RV220W LDAP Group Configuration

Question

During LDAP Group configuration LDAP Attributes are required. Can I handle any sample configuration for OpenLDAP or 389ds connectivity?
I would like to use them for internal VPN. But my LDAP users are not correctly handled.
Regards,
Marcin

Answer 1

Hi,
Curious - which LDAP server are you using ? Which version
of MQ are you using ?
Did you create new group names or did you stick to group
names that MQ already used (in the default file based
user repository) - 'admin' and 'user' ? This would be the groups
you created under:
cn\=group1,ou\=imqgroups,o\=Groups, dc\=unimas,dc\=com
Also, since you created new groups , you might want to read
up on how to modify the accesscontrol.properties file:
http://docs.sun.com/source/819-0066/security.html#wp47944
Of interest is this entry from the above page:
The default ACL properties file gives all users access
to NORMAL connection services and gives users in the
group admin access to ADMIN connection services:
connection.NORMAL.allow.user=*
connection.ADMIN.allow.group=admin
If you are using a file-based user repository, the default
group admin is created by imqusermgr. If you are using
an LDAP user repository, you can do one of the following
to use the default ACL properties file:
* Define a group called admin in the LDAP directory.
* Replace the name admin in the ACL properties file with
the names of one or more groups that are defined in
the LDAP directory.
The default entries in the accesscontrol.properties file
basically allow any user in the repository to log in,
but only users in group 'admin' to do admin stuff.
If you created a group called 'mygroup', you might want to
create the following entry (or modify existing entries) to
restrict only users in 'mygroup' to create normal JMS (ie not
admin) connections:
connection.NORMAL.allow.group=mygroup
hope this helps,
-isa
http://www.sun.com/software/products/message_queue/index.xml