svrrln45mst.ps

Transcription

1 IBM Tioli Identity Manager V4.5 GI ( GI )

2

3 IBM Tioli Identity Manager V4.5 GI ( GI )

4 41 Tioli Identity Manager ( 5724-C34) URL IBM (URL ) GI IBM Tioli Identity Manager Release Notes Version W3 W9 W3 W5 W7 (*) * W3 W9 W3 W5 W7 Copyright International Business Machines Corporation All rights resered. Copyright IBM Japan 2003

5 Tioli Identity Manager Serer i ii ii ii.... iii iii Adobe Acrobat Reader Version WebSphere WebSphere Tioli Identity Manager UNIX WebSphere Tioli Identity Manager Windows WebSphere Tioli Identity Manager WebSphere Tioli Identity Manager WebSphere HTTP Serer Tioli Identity Manager Web WebLogic WebLogic on UNIX Tioli Identity Manager WebLogic on Windows Tioli Identity Manager WebLogic Tioli Identity Manager WebLogic Tioli Identity Manager WebLogic Tioli Identity Manager Web WebLogic Tioli Identity Manager WebSphere WebSphere MQ ContainerSearch JaaScript Policy Organization Copyright IBM Corp iii

6 i IBM Tioli Identity Manager:

7 Tioli Identity Manager WebSphere embedded messaging support WebSphere Application Serer WebLogic IBM HTTP Serer Tioli Identity Manager Tioli Identity Manager Serer Tioli Identity Manager Serer Tioli Identity Manager Tioli Identity Manager WebSphere WebLogic UNIX Windows Tioli Identity Manager Tioli Identity Manager Tioli Identity Manager Policy Organization Tioli Identity Manager Tioli Identity Manager Tioli Identity Manager Tioli Identity Manager Tioli Identity Manager Tioli Identity Manager Copyright IBM Corp. 2003

8 Tioli Identity Manager Tioli Identity Manager Tioli Identity Manager Tioli Identity Manager WebSphere Application Serer : WebSphere Application Serer IBM WebSphere Application Serer V5.0 IBM IBM WebSphere Application Serer V5.0 IBM WebLogic Application Serer IBM DB2 Oracle Microsoft SQL Serer IBM Directory Serer Sun ONE Directory Serer WebSphere embedded messaging support ( IBM MQSeries) Web IBM HTTP Serer Microsoft IIS HTTP Serer i IBM Tioli Identity Manager:

9 Apache HTTP Serer Tioli Identity Manager Serer Tioli Software Library Tioli Tioli Software Library Web Tioli Software Glossary Tioli Tioli Software Glossary Tioli Software Library Web Glossary IBM Tioli Software Library PDF (Portable Document Format) HTML (Hypertext Markup Language) Library Product manuals Tioli Software Information Center : PDF Adobe Acrobat ( ) ( ) HTML PDF ii

10 IBM Tioli Software IBM Tioli Software Web Web IBM Software Support Guide ( ) % (%) C C # (#) ( ) iii IBM Tioli Identity Manager:

11 1 IBM Tioli Identity Manager Tioli Identity Manager : Adobe Acrobat Reader Version 4.05 Tioli Identity Manager Adobe Acrobat Reader 4.05 Adobe Acrobat Reader Web Copyright IBM Corp

12 2 IBM Tioli Identity Manager:

13 2 Tioli Identity Manager : WebSphere WebSphere Application Serer Tioli Identity Manager WebSphere Tioli Identity Manager UNIX UNIX (RAM ) 2. Tioli Identity Manager AIX 5.1¹ Tioli Identity Manager WebSphere Application Serer APAR IY36884 RAM: 1 GB : IBM 604e 375 MHz : /tmp 1 GB Tioli Identity Manager WebSphere Application Serer {WAS_HOME} 800 MB /ar 300 MB /itim MB : IBM DB2 Copyright IBM Corp

14 2. Tioli Identity Manager () Solaris 8² RAM: 1 GB : Solaris Sparc 440 MHz : /tmp 1 GB Tioli Identity Manager WebSphere Application Serer {WAS_HOME} 800 MB /ar 300 MB /itim MB : IBM DB2 1. AIX 2. Solaris: Tioli Identity Manager /etc/system set shmsys:shminfo_shmmax = set shmsys:shminfo_shmseg = 1024 set shmsys:shminfo_shmmni = 1024 set semsys:seminfo_semaem = set semsys:seminfo_semmni = 1024 set semsys:seminfo_semmap = 1026 set semsys:seminfo_semmns = set msgsys:msginfo_msgmap = 1026 set semsys:seminfo_semopm = 100 set semsys:seminfo_semmnu = 2048 set semsys:seminfo_semume = 256 set msgsys:msginfo_msgmax = set rlim_fd_cur=1024 WebSphere Tioli Identity Manager Windows 4 IBM Tioli Identity Manager: Windows (RAM )

15 3. Tioli Identity Manager Windows 2000 Adanced Serer Serice Pack 3 RAM: 1 GB : Intel Pentium 1 GHz : temp 1.5 GB 1.1 GB Tioli Identity Manager 500 MB itim45 WebSphere Application Serer 600 MB WebSphere Tioli Identity Manager WebSphere Tioli Identity Manager 4. WebSphere Tioli Identity Manager IBM DB2 Uniersal Database Enterprise Edition ¹ IBM DB2 Fix Pack 8.1 (Fix Pack 2 ) 7.2 (Fix Pack 9 ) AIX 5.1 Solaris 8 Windows 2000 Adanced Serer U U U Oracle U U U Microsoft SQL Serer SQL Serer 2000 U : 1. IBM DB2 Tioli Identity Manager ( : /home/db2inst1) 1GB WebSphere Tioli Identity Manager WebSphere Tioli Identity Manager 2 5

16 5. WebSphere Tioli Identity Manager Fix Pack IBM Directory Serer 5.1 (Fix Pack 1 ) AIX Solaris 8 Windows 2000 Adanced Serer U U U 4.1 (Fix Pack 2 ) (Windows NT Version 4.1.1) AIX 5.1 Sun ONE Directory Serer¹ 5.1 U AIX (5.1 ) U U 1. Web WebSphere HTTP Serer Tioli Identity Manager Tioli Identity Manager WebSphere HTTP Serer 6. WebSphere HTTP Serer Tioli Identity Manager Fix Pack IBM HTTP Serer¹ WebSphere Fix Pack 2 WebSphere Application Serer Base² WebSphere Application Serer Network Deployment² : 1. WebSphere Fix Pack HTTP 2. IBM HTTP Serer (WebSphere Application Serer Network Deployment ) WebSphere Fix Pack 5.0 WebSphere Fix Pack 2 APAR SOV62778 ( 3 ) APAR PQ75794 APAR PQ WebSphere Fix Pack 2 APAR SOV62778 ( 3 ) 6 IBM Tioli Identity Manager:

17 6. WebSphere HTTP Serer Tioli Identity Manager () Fix Pack 1. IBM HTTP Serer WebSphere Application Serer 2. WebSphere Application Serer JDK JDK IBM JDK 3. WebSphere Application Serer Base Fix Pack 2 CD ibmorb.jar {WAS_HOME}/jaa/jre/lib/ext WebSphere Application Serer Network Deployment CD ibmorb.jar {WAS_NDM_HOME}/jaa/jre/lib/ext WebSphere 5.0 Fix Pack 2 WebSphere JDK ibmorb.jar WebSphere Web WebLogic Web Windows Internet Explorer 5.5 (Serice Pack 2 ) Internet Explorer 6.0 (Serice Pack 1 ) Netscape 4.75 : 1. Cookies ID 3. Internet Explorer Jaa (JRE) -> Jaa 2 V1.3.1_04 WebLogic Tioli Identity Manager WebLogic on UNIX Tioli Identity Manager 2 7

18 7. Tioli Identity Manager AIX 5.1¹ Tioli Identity Manager WebLogic : RAM: 1 GB : IBM 604e 375 MHz : /tmp 500 MB /itim MB {BEA_HOME} 300 MB HP-UX 11i RAM: 1 GB : 440 MHz : /tmp 500 MB /itim MB {BEA_HOME} 300 MB Solaris RAM: 1 GB : Solaris Sparc 440 MHz : /tmp 500 MB /itim MB {BEA_HOME} 300 MB 1. AIX WebLogic on Windows Tioli Identity Manager 8 IBM Tioli Identity Manager:

19 8. Tioli Identity Manager Windows 2000 Adanced Serer Serice Pack 3 RAM: 1 GB : Intel Pentium 500 MHz : 500 MB /itim MB {BEA_HOME} 300 MB WebLogic Tioli Identity Manager WebLogic Tioli Identity Manager 9. WebLogic Tioli Identity Manager Fix Pack AIX 5.1 Solaris 8 Windows 2000 Adanced Serer Oracle U U U Microsoft SQL Serer SQL Serer 2000 U WebLogic Tioli Identity Manager WebLogic Tioli Identity Manager 10. WebLogic Tioli Identity Manager Sun ONE Directory Serer¹ AIX Solaris 8 Windows 2000 Adanced Serer 5.1 U AIX (5.1 ) 1. Web U U 2 9

20 WebLogic Tioli Identity Manager WebLogic Tioli Identity Manager 11. WebLogic Tioli Identity Manager WebLogic 7.0 (Serice Pack 3 ) ( ) : WebLogic on AIX JDK 1.3.1_06 Web Web Windows Internet Explorer 5.5 (Serice Pack 2 ) Internet Explorer 6.0 (Serice Pack 1 ) Netscape 4.75 : 1. Cookies ID 3. Internet Explorer Jaa (JRE) -> Jaa 2 V1.3.1_04 10 IBM Tioli Identity Manager:

21 3 (Add) (dsml) (Modify serice (dsml)) (TEST) (Modify serice) (Proisioning) -> (Manage Serices) -> (dsml) (Modify serice (dsml)) dsml UI (TEST) (Test Successful) WF dsml : WF dsml : dsml UI WF Tioli Identity Manager Tioli Identity Manager Pending Request (Not Started) WebSphere API ( API ) Tioli Identity Manager com.ibm.websphere.csi.csiexception: SECJ0053E: authorization failed for /UNAUTHENTICATED while inoking (Home)enroleejb.HomeHome... WebSphere (Eeryone) WebSphere Tioli Identity Manager D: Copyright IBM Corp

22 ( ) HP-UX 11i WebLogic Application Serer HP-UX WebSphere Application Serer WebLogic Application Serer extensions/examples/workflow/erpersonstatusexample.html extensions/examples/workflow/person_modify.xml (Person Modify Start Actiity Completion) ar person = Entity.get(); ar changes = person.getchanges(); ar result = "none"; if(changes!= null && changes.length > 0) { for(i =0; i < changes.length ; i++) { ar op = changes[i].op; if(op == 1 op == 2) { ar name = changes[i].attr; if(name == "erpersonstatus") { ar alues = changes[i].alues if(alues[0] == 1) { result = "suspend"; } else { result = "restore"; } } } } } action.set(result); WebLogic WebLogic WebLogic (Self-registration) : 1. (Self-registration) build SelfReg ValidateData.jaa sr.war 2. jar 3. 2 itim_client.jar enroleagent.jar : {ITIM_HOME}/lib/ 12 IBM Tioli Identity Manager:

23 : {ITIM_HOME}/extensions/examples/selfregistration/sr/WEB-INF/lib/ 4. {ITIM_HOME}/extensions/examples/selfregistration/sr/en WebLogic {ITIM_HOME}/extensions/examples/selfregistration/sr/en {ITIM_HOME}/extensions/examples/selfregistration/sr/WEB-INF/classes/ {ITIM_HOME}/extensions/examples/selfregistration/sr/en WebLogic 5. (Self-Registration) WebLogic {ITIM_HOME}/extensions/examples/selfregistration/sr/ Tioli Identity Manager WebSphere WebSphere Tioli Identity Manager Tioli Identity Manager Tioli Identity Manager WebSphere Application Serer 1 Tioli Identity Manager WebSphere Application Serer Network Deployment Manager WebSphere Application Serer AIX Solaris Tioli Identity Manager WebSphere Application Serer Base CD : MB Tioli Identity Manager AIX: instaix-was.bin 3 13

24 Solaris: instsol-was.bin 2. Tioli Identity Manager WebSphere Application Serer Base Tioli Identity Manager : WebSphere Application Serer E-fix PQ76707 : E-fix PQ76707 E-fix PQ77263 Network Deployment Manager ClassNotFound adminconsole.ear : Network Deployment Manager WebSphere MQ mqm : WebSphere MQ nc Tioli Identity Manager jmsserer enrole.ear : Tioli Identity Manager Tioli Identity Manager nc WebSphere Application Serer Tioli Identity Manager jmsserer jmsserer Tioli Identity Manager JMS : Tioli Identity Manager jmsserer 1. WebSphere Application Serer 2. (Serers) -> JMS (JMS Serers) 3. JMS JMS (Start) 14 IBM Tioli Identity Manager:

25 Tioli Identity Manager Windows 2000 Websphere Embedded Messaging Publish Subscribe Could not start the Websphere Embedded Messaging Publish and SubscribeWAS serer1 serice on Local Computer. Error 1075: The dependency serice does not exist or has been marked for deletion : Tioli Identity Manager Websphere Embedded Messaging Publish Subscribe Windows 2000 Tioli Identity Manager Tioli Identity Manager WebSphere Application Serer Tioli Identity Manager Tioli Identity Manager : WebSphere embedded messaging support WebSphere embedded messaging support {WAS_HOME}\logs\serer1\SystemOut.log Tioli Identity Manager WebSphere Application Serer {WAS_HOME}\log.txt WebSphere Application Serer WebSphere Application Serer 1 ID Windows Serice WebSphere embedded messaging support mq-prereq.log WebSphere Application Serer WebSphere Application Serer Tioli Identity Manager RACF AS/400 FTP AIX 3 15

26 LIBPATH=/lib/aix:"$WAS_LIBPATH":$LIBPATH export LIBPATH ;; PROTOCOL_DIR=$ITIM_HOME/lib/aix export PROTOCOL_DIR ;; Solaris LD_LIBRARY_PATH=/lib/sun:"$WAS_LIBPATH":$LD_LIBRARY_PATH export LD_LIBRARY_PATH ;; PROTOCOL_DIR=$ITIM_HOME/lib/sun export PROTOCOL_DIR ;; HP-UX SHLIB_PATH=/lib/sun:"$WAS_LIBPATH":$SHLIB_PATH export SHLIB_PATH ;; PROTOCOL_DIR=$ITIM_HOME/lib/hpux11 export PROTOCOL_DIR ;; Windows 2000 libdelref.dll /lib/nt \winnt\system32 WebSphere Application Serer startserer.sh startserer.sh Tioli Identity Manager Tioli Identity Manager com.ibm.db2.jdbc.db2exception:[ibm][cli Drier][DB2/NT]SQL0601N The name of the object to be created is identical to the existing name. : Tioli Identity Manager enrolehiddenattributes.properties : enrolehiddenattributes.properties Organization Unit Name : 100 Organization Unit Name WebSphere Application Serer {ITIM_HOME}/bin/db2config Tioli Identity Manager : WebSphere Application Serer Tioli Identity Manager WebSphere Application Serer WebSphere Tioli Identity Manager Tioli Identity Manager 16 IBM Tioli Identity Manager:

27 : Tioli Identity Manager IBM Directory Serer Fix Pack 1 CNTR0019E: Non-application exception occurred while processing method "send". Exception data: 32: No such object : WebSphere MQ WebSphere MQ SendMessage WebSphere MQ (itim_wf) (itim_wf_pending) CNTR0019E: Non-application exception occurred while processing method "send". Exception data: (data not shown...) The Connection Manager receied a fatal connection error from the Resource Adaptor for resource JMS$ITIM Queue Connection Factory$JMSManagedConnection@ The exception which was receied is jaax.jms.jmsexception: MQJMS2008: failed to open MQ queue : (AIX ) WebSphere MQ 1. /usr/websphere/appserer deletemq.sh /usr/websphere/appserer/logs createmq.nodename_jmsserer.log./deletemq.sh ITIM-45AIXCluster1 faith jmsserer mqm 2. /usr/websphere/appserer createmq.sh 3 17

28 /usr/websphere/appserer/logs createmq.nodename_jmsserer.log./createmq.sh ITIM-45AIXCluster1 faith jmsserer WebSphere MQ AMQ7463: The log for queue manager WAS_timwin7_jmsserer is full. MQJE001: Completion Code 2, Reason 2102 : AMQ7463 JMS MQJMS2005: failed to create MQQueueManager for <identifier>_serer1 : WebSphere MQ ( Embedded Messaging Serer) WebSphere () Embedded Messaging Serer Tioli Identity Manager Tioli Identity Manager ( ) Not supported ID ( ) : Tioli Identity Manager Version 4.4.x Tioli Identity Manager Version 4.5 Version 4.4.x IBM Directory Serer 18 IBM Tioli Identity Manager:

29 : Tioli Identity Manager profile agentnameprofile Windows NT nt40profile agentnameprofile resource.def 2. agentnameprofile Windows: {itim45} data remote resources UNIX: {ITIM_HOME}/data/remote resources : {ITIM_HOME}/data/remote_resources/<agentnameprofile> 3. remote resources resource.def com.access360.enrole com.ibm.itim com.access360 com.ibm 4. config_remote_serices Windows: {itim45} bin UNIX: {ITIM_HOME}/bin config_remote_serices JAVA_HOME WebSphere: %WAS_HOME% AppSerer\jaa WebLogic: %BEA_HOME% jdk131_06 5. {itim45}\bin\unix\config_remote_serices agentnameprofile agentnameprofile 6. Tioli Identity Manager (Proisioning) -> (Manage Serices) -> (Add) 3 19

30 20 IBM Tioli Identity Manager: AIX Tioli Identity Manager my8chars my9charss 8 : Tioli Identity Manager Tioli Identity Manager Policy Organization : Tioli Identity Manager : Internet Explorer <applet> Jaa 2 ersion (Use Jaa 2 ersion for <applet>) Jaa (Jaa Plug-in Control Panel) (Use browser settings) Tioli Identity Manager <applet> Use Jaa 2 ersion Internet Explorer -> Jaa Plug-in -> -> Jaa (Jaa Plug-in) <ersion> Web WebSphere Application Serer Fix Pack 2 WebSphere Web Serer Fix Pack WebSphere Plug-in Cumulatie Fix Web (1 ) &q=plugin+&uid=swg &loc=en_us&cs=utf-8&lang=en : Tioli Identity Manager : Tioli Identity Manager Tioli Identity Manager.lok.lok Tioli Identity Manager : SearchMO.toString() NullPointerException : Tioli Identity Manager 4.5 WebSphere Application Serer HTTP WebSphere Application Serer IBM HttpSession SearchMO.toString() NullPointerException : PDF CSV (File)

31 (Sae As) PDF CSV CSV CSV CSV (File)-> (Sae As) (Sae As type) Microsoft Excel Workbook Microsoft Excel XLS : : (Schedule List) (Data Validity) (Submit) (Reset) : (Reset) (Submit) (Reset) Serice.createEntity() : Serice createentity API Tioli Identity Manager IBM Directory Integrator : / (Add/Modify Person) (Reset) 1. Log on to Tioli Identity Manager 2. (My Organization) 3. (Manage People) 4. (Add) 5. (Person) 6. (Organizational role) 7. (Reset) 3 21

32 : (Reset) (Search) (Delete) ContainerSearch JaaScript ContainerSearch JaaScript Tioli Identity Manager (Workflow Designer) (Serice Selection Policies) ContainerSearch JaaScript OrganizationalContainerSearch searchbyfilter(string containername, String filter, [int scope]) ar locationcontainer = new containersearch(); ar thislocation = locationcontainer.searchbyfilter("location", "(l=raleigh)", 2); API Jaadoc {ITIM_HOME}/extensions/api/com/ibm/itim/dataserices/model/domain/ 22 IBM Tioli Identity Manager:

33 4 Policy Organization Tioli Identity Manager Policy Organization Copyright IBM Corp

34 24 IBM Tioli Identity Manager:

35 5 Tioli Identity Manager Microsoft Outlook Express : Copyright IBM Corp

36 26 IBM Tioli Identity Manager:

37 6 Tioli Identity Manager 4.5 Tioli Identity Manager release 4.5: : README ACI Identity Policy Single Tioli Identity Manager UI Hosted Serice Type ( ) ACI Serice Type = Hosted Serice ACI ALL Hosted Serice ACI ACI Filter Requests 12:00 AM 01:00 AM View Pending Requests (Ad hoc reporting)> (Run Reports)> (Next Scheduled Synchronization) (Ad hoc reporting): ACI ACI (Ad hoc reporting): (Design Schema) Notes Notes (Ad hoc reporting) (Data Synch) (Run) / (Ad hoc reporting): (Design Schema) (Loading) Internet Explorer NetScape () (Add Person) (Adding new organizational) (Org Unit Name) (Reset) (people) (orgs) (org unit) (Add) Copyright IBM Corp

38 128 (Organizational Units) (Locations) ApplicationFactory jaadoc AS/400 (AS/400 Agent) Tioli Identity Manager 4.5 Serer (Serice Selection) (Search) > (Serice Selection Policies) ( (Proisioning) > (Serice Selection Policies) ) (Search Results) (Back) (Search) > (Workflow Design) Tioli Identity Manager Tioli Identity Manager erchangepswdrequired = FALSE Change Password at Next Logon? Tioli Identity Manager : API ( E ) SQL Tioli Identity Manager ID JNDI Policy 6 ITIM : GUI (Remoe) 3 (Delete) Tioli Identity Manager WebSphere () WebSphere WebLogic Tioli Identity Manager com.ibm.itim.apps.impl.websphereplatformcontextfactory {ITIM_HOME}/extensions/doc/applications/applications.html com.ibm.itim.apps.impl.websphere.websphereplatformcontextfactory Entity Type system-defined user-modified 28 IBM Tioli Identity Manager:

39 Entity user-defined user-modified Tioli Identity Manager GUI (Refresh) Tioli Identity Manager WAS (pop) (close) ( X ) GUI enrole.xsl Styles.css com.ibm.itim.apps.authenticationexecption Tioli Identity Manager API DSML GMT : (User Listing) LDAP DB2 Identity Manager (Configuration Administrator) Identity Manager (Add Identity Manager) (Configuration Tabs) (Search Filter) (Contextual) (Account) (Change Password) (Create Password) E / (Challenge/Response) // 1 (Not Started) (Hosted Sericews Accounts) [DAMLContext.executeRequest] Host URL (Org Unit) ( (Organization root) ) (Identity Policy) Tioli Identity Manager GUI (IBM DB2) (LDAP) DB/2 Tioli Identity Manager 6 29

40 ITIM RACF Tioli Identity Manager E DBCS ACI Exchange2000 Agent C: tioli agents NTAgent API (Delete Account API) : (Scheduled delete Person) Tioli Identity Manager API Tioli Identity Manager SericeLockNotFoundException (Design Reports)> (Preiew) (Time) (50,000) JMS Tioli Identity Manager Domain (Specify Tioli Identity Manager Domain Information Panel) (Domain and Serer Name Lengths) dsml 20 K 6999 (Pending request) (End User Guide Changes) WebSphere Jaa 2 Tioli Identity Manager (Reports)> (Run Reports) Enter OK Netscape 4.75 (Person) 30 IBM Tioli Identity Manager:

41 / (login failure) extensions/doc/applications/applications.html 5( (Proisioning Applications Class Diagram)) (Design Workflow) (Full Name) (Full name) (First name) (Last name) Tioli Identity Manager WebSphere Tioli Identity Manager Windows WebLogic (Help Panel) NetScape NetScape HR (HR Feed) / Tioli Identity Manager (Compute Changes) Tioli Identity Manager IBM Directory Integrator DistinguishedName ( (Role) (Manager) ) IBM Directory Integrator DSML2 JNDI / (Home/View Completed Request) (Subject) (Serice) (Serice) (Profile) (Naming Context) (Data Feed) enrole_data IBM Directory Integrator (IBM Directory Integrator Data Feed Serice) (Naming Context) [namingcontexts] (Attribute(s) iolate schema.[namingcontexts]) Tioli Identity Manager E (Delete Person) 6 31

42 (Install Completed panel) (Next) (Done) AIX Netscape DistinguishedName Jaadoc enrole Jaascript entity.getproperty( erpassword ) (User Interface Configuration) Installing Tioli Identity Manager (Dynamic Org Roles) LDAP LDAP (Dynamic Role) LifecycleManager Jaadoc (Workflow design) (List of people) lok ITIM.sh Windows log4j.appender.logger.maxbackupindex= MB itim.log (Long Organizational Unit) LTPA (Mandatory Adanced Proisioning Parameters) HPUX WebLogic Tioli Identity Manager (Dynamic Role) (Modify Account) (Submit) (Reset) erpersonstatus Tioli Identity Manager com.ibm.itim.webclient.search.searchutility.bindtosession Null Ptr 32 IBM Tioli Identity Manager:

43 (Multiple Identity Policies) LDAP erglobalid Tioli Identity Manager 103K 25K MVS RACF Agent RECON Tioli Identity Manager 4.5 App Serer (COMPLETE) NetScape Browser 4.75 (Bad Request) Netscape 4.75 Tioli Identity Manager (Session Timeout) ( OK) Netscape 4.75 (Proisioning)>ID (Define Identity Policies)> (Add)> (Serices)> (Serice Types) Netscape 4.75 ITIM (Home)> (Manage Accounts) ITIM (ITIM Groups) Netscape Acrobat Reader NetScape ITIM (ITIM Group Description) Netscape ACI (No Results Found) BP Org (Not Authorized) (Not Authorized) Noell Netware (Tree) (Context) (Serice) Tioli Identity Manager NullPointerException com.ibm.itim.dataserices.model.domain.accounttable API NullPointerException (Hosted Serice) OBJECT_NOT_FOUND (Back) JaaScript (Actiity JaaScript Extensions) : TAB (Completed Request Data Tab) ID 6 33

44 : (Forgot your password?) Challenge/response (Password Challenge/response) 50K DSML Feed Oracle Oracle.ddl SQLPLUS ORACLE_JDBC_DRIVER_PATH WebSphere Tioli Identity Manager : (SubTree) (Password Policies attribute) (Password policy) : DN (Source DN) PasswordSynchSerlet NullPointerException (Pending Requests) (Suspend)/ (Restore)/ (Delete) Suspend User Suspend Users Person ACI: (Blank) Person ACI: / PersonManager.getPeople() API Tioli Identity Manager 30K Windows 2000 (Policy Change) process.auditeent() (Audit Trail) process.id JaaScript DSML parameters.eruid[0] UI: ITIM RACF Tioli Identity Manager Tioli Identity Manager Identity Manager Identity Manager 34 IBM Tioli Identity Manager:

45 (Change password on your Identity Manager account is unsuccessful. Please try again after some time or contact your Identity Manager administrator) : (pending) (completed requests) RequestManager API: SQL / (add/modify person) / (add/modify business partner person) (Reset functionality on Configuration) > (Challenge Response) (Challenge Definition Mode) (Effectie Date) (Effectie Date) (Restore Account)> (Change password): ACI (Account ACI Password) ( (Write Permission) (DENY) ) (Retriee Password Page) (Cancel) (Retriee Password Page) (Cancel) (shared secret) (Clear) Acrobat 5.x OU OU (unknown) (Search) -> (Search By Filter) (Serice Selection Policy) (Search) (Search)/ (Add) Tioli Identity Manager Weblogic (build selfreg): (Resource Bundle) en (sr ) Web (class-path) DSML (Self-reg) 6 35

46 Serlet.Engine.Transports : 2981] <ERROR:com.ibm.itim.webclient.logon.LogonMediator> RemoteException (RemoteException occurred in serer thread) (Serice Selection Policy) ACI: (Serice Selection Policy) (Serice Selection Policy Script) SelfRegistrationManager SchemaViolation (Show Password Rules) (true) : (error Exception) CPU Tioli Identity Manager Dynamic Role ACI (Modify operation) (DENY) (Dynamic Role) WebLogic URL (Tenant management) URL GUI (DB2 APP_CTL_HEAP_SZ ) WebSphere Tioli Identity Manager API Tioli Identity Manager / (install/upgrade) Tioli Identity Manager 4.5 (WebSphere ) Tioli Identity Manager Tioli Identity Manager (Motal) WAS HTTPSerer (Specify 36 IBM Tioli Identity Manager:

47 where do you want to install WAS and HTTPSerer) OK Tioli Identity Manager WAS (WAS install fails) Tioli Identity Manager WAS install might failed Tioli Identity Manager Jaa Tioli Identity Manager jar Tioli Identity Manager enroleauthentication.properties Tioli Identity Manager Tioli Identity Manager WebSphere enrole Tioli Identity Manager E ( Notification) HTML 150 (Transaction Rollback) : IBM Directory Serer DB2 Tioli Identity Manager SSL Jaa UI : (Search Control Widget) ( (Search Control) ) UI (UI Customization) (Paginate Results) Tioli Identity Manager UNIX UNIX CD (Cancel) TIM / (Yes/No) Weblogic Tioli Identity Manager 4.3 -> 4.5: SSL CAKeyStore (Critical Security Cannot require clients to hae certificates without proiding a keystore with trusted certificates) Tioli Identity Manager 4.4 -> 4.5 HTTP (HTTP Error Msgs) Tioli Identity Manager 4.3 UNIX 4.5 {ITIM_HOME}/bin/{aix,solaris,hpux} 6 37

48 ( {ITIM_HOME}/bin/unix ) DSML DN DSML DN ACI (Business Partner Org. ACI) (Description) / (Read/Write) (Business Partner Organization) E ( Address) (View pending requests) (3000 ) Web enrole itim Weblogic : (HR (HR Feed)) ( NotSerializableException) Weblogic SP4 Tioli Identity Manager WEMPS Windows 2000 : (login times) () ACI (Workflow ACI Attribute) (Workflow Designer) Tioli Identity Manager clientactiitytimeout ( ) : LDAP jaascript (Workflow Designer) (START) (END) (Allow Transition) (Workflow Designer): (Out of memory) ( ) AND 38 IBM Tioli Identity Manager:

49 BU HR (HR Feed) BU (User BU Change) (User Data change) Workflow UNTIL E ( SMTP ) (Success) 6 39

50 40 IBM Tioli Identity Manager:

51 . IBM IBM IBM IBM IBM IBM IBM ( ) IBM World Trade Asia Corporation Licensing IBM IBM IBM Web Web Web IBM Web IBM (i) ( ) (ii) Copyright IBM Corp

52 IBM Corporation 2ZA4/ Burnet Road Austin, TX U.S.A. IBM IBM IBM IBM IBM IBM IBM Corporation AIX DB2IBM IBM logo SecureWay Tioli Tioli logo Uniersal Database WebSphere Lotus IBM Corporation Domino IBM Corporation Microsoft Windows Windows NT Windows Microsoft Corporation 42 IBM Tioli Identity Manager:

53 UNIX The Open Group Jaa Jaa Sun Microsystems, Inc.. 43

54 44 IBM Tioli Identity Manager:

55 ,,,, ii iii AIX 3, 8 HP-UX 8 Solaris 4 Windows 2000 Adanced Serer 5, 9 Solaris 8 Solaris 4 ii WebSphere Application Serer Tioli Identity Manager 13 IBM HTTP Serer 6 WebSphere Application Serer Base 6 WebSphere Application Serer Network Deployment 6 iii Windows 2000 Adanced Serer 5, 9 iii ii ii ii iii IBM DB2 i IBM Directory Serer i IBM HTTP Serer i Oracle i SQL Serer 2000 i Sun ONE Directory Serer i Tioli Identity Manager Web i WebLogic Application Serer i () WebSphere Application Serer i WebSphere embedded messaging support i iii UI WF WebSphere Application Serer 13 IBM HTTP Serer 6 WebSphere Application Serer Base 6 WebSphere Application Serer Network Deployment 6 iii ii ii ii IBM DB2 i IBM Directory Serer i IBM HTTP Serer i Oracle i SQL Serer 2000 i Sun ONE Directory Serer i Web i WebLogic Application Serer i WebSphere Application Serer i WebSphere embedded messaging support i iii Windows 7, 10 AIX 3, 8 HP-UX 8 IBM DB2 5 Copyright IBM Corp

56 () IBM Directory Serer 6 IBM HTTP Serer 6 Microsoft SQL Serer 5, 9 Oracle 5, 9 Solaris 4, 8 Sun ONE Directory Serer 6, 9 WebLogic 10 WebSphere Application Serer Base 6 WebSphere Application Serer Network Deployment 6 Windows 2000 Adanced Serer 5, 9 Sun ONE Directory Serer i IBM Directory Serer 6 WebLogic 9 WebSphere Application Serer 6 T Tioli Identity Manager WebSphere Application Serer 13 A AIX 3, 8 H HP-UX 8 I IBM DB2 WebSphere Application Serer 5 IBM DB2 i IBM Directory Serer i IBM HTTP Serer 6 i J JDK WebSphere Application Serer 7 M Microsoft SQL Serer WebSphere Application Serer 5 Microsoft SQL Serer WebLogic 9 W Web Windows 7, 10 Web i WebLogic 10 Microsoft SQL Serer 9 Oracle 9 Sun ONE Directory Serer 9 WebLogic Application Serer i WebSphere Application Serer Tioli Identity Manager 13 JDK 7 IBM DB2 5 IBM Directory Serer 6 Microsoft SQL Serer 5 Oracle 5 Sun ONE Directory Serer 6 WebSphere Application Serer Base 6 WebSphere Application Serer Network Deployment 6 WebSphere Application Serer i WebSphere embedded messaging support i O Oracle WebLogic 9 WebSphere Application Serer 5 Oracle i S Solaris 4, 8 Tioli Identity Manager 4 SQL Serer 2000 i 46 IBM Tioli Identity Manager:

57

58 : 5724-C34 Printed in Japan GI