SPD Server user passwords
can be authenticated with LDAP or the
psmgr utility.
An LDAP server that runs on the SPD Server machine performs LDAP authentication.
When you use LDAP authentication, the operating system handles password
maintenance. LDAP authentication has the added benefit of operating-system-level
security and convenience.
When you use an LDAP
server to perform SPD Server user authentication, keep the following
facts in mind:
-
SPD Server users can be authenticated
by an LDAP server or by the
psmgr utility,
but not by both. The type of authentication to be performed is specified
in the server.parm file, which is read when SPD Server is invoked.
-
If you are changing from using
the LDAP server to using the
psmgr utility
for authentication, you must remove all LDAP parameters from the SPD
Server server.parm file. In order for the changes to the server.parm
file to be read, you must restart SPD Server.
-
When you configure SPD Server to
perform user authentication using the LDAP server, you still need
the
psmgr utility. When you use the LDAP
server, a password database record is required for each SPD Server
user. SPD Server uses the
psmgr utility's
password database to perform user access control tasks and other tasks
that are not related to user password authentication.
-
Users that connect to an SPD Server
must have corresponding logon information about the LDAP server. The
LDAP server user ID and the SPD Server user ID formats are the same.
The logon password format is the host-operating-system format. A user
ID must be at least 8 characters in length.
-
You must enter the initial password
in the psmgr table when you are adding a new user. This password is
never used, and simply enables you to add the new user. The user is
not required to use the NEWPASSWD= or CHANGEPASS=YES LIBNAME option
to use the LDAP password.
-
Some LDAP server products might
require users to enter host logon information. In these cases, confirm
with your LDAP server administrator that the host logon information
exists in the LDAP database.
-
If you are using LDAP user authentication,
and you create a user connection that uses the NEWPASSWORD= LIBNAME
option, the user password is not changed. If you want to change a
user password, follow the operating system procedures to change a
user password, and check with your LDAP server administrator to ensure
that the LDAP database records the password changes.