CA EEM Getting Started › Configuring External Directory Server Support › Configure an External Directory with CA EEM

Configure an External Directory with CA EEM

If you are using different external directory stores for authentication and authorization, configure CA EEM as follows:

• Use the iPoz.conf file to configure the external authentication directory with CA EEM
• Use the CA EEM admin GUI to configure the CA EEM Server with the external authorization directory.

  Note: For more information about how to configure references to external directory, see the Online Help.

To configure the CA EEM Server to use an external directory for authentication, configure the following options in the iPoz.conf file located in $IGW_LOC for UNIX and %IGW_LOC% for Windows folder after the installation.

Note: Stop iGateway before modifying the iPoz.conf file and restart it afterwards.

UseExternalAuthDirectory

Specifies whether you want to use a different external directory for Authentication. Type True to use a different external directory. The default is False.

ExternalAuthDirType

Specifies the type of external directory. The following table lists the supported external directories and the corresponding values you must specify for this tag:

ExternalAuthDirUserDn

Specifies the UserDn for the type of external directory specified.

ExternalAuthDirPassword

Specifies the user password in the encrypted format.

Note: Munge the password using the following command and paste it in the ipoz.conf file.

$IGW_LOC/safex -munge <clear text password>

ExternalAuthDirHost

Specifies the host name on which the external directory has been configured.

ExternalAuthDirPort

Specifies the port to which the external directory listens.

ExternalAuthDirUserSearchPreFilter

Specifies the pre-search filter per the external directory. You can search for any object class such as, users.

ExternalAuthDirUserSearchPostFilter

Specifies the post-search filter per the external directory. You can search for any object class such as, users.

ExternalDirCacheFolder

Specifies if the CA EEM Server must cache the external directory folders. If this tag is set to True, CA EEM Server caches the external folders and you can access these folders using the CA EEM admin GUI. If this tag is set to False, CA EEM does not display the external directory folders in the CA EEM admin GUI.

Value: [True|False]

Default: True

ExternalDirEscapeSlash

Specifies if CA EEM must handle the forward slash '/' in the DN returned by external directories. Set this tag to True if CA EEM has to escape the forward slash.

Value: [True|False]

Default: False