products/support/IBMDirectoryServer.html

http://www.sun.com/software/products/directory_srvr_ee/index.html

http://www.sun.com/download/index.jsp


http://www.ibm.com/software/webservers/appserv/doc/latest/prereq.html

http://www.ibm.com/software/webservers/appserv/doc/

v51/prereqs/was_v511.htm

v ^)

http://www.ibm.com/software/webservers/appserv/was/support/

v D5



IBM Tivoli Directory Integrator hs

m 10 PvK Tivoli Identity Manager 'VD IBM Tivoli Directory Integrator f>#

m 10. IBM Tivoli Directory Integrator D Tivoli Identity Manager ~qwX8m~

D i r e c t o r yIntegrator

^)|"9!

M,$6ph

s

AIX 5.2 M 5.3 Solaris 9 Redhat Linux Windows Server2003, StandardEdition

Windows Server2003, s5^)

f

I B M T i v o l i

D i r e c t o r y

Integrator V6.0

k N D B f D

" 1#

^)| 1 MY

1^) 4

U U U U U

1. IBM Tivoli Directory Integrator V6.0 h*xP^)| 8 D DB2 (C}]b V8.1 rxP^)| 1 D V8.2#






\'VD Web /@w

TB Web /@wG\'VD:

m 11. Web /@wD Tivoli Identity Manager ~qwX8m~

/@w{F f> AIX 5.2 M


Linux 3.0Windows

Mozilla 1.7 U U U U

I n t e r n e t

Explorer

x P S e r v i c e

Pack 1 D 6.0

U

1. XktC cookie#

2. kpZ,;(M'zOS=v/@wG<= Tivoli Identity Manager ~qw,r*;4(;

va0j6,xbI\<B}]Jb#

Z 2 B 2~Mm~hs 19










Crystal Report z7

IT+(F Crystal Report #e/I= Tivoli Identity Manager 73P#Tivoli Identity

Manager Z Windows 53O'VxP Crystal Enterprise 10 Professional Edition D Crystal

Report 10 Standard Edition#Z Windows 53O9C Crystal Enterprise 10 Professional

Edition ~qwKP Unix M Linux OD Tivoli Identity Manager ~qwM Crystal

Enterprise 10 Professional Edition M'z2\'V#

\'VDJdw6p

+ Tivoli Identity Manager ~qw}6=~qwf> 4.6 .s,f> 4.5 D Tivoli

Identity Manager zmLrILxI&KP#IBM +T}6M'z'Vf> 4.5 Dzm

Lr,+DxM'z}6= Tivoli Identity Manager V4.6 Jdw#20f> 4.6 D Tivoli

Identity Manager ~qwDBM'z&C;20 Tivoli Identity Manager V4.6 Jdw#

Z Tivoli Identity Manager z7D0"PfP,JdwF*zmLr#


Z 3 B Q*D^F"JbMd(=(

>Z5wQ*Dm~^F"JbMd(=(#

z720M}%DJbMd(=(

zI\av=TB Tivoli Identity Manager ~qw20rz7}%Jb,"9CTBd

(=(:

v Jb:

g{}]bG Oracle,h*=SD(^4tC Oracle }]bBqDV4#

d(=(:Z4(C'G+.sM20 Tivoli Identity Manager .04(b)(^#

*4((^,ZdO20P Oracle }]b~qwDFczOTC' SYS KPBP|

n:

grant select on pending_trans$ to public;grant select on dba_2pc_pending to public;grant select on dba_pending_transactions to public;grant execute on dbms_system to <user>;

user D5G user enrole#

v Jb:

Z Windows 53O,g{ Tivoli Identity Manager 20}L+ Tivoli Identity Manager

20Z;G C }/wDEL}/wO,r20}LI\aZEL}/wDy?<&

4( \temp ?<(g{ \temp ?<;fZ)#Tivoli Identity Manager 20jI1 \temp

?<;;>}#

d(=(:V/>} \temp ?<#

v Jb:Zz7bTZd<{"zDivP,Z Linux O6X Tivoli Identity Manager

>}K /tmp ?<,<Bd{&CLrMYw53^(}7KP#

d(=(:6X Tivoli Identity Manager .0,k8] /tmp ?<#g{>} Tivoli

Identity Manager a>} /tmp ?<,rI!TB=h4XB4( /tmp ?<"hCd

(^:

1. w* root C'G<#

2. dkTB|n:

$ mkdir /tmp$ chmod 777 /tmp

v Jb:Z/:73P,1Z?p\mwr Tivoli Identity Manager /:I1OD

Windows Server 2003 Standard Edition 53O20 Tivoli Identity Manager 1,"

z java.lang l##}g,l#D;?V|(KP:

## ZGGfxUtil.loadImage: image loading failed for:com/zerog/ia/installer/images/introImage.png

d(=(:vTl#,|;0l Tivoli Identity Manager 20rsx9C#


Tivoli Identity Manager ^F

fZ Tivoli Identity Manager ^F:

v Jb:}],=I\IZ OutOfMemoryError x'\#g{C'_PNN%v5e`

MDm`Ts,"RZ3dK5eDtTr3d5e`pDtT.s4P}],

=,I\"zbvJb#

^F:TZ%v]wPD 300K vK15e,}],=Q-I&bT(?v5eTs

Z LDAP P_P 15 vtT)#TZ 110K v AD J'5e(Z LDAP P,?v

Ts,} 100 vtT),}],=2Q-I&jI#yPbT<Q-9C 1.2 GB n

s JVM Qs!hC4P,"R9C Tivoli Identity Manager ~qwODn!:X#

v Jb:4(r^D$wwhF"m%r_TI\(D1dHa0,11ddt$#

*\bPO,web.xml PD,15;vT,"RZ$wwhFw"m%hFwr_T

applet KPZda0v;a,1#

d(=(:7#zjI?vn/T4(r^D$wwhF"m%r_T#

v Jb:Tivoli Identity Manager ;Pa)Z(F(fhFwP4(b,SD=(#

d(=(:^#

v Jb:$ww UNTIL -7mVCq DO...WHILE -7Gy#!\C-7&CLx1

=zc8(D-7u~,+G-7Lx1=8(u~'\#

d(=(:XBywu~,9.w*8(-7u~Dq(#}g,bvu~h*X

Byw:

a<b

bGXBywsDu~:

a>=b

Yw53JbMd(=(

zI\v=TBYw53Jb"9CTBd(=(:

v Jb:Z Linux O,r*D~D1!ns}?hCI\+Y#}g,zzngBPD

ms{":

Too many open files.

d(=(:WebSphere (i+1!Dnsr*D~}vs*5 8000#jITB=h:

1. `- /etc/security/limit.conf D~#

2. |D+ nofiles 58(*5 8000 Dod#

3. *9C|DZ10a0Pz',IT!qdkK|n:

ulimit -n 8000

v Jb:Z RedHat Linux Enterprise for Intel (x86) 3.0 for IA32 with Update 3 O,

Red Hat Package Manager(RPM)}]bI\p5,<BLr|{F1Yrh9NN

sxD RPM 20#p5D_Y:f}](F=w RPM }]bp5w RPM }]

b#;x,VPDC'&CLrMVPD}];\0l#

ZxPTBn/Zd,I\"z RPM }]bp5:

– 20 WebSphere Application Server Version 5.1.x .s"4xP


– Z?N20 service pack"Java Software Development Kit r Application Server

Service Pack .s

– ZjIb)NqD203r.s:

1. 20NN LD_ASSUME_KERNEL hC*8> LinuxThreads D5(}g 2.2.5

r 2.4.19)D RPM#

2. 20m;v;P* LD_ASSUME_KERNEL hCNN5D RPM#

d(=(:ZNN9C RPM }]bp5DYw.s"4jITBNq:

1. S53OD /var/lib/rpm ?<>}TB_Y:f}]D~:

– db.001

– db.002

– db.003

2. i$ RPM }]bDj{T#dkTB|n:

rpm -qa ’ > /dev/null

;v>}ms{"8>fZVNs!ms:

error: rpmdbNextIterator: skipping h#684 blob size(1568):BAD, 8 + 16 + il(41) + dl(916)

3. g{zLxSUms,k*5 Red Hat 'VK1Tq!PX^4p5D RPM }

]bD|È"#

IBM Tivoli Directory Integrator JbMd(=(

zI\v=b) IBM Tivoli Directory Integrator Jb,"9CTBd(=(:

v Jb:IBM Tivoli Directory Integrator V6.0 fZ1ZDWSVmsMx(#IBM IBM

Tivoli Directory Integrator f>D AIX f>|,D Java ibz(JVM)fZJb,

bZ9C IBM Tivoli Directory Integrator xPsJ')&Zda<BWSVmsM

x(#a{G,X(DJ'4(I\'\,"R)&n/I\^^ZXRp#

d(=(: IBM Tivoli Directory Integrator APAR #IO01620 bvKJb#PX|`

E",kNDK Web >c:


IBMDirectoryIntegrator.html

v Jb:yPYw53OD IBM Tivoli Directory Integrator V6.0 I\"z

BSFException#IZ IBM Tivoli Directory Integrator ZD BSFException,(} IBM

Tivoli Directory Integrator DJ')&M\mYwI\<{'\#Z IBM Tivoli

Directory Integrator 9CD Rhino javascript }fZ"z BSFException#

d(=(:IT(}+ IBM Tivoli Directory Integrator }6= Rhino }fD 1.5R4.1

"Pf4bvJb#IBM Tivoli Directory Integrator V6.0 10f Rhino }fD 1.5R2

"Pf;pa),+2'V 1.5R4.1 "Pf#(iz}6= Rhino }fD 1.5R4.1 "

Pf#

*4P}6,kjITB=h:

1. S Rhino BX>cBX Rhino }fD 1.5R4.1 "PfD zip D~:

http://www.mozilla.org/rhino/download.html

Z 3 B Q*D^F"JbMd(=( 23

http://www.ibm.com/software/sysmgmt/products/support/IBMDirectoryIntegrator.html


http://www.mozilla.org/rhino/download.html

2. SzBXD zip D~b* js.jar D~#

3. 9Cb9T zip D~D js.jar D~f; ITDI_HOME/jars ?<PD js.jar D~#

v Jb:ZyPYw53O,IBM Tivoli Directory Integrator V6.0 I\v=

OutOfMemory ms#

IBM Tivoli Directory Integrator I\aZ.VsDJ'-w(Z 1 GB RAM DFc

zOs< 5 0 , 0 0 0 vJ'r|`)Zdv= O u t O f M e m o r y E r r o r ms#

OutOfMemoryError +<B Tivoli Identity Manager -w}L'\,"R IBM Tivoli

Directory Integrator &CLrI\dC;\C#

d(=(:IBM Tivoli Directory Integrator APAR IO01580 bvKJb,+a)Z IBM

Tivoli Directory Integrator 6.0 D Fix Pack 2 P#PX|È",kND IBM Tivoli

Directory Integrator 'V>c:



v Jb:TZ IBM Tivoli Directory Integrator V6.0,+r SSL 'VT;;IC#

ITIM_HOME/extensions/examples/idi_integration ?<PDTvD~|,5w Tivoli

Identity Manager M IBM Tivoli Directory Integrator V6.0 .d+r(r2,)SSL

O$D?V#;x,IBM Tivoli Directory Integrator V6.0 |,D DSMLv2EventHandler

B~&mLr10v'V%rD SSL O$#

d(=(:IBM Tivoli Directory Integrator APAR IO01580 bvKJb,+a)Z IBM

Tivoli Directory Integrator 6.0 D Fix Pack 2 P#PX|È",kND IBM Tivoli

Directory Integrator 'V>c:



WebSphere MQ JbMd(=(

zI\v=b) WebSphere MQ Jb,"9CTBd(=(:

v Jb:1 AIX OtC WebSphere +V2+T1"z JMS {""Mms#

Q-7( AIX 53 WebSphere Application Server V5.1.1 s(D Java ibz(JVM)

D;vJb,b<BC42+CJ6kD{"SPDxg,SOzzWSVms#

ba<B JMS {""M'\,ms`FZBP WebSphere U>PDms:

MQJMS2008: failed to open MQ queue WQ_itim_wf

BPms2+vVZ WebSphere jmsserver U>P:

MSGS0504E: An JMS Server security service thread experienced a socket exception:java.net.SocketException: Socket closed

d(=(:(iyPZ AIX 53OKPD Tivoli Identity Manager &CLr&C2

0 WebSphere APAR PK07924,|a@} JVM PDJb#20 WebSphere

Application Server V5.1 Fix Pack 1 .s&CK APAR,b2a|B WebSphere

Application Server JVM#APAR PK07924 ITZ WebSphere Application Server '

V>cOR=:







v Jb:Z Windows 53O,Z Tivoli Identity Manager J')&D DSML )xn

/tCZd,WebSphere 6kD{"+]'\#ms{"5wr*SP'\"1Y(

^CJJ4r Java {"~qms#zI\4=`FZK{"D WebSphere 6kD{

"+]ms:

AMQ9181 KvhCDl&^'#

d(=(:ZyP/:I1O,+L]DKZ6'hC*ns5 65534#PX,S=

5000 TO TCP/IP KZDJbD|È",kNDBP Web >c:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;196271

v Jb:1zZ Windows Server 2003 O20 Tivoli Identity Manager 1,0WebSphere

6k={""<M$)1~q4t/#V/"Tt/|+<Bms"zzTB{

":

Could not start the Websphere Embedded Messaging Publish andSubscribe WAS__server1 service on Local Computer.Error 1075: The dependency service does not exist or has beenmarked for deletion

d(=(:vTC{""Lx#Tivoli Identity Manager ;h*9C WebSphere 6k

={"+]"<M$)~q#kp"Tt/~q#

v Jb:4(SP\mw1vm# Amqerr*.log D~PDmsgB:

AMQ9213: A communications error for TCP/IP occurred.EXPLANATION:An unexpected error occurred in communications.ACTION:The return code from the TCP/IP (ioctlsocket) call was 10038 (X’2736’). Recordthese values and tell the systems administrator.

d(=(:10038 5Xk8w,WebSphere MQ l}wXZQu<WSVSl}w+

]=XP1v=Jb#ZxP@p=D73P,G##{#*d(Jb,{CxP

BP73d?DX:

set MQNOREMPOOL=1

JdwM~qJbMd(=(

zI\v=b) Tivoli Identity Manager JdwJb,"9CTBd(=(:

v Jb:Z Tivoli Identity Manager ~qw O,remove_service_profiles.sh |n;

a > } ~ q E * D ~ # } g , S / u s r / I B M / i t i m / b i n / u n i x ? < K P

./remove_service_profiles.sh ServiceProfile |n#;a>}~qE*D~,"RT

>;ums{":

dC6L~q#

d(=(:!DX4PKd(=((vZQ-S Tivoli Identity Manager >}}>}

D~qE*D~DyPJ'MyP~q5}.s)#

G<= IBM Tivoli Directory Server \mXF(r iPlanet XF(rNNJmz>}

u?D LDAP M'K(}g LDAP /@w)"I!TB=h4V/>}~qE*D

~:



http://support.microsoft.com/default.aspx?scid=kb%3bEN-US%3b196271

1. )9 ou=serviceProfile#}g,g{ Tivoli Identity Manager s:G0dc=com1"

RbCj6G0IBM1,rS ou=serviceProfile,ou=itim,ou=IBM,dc=com )9w#

2. >} ou=serviceProfile BzmJ'M~qE*D~D=vu?#}g,*>}xP

G<DJ'E*D~u?,k>} ou=serviceProfile,ou=itim,ou=IBM,dc=com BD

erobjectprofilename=NotesAccount u?#*>}xPG<D~qE*D~u?,k

>} ou=serviceProfile,ou=itim,ou=IBM,dc=com BD erobjectprofilename=NotesProfile

u?#

3. )9 ou=formTemplates#}g,g{ Tivoli Identity Manager s:G0dc=com1

"RbCj6G0IBM1,rS ou=formTemplates,ou=itim,ou=IBM,dc=com )9

w#

4. >} ou=formTemplates BzmJ'M~qm%#eD=vu?#}g,*>}x

PG<DJ'm%#e,k>} ou=formTemplates,ou=itim,ou=IBM,dc=com BD

erformname=erNotesAccount u?#*>}xPG<D~qm%#e,k>}

ou=formTemplates,ou=itim,ou=IBM,dc=com BD erformname=erNotesDAMLService

u?#

5. g{JC,XBt/ Tivoli Identity Manager#

v Jb:d;~qbTI&,+G DSMLv2 ~q)&LZbTjI1msXT>Km

s{":

^'Dq=

d(=(:I!TB=h:

– ZJdwDbT&p DSML {"P,mS;v searchResultEntry u?(tT

namingContexts 5* AGENT_CONTEXT)#}g:

<?xml version=’1.0’?><batchResponse xmlns=’urn:oasis:names:tc:DSML:2:0:core’><searchResponse><searchResultEntry dn="" xmlns="urn:oasis:names:tc:DSML:2:0:core"><attr name="namingContexts"><value>AGENT_CONTEXT</value></attr></searchResultEntry><searchResultDone xmlns="urn:oasis:names:tc:DSML:2:0:core"><resultCode code="0" /></searchResultDone></searchResponse></batchResponse>

– ZJdw(*dKP DSMLv2 ~qbT)D resource .def D~P(e

namingContexts tT#}g,(eKtT:

<BehaviorProperties><Property Name = "com.ibm.itim.remoteservices.ResourceProperties.SERVICE_PROVIDER_FACTORY"

Value = "com.ibm.itim.remoteservices.provider.dsml2.DSML2ServiceProviderFactory"/><Property Name = "namingContexts"

Value = "AGENT_CONTEXT" /></BehaviorProperties>

v Jb:Tivoli Identity Manager n/?<Jdw9C ergroup tT,I;v.yxF

}VDV{.(Zn/?<-VP(;j6n/?<i)m>#bv5XkZ Tivoli

Identity Manager ZD)&_TME>P9C,TZJ'OmSr>}i#r*KG

(}{Fx;G(;j6{46pb)i,yT*"K1M53\m1XkiR(

;j6{,TZ_TME>P9C#

d(=(:I!TB=h:


– *"K1M53\m1Z Tivoli Identity Manager f"bPDX*~qnBTi4

P LDAP Qw#i{ICZ4PQw,;sITS5XDiTsA!(;Dj6#

– TZ)&_T,IT9Cj<Z(N}S<Qwi#;)R=i,53\m1I

TP;=_6DN}S<"4PNNyhD_6dC#

v Jb:1SJdwa;ks1,zI\h*T7B"J'OD\ki$#

d(=(:1Szma;ks1,enRole.properties D~|,BPtT4T7B"J'

OD\ki$#+K5hC* true 4T7\ki$}L:

reversePasswordSynch.bypassPwdValidationOnOrphanAccount

v Jb:zI\h*mSBD5w=~qD~qm%#*#Vk+3zmf],1!

ivB~qO;|,K5wtT#

d(=(:9Cm%hFwZ~qD~qm%OV/mS5wtT#

v Jb:DSMLProvider VZ}Z"M^Dksw* ADD | DELETE Yw#b+PO

Z} REPLACE YwDVPDM' DSML zk#

d(=(:Z enRole.properties D~P,7#z*zDT(ezk}7hCBPtT

D5:

############################################################ Remote Services: DSMLv2 provider’s mode of sending modify request## for attributes. Property value: true | false.## true= REPLACE operation and false= ADD, DELETE operation###########################################################com.ibm.itim.remoteservices.DSML2ServiceProvider.modifyAsREPLACE=true

5*:

true r48(

1!5#g{bv5* true,r_48(5,Tivoli Identity Manager "M

xP REPLACE YwDyP DSMLv2 ^Dks#

false Tivoli Identity Manager "M^Dksw* ADD | Delete M REPLACE Y

w#

}]M|{JbMd(=(

zI\v=b) Tivoli Identity Manager }]r|{Jb,"9CTBd(=(:

v Jb:g{534#9r$ww;j{,9C LDAP }];;q=(LDIF)D~<

k8]?<E"azzJb#

d(=(:9C9C LDIF D~<k8]?<E"1,k7#&CLr~qwQ-#

9#g{ LDIF <k+^D$wwrYw,k7#Z4P LDIF <k.0yP$ww

<j{#PX<k LDIF D~D|È",kNDzD?<~qwD5#

v Jb:ZJ'\mP,zIT9CXbV{4( Tivoli Identity Manager J'{,+

Gzfs;\^DJ'{4|,r>}XbV{#

d(=(:\b9CXbV{44(r^D Tivoli Identity Manager J'{#

v J b : z ; \ Z ( P { F ( D N ) ( e P | ( X b V { , } g : E #

LdapUtil.explodeDN() =(;'VxPXbV{D+}E5,XpG+}EZD:E#

}g,K(ePD:E<Bms:


entry dn="uid=\"My Name\"\,1"

d(=(:Z DN (eP\b9CXbV{,}g:E#

v Jb:g{z4({F,} 100 vV{DT(e5e,rzz DB2Exception ms#

d(=(:4(T(e5e1,\b*,v 100 vV{D5e{dk5#

v Jb:9C Oracle,1z4(Z~v;,{FD Tivoli Identity Manager }]b;s

T<XB20 Tivoli Identity Manager rKP DBConfig |n1,zz}]bms#

ms8> Oracle ;P4( enrole_data_001.dbf D~#

KNqrPfZms:

1. 9C Oracle 4(;vu<D Tivoli Identity Manager }]b#

2. 20MdC Tivoli Identity Manager#

3. 6X Tivoli Identity Manager#

4. 9C Oracle 4(m;v Tivoli Identity Manager }]b,8(;vk0;v}]

b{F;,D}]b{F#

5. xPTBNq.;:

– 20""TdC Tivoli Identity Manager#

– KP DBConfig |n#

d(=(:*Z,;v Oracle }]b~qwOdC`v Tivoli Identity Manager }

]b,V/|B enrole_admin.sql D~4|D}]D~{F#

v Jb:g{zZ,;v?jOM`,Di/6pO(e`Z;v ACI,"R?v ACI

{FD0 255 vV{`,,r;P;vCJXFn(ACI);CZ ACI mP#(f

vT ACI D#`?V#ACI (f;T>;v ACI,bvmsT>Z trace.log D~

P:

com.ibm.websphere.ce.cm.DuplicateKeyException: ORA-00001: unique constraint(ENROLE.SYS_C003110) violated

d(=(:(e ACI 1,\b*,v 255 vV{D ACI {Fdk5#9&!?\

bZ`,?jM`,Di/6p&(e`v_P`,{FD ACI#

v Jb:1!ivB,Tivoli Identity Manager a)DUZ6'v* 1990-2010#

d(=(:9C LDAP /@wrm;v LDAP 5CLr4)9j]6'#}g,|

B SAP J'm%OD ersapdateuntil tT#

":(} Tivoli Identity Manager UI(m%`-w applet)jIDNNT(e<Xk

ZmSNNV/UZtT^D.0jI#408m%`-w UI 4&mUZtT

OICDb)=ST(e,`-1,m%`-w UI +4vj<UZtT,;\

H0mSDNNV/^D#

jITBNq:

1. Z LDAP P,av dn:

erformname=erSAPAccount,ou=formTemplates,ou=itim,ou=tenant,dc=com

2. `- erXML tT#

3. iRkK>}`FDP:

<formElement name="data.ersapdateuntil" label="$ersapdateuntil">


BfDB;PI\G <dateInput/> or <optDateInput/>#mb,PI\_Pd{t

T,}g hoursAndMinutes="false"#

4. *hCn_Dj]5,mStT maxYear#}g,dkBPZ]:

<dateInput maxYear="9999"/>

g{zk*|, 1990 T0Dj],k=S9C0minYear1tT#K5}8(j

] 1974:

<dateInput minYear="1974"/>

5. *8(n4 2010 M maxYear .dDj],kmStT spanYearRange:

<dateInput maxYear="2099" spanYearRange="yes"/>

":kpO" spanYearRange M maxYear 9999,r*KiO+sXvSKXk"

M=/@wD}]?,"R+5MT\#

6. #f XML D~#B;NCJ SAP J'm%1,ersapdateuntil 0Z!?~&|

,S 1990 = 2099 DyP5#

/@wJbMd(=(

zI\v=b)/@wJb,"9CTBd(=(:

v Jb:g{9C Mozilla /@w,Z GUI feOxP}]dkZd%wsK4%I

\<BzdkD}]1Y#

}g,1zmS;vK1=i/"ZK1G<Pnd}]1,%wsK;s%w0

x4%a<BzZVNPdkD}]1Y#(#,%wsK<B}]*'rd{J

b#

d(=(:9C Mozilla /@wxP}]dkZd\b9CsK4%#

(fJbMd(=(

zI\v=b) Tivoli Identity Manager (fJb,"9CTBd(=(:

v Jb:Z*s}]/zIX((fZd,zI\v=T\5MrBq,1#

d(=(:kNDy(iw}DIBM Tivoli Identity Manager Performance Tuning Guide

<u9dJOThC Report DB mPDP,TDxT\"uY,1#

v Jb:zIIF2D5q=(PDF)(fv= OutOfMemory ms#

d(=(:vS WebSphere Application Server PD JVM Qs!#;s,XBt/

WebSphere Application Server "YNKP PDF (f#2IT+C'dkS1!5|

D*X(5,T^F PDF (fdvPDG<}#g{b)d(=(;,x,SC'

dkA;zI CSV q=D(f#

v Jb:z;\7(}],=GqZKPr7(ns;N,=D4,#

d(=(:4,T>Z;Z0wHPm13OD}]P'TVNP#I\D5G:

– ;P}],=

– xPP

– ^'


– ns,=jIDUZM1d

v Jb:g{zzIIF2D5q=(PDF)D(fdvD~,;sn!/T>DE

"r#VD~r*,rz;PZXU$nD(fD~sE\zIm;v(f#

d(=(:XUNN0fD(f,;szIm;v(f#

v Jb:(f&\?~9C4TDj)wCDCJXFE"#BDj)GCJXFn

(ACI)#g{zi4CJXFE"(ACI)(fzIwrZ0(f1!n(O%w

KP(f –> CJ(f –> CJXFE"(ACI),zI\4=4TDj)#

d(=(:`- ITIM_HOME/data/reportingLabels.properties D~"V/|D|

accessControlInformation Dj)5#

– ;Fv:accessControlInformation=Access Control Information {ACIs}

– B:accessControlInformation=Access Control Item {ACIs}

v Jb:T>Z(fPDVe+!,^(DA#

d(=(:T PDF q=r CSV q=#f(f"r!(f#*#f(f,Z(fd

v0ZPSD~K%!n!qmf*#/@=yhD?<,"dk;vP'DD~

{,;s#fD5#zHITr! PDF q=2ITr! CSV q=D(f#ITT

]rrar==r! PDF (f#CSV (f9CC'ITr!.==r;JO%3D

(f#

*r! CSV (f,k4PTBYw:

– zI(f1!q CSV (fq=#

– ZT0rP!qmf*!n#

– a)P'D;CMD~{4#f(f#

– 9C Microsoft Excel rd{NN CSV D~DAwr*(f#

– 9Cr!!nr!D5#

Tivoli Identity Manager C'SZJbMd(=(

zI\v=b) Tivoli Identity Manager C'SZJb,"9CTBd(=(:

v Jb:g{fZK1G<DVP5},1z9C0I!1!n^DK1`T_PU

ZVN1,VPK1DbvBVND5I* null#;x,I!UZVND(e8(5

;\* null#

d(=(:+0Z!?~`MSI!UZX~|D*1!UZX~`M,r_4(

;vBD ACI "+4mI(ZhK ACI PDBI!UZX~0Z!?~tT#

v Jb:ZJ'm%OmSyP_tT+<B java.lang.UnsupportedOperationException m

s#{"*:

CTGIMO002E. An unhandled exception occurred.Error: java.lang.UnsupportedOperationException: the owner and (or) serviceor an account can NOT be changed.

d(=(:kp9Cm%hFw+yP_tTmS=J'm%#9C Tivoli Identity

Manager a)DJ'ICMB_LYw4hCre}J'DyP_#

v Jb:i/%*{F;\,vsZ 100 vV{D$H,r_44({F#1T>1,

100 vV{^FTZD${F;a;P#


d(=(:kpdk,} 100 vV{D0i/%*{F15#

v Jb:TZ5q-r,zI\h*|Dz<NqPmnP0z<1M0\x14%

ODj)#}g,zIT+0z<14%ODj)|D* Recertify,"R+0\x1

4%ODj)|D* Decline#

d(=(:jITBNq:

1. `- CustomLabels.properties D~,"mSBD Recertify M Reject 4%j):

RAA=RecertifyRAR=Decline

kp|DVPD Approval j) AA M AR D5,z<9Ch*|G#

2. +z<ZcYwD>z<zk|D*A RAA,+\xzk|D*A RAR#

3. |D(+w)Kvz<ZcD*;_#7#*;__PTB5:

– Recertify 76

activity.resultSummary == "RAA"

– Reject 76

activity.resultSummary == "RAR"

v Jb:s?tTG ITIM_HOME\data\CustomLabels.properties D~P1YDj)#}

g,)&_T`pTZ erProvisioningPolicy tT1Yj)#

d(=(:zXkV/+1YDj)mS= ITIM_HOME\data\CustomLabels.properties

D~PDtT#qr,C'gfT>tTD5#mSTBj):

erProvisioningPolicy=Provisioning PolicyerWorkflowDefinition=Workflow DefinitionerSystemRole=ITIM GrouperIdentityPolicy=Identity PolicyerPasswordPolicy=Password PolicyerHostSelectionPolicy=Host Selection PolicyerBPOrg=Business Partner Organization

v Jb:`p)&_TDCJXFn_PtTmI(,T> eroriginalpolicydn M erdraft

w*tT{F,x;G9C|GDj)#

d ( = ( : C J X F n ; J C Z ~ X D t T # V / + B P j ) m S =

ITIM_HOME\data\enroleHiddenAttributes.properties D~PDtT:

eroriginalpolicydn=eroriginalpolicydn

erdraft=erdraft

v Jb:BPtT&C|,ZIQwDtTK%P:

erpersonstatus

eraccountstatus

erorgstatus

erbporgstatus

eraccountcompliance

d(=(:~XDtT(rK;IQw)Z enRoleHiddenAttributes.properties D

~P8(#*9Cb)tTITQw,V/S enRoleHiddenAttributes.properties

D~>}tT#


m`~XDtTG53\mDtT,C';&CxP^D#Z9CH0~XDtT

I{PT Tivoli Identity Manager C'9C/f#

v Jb:g{UZdk==G;A==,C'y{D1dT 12 !1q=T>,xR;

Pa)Og(a.m.)rBg1d(p.m.)D8>{#

d(=(:+ dateinput ==VNhC*A/4==#1dT 24 !1q=T>,"

I;}7mb#w*\m1,4PTB=h:

– !qdC –> C'gf(F#

– ZsPP!q Identity Manager C',;s!q ITIMAccount#

– ZfeP!q erpswdlastchanged#

– ZtTxrDq=!n(P,k7#VN&ZA/4==#4,Z0^D1PC

VN;w*0;A1\=li##f|D#

g{UZdkVN&Z;A#=,Z ITIM_HOME\data ?<BD Labels.properties

D~P^DTBP:

readOnlyDateFormat=MMM dd, yyyy hh:mm:ss z

AwgB:

readOnlyDateFormat=MMM dd, yyyy hh:mm:ss a z

v Jb:0ks=1PT>Z0K11T"a}LPDl# CommonName 5#

d(=(:^D0vK15eD selfRegister Yw#k4PTB=h:

":dC –> 5e!n(–> K1P0{FtT1D5XkhC* sn#g{0{Ft

T1D5DX cn,}%E>Zc#

1. w* ITIM \m1G<#

2. %wdC#

3. %w5e`M#

4. !qB-K%PDK1#

5. %w selfRegister w*Yw#

6. Z selfRegister $wwO,Z0t/1M0selfRegister mI1Zc.dek{F(

;DE>Zc#

7. +wBDE>Zc#

0tT:E>Zc10ZvV#

8. Z0tT10ZP,dkTB Java E>:

var personData = person.get();var snValue = personData.getProperty("sn")[0];process.setRequesteeData(snValue);

9. %w7(##fYw#

_TJbMd(=(

zI\v=b)_TJb,"9CTBd(=(:


v Jb:1^\m1(^DC'$@ICJ'DPm1,TZITP'9CDJ',

T>msD0;Jm1j)#}g,^X(D ITIM C'I!TB=h:

1. w* ITIM C'G<

2. %w)& -> (e)&_T#

3. %wICD)&_T -> $@#

4. !q5)w*0{v_T1"%wLx#

ZmsP,0;Jm1j)j6 ITIM C'5JP'9CDJ'#

d(=(:Zh\m1C'A(^TJmTGX( ITIM C'DyP)&_TtTx

Pi4CJ#Kd(=(\bmsu~,dPQw API 5X;v;j{D_TTs#

g{4PQwDC';POJD(^,bVTsI\;}% erEntitlement Md{X*

DtT#

+AmI(ZhTBtT:

erPolicyItemNameerLabelerKeywordsdescriptionerEnablederScopeerPolicyTargeterReqPolicyTargeterEntitlementserPriorityerPolicyMembershiperDrafterOriginalPolicyDNerGlobalIderLastModifiedTimeerAclerAuthorizationOwnererParenterIsDeletederLifecycleEnable

v Jb:1C'"T^DVP_T1,"V%wa;;s%w4;;\4;;^DD

VN#

d(=(:H%w4;#kp%wa;,;sY%w4;#

v Jb:IT(+G+4(;vmsu~)+BDm]_T(TZC'`_P`,D

f6,Cw10$nDj6_T)<k~qwP#

d(=(:<kBm]_T.0,+$nDm]_TD`M~qk+;<kDm]

_TD`M~q`HO#\b<kk10$nDm]_T_P`,C'`M~qf

6DBm]_T#

mI(JbMd(=(

zI\v=b)mI(Jb,"9CTBd(=(:

v Jb:T<^DvKE"(}ggSJ~X7)D ITIM C'4=;uIvTDms

{"#ITIM C'TZG+tT;PACJ(,+GTZK1m%DNNd{tT<_

PA/4CJ(#

v }g,ITIM C'I!TB=h:


1. 9CP'DJ'G<#

2. Zi/wP,!q;v;C(}g My_Location_A)#

3. %wRDi/ -> \mK1#

4. !q ITIM C'D ID,}g Pat#

5. %wCJvKE"#;s!q(EE"!n(#

6. dkgSJ~ ID(}g [email protected])"%wa;#

T>;ums{":

Removal of dynamic role from peopleis not allowed by the system. The change will be ignored.Please press submit to schedule changes.

bv=8:vT{"#gSJ~ ID ;I&a;#

v Jb:C';Z(9CaJ&pO$53.s,g{53dCtT*'\kJbP

*;hC*4;\k,rO$DnFITwCD(; API G

SelfPasswordManager.resetPassword()#

bv=8:g{53dCtT*'\kJbP*;hC*1Sdk,rO$DnF

ICZwCNN API#}6= Tivoli Identity Manager V4.6 .s4PTBNq.;:

– O$9CaJ&pO$53.s,;\9C SelfPasswordManager.resetPassword() 4

4;\k#

– (}+53dCtT*'\kJbP*|D*1SdkTJmNN API wCdC

P'#

v Jb:19CB-PmrrU(Pmr"RC';PtT6pmI(4Ar4X*

DVN1,Tivoli Identity Manager m%Wv;vZ(l##14hCVN51,m

%i4w+5hC*PmPDZ;vn#r*C';P4mI(,WvZ(l##

d(=(:4PBPYw.;:

– C_POJtT6pmI(DC'hCJbVND5#;)VNQ-;hC*N

N5,;PA4mI(DC'IT^D;PZ(%}D5e#

– mS;vUW5=PmD%?#g{m%i4w!qUW5,r;a"zNNZ

(%},r*UW5M4!q;S*`,Div#,1,T<!P9Cm%(F

DyPB-PmOD09CUWP14!r#

– +KtTDA4mI(,13h;PAr4tTmI(DC'#Kd(=(v1

}];tPD1rEITS\#

?<~qwJbMd(=(

zI\v=b)?<~qwJb,"9CTBd(=(:

v Jb:9C Sun ONE Directory Server Du<20.s,|D*m;v LDAP ~q

w<B3)w}*'#

d(=(:Su< LDAP ~qwOD er-indexes.conf D~+1YDw}V/mS=

BD LDAP ~qw#9C Sun ONE Directory Server \mXF(jITBNq:

1. /@A Data=itim_suffix#}g,itim_suffix G;vng dc=com D5#

2. %wmStT4%#

3. mSBPtT:


index erparent eqindex erroles eqindex erservice eqindex ersupervisor eqindex ersponsor eqindex erhost eqindex erauthorizationowner eqindex erprerequisite eqindex erenabled eqindex errolename pres,eqindex eraliases eq,subindex erservicename pres,eq,subindex erobjectprofilename pres,eqindex ercustomclass eqindex eroid eqindex erisdeleted presindex erpolicyitemname pres,eq,subindex erlabel eq,subindex erkeywords eq,subindex erpolicytarget eq,subindex erreqpolicytarget eq,subindex erpolicymembership eq,subindex eroverride eqindex eruserclass eqindex erprocessname pres,eqindex eracl presindex eruid eq,sub

4. #ftT#;smSZtT{_O8(Dfr#

5. /@A Data=itim_suffix "R|%w itim_suffix#

6. !qXBw}!n#

d{JbMd(=(

zI\v=TBd{Jb,"9CTBd(=(:

v Jb:9C(*#eZd"zms1,;PdVDE"#

d(=(:tCzY#g{"zms,li trace.log D~("D)TKb=SDE

"#

v Jb:g{ZzG<.s"4u</~qQw,rQw'\#l#{"gB:

Remote Exception occurred in server thread; nested Exception is:java.rmi.RemoteException; nested exception is:java.lang.IllegalArgumentException: com.ibm.itim.dataservices.INVALID_ARGUMENT

d(=(:G<.s,4Pu<Dn/,}g/@i/w#;s,Qw~q#

v Jb:4( AIX JdwE*D~M~q.s,1z4(_T;sT<9C_6!n

mS\ktT1,"zl##

d(=(:1C'Sj<tTS<P;A_6tTS<;smS\ktT1,"z

l##Z)&_TP(eZ(1,WH/@A_6tTS<4mS\ktT#;s

5XAj<tTS<#

v Jb:1z,1^D;vTO Tivoli Identity Manager Ts1,I\azz;I$O

Da{r'\(T>/f{")#KJbZ9C Tivoli Identity Manager API 1n]

W"z,}gZ;v while/for -7Pa;`vks4^D,;vTs#,;vTs

OD""Yw<B9Ca{;I$bD:y4,#


d(=(:*7#yP]RYwI&jI,ZT,;v Tivoli Identity Manager Ts

xPZ~N^D.0]#;N1d,}g;VS#IT!qU/,;vTsDyP

Z{DtT|D"+|Dw*%v^DksxPa;#9C Tivoli Identity Manager

API 1,<GZ while/for -7PU/TTsDyPzDtT|D,"+|Dw*%

v^DksxPa;#

v Jb:9C LDAP V3 }Kw<BkJdwD;;Ba{,r_;;JdwS\w*

dk#}G9C`vKc{,Z;v-w}KwP9C=vTON}a<Bms#

}g,BP}Kw<B FilterException ms:

(&(eruid=a*)(ersql2000defdatabase=i*)(ersql2000deflanguage-E*))

d(=(:9C{O LDAP V2 D}Kw#

(&(eruid=a*)(ersql2000defdatabase=i*)(ersql2000deflanguage-E*))

v Jb:ZBPu~D+YiOB,Tivoli Identity Manager aIZZfgvivx'

\:

– s?""C'&Z;PZ 10 VS0ZZ}#GvDivBKv Tivoli Identity

Manager#}g,g{yP""C'(}%w X(0XU1<j)XU/@wxT

;G<Z Tivoli Identity Manager O,ra"zbViv#

– Tivoli Identity Manager ~qw DomZfM Java Qs!hC;;s#1a0\

}9CDZf,v*~qwVdDZf}1,"zZfgviv#

d(=(:w{BPD;nr`n:

– (}Z WebSphere \mXF( OjIb)Nq4^F WebSphere Application

Server a)DZfPa0D}?#

1. %w&CLr –> s5&CLr –> enRole –> Web #i –> app_web.war–> a0\m#

2. !q2Ga0\m#

3. !{!qgv#

4. u!nsZfPa0}VNPD5#

5hC Tivoli Identity Manager O;NITr*Dn//@wa0Dns}?

D^F#+K}VhC*!vZVdxzD~qwDZf}M Tivoli Identity

Manager 9CD WebSphere /:Zc}D5#

5. %w7("+ywD|D#f=wdC#

– (}jIK=hDiO4+a0;n/1duY=!Z 10 VSD5:

1 . ( ;

WAS_HOME/installedApps/nodename/enRole.ear/app_web.war/WEB-INF/web.xml D

~#

2. `- web.xml D~T+a01dN}D5S 10 VS|D*|!D5(}g 5

VS)#

3. #f web.xml D~#

4. Z WebSphere \mXF( O,#9"XBt/ enRole.ear s5&CLr#


Z 4 B D5|B

>Zhvz7D5DJb0d(l(#

vfojb|D

TTBvfoDjbxPK|D:

H0jb Bjb

IBM Tivoli Identity Manager Information Center

OzKTBjb:

v IBM Tivoli Identity Manager _TMi/\m

8OVQ;ZE"PDZ#

v IBM Tivol i Ident i ty Manager Server

Configuration Guide

v IBM Tivoli Identity Manager End User Guide

IBM Tivoli Identity Manager Information Center

VZ|,\mMdCE",b)E"w*z7

D*z(za)#

k20`XDdCE";Z IBM Tivoli Identity

Manager Server Installation and Configuration

Guide for WebSphere Environments P#

20kdC8OJb0d(l(

>Zhv20kdCJb0d(l(:

Jb: IBM Tivoli Identity Manager Server Installation and Configuration Guide for

WebSphere Environments P1YP!qTX<kJdwoT|D=h#

=SD>:*Z Tivoli Identity Manager ~qwOP!qTX<kJdwoT|,kZ

0P Tivoli Identity Manager ~qwDFczOmbjITB=h:

1. q! Tivoli Identity Manager oT'V CD#;sR= itimlp_agents_setup.jar D~#

2. 9C|nP==20CoT|#}g,Z|na>{BdkTBoT||n:

java –jar itimlp_agents_setup.jar

K1+t/ Tivoli Identity Manager oT|20Lr#*jIoT|20,k4U

20Lr0ZPT>D8>E"4PYw#

3. SB4G<= Tivoli Identity Manager#

4. 9C Tivoli Identity Manager GUI,%wdC -> <k/<v -> <k#

5. Z0<k/<v10ZO,/@A ITIM_HOME/timpla/AllAgents.jar D~#

6. %w<k}]A Identity Manager P4S#

7. 1oT|20jIs,%wLx#

Jb: Z IBM Tivoli Identity Manager Server Installation and Configuration Guide for

WebSphere Environments P;PXZ6X~qwrJdwoT|D8>E"#

=SD>:*6XoT|,kZ0P Tivoli Identity Manager ~qwDFczOjIT

B=h:

1. 9C|nP==6XoT|#


v ~qwoT|

a. |DAK?<:

ITIM_HOME/itimlp/lp_uninst

b. R= tidlp_uninstall.jar D~#

c. t/6XLr#}g,Z|na>{BdkTBoT||n:

java –jar tidlp_uninstall.jar

v JdwoT|:

a. |DAK?<:

ITIM_HOME/itimlpa/lpa_uninst

b. R= tidlpa_uninstall.jar D~#

c. t/6XLr#}g,Z|na>{BdkTBoT||n:

java –jar tidlpa_uninstall.jar

2. K1+t/ Tivoli Identity Manager oT|6XLr#*jI}%oT|,k4U

Lr0ZPT>D8>E"4PYw#

{"MgSJ~Jb0bv=8

>Zhv{"MgSJ~Jb0bv=8:

Jb: {"E CTGIMA616E ;PT>DD>#

d(=(:messageCTGIMA616E DD>gB:

;Jm+J'^Dr4(*;OfD4,#5w:"TT5)6p* correct/suspend/alert D~q4(;;BDJ''\#r_,"TT5)6p*correct/suspend/alert D~q+J'^D*;;BDJ''\#

\m1l&:kJ'`XD~qP5)hC,h94PNNa9a{zz;;BJ'DJ'^Dr4(#klizD;BThC;g{#{Jm;;BDJ',G4k+||D* MARK#

Jb: + Tivoli Identity Manager V4.5.1 }6A V4.6 .s,I Lotus® Notes +]

DgSJ~(*LxT> Tivoli Identity Manager V4.5.1 Uj#x9Cd{/@wDg

SJ~(*r9C}7RQ}6DUj#

d(=(:vT9C Lotus Notes DgSJ~(*a)D Tivoli Identity Manager V4.5.1

Uj#

Jb:Z}]<kD}LPITT>D{"h*5w:

VPD>:Qlb=Z*<kD}]k}]PVPD}].dfZe;#k!q}]

DEH3r#

|}:Qlb=Z*<kD}]kZ?j53ODVP}].dfZe;#k!q}

]DEH3r#


Jb:Zks(fQ-\$1d;n/DJ'1,h*|+7D{"T|7PXhv

C'D@}Yw#

vZ(fDC>,Tivoli Identity Manager ZGn/J'D}]6'OhCK;v^F#

TGn/J'(fksD1ddt,vK}54*ms#

VP{":vV;v/v0ZT>0kdkP'DC'dk5#1

B{":TGn/J'ks(fD1ddt(ns{}^F,C^F* 2147483647);

\sZ 1951 j 1 B 1 U=10UZ.dDdt#kdk;vOLDGn/1ddt#

E"PDJb0bv=8

"bT IBM Tivoli Identity Manager Information Center DTB|D:

v Zjb*0K1\m1;ZP,TBD>h*=SE":

VPD>:IT9Ci/wr(}9C;Z0Qw1!n(BDQw3fR=3v

K1#K1DQwtT1!hC* cn#Qw!n(vT- ACI w7Z(CJQw&

\DC'I{#

mSDD>:9IT(}i1m]Z(CJi/w#

v Zjb*0>}K11DSZP,h*TTBD>xP5w:

VPD>:=h 4:S0\mK113f!q;Zz*>}DK1T_D4!r"%

w0>}1#

mSDD>:vT- ACI w7Z(CJ>}&\DC'a)>}K1&\#

v Zjb*0\mCJ1;ZPjb*0>}i/G+1DSZo,TBD>h*|

}:

VPD>:ZIT>}i/G+0,zXk7Oi/G+P;|,C'PmPDN

NK1,RCG+;G)&_TDI1#g{4zcOv=vu~PDNN;v,

Tivoli Identity Manager ~qw+;aJmz>}i/G+#53+T>;ums{

",(*zZu~C=|}.0^(>}}Z"T>}Di/G+#

|}:h*TBu~4>}G+:

– /,G+

/,G+;C*)&_TI1#;x,zIT>}|,C'PmPK1D/,i

/G+#

– 2,G+

2,G+;C*)&_TI1#mb,z;\>}|,C'PmPK1D2,i

/G+#

ZIT>}2,i/G+0,Xk7OCi/G+;G)&_TDI1RCG+

;C|,C'PmPDK1#g{b=vu~PP;v;zc,Tivoli Identity

Manager Server +;Jmz>}i/G+#53+T>;ums{",(*zZu

~C=|}.0^(>}}Z"T>}Di/G+#

Z 4 B D5|B 39

v Zjb*0(F IBM Tivoli Identity Manager (*1;ZPjb*0XhD*eV

{M JavaScript1DSZo,h*XZgN8(XFV{D=SE"#

VPD>:h*TTBV{xP*e(9C`&D HTML 5eq= - &entity;)4

7#(*#e XML _Pf6Dq=#

=SD>:SC#e4(dv1,^(}7!{*eV{}C#}Gz*ZdvP

T>C4*eV{}C,qrF9ZD>#eP9Cb)V{}C#V{}CD;

v>}G &,|G8XbV{ &,CV{_P & 5eq=#

v Zjb*0(F IBM Tivoli Identity Manager (*1;ZPjb*0(*D/,Z

]jG1DSZo,&CmS=SD>4hv Lotus Notes V5.0 9C XHTML 7

<?xml version=″1.0″ encoding=″UTF-8″?> JV XHTML gSJ~?V1Q*DJb#

VPD>:(*VN(wb"D>M XHTML)GyZ XML D,rK|GXk{O

XML <xMq=f6Dfr(http://www.w3.org/XML/)#

w*d(l(D=SD>:T Lotus Notes V5.0(Z9C XHTML 7 <?xml

version=″1.0″ encoding=″UTF-8″?> JV XHTML gSJ~1PJb);9CD>#

e#

v Zjb*0(fj6\m}]1;ZPjb*0(F(fdCD~1DSZo,h

*=SE"#

VPD>:zIT^DtTD~,T|Dk(F(f`XDhCT0+C'(eD

/}mS=(F(fNq#

|DDD>:zITZ ITIM_HOME/data ?<P^Db)tTD~,T|Dk(F(

f`XDhCT0+C'(eD/}mS=(F(fNq#

mb,Z0(F(fDG(}]1SZP,h*=SE"#

VPD>:^D(f1^h4P}],=Nq#;x,g{|D(f#="(f ACI

r5e}](}g,g{+K1mSA53"#{CK1{FT>Z(fP),r

XkTb)|D4P}],=T9|Dz'#

=SD>:Z"z}],=D1ddtP(f;IC#

v Zjb*0(fj6\m}]1;ZPjb*0(f}Kw:Z((fhFwDy

> JOIN u~1DSZo,h*Zmu?PxPTB|}:

– rPE 20}Kw1P

VPD>:Person.Organization Roles = Organization Role.DN

|}:Person.Organization Roles = Role.DN

– rPE 70}Kw1P

VPD>:Business Partner Person.Organization Roles = Organization Role.DN

|}:BPPerson.Organization Roles = Organization Role.DN

– rPE 2205e1P

VPD>:ACI, Organizational Uni


|}:ACI, Organizational Unit

v Zjb*0+ Crystal Report k IBM Tivoli Identity Manager aO9C1;ZDT

BSZP,wvgB|D:

– 0Z Windows 53O20"dC Crystal Enterprise1

VPD>:f;Z~N,CNgBy>:

WH,9CfCm~a)D8>E"4P Crystal Enterprise Dj{20#Crystal

Enterprise m~Ik IBM Tivoli Identity Manager &CLr~qw20Z,;(

Windows zwOr20Zd{ Windows zwO#dC Crystal Enterprise 0,k

7#QhCK Crystal \mXF((CMC)#PXhC CMC DE",kND`&

Dz7D5#

|DDD>:dC Crystal Enterprise .0

1. q!20 Crystal Enterprise ~qwyZFczDwz{"7#\;(}9C|

Dwz{,S=KFcz#}g,g{j<{F* server1.ibm.com,k7#\

;;9Cwz{ server1 xP,S#I\h*mSu?=wzD~#*bT,

(T,kS20 Tivoli Identity Manager DFczdkK|n:

ping server1

2. 7#Q-hCK Crystal \mXF((CMC)#PXhC CMC DE",kN

D`&Dz7D5#

– 0dC IBM Tivoli Identity Manager 9C Crystal Report(Windows OD WebSphere

Application Server)1

VPD>:3. Z ITIM_HOME\data\crystal.properties D~P|BTBtT:

(g{^h|D,r;aT>yPDnM(e#)

cmsHost+K5hC*ZdO20 Crystal Enterprise DFczDwz{#

|DDD>:

cmsHost+K5hC*20P Crystal Enterprise DzwDwz{#kp+ IP X7

rj<zw{F(4,server1.ibm.com)hC*C5#g{*G1!KZ

dC Crystal Enterprise \m~qw,rK5&C* hostname:port#1!

KZ* 6400#

v 0dC Tivoli Identity Manager(UNIX OD WebSphere Application Server)1

VPD>:3. Z ITIM_HOME /data/crystal.properties D~P|BTBtT:

(g{^h|D,r;aT>yPDnM(e#)

cmsHost+K5hC*20P Crystal Enterprise DzwDwz{#g{*G1!KZ

dC Crystal Enterprise \m~qw(1!KZ* 6400),r&C+C5h

C* hostname:port#

|DDD>:

Z 4 B D5|B 41

cmsHost+K5hC* Crystal Enterprise yZFczDwz{#kp+ IP X7rj

<zw{F(4,server1.ibm.com)hC*C5#g{*G1!KZdC

Crystal Enterprise \m~qw,rK5&C* hostname:port#1!KZ*

6400#

v Zjb*0KP(f:C'dk5M}Kw1;ZDjb*0C'dk}Kw1D

m 38 P,mSKm`|},T>Zm 12 P:

m 12. C'dk}Kw

(f{F C'dk 1!5 hFw(f}Kw Crystal Report }Kw

J' ~q Nb Service.DN = _USERINPUT_ Service.DN = &ParamField

5q%; Nb O r g a n i z a t i o n a l C o n t a i n e r . D N =

_USERINPUT_

O r g a n i z a t i o n a l C o n t o . D N =

&ParamField ()

Gn/J' ~q Nb Service.DN = _USERINPUT_ Service.DN = &ParamField ()

Gn/\Z 14 Last Accessed Date = _USERINPUT_ Account.erLastAccess Date =

&ParamField ()

Yw ks= Nb Process.REQUESTER = _USERINPUT_ P r o c e s s . R E Q U E S T E R =

&ParamField ()

;ks= Nb Process.REQUESTEE = _USERINPUT_ P r o c e s s . R E Q U E S T E E =

&ParamField ()

Yw A c c o u n t A d d

(gtTD~P

y8()

Process.Type = _USERINPUT Process.Type = &ParamField ()

*<UZ 10UZD0}

.l

Process.Completed > _USERINPUT_

A N D P r o c e s s . C o m p l e t e d <

_USERINPUT_

Process.Completed > &ParamField1

() AND Process.Completed <

&ParamField2 ()axUZ 10UZ

Q\x ks= Nb Process.REQUESTER = _USERINPUT_

(Any)

P r o c e s s . R E Q U E S T E R =

&ParamField ()

;ks= Nb Process.REQUESTEE = _USERINPUT_

(Any)

P r o c e s s . R E Q U E S T E E =

&ParamField ()

*<UZ 10UZD0}

.l



_USERINPUT_




C' ks= Nb Process.REQUESTER = _USERINPUT_

(Any)

P r o c e s s . R E Q U E S T E R =

&ParamField ()

;ks= Nb Process.REQUESTEE = _USERINPUT_

(Any)

P r o c e s s . R E Q U E S T E E =

&ParamField ()

*<UZ 10UZD0}

.l



_USERINPUT_




vKJ' K1 Nb Person.Dn = _USERINPUT_ Person.DN = &ParamField ()


_USERINPUT_


&ParamField ()

vKJ'(4

G+)

G+ ^ ( 4 8 ( G

+)

Organization Role.DN = _USERINPUT_ Role.DN = &ParamField (Edit

Mask)


m 12. C'dk}Kw (x)


5q%; Nb O r g a n i z a t i o n C o n t a i n e r . D N =

_USERINPUT_


&ParamField ()

~qDJ'*

*

~q Nb Service.DN = _USERINPUT_ Service.DN = &ParamField ()

J'4, Nb(gtTD

~Py8()

A c c o u n t . A c c o u n t S t a t u s =

_USERINPUT_

A c c o u n t . e r a c c o u n t s t a t u s =

&ParamField ()

\mG+D_

T

G+ Nb Organization Role.DN = _USERINPUT_ Role.DN = &ParamField

TvKZ(D

~q

K1 Nb Person.DN = _USERINPUT_ Person.DN = &ParamField ()

J'Yw y}L Nb Process.Type = _USERINPUT_ R o o t P r o c e s s V i e w . T y p e =

&ParamField ()

J'Yw Nb Activity.Type = USERINPUT_ S u b P r o c e s s V i e w . T y p e =

&ParamField ()

*<UZ 10UZD0}

.l



_USERINPUT_

SubProcessView.Completed >

& P a r a m F i e l d 1 ( ) A N D

Process.Completed < &ParamField2

(axUZ 10UZ

~q`M Nb Service.servicetype = _USERINPUT_ service.servicetype = &ParamField ()


C'j6 Nb Activity.Subject = _USERINPUT_ S u b P r o c e s s V i e w . s u b j e c t =

&ParamField ()

4, Nb A c t i v i t y . R e s u l t _ S u m m a r y =

_USERINPUT_(Nb)

SubProcessView.

R E S U L T _ S U M M A R Y =

&ParamField ()

IvK4PD

J'Yw

a;_ Nb Process.REQUESTER = _USERINPUT_ person.DN= &ParamField ()

J'Yw Nb Activity.Type = USERINPUT_ S u b P r o c e s s V i e w . T y p e =

&ParamField ()

*<UZ 10UZD0}

.l



_USERINPUT_

SubProcessView.Completed >

& P a r a m F i e l d 1 ( ) A N D

Process.Completed < &ParamField2

()axUZ 10UZ

~q`M Nb Service.servicetype = _USERINPUT_ Service.erservicetype = &ParamField

()

~q Nb Service.DN = _USERINPUT_ service.servicetype = &ParamField ()

C'j6 * Activity.Subject = _USERINPUT_ S u b P r o c e s s V i e w . s u b j e c t =

&ParamField ()

4, Nb A c t i v i t y . R e s u l t _ S u m m a r y =

_USERINPUT_

S u b P r o c e s s V i e w . R E S U L T _

SUMMARY = &ParamField ()

Z 4 B D5|B 43

m 12. C'dk}Kw (x)


K<k\x K<K Nb PERSON.DN like _USERINPUT_ AND

PERSON.CN =

PROCESSLOG.REQUESTOR

PERSON.DN like &ParamField1 ()

AND PERSON.CN =

PROCESSLOG.REQUESTOR

*<UZ 10UZD0}

.l



_USERINPUT_






C'j6 * Process.Subject = _USERINPUT_ Process.Subject = &ParamField ()

4, * PROCESS.RESULT_ SUMMARY like

_USERINPUT_

PROCESS.RESULT_ SUMMARY

like &ParamField ()

K<n/ ACTIVITY. DEFINITION_ID like

_USERINPUT_

ACTIVITY. DEFINITION_ID like

&ParamField ()

Q]RDJ' J' Nb Account.DN = _USERINPUT_ account.eruid = &ParamField ()

K1 Nb Person.DN = _USERINPUT_ Person.DN = &ParamField ()



]RUZ 10UZ Process.Completed < _USERINPUT_ Process.Completed < &ParamField1

()

Q]RDvK K1 Nb Person.DN = _USERINPUT_ Person.DN = &ParamField ()


_USERINPUT_


&ParamField ()

]RX9U

Z

10UZ Process.Completed < _USERINPUT_ Process.Completed < &ParamField1

()

~q ~q Nb Service.DN = _USERINPUT_ Service.DN = &ParamField ()

~q`M Nb Service.servicetype = _USERINPUT_ Service.erservicetype = &ParamField

()

yP_ Nb Peson.DN = _USERINPUT_ Peson.DN = &ParamField ()


_USERINPUT_


&ParamField ()

_T )&_T{

F

Nb ProvisioningPolicy.PolicyName =

_USERINPUT_

P r o v i s i o n i n g P o l i c y . D N =

&ParamField ()

CJXFn ACI {F Nb ACI.name = _USERINPUT_ ACI.name = &ParamField ()

ACI OBD Nb ACI.category = _USERINPUT_ ACI.category = &ParamField ()

Ts`M Nb ACI.Target = _USERINPUT_ ACI.target = &ParamField ()

ACI 6' Nb ACI.scope = _USERINPUT_ ACI.scope = &ParamField ()


_USERINPUT_


&ParamField ()

-w3FE" ~q ^(h*dk) Service.DN = _USERINPUT_ Service.DN = &ParamField (Edit

Mask)

v G+vKJ'Doz;PmwXk!qG+#


VPD>:ozgBy>:0%w.Qw/iRM8(zkTd^F(fu?DG

+#g{;8(G+,r(fP+|,{Od{8(u~DyPG+#1*R=K

oz,kjITBNq:

1. w* ITIM \m1G<#

2. %wwK%<=8PD(f#

3. %wNq8ODKP(f#

4. !q0vK(f1w*(f`M#

5. !q0G+vKJ'1DSK%#

6. %w ? <jq!oz#

|DDD>:%w0Qw1iRM8(zkTd^F(fu?DG+#Xk!qG

+4KPK(f#

v Zjb*020M9C]v}],=w1;ZP,jb*0|DU>1DSZ_P

h*=SE"D"M#

VPD>:":TZ IBM Directory Server,+ DB2 }]bD1!&CLrQs!

vS=s}?,}g 4096#IBM Directory Server 9CKhC4f" changelog u

?#kND DB2 VaTq!^D&CLrQs!DE"#

=SE":Oracle r SQL Server 2000 ;h*d{=h#

v Zjb*020M9C]v}],=w1;ZP,jb*0Z%@D53O20v

?}],=0C1DSZ_Ph*=SE"D"M#

VPD>:":synchronizer_computer G20v?}],=0CDFcz#

itim_computer G20 Tivoli Identity Manager DFcz#

=SD>:Z Tivoli Identity Manager /:dCP,itim_computer GNb\\Zc#

v Zjb*020M9Cv?}],=0C1;ZP,jb*0"wv?}],=0

C1DSZh*8((i1!5#

VPD>:

– changeLogFetchSize

– maximumChangeLogsToSynchronize

– changeLogsToAnalyzeBeforeSynchronization

|DDD>:

k9CTB(i1!5:

– changeLogFetchSize=200

– maximumChangeLogsToSynchronize=10000

– changeLogsToAnalyzeBeforeSynchronization=5000

S1D1!5* 30 k#

v Zjb*0dC53tT1;ZP,+BD\?mS= enRole.properties D~TdC

fr\k,=#

VPD>:^#

Z 4 B D5|B 45

=SD>:fr\k,=dC

# This is the configuration flag to bypass the password

# validation on the orphan account when the request is

# submitted from the agent.

reversePasswordSynch.bypassPwdValidationOnOrphanAccount=false

g{K\?;hC*0true1R%"\k,=D4J'GB"J',r+vT\ki

$#

v Zjb*0KP(f:C'dk5M}Kw1;ZoDjb*0C'dk51Dm 37

P,h*xPTB|D:

– 0ACI {F1;P&CZj)*0g{48(dkr9C1!51DPPT>5

0Nb1,x;G0*,m>Nb51#

– 0K<n/1Pu?&C*0K<n/{F1#

– 0Gn/\Z1Pu?&C*0Gn/\Z(l})1#

– 0i/%*1Pu?&C*05q%;1#

– 0Yw1P&CZj"*0g{48(dk,r9C1!51DPPT>50J

'mS1,x;G0Nb1#

v Zjb*020M9C]v}],=w1;ZP,a=3vtT;fZ#

VPD>:Z0Z%@53O20]v}],=w1P,%@D=h 15 gBy>:

15. ^D,=FczO ITIM_HOME/data ?<PD enRoleLogging.properties D~,

gB:

– + jlog.logCmdPort tThC* 9992 TbD5#9992 KZI IBM Tivoli Identity

Manager ~qw9C,rK]v}],=w;\9C 9992 KZ4t/G<w#

|}:}%(vT)hv jlog.logCmdPort tTDNbD>#CtT;fZ#

v Zjb*0dCJ'E"1;ZP,h*|}PmPD3n#

VPD>:0dC13fOD0tT1!n(9z\;hCTB\k"G<\mM

1!$ww}6!n:

– 536'D$ww}6Mna>dC

|}DD>:KPmn&C*0$ww(*1#

v Zjb*0(F IBM Tivoli Identity Manager (*1;ZPjb*0BDJ'#e1

DSZo,vVTBod:

VPD>:

EmailContext =com.ibm.itim.mail.workflow.TemplateWorkflowNewAccountContext

|}DD>:

EmailContext =com.ibm.itim.workflow.notification.TemplateNewAccountNotification

VPD>:Zjb*0BD\k#e1DSZP,vVTBod:

EmailContext =com.ibm.itim.mail.workflow.TemplateWorkflowNewPasswordContext


|}DD>:

EmailContext =com.ibm.itim.workflow.notification.TemplateNewPasswordNotification

VPD>:Zjb*0|DJ'#e1DSZP,vVTBod:

EmailContext =com.ibm.itim.mail.workflow.TemplateWorkflowNewAccountContext

|}DD>:

EmailContext =com.ibm.itim.workflow.notification.TemplateNewAccountNotification

VPD>:Zjb*0]RJ'#e1DSZP,vVTBod:

EmailContext = com.ibm.itim.mail.workflow.TemplateWorkflowDeProvisionContext

|}DD>:

EmailContext = com.ibm.itim.workflow.notification.TemplateDeprovisionNotification

v Zjb*0JavaScript )9}C1;ZPjb*0Activity.description1DSZo,n/

hvh*=SE"#

VPD>:K;AVNG;vV{.,hvZ$wwhFwP(e1x(n/DC

>#

=SE":TZV/n/(K<"RFI T0$w%),K;AVNG;vV{.,z

mZ$wwhFwP(eD0YwD>#e1#TZyPd{n/,K;AVNG;

vV{.,hvZ$wwhFwP(e1x(n/DC>#

v Zjb*0+ Crystal Report k IBM Tivoli Identity Manager aO9C1;ZP,

h*=SE"#

VPD>:Z0dC IBM Tivoli Identity Manager T9C Crystal Report(Windows

OD WebSphere Application Server)1SZT0Z0dC IBM Tivoli Identity

Manager(UNIX OD WebSphere Application Server)1SZP,=h 1 gBy>:

g{ Crystal Enterprise k Tivoli Identity Manager 20Z,;(zwO,kx}K

=h"*==h 2#qr,kZ20P Tivoli Identity Manager DzwO4P Crystal

Enterprise D(F20#

mS:Z IBM Tivoli Identity Manager D/:?pP,Z/:D?v\\ZcO4

P Crystal Report dC=h#


h*=SE"#

VPD>:Z0dC IBM Tivoli Identity Manager T9C Crystal Report(Windows

OD WebSphere Application Server)1SZT00dC IBM Tivoli Identity

Manager(UNIX OD WebSphere Application Server)1SZP,=h 3 gBy>:

3. Z ITIM_HOME\data\crystal.properties D~P|BTBtT:(Bf;T>|DD

n)

}]b +K5hC* IBM Tivoli Identity Manager 9CD}]b#TZ DB2 }]

bdC,g{}]b$tZ0P Crystal Enterprise Dzw.bDzwO,k

8(8r IBM Tivoli Identity Manager 9CD5J}]bD}]bp{#

Z 4 B D5|B 47

mS:TZ Oracle,g{}]b$tZ0P Crystal Enterprise Dzw.bDzwO,

k8( IBM Tivoli Identity Manager 9CD5J}]bD TNS ~q{F#TZ

MS-SQL Server,k8( Tivoli Identity Manager 9CD}]bD5J{F#


h*=SE"#

VPD>:Z0dC Crystal Report j<(f#e1SZP,=h 2 gBy>:

2. TZ DB2,k+ db2jcc.jar M db2java.zip D~S SQLLIB/java ?<4F=

ITIM_HOME/lib ?<#TZ Oracle,k+ ojdbc14.jar S Oracle 20xr4F=

ITIM_HOME/lib ?<#

mS:TZ MS-SQL Server,TK=h^hYw#

v Zjb*0hCm])xM(F}]1;ZDjb*07(K12E1DSZP,

JavaScript >}msX9CK!4V80o14!z{}c#

VPD>:ITT2Efr9CTB JavaScript zk4xP*;:

return "ou=" + entry.dept[o] + ",ou=" + entry.bu[o] + ",ou=" + entry.dw[o];

|}:

return "ou=" + entry.dept[0] + ",ou=" + entry.bu[0] + ",ou=" + entry.dw[0];

v Zjb*0(fj6\m}]1;ZP,h*=SE"4hvTs}Kw#

=SD>:Z0}rmo=m>(1SZs,mSm;vjb*0(fP ACI Ts

}KwC(1DBZ,CZ|,TBE":

ACI P(eDTs}KwI(f}fCZZ}]bPG(}]M ACI E"#(f}

fh*Ts}Kw{OTB<(:

– LDAP = SQL *;D\'V}KwGZ LDAP }Kwf6D RFC 2254 Pa0

D}KwDS/#

– %dfr"soundex }KwM|FYw{;\'V#

– Z}rmo=P,v'V *(GE)(d{#

– Z LDAP }KwP,;JmTBXbV{:

- $(@*{E)

- @(at {E)

- _(B._)

- *(GE)

- ? (JE)

- /(}1\)

- $41$

- . (dc)

- :(0E)

- Ud

- !n(


Z LDAP }KwP;'VTBV{#g{ZTs}KwP9CTBV{,r(f

}f+;T ACI E"G(<Gb)V{:

- { s((E

- } R((E

- [ s=(E

- ] R=(E

- %(YVH{E)

- &(0k1E)

- ,(:E)

v g RFC 2254 Py8(,TBXbV{ZtT5PITw*#fV{9C#

– \2a + * w*#fV{,x;w*(d{9C

– \28 + ( w*s2(EV{9C

– \29 + ) w*R2(EV{9C

– \5c + \ w*41\V{9C

v Zjb*0dCJ'E"1;ZPjb*0\k,=1DSZo,&C+0tC Sync

\k1!nD|{*0tC\k,=1!n#

VPD>:0dC13f0tT1!n(PD0tC Sync \k1!n9\m1\;

T\kxP,=#

|}:0dC13f0tT1!n(PD0tC\k,=1!n9\m1\;T\

kxP,=#

v Zjb*0dCJ'E"1;ZPjb*0\kaJ/&p1DSZo,!n(D

{FP&CP;vUq#

VPD>:0dC13fD CHALLENGERESPONSE !n(

|}:0dC13fD CHALLENGE RESPONSE !n(#

v Zjb*0dCJ'E"1;ZPjb*0\m1(eDaJ==1DSZo:

VPD>:Z!q%wK&(eaJ4S1vVD0ZP(eM^D0\m1(e

DaJ==1DaJ#

|}:Z!q%wK&(e\maJ4S1vVD0ZP(eM^D0\m1(e

DaJ==1DaJ#

ZKZP,,;vmsP;v=S5}:

VPD>:4. %w%wK&(eaJ4S"(e0\kaJ/&p1Jb#

|}:4. %w%wK&(e\maJ4S"(e0\kaJ/&p1Jb#

v Zjb*0dCJ'E"1;ZPjb*0(eaJ1DSZo,1Y;vUq#

VPD>:I!:SoTPmP!qaJDoT73(1!oT73GI!D)#k

NDZ 350 3OD0oT73X(aJ1q!|È"#

|}:I!:SoTPmP!qaJDoT73(1!oT73GI!D)#kND

Z 350 3OD0oT73X(aJ1q!|È"#

Z 4 B D5|B 49

v Zjb*0(F IBM Tivoli Identity Manager (*1D;ZD0JV1SZP,

0-email1P!"ms#

VPD>:1C1ddt=Zs,JV+[/yP_P`,D0igSJ~wb1

D(*,;s9CJV#e+|G[/=;bgSJ~P,T)"Mx?vgSJ

~U~K#

|}:1C1ddt=Zs,JV+[/yP_P`,D0igSJ~wb1D(

*,;s9CJV#e+|G[/=;bgSJ~P,T)"Mx?vgSJ~U

~K#

v Zjb*0(F IBM Tivoli Identity Manager (*1;ZPjb*08((CJV

tT1M0bTJV#e1DSZo,&C9C XHTML 19CK HTML#

VPD>:Z HTML }DVNP,dkZgSJ~PT>DD>0NN JavaScript z

kr/,Z]#

|}:Z XHTML }DVNP,dkZgSJ~PT>DD>0NN JavaScript z

kr/,Z]#

v Zjb*0(F IBM Tivoli Identity Manager (*1;ZD0JV/,Z](Fj

G1SZP,&9CJo0BP1,x5J9CJo0;P1#

VPD>:5X;vV{.,||,?vT;PVtD-<(*DD>we#

|}:5X;vV{.,||,?vTBPVtD-<(*DD>we#

v Zjb*0(F IBM Tivoli Identity Manager (*1;ZPjb*0JVj)tT1

DSZo,PvK POST_OFFICE_TEST_ALT=bTJV#e,+Cj);GP'j)#

VPD>:IT(}`- Labels.properties D~P|,DTBtT,(FJVdC GUI

*XDj)#

– POST_OFFICE_TEST_ALT=bTJV#e

|}:vTKPmn,|;GP'j)#

– POST_OFFICE_TEST_ALT=bTJV#e

v Zjb*0(F IBM Tivoli Identity Manager (*1;ZPjb*01!/,Z]

jG1DSZo,m 27 P>}oDD>,vK3fWK#?VD>T>*0<RE

key=″readOnlyDateFormat″>1#

v Zjb*0(F IBM Tivoli Identity Manager (*1;ZD053(*1SZP,

0n/,1#e1"0}L,1#e1M0}LjI#e1VZZ1YUq#

VPD>:kN<Z 256 3OD0OBD JavaScript )91q!|È"#

|}:kN<Z 256 3OD0OBD JavaScript )91,q!|È"#

v Zjb*0dC IBM Tivoli Identity Manager 731;ZPjb*0%r SSL1D

SZo,= SSL M}V$iEvD4SvVK=N#

|}:vTX4D4S#

v Zjb*0(F IBM Tivoli Identity Manager gf1;ZPjb*0r*m%#e1

DSZo,3v=h}CK_PmsjbD!n(#

VPD>:%wC'gf(F!n(#


|}:%wm%(F!n(#

v Zjb*0(F IBM Tivoli Identity Manager gf1;ZPjb*0dC(FUj1

DSZo,4F+>UjD GIF f>D=h_P;}7D76#

VPD>:WAS_HOME/installedApps/enrole.ear/enrole.war/images

|}: WAS_HOME/installedApps/cell_name/enRole.ear/app_web.war/images

v Zjb*0(f`M1;ZPjb*0vK(f1DSZo,vVKTBJb:

VPD>: vKDJ'

|}: vKJ'

VPD>:vKK'(4G+)

|}:vKYw(f

VPD>:TvKDZ(

|}:TvKD(fZ(

mb,Z0CJ(f1SZP,vVKKJb:

VPD>:Gn/J';GCJ(fPmPDns;](f#

|}:+Gn/J'F/=CJ(fPmPDns;C#

v Zjb*0dC Tivoli Identity Manager ~qw SSL O$1;ZPjb*0dC

Tivoli Identity Manager ~qw49CT)p$i1DSZo,^}KZ~NT|,

=S}L:

VPD>:g{T Tivoli Identity Manager ~qwk;vr`vJdw.dD+r SSL

O$9CT)p$i,kjIdC%r SSL O$D}L,9C\?\m5CLr4

4(C~qwDT)p$iM(C\?,;si!$i(x;G(C\?)"+,

;vb9u$i20=?vJdwO\EN CA($id"_)PmP#

=SD>:9XkZ20Kd{ CA $iD Tivoli Identity Manager ~qwO+b

9uDT)p$iw*ENb(\?b)PD0)p_$i120#}g,g{z

}Z9C,;vENb(r\?b)q!$iM CA $i,k+b9uDT)p$i

(w*0)p_$i1)mS=ZdP4(T)p$iD,;v\?bP#g{z

*9C%@D\?b4Vt$iM CA $i,k+b9uDT)p$i20=(e

CA $iD\?bP#

":r* Tivoli Identity Manager ~qw9CD JSSE a)Lr*s CA $i()

p_$i)fZZ20kd`&$iDzwODENb(r\?b)P,rK

h*bv=SD=h#

v Zjb*0dC Tivoli Identity Manager ~qw SSL O$1;ZPjb*0>}!

0:ZbT73PdC Tivoli Identity Manager ~qwMyZ ADK DJdwCZ+

r SSL1DSZo,^}K>ZPD}LTZ=h 5 s|,M=S=h:

VPD>:

1. t/ IBM \?\m5CLr:

Z 4 B D5|B 51

...

2. r**4(T)p$iD1!EN\?b:

...

3. +wT>xrOfDB-jb|D*0vK$i1#K!n+T>Q20D$i

(gP)#

4. 4(T)p$i:

...

5. vi!T)p$i(x;|(k$iX*D(C\?):

a. Z0vK$i1B,!qi!$i#

b. 7#Z0}]`M1VNPT>~xF DER }]#

c. Z0$iD~{1VNP,dk**b9u$i8(D{F,Z>}Pdk

cacert_selfsigned.der#

d. Z0;C1VNP,dk*ECb9u$iD~DD~76,Z>}Pdk

WAS_HOME\AppServer\java\jre\bin\#%w7(#

6. Kv iKeyman#

=SD>(ZOfD=h 5 smSTBD=h 6):

– 6. +b9uT)p$i(w* CA $i)mS= Tivoli Identity Manager ~qw

9CDENbP:

- a. +wT>xrODB-jb|D*)p_$i#K!n+<BT>Q20D

CA $i#

- b. %wmS#

- c. +}]`M|D*~xF Binary DER }]#

- d. %w/@"/@A WAS_HOME\AppServer\java\jre\bin\ ?<#

- e. !q cacert_selfsigned D~"%wr*#

- f. 1a>zdkj)(g cacert_ITIMserver_selfsigned)1,dk;vrL

DhvT{F#

v Zjb*0STJPE}J'1;ZP,LDIF D~>};}7#

VPD>:Z LDIF D~P8(K*STJPE}DJ'#TBG LDIF D~Pu?

D>}:

dn: ou=excludeAccounts, ou=ITIM, ou=ITIM, dc=comou: excludeAccountsobjectClass: topobjectClass: organizationalunitdn: cn=SolarisProfile, ou=excludeAccounts, ou=ITIM, ou=ITIM, dc=comerObjectProfileName: SolarisProfileobjectClass: topobjectClass: eridentityexclusioncn: SolarisProfileerAccountID: rooterAccountID: admin

|}DD>:Z LDIF D~P8(K*STJPE}DJ'#TBG LDIF D~PD

u?D>}#Z>}P,ou=ibm PD ibm GZ Tivoli Identity Manager D LDAP ?

<PdCD1!i/L{Fr<C_j6#


dn: ou=excludeAccounts, ou=itim, ou=ibm, dc=comou: excludeAccountsobjectClass: topobjectClass: organizationalunitdn: cn=SolarisProfile, ou=excludeAccounts, ou=itim, ou=ibm, dc=comerObjectProfileName: SolarisProfileobjectClass: topobjectClass: eridentityexclusioncn: SolarisProfileerAccountID: rooterAccountID: admin

v Zjb*0T IBM Tivoli Identity Manager 9C Crystal Report1;ZPjb*0d

C IBM Tivoli Identity Manager(Windows OD WebSphere Application Server)1

DSZP,TBE"h*|D:

VPD>:=h 2 h*TB|}:

b) .jar D~(#;ZTB?<P:

C:\Program Files\Common Files\Crystal Decisions\2.5\java\lib

|}DD>:b) .jar D~(#;ZTB?<P:

C:\Program Files\Common Files\Crystal Decisions\2.5\java\libC:\Program Files\Common Files\Crystal Decisions\2.5\java\lib\external

lib\external ?<_P log4j.jar D~#

v Zjb*0T IBM Tivoli Identity Manager 9C Crystal Report1;ZPjb*0d

C IBM Tivoli Identity Manager(UNIX OD WebSphere Application Server)1D

SZP,TBE"h*|D:

VPD>:1. g{ Crystal Enterprise k Tivoli Identity Manager 20Z,;vzw

O,kx}K=h"*A=h 2.,qr,kZ20 Tivoli Identity Manager DzwO

4P Crystal Enterprise (F20#(}9C Crystal Enterprise 20Lr,+TB=

vi~20=?jzwO:

– Crystal "<r<

– Crystal Enterprise Java SDK

|}DD>:1. g{ Crystal Enterprise k Tivoli Identity Manager 20Z,;vz

wO,kx}K=h"*A=h 2.,qr,kZ20 Tivoli Identity Manager Dzw

O20 Crystal Enterprise D webtier i~#(#,IT(}4P Crystal 20m~

|P|,D install_webtier.sh E>jI20#

":

1. Crystal webtier i~D20XkI5JKP WebSphere Application Server M Tivoli

Identity Manager ~qw E>D UNIX C'4P#K Crystal 20Xk(EkT

Tivoli Identity Manager 9C#g{m;vC'*sCJ Crystal webtier i~,

Xk*CC'4P%@D20#kpZ`v UNIX C'.d2m,;v Crystal

webtier i~20#

2. 7#Z Tivoli Identity Manager ~qwFczOD /etc/hosts D~PfZTBu?:

ip_address host

Z 4 B D5|B 53

ip_address D5G Crystal Enterprise ~qwFczD5J IP X7#host G Crystal

Enterprise ~qwFczDwz{(;xr)#*7#Z+Ku?mS= /etc/hosts

D~sIT(} Crystal ~qwDwz{CJ|,kdkTB|n:

ping host

3. vT Linux:i$Z /etc/hosts D~P;Pu?+>XzwDwz{3d=XM IP

X7#}g,TBu?+wz{3d=XM IP X7:

127.0.0.1 host localhost.localdomain localhost

TBu?+@9KJb"z:

127.0.0.1 localhostIPaddress_server1 host

IPaddress_server1 D5G server1 D IP X7#host D5G Tivoli Identity Manager

~qwFczDwz{#

VPD>:=h 2 h*TB|}:

b) .jar D~(#;ZTB?<P:

CRYSTAL_HOME/java/lib

|}DD>:b) .jar D~(#;ZTB?<P:

CRYSTAL_HOME/java/libCRYSTAL_HOME/java/lib/external(_P log4j.jar)

zJ/Jb0bv=8

>ZhvQ-kD5Jb0bv=8:

v Jb:UoP,4T Microsoft Outlook Express OD Tivoli Identity Manager J~

DJ~wb;IA#

d(=(:r*{"Pm#Z{"PmPwbIA#Kb,zIT(}%w{"P

mPD{"ZmbD0ZPqCIAwb#

v Jb:BoP,0Tivoli Identity Manager deinstallieren10ZPTBod_Po(m

s:

Bitte warten Sie während des Deinstallers von InstallAnywhere die folgenden Funktionen

entfernt...

d(=(:}7Dod*:

Bitte warten Sie während der Deinstaller von InstallAnywhere die folgenden Funktionen

entfernt...

v Jb:w`@oP Tivoli Identity Manager 209C servidor1 w* WebSphere

Application Server {F,C{FXk8(* server1#

bv=8:kp9C servidor1 w* WebSphere Application Server {F#9C{F

server1#


Adobe Acrobat Reader hs

*KC=nQa{,k9C Adobe Acrobat Reader V4.05 r|_f>4i4MCJ Tivoli

Identity Manager D5#zITZTB Web >cR= Adobe Acrobat Reader:

http://www.adobe.com/products/acrobat/readstep2.html

Z 4 B D5|B 55

http://www.adobe.com/products/acrobat/readstep2.html


Z 5 B 203qM^)|

>Zpn5w203q,"a)z7^)|D Web X7#

203q

?vYw53Dy> CD |, Tivoli Identity Manager a)D;5P20D~#

R=kzDYw53`&D203qD~:

v itim-4.6-cd-images-linux.txt

v itim-4.6-cd-images-aix.txt

v itim-4.6-cd-images-sun.txt

v itim-4.6-cd-images-windows.txt

}g,*R=kTZ AIX Yw53OxP Tivoli Identity Manager 20ya)DyP

D~,kr* AIX y> CD OD itim-4.6-cd-images-aix.txt D~#

PXyP\'V=(0dX8m~&CLrD|È",kND6IBM Tivoli Identity

Manager "P5w7#

i$^)|6p

ki$ WebSphere Application Server ^)|Gq&Z}7D6p#dkTB|n.;:

v Windows:

– %(~qwr/:I1

WAS_HOME\bin\versionInfo.bat

– ?p\mw

WAS_NDM_HOME\bin\versionInfo.bat

v UNIX:

– %(~qwr/:I1

WAS_HOME/bin/versionInfo.sh

– ?p\mw

WAS_NDM_HOME/bin/versionInfo.sh

}g,f>`FZTBdv:

v WebSphere Application Server Base

Q20Dz7-----------------------------------------------{F IBM WebSphere Application Serverf> 5.1.1.3j6 BASE

v ?p\mw


Q20Dz7-----------------------------------------------{F IBM WebSphere Application Server for Network Deploymentf> 5.1.1.3j6 ND

q!^)|

Tivoli Identity Manager D^)|D~_P`FZTBD{F:

4.6.0-TIV-TIM-platform-WAS-000n.zip

dP platform Gng AIX D5,n G;vng 1 D{}#

TB Web >ca) Tivoli Identity Manager ^):

http://www-1.ibm.com/support/dlsearch.wss?rs=644&q=&tc=SSTFWV

&dc=D420&loc=en_US&cs=utf-8&lang=en&sort=desc&rankfile=8&p=1

PXZq!^)|P"avK IBM Z_j6M8CnD|È",kNDZ 60 3D

:q!^);#


http://www-1.ibm.com/support/dlsearch.wss?rs=644&q=&tc=SSTFWV&dc=D420&loc=en_US&cs=utf-8&lang=en&sort=desc&rankfile=8&p=1

http://www-1.ibm.com/support/dlsearch.wss?rs=644&q=&tc=SSTFWV&dc=D420&loc=en_US&cs=utf-8&lang=en&sort=desc&rankfile=8&p=1

=< A. 'VE"

>Zhvq!T IBM z7'VDTB!n:

v :Qw*6b;

v Z 60 3D:q!^);

v Z 60 3D:*5 IBM m~'V;

Qw*6b

g{zD IBM m~vVJb,#{!lbv#SQwIC*6b7(JbDbv=8

GqQ-G<Z8*<#

Qw>X53rxgODE"PD

IBM a)s6'DD5,|GIT20ZzD>XFczrZ?x~qwO#IT9C

CE"PDDQw&\4i/EnE""jINqD8>E""N<E"T0'VD

5#

QwrXx

g{ZE"PDP^(R=JbDp8,kQwrXxPI\PzZbvJbDnB

Rnj{DE"#*iRz7DrXxJ4,kr*TB3; Web >c:

v IBM Tivoli Identity Manager Performance Tuning Guide

a)wZ Tivoli Identity Manager ~qwTCZzz73yhDE"#TB Web >

ca)KE":



/@E"PD0<u9dJO1?V#

v TB Web >ca)l$iMW$i:


IBMTivoliIdentityManager.html

/@A0'01`pD0Tz1?V"%wl$i4S#

v TB Web >ca)<u5w:


v TB Web >ca)VN8O:


v *q!d{ Tivoli Identity Manager J4D)9Pm,kQwTB IBM developerWorks

Web >c:









q!^)

z7^)ICZbvJb#(}liz7'V Web >c,IT7(D)^)ICZz

D IBM m~z7:

1. *A IBM m~'V Web >c(http://www.ibm.com/software/support)#

2. Z Products support pages A to Z B,!qz7{FDV8#

3. Z8(z7PmP,%w IBM Tivoli Identity Manager#

4. Z Self help B,R=^)Pm"^)|T0z7Dd{~q|B#

5. %w^)D{F,DAhv,r_P!qXBX^)#

*?\S\;NPX^)Md{ IBM z7`XBEDgSJ~(*,kq-TB=h:

1. SN; IBM z7D'V3f,%w3fsOGPD My support#

2. g{zQ-"a,kxAB;=#g{94"a,k%w'V3fROGPD"a

("zDC'j6M\k#

3. G<= My support#

4. Z My support 3fO,%ws`<=0qPD Edit profiles,"v/A Select MailPreferences#!qz75P,"!Ph*E"`MD`&r#

5. %wa;#

6. d{z7DgSJ~(*,kX4=h 4 M 5#

PX^)`MD|È",kND

Software Support Handbook (http://techsupport.services.ibm.com/guides/handbook.html)#

*5 IBM m~'V

IBM m~'Va)Tz71]Doz#

Z*5 IBM m~'V.0,zD+>Xk_P$nD IBM m~,$O,,RzXk

Q;Z(rIBM a;Jb#h*Dm~,$O,`My]z7D`M7(:

v TZ IBM "<Dm~z7(|(+;^Z Tivoli"Lotus M Rational z7,T0K

PZ Windows r UNIX Yw53OD DB2 M WebSphere z7),kCTB==

.;Z Passport Advantage PGG:

– *z:*A Passport Advantage Web 3f

(http://www.lotus.com/services/passport.nsf/WebDocs/ Passport_Advantage_Home)

;s%w How to Enroll

– g0:*q!zyZzRDg0Ek,k*A IBM m~'V Web >c

(http://techsupport.services.ibm.com/guides/contacts.html);s%wXmxrD{

F#

v TZ IBM eServer m~z7(|(,+;^Z,Z zSeries"pSeries M iSeries 73

PKPD DB2 M WebSphere z7),zIT(}k IBM z[zmr IBM 5q

Owoi1SOw4:rm~,$-i#PXT eServer m~z7D'VD|È

",k*A IBM Technical Support Advantage Web 3f

(http://www.ibm.com/servers/eserver/techsupport.html)#


http://www.ibm.com/software/support

http://techsupport.services.ibm.com/guides/handbook.html


http://techsupport.services.ibm.com/guides/contacts.html

http://www.ibm.com/servers/eserver/techsupport.html

g{z;7(h*DV`MDm~,$O,,k&r 1-800-IBMSERV(1-800-426-7378)

(@z),d{zR,k*A;Z http://techsupport.services.ibm.com/guides/contacts.html

OD IBM m~'VVaDO,3f,;s%wXmxrD{Fq!a)'VDKD*

5g0#

q->wbPD=h,T*5 IBM m~'V:

1. 7(JbD5q0l#

2. hvJb"U/30E"#

3. r IBM m~'Va;Jb#

7(JbD5q0l

r IBM (fJb1,*sza)OXT6p#rK,zh*mb"@@}Z(fDJ

bD5q0l#9CTBu~:

OXT 1 OX5q0l:^(9CLr,TYwlIOXD0l#K3ivh

*"4bv#

OXT 2 Xs5q0l:LrIC,+\=Oq^F#

OXT 3 )m5q0l:IT9CLr,OYD8vX*&$;GYwX

|&$;IC#

OXT 4 n!5q0l:JbTYwlI\!D0l,r_Q-TJb5)

KOmD&Tk)#

hvJb"U/30E"

r IBM bMJb1&!I\Xj8#*|,yPD30E",by IBM m~'V(

RITP'XozzbvJb#*KZ!1d,ke}TBJbDp8:

v Jb"z1,zyKPDm~f>?

v zGq_PkJb"4`XDU>"zYM{"?IBM m~'V\I\ah*CE

"#

v JbIT;XB4(p?g{IT,GD)=h<B'\?

v GqT53v}|D?(}g,2~"Yw53Mxgm~H#)

v z10}Z9CKJbDd(=(p?g{G,k<8Z(fJb1bM|#

Tivoli Identity Manager I,$T$_ozU/ IBM m~'Vzmy9CDE"#$_

U/ Tivoli Identity Manager D`XU>D~,4Pz7 JAR D~Dli,U/3)

\^DdCj8E","4(|,b)E"D9uD~#;s,9uD~I;+Mr

e-mail x'Vzm#

;PZ'VzmD8<BEIT9CK$_#PX|È",kNDIBM Tivoli Identity

Manager Problem Determination Guide#

r IBM m~'Va;Jb

IT(}TB=V=(.;a;Jb:

v *z:*A IBM m~'V>c(http://www.ibm.com/software/support/probsub.html)

OD0Submit and track problems13f#+zDE"dk=`&DJba;$_P#

=< A. 'VE" 61


http://www.ibm.com/software/support/probsub.html

v g0:*q!zyZzRDg0Ek,k*A IBM m~'V Web >c

(http://techsupport.services.ibm.com/guides/contacts.html)D*53f,;s%wX

mxrD{F#

g{za;DJbtZm~1]rIZ*'DrmsDD5,r IBM m~'V4(Z

(LrVv(f(APAR)#APAR j8XhvJb#;*I\,IBM m~'VMa*

za)5VDbvl(,1= APAR bv"R^)Q-"<#IBM ?l<aZ IBM z

7'V Web 3fO"<bvD APAR,rKv=,yJbDd{C'ITS,yDb

v=(Pqf#

PXJbbv=(D|È",kNDZ 59 3D:Qw*6b;MZ 60 3D:q!

^);#



=< B. yw

>E"G*Z@za)Dz7M~q`4D#IBM I\Zd{zRrXx;a)>D5

PV[Dz7"~qr&\XT#PXz10yZxrDz7M~qDE",krz

1XD IBM zmI/#NNT IBM z7"Lrr~qD}C"GbZw>r5>;

\9C IBM Dz7"Lrr~q#;*;V8 IBM D*6z(,NN,H&\Dz

7"Lrr~q,<ITzf IBM z7"Lrr~q#+G,@@Mi$NNG IBM

z7"Lrr~q,rIC'TP:p#

IBM +>I\Q5Pr}Zjkk>D5PhvDZ]PXDwn({#a)>D5"

4ZhC'9Cb)({DNNmI$#zITCif==+mI$i/Dy:

IBM Director of LicensingIBM CorporationNorth Castle DriveArmonk, NY 10504-1785U.S.A.

PX+VZ(DBCS)E"DmIi/,kkzyZzRrXxD IBM *6z(?E*

5,rCif==+i/Dy:

IBM World Trade Asia CorporationLicensing2-31 Roppongi 3-chome, Minato-kuTokyo 106-0032, Japan

>un;JC"zrNNbyDunk1X(I;;BDzRrXx:

International Business Machines Corporation04V41a)>vfo,;=PNNV`

D(^[Gw>D9G5,D)#$,|(+;^Z5,DPXGV("JzMJC

Z3VX(C>D#$#3)zRrXxZ3);WP;Jmb}w>r5,D#

$#rK>unI\;JCZz#

>E"PI\|,<u=f;;<7DX=r!"ms#K&DE"+(Z|D;b

)|D+`k>vfoDBf>P#IBM ITf1T>JOPhvDz7M/rLrx

PDxM/r|D,x;mP(*#

>E"PTG IBM Web >cDNN}C<;G*K=cp{Ea)D,;TNN==

d1TG) Web >cD#$#G) Web >cPDJO;G IBM z7JOD;?V,

9CG) Web >cx4DgU+IzTPP##

IBM IT4|O*J1DNN==9CrV"zya)DNNE"x^kTzP#NN

pN#

>LrD;mI=g{*KbPXLrDE"To=gB?D:(i)JmZ@"4(

DLrMd{Lr(|(>Lr).dxPE";;,T0(ii)JmTQ-;;DE

"xP`%9C,kkBPX7*5:

IBM Corporation2ZA4/10111400 Burnet Road


Austin, TX 78758U.S.A.

;*qXJ1Du~Mun,|(3)iNBD;(}?D6Q,<IqCb=fD

E"#

>JOPhvDmILr0dyPICDmIJOyI IBM @] IBM M'-i"IBM

zJLrmI-irNN,H-iPDuna)#

K&|,DNNT\}]<GZ\X73PbCD#rK,Zd{Yw73PqCD

}]I\aPwTD;,#P)b?I\GZ*"6D53OxPD,rK;#$k

;cIC53OxPDb?a{`,#Kb,P)b?G(}Fcx@FD,5Ja

{I\aPnl#>D5DC'&1i$dX(73DJC}]#

f0G IBM z7DE"ISb)z7D)&L"dvf5wrd{I+*qCDJO

Pq!#IBM ;PTb)z7xPbT,2^(7OdT\D+7T"f]TrNNd

{XZG IBM z7Dyw#PXG IBM z7T\DJb&1rb)z7D)&La

v#

Lj

BPuoG International Business Machines Corporation Z@zM/rd{zRrXx

DLjr"aLj:IBM"IBM Uj"AIX"DB2"Domino"Lotus"SecureWay"

Tivoli"Tivoli Uj"(C}]bM WebSphere#

Microsoft"Windows"Windows NT M Windows UjG Microsoft Corporation Z@z

M/rd{zRrXxDLj#

Intel"Intel Inside(Uj)"MMX M Pentium G Intel Corporation Z@zM/rd{

zRrXxDLj#

UNIX G The Open Group Z@zMd{zRrXxD"aLj#

Linux G Linus Torvalds Z@zM/rd{zRrXxDLj#

Java MyPyZ Java DLjG Sun Microsystems, Inc. Z@

zM/rd{zRrXxDLj#

d{+>"z7M~q{FI\Gd{+>DLjr~qjG#


��

LrE: 5724–C34

Pz!"

G152-0647-03

Date post:	09-Mar-2018
Category:	Documents
Upload:	vanngoc
View:	239 times
Download:	2 times

Tivoli Identity Manager -...

Documents