52
IBM Tivoli Identity Manager N 4.5.1 GI10-2741-01

IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

Embed Size (px)

Citation preview

Page 1: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

IBM Tivoli Identity Manager

N

4.5.1

GI10-2741-01

Page 2: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization
Page 3: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

IBM Tivoli Identity Manager

N

4.5.1

GI10-2741-01

Page 4: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

G

bΩTΣΣúºeA²\¬ 41 yNzñΩTC

G]2004 2 δ

úDbsqñtíAhqA≤ Tivoli Identity Manager 4.5.1 ]ús 5724-C34Hß≥MqC

N GI11-2741-00C

© Copyright International Business Machines Corporation 2004. All rights reserved.

Page 5: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

²

1 ÷≤ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1s\α . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1pnΘΣñ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1y . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Tivoli Identity Manager w . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2úy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3÷y . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4uWsy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

2 nwΘD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5WebSphere Application Server WnwΘD . . . . . . . . . . . . . . . . . . . . . . . . 5

UNIX DU¡ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5Windows DU¡ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9ΩwD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10²°AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10HTTP °AM WebSphere Application Server nΘ . . . . . . . . . . . . . . . . . . . 11Σ Web s². . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

WebLogic Server WnwΘD . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14UNIX DU¡ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15Windows DU¡ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15ΩwD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16²°AD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16WebLogic Server nΘ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17Σ Web s². . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

3 w¡εBDMµMΦk . . . . . . . . . . . . . . . . . . . . . . 19Tivoli Identity Manager ¡ε . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 Tivoli Identity Manager WebSphere ⌠¡ε . . . . . . . . . . . . . . . . . . . . . 20wDMµMΦ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20ΩPΩwDMµMΦ . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24²°ADMµMΦ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25WebSphere MQ DMµMΦ . . . . . . . . . . . . . . . . . . . . . . . . . . . 26NzíDMµMΦ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27ΣLDMµMΦ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28ContainerSearch JavaScript Wµ . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

4 σ≤N . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33Policy and Organization Administration Guide PuWí±AeΩTs . . . . . . . . . . . . . 33yD≤ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33Adobe Acrobat Reader D . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

5 ΩN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

6 APARs wΣLD . . . . . . . . . . . . . . . . . . . . . . . 37APAR . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37ΣLwD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

². N. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

© Copyright IBM Corp. 2004 iii

||

||

Page 6: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

iv IBM Tivoli Identity Manager: N

Page 7: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

1 ÷≤

w∩ IBM® Tivoli® Identity Manager NCo≈uNvσ≤

t Tivoli Identity Manager NΩTA]AsΩTApDMµMΦ

AHíiC

: Nu²ÑAyñΩT¬≤úΣLyuWíñΩTC

s\α

HUOñsW≤G

v w≤ APARS ΣLDAí≤ 38yΣLwDzCo

n½≤úWiαC

v ∩ΣL¡xíwΣW≤Aí≤HUG

– 5yUNIX DU¡z

– 9yWindows DU¡z

– ∩ WebSphere Application Server º Tivoli Identity Manager Oracle on

HP-UX ΣCpGnΣLΩTA\ 10yΩwDzC

– 15yUNIX DU¡z

– 16yΩwDz

– 16y²°ADz

v ∩q°iñ Incremental Data Synchronizer kΣL≤CpGnΣL

ΩTA\ IBM Tivoli Identity Manager tmΓUC

v πwΣL≤AHWiΩTsNWδTC

pnΘΣñ

bDp IBM Tivoli Software Support ºeA÷@U Tivoli ΣAñ

]⌠pU\ IBM Tivoli Software Support ⌠G

http://www.ibm.com/software/support/

pGznBUAQ IBM Software Support Guide]⌠pUñyz

ΦkApnΘΣñC

http://techsupport.services.ibm.com/guides/handbook.html

ΓUNúUCΩTG

v ⁿΣn²MΩµnD

v qX]zbΩaw

v bpßΣñºeA¼ΩTMµ

© Copyright IBM Corp. 2004 1

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

Page 8: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

y

\¬ Tivoli Identity Manager wBy÷yíAPyi

α∩z±CMwznyºßA\ⁿAbuWsyC

Tivoli Identity Manager w

Tivoli Identity Manager Nσ≤wñys¿UCG

v ΩT

v uWU

v °Aw

v zPtm

v NW

v Nzw

ΩTG

v IBM Tivoli Identity Manager N

ú Tivoli Identity Manager nwΘDAHΣLíBíMΣLΣ

ΩTC

v Tivoli Identity Manager ²\¬d

uWUG

v Tivoli Identity Manager uWU

w∩ Tivoli Identity Manager z@AúπXíuWíDDC

°AwG

v IBM Tivoli Identity Manager °AwΓU UNIX M Linux - WebSphere

ú Tivoli Identity Manager wΩTC

v IBM Tivoli Identity Manager °AwΓU Windows - WebSphere

ú Tivoli Identity Manager wΩTC

v IBM Tivoli Identity Manager °AwΓU UNIX - WebLogic

ú Tivoli Identity Manager wΩTC

v IBM Tivoli Identity Manager °AwΓU Windows 2000 - WebLogic

ú Tivoli Identity Manager wΩTC

zPtmG

v IBM Tivoli Identity Manager Policy and Organization Administration Guide

ú Tivoli Identity Manager z@DDC

v IBM Tivoli Identity Manager @δΓU

ú Tivoli Identity Manager ΩTC

v IBM Tivoli Identity Manager tmΓU

2 IBM Tivoli Identity Manager: N

Page 9: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

úµ@°AMO Tivoli Identity Manager tmtmΩTC

NWG

v IBM Tivoli Identity Manager Problem Determination Guide

ú Tivoli Identity Manager úΣLMDΩTC

NzwG

v Tivoli Identity Manager Nσ≤w ]A Tivoli Identity Manager Ω@ºuNzv

≤¡xSwσ≤oiC

úy

pGnΩTAF Tivoli Identity Manager úCziHqU

CmoyG

v WebSphere Application Server

http://www.ibm.com/software/webservers/appserv/support.html

: Uo≈u⌡MµANíwMtm WebSphere Application ServerA

Bí÷úBwO@C÷Mo≈MµbIΩOsA²

biαwgLFCpßNϕAΩΩTMµC

– IBM WebSphere Application Server V5.0 System Management and ConfigurationA

IBM ⌡

– IBM WebSphere Application Server V5.0 SecurityAIBM ⌡

v WebLogic Server

http://e-docs.bea.com/

v Ωw°A

– IBM DB2

http://www.ibm.com/software/data/db2/udb/support.html

http://www.ibm.com/software/data/db2

– Oracle

http://otn.oracle.com/tech/index.html

– Microsoft SQL Server 2000 (SP3)

http://msdn.microsoft.com/library/

v ²°Aí

– IBM Directory Server

http://www.ibm.com/software/network/directory

– Sun ONE Directory Server

http://wwws.sun.com/software/products/directory_srvr/5.1/index.html

v WebSphere Embedded Messaging Σ] IBM MQSeries

http://www.ibm.com/software/ts/mqseries

1 ÷≤ 3

Page 10: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

v Web Proxy °A

– IBM HTTP Server

http://www.ibm.com/software/webservers/httpservers/library.html

– Microsoft IIS HTTP Server

http://www.microsoft.com/technet/prodtechnol/iis/default.asp

– Apache HTTP Server

http://httpd.apache.org/docs-project

÷y

UCyñúP Tivoli Identity Manager Server ÷ΩTG

v Tivoli Software Library úFU Tivoli yApABΩu@ϕBdB

⌡MqHτCziHbUz⌠Σ Tivoli Software LibraryG

http://www.ibm.com/software/tivoli/library/

v Tivoli Software Glossary t\h Tivoli nΘ÷NywqC≤UC⌠ Tivoli

Software Library ⌠¬Σ Glossary úσ Tivoli Software GlossaryG

http://www.ibm.com/software/tivoli/library/

uWsy

≤UC⌠ Tivoli nΘwñuWúúyAΣµíuiΓíσ≤µí

(Portable Document Format, PDF)vuWσ≤yÑ (Hypertext Markup Language,

HTML)vΓG

http://www.ibm.com/software/tivoli/library

pGnbwñMΣúyAbuwv¬ΓΣ÷@UúΓUCMß

buTivoli nΘΩTñvWMΣ B÷@UúWC

úy]ANBwΓUBΓUBzΓUHoΓ

UC

: FTOα CL PDF yAb Adobe Acrobat uCLv°íñA∩

X∩]zun÷@U → CLANα≈o∩C

4 IBM Tivoli Identity Manager: N

Page 11: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

2 nwΘD

UCtmí Tivoli Identity Manager nwΘDC

:

1. w∩nwΘ²Mn≤CDU¡uαQ≥ Tivoli Identity ManagerC

z¬≤zí@⌠nwΘtC

2. oO Tivoli Identity Manager yñ@÷oDⁿwCoDOy

lIΩCXDCΩTiα≤sAPzßΣñNϕp

AHoo≤sC

WebSphere Application Server WnwΘD

íb WebSphere Application Server W⌡µº Tivoli Identity Manager °A

nwΘDC

: bO⌠ñA²w WebSphere Application Server ΣAMßw

Tivoli Identity Manager °ACpw÷ΩTA\A≤z¡x

Tivoli Identity Manager °AwΓUC

UNIX DU¡

UCϕµNⁿXwn UNIX @tBíHwΘDU¡Co

ú]tΣL⌡µDCpG⌡µ°A¼úu@ApAbP@íq

úWí°AMΩw°AANboíqúWAtΣLwΘ

Ω]W[ RAMC

AIX D

UϕNⁿXwn AIX @tBíHwΘDU¡C

ϕ 1. b WebSphere Application Server W⌡µº Tivoli Identity Manager AIX @tMwΘDU¡

@t í OΘU¡BiíHΣLwΘD

AIX 5.1 5.2]\

1Cv AIX 5.1GpGOft

WebSphere Application Server

Tivoli Identity Manager °

AAM 5100-03 @

M≤M APAR IY36884 ≤

sC

v \

11yHTTP °AM

WebSphere Application Server

nΘzAHod

WebSphere Application Server

ºnΘº

÷ΩTC

v RAMG1 GB

v BzGt 375 MHz ≤ IBM 604e Bz

v i íG

– /tmp π 1 GB i íC

– pG Tivoli Identity Manager nw WebSphere Application

ServerAWAS_HOME Nπ 800 MB i

íA /var hπ 300 MB i íC

– tm 500 MB ITIM_HOMEC

: wºeA²o IBM DB2 ]wC

© Copyright IBM Corp. 2004 5

|

|

|

|

|

||

|||

||||||||

|||||||

|

||

|

|

|||

|

|

Page 12: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

ϕ 1. b WebSphere Application Server W⌡µº Tivoli Identity Manager AIX @tMwΘDU¡ (≥)

@t í OΘU¡BiíHΣLwΘD

:

1. ÷≤s AIX ΩTA\ http://techsupport.services.ibm.com/server/mlfixes/43/10/01to10.htmlC

Solaris D

UϕNⁿXwn Solaris @tBíHwΘDU¡C

ϕ 2. b WebSphere Application Server W⌡µº Tivoli Identity Manager Solaris @tMwΘDU¡

@t í OΘU¡BiíHΣLwΘD

Solaris 8 9]\

1Cv Solaris 8G2003 3 δº

ßoµíO

v Solaris 9G\

11yHTTP °AM

WebSphere Application Server

nΘzAHod

WebSphere Application Server

ºnΘº

÷ΩTC

v RAMG1 GB

v BzGt 440 MHz ≤ Solaris Sparc B

z

v i íG

– /tmp π 1 GB i íC

– pG Tivoli Identity Manager nw WebSphere Application

ServerAWAS_HOME Nπ 800 MB i

íA /var hπ 300 MB i íC

– tm 500 MB ITIM_HOMEC

Yb Solaris 9 Wµ@°AwAΣñ Tivoli Identity

Manager ww WebSphere Application ServerFY

O WebSphere Application Server wvObLkgJ (CD)

CΘWAzhttm 400 MB i íxs

ΘC

: wºeA²o IBM DB2 ]wC

6 IBM Tivoli Identity Manager: N

|

|||

|

||

||

|||

||||

|||||||

|

||

|

|

|||

|

||||||

Page 13: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

ϕ 2. b WebSphere Application Server W⌡µº Tivoli Identity Manager Solaris @tMwΘDU¡ (≥)

@t í OΘU¡BiíHΣLwΘD

:

1. SolarisGúFΣLí ]wºATivoli Identity Manager nDb /etc/system ñπUC

MxG

v set shmsys:shminfo_shmmax = 4294967295

v set shmsys:shminfo_shmseg = 1024

v set shmsys:shminfo_shmmni = 1024

v set semsys:seminfo_semmsl = 100

v set semsys:seminfo_semaem = 16384

v set semsys:seminfo_semmni = 1024

v set semsys:seminfo_semmap = 1026

v set semsys:seminfo_semmns = 16384

v set msgsys:msginfo_msgmap = 1026

v set semsys:seminfo_semopm = 100

v set semsys:seminfo_semmnu = 2048

v set semsys:seminfo_semume = 256

v set msgsys:msginfo_msgmax = 65535

v set rlim_fd_cur=1024

b Solaris 9 WAw∩TwdΣLAsUC⌠G

http://www-1.ibm.com/support/docview.wss?rs=180&context=SSEQTP&q=Solaris&uid=swg24005009&loc=en_US&cs=utf-8&lang=en

HP-UX D

UϕNⁿXwn HP-UX @tBíHwΘDU¡C

ϕ 3. b WebSphere Application Server W⌡µº Tivoli Identity Manager HP-UX @tMwΘDU¡

@t í OΘU¡BiíHΣLwΘD

HP-UX 11i]\

1C

2002 12 δ Quality Pack v RAMG1 GB

v BzGt 440 MHz ≤

v i íG

– /tmp π 1 GB i íC

– pG Tivoli Identity Manager nw WebSphere Application

ServerAWAS_HOME Nπ 800 MB i

íA /var hπ 300 MB i íC

– tm 500 MB ITIM_HOMEC

2 nwΘD 7

|

|||

|

||

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

||

||

||

|||

||||

|

|

|

|||

|

Page 14: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

ϕ 3. b WebSphere Application Server W⌡µº Tivoli Identity Manager HP-UX @tMwΘDU¡ (≥)

@t í OΘU¡BiíHΣLwΘD

:

1. HP-UXGTivoli Identity Manager ²Mn≤H≤ WebSphere Application Server M WebSphere Embedded Messaging

ΣAΣnB HP-UX ]wCzsΦ /usr/conf/master.d/core-hpux A² SAM í]wj

≤ 2048 Cpb HP-UX Wwα WebSphere Application Server ÷ΩTAsUC⌠G

http://publib7b.boulder.ibm.com/wasinfo1/en/info/aes/ae/rins_prereq.html#prereqHpux

UCMµÑⁿ WebSphere Application Server ⌠úMµAB ]tB C

v dbc_max_pct=25

v maxdsiz=805306358

v maxdsiz=2048000000]ϕ≥u⌠⌠ípvúb

@íqúW

v maxfiles_lim=8196]b maxfiles ºe≤µC

v maxfiles=8000

v maxssiz=8388608

v maxswapchunks=8192

v max_thread_proc=3000

v maxuprc=512

v maxusers=512

v msgmap=2048

v msgmax=65535

v msgmax=131070]ϕ≥u⌠⌠ípvúb@í

qúW

v msgmnb=65535

v msgmnb=131070]ϕ≥u⌠⌠ípvúb@í

qúW

v msgmni=50

v msgseg=32767

v msgssz=32

v msgtql=2046

v nfile=58145

v nflocks=3000

v ninode=60000

v nkthread=7219

v nproc=4116

v npty=2024

v nstrpty=1024

v nstrtel=60

v sema=1

v semaem=16384

v semvmx=32767

v semmap=514

v semmni=2048

v semmns=16384

v semmnu=1024

v semume=200

v shmmax=2147483647

v shmmni=1024

v shmem=1

v shmseg=1024

v STRMSGSZ=65535

Linux D

UϕNⁿXw Linux @tBíHwΘDU¡C

8 IBM Tivoli Identity Manager: N

|

|||

|

|||

|

|

|

|

||

|

|

|

|

|

|

|

|

|

||

|

||

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

Page 15: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

ϕ 4. b WebSphere Application Server W⌡µº Tivoli Identity Manager Linux @tMwΘDU¡

@t í OΘU¡BiíHΣLwΘD

RedHat Linux Enterprise

for Intel (x86) AS 2.1

( 2.4)

L v RAMG1 GB

v BzGt 500 MHz ≤

v i íG

– /tmp π 1 GB i íC

– pG Tivoli Identity Manager nw WebSphere Application

ServerAWAS_HOME Nπ 550 MB i

íA /var hπ 300 MB i íC

– tm 500 MB ITIM_HOMEC

Windows DU¡

UϕNⁿXw Windows @tBíHwΘDU¡Co

ú]tΣL⌡µDCpG⌡µ°A¼úu@ApAbP@íqú

Wí°AMΩw°AANboíqúWAtΣLwΘΩ

]W[ RAMC

ϕ 5. b WebSphere Application Server W⌡µº Tivoli Identity Manager Windows @tMwΘDU¡

@t í OΘU¡BiíHΣLwΘD

Windows 2000 Advanced

Server

Service Pack 3 ≤s v RAMG1 GB OΘ

v BzGt 1 GHz ≤ Intel

Pentium

v i íG

– temp ²π 600 MB i

íC

– AUzú 1.1 GB i

íG

- 500 MB ≤ Tivoli Identity Manager °

A ITIM_HOME ²

- 600 MB ≤ WebSphere Application

Server

Windows Server 2003,

Enterprise Edition

L v RAMG1 GB OΘ

v BzGt 1 GHz ≤ Intel

Pentium

v i íG

– temp ²π 600 MB i

íC

– AUzú 1.1 GB i

íG

- 500 MB ≤ Tivoli Identity Manager °

A ITIM_HOME ²

- 600 MB ≤ WebSphere Application

Server

2 nwΘD 9

||

|||

|||

||

|

|

|

|||

||

||

|||

||||

||

|

||

||

||

||

||||

||

|

||

||

||

|||

Page 16: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

ΩwD

UϕCXb WebSphere Application Server W⌡µ Tivoli Identity Manager °A

ⁿΣΩwC CXw∩ΩwⁿwBM≤íCΩwb

X ( U) ¡xWⁿΣC

ϕ 6. b WebSphere Application Server W⌡µº Tivoli Identity Manager °AiΩw

Ωw M

M≤

í

AIX 5.1 AIX 5.2 Solaris 8 Solaris 9 Linux H P - U X11i

W i n d o w s2 0 0 0AdvancedServer

W i n d o w s2003

I B M D B 2

U n i v e r s a l

D a t a b a s e

E n t e r p r i s e

Edition °A

]\

1C

7.2]t

M≤ 9

U U U

I B M D B 2

U n i v e r s a l

D a t a b a s e

Enterpr iseEdition °A

]\

1C

8.1]t

M≤ 2

U U U U U U U U

Oracle 8i]8.3 U U U

Oracle 9i]9.2 U U U U U U U U

Microsoft SQL

Server

SQL Server

2000 (SP3)

U U

:

1. IBM DB2 w@nbz Tivoli Identity Manager Ωw²]p /home/db2inst1ñ 2 GB

i íC APP_CTL_HEAP 2048C

²°AD

UϕCXb WebSphere Application Server W⌡µ Tivoli Identity Manager °Ai

²°AA CXw∩ΩwⁿwBM≤íCΩw

bX ( U) ¡xWⁿΣC

ϕ 7. b WebSphere Application Server W⌡µº Tivoli Identity Manager °A²°AD

²°A M

M≤

í

A I X4.3.3

A I X5.1

A I X5.2

Solaris 8 Solaris 9 Linux HP-UX11i

Windows2 0 0 0AdvancedServer

W i n d o w s2 0 0 3Enterprise

I B M

D i r e c t o r y

Server

4.1]t

M≤

2

U U U

10 IBM Tivoli Identity Manager: N

||

||||

|||||||||||

||

|||||||

||||||||||

|||||||

||||||||||

||||||||||

||||||||||

||||||||||||

|

|||

||

||||

|||||||||||||||

|||

|||

|||

|||||||||

Page 17: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

ϕ 7. b WebSphere Application Server W⌡µº Tivoli Identity Manager °A²°AD (≥)

²°A M

M≤

í

A I X4.3.3

A I X5.1

A I X5.2

Solaris 8 Solaris 9 Linux HP-UX11i

Windows2 0 0 0AdvancedServer

W i n d o w s2 0 0 3Enterprise

I B M

D i r e c t o r y

Server

5.1]t

M≤

1

U U U U U U U U

I B M

D i r e c t o r y

Server

5.2 U U U U U

]

\

1C

U U U

S u n O N E

D i r e c t o r y

Server]

\

2C

5.1 U U U U

]

\

3C

U U

:

1. ¡≤ RedHat Linux Enterprise 3.0C

2. P]dUz⌠G

http://wwws.sun.com/software/download/inter_ecom.html#dirserv

3. RedHat Linux 7.2 Sun Linux 5.0C

HTTP °AM WebSphere Application Server nΘ

UϕCX WebSphere Application Server HTTP °A Tivoli Identity Manager °

AnΘC

HTTP °AnΘ

UϕCX HTTP °A Tivoli Identity Manager °AnΘC IBM HTTP Server

]tb WebSphere Application Server wñC

ϕ 8. HTTP °A Tivoli Identity Manager °AnΘ

nΘ M≤ í

IBM HTTP Server 1.3.26 WebSphere Application Server

M≤ 2

:

1. bM WebSphere Application

Server M≤ºeA²

÷¼ HTTP °AC

2. bO⌠ñAbw

IBM HTTP Server qú

WⁿJ WebSphere Application

Server M≤AΣñiα]

At WebSphere Application

Server Network Deployment

qúC

L

2 nwΘD 11

|

||||

|||||||||||||||

|||

|||

|||

|||||||||

|||

||||||||||

|||

|||||

||||||||||

|||

|

|

|

|

||

Page 18: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

WebSphere Application Server nΘ

P WebSphere Application Server @e JDKAOΣ JDKC IBM

ΣLúºW w JDKA úbΣºCC

Yno]²Dní PQ77521AsUC⌠G

http://www.ibm.com/support/docview.wss?uid=swg24005451

pM≤÷ΩTA\z¡xºwΓU²ñíñ Tivoli

Identity Manager wvM CDC

UϕCX WebSphere Application Server Base Tivoli Identity Manager °A

nΘG

ϕ 9. WebSphere Application Server Tivoli Identity Manager °AnΘ

nΘ M≤ í

WebSphere Application Server

Base]\ 1C

5.0 WebSphere Application Server

M≤ 2

÷UCAMUC

íG

v APAR SOV62778]\

2C

v APAR PQ75794

v APAR PQ77263

\ 3AHA Windows

2003 ΣLM≤C

í PQ77521A

² DnC

12 IBM Tivoli Identity Manager: N

Page 19: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

ϕ 9. WebSphere Application Server Tivoli Identity Manager °AnΘ (≥)

nΘ M≤ í

:

1. Yµ@°AwATivoli Identity Manager wN WebSphere Application Server wd

C

pGzΓw WebSphere Application Server 5.0Ahbw WebSphere Application Server ºeAzHΓΦ

ím½UCd WebSphere Application Server ºnΘC

v AIX 5.2G

– prereqChecker.xml

– prereqChecker.dtd

YnonP WebSphere Application Server ftdAsUC⌠G

http://www-1.ibm.com/support/docview.wss?rs=180&context=SSEQTP&q=4004726&uid=swg24004726&loc=en_US&cs=utf-8&lang=en

v Solaris 9G

– prereqChecker.xml

– wasmfuncs.SunOS

YnodAsUC⌠G

http://www-1.ibm.com/support/docview.wss?rs=180&context=SSEQTP&q=Solaris&uid=swg24005009&loc=en_US&cs=utf-8&lang=en

2. pGzOHΓΦí WebSphere Application Server Base wM≤ANR CD W ibmorb.jar s

WAS_HOME/java/jre/lib/ext ²UCbπ WebSphere Application Server Network Deployment qúWAN

R CD W ibmorb.jar s WAS_NDM_HOME/java/jre/lib/ext ²CpGzbw WebSphere Application

Server 5.0 M≤ 2 ºßwF⌠≤ WebSphere Application Server JDK íAhbs ibmorb.jar ºeA

²P WebSphere Application Server ΣñpC

3. pGzb Windows Server 2003, Enterprise Edition Ww WebSphere Application ServerAh WebSphere Application

Server ]tM≤ 2Cb Windows Server 2003, Enterprise Edition WAzt⌡µUC@G

v oíwíCsUC⌠G

http://www-1.ibm.com/support/docview.wss?rs=860&context=SW600&q=updateinstaller&uid=swg24001908&loc=en_US&cs=utf-8&lang=en+en

v tAN Tivoli Identity Manager R CD W ibmorb.jar s WAS_HOME/java/jre/lib/ext ²Cbπ

WebSphere Application Server Network Deployment qúWANR CD W ibmorb.jar s

WAS_NDM_HOME/java/jre/lib/ext ²CpGzbw WebSphere Application Server 5.0 M≤ 2 ºßwF

⌠≤ WebSphere Application Server JDK íAhbs ibmorb.jar ºeA²P WebSphere Application

Server ΣñpC

UϕCX WebSphere Application Server Network Deployment Tivoli Identity Manager

°AnΘG

ϕ 10. WebSphere Application Server Network Deployment Tivoli Identity Manager °AnΘ

nΘ M≤ í

WebSphere Application Server

Network Deployment]\

1C

5.0 WebSphere Application Server

M≤ 2

MUzíG

v APAR SOV62778]\

2C

2 nwΘD 13

||

|

||

|||||

Page 20: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

ϕ 10. WebSphere Application Server Network Deployment Tivoli Identity Manager °AnΘ (≥)

nΘ M≤ í

:

1. Yµ@°AwATivoli Identity Manager wN WebSphere Application Server wd

C

pGzΓw WebSphere Application Server 5.0Ahbw WebSphere Application Server ºeAzHΓΦ

ím½UCd WebSphere Application Server ºnΘ

v AIX 5.2G

– prereqChecker.xml

– prereqChecker.dtd

YnonP WebSphere Application Server ftdAsUC⌠G

http://www-1.ibm.com/support/docview.wss?rs=180&context=SSEQTP&q=4004726&uid=swg24004726&loc=en_US&cs=utf-8&lang=en

v Solaris 9G

– prereqChecker.xml

– wasmfuncs.SunOS

YnodAsUC⌠G

http://www-1.ibm.com/support/docview.wss?rs=180&context=SSEQTP&q=Solaris&uid=swg24005009&loc=en_US&cs=utf-8&lang=en

2. pGzOHΓΦíwM≤ 2 (WebSphere Application Server Base)ANR CD W ibmorb.jar s

WAS_HOME/java/jre/lib/ext ²UCbπ WebSphere Application Server Network Deployment qúWAN

R CD W ibmorb.jar s WAS_NDM_HOME/java/jre/lib/ext ²CpGzbw WebSphere Application

Server 5.0 M≤ 2 ºßwF⌠≤ WebSphere Application Server JDK íAhbs ibmorb.jar ºeA

²P WebSphere Application Server ΣñpC

Σ Web s²

UC Web s²uΣ WindowsG

v t Service Pack 2 Internet Explorer 5.5

v t Service Pack 1 Internet Explorer 6.0

v Netscape 4.75

:

1. CookieC

2. únqP@ßqúΓW s²Ñq@CoΓÑq@OQ°

P@Ñq@ IDA]Ωiαú#DC

3. pGO Internet ExplorerAⁿw Java ⌡µ⌠ (JRE)Cs²A

Mß÷@Uuπ -> ⌠⌠⌠∩CA÷@UuiÑvAMßSMµA

bⁿ Java 2 V1.3.1_04 ∩∩AMß½s≈C

WebLogic Server WnwΘD

íb WebLogic Server W⌡µº Tivoli Identity Manager °AnwΘDC

14 IBM Tivoli Identity Manager: N

Page 21: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

UNIX DU¡

UϕCXw@tBíHwΘDU¡Co ú]tΣL

⌡µDC

ϕ 11. b WebLogic Server W⌡µº Tivoli Identity Manager UNIX @tMwΘDU¡

@t í OΘU¡BiíHΣLwΘD

AIX 5.1]\

1C

Yb WebLogic Server W⌡µ Tivoli

Identity Manager °AAM 5100-02

@M≤≤sC

: z 5100-03 @M≤C

v RAMG1 GB

v BzGt 375 MHz ≤

IBM 604e Bz

v i íG/tmp π 500 MB

i íC

v i íG

– /tmp ²π 500 MB i

íC

– AúUCi íG

- 150 MB ≤ ITIM_HOMEC

- 300 MB ≤ BEA_HOME

HP-UX 11i 2002 12 δ Quality Pack v RAMG1 GB

v BzGt 440 MHz ≤

v i íG

– /tmp ²π 500 MB i

íC

– AúUCi íG

- 150 MB ≤ ITIM_HOMEC

- 300 MB ≤ BEA_HOME

Solaris 8 2002 7 δºßoµíO v RAMG1 GB

v BzGt 440 MHz ≤

Solaris Sparc

v i íG

– /tmp ²π 500 MB i

íC

– AúUCi íG

- 150 MB ≤ ITIM_HOMEC

- 300 MB ≤ BEA_HOME

Solaris 9

:

1. ÷≤s AIX ΩTA\ http://techsupport.services.ibm.com/server/mlfixes/43/10/01to10.htmlC

Windows DU¡

UϕCXw@tBíHwΘDU¡Co ú]tΣL

⌡µDC

2 nwΘD 15

||

Page 22: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

ϕ 12. b WebLogic Server W⌡µº Tivoli Identity Manager Windows @tMwΘDU¡

@t í OΘU¡BiíHΣLwΘD

Windows 2000 Advanced

Server

Service Pack 3 ≤s v RAMG1 GB OΘ

v BzGt 500 MHz ≤

Intel Pentium

v i íG

– temp ²π 500 MB i

íC

– AúUCi íG

- 150 MB ≤ ITIM_HOMEC

- 300 MB ≤ BEA_HOME

ΩwD

UϕCXb WebLogic Server W⌡µ Tivoli Identity Manager °AiΩwG

ϕ 13. b WebLogic Server W⌡µº Tivoli Identity Manager °AiΩw

Ωw AIX 5.1 Solaris 8 Solaris 9 W i n d o w s2 0 0 0A d v a n c e dServer

HP-UX 11i

Oracle 8i]8.3 U U U U U

9i]9.2 U U U U U

Microsoft SQL Server SQL Server

2000 (SP3)

U

²°AD

UϕCXb WebLogic Server W⌡µ Tivoli Identity Manager °Ai²°A

G

ϕ 14. b WebLogic Server W⌡µº Tivoli Identity Manager °A²°AD

²°A AIX Solaris 8 Solaris 9 W i n d o w s 2 0 0 0Advanced Server

Sun ONE Directory

Server]\

1C

5.1 U]\

2C

U U U

:

1. P]dUz⌠G

http://wwws.sun.com/software/download/inter_ecom.html#dirserv

2. b AIX 4.3.3]úO 5.1W

16 IBM Tivoli Identity Manager: N

||

|

|

|

|

Page 23: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

WebLogic Server nΘ

UϕCX WebLogic Server Tivoli Identity Manager °AnΘG

ϕ 15. WebLogic Server Tivoli Identity Manager °AnΘ

í

WebLogic Server t Service Pack 3 7.0

]7.0.3.0

: H WebLogic Server Ab AIX Ww

JDK 1.3.1_06 ≤sC

Σ Web s²

UC Web s²uΣ WindowsG

v t Service Pack 2 Internet Explorer 5.5

v t Service Pack 1 Internet Explorer 6.0

v Netscape 4.75

:

1. CookieC

2. únqP@ßqúΓW s²Ñq@CoΓÑq@OQ°

P@Ñq@ IDA]Ωiαú#DC

3. pGO Internet ExplorerAⁿw Java ⌡µ⌠ (JRE)Cs²A

Mß÷@Uuπ -> ⌠⌠⌠∩CA÷@UuiÑvAMßSMµA

bⁿ Java 2 V1.3.1_04 ∩∩AMß½s≈C

2 nwΘD 17

Page 24: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

18 IBM Tivoli Identity Manager: N

Page 25: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

3 w¡εBDMµMΦk

ínΘ¡εBDµMΦC

Tivoli Identity Manager ¡ε

UC¡εG

v DGb HP-UX 11i Wiµ Tivoli Identity Manager wíA IBM

Directory Server 5.1 LDAP tm (ldapConfig) óCTºpUG

LdapConfig ó w/ 80 - úC

µMΦkGb IBM Directory Server 5.1 W /usr/IBMldap/etc ²ñ 640

\ivCW[\ivCpAΘJUCⁿOG

chmod 750 /usr/IBMldap/etc

v DGbusWvu∩vAí (DSML) ∩W÷@UßAb\αO

W GC

pGznMΣu∩vAí∩º∩dA÷@U -> zA

í -> ∩Aí (DSML)CbWUΘJ DSML ⌠ß÷@

UAoApGbΣñ@ (UI) O¿ñΣANπ

u¿\vTºCMbu@y (WF) O¿ñ ú⌡µ⌠≤Ñ

Cϕzß≥n⌡µY DSML ¼≤@AonDNóC

µMΦkGtN DSML wb WF O¿WC

: zHPWMmAN DSML ±b UI M WF qú

WC

v DGTivoli Identity Manager SúΦk²zbq°i]píñ íX

C

µMΦkGLC

v DGb Tivoli Identity Manager RúAíßAiαYX@ΣúA

íΩwº¼pCYYXoº¼pAAíQRúC

µMΦkGLC

v DG extensions/examples/workflow/erPersonStatusExample.html M

extensions/examples/workflow/person_modify.xml b Person Modify Start Activity

Completion Script ñC

µMΦkG∩UC ScriptG

var person = Entity.get();var changes = person.getChanges();var result = "none";

if(changes != null && changes.length > 0) for (i =0 ; i < changes.length ; i++)

var op = changes[i].op;

© Copyright IBM Corp. 2004 19

|

|

|

|

|

|

|

|

|

Page 26: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

if(op == 1 || op == 2)

var name = changes[i].attr;if(name == "erpersonstatus")

var values = changes[i].valuesif(values[0] == 1) result = "suspend"; else result = "restore";

action.set(result);

v DGu@y UNTIL jΘB@ípP DO...WHILE jΘC÷MjΘ≥

iµXⁿwjΘ°≤A²O DO...WHILE jΘ≥iµⁿw°≤ó

C

µMΦkGN°≤½]ⁿwjΘ°≤ VCpAN

a<b

∩¿UíG

a>=b

Tivoli Identity Manager WebSphere ⌠¡ε

pGnb WebSphere ⌠UR≈ Tivoli Identity ManagerA[εUC¡εG

v Tivoli Identity Manager ]O@tOPΦCFKo#wqTM

tmDAzúnb@ Tivoli Identity Manager OϕñA@HW

@t¼C

v b\αOϕñAúnΓuvMuu@yvOO¿A±bP

@íqúWC

v pGP@íqúWh WebSphere Application Server ΩAuΣñ@Ω

°AiH¿ Tivoli Identity Manager O¿C

v WebSphere Application Server e\zbP@íqúWAw Network Deployment

Manager MO¿CTwoíqúπnOΘBt Mi íAHtX

Bu@qC

wDMµMΦ

w WebSphere Application Server iαo@DAΣñ]AUCDG

v DGb HP-UX 11i ¡xWAú CD W°Wñß@Xriαw

QúhCpAFP510H-01.TAR.Z;1 wQ∩¿úT fp510h-01.tarC

µMΦkGo#oD]OG@sxW ISO-9660

Rock RidgeAΣsW¼HΣπ POSIX tyNt meta ΩC

Rock Ridge Wµíⁿ≤ ISO-9660 IDAΣñ ;1 XúOjgC

⌡µUC@H∩¿pgA ≤WG

1. w HP-UX í PHCO_25841BPHKL_26269 M PHKL_25760C

20 IBM Tivoli Identity Manager: N

|

|

|

|

|

|

|

|

|

|

|

|

|

|

Page 27: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

2. HⁿOñucdcasev∩ⁿ CDCpG

mount -F cdfs -o cdcase /dev/dsk/c0t030 /cdrom

3. N fp510h-01.tar ½sRW fp510h-01.tar.Z HKúYCMß untar

C

v DGTivoli Identity Manager w ús Oracle JDBC Xí

]classes12.zip CpGzO Oracle zΩwAhϕzΩw

suA¼ java.lang.ClassNotFoundException TºC

µMΦkGYn≤oDA⌡µUC@G

1. ÷@U°AhXΩwtmí ≥w@C

2. ϕw¿A⌡µUC@G

a. N Oracle JDBC Xí]classes12.zip qz²e

²szew IBM Tivoli Identity Manager qúW ITIM_HOME/lib

²ñC

po Oracle JDBC Xí]classes12.zip º÷ΩTA

\z¡xº Tivoli Identity Manager wΓUñí CD ÷X

íMµCps²÷ΩTA\lw Tivoli Identity

Manager ºen⌡µez@MµC

b. oXUCⁿOuΩwtmv°íG

UNIXGITIM_HOME/bin/DBConfig

WindowsGITIM_HOME\bin\DBConfig

c. ¿ΩwtmC

d. bOtmñAεO¿°AC

bµ@°AtmñAε WebSphere Application ServerCUCⁿOG

UNIXGWAS_HOME/bin/stopServer.sh servername

WindowsGWAS_HOME\bin\stopServer.bat servername

e. bOtmñAO¿°AC

bµ@°AtmñA WebSphere Application ServerCUCⁿOG

UNIXGWAS_HOME/bin/startServer.sh servername

WindowsGWAS_HOME\bin\startServer.bat servername

v DGbzw AIX Solaris µ@°AApGPw Tivoli Identity

Manager M WebSphere Application Server BaseAzNLkq CD wC

µMΦkG⌡µUC@G

1. N Tivoli Identity Manager wíszbw≈W ²ñ]

w≈n 300 MB i íC

– AIX: instAIX-WAS.bin

– Solaris: instSOL-WAS.bin

3 w¡εBDMµMΦk 21

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

Page 28: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

2. q²⌡µ Tivoli Identity Manager wíAw Tivoli Identity Manager

M WebSphere Application Server BaseC

v DGwíAw∩°i íj≤i íC

µMΦkG°wCW[i íC½slwíC

v DGwíAw∩°iⁿXAt'w WebSphere Application Server

í PQ76707C

µMΦkG∩Cí PQ76707 úTCMT

íO PQ77263C

v DGwºßAτñ°iAAϕzs Network Deployment

Manager zDx]°iCpAzDxo# ClassNotFound

C]Σú adminconsole.ear C

µMΦkGúw Network Deployment ManagerCW[i íC½s

lwC

v DGwiµíA∩ WebSphere MQ s mqm iµndΣúⁿ

wsC

µMΦkG°wC n WebSphere MQ sMC½w

C

v DG≈Ñq@]p vnc Ñq@ⁿúÑq@

ATivoli Identity Manager wLk¿CTºiαⁿX jmsserver

wεCΣßnwiαXTºAªⁿXDXb enrole.ear

C

µMΦkGN Tivoli Identity Manager wbqú@tWCú

n vnc Ñq@ⁿúúÑq@w Tivoli Identity ManagerC

v DGbOW WebSphere Application Server w Tivoli Identity Manager A

TºiαⁿX jmsserver b⌡µA²ΩW jmsserver wεCziα

bw Tivoli Identity Manager ºeNwgHΓΦíε JMS °AC

µMΦkGñTº ≥wCQ¿ Tivoli Identity Manager wº

ßAAHΓΦí jmsserver C⌡µUC@G

1. s WebSphere Application Server zDxC

2. ÷@U°A -> JMS °AC

3. b JMS °AMµñA∩T IW JMS °AAMß÷@UC

v DGϕzb Windows 2000 Ww Tivoli Identity Manager AWebsphere Embedded

Messaging Publish and Subscribe Aí 'CHΓΦíªP

MUCTºG

LkbqúW Websphere Embedded Messaging Publish MSubscribe WAS__server1 AC 1075G÷YAíúsbAwRú

µMΦkGñTº ≥wCTivoli Identity Manager ún Websphere

Embedded Messaging Publish and Subscribe AíCúnAíC

22 IBM Tivoli Identity Manager: N

Page 29: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

v DGb Windows 2000 WAϕz≤s Tivoli Identity Manager Q Tivoli Identity

Manager ww Tivoli Identity Manager M WebSphere Application Server

ºßAziαLknJ Tivoli Identity ManagerC

µMΦkG½stFt½sßiα≤Y⌠]wM

WebSphere Embedded Messaging ΣεCDCd

WAS_HOME\logs\server1\SystemOut.log AHPO⌠≤P WebSphere

Embedded Messaging ΣεCzí÷º¼pC

v DGϕ Tivoli Identity Manager w WebSphere Application Server Aw

d WAS_HOME\log.txtAHP WebSphere Application Server LnwO

Q¿CpGTºⁿXLkA°w P

WebSphere Application Server wó]C

µMΦkGDiαXbUCaΦG

– i íC

– b Windows WGzⁿw ID Sv¡Cu@

í@tvMuHAínJvv¡C

– WebSphere Embedded Messaging ΣwiαwgóCd

mq-prereq.log AHTwOLk⌡µªndC

A\P WebSphere Application Server w÷σ≤AHA WebSphere

Application Server wiαóΣL]C

v DGwí'N Tivoli Identity Manager #íw²sWíw⌠C

A FTP qT≤w]p RACF M AS/400Nzí#@t

íwA]]tbD≈tíw⌠ñC

µMΦkGNUCΩTsWD≈tíw⌠ñG

AIX

LIBPATH=/lib/aix:"$WAS_LIBPATH":$LIBPATHexport LIBPATH ;;PROTOCOL_DIR=$ITIM_HOME/lib/aixexport PROTOCOL_DIR ;;

Solaris

LD_LIBRARY_PATH=/lib/sun:"$WAS_LIBPATH":$LD_LIBRARY_PATHexport LD_LIBRARY_PATH ;;PROTOCOL_DIR=$ITIM_HOME/lib/sunexport PROTOCOL_DIR ;;

HP-UX

SHLIB_PATH=/lib/hpux11:"$WAS_LIBPATH":$SHLIB_PATHexport SHLIB_PATH ;;PROTOCOL_DIR=$ITIM_HOME/lib/hpux11export PROTOCOL_DIR ;;

Windows 2000BWindows 2003N /lib/nt esúF libdelref.dll H \winnt\system32

ñC

o≤iαMb WebSphere Application Server startServer.shAMb

l startServer.sh M ScriptC

3 w¡εBDMµMΦk 23

||||

|

Page 30: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

ΩPΩwDMµMΦ

Ωw Tivoli Identity Manager ⌡÷DMµMΦ]AHUUG

v DGu@y@iHε Oracle ΩwñYzσO¼pC

σW[ Tivoli Identity Manager ¿úΩϕawC@IAO

itim.log ñXAⁿX ORA-01000GwWLσW¡C

µMΦkGε »zíOΘjp]w∩z⌠π Cb

Oracle WAo p≤ OPEN_CURSOR ]wC

pGnε »zíOΘjpA⌡µUC@G

– WebLogic Server

1. UC URL WebLogic zDxG

http://localhost/console

2. b≡¼cñz⌠C

3. ÷@U⌠≡¼cñA -> JDBC -> suxs -> enrolePoolC

4. ÷@Uk°íWusuvC

5. sΦu »zíOΘjpv C

6. ÷@UMxs≤C

– WebSphere Application Server

1. ÷@UΩ -> JDBC úC

2. Nd≥]n≤s°AC

3. Click ITIM JDBC ú (XA)C

4. ÷@UΣLe -> Ω] 4 C

5. ÷@U ITIM ΩC

6. ÷@UΣLe -> suxsC

7. sΦu»zíOΘjpv C

8. xs≤C

v DGϕ Tivoli Identity Manager q 4.4 $ 4.5 AtπFUCTºG

com.ibm.db2.jdbc.DB2Exception:[IBM][CLI Driver][DB2/NT]SQL0601Nn½≤WPWPC

µMΦkGúw Tivoli Identity Manager úq²MΩwú Tivoli

Identity Manager Ω⌡CzHΓΦíúΩ⌡C

v DG⌠Ob enRoleHiddenAttributes.properties ñⁿwCziαµ

Y⌠i@δC

µMΦkGq enRoleHiddenAttributes.properties úC

v DGuµWv° úiWL 100 rAhLk WCX

100 r¡ε°WbπúΘµC

µMΦkGúnΘJ° j≤ 100 ruµWv C

v DGpG ITIM_HOME/bin/db2config ⁿOb⌡µAWebSphere Application Server

úOb⌡µñAziαNLk Tivoli Identity ManagerC

24 IBM Tivoli Identity Manager: N

Page 31: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

µMΦkGε ½s WebSphere Application ServerC Tivoli Identity

ManagerCt@kO½s WebSphere Application ServerBs WebSphere

Application Server zDxAMßDx\αϕ½s Tivoli Identity

ManagerC

v DGww≤@O Tivoli Identity Manager °AwC

µMΦkGpGzn Tivoli Identity Manager Nzíw≤@A

z²pΓ°APNzíºítºAAtºw≤@

C

²°ADMµMΦ

²°A÷DMµMΦ]AHUUG

v DGw]A²°Ai²zW¬²ΩC

µMΦkG≥≤wqAjPz÷¼∩²°AW¬vC

\²°AzΓUHABJC

v DGAIX W IBM Directory Server 5.2 P LDAP °Aíe

DC

IBM Directory Server Patch P520A-00C N≤oDAoíN]t

bU@ IBM Directory Server 5.2 M≤ñCTivoli Identity Manager 4.5.1 H

l IBM Directory Server πí libdelrefids52.a ú

n Patch P520A-00CCúLAϕyßMíAíñí

libdelrefids52.aC

µMΦkGb Patch P520A-00C @ºeoqíA²A≤z¡xº

Tivoli Identity Manager °AwΓUñú²°AΩTñíA

πí libdelrefids52.aC

ϕ IBM Directory Server Patch P520A-00C iA²⌡µUC@ßAAM

íG

1. PuIBM ΣñvpHo≤s libdelrefids52.a C

2. ≤s libdelrefids52.a N Tivoli Identity Manager 4.5.1 H

l Tivoli Identity Manager í libdelrefids52.aC

v DGw IBM Directory Server MM≤ 1 ºßAϕzní½sA

XUCTºG

CNTR0019EGBzΦk "send" oDíº¼pCº¼pΩG32GSo½≤

µMΦkGñTºCoAN½sC

v DGAñΓ LDAP Lo°≤úi]t µCpG LDAP Lo°≤ñt

µAsWHßNúⁿúAñΓCpAUCLo°≤t µG

( | (sn=xyz) (sn=abc) )

µMΦkGqzⁿw LDAP Lo°≤»zíñú µC

3 w¡εBDMµMΦk 25

|

|

|

|

|

|

|

Page 32: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

WebSphere MQ DMµMΦ

WebSphere MQ ÷DMµMΦ]AHUUG

v DG εCzío#CAmqerr*.log ñpUG

AMQ9213Go TCP/IP qTCíGbqTñoDwC@GTCP/IP (ioctlsocket) IsX 10038 (X’2736’)COUoAitzC

µMΦkG10038 XⁿXAWebSphere MQ ÑxsqÑl

Socket xso#DCoípbπ⌡≡⌠OúCYnMo

DAHUC⌠xsG

set MQNOREMPOOL=1

v DGTºⁿX WebSphere MQ εCsu]iαOb SendMessage DC

Queue Connection Factory MaεC]wⁿGOTA²u@y (itim_wf)

Mu@ym (itim_wf_pending) εCB≤úTLk¼AC

Tº∩diα]AHUUG

CNTR0019EGBzΦk "send" oDíº¼pCº¼pΩG]πΩ...

Connection Manager qΩ JMS$ITIM Queue Connection Factory$JMSManagedConnection@1010457898 Ωt¼Y½suC¼º¼pOjavax.jms.JMSExceptionGMQJMS2008GLk MQ εC

µMΦkG]H AIX ⌡µUC@A½ WebSphere MQ εCG

1. b /usr/WebSphere/AppServer ²ñAΘJUCⁿOG

deletemq.sh

úΩµWB IWεCWCzib

createMQ.nodename_jmsserver.log ñΣo A≤

/usr/WebSphere/AppServer/logs ²ñCpAΘJG

./deletemq.sh ITIM-45AIXCluster1 faith jmsserver

Tw'≥⌡µ⌠≤ mqm CpGb⌡µñA½sqúC

2. b /usr/WebSphere/AppServer ²ñAΘJUCⁿOG

createmq.sh

úΩµWB IWεCWCzib

createMQ.nodename_jmsserver.log ñΣo A≤

/usr/WebSphere/AppServer/logs ²ñCpAΘJG

./createmq.sh ITIM-45AIXCluster1 faith jmsserver

½s JMS °AC

v DGo# WebSphere MQ suyóC÷M¼≈ íMΩΘOΘi

A²toXUCTºG

AMQ7463GεCzí WAS_timwin7_jmsserver ΘxwíC

AXⁿUCTºAohTºPΩú¼¼p÷G

26 IBM Tivoli Identity Manager: N

|

||||||

|

|

|

|

|

Page 33: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

MQJE001G¿X 2A] 2102

µMΦkGgJΘxO²A]ΘxwíAHQoXAMQ7463 T

ºCεCzíRDC

TºyqL¬NiαJo¼pCúLApGzn≥gJΘxAz

NUCG

– bεCzítmñ≤o W[ΘxCºßAzε

½sεCzíC

– Az]iNΘx¡[jCpGno≥AzRú ½εCz

íC

v DG εCsuo#UC JMS º¼pG

MQJMS2005GLk ’<identifier>_server1’ MQQueueManager

µMΦkGLCY]b∩εCzíiµß]qDsuAH

WebSphere MQ]bñOⁿ Embedded Messaging ServerP WebSphere Application

Server ≤P@í≈A@o#oí⌠⌠DCpGssuAiα

Núo#oDCúLAEmbedded Messaging Server OßsuA

HssuúOitm∩C

NzíDMµMΦ

Tivoli Identity Manager Nzí÷DMµMΦ]AHUUG

v Tivoli Identity Manager °AMNzíΣíºíµ½Ωº°A

]µV[KCΣO@ß]V OAiτ⌠⌠sut@

íº¡OC

: bu²WAoqz¬≤TiΣV O°AMNzíoGΩTñzMC

v DGTivoli Identity Manager °A 4.5.1 ]Σ Fix Pack 1'gALk

P FTP qT≤w Tivoli Identity Manager Nz@B@C

µMΦkGP IBM ßΣñpAHo FTP qT≤wº Tivoli

Identity Manager Nzº÷ΩTC

v DG Tivoli Identity Manager 4.4.x Nzí²Q Tivoli Identity

Manager 4.5 (HAα⌡µC 4.4.x NzíAOⁿiP IBM

Directory Server eftNzíC

µMΦkGQwAí]wºßANi Tivoli Identity Manager 4.5

⌡µoNzíC⌡µUC@A¿NzíAí]ww

G

1 . ⌡µNzíAí]wwⁿOC⌡µßAt

agentnameprofile ² - ]NO@NzíWA[rΩuprofilevC

pAWindows NT ²OG

nt40profile

agentnameprofile ²ñ]t@W resource.def C

2. N agentnameprofile ²esUC²G

3 w¡εBDMµMΦk 27

|

|

|

|

Page 34: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

– WindowsG’ITIM_HOME\data\remote_resources’

– UNIXGITIM_HOME/data/remote_resources

: pGNzí]wwíwgQT ITIM_HOME/data/remote_resources/agentnameprofile ²ANúA⌡µ

oBJC

3. UCΦísΦ remote resources ²ñ resource.def O⌠»z

íC

– N com.access360.enrole ∩ com.ibm.itimC

– N com.access360 ∩ com.ibmC

4. N config_remote_services ⁿO±mbUC²ñG

– WindowsGITIM_HOME\bin\win

– UNIXGITIM_HOME/bin/unix

b config_remote_services ⁿOñATwwUCΦí]w JAVA_HOMEG

– WebSphere Application ServerG%WAS_HOME%\AppServer\java

– WebLogicG%BEA_HOME%\jdk131_06

5. ⌡µUCⁿOG

– UNIXG

’ITIM_HOME/bin/unix/config_remote_services’ agentnameprofile

– WindowsG

’ITIM_HOME\bin\win\config_remote_services’ agentnameprofile

Σñ agentnameprofile Oe@BJ ²WC

6. pGznPNzí]wbOi@A¼A Tivoli Identity

Manager íC÷@U -> zA -> sWCdX\α

ϕAHPNzíAí]wOsbC

ΣLDMµMΦ

ΣLDMµMΦ]AHUUG

v DGb Tivoli Identity Manager AñΓsW/úíAⁿñΓ≤vT

qiαoLjCAñΓⁿw@iαWLw]íO ]5

CϕWLO Au@y)YOA εñΓ≤íCo

XiAⁿXñΓ≤wεC

µMΦkGW[w]O HΣtⁿqC∩

ITIM_HOME\data\workflow_systemprocess ²ñUCtu@yG

– adddynamicrole.xml

– changedynamicrole.xml

– removedynamicrole.xml

bC@ñAW[b ROLE_CHANGE íñ LIMIT CO OH@ϕ

µwqCpAUíⁿw 1 pO G

ACTIVITY ACTIVITYID="ROLE_CHANGE" LIMIT="3600000"

28 IBM Tivoli Identity Manager: N

Page 35: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

v DGⁿhKX≤nDvTAúAϕΩTA Bα≈bh

KX≤nDDñ]wuQnDvC

µMΦkGYnNbßMAW÷ΩTsWhKX≤nD

lnDñAz≤ changePassword @u@yC⌡µUC@G

1. bubßvº changePassword @ START IñíJUC JavaScriptCo

Script ≤subßKX≤vnDf ΘxAHbD«µñπub

ßW/AWvC

var account = Entity.get();var accountName = account.getProperty("eruid")[0];var serviceDn = account.getProperty("erservice")[0];var service = new Service(serviceDn);var serviceName = service.getProperty("erservicename")[0];var subjectData = accountName + " / " + serviceName;process.setSubjectData(subjectData);

2. Yn² JavaScript αTB@ATw fesiextensions.properties ñXU

µG

"fesi.extension.Workflow.Model=com.ibm.itim.fesiextensions.ModelExtension"

v DGuQnDvµbuHvn²ñπDw CommonName C

µMΦkG∩uHvΩΘ selfRegister @C⌡µUC@G

: tm -> ΩΘ -> HñuWv ] snCpGuWv

∩ cnAú Script IC

1. H ITIM z¡≈nJC

2. ÷@UtmC

3. ÷@UΩΘ¼C

4. ∩U\αϕñHC

5. ÷@U selfRegister @C

6. b selfRegister u@yWAbulvMuselfRegister πv IºííJHM

WRW Script IC

7. ÷ΓUs Script IC

oeXueGScript Iv°íC

8. buev°íñAΘJUC Java ScriptG

var personData = person.get();var snValue = personData.getProperty("sn")[0];process.setRequesteeData(snValue);

9. ÷@UTwCxs@C

v DGpGΘΘJíB≤¬íAh H 12 pµíπíA

BúúW+ (a.m.) U+ (p.m.) íⁿC

µMΦkGNΘΘJíµ]¬gíCíH 24 pµíπAi

AíLC¡zA⌡µUC@G

– ∩tm -> qC

– ∩¬Σµñ¡zíAMß∩ ITIMAccountC

– ∩eW erpswdlastchangedC

3 w¡εBDMµMΦk 29

|

|

|

|

|

|

|

||||||||

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|||

|

Page 36: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

– buevqµíñATwµB≤¬gíC]NOíAbu∩v

WAµúQ∩u¬vCxs≤C

pGΘΘJµB≤¬íA∩ I T I M _ H O M E \ d a t a ²ñ

Labels.properties UCµqG

readOnlyDateFormat=MMM dd, yyyy hh:mm:ss z

¬pUG

readOnlyDateFormat=MMM dd, yyyy hh:mm:ss a z

v DGou Mulv GUI ñXrrΩCwOσríADrr

ΩC

µMΦkGNulv∩MuívAΦkNumv½≤]w

uerrdnattrvqulv∩¿²ñuívCúLAYO errdnattr ∩MQ

∩¿ⁿVw]HAhOnµCpAuív

¿umvΩΘnC

v DGb AIX W Tivoli Identity Manager ApGW° WL¡x

Ww¡εANLk bßCpAziQ my8chars oWQ bßC

²LkQ° WL 8 rW]p my9charss bßC

µMΦkGNW¡ε¡xM° ∩ Tivoli Identity Manager ¡

OhAHεC÷≤¡OhΩTA\ IBM Tivoli

Identity Manager Policy and Organization Administration GuideC

v DGTivoli Identity Manager Applet LkⁿJAHo#u@yDC

µMΦkGb Internet Explorer ñApGu⌠⌠⌠∩v∩uiÑv

Ww∩u Java 2 version for appletvAún∩uJava í

εev Proxy Ws²]wCpGoΓú∩ATivoli Identity

Manager Applet NLkⁿJC

pGznMΣu Java 2 version for appletvA Internet ExplorerAM

ß÷@Uuπ -> ⌠⌠⌠∩CuiÑvMµC

pGznMΣuJava íεxvA÷@Ul -> ]w -> εxCbu

εxvWA÷ΓU Java í <>C∩ Proxies C

ATw WebSphere Application Server M≤ 2 ]wgMw Web

°AqúWCbwM≤ºeA²ε WebSphere Application Server

íCMM≤ 2 ºßApGDOsbAM 5.0.0B5.0.1 5.0.2

WebSphere Application Server Plug-in Cumulative FixCoí≤UC

]NΘJbP@µG

http://www.ibm.com/support/docview.wss?rs=180&context=SSEQTP&q=plugin+&uid=swg24004524&loc=en_US&cs=utf-8&lang=en

v DG Tivoli Identity Manager ú#W(sº¼pC

µMΦkG≡MRú Tivoli Identity Manager AMßS½sANú#

W(sº¼pCoO≤ Tivoli Identity Manager l²°A²U

.lok y¿CRúo .lok AMß½s Tivoli Identity ManagerC

v DGSearchMO.toString() ñ NullPointerException

30 IBM Tivoli Identity Manager: N

|

|

|

|

|

|

Page 37: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

µMΦkGTivoli Identity Manager 4.5 úΣN WebSphere Application Server

HTTP Ñq@l@ú≈εΦíCb WebSphere Application Server W

IBM HttpSession lP SearchMO.toString() Φkñ NullPointerExceptionC

v DGxsCL°i

µMΦkGpGznH PDF µí CSV µíxs°iAq°iΘX°í

\αϕ∩ñ∩tssCs²²AMßΘJW

xsσ≤CiHCL PDF M CSV µí°iCCSV °ii²CLLk±í

µ@°iCp≤CL CSV °iG

– bú#°i∩ CSV °iµíC

– ÷@U->tssA∩ts¼ Microsoft Excel WorkbookC

– úmMWxs°iC

– Microsoft Excel ΣL⌠≤ XLS ¬°iC

– CL∩CLσ≤C

v DGLkPOb⌡µPB-APß@PB-¼AC

µMΦkG¼AπbuMµvuΩvµñCHUO

iα G

– úPB-⌠≤Ω

– iµñ

– L

– ¿ß@PB-ΘMí

v DG∩hoApG÷@UeXAMß÷@U½]A L

k½]w∩µC

µMΦkG²÷@U½]Cún÷eXAMß÷@U½]C

v DGN Service.createEntity() Φkíp ßAΦkLkB@C

µMΦkGúnb ßWoΦkCb API íñAO Service

Γ createEntity ΦkúwgYN@oC

v DGϕ Tivoli Identity Manager P IBM Tivoli Directory Integrator ºíRW⌠

wqúPA úXTºC

µMΦkGLC

v DG÷@UusW/∩HvϕµW½]ßA S½]ñΓCpAH

UNOLk½]ñΓG

1. nJ Tivoli Identity ManagerC

2. ÷@UC

3. ÷@UzHC

4. ÷@UsWC

5. ∩YHAMß÷@UeXC

6. bñΓñ∩@C

7. ÷@U½]C

3 w¡εBDMµMΦk 31

Page 38: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

µMΦkGu½]vúA≤oµC÷@UjMAijMsWC÷@U

RúAiqoµRúñΓC

v DG⌡µ API HRúbß]HÑA ITIM bß@Lkdu

hvOnbßC

µMΦkGLC

v DGprocess.auditEvent() 'bf lñπΩCbu@ywqñA

oNtσrMíWO@µíJuBzΩvñC

µMΦkGLC

v DGbu -> A∩hv∩ñ]w\ivºßA 'bjM

ßπC

µMΦkGuvD\αϕMΣ≡ñhC ÷@UhW

°hMµñΩC

v DGbbßííA∩u KXvúe\ΘJsKXCpG

∩F KX∩AhzLksΦKXµC

µMΦkGpG∩Fu KXv∩AhsKXTKXQñC

Yn]wsKXA.∩u KXv∩C

v DG Windows 2000 bßALk]wíCdTºpUG

uwQBznDA²OLk]wYGerW2KDialinCallbackBerW2KAllowDialinv

µMΦkGdbΣW bߺqú Windows 2000 NzCϕ'Rú

A]wYwsA]wANo#oC²RúA]w

AMßwsA]wC½s bßC

ContainerSearch JavaScript Wµ

DGnσ≤≤ SelfRegistration u@yñ ContainerSearch JavaScript ExtensionC

µMΦkGw]AiHq Tivoli Identity Manager uu@y]pívM

uAí∩vBz ContainerSearch JavaScript ExtensionCContainerSearch JavaScript

Extension iΩ@ OrganizationalContainerSearch OC

xsjMykpUG

searchByFilter(String containerName, String filter, [int scope])

pG

var locationContainer = new ContainerSearch();var thisLocation = locationContainer.searchByFilter("Location", "(l=Raleigh)", 2);

oO API Javadoc ≤UC²ñG

ITIM_HOME/extensions/api/com/ibm/itim/dataservices/model/domain/

32 IBM Tivoli Identity Manager: N

|

|

|

|

|

|

|

Page 39: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

4 σ≤N

íúσ≤DMµMΦC

Policy and Organization Administration Guide PuWí±AeΩTs

IBM Tivoli Identity Manager Policy and Organization Administration Guide Pú

úuWí±AeΩTsCΓºAu²ΓUñΩTC

yD≤

w¿UCyD≤AHúb Tivoli wíDⁿG

²eD sD

IBM Tivoli Identity Manager Troubleshooting

Guide

IBM Tivo l i Iden t i t y Manager Prob lem

Determination Guide

IBM Tivoli Identity Manager Server Configuration

Guide

IBM Tivoli Identity Manager tmΓU

Adobe Acrobat Reader D

DGA Adobe Acrobat Reader 4.05 ≤¬°s Tivoli

Identity Manager σ≤CziqUC⌠o Adobe Acrobat ReaderG

http://www.adobe.com/products/acrobat/readstep2.html

© Copyright IBM Corp. 2004 33

Page 40: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

34 IBM Tivoli Identity Manager: N

Page 41: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

5 ΩN

UCMΦBzªσ≤ñDG

v DG bΘσñALkb Microsoft Outlook Express ¬ Tivoli Identity Manager

el≤qñD«C

µMΦkG TºMµCNibTºMµñ¬D«CAz]i÷@UT

ºMµñTºAbt°íñoi¬D«C

© Copyright IBM Corp. 2004 35

Page 42: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

36 IBM Tivoli Identity Manager: N

Page 43: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

6 APARs wΣLD

C APARs ΣLwDC

APARTivoli Identity Manager 4.5.1 wUC APARsG

APAR í

IY49194 'l]wsbß ’PARAMETERS.ERUID’C

IY49372 bF LTPA O ºßAíñw WebSphere Application

Server wCouvT WebSphere Application ServerC

IY49376 q 4.3 $ ú q°iugetDNvτCo LA

í]AΓ≈σ≤GIY49376_MSSQL_README.txt M

IY49376_Oracle_README.txtCoσ≤úo@B@ΩTC

IY49566 HR /CC

IY50099 eruid 椣i parameters.eruid(0)C

IY50117 q°i'XbuvMµñCHUΩTOQ÷q°i

adhocreporting.properties yñSúCsΦoA]w

availableForNonAdministrators=trueC

: bN ] true ºßA⌡µπΩPBBzAHKo

T°iC

IY50253 bw²°iAInternet Explorer 6 s²eϕ≈¼AC

IY50335 H uid M pw OΩwú@ - API YXbßú@º

¼pC

IY50444 σ≤≤CTivoli Identity Manager °AwΓUñ² C úTa

″mqvr″ CO ″mqver″C

IY50564 ß°iΩPB-OWL 15 p¿C

IY50704 bu/°w¿nDvñAQnDWπbuD«vµñCO

ⁿ÷ Java Script ΩTC

IY50774 ϕbßAzQjε≤KXC

IY50780 uqXvⁿⁿⁿGúñ'z RACF sC

IY50836 ]weⁿOⁿGLkAϕB@AªNXm≤@X

ñC

IY50846 jMp≤π 1000 ½≤C

IY50847 wnS

IY50848 Tivoli Identity Manager NAbßo#C

IY50854 íXΓeC

IY51091 Tivoli Identity Manager 'Bz RACF w]s≤C

IY51208 LkHΣ¡ ITIM sº admin Γ¡≈RúhC

IY51226 ϕµ¬A BµΩ AUI ñuΘvp≤]M≤

HO²A²OovTϕµπµΘ/íC

© Copyright IBM Corp. 2004 37

|||

||

|||

||||

||

||

||||||

||

|||

|||

||

|||

||

||

|||

||

||

||

||

||

||

|||

Page 44: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

APAR í

IY51227 pG Crystal Report hΘJµAhªSbu⌡µv°ie

WAϕ∩⌠C

IY51230 b Crystal Report ⌡µíAbqw] ]≈/d≥Mµñ∩ΘJ

ºßAo# NullPointer º¼pC

IY51231 b Crystal Viewer ñIs export/goto page/print τAo# Nullpointer º

¼pC

IY51232 bJxsvϕµAYXFΩwTºC

IY51233 bJxsvϕµAYXFΩwTºC

IY51234 ΩPB-πΩPB-íC

IY51235 pG Crystal Reports ñw] t XML rAo# XML BzC

IY51254 qtHXqll≤ñu¼≤HGvµñ@ C

IY51287 CLI-X NzLkbßC

IY51308 vΩWπF Tivoli Identity Manager WC

IY51416 be≤ΘßALDAP erPswdLastChanged ΘxsºC

IY51418 .≤ALkquSearchvo≥dbßC

IY51438 'C≤σ≤íp≤≤ enrole.xslC

IY51740 ⌠¡Ld/ DC

IY51742 HWLd/ DC

ΣLwD

UCD]wG

v b≥ºeAAND XI⌠íW@ºΩCwµO⌠C@

q START lXIº⌠WW@ºΩAHPiJ⌠Ob@

ñC

YObMXN⌠WeJ૧e 'FíW@ºΩAhN

ñW@ºΩC

v Y WebSphere Application Server wtmATivoli Identity Manager API

LkB@Cbww\α WebSphere ⌠ñAϕzn⌡µí API d

]⌡µzví API gíAziαJ Tivoli

Identity Manager °A Oº¼pC

v AS/400 NzíLk Tivoli Identity Manager 4.5 ServerC

v µn²mⁿOóA]ªΣú jar C

v bíAQhH≤AñΓ] SQL óC

v ≤ Tivoli Identity Manager bß ID ] JNDI óC

v LdM API i OD Tivoli Identity Manager bßC

v GMT íO²w¿º DSML únDAPtíúPC

v tmOwh

v context.isAccountDataChanged(″attr-name″) bu@yñLkB@C

38 IBM Tivoli Identity Manager: N

||

|||

|||

|||

||

||

||

||

||

||

||

||

||

||

||

|||

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

Page 45: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

v °i\αPB-nDLkb\αOñCq°i\αúA≤\αOt

mCb\αOwñumnDvεCñAwwºq°iΩPB-nD

Ou'v¼AC

v qϕµWΘΘJµbxsⁿwΘºe²∩ªC

v tjqⁿvT]50,000) ºhAiαy¿ JMS ΩwC

v W[ enrole_data ϕµ íjpC

v LDAP )b Sun ONE P IBM Directory Server ºíO@PC

v LDAP ]@C

v bu@y]pñßFhíºßANLkAsHMµC

v b HPUX ¡xWAϕ Tivoli Identity Manager b WebLogic ñ⌡µAXO

骡pC

v h½ µzb Tivoli Identity Manager úñjMAY

com.ibm.itim.webclient.search.SearchUtility.bindToSession ñú# PtrC

v WebLogic Wo# OutOfMemory C

v process.id JavaScript úT C

v RequestManager APIGonDmnD] SQL º¼póC

v HKXHMHbßFb Tivoli Identity Manager °AñA

úúKXu@yC

v SelfRegistrationManager oX SchemaViolation °iC

v Weblogic µn²]m selfRegGúDuΩnΘv²uenv]busrv

²ºU≤ Web íO⌠ñAhNóC

v @N∩H½≤A² ú]AHⁿz½≤/bßCYn

Jⁿz½≤MbßA∩Φk úpUeG

com.ibm.itim.personManagement.suspendRestorePersonWithAccounts=true|false

v bvTh]p 3000 nDíALkπu°mn

DvCΘxñπOTºC

v Tivoli Identity Manager $ºßAu@y π@Lk⌡µC

v u@y]píGNíµΣL IAα½°≤QMúC

v N q∩≤A⌡µhIµAu@y)XuOΘú

¼vC]W[O niHoDC

v u@y)b IBM DB2 hu@y⌡µⁿúOU,ΩC

v IBM Tivoli Identity Manager Problem Determination Guide q -- eÑC

v ∩ Exchange 2000 ΣLDKX¼NzoXFKX≤C

v KXWhm½h]Lk½sú#C

v ϕ²ñⁿJF 10K AhτϕOC

v wHαeApGbαeo#ºeRúa OUANqΣl OU ñRú

HCHdbBABOⁿAϕTºC

v A∩h - JavaScript ½≤ searchForClosestToPerson LkB@C

v Wñ µPLd/ Q ID ñ µ lCosL

kQnJC

v Tivoli Identity Manager úIs System.gc()C

6 APARs wΣLD 39

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

|

Page 46: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

40 IBM Tivoli Identity Manager: N

Page 47: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

². N

σ≤Yw∩ IBM bⁿΩúºúPAoFbΣLΩañAIBM úúo

ú≤ñúUúBA\αCóϕa IBM NϕAHo

ϕaeúúMAº÷ΩTCo≈σ≤bú IBM úBíAA

úϕtuα IBM úBíACun'I/ IBM z]úvA

⌠≤\αϕúBíAúiHN IBM úBíACúLA⌠≤

D IBM úBíAAµtd@⌠Mτd⌠C

o≈σ≤íDDeAIBM iαΣMQMQ0Cúo≈σ≤úNϕ

úoMQvCziHúXvdAτHG

IBM Director of LicensingIBM CorporationNorth Castle DriveArmonk, NY 10504-1785U.S.A.

pGO÷ (DBCS) ΩTvdAóbΩ IBM z]úíA

úXvdAτHG

IBM World Trade Asia CorporationLicensing2-31 Roppongi 3-chome, Minato-kuTokyo 106-0032, Japan

UCq¿úA≤Ω°Pϕak ΦΣLΩaGInternational Business

Machines Corporation uypzúXAúú⌠≤tºOAΣ

ñ]ABú¡≤úH WwBiSwºA⌠tOCab

Swµ÷WAú3\útOA]Aonú@wAXzC

oΩTñiαNWLΩWC]AIBM wqF Nqß

eJsñCIBM H∩iM/≤XúúM/íAút

µqC

o≈ΩTñú⌠≤D IBM ⌠uAIBM úo⌠úOCo⌠

úΩúO IBM úΩeApGno⌠ΩAz

µßIC

IBM oHUAϕΦíG.zú⌠≤ΩTAL∩ztdC

pGí≥vHF (i) bO íMΣLí]]Aíºíµ½

ΩTAH (ii) ¼µ½ΩTA]n÷ΩTAóG

IBM Corporation2ZA4/10111400 Burnet RoadAustin, TX 78758U.S.A.

© Copyright IBM Corp. 2004 41

Page 48: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

oΩTiAϕ°oAbYípUIOΦoC

IBM ≥≤Φº IBM ΩívX]⌠≤PÑX°AúΩTú

víPΣAvΩC

Bt⌠≤αΩAObⁿε⌠UoXAPbΣL@⌠UoX

GAiαjtºCqΩObotW AúOPΣLqt

WqΩ@CAqΩiαOzL[Hw⌠AΩGúú

oPCσTΣSw⌠AΩC

úºD IBM úΩTAúAΣoGnΣLDC

IBM 'LoúA]LkToD IBM ú⌡µαBe⌠≤∩

úΣLDiOLC÷D IBM úαDóúC

UCⁿJO International Business Machines Corporation bⁿΩ/ΣLΩa

UG

AIX

DB2

IBM

IBM x

SecureWay

Tivoli

Tivoli x

Universal Database

WebSphere

Lotus O Lotus Development Corporation / IBM Corporation UC

Domino O International Business Machines Corporation M Lotus Development Corporation

bⁿΩ/ΣLΩaC

MicrosoftBWindowsBWindows NT M Windows xO Microsoft Corporation bⁿΩ

/ΣLΩaC

UNIX O The Open Group bⁿΩΣLΩa UC

Java™ MH Java ≥ªMxAO Sun

Microsystems, Inc. bⁿΩMΣLΩa UC

ΣLqBúAWAiαOTAxC

42 IBM Tivoli Identity Manager: N

Page 49: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization
Page 50: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization
Page 51: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization
Page 52: IBM Tivoli Identity Manager: ª©¥»ª`·N¨Æ¶µpublib.boulder.ibm.com/tividd/td/ITIM/GI11-4212-01/.../im451_relnotes… · v IBM Tivoli Identity Manager Policy and Organization

íX: 5724-C34

Printed in Denmark by IBM Danmark A/S

GI10-2741-01