LDAP Simplifies Intranet Access Control

摘要

Did you know that the ability to manage your OS/400 user and group profiles and authenticate using user profiles via Lightweight Directory Access Protocol (LDAP) exists on the iSeries? In addition, this capability requires no LDAP server configuration or duplication of profiles! One of the benefits of using LDAP to authenticate user profiles is that it provides intranet authentication across diverse non-iSeries services, such as application servers, messaging systems, and networking devices without additional user creation, management, or registration. This capability is available beginning in OS/400 V5R2. To help you understand iSeries LDAP support, we first explore the variety of ways you can use OS/400 user profiles with LDAP. We then provide example LDAP commands to illustrate the various profile management techniques. A sample scenario ties all the LDAP concepts together, showing how you can configure OS/400's HTTP server to use LDAP authentication via OS/400 user profiles for use with a basic intranet Web site.