Friday 23rd, March 2007
Sametime and multiple ldaps03/23/2007 06:54 AM Sametime
I've been busy with a Websphere Portal cluster installation the last couple of weeks. The interesting piece to this project was using multiple disparate ldaps. We used both Tivoli Directory server and Microsoft Active Directory. Though the Portal 6 documentation supports this configuration we found there were many twists to integrating applications and products. One in particular was Sametime 7.5.
With Sametime, we setup Lotus Domino to use Directory Assistance to authenticate users via portal using SSO from either ldap. Basically DA searches through all the defined ldaps in the DA configuration. This worked out great once we had the search filters set for the attribute differences between TDS and ADS.
One of the issues we ran into was that though an Active Directory user passed the LTPA token and was found in the proper directory, presence awareness would not work for the Sametime portlets. It turns out that Active Directory would return the CN name with the attributes in lower case format and Portal would return the user's attributes in upper case (i.e. CN,DC, etc). They did not match so the Sametime applet would not initialize. The trick was to use the distinguishedName as the attribute that defines the internal ID of the Sametime user. Once that was done the products worked great.
John
Technorati: Sametime Websphere Portal
With Sametime, we setup Lotus Domino to use Directory Assistance to authenticate users via portal using SSO from either ldap. Basically DA searches through all the defined ldaps in the DA configuration. This worked out great once we had the search filters set for the attribute differences between TDS and ADS.
One of the issues we ran into was that though an Active Directory user passed the LTPA token and was found in the proper directory, presence awareness would not work for the Sametime portlets. It turns out that Active Directory would return the CN name with the attributes in lower case format and Portal would return the user's attributes in upper case (i.e. CN,DC, etc). They did not match so the Sametime applet would not initialize. The trick was to use the distinguishedName as the attribute that defines the internal ID of the Sametime user. Once that was done the products worked great.
John
Technorati: Sametime Websphere Portal
This page has been accessed 338 times.
?OpenAgent&9FB37506F5290A8D852572A7004C634B)
Comments :
1. Kevin Gross03/14/2008 04:03:45 PM
Homepage: http://cloudshadow.net
Can you share your search filters for the TDS LDAP?
2. John Mackey03/25/2008 09:20:26 AM
Homepage: http://www.jmackey.net
Hi Kevin,
I emailed you some files on the filter.
John
