Administration Guide

Enable LDAP Support After Installation is Complete

To enable LDAP support at some point following the completion of the installation process, use the following procedure on each machine:

• Install the LDAP support binary files. Run the setup program and select the LDAP Directory Exploitation support from Custom install. The setup program installs the binary files and sets the DB2 profile registry variable DB2_ENABLE_LDAP to "YES".

  Note:

  For Windows 95/98/NT and UNIX platforms, you must explicitly enable LDAP by setting the DB2_ENABLE_LDAP registry variable to "YES" using the db2set command.

• (On UNIX platforms only) Declare the LDAP server's TCP/IP host name and (optional) port number using the following command:

     db2set DB2LDAPHOST=<base_domain_name>[:port_number]
  

  where base_domain_name is the LDAP server's TCP/IP hostname, and [:port] is the port number. If a port number is not specified, DB2 will use the default LDAP port (389).

  DB2 objects are located in the LDAP base distinguished name (baseDN). If you are using IBM SecureWay LDAP directory server Version 3.1, you do not have to configure the base distinguished name since DB2 can dynamically obtain this information from the server. However, if you are using IBM eNetwork Directory Server Version 2.1, you must configure the LDAP base distinguished name on each machine by using the DB2SET command:

     db2set DB2LDAP_BASEDN=<baseDN>
  

  where baseDB is the name of the LDAP suffix that is defined at the LDAP server. This LDAP suffix is used to contain DB2 objects.

• Register the current instance of the DB2 server in LDAP by using the REGISTER LDAP AS command. For example:

   db2 register ldap as <node-name> protocol tcpip
  

• If you have databases you would like to register in LDAP, run the CATALOG LDAP DATABASE command. For example:

     db2 catalog ldap database <dbname> as <alias_dbname>
  

• The LDAP user's distinguished name (DN) and password. These are required only if you plan to use LDAP to store DB2 user-specific information.