2011년 11월 30일 수요일

WAS - 저장소그룹에 복수LDAP그룹 매핑

http://publib.boulder.ibm.com/infocenter/clmhelp/v3r0m1/topic/com.ibm.jazz.install.doc/topics/c_plan_identity_management.html

Jazz to LDAP Group Mapping

Restriction: Mapping multiple LDAP groups to a Jazz role in a Jazz Team Server environment is supported.
  • However, if your Jazz Team Server runs on Apache Tomcat Application Server and mapping multiple LDAP groups to a single J2EE role is not supported by Tomcat, you will not be able to perform this type of mapping. 
  • IBM WebSphere Application Server supports mapping multiple LDAP groups to a J2EE role, therefore, you can configure this type of mapping for your Jazz Team Server running on WebSphere Application Server.

To map the Jazz group to multiple LDAP groups, the LDAP groups must be separated by a semicolon. For example, JazzAdmins=LDAPAdmins1;LDAPAdmins2 maps JazzAdmins group to LDAPAdmins1 and LDAPAdmins2.

Jazz Team Server defines five groups to map with:
  • JazzAdmins =[LDAP Group for Jazz admins]
  • JazzUsers =[LDAP Group for Jazz users]
  • JazzDWAdmins =[LDAP Group for Jazz Data Warehouse Admin]
  • JazzGuests =[LDAP Group for Jazz guest] (Not used by Rational Quality Manager)
  • JazzProjectAdmins =[LDAP Group for Jazz project admins]

For example, JazzAdmins=LDAPAdmins1;LDAPAdmins2, JazzUsers= LDAPUsers, JazzDWAdmins= LDAPDWAdmins, JazzGuests=LDAPGuests, JazzProjectAdmins=LDAPProjectAdmins

댓글 없음:

댓글 쓰기