Active Directory Services

To Setup ADS, Windows 2008 Enterprise Server is must.

Run dcpromo - this will start server manager.

Add roles
Select Active Directory Domain Services

Trust - 5 different trusts in ADS 2008
1. Automatic
Transitive, Two ways. (eg if forest A trust B and B trust C then A automatically trust C






2. Shortcut - Trusts established to avoid traversing multiple trusts across many domains.
If trust has to move from C – B – A – D – E, and then lots of traffic network is involved in this. The direct connection from C - E is considered as shortcut connection.













3. External – usually between domains in multiple forests.
4. Realm – between other non-Microsoft systems
5. Forest – usually between root domains of separate forests

few commands in ITDS

1. Use the ldapQuery script to issue an LDAP search

ldapQuery.bat and ldapQuery.sh

Then input the user to be searched in format:

ldapsearch -D cn=root -w password -b dc=edu,dc=,dc=com (objectclass=*)
ldapsearch -D cn=root -w password -b cn=sunil*

2. To start/stop ITDS LDAP Server instance
ibmdirctl -D cn=root -w password start
ibmdirctl -D cn=root -w password stop

3. To start/stop ITDS Admin Daemon
ibmdirctl -D cn=root -w password admstop
ibmdiradm& - to start

4. To check the LDAP Server status
ibmdirctl -D cn=root -w password status

5. Create a group in ITDS LDAP
Prepare an LDIF file with the following content:

dn: cn=groupname,cn=groups
objectclass: groupOfNames
objectclass: top
cn: groupname
owner: cn=ITDS Admins,cn=groups
member: cn=Sunil Sagar,dc=edu,dc=,dc=com


NOTE: Member is a required attribute. If not included, you will receive ObjectClass violation error.

ldapmodify –a –c –D adminID -w adminPW –h hostname -p -i ldif_file_name

SSO Concepts

http://www.ibm.com/developerworks/tivoli/library/t-ssocandc/index.html
http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/index.jsp?topic=/com.ibm.itame.doc_6.0/am60_webseal_admin207.htm
http://publib.boulder.ibm.com/tividd/td/ITAME/SC32-1134-01/en_US/HTML/amweb41_admin04.htm

TAM with IIS 7 : http://www.ibm.com/developerworks/tivoli/library/t-tamwkj/index.html?ca=drs-