Upload
nguyenbao
View
232
Download
4
Embed Size (px)
Citation preview
IBM Tivoli Identity Manager
N
4.5.1
GI10-2741-01
IBM Tivoli Identity Manager
N
4.5.1
GI10-2741-01
G
bΩTΣΣúºeA²\¬ 41 yNzñΩTC
G]2004 2 δ
úDbsqñtíAhqA≤ Tivoli Identity Manager 4.5.1 ]ús 5724-C34Hß≥MqC
N GI11-2741-00C
© Copyright International Business Machines Corporation 2004. All rights reserved.
²
1 ÷≤ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1s\α . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1pnΘΣñ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1y . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Tivoli Identity Manager w . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2úy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3÷y . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4uWsy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
2 nwΘD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5WebSphere Application Server WnwΘD . . . . . . . . . . . . . . . . . . . . . . . . 5
UNIX DU¡ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5Windows DU¡ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9ΩwD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10²°AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10HTTP °AM WebSphere Application Server nΘ . . . . . . . . . . . . . . . . . . . 11Σ Web s². . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
WebLogic Server WnwΘD . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14UNIX DU¡ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15Windows DU¡ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15ΩwD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16²°AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16WebLogic Server nΘ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17Σ Web s². . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
3 w¡εBDMµMΦk . . . . . . . . . . . . . . . . . . . . . . 19Tivoli Identity Manager ¡ε . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 Tivoli Identity Manager WebSphere ⌠¡ε . . . . . . . . . . . . . . . . . . . . . 20wDMµMΦ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20ΩPΩwDMµMΦ . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24²°ADMµMΦ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25WebSphere MQ DMµMΦ . . . . . . . . . . . . . . . . . . . . . . . . . . . 26NzíDMµMΦ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27ΣLDMµMΦ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28ContainerSearch JavaScript Wµ . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
4 σ≤N . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33Policy and Organization Administration Guide PuWí±AeΩTs . . . . . . . . . . . . . 33yD≤ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33Adobe Acrobat Reader D . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
5 ΩN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
6 APARs wΣLD . . . . . . . . . . . . . . . . . . . . . . . 37APAR . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37ΣLwD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
². N. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
© Copyright IBM Corp. 2004 iii
||
||
iv IBM Tivoli Identity Manager: N
1 ÷≤
w∩ IBM® Tivoli® Identity Manager NCo≈uNvσ≤
t Tivoli Identity Manager NΩTA]AsΩTApDMµMΦ
AHíiC
: Nu²ÑAyñΩT¬≤úΣLyuWíñΩTC
s\α
HUOñsW≤G
v w≤ APARS ΣLDAí≤ 38yΣLwDzCo
n½≤úWiαC
v ∩ΣL¡xíwΣW≤Aí≤HUG
– 5yUNIX DU¡z
– 9yWindows DU¡z
– ∩ WebSphere Application Server º Tivoli Identity Manager Oracle on
HP-UX ΣCpGnΣLΩTA\ 10yΩwDzC
– 15yUNIX DU¡z
– 16yΩwDz
– 16y²°ADz
v ∩q°iñ Incremental Data Synchronizer kΣL≤CpGnΣL
ΩTA\ IBM Tivoli Identity Manager tmΓUC
v πwΣL≤AHWiΩTsNWδTC
pnΘΣñ
bDp IBM Tivoli Software Support ºeA÷@U Tivoli ΣAñ
]⌠pU\ IBM Tivoli Software Support ⌠G
http://www.ibm.com/software/support/
pGznBUAQ IBM Software Support Guide]⌠pUñyz
ΦkApnΘΣñC
http://techsupport.services.ibm.com/guides/handbook.html
ΓUNúUCΩTG
v ⁿΣn²MΩµnD
v qX]zbΩaw
v bpßΣñºeA¼ΩTMµ
© Copyright IBM Corp. 2004 1
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
y
\¬ Tivoli Identity Manager wBy÷yíAPyi
α∩z±CMwznyºßA\ⁿAbuWsyC
Tivoli Identity Manager w
Tivoli Identity Manager Nσ≤wñys¿UCG
v ΩT
v uWU
v °Aw
v zPtm
v NW
v Nzw
ΩTG
v IBM Tivoli Identity Manager N
ú Tivoli Identity Manager nwΘDAHΣLíBíMΣLΣ
ΩTC
v Tivoli Identity Manager ²\¬d
uWUG
v Tivoli Identity Manager uWU
w∩ Tivoli Identity Manager z@AúπXíuWíDDC
°AwG
v IBM Tivoli Identity Manager °AwΓU UNIX M Linux - WebSphere
ú Tivoli Identity Manager wΩTC
v IBM Tivoli Identity Manager °AwΓU Windows - WebSphere
ú Tivoli Identity Manager wΩTC
v IBM Tivoli Identity Manager °AwΓU UNIX - WebLogic
ú Tivoli Identity Manager wΩTC
v IBM Tivoli Identity Manager °AwΓU Windows 2000 - WebLogic
ú Tivoli Identity Manager wΩTC
zPtmG
v IBM Tivoli Identity Manager Policy and Organization Administration Guide
ú Tivoli Identity Manager z@DDC
v IBM Tivoli Identity Manager @δΓU
ú Tivoli Identity Manager ΩTC
v IBM Tivoli Identity Manager tmΓU
2 IBM Tivoli Identity Manager: N
úµ@°AMO Tivoli Identity Manager tmtmΩTC
NWG
v IBM Tivoli Identity Manager Problem Determination Guide
ú Tivoli Identity Manager úΣLMDΩTC
NzwG
v Tivoli Identity Manager Nσ≤w ]A Tivoli Identity Manager Ω@ºuNzv
≤¡xSwσ≤oiC
úy
pGnΩTAF Tivoli Identity Manager úCziHqU
CmoyG
v WebSphere Application Server
http://www.ibm.com/software/webservers/appserv/support.html
: Uo≈u⌡MµANíwMtm WebSphere Application ServerA
Bí÷úBwO@C÷Mo≈MµbIΩOsA²
biαwgLFCpßNϕAΩΩTMµC
– IBM WebSphere Application Server V5.0 System Management and ConfigurationA
IBM ⌡
– IBM WebSphere Application Server V5.0 SecurityAIBM ⌡
v WebLogic Server
http://e-docs.bea.com/
v Ωw°A
– IBM DB2
http://www.ibm.com/software/data/db2/udb/support.html
http://www.ibm.com/software/data/db2
– Oracle
http://otn.oracle.com/tech/index.html
– Microsoft SQL Server 2000 (SP3)
http://msdn.microsoft.com/library/
v ²°Aí
– IBM Directory Server
http://www.ibm.com/software/network/directory
– Sun ONE Directory Server
http://wwws.sun.com/software/products/directory_srvr/5.1/index.html
v WebSphere Embedded Messaging Σ] IBM MQSeries
http://www.ibm.com/software/ts/mqseries
1 ÷≤ 3
v Web Proxy °A
– IBM HTTP Server
http://www.ibm.com/software/webservers/httpservers/library.html
– Microsoft IIS HTTP Server
http://www.microsoft.com/technet/prodtechnol/iis/default.asp
– Apache HTTP Server
http://httpd.apache.org/docs-project
÷y
UCyñúP Tivoli Identity Manager Server ÷ΩTG
v Tivoli Software Library úFU Tivoli yApABΩu@ϕBdB
⌡MqHτCziHbUz⌠Σ Tivoli Software LibraryG
http://www.ibm.com/software/tivoli/library/
v Tivoli Software Glossary t\h Tivoli nΘ÷NywqC≤UC⌠ Tivoli
Software Library ⌠¬Σ Glossary úσ Tivoli Software GlossaryG
http://www.ibm.com/software/tivoli/library/
uWsy
≤UC⌠ Tivoli nΘwñuWúúyAΣµíuiΓíσ≤µí
(Portable Document Format, PDF)vuWσ≤yÑ (Hypertext Markup Language,
HTML)vΓG
http://www.ibm.com/software/tivoli/library
pGnbwñMΣúyAbuwv¬ΓΣ÷@UúΓUCMß
buTivoli nΘΩTñvWMΣ B÷@UúWC
úy]ANBwΓUBΓUBzΓUHoΓ
UC
: FTOα CL PDF yAb Adobe Acrobat uCLv°íñA∩
X∩]zun÷@U → CLANα≈o∩C
4 IBM Tivoli Identity Manager: N
2 nwΘD
UCtmí Tivoli Identity Manager nwΘDC
:
1. w∩nwΘ²Mn≤CDU¡uαQ≥ Tivoli Identity ManagerC
z¬≤zí@⌠nwΘtC
2. oO Tivoli Identity Manager yñ@÷oDⁿwCoDOy
lIΩCXDCΩTiα≤sAPzßΣñNϕp
AHoo≤sC
WebSphere Application Server WnwΘD
íb WebSphere Application Server W⌡µº Tivoli Identity Manager °A
nwΘDC
: bO⌠ñA²w WebSphere Application Server ΣAMßw
Tivoli Identity Manager °ACpw÷ΩTA\A≤z¡x
Tivoli Identity Manager °AwΓUC
UNIX DU¡
UCϕµNⁿXwn UNIX @tBíHwΘDU¡Co
ú]tΣL⌡µDCpG⌡µ°A¼úu@ApAbP@íq
úWí°AMΩw°AANboíqúWAtΣLwΘ
Ω]W[ RAMC
AIX D
UϕNⁿXwn AIX @tBíHwΘDU¡C
ϕ 1. b WebSphere Application Server W⌡µº Tivoli Identity Manager AIX @tMwΘDU¡
@t í OΘU¡BiíHΣLwΘD
AIX 5.1 5.2]\
1Cv AIX 5.1GpGOft
WebSphere Application Server
Tivoli Identity Manager °
AAM 5100-03 @
M≤M APAR IY36884 ≤
sC
v \
11yHTTP °AM
WebSphere Application Server
nΘzAHod
WebSphere Application Server
ºnΘº
÷ΩTC
v RAMG1 GB
v BzGt 375 MHz ≤ IBM 604e Bz
v i íG
– /tmp π 1 GB i íC
– pG Tivoli Identity Manager nw WebSphere Application
ServerAWAS_HOME Nπ 800 MB i
íA /var hπ 300 MB i íC
– tm 500 MB ITIM_HOMEC
: wºeA²o IBM DB2 ]wC
© Copyright IBM Corp. 2004 5
|
|
|
|
|
||
|||
||||||||
|||||||
|
||
|
|
|||
|
|
ϕ 1. b WebSphere Application Server W⌡µº Tivoli Identity Manager AIX @tMwΘDU¡ (≥)
@t í OΘU¡BiíHΣLwΘD
:
1. ÷≤s AIX ΩTA\ http://techsupport.services.ibm.com/server/mlfixes/43/10/01to10.htmlC
Solaris D
UϕNⁿXwn Solaris @tBíHwΘDU¡C
ϕ 2. b WebSphere Application Server W⌡µº Tivoli Identity Manager Solaris @tMwΘDU¡
@t í OΘU¡BiíHΣLwΘD
Solaris 8 9]\
1Cv Solaris 8G2003 3 δº
ßoµíO
v Solaris 9G\
11yHTTP °AM
WebSphere Application Server
nΘzAHod
WebSphere Application Server
ºnΘº
÷ΩTC
v RAMG1 GB
v BzGt 440 MHz ≤ Solaris Sparc B
z
v i íG
– /tmp π 1 GB i íC
– pG Tivoli Identity Manager nw WebSphere Application
ServerAWAS_HOME Nπ 800 MB i
íA /var hπ 300 MB i íC
– tm 500 MB ITIM_HOMEC
Yb Solaris 9 Wµ@°AwAΣñ Tivoli Identity
Manager ww WebSphere Application ServerFY
O WebSphere Application Server wvObLkgJ (CD)
CΘWAzhttm 400 MB i íxs
ΘC
: wºeA²o IBM DB2 ]wC
6 IBM Tivoli Identity Manager: N
|
|||
|
||
||
|||
||||
|||||||
|
||
|
|
|||
|
||||||
ϕ 2. b WebSphere Application Server W⌡µº Tivoli Identity Manager Solaris @tMwΘDU¡ (≥)
@t í OΘU¡BiíHΣLwΘD
:
1. SolarisGúFΣLí ]wºATivoli Identity Manager nDb /etc/system ñπUC
MxG
v set shmsys:shminfo_shmmax = 4294967295
v set shmsys:shminfo_shmseg = 1024
v set shmsys:shminfo_shmmni = 1024
v set semsys:seminfo_semmsl = 100
v set semsys:seminfo_semaem = 16384
v set semsys:seminfo_semmni = 1024
v set semsys:seminfo_semmap = 1026
v set semsys:seminfo_semmns = 16384
v set msgsys:msginfo_msgmap = 1026
v set semsys:seminfo_semopm = 100
v set semsys:seminfo_semmnu = 2048
v set semsys:seminfo_semume = 256
v set msgsys:msginfo_msgmax = 65535
v set rlim_fd_cur=1024
b Solaris 9 WAw∩TwdΣLAsUC⌠G
http://www-1.ibm.com/support/docview.wss?rs=180&context=SSEQTP&q=Solaris&uid=swg24005009&loc=en_US&cs=utf-8&lang=en
HP-UX D
UϕNⁿXwn HP-UX @tBíHwΘDU¡C
ϕ 3. b WebSphere Application Server W⌡µº Tivoli Identity Manager HP-UX @tMwΘDU¡
@t í OΘU¡BiíHΣLwΘD
HP-UX 11i]\
1C
2002 12 δ Quality Pack v RAMG1 GB
v BzGt 440 MHz ≤
v i íG
– /tmp π 1 GB i íC
– pG Tivoli Identity Manager nw WebSphere Application
ServerAWAS_HOME Nπ 800 MB i
íA /var hπ 300 MB i íC
– tm 500 MB ITIM_HOMEC
2 nwΘD 7
|
|||
|
||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
||
||
||
|||
||||
|
|
|
|||
|
ϕ 3. b WebSphere Application Server W⌡µº Tivoli Identity Manager HP-UX @tMwΘDU¡ (≥)
@t í OΘU¡BiíHΣLwΘD
:
1. HP-UXGTivoli Identity Manager ²Mn≤H≤ WebSphere Application Server M WebSphere Embedded Messaging
ΣAΣnB HP-UX ]wCzsΦ /usr/conf/master.d/core-hpux A² SAM í]wj
≤ 2048 Cpb HP-UX Wwα WebSphere Application Server ÷ΩTAsUC⌠G
http://publib7b.boulder.ibm.com/wasinfo1/en/info/aes/ae/rins_prereq.html#prereqHpux
UCMµÑⁿ WebSphere Application Server ⌠úMµAB ]tB C
v dbc_max_pct=25
v maxdsiz=805306358
v maxdsiz=2048000000]ϕ≥u⌠⌠ípvúb
@íqúW
v maxfiles_lim=8196]b maxfiles ºe≤µC
v maxfiles=8000
v maxssiz=8388608
v maxswapchunks=8192
v max_thread_proc=3000
v maxuprc=512
v maxusers=512
v msgmap=2048
v msgmax=65535
v msgmax=131070]ϕ≥u⌠⌠ípvúb@í
qúW
v msgmnb=65535
v msgmnb=131070]ϕ≥u⌠⌠ípvúb@í
qúW
v msgmni=50
v msgseg=32767
v msgssz=32
v msgtql=2046
v nfile=58145
v nflocks=3000
v ninode=60000
v nkthread=7219
v nproc=4116
v npty=2024
v nstrpty=1024
v nstrtel=60
v sema=1
v semaem=16384
v semvmx=32767
v semmap=514
v semmni=2048
v semmns=16384
v semmnu=1024
v semume=200
v shmmax=2147483647
v shmmni=1024
v shmem=1
v shmseg=1024
v STRMSGSZ=65535
Linux D
UϕNⁿXw Linux @tBíHwΘDU¡C
8 IBM Tivoli Identity Manager: N
|
|||
|
|||
|
|
|
|
||
|
|
|
|
|
|
|
|
|
||
|
||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
ϕ 4. b WebSphere Application Server W⌡µº Tivoli Identity Manager Linux @tMwΘDU¡
@t í OΘU¡BiíHΣLwΘD
RedHat Linux Enterprise
for Intel (x86) AS 2.1
( 2.4)
L v RAMG1 GB
v BzGt 500 MHz ≤
v i íG
– /tmp π 1 GB i íC
– pG Tivoli Identity Manager nw WebSphere Application
ServerAWAS_HOME Nπ 550 MB i
íA /var hπ 300 MB i íC
– tm 500 MB ITIM_HOMEC
Windows DU¡
UϕNⁿXw Windows @tBíHwΘDU¡Co
ú]tΣL⌡µDCpG⌡µ°A¼úu@ApAbP@íqú
Wí°AMΩw°AANboíqúWAtΣLwΘΩ
]W[ RAMC
ϕ 5. b WebSphere Application Server W⌡µº Tivoli Identity Manager Windows @tMwΘDU¡
@t í OΘU¡BiíHΣLwΘD
Windows 2000 Advanced
Server
Service Pack 3 ≤s v RAMG1 GB OΘ
v BzGt 1 GHz ≤ Intel
Pentium
v i íG
– temp ²π 600 MB i
íC
– AUzú 1.1 GB i
íG
- 500 MB ≤ Tivoli Identity Manager °
A ITIM_HOME ²
- 600 MB ≤ WebSphere Application
Server
Windows Server 2003,
Enterprise Edition
L v RAMG1 GB OΘ
v BzGt 1 GHz ≤ Intel
Pentium
v i íG
– temp ²π 600 MB i
íC
– AUzú 1.1 GB i
íG
- 500 MB ≤ Tivoli Identity Manager °
A ITIM_HOME ²
- 600 MB ≤ WebSphere Application
Server
2 nwΘD 9
||
|||
|||
||
|
|
|
|||
||
||
|||
||||
||
|
||
||
||
||
||||
||
|
||
||
||
|||
ΩwD
UϕCXb WebSphere Application Server W⌡µ Tivoli Identity Manager °A
ⁿΣΩwC CXw∩ΩwⁿwBM≤íCΩwb
X ( U) ¡xWⁿΣC
ϕ 6. b WebSphere Application Server W⌡µº Tivoli Identity Manager °AiΩw
Ωw M
M≤
í
AIX 5.1 AIX 5.2 Solaris 8 Solaris 9 Linux H P - U X11i
W i n d o w s2 0 0 0AdvancedServer
W i n d o w s2003
I B M D B 2
U n i v e r s a l
D a t a b a s e
E n t e r p r i s e
Edition °A
]\
1C
7.2]t
M≤ 9
U U U
I B M D B 2
U n i v e r s a l
D a t a b a s e
Enterpr iseEdition °A
]\
1C
8.1]t
M≤ 2
U U U U U U U U
Oracle 8i]8.3 U U U
Oracle 9i]9.2 U U U U U U U U
Microsoft SQL
Server
SQL Server
2000 (SP3)
U U
:
1. IBM DB2 w@nbz Tivoli Identity Manager Ωw²]p /home/db2inst1ñ 2 GB
i íC APP_CTL_HEAP 2048C
²°AD
UϕCXb WebSphere Application Server W⌡µ Tivoli Identity Manager °Ai
²°AA CXw∩ΩwⁿwBM≤íCΩw
bX ( U) ¡xWⁿΣC
ϕ 7. b WebSphere Application Server W⌡µº Tivoli Identity Manager °A²°AD
²°A M
M≤
í
A I X4.3.3
A I X5.1
A I X5.2
Solaris 8 Solaris 9 Linux HP-UX11i
Windows2 0 0 0AdvancedServer
W i n d o w s2 0 0 3Enterprise
I B M
D i r e c t o r y
Server
4.1]t
M≤
2
U U U
10 IBM Tivoli Identity Manager: N
||
||||
|||||||||||
||
|||||||
||||||||||
|||||||
||||||||||
||||||||||
||||||||||
||||||||||||
|
|||
||
||||
|||||||||||||||
|||
|||
|||
|||||||||
ϕ 7. b WebSphere Application Server W⌡µº Tivoli Identity Manager °A²°AD (≥)
²°A M
M≤
í
A I X4.3.3
A I X5.1
A I X5.2
Solaris 8 Solaris 9 Linux HP-UX11i
Windows2 0 0 0AdvancedServer
W i n d o w s2 0 0 3Enterprise
I B M
D i r e c t o r y
Server
5.1]t
M≤
1
U U U U U U U U
I B M
D i r e c t o r y
Server
5.2 U U U U U
]
\
1C
U U U
S u n O N E
D i r e c t o r y
Server]
\
2C
5.1 U U U U
]
\
3C
U U
:
1. ¡≤ RedHat Linux Enterprise 3.0C
2. P]dUz⌠G
http://wwws.sun.com/software/download/inter_ecom.html#dirserv
3. RedHat Linux 7.2 Sun Linux 5.0C
HTTP °AM WebSphere Application Server nΘ
UϕCX WebSphere Application Server HTTP °A Tivoli Identity Manager °
AnΘC
HTTP °AnΘ
UϕCX HTTP °A Tivoli Identity Manager °AnΘC IBM HTTP Server
]tb WebSphere Application Server wñC
ϕ 8. HTTP °A Tivoli Identity Manager °AnΘ
nΘ M≤ í
IBM HTTP Server 1.3.26 WebSphere Application Server
M≤ 2
:
1. bM WebSphere Application
Server M≤ºeA²
÷¼ HTTP °AC
2. bO⌠ñAbw
IBM HTTP Server qú
WⁿJ WebSphere Application
Server M≤AΣñiα]
At WebSphere Application
Server Network Deployment
qúC
L
2 nwΘD 11
|
||||
|||||||||||||||
|||
|||
|||
|||||||||
|||
||||||||||
|||
|||||
||||||||||
|||
|
|
|
|
||
WebSphere Application Server nΘ
P WebSphere Application Server @e JDKAOΣ JDKC IBM
ΣLúºW w JDKA úbΣºCC
Yno]²Dní PQ77521AsUC⌠G
http://www.ibm.com/support/docview.wss?uid=swg24005451
pM≤÷ΩTA\z¡xºwΓU²ñíñ Tivoli
Identity Manager wvM CDC
UϕCX WebSphere Application Server Base Tivoli Identity Manager °A
nΘG
ϕ 9. WebSphere Application Server Tivoli Identity Manager °AnΘ
nΘ M≤ í
WebSphere Application Server
Base]\ 1C
5.0 WebSphere Application Server
M≤ 2
÷UCAMUC
íG
v APAR SOV62778]\
2C
v APAR PQ75794
v APAR PQ77263
\ 3AHA Windows
2003 ΣLM≤C
í PQ77521A
² DnC
12 IBM Tivoli Identity Manager: N
ϕ 9. WebSphere Application Server Tivoli Identity Manager °AnΘ (≥)
nΘ M≤ í
:
1. Yµ@°AwATivoli Identity Manager wN WebSphere Application Server wd
C
pGzΓw WebSphere Application Server 5.0Ahbw WebSphere Application Server ºeAzHΓΦ
ím½UCd WebSphere Application Server ºnΘC
v AIX 5.2G
– prereqChecker.xml
– prereqChecker.dtd
YnonP WebSphere Application Server ftdAsUC⌠G
http://www-1.ibm.com/support/docview.wss?rs=180&context=SSEQTP&q=4004726&uid=swg24004726&loc=en_US&cs=utf-8&lang=en
v Solaris 9G
– prereqChecker.xml
– wasmfuncs.SunOS
YnodAsUC⌠G
http://www-1.ibm.com/support/docview.wss?rs=180&context=SSEQTP&q=Solaris&uid=swg24005009&loc=en_US&cs=utf-8&lang=en
2. pGzOHΓΦí WebSphere Application Server Base wM≤ANR CD W ibmorb.jar s
WAS_HOME/java/jre/lib/ext ²UCbπ WebSphere Application Server Network Deployment qúWAN
R CD W ibmorb.jar s WAS_NDM_HOME/java/jre/lib/ext ²CpGzbw WebSphere Application
Server 5.0 M≤ 2 ºßwF⌠≤ WebSphere Application Server JDK íAhbs ibmorb.jar ºeA
²P WebSphere Application Server ΣñpC
3. pGzb Windows Server 2003, Enterprise Edition Ww WebSphere Application ServerAh WebSphere Application
Server ]tM≤ 2Cb Windows Server 2003, Enterprise Edition WAzt⌡µUC@G
v oíwíCsUC⌠G
http://www-1.ibm.com/support/docview.wss?rs=860&context=SW600&q=updateinstaller&uid=swg24001908&loc=en_US&cs=utf-8&lang=en+en
v tAN Tivoli Identity Manager R CD W ibmorb.jar s WAS_HOME/java/jre/lib/ext ²Cbπ
WebSphere Application Server Network Deployment qúWANR CD W ibmorb.jar s
WAS_NDM_HOME/java/jre/lib/ext ²CpGzbw WebSphere Application Server 5.0 M≤ 2 ºßwF
⌠≤ WebSphere Application Server JDK íAhbs ibmorb.jar ºeA²P WebSphere Application
Server ΣñpC
UϕCX WebSphere Application Server Network Deployment Tivoli Identity Manager
°AnΘG
ϕ 10. WebSphere Application Server Network Deployment Tivoli Identity Manager °AnΘ
nΘ M≤ í
WebSphere Application Server
Network Deployment]\
1C
5.0 WebSphere Application Server
M≤ 2
MUzíG
v APAR SOV62778]\
2C
2 nwΘD 13
||
|
||
|||||
ϕ 10. WebSphere Application Server Network Deployment Tivoli Identity Manager °AnΘ (≥)
nΘ M≤ í
:
1. Yµ@°AwATivoli Identity Manager wN WebSphere Application Server wd
C
pGzΓw WebSphere Application Server 5.0Ahbw WebSphere Application Server ºeAzHΓΦ
ím½UCd WebSphere Application Server ºnΘ
v AIX 5.2G
– prereqChecker.xml
– prereqChecker.dtd
YnonP WebSphere Application Server ftdAsUC⌠G
http://www-1.ibm.com/support/docview.wss?rs=180&context=SSEQTP&q=4004726&uid=swg24004726&loc=en_US&cs=utf-8&lang=en
v Solaris 9G
– prereqChecker.xml
– wasmfuncs.SunOS
YnodAsUC⌠G
http://www-1.ibm.com/support/docview.wss?rs=180&context=SSEQTP&q=Solaris&uid=swg24005009&loc=en_US&cs=utf-8&lang=en
2. pGzOHΓΦíwM≤ 2 (WebSphere Application Server Base)ANR CD W ibmorb.jar s
WAS_HOME/java/jre/lib/ext ²UCbπ WebSphere Application Server Network Deployment qúWAN
R CD W ibmorb.jar s WAS_NDM_HOME/java/jre/lib/ext ²CpGzbw WebSphere Application
Server 5.0 M≤ 2 ºßwF⌠≤ WebSphere Application Server JDK íAhbs ibmorb.jar ºeA
²P WebSphere Application Server ΣñpC
Σ Web s²
UC Web s²uΣ WindowsG
v t Service Pack 2 Internet Explorer 5.5
v t Service Pack 1 Internet Explorer 6.0
v Netscape 4.75
:
1. CookieC
2. únqP@ßqúΓW s²Ñq@CoΓÑq@OQ°
P@Ñq@ IDA]Ωiαú#DC
3. pGO Internet ExplorerAⁿw Java ⌡µ⌠ (JRE)Cs²A
Mß÷@Uuπ -> ⌠⌠⌠∩CA÷@UuiÑvAMßSMµA
bⁿ Java 2 V1.3.1_04 ∩∩AMß½s≈C
WebLogic Server WnwΘD
íb WebLogic Server W⌡µº Tivoli Identity Manager °AnwΘDC
14 IBM Tivoli Identity Manager: N
UNIX DU¡
UϕCXw@tBíHwΘDU¡Co ú]tΣL
⌡µDC
ϕ 11. b WebLogic Server W⌡µº Tivoli Identity Manager UNIX @tMwΘDU¡
@t í OΘU¡BiíHΣLwΘD
AIX 5.1]\
1C
Yb WebLogic Server W⌡µ Tivoli
Identity Manager °AAM 5100-02
@M≤≤sC
: z 5100-03 @M≤C
v RAMG1 GB
v BzGt 375 MHz ≤
IBM 604e Bz
v i íG/tmp π 500 MB
i íC
v i íG
– /tmp ²π 500 MB i
íC
– AúUCi íG
- 150 MB ≤ ITIM_HOMEC
- 300 MB ≤ BEA_HOME
HP-UX 11i 2002 12 δ Quality Pack v RAMG1 GB
v BzGt 440 MHz ≤
v i íG
– /tmp ²π 500 MB i
íC
– AúUCi íG
- 150 MB ≤ ITIM_HOMEC
- 300 MB ≤ BEA_HOME
Solaris 8 2002 7 δºßoµíO v RAMG1 GB
v BzGt 440 MHz ≤
Solaris Sparc
v i íG
– /tmp ²π 500 MB i
íC
– AúUCi íG
- 150 MB ≤ ITIM_HOMEC
- 300 MB ≤ BEA_HOME
Solaris 9
:
1. ÷≤s AIX ΩTA\ http://techsupport.services.ibm.com/server/mlfixes/43/10/01to10.htmlC
Windows DU¡
UϕCXw@tBíHwΘDU¡Co ú]tΣL
⌡µDC
2 nwΘD 15
||
ϕ 12. b WebLogic Server W⌡µº Tivoli Identity Manager Windows @tMwΘDU¡
@t í OΘU¡BiíHΣLwΘD
Windows 2000 Advanced
Server
Service Pack 3 ≤s v RAMG1 GB OΘ
v BzGt 500 MHz ≤
Intel Pentium
v i íG
– temp ²π 500 MB i
íC
– AúUCi íG
- 150 MB ≤ ITIM_HOMEC
- 300 MB ≤ BEA_HOME
ΩwD
UϕCXb WebLogic Server W⌡µ Tivoli Identity Manager °AiΩwG
ϕ 13. b WebLogic Server W⌡µº Tivoli Identity Manager °AiΩw
Ωw AIX 5.1 Solaris 8 Solaris 9 W i n d o w s2 0 0 0A d v a n c e dServer
HP-UX 11i
Oracle 8i]8.3 U U U U U
9i]9.2 U U U U U
Microsoft SQL Server SQL Server
2000 (SP3)
U
²°AD
UϕCXb WebLogic Server W⌡µ Tivoli Identity Manager °Ai²°A
G
ϕ 14. b WebLogic Server W⌡µº Tivoli Identity Manager °A²°AD
²°A AIX Solaris 8 Solaris 9 W i n d o w s 2 0 0 0Advanced Server
Sun ONE Directory
Server]\
1C
5.1 U]\
2C
U U U
:
1. P]dUz⌠G
http://wwws.sun.com/software/download/inter_ecom.html#dirserv
2. b AIX 4.3.3]úO 5.1W
16 IBM Tivoli Identity Manager: N
||
|
|
|
|
WebLogic Server nΘ
UϕCX WebLogic Server Tivoli Identity Manager °AnΘG
ϕ 15. WebLogic Server Tivoli Identity Manager °AnΘ
í
WebLogic Server t Service Pack 3 7.0
]7.0.3.0
: H WebLogic Server Ab AIX Ww
JDK 1.3.1_06 ≤sC
Σ Web s²
UC Web s²uΣ WindowsG
v t Service Pack 2 Internet Explorer 5.5
v t Service Pack 1 Internet Explorer 6.0
v Netscape 4.75
:
1. CookieC
2. únqP@ßqúΓW s²Ñq@CoΓÑq@OQ°
P@Ñq@ IDA]Ωiαú#DC
3. pGO Internet ExplorerAⁿw Java ⌡µ⌠ (JRE)Cs²A
Mß÷@Uuπ -> ⌠⌠⌠∩CA÷@UuiÑvAMßSMµA
bⁿ Java 2 V1.3.1_04 ∩∩AMß½s≈C
2 nwΘD 17
18 IBM Tivoli Identity Manager: N
3 w¡εBDMµMΦk
ínΘ¡εBDµMΦC
Tivoli Identity Manager ¡ε
UC¡εG
v DGb HP-UX 11i Wiµ Tivoli Identity Manager wíA IBM
Directory Server 5.1 LDAP tm (ldapConfig) óCTºpUG
LdapConfig ó w/ 80 - úC
µMΦkGb IBM Directory Server 5.1 W /usr/IBMldap/etc ²ñ 640
\ivCW[\ivCpAΘJUCⁿOG
chmod 750 /usr/IBMldap/etc
v DGbusWvu∩vAí (DSML) ∩W÷@UßAb\αO
W GC
pGznMΣu∩vAí∩º∩dA÷@U -> zA
í -> ∩Aí (DSML)CbWUΘJ DSML ⌠ß÷@
UAoApGbΣñ@ (UI) O¿ñΣANπ
u¿\vTºCMbu@y (WF) O¿ñ ú⌡µ⌠≤Ñ
Cϕzß≥n⌡µY DSML ¼≤@AonDNóC
µMΦkGtN DSML wb WF O¿WC
: zHPWMmAN DSML ±b UI M WF qú
WC
v DGTivoli Identity Manager SúΦk²zbq°i]píñ íX
C
µMΦkGLC
v DGb Tivoli Identity Manager RúAíßAiαYX@ΣúA
íΩwº¼pCYYXoº¼pAAíQRúC
µMΦkGLC
v DG extensions/examples/workflow/erPersonStatusExample.html M
extensions/examples/workflow/person_modify.xml b Person Modify Start Activity
Completion Script ñC
µMΦkG∩UC ScriptG
var person = Entity.get();var changes = person.getChanges();var result = "none";
if(changes != null && changes.length > 0) for (i =0 ; i < changes.length ; i++)
var op = changes[i].op;
© Copyright IBM Corp. 2004 19
|
|
|
|
|
|
|
|
|
if(op == 1 || op == 2)
var name = changes[i].attr;if(name == "erpersonstatus")
var values = changes[i].valuesif(values[0] == 1) result = "suspend"; else result = "restore";
action.set(result);
v DGu@y UNTIL jΘB@ípP DO...WHILE jΘC÷MjΘ≥
iµXⁿwjΘ°≤A²O DO...WHILE jΘ≥iµⁿw°≤ó
C
µMΦkGN°≤½]ⁿwjΘ°≤ VCpAN
a<b
∩¿UíG
a>=b
Tivoli Identity Manager WebSphere ⌠¡ε
pGnb WebSphere ⌠UR≈ Tivoli Identity ManagerA[εUC¡εG
v Tivoli Identity Manager ]O@tOPΦCFKo#wqTM
tmDAzúnb@ Tivoli Identity Manager OϕñA@HW
@t¼C
v b\αOϕñAúnΓuvMuu@yvOO¿A±bP
@íqúWC
v pGP@íqúWh WebSphere Application Server ΩAuΣñ@Ω
°AiH¿ Tivoli Identity Manager O¿C
v WebSphere Application Server e\zbP@íqúWAw Network Deployment
Manager MO¿CTwoíqúπnOΘBt Mi íAHtX
Bu@qC
wDMµMΦ
w WebSphere Application Server iαo@DAΣñ]AUCDG
v DGb HP-UX 11i ¡xWAú CD W°Wñß@Xriαw
QúhCpAFP510H-01.TAR.Z;1 wQ∩¿úT fp510h-01.tarC
µMΦkGo#oD]OG@sxW ISO-9660
Rock RidgeAΣsW¼HΣπ POSIX tyNt meta ΩC
Rock Ridge Wµíⁿ≤ ISO-9660 IDAΣñ ;1 XúOjgC
⌡µUC@H∩¿pgA ≤WG
1. w HP-UX í PHCO_25841BPHKL_26269 M PHKL_25760C
20 IBM Tivoli Identity Manager: N
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2. HⁿOñucdcasev∩ⁿ CDCpG
mount -F cdfs -o cdcase /dev/dsk/c0t030 /cdrom
3. N fp510h-01.tar ½sRW fp510h-01.tar.Z HKúYCMß untar
C
v DGTivoli Identity Manager w ús Oracle JDBC Xí
]classes12.zip CpGzO Oracle zΩwAhϕzΩw
suA¼ java.lang.ClassNotFoundException TºC
µMΦkGYn≤oDA⌡µUC@G
1. ÷@U°AhXΩwtmí ≥w@C
2. ϕw¿A⌡µUC@G
a. N Oracle JDBC Xí]classes12.zip qz²e
²szew IBM Tivoli Identity Manager qúW ITIM_HOME/lib
²ñC
po Oracle JDBC Xí]classes12.zip º÷ΩTA
\z¡xº Tivoli Identity Manager wΓUñí CD ÷X
íMµCps²÷ΩTA\lw Tivoli Identity
Manager ºen⌡µez@MµC
b. oXUCⁿOuΩwtmv°íG
UNIXGITIM_HOME/bin/DBConfig
WindowsGITIM_HOME\bin\DBConfig
c. ¿ΩwtmC
d. bOtmñAεO¿°AC
bµ@°AtmñAε WebSphere Application ServerCUCⁿOG
UNIXGWAS_HOME/bin/stopServer.sh servername
WindowsGWAS_HOME\bin\stopServer.bat servername
e. bOtmñAO¿°AC
bµ@°AtmñA WebSphere Application ServerCUCⁿOG
UNIXGWAS_HOME/bin/startServer.sh servername
WindowsGWAS_HOME\bin\startServer.bat servername
v DGbzw AIX Solaris µ@°AApGPw Tivoli Identity
Manager M WebSphere Application Server BaseAzNLkq CD wC
µMΦkG⌡µUC@G
1. N Tivoli Identity Manager wíszbw≈W ²ñ]
w≈n 300 MB i íC
– AIX: instAIX-WAS.bin
– Solaris: instSOL-WAS.bin
3 w¡εBDMµMΦk 21
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2. q²⌡µ Tivoli Identity Manager wíAw Tivoli Identity Manager
M WebSphere Application Server BaseC
v DGwíAw∩°i íj≤i íC
µMΦkG°wCW[i íC½slwíC
v DGwíAw∩°iⁿXAt'w WebSphere Application Server
í PQ76707C
µMΦkG∩Cí PQ76707 úTCMT
íO PQ77263C
v DGwºßAτñ°iAAϕzs Network Deployment
Manager zDx]°iCpAzDxo# ClassNotFound
C]Σú adminconsole.ear C
µMΦkGúw Network Deployment ManagerCW[i íC½s
lwC
v DGwiµíA∩ WebSphere MQ s mqm iµndΣúⁿ
wsC
µMΦkG°wC n WebSphere MQ sMC½w
C
v DG≈Ñq@]p vnc Ñq@ⁿúÑq@
ATivoli Identity Manager wLk¿CTºiαⁿX jmsserver
wεCΣßnwiαXTºAªⁿXDXb enrole.ear
C
µMΦkGN Tivoli Identity Manager wbqú@tWCú
n vnc Ñq@ⁿúúÑq@w Tivoli Identity ManagerC
v DGbOW WebSphere Application Server w Tivoli Identity Manager A
TºiαⁿX jmsserver b⌡µA²ΩW jmsserver wεCziα
bw Tivoli Identity Manager ºeNwgHΓΦíε JMS °AC
µMΦkGñTº ≥wCQ¿ Tivoli Identity Manager wº
ßAAHΓΦí jmsserver C⌡µUC@G
1. s WebSphere Application Server zDxC
2. ÷@U°A -> JMS °AC
3. b JMS °AMµñA∩T IW JMS °AAMß÷@UC
v DGϕzb Windows 2000 Ww Tivoli Identity Manager AWebsphere Embedded
Messaging Publish and Subscribe Aí 'CHΓΦíªP
MUCTºG
LkbqúW Websphere Embedded Messaging Publish MSubscribe WAS__server1 AC 1075G÷YAíúsbAwRú
µMΦkGñTº ≥wCTivoli Identity Manager ún Websphere
Embedded Messaging Publish and Subscribe AíCúnAíC
22 IBM Tivoli Identity Manager: N
v DGb Windows 2000 WAϕz≤s Tivoli Identity Manager Q Tivoli Identity
Manager ww Tivoli Identity Manager M WebSphere Application Server
ºßAziαLknJ Tivoli Identity ManagerC
µMΦkG½stFt½sßiα≤Y⌠]wM
WebSphere Embedded Messaging ΣεCDCd
WAS_HOME\logs\server1\SystemOut.log AHPO⌠≤P WebSphere
Embedded Messaging ΣεCzí÷º¼pC
v DGϕ Tivoli Identity Manager w WebSphere Application Server Aw
d WAS_HOME\log.txtAHP WebSphere Application Server LnwO
Q¿CpGTºⁿXLkA°w P
WebSphere Application Server wó]C
µMΦkGDiαXbUCaΦG
– i íC
– b Windows WGzⁿw ID Sv¡Cu@
í@tvMuHAínJvv¡C
– WebSphere Embedded Messaging ΣwiαwgóCd
mq-prereq.log AHTwOLk⌡µªndC
A\P WebSphere Application Server w÷σ≤AHA WebSphere
Application Server wiαóΣL]C
v DGwí'N Tivoli Identity Manager #íw²sWíw⌠C
A FTP qT≤w]p RACF M AS/400Nzí#@t
íwA]]tbD≈tíw⌠ñC
µMΦkGNUCΩTsWD≈tíw⌠ñG
AIX
LIBPATH=/lib/aix:"$WAS_LIBPATH":$LIBPATHexport LIBPATH ;;PROTOCOL_DIR=$ITIM_HOME/lib/aixexport PROTOCOL_DIR ;;
Solaris
LD_LIBRARY_PATH=/lib/sun:"$WAS_LIBPATH":$LD_LIBRARY_PATHexport LD_LIBRARY_PATH ;;PROTOCOL_DIR=$ITIM_HOME/lib/sunexport PROTOCOL_DIR ;;
HP-UX
SHLIB_PATH=/lib/hpux11:"$WAS_LIBPATH":$SHLIB_PATHexport SHLIB_PATH ;;PROTOCOL_DIR=$ITIM_HOME/lib/hpux11export PROTOCOL_DIR ;;
Windows 2000BWindows 2003N /lib/nt esúF libdelref.dll H \winnt\system32
ñC
o≤iαMb WebSphere Application Server startServer.shAMb
l startServer.sh M ScriptC
3 w¡εBDMµMΦk 23
||||
|
ΩPΩwDMµMΦ
Ωw Tivoli Identity Manager ⌡÷DMµMΦ]AHUUG
v DGu@y@iHε Oracle ΩwñYzσO¼pC
σW[ Tivoli Identity Manager ¿úΩϕawC@IAO
itim.log ñXAⁿX ORA-01000GwWLσW¡C
µMΦkGε »zíOΘjp]w∩z⌠π Cb
Oracle WAo p≤ OPEN_CURSOR ]wC
pGnε »zíOΘjpA⌡µUC@G
– WebLogic Server
1. UC URL WebLogic zDxG
http://localhost/console
2. b≡¼cñz⌠C
3. ÷@U⌠≡¼cñA -> JDBC -> suxs -> enrolePoolC
4. ÷@Uk°íWusuvC
5. sΦu »zíOΘjpv C
6. ÷@UMxs≤C
– WebSphere Application Server
1. ÷@UΩ -> JDBC úC
2. Nd≥]n≤s°AC
3. Click ITIM JDBC ú (XA)C
4. ÷@UΣLe -> Ω] 4 C
5. ÷@U ITIM ΩC
6. ÷@UΣLe -> suxsC
7. sΦu»zíOΘjpv C
8. xs≤C
v DGϕ Tivoli Identity Manager q 4.4 $ 4.5 AtπFUCTºG
com.ibm.db2.jdbc.DB2Exception:[IBM][CLI Driver][DB2/NT]SQL0601Nn½≤WPWPC
µMΦkGúw Tivoli Identity Manager úq²MΩwú Tivoli
Identity Manager Ω⌡CzHΓΦíúΩ⌡C
v DG⌠Ob enRoleHiddenAttributes.properties ñⁿwCziαµ
Y⌠i@δC
µMΦkGq enRoleHiddenAttributes.properties úC
v DGuµWv° úiWL 100 rAhLk WCX
100 r¡ε°WbπúΘµC
µMΦkGúnΘJ° j≤ 100 ruµWv C
v DGpG ITIM_HOME/bin/db2config ⁿOb⌡µAWebSphere Application Server
úOb⌡µñAziαNLk Tivoli Identity ManagerC
24 IBM Tivoli Identity Manager: N
µMΦkGε ½s WebSphere Application ServerC Tivoli Identity
ManagerCt@kO½s WebSphere Application ServerBs WebSphere
Application Server zDxAMßDx\αϕ½s Tivoli Identity
ManagerC
v DGww≤@O Tivoli Identity Manager °AwC
µMΦkGpGzn Tivoli Identity Manager Nzíw≤@A
z²pΓ°APNzíºítºAAtºw≤@
C
²°ADMµMΦ
²°A÷DMµMΦ]AHUUG
v DGw]A²°Ai²zW¬²ΩC
µMΦkG≥≤wqAjPz÷¼∩²°AW¬vC
\²°AzΓUHABJC
v DGAIX W IBM Directory Server 5.2 P LDAP °Aíe
DC
IBM Directory Server Patch P520A-00C N≤oDAoíN]t
bU@ IBM Directory Server 5.2 M≤ñCTivoli Identity Manager 4.5.1 H
l IBM Directory Server πí libdelrefids52.a ú
n Patch P520A-00CCúLAϕyßMíAíñí
libdelrefids52.aC
µMΦkGb Patch P520A-00C @ºeoqíA²A≤z¡xº
Tivoli Identity Manager °AwΓUñú²°AΩTñíA
πí libdelrefids52.aC
ϕ IBM Directory Server Patch P520A-00C iA²⌡µUC@ßAAM
íG
1. PuIBM ΣñvpHo≤s libdelrefids52.a C
2. ≤s libdelrefids52.a N Tivoli Identity Manager 4.5.1 H
l Tivoli Identity Manager í libdelrefids52.aC
v DGw IBM Directory Server MM≤ 1 ºßAϕzní½sA
XUCTºG
CNTR0019EGBzΦk "send" oDíº¼pCº¼pΩG32GSo½≤
µMΦkGñTºCoAN½sC
v DGAñΓ LDAP Lo°≤úi]t µCpG LDAP Lo°≤ñt
µAsWHßNúⁿúAñΓCpAUCLo°≤t µG
( | (sn=xyz) (sn=abc) )
µMΦkGqzⁿw LDAP Lo°≤»zíñú µC
3 w¡εBDMµMΦk 25
|
|
|
|
|
|
|
WebSphere MQ DMµMΦ
WebSphere MQ ÷DMµMΦ]AHUUG
v DG εCzío#CAmqerr*.log ñpUG
AMQ9213Go TCP/IP qTCíGbqTñoDwC@GTCP/IP (ioctlsocket) IsX 10038 (X’2736’)COUoAitzC
µMΦkG10038 XⁿXAWebSphere MQ ÑxsqÑl
Socket xso#DCoípbπ⌡≡⌠OúCYnMo
DAHUC⌠xsG
set MQNOREMPOOL=1
v DGTºⁿX WebSphere MQ εCsu]iαOb SendMessage DC
Queue Connection Factory MaεC]wⁿGOTA²u@y (itim_wf)
Mu@ym (itim_wf_pending) εCB≤úTLk¼AC
Tº∩diα]AHUUG
CNTR0019EGBzΦk "send" oDíº¼pCº¼pΩG]πΩ...
Connection Manager qΩ JMS$ITIM Queue Connection Factory$JMSManagedConnection@1010457898 Ωt¼Y½suC¼º¼pOjavax.jms.JMSExceptionGMQJMS2008GLk MQ εC
µMΦkG]H AIX ⌡µUC@A½ WebSphere MQ εCG
1. b /usr/WebSphere/AppServer ²ñAΘJUCⁿOG
deletemq.sh
úΩµWB IWεCWCzib
createMQ.nodename_jmsserver.log ñΣo A≤
/usr/WebSphere/AppServer/logs ²ñCpAΘJG
./deletemq.sh ITIM-45AIXCluster1 faith jmsserver
Tw'≥⌡µ⌠≤ mqm CpGb⌡µñA½sqúC
2. b /usr/WebSphere/AppServer ²ñAΘJUCⁿOG
createmq.sh
úΩµWB IWεCWCzib
createMQ.nodename_jmsserver.log ñΣo A≤
/usr/WebSphere/AppServer/logs ²ñCpAΘJG
./createmq.sh ITIM-45AIXCluster1 faith jmsserver
½s JMS °AC
v DGo# WebSphere MQ suyóC÷M¼≈ íMΩΘOΘi
A²toXUCTºG
AMQ7463GεCzí WAS_timwin7_jmsserver ΘxwíC
AXⁿUCTºAohTºPΩú¼¼p÷G
26 IBM Tivoli Identity Manager: N
|
||||||
|
|
|
|
|
MQJE001G¿X 2A] 2102
µMΦkGgJΘxO²A]ΘxwíAHQoXAMQ7463 T
ºCεCzíRDC
TºyqL¬NiαJo¼pCúLApGzn≥gJΘxAz
NUCG
– bεCzítmñ≤o W[ΘxCºßAzε
½sεCzíC
– Az]iNΘx¡[jCpGno≥AzRú ½εCz
íC
v DG εCsuo#UC JMS º¼pG
MQJMS2005GLk ’<identifier>_server1’ MQQueueManager
µMΦkGLCY]b∩εCzíiµß]qDsuAH
WebSphere MQ]bñOⁿ Embedded Messaging ServerP WebSphere Application
Server ≤P@í≈A@o#oí⌠⌠DCpGssuAiα
Núo#oDCúLAEmbedded Messaging Server OßsuA
HssuúOitm∩C
NzíDMµMΦ
Tivoli Identity Manager Nzí÷DMµMΦ]AHUUG
v Tivoli Identity Manager °AMNzíΣíºíµ½Ωº°A
]µV[KCΣO@ß]V OAiτ⌠⌠sut@
íº¡OC
: bu²WAoqz¬≤TiΣV O°AMNzíoGΩTñzMC
v DGTivoli Identity Manager °A 4.5.1 ]Σ Fix Pack 1'gALk
P FTP qT≤w Tivoli Identity Manager Nz@B@C
µMΦkGP IBM ßΣñpAHo FTP qT≤wº Tivoli
Identity Manager Nzº÷ΩTC
v DG Tivoli Identity Manager 4.4.x Nzí²Q Tivoli Identity
Manager 4.5 (HAα⌡µC 4.4.x NzíAOⁿiP IBM
Directory Server eftNzíC
µMΦkGQwAí]wºßANi Tivoli Identity Manager 4.5
⌡µoNzíC⌡µUC@A¿NzíAí]ww
G
1 . ⌡µNzíAí]wwⁿOC⌡µßAt
agentnameprofile ² - ]NO@NzíWA[rΩuprofilevC
pAWindows NT ²OG
nt40profile
agentnameprofile ²ñ]t@W resource.def C
2. N agentnameprofile ²esUC²G
3 w¡εBDMµMΦk 27
|
|
|
|
– WindowsG’ITIM_HOME\data\remote_resources’
– UNIXGITIM_HOME/data/remote_resources
: pGNzí]wwíwgQT ITIM_HOME/data/remote_resources/agentnameprofile ²ANúA⌡µ
oBJC
3. UCΦísΦ remote resources ²ñ resource.def O⌠»z
íC
– N com.access360.enrole ∩ com.ibm.itimC
– N com.access360 ∩ com.ibmC
4. N config_remote_services ⁿO±mbUC²ñG
– WindowsGITIM_HOME\bin\win
– UNIXGITIM_HOME/bin/unix
b config_remote_services ⁿOñATwwUCΦí]w JAVA_HOMEG
– WebSphere Application ServerG%WAS_HOME%\AppServer\java
– WebLogicG%BEA_HOME%\jdk131_06
5. ⌡µUCⁿOG
– UNIXG
’ITIM_HOME/bin/unix/config_remote_services’ agentnameprofile
– WindowsG
’ITIM_HOME\bin\win\config_remote_services’ agentnameprofile
Σñ agentnameprofile Oe@BJ ²WC
6. pGznPNzí]wbOi@A¼A Tivoli Identity
Manager íC÷@U -> zA -> sWCdX\α
ϕAHPNzíAí]wOsbC
ΣLDMµMΦ
ΣLDMµMΦ]AHUUG
v DGb Tivoli Identity Manager AñΓsW/úíAⁿñΓ≤vT
qiαoLjCAñΓⁿw@iαWLw]íO ]5
CϕWLO Au@y)YOA εñΓ≤íCo
XiAⁿXñΓ≤wεC
µMΦkGW[w]O HΣtⁿqC∩
ITIM_HOME\data\workflow_systemprocess ²ñUCtu@yG
– adddynamicrole.xml
– changedynamicrole.xml
– removedynamicrole.xml
bC@ñAW[b ROLE_CHANGE íñ LIMIT CO OH@ϕ
µwqCpAUíⁿw 1 pO G
ACTIVITY ACTIVITYID="ROLE_CHANGE" LIMIT="3600000"
28 IBM Tivoli Identity Manager: N
v DGⁿhKX≤nDvTAúAϕΩTA Bα≈bh
KX≤nDDñ]wuQnDvC
µMΦkGYnNbßMAW÷ΩTsWhKX≤nD
lnDñAz≤ changePassword @u@yC⌡µUC@G
1. bubßvº changePassword @ START IñíJUC JavaScriptCo
Script ≤subßKX≤vnDf ΘxAHbD«µñπub
ßW/AWvC
var account = Entity.get();var accountName = account.getProperty("eruid")[0];var serviceDn = account.getProperty("erservice")[0];var service = new Service(serviceDn);var serviceName = service.getProperty("erservicename")[0];var subjectData = accountName + " / " + serviceName;process.setSubjectData(subjectData);
2. Yn² JavaScript αTB@ATw fesiextensions.properties ñXU
µG
"fesi.extension.Workflow.Model=com.ibm.itim.fesiextensions.ModelExtension"
v DGuQnDvµbuHvn²ñπDw CommonName C
µMΦkG∩uHvΩΘ selfRegister @C⌡µUC@G
: tm -> ΩΘ -> HñuWv ] snCpGuWv
∩ cnAú Script IC
1. H ITIM z¡≈nJC
2. ÷@UtmC
3. ÷@UΩΘ¼C
4. ∩U\αϕñHC
5. ÷@U selfRegister @C
6. b selfRegister u@yWAbulvMuselfRegister πv IºííJHM
WRW Script IC
7. ÷ΓUs Script IC
oeXueGScript Iv°íC
8. buev°íñAΘJUC Java ScriptG
var personData = person.get();var snValue = personData.getProperty("sn")[0];process.setRequesteeData(snValue);
9. ÷@UTwCxs@C
v DGpGΘΘJíB≤¬íAh H 12 pµíπíA
BúúW+ (a.m.) U+ (p.m.) íⁿC
µMΦkGNΘΘJíµ]¬gíCíH 24 pµíπAi
AíLC¡zA⌡µUC@G
– ∩tm -> qC
– ∩¬Σµñ¡zíAMß∩ ITIMAccountC
– ∩eW erpswdlastchangedC
3 w¡εBDMµMΦk 29
|
|
|
|
|
|
|
||||||||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|||
|
– buevqµíñATwµB≤¬gíC]NOíAbu∩v
WAµúQ∩u¬vCxs≤C
pGΘΘJµB≤¬íA∩ I T I M _ H O M E \ d a t a ²ñ
Labels.properties UCµqG
readOnlyDateFormat=MMM dd, yyyy hh:mm:ss z
¬pUG
readOnlyDateFormat=MMM dd, yyyy hh:mm:ss a z
v DGou Mulv GUI ñXrrΩCwOσríADrr
ΩC
µMΦkGNulv∩MuívAΦkNumv½≤]w
uerrdnattrvqulv∩¿²ñuívCúLAYO errdnattr ∩MQ
∩¿ⁿVw]HAhOnµCpAuív
¿umvΩΘnC
v DGb AIX W Tivoli Identity Manager ApGW° WL¡x
Ww¡εANLk bßCpAziQ my8chars oWQ bßC
²LkQ° WL 8 rW]p my9charss bßC
µMΦkGNW¡ε¡xM° ∩ Tivoli Identity Manager ¡
OhAHεC÷≤¡OhΩTA\ IBM Tivoli
Identity Manager Policy and Organization Administration GuideC
v DGTivoli Identity Manager Applet LkⁿJAHo#u@yDC
µMΦkGb Internet Explorer ñApGu⌠⌠⌠∩v∩uiÑv
Ww∩u Java 2 version for appletvAún∩uJava í
εev Proxy Ws²]wCpGoΓú∩ATivoli Identity
Manager Applet NLkⁿJC
pGznMΣu Java 2 version for appletvA Internet ExplorerAM
ß÷@Uuπ -> ⌠⌠⌠∩CuiÑvMµC
pGznMΣuJava íεxvA÷@Ul -> ]w -> εxCbu
εxvWA÷ΓU Java í <>C∩ Proxies C
ATw WebSphere Application Server M≤ 2 ]wgMw Web
°AqúWCbwM≤ºeA²ε WebSphere Application Server
íCMM≤ 2 ºßApGDOsbAM 5.0.0B5.0.1 5.0.2
WebSphere Application Server Plug-in Cumulative FixCoí≤UC
]NΘJbP@µG
http://www.ibm.com/support/docview.wss?rs=180&context=SSEQTP&q=plugin+&uid=swg24004524&loc=en_US&cs=utf-8&lang=en
v DG Tivoli Identity Manager ú#W(sº¼pC
µMΦkG≡MRú Tivoli Identity Manager AMßS½sANú#
W(sº¼pCoO≤ Tivoli Identity Manager l²°A²U
.lok y¿CRúo .lok AMß½s Tivoli Identity ManagerC
v DGSearchMO.toString() ñ NullPointerException
30 IBM Tivoli Identity Manager: N
|
|
|
|
|
|
µMΦkGTivoli Identity Manager 4.5 úΣN WebSphere Application Server
HTTP Ñq@l@ú≈εΦíCb WebSphere Application Server W
IBM HttpSession lP SearchMO.toString() Φkñ NullPointerExceptionC
v DGxsCL°i
µMΦkGpGznH PDF µí CSV µíxs°iAq°iΘX°í
\αϕ∩ñ∩tssCs²²AMßΘJW
xsσ≤CiHCL PDF M CSV µí°iCCSV °ii²CLLk±í
µ@°iCp≤CL CSV °iG
– bú#°i∩ CSV °iµíC
– ÷@U->tssA∩ts¼ Microsoft Excel WorkbookC
– úmMWxs°iC
– Microsoft Excel ΣL⌠≤ XLS ¬°iC
– CL∩CLσ≤C
v DGLkPOb⌡µPB-APß@PB-¼AC
µMΦkG¼AπbuMµvuΩvµñCHUO
iα G
– úPB-⌠≤Ω
– iµñ
– L
– ¿ß@PB-ΘMí
v DG∩hoApG÷@UeXAMß÷@U½]A L
k½]w∩µC
µMΦkG²÷@U½]Cún÷eXAMß÷@U½]C
v DGN Service.createEntity() Φkíp ßAΦkLkB@C
µMΦkGúnb ßWoΦkCb API íñAO Service
Γ createEntity ΦkúwgYN@oC
v DGϕ Tivoli Identity Manager P IBM Tivoli Directory Integrator ºíRW⌠
wqúPA úXTºC
µMΦkGLC
v DG÷@UusW/∩HvϕµW½]ßA S½]ñΓCpAH
UNOLk½]ñΓG
1. nJ Tivoli Identity ManagerC
2. ÷@UC
3. ÷@UzHC
4. ÷@UsWC
5. ∩YHAMß÷@UeXC
6. bñΓñ∩@C
7. ÷@U½]C
3 w¡εBDMµMΦk 31
µMΦkGu½]vúA≤oµC÷@UjMAijMsWC÷@U
RúAiqoµRúñΓC
v DG⌡µ API HRúbß]HÑA ITIM bß@Lkdu
hvOnbßC
µMΦkGLC
v DGprocess.auditEvent() 'bf lñπΩCbu@ywqñA
oNtσrMíWO@µíJuBzΩvñC
µMΦkGLC
v DGbu -> A∩hv∩ñ]w\ivºßA 'bjM
ßπC
µMΦkGuvD\αϕMΣ≡ñhC ÷@UhW
°hMµñΩC
v DGbbßííA∩u KXvúe\ΘJsKXCpG
∩F KX∩AhzLksΦKXµC
µMΦkGpG∩Fu KXv∩AhsKXTKXQñC
Yn]wsKXA.∩u KXv∩C
v DG Windows 2000 bßALk]wíCdTºpUG
uwQBznDA²OLk]wYGerW2KDialinCallbackBerW2KAllowDialinv
µMΦkGdbΣW bߺqú Windows 2000 NzCϕ'Rú
A]wYwsA]wANo#oC²RúA]w
AMßwsA]wC½s bßC
ContainerSearch JavaScript Wµ
DGnσ≤≤ SelfRegistration u@yñ ContainerSearch JavaScript ExtensionC
µMΦkGw]AiHq Tivoli Identity Manager uu@y]pívM
uAí∩vBz ContainerSearch JavaScript ExtensionCContainerSearch JavaScript
Extension iΩ@ OrganizationalContainerSearch OC
xsjMykpUG
searchByFilter(String containerName, String filter, [int scope])
pG
var locationContainer = new ContainerSearch();var thisLocation = locationContainer.searchByFilter("Location", "(l=Raleigh)", 2);
oO API Javadoc ≤UC²ñG
ITIM_HOME/extensions/api/com/ibm/itim/dataservices/model/domain/
32 IBM Tivoli Identity Manager: N
|
|
|
|
|
|
|
4 σ≤N
íúσ≤DMµMΦC
Policy and Organization Administration Guide PuWí±AeΩTs
IBM Tivoli Identity Manager Policy and Organization Administration Guide Pú
úuWí±AeΩTsCΓºAu²ΓUñΩTC
yD≤
w¿UCyD≤AHúb Tivoli wíDⁿG
²eD sD
IBM Tivoli Identity Manager Troubleshooting
Guide
IBM Tivo l i Iden t i t y Manager Prob lem
Determination Guide
IBM Tivoli Identity Manager Server Configuration
Guide
IBM Tivoli Identity Manager tmΓU
Adobe Acrobat Reader D
DGA Adobe Acrobat Reader 4.05 ≤¬°s Tivoli
Identity Manager σ≤CziqUC⌠o Adobe Acrobat ReaderG
http://www.adobe.com/products/acrobat/readstep2.html
© Copyright IBM Corp. 2004 33
34 IBM Tivoli Identity Manager: N
5 ΩN
UCMΦBzªσ≤ñDG
v DG bΘσñALkb Microsoft Outlook Express ¬ Tivoli Identity Manager
el≤qñD«C
µMΦkG TºMµCNibTºMµñ¬D«CAz]i÷@UT
ºMµñTºAbt°íñoi¬D«C
© Copyright IBM Corp. 2004 35
36 IBM Tivoli Identity Manager: N
6 APARs wΣLD
C APARs ΣLwDC
APARTivoli Identity Manager 4.5.1 wUC APARsG
APAR í
IY49194 'l]wsbß ’PARAMETERS.ERUID’C
IY49372 bF LTPA O ºßAíñw WebSphere Application
Server wCouvT WebSphere Application ServerC
IY49376 q 4.3 $ ú q°iugetDNvτCo LA
í]AΓ≈σ≤GIY49376_MSSQL_README.txt M
IY49376_Oracle_README.txtCoσ≤úo@B@ΩTC
IY49566 HR /CC
IY50099 eruid 椣i parameters.eruid(0)C
IY50117 q°i'XbuvMµñCHUΩTOQ÷q°i
adhocreporting.properties yñSúCsΦoA]w
availableForNonAdministrators=trueC
: bN ] true ºßA⌡µπΩPBBzAHKo
T°iC
IY50253 bw²°iAInternet Explorer 6 s²eϕ≈¼AC
IY50335 H uid M pw OΩwú@ - API YXbßú@º
¼pC
IY50444 σ≤≤CTivoli Identity Manager °AwΓUñ² C úTa
″mqvr″ CO ″mqver″C
IY50564 ß°iΩPB-OWL 15 p¿C
IY50704 bu/°w¿nDvñAQnDWπbuD«vµñCO
ⁿ÷ Java Script ΩTC
IY50774 ϕbßAzQjε≤KXC
IY50780 uqXvⁿⁿⁿGúñ'z RACF sC
IY50836 ]weⁿOⁿGLkAϕB@AªNXm≤@X
ñC
IY50846 jMp≤π 1000 ½≤C
IY50847 wnS
IY50848 Tivoli Identity Manager NAbßo#C
IY50854 íXΓeC
IY51091 Tivoli Identity Manager 'Bz RACF w]s≤C
IY51208 LkHΣ¡ ITIM sº admin Γ¡≈RúhC
IY51226 ϕµ¬A BµΩ AUI ñuΘvp≤]M≤
HO²A²OovTϕµπµΘ/íC
© Copyright IBM Corp. 2004 37
|||
||
|||
||||
||
||
||||||
||
|||
|||
||
|||
||
||
|||
||
||
||
||
||
||
|||
APAR í
IY51227 pG Crystal Report hΘJµAhªSbu⌡µv°ie
WAϕ∩⌠C
IY51230 b Crystal Report ⌡µíAbqw] ]≈/d≥Mµñ∩ΘJ
ºßAo# NullPointer º¼pC
IY51231 b Crystal Viewer ñIs export/goto page/print τAo# Nullpointer º
¼pC
IY51232 bJxsvϕµAYXFΩwTºC
IY51233 bJxsvϕµAYXFΩwTºC
IY51234 ΩPB-πΩPB-íC
IY51235 pG Crystal Reports ñw] t XML rAo# XML BzC
IY51254 qtHXqll≤ñu¼≤HGvµñ@ C
IY51287 CLI-X NzLkbßC
IY51308 vΩWπF Tivoli Identity Manager WC
IY51416 be≤ΘßALDAP erPswdLastChanged ΘxsºC
IY51418 .≤ALkquSearchvo≥dbßC
IY51438 'C≤σ≤íp≤≤ enrole.xslC
IY51740 ⌠¡Ld/ DC
IY51742 HWLd/ DC
ΣLwD
UCD]wG
v b≥ºeAAND XI⌠íW@ºΩCwµO⌠C@
q START lXIº⌠WW@ºΩAHPiJ⌠Ob@
ñC
YObMXN⌠WeJ૧e 'FíW@ºΩAhN
ñW@ºΩC
v Y WebSphere Application Server wtmATivoli Identity Manager API
LkB@Cbww\α WebSphere ⌠ñAϕzn⌡µí API d
]⌡µzví API gíAziαJ Tivoli
Identity Manager °A Oº¼pC
v AS/400 NzíLk Tivoli Identity Manager 4.5 ServerC
v µn²mⁿOóA]ªΣú jar C
v bíAQhH≤AñΓ] SQL óC
v ≤ Tivoli Identity Manager bß ID ] JNDI óC
v LdM API i OD Tivoli Identity Manager bßC
v GMT íO²w¿º DSML únDAPtíúPC
v tmOwh
v context.isAccountDataChanged(″attr-name″) bu@yñLkB@C
38 IBM Tivoli Identity Manager: N
||
|||
|||
|||
||
||
||
||
||
||
||
||
||
||
||
|||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
v °i\αPB-nDLkb\αOñCq°i\αúA≤\αOt
mCb\αOwñumnDvεCñAwwºq°iΩPB-nD
Ou'v¼AC
v qϕµWΘΘJµbxsⁿwΘºe²∩ªC
v tjqⁿvT]50,000) ºhAiαy¿ JMS ΩwC
v W[ enrole_data ϕµ íjpC
v LDAP )b Sun ONE P IBM Directory Server ºíO@PC
v LDAP ]@C
v bu@y]pñßFhíºßANLkAsHMµC
v b HPUX ¡xWAϕ Tivoli Identity Manager b WebLogic ñ⌡µAXO
骡pC
v h½ µzb Tivoli Identity Manager úñjMAY
com.ibm.itim.webclient.search.SearchUtility.bindToSession ñú# PtrC
v WebLogic Wo# OutOfMemory C
v process.id JavaScript úT C
v RequestManager APIGonDmnD] SQL º¼póC
v HKXHMHbßFb Tivoli Identity Manager °AñA
úúKXu@yC
v SelfRegistrationManager oX SchemaViolation °iC
v Weblogic µn²]m selfRegGúDuΩnΘv²uenv]busrv
²ºU≤ Web íO⌠ñAhNóC
v @N∩H½≤A² ú]AHⁿz½≤/bßCYn
Jⁿz½≤MbßA∩Φk úpUeG
com.ibm.itim.personManagement.suspendRestorePersonWithAccounts=true|false
v bvTh]p 3000 nDíALkπu°mn
DvCΘxñπOTºC
v Tivoli Identity Manager $ºßAu@y π@Lk⌡µC
v u@y]píGNíµΣL IAα½°≤QMúC
v N q∩≤A⌡µhIµAu@y)XuOΘú
¼vC]W[O niHoDC
v u@y)b IBM DB2 hu@y⌡µⁿúOU,ΩC
v IBM Tivoli Identity Manager Problem Determination Guide q -- eÑC
v ∩ Exchange 2000 ΣLDKX¼NzoXFKX≤C
v KXWhm½h]Lk½sú#C
v ϕ²ñⁿJF 10K AhτϕOC
v wHαeApGbαeo#ºeRúa OUANqΣl OU ñRú
HCHdbBABOⁿAϕTºC
v A∩h - JavaScript ½≤ searchForClosestToPerson LkB@C
v Wñ µPLd/ Q ID ñ µ lCosL
kQnJC
v Tivoli Identity Manager úIs System.gc()C
6 APARs wΣLD 39
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
40 IBM Tivoli Identity Manager: N
². N
σ≤Yw∩ IBM bⁿΩúºúPAoFbΣLΩañAIBM úúo
ú≤ñúUúBA\αCóϕa IBM NϕAHo
ϕaeúúMAº÷ΩTCo≈σ≤bú IBM úBíAA
úϕtuα IBM úBíACun'I/ IBM z]úvA
⌠≤\αϕúBíAúiHN IBM úBíACúLA⌠≤
D IBM úBíAAµtd@⌠Mτd⌠C
o≈σ≤íDDeAIBM iαΣMQMQ0Cúo≈σ≤úNϕ
úoMQvCziHúXvdAτHG
IBM Director of LicensingIBM CorporationNorth Castle DriveArmonk, NY 10504-1785U.S.A.
pGO÷ (DBCS) ΩTvdAóbΩ IBM z]úíA
úXvdAτHG
IBM World Trade Asia CorporationLicensing2-31 Roppongi 3-chome, Minato-kuTokyo 106-0032, Japan
UCq¿úA≤Ω°Pϕak ΦΣLΩaGInternational Business
Machines Corporation uypzúXAúú⌠≤tºOAΣ
ñ]ABú¡≤úH WwBiSwºA⌠tOCab
Swµ÷WAú3\útOA]Aonú@wAXzC
oΩTñiαNWLΩWC]AIBM wqF Nqß
eJsñCIBM H∩iM/≤XúúM/íAút
µqC
o≈ΩTñú⌠≤D IBM ⌠uAIBM úo⌠úOCo⌠
úΩúO IBM úΩeApGno⌠ΩAz
µßIC
IBM oHUAϕΦíG.zú⌠≤ΩTAL∩ztdC
pGí≥vHF (i) bO íMΣLí]]Aíºíµ½
ΩTAH (ii) ¼µ½ΩTA]n÷ΩTAóG
IBM Corporation2ZA4/10111400 Burnet RoadAustin, TX 78758U.S.A.
© Copyright IBM Corp. 2004 41
oΩTiAϕ°oAbYípUIOΦoC
IBM ≥≤Φº IBM ΩívX]⌠≤PÑX°AúΩTú
víPΣAvΩC
Bt⌠≤αΩAObⁿε⌠UoXAPbΣL@⌠UoX
GAiαjtºCqΩObotW AúOPΣLqt
WqΩ@CAqΩiαOzL[Hw⌠AΩGúú
oPCσTΣSw⌠AΩC
úºD IBM úΩTAúAΣoGnΣLDC
IBM 'LoúA]LkToD IBM ú⌡µαBe⌠≤∩
úΣLDiOLC÷D IBM úαDóúC
UCⁿJO International Business Machines Corporation bⁿΩ/ΣLΩa
UG
AIX
DB2
IBM
IBM x
SecureWay
Tivoli
Tivoli x
Universal Database
WebSphere
Lotus O Lotus Development Corporation / IBM Corporation UC
Domino O International Business Machines Corporation M Lotus Development Corporation
bⁿΩ/ΣLΩaC
MicrosoftBWindowsBWindows NT M Windows xO Microsoft Corporation bⁿΩ
/ΣLΩaC
UNIX O The Open Group bⁿΩΣLΩa UC
Java™ MH Java ≥ªMxAO Sun
Microsystems, Inc. bⁿΩMΣLΩa UC
ΣLqBúAWAiαOTAxC
42 IBM Tivoli Identity Manager: N
íX: 5724-C34
Printed in Denmark by IBM Danmark A/S
GI10-2741-01