IBM Tivoli Identity Manager. Lotus Notes Agent SA

Transcription

1 IBM Tivoli Identity Manager Lotus Notes Agent SA

2

3 IBM Tivoli Identity Manager Lotus Notes Agent SA

4 !, 51 C. ( ), Copyright International Business Machines Corporation All rights reserved.

5 v v v Tivoli Identity Manager.. v v vi vi vi vii : : : : : : : : : : : : : : SSL SSL Tivoli Identity Manager request.pem PKCS CA CA CA A Lotus Notes Agent B Copyright IBM Corp iii

6 C iv IBM Tivoli Identity Manager: Lotus Notes Agent

7 Tivoli Identity Manager Lotus Notes Agent(Lotus Notes Agent) Lotus Notes Domino Server IBM Tivoli Identity Manager Server. Tivoli Identity Manager Lotus Notes Domino Server. Lotus Notes Agent..... Tivoli Identity Manager.. Tivoli Identity Manager Tivoli Identity Manager. v Tivoli Identity Manager Tivoli Identity Manager. v Tivoli Identity Manager Policy and Organization Administration Guide Tivoli Identity Manager. v Tivoli Identity Manager Server Configuration Guide Tivoli Identity Manager. Tivoli Identity Manager. v Tivoli Software Library,,, Tivoli. Tivoli Software Library. Copyright IBM Corp v

8 v Tivoli Software Glossary Tivoli. Tivoli Software Glossary Tivoli Software Library Glossary. IBM Tivoli Software Library PDF(Portable Document Format) HTML(Hypertext Markup Language). Product manuals. Tivoli Software Information Center.,,,. : PDF Adobe Acrobat ( ).. v HTML PDF. v. IBM Tivoli IBM Tivoli Software Support. IBM Software Support Guide. vi IBM Tivoli Identity Manager: Lotus Notes Agent

9 v v v,.., ( )... v v v v v v vii

10 viii IBM Tivoli Identity Manager: Lotus Notes Agent

11 1 Lotus Notes Agent..,,. v. v Lotus Notes Agent. v Lotus Notes Agent Tivoli Identity Manager Server. v Tivoli Identity Manager Server. v Tivoli Identity Manager Server. Lotus Notes Agent Lotus Notes Agent A B C... Tivoli Identity Manager Server. Tivoli Identity Manager Server Tivoli Identity Manager Server. Tivoli Identity Manager Server, Tivoli Identity Manager Server Lotus Notes Domino Server. agentcfg. agentcfg,. CertTool. CertTool,,.... Copyright IBM Corp

12 2 IBM Tivoli Identity Manager: Lotus Notes Agent

13 2 Lotus Notes Agent... : Lotus Notes Agent Domino. Lotus Notes Agent,. Lotus Notes Agent x86, 256MB 300MB. 6 Windows NT Windows 2000 Server. Lotus Notes Client. v v Windows NT 4.0 Lotus Notes Client R5 Lotus Notes Domino Server R5 : Lotus Notes Client R5, Lotus Notes Agent Lotus Notes Server 4.6. TCP/IP Tivoli Identity Manager Server. Windows NT. Lotus Notes Agent. IBM Tivoli Identity Manager Application Server Lotus Notes Domino Server.. Lotus Notes Client, Lotus Notes Domino Server. Copyright IBM Corp

14 1. () Domino Server. Domino Server., Notes\Data\cert.id. Lotus Notes Lotus Notes Server. Lotus Notes. Lotus Notes Agent Microsoft Exchange Agent. Lotus Notes Agent... Lotus Notes Agent., Lotus Notes Agent Windows,. 1 : Tivoli Identity Manager Lotus Notes Agent IBM. IBM. Lotus Notes Agent. Lotus Notes Agent C:\Tivoli\Agents\NotesAgent. 5 1 :. v v ID (Lotus Notes Client user.id ) v Lotus Notes Domino Server 2 : Lotus Notes Agent. 8 2 :. 4 IBM Tivoli Identity Manager: Lotus Notes Agent

15 3 : DAML Tivoli Identity Manager Server. 8 3 :. 4 :. Tivoli Identity Manager Server DAML. 8 4 :. 5 : Tivoli Identity Manager Server. 9 5 :. 6 : Lotus Notes Agent :. 7 : Tivoli Identity Manager Server :. 1 : Lotus Notes Agent.,. Tivoli Identity Manager Lotus Notes Agent IBM. IBM. : 1. Lotus Notes Agent,. 2. Lotus Notes Client, Lotus Notes Agent Lotus Notes Client.. 1. IBM Lotus Notes Agent zip. 2. Lotus Notes Agent zip. 2 5

16 3.... Setup.exe. : C:\Temp\Setup.exe , IBM Tivoli Identity Manager: Lotus Notes Agent

17 Locate Lotus Notes INI. 11. notes.ini Domino Server. 13. Lotus Notes (Domino). Domino Server.. CN=<Server Name>/O=<Organisation Name> : CN=Condor/O=IBM User.ID User.ID. ID. ( : D:\Lotus\Notes\Data\user.id). Lotus Notes User.ID ( : Certificate;$UpdatedBy;$Revisions),

18 ., Lotus Notes Agent : Lotus Notes Agent Lotus Notes Domino Server.. Lotus Notes Agent Lotus Notes Agent. 3 : Lotus Notes Agent DAML Tivoli Identity Manager Server.. DAML. 16. : DAML : DAML. CA(Certificate Authority) CA. Lotus Notes Agent Tivoli Identity Manager Server CA. Tivoli Identity Manager Server Configuration Guide. 8 IBM Tivoli Identity Manager: Lotus Notes Agent

19 : DAML.. 5 : Tivoli Identity Manager Server. Tivoli Identity Manager Server :,. Tivoli Identity Manager.. Tivoli Identity Manager Server. 6 : DAML.. :. Tivoli Identity Manager Server. Tivoli Identity Manager Server DAML. 3. SRV_NODENAME. 4. Tivoli Identity Manager Server IP Enter.. 5. SRV_PORTNUMBER. 6. Tivoli Identity Manager Server Enter.. 7. SRV_USERNAME. 8. Tivoli Identity Manager Server Enter. 2 9

20 . 9. SRV_PASSWORD. 10. Tivoli Identity Manager Server Enter.. 7 : Tivoli Identity Manager Server. Tivoli Identity Manager Policy and Organization Administration Guide. 10 IBM Tivoli Identity Manager: Lotus Notes Agent

21 3 Tivoli Identity Manager Server. Lotus Notes Agent Tivoli Identity Manager Server. Tivoli Identity Manager Server Lotus Notes Agent... : 1. Tivoli Identity Manager Server,.. 2., Tivoli Identity Manager Server. 3. WebLogic Application Server.,. 4. WebSphere Application Server, Network Deployment Manager.. Tivoli Identity Manager Server Lotus Notes Agent,. Lotus Notes Agent. 2. Tivoli Identity Manager Server. Lotus Notes Agent Tivoli Identity Manager Server root. Copyright IBM Corp

22 1. root Tivoli Identity Manager Server. 2. IBM Lotus Notes Agent zip zip. : IBM. 3.. v UNIX Tivoli Identity Manager Server :. #cd/tmp, tmp. Lotus Notes Agent. #./notesprofile_<operating system>.bin, <operating system> aix, solaris hpxxxx.. v Windows Tivoli Identity Manager Server :..., notesprofile.exe.,. C:\temp\notesprofile.exe. 4.. Tivoli Identity Manager. 5. Tivoli Identity Manager Server..... Tivoli Identity Manager Server. : Tivoli Identity Manager Server, ITIM. 12 IBM Tivoli Identity Manager: Lotus Notes Agent

23 , remote_resources.,. Windows: C:\itim\data\remote_resources\nt40profile\ UNIX: /itim/data/remote_resources/nt40profile/ 3 13

24 14 IBM Tivoli Identity Manager: Lotus Notes Agent

25 4 agentcfg Lotus Notes Agent.. Lotus Notes Agent agentcfg. 1.,. DOS. 2. bin. Lotus Notes Agent,. cd \Tivoli\Agents\NotesAgent\bin 3. agentcfg -agent NotesAgent. Enter configuration key for Agent NotesAgent : agentcfg. -hostname Lotus Notes Agent NotesAgent Agent Main Configuration Menu A. Configuration Settings. B. Protocol Configuration. C. Event Notification D. Change Configuration Key. E. Activity Logging. F. Registry Settings. G. Advanced Settings. H. Statistics X. Done Select menu option:. Copyright IBM Corp

26 v A, v B, v C, 20 v D, 24 v E, 24 v F, 26 v G, 28 v H, 30 Lotus Notes Agent. 1. A(Configuration Settings). Lotus Notes Agent. Lotus Notes Agent. Configuration Settings Name : NotesAgent Version : ADK Version : 4.27 ERM Version : 4.27 enrole Version : 4.0 License : NONE Asynchronous ADD Requests : TRUE (Max.Threads:3) Asynchronous MOD Requests : TRUE (Max.Threads:3) Asynchronous DEL Requests : TRUE (Max.Threads:3) Asynchronous SEA Requests : TRUE (Max.Threads:3) Available Protocols : DAML, FTP Configured Protocols : DAML Logging Enabled : TRUE Logging Directory : C:\Tivoli\Agents\NotesAgent\Log Log File Name : NotesAgent.log Max. log files : 3 Max.log file size (Mbytes) : 1 Debug Logging Enabled : TRUE Detail Logging Enabled : FALSE Press any key to continue 2.. DAML FTP Tivoli Identity Manager Server. DAML. DAML. FTP. 16 IBM Tivoli Identity Manager: Lotus Notes Agent

27 Lotus Notes Agent.. 1. B(Protocol Configuration)... DAML Lotus Notes Agent. Agent Protocol Configuration Menu Available Protocols: DAML, FTP Configured Protocols: DAML A. Add Protocol. B. Remove Protocol. C. Configure Protocol. X. Done Select menu option 2.. v A, v B, v C, 18 X. 1. A(Add Protocol).., B(Remove Protocol)..,

28 1. C(Configure Protocol) :. DAML. DAML Protocol Properties A. PORTNUMBER ;Protocol Server port number. B. USERNAME ****** ;Authorized user name. C. PASSWORD ****** ;Authorized user password. D. SRV_NODENAME ;Event Notif. Server name. E. SRV_PORTNUMBER 443 ;Event Notif. Server port number. F. SRV_USERNAME ****** ;Event Notif. user name. G. SRV_PASSWORD ****** ;Event Notif. Server password. H. VALIDATE_CLIENT_CE FALSE ;Require client certificate. X. Done Select menu option: 3.. DAML. 3. DAML A(PORTNUMBER). Modify Property PORTNUMBER :. : 7004 B(USERNAME) Tivoli Identity Manager Server.. Modify Property USERNAME :. : admin C(PASSWORD) Tivoli Identity Manager Server.. Modify Property PASSWORD :. : ******* Tivoli Identity Manager Server. 18 IBM Tivoli Identity Manager: Lotus Notes Agent

29 3. DAML () D(SRV_NODENAME). Modify Property SRV_NODENAME :. : E(SRV_PORTNUMBER) Tivoli Identity Manager Server IP DNS.. Modify Property SRV_PORTNUMBER : Tivoli Identity Manager Server. : 7004 F(SRV_USERNAME) Tivoli Identity Manager Server.. Modify Property SRV_USERNAME :. : admin G(SRV_PASSWORD) Tivoli Identity Manager Server.. Modify Property SRV_PASSWORD :. : ***** H(VALIDATE_CLIENT_CE) Tivoli Identity Manager Server.. Modify Property VALIDATE_CLIENT_CE : Tivoli Identity Manager Server. Tivoli Identity Manager Server. : CertTool D - H. 4. Enter.. : Enter. 4 19

30 Tivoli Identity Manager Server. Tivoli Identity Manager Server Tivoli Identity Manager Server. :.. 1. C(Event Notification).. Event Notification Menu * Reconciliation interval : 1 day(s) * Next Reconciliation time : 23 hour(s) 56 min(s). 23 sec(s). * Configured Contexts : Jupiter, dd309 A. Enabled B. Time interval between reconciliations. C. Set Processing cache size. (currently: 50 Mbytes) D. Start event notification now. E. Set attributes to be reconciled. F. Reconciliation process priority. (current: 1) G. Add Event Notification Context. H. Modify Event Notification Context. I. Remove Event Notification Context. J. List Event Notification Contexts. X. Done Select menu option: 2.. : A. 4. A, Tivoli Identity Manager Server.. v,. B(Time interval between reconciliations) v,.. Enter new interval ([ww:dd:hh:mm:ss]) [00:01:00:00:00]:. Enter. 20 IBM Tivoli Identity Manager: Lotus Notes Agent

31 4. () C(Set processing cache. size) Enter new cache size[5]:. Enter. D(Start event notification. now) E(Set attributes to be reconciled) F(Reconciliation process priority) Enter new thread priority [1-10]:. G(Add Event Notification Context) H(Modify Event Notification Context) I(Remove Event Notification Context) Enter.. Context name : Enter Delete context context1? [no]: J(List Event Notification Contexts) Enter, Enter.. Context Name : Context1 Target DN : erservicename=context1,o=ibm, ou=ibm,dc=com --- Attributes for search request --- {search attributes listed} B, C, E F Enter.. :. 4 21

32 . ( : ). 1. E(Set attributes to be reconciled).. Event Notification Entry Types A. USER B. GROUP X. Done Select menu option: 2. A B.. :. Event Notification Attribute Listing (a) ** (b) ** (c) ** (d) ** (e) ** (f) ** (g) ** (h) ** (i) ** (j) ** (k) ** (l) ** (m) ** (o) ** (q) ** (r) ** (s) ** (t) ** (p)rev page 1 of 3 (n)ext X. Done Select menu option: H(Modify Event Notification Context).. Modify Context Menu A. Context1 B. Context2 C. Context3 X. Done Select menu option: IBM Tivoli Identity Manager: Lotus Notes Agent

33 . A. Set attributes for search B. Target DN: C. Delete Baseline Database X. Done Select menu option: A. B DN. C A(Set attributes for search).. Reconciliation Attributes Passed to Agent for Context: Context A. Add new attribute B. Modify attribute value C. Remove attribute X. Done Select menu option: 2... DN 1. B(Target DN).. Enter Target DN: 2. DN Enter. DN. erservicename=nameofservice,o=organizationname,ou=tenantname,dc=com DN. erservicename o 4 23

34 ou (tenant).,. dc=com DN.. C(Delete Baseline Database).. Lotus Notes Agent.. 1. D(Change Configuration Key). 2. Enter. Enter new configuration key for Agent NotesAgent : Enter.. :.. Configuration key successfully changed.. Lotus Notes Agent., Tivoli Identity Manager NotesAgent.log. 1. E(Activity Logging). 24 IBM Tivoli Identity Manager: Lotus Notes Agent

35 .. Agent Activity Logging Menu A. Activity Logging (Enabled). B. Logging Directory (current: C:\Tivoli\Agents\NotesAgent\Log). C. Activity Log File Name (current: NotesAgent.log). D. Activity Logging Max. File Size ( 1 mbytes) E. Activity Logging Max. Files ( 3) F. Debug Logging (Enabled). G. Detail Logging (Disabled). H. Base Logging (Disabled). X. Done Select menu option: 2.. : A(Activity Logging). 5. A(Activity Logging), Tivoli Identity Manager.. v,. B(Logging Directory) v,.. : C:\Log,. Enter. C(Activity Log File Name).,. D(Activity Logging Max File Size) Enter. ( : 10).. MB.. E(Activity Logging Max Files) Enter. ( : 100). : 5.. Enter. 4 25

36 5. () F(Debug Logging),.. v,. G(Detail Logging) v,.,. :.,.. v,. H(Base Logging) v,., ADK.. v,. v,. 3. B, C, D E Enter.. :. Lotus Notes Agent. 1. F(Registry Settings).. NotesAgent Agent Registry Menu A. Modify Non-encrypted registry settings. B. Modify encrypted registry settings. C. Multi-instance settings. X. Done Select menu option: IBM Tivoli Identity Manager: Lotus Notes Agent

37 1. A(Modifying Non-encrypted Registry Settings).. Agent Registry Items Attributes not RECONCILED Certificate;$UpdatedBy;$Revisions 02. Attributes RECONCILED 03. Domino Server DN=teak/O=forest 04. ENROLE_VERSION EXTMGR_ADDINS NotesAuth 06. Workstation ID File Location C:\Tivoli\Agents\NotesAgent\user.id Page1of1 A. Add new attribute B. Modify attribute value C. Remove attribute X. Done Select menu option: 2.. v A) Add new attribute v B) Modify attribute value v C) Remove attribute v X) Done 3. Enter. 4. A B Enter B(Modifying Encrypted Registry Settings).. Encrypted Registry Items Workstation Password ***** Page 1 of 1 A. Add new attribute B. Modify attribute value. C. Remove attribute. X. Done Select menu option: 4 27

38 2.. A) Add new attribute B) Modify attribute value C) Remove attribute X) Done 3. Enter. 4. A B Enter... :. 1. C(Multi-instance Settings). Lotus Notes Agent. NotesAgent Agent Instance Class Menu A. Select instance class. X. Done Enter. Lotus Notes Agent. Lotus Notes Agent. v v v v Lotus Notes Agent. 1. G(Advanced Settings) IBM Tivoli Identity Manager: Lotus Notes Agent

39 NotesAgent Advanced Settings Menu A. Single Thread Agent (current:true) B. ADD max. thread count. (current:3) C. MODIFY max. thread count. (current:3) D. DELETE max. thread count. (current:3) E. SEARCH max. thread count. (current:3) F. Allow User EXEC procedures (current:false) G. Archive Request Packets (current:false) H. UTF8 Conversion support (current:true) I. Pass search filter to agent (current:false) J. Thread Priority Level (1-10) (current:4) X. Done Select menu option: 2.. : UTF8 Conversion support FALSE. 6. DAML A(Single Thread Agent) B(ADD max. thread count) C(MODIFY max. thread count) D(DELETE max. thread count) E(SEARCH max. thread count) F(Allow User EXEC procedures) G(Archive Request Packets) H(UTF8 Conversion support) I(Pass search filter to agent)..... pre- post-exec.... FTP.... J(Thread Priority Level (1-10)) Enter

40 Lotus Notes Agent. 1. H(Statistics).. NotesAgent Agent Request Statistics Date Add Mod Del Ssp Res Rec /15/ X. Done 2. X. agentcfg. 1. Lotus Notes Agent bin. v X. v agentcfg -help.. -version ; -hostname < value> ; -findall ; -list ; -agent <value> ; -tail ; -schema ; -portnumber <value>; -netsearch <value> ; -confidencetest ; -setup ; -help ; Show version Target nodename to connect to (Default:Local host IP address) Find all agents on target node List available agents on target node Name of agent Display agent s activity log Display agent s attribute schema Specified agent s TCP/IP port number Lookup agents hosted on specified subnet Confidence test Confidence test setup Display this help screen 30 IBM Tivoli Identity Manager: Lotus Notes Agent

41 . 7. -version -hostname <value> agentcfg. -hostname. v -findall v v v -list -tail -agent -findall -list -agent <value> -tail -schema -portnumber <value> -netsearch <value> -confidencetest -setup -help IP.. -list. -hostname.. Lotus Notes Agent. -hostname... -hostname. -tail. -agent. -hostname. -agent. TCP/IP -agent. -agent.,,,. Tivoli Identity Manager Server.. agentcfg. 3. agentcfg. 4 31

42 agentcfg. 8. -argument -argument <value> -argument <value> -argument -argument -argument <value> -argument <value> -argument <value> : agentcfg -list IP. Tivoli Identity Manager Server Agent(s) installed on node NotesAgent (44970) : agentcfg -agent NotesAgent Lotus Notes Agent agentcfg. : agentcfg -list -hostname IP Lotus Notes Agent Agent(s) installed on node NotesAgent (44970) : agentcfg -agent NotesAgent -hostname IP agentcfg. Lotus Notes Agent. 32 IBM Tivoli Identity Manager: Lotus Notes Agent

43 5 (CertTool) Tivoli Identity Manager (digital certificate). Tivoli Identity Manager Server SSL(Secure Sockets Layer)., CA(Certificate Authority) CA.. Tivoli Identity Manager. SSL Tivoli Identity Manager Server IBM Tivoli Identity Manager System Configuration Guide Managing Digital Certificates. :,. SSL Tivoli Identity Manager. Tivoli Identity Manager SSL(Secure Sockets Layer). SSL ID. SSL. ( ) ID.. SSL. v SSL. v SSL ID. v ID. Copyright IBM Corp

44 v CA(Certificate Authority) ( ). CA. v, CA. : SSL Tivoli Identity Manager. - SSL WebSphere WebLogic Application Server Tivoli Identity Manager. Tivoli Identity Manager Server (-). : v Tivoli Identity Manager Server SSL. v RSA SSL-C Open SSL. Tivoli Identity Manager, Tivoli Identity Manager Server CA. : ITIM IBM Tivoli Identity Manager Server SSL 34 IBM Tivoli Identity Manager: Lotus Notes Agent

45 Tivoli Identity Manager Tivoli Identity Manager Tivoli Identity Manager Server. Tivoli Identity Manager Server CA. CA. Lotus Notes Agent CertTool. 1.,. Microsoft Windows DOS. 2. bin. Lotus Notes Agent,. cd \Tivoli\Agents\NotesAgent\bin 3. CertTool -agent NotesAgent.. Main menu - Configuring agent: NotesAgent A. Generate private key and certificate request B. Install certificate from file C. Install certificate and key from PKCS12 file D. View current installed certificate E. List CA certificates F. Install a CA certificate G. Delete a CA certificate H. List registered certificates I. Register certificate J. Unregister a certificate X. Quit Choice: : CSR(Certificate Signing Request).. A CA(Certificate Authority) CSR(Certificate Signing Request). 5 35

46 B C D. CA A CSR. PKCS12. A B, PKCS12.. SSL : ( ). : SSL Tivoli Identity Manager. CA. CA Tivoli Identity Manager Tivoli Identity Manager Server. E F G CA. CA Tivoli Identity Manager Server. CA CA. CA X.509, 2 PEM. CA. SSL : ( ). : SSL Tivoli Identity Manager. Tivoli Identity Manager Server. SSL Tivoli Identity Manager Server. CA Tivoli Identity Manager Server, Tivoli Identity Manager Server. H. 36 IBM Tivoli Identity Manager: Lotus Notes Agent

47 I J. Base 64 X.509. ().. v A, v B, 39 v C, 39 PKCS12 v D, 39 v E, 40 CA v F, 40 CA v G, 40 CA v H, 41 v I, 41 v J, 41 X. Lotus Notes Agent. 1. A(Generate a private key and certificate request). Enter values for certificate request (press enter to skip value) Enter. Organization: 3. Enter. Organizational Unit: 4. Enter. Agent Name: 5. Enter Enter. Country: 7. ( ) Enter. 5 37

48 State: : CA(Certificate Authority) Enter. Locality: 9. Y N Enter. Accept these values (y/n)?. 10. PEM Enter. Enter name of file to store PEM cert request (Enter to cancel): 11. Enter.. CA.. Enter values for certificate request (press enter to skip value) Organization: ibm Organizational Unit: engineering Agent Name: ntagent admin@ibm.com Country: US State: California Locality: Irvine Accept these values (y/n)? y Generating key pair and certificate request... Enter name of file to store PEM cert request (Enter to cancel) : request.pem Certificate request written to request.pem. Press Enter to continue. request.pem -----BEGIN CERTIFICATE REQUEST----- MIIB1jCCAT8CAQAwgZUxEjAQBgNVBAoTCWFjY2VzczM2MDEUMBIGA1UECxMLZW5n aw5lzxjpbmcxedaobgnvbamtb250ywdlbnqxjdaibgkqhkig9w0bcqewfw50ywdl bnraywnjzxnzmzywlmnvbtelmakga1uebhmcvvmxezarbgnvbagtcknhbglmb3ju awexdzanbgnvbactbklydmluztcbnzanbgkqhkig9w0baqefaaobjqawgykcgyea mr6acpnwf6hllc72bmukawaxcebtxcocnnth9uc8vumhpbimagjuc4s91hprilg7 UtlbOfy6X3R3kbeR8apRR9uLYrPIvQ1b4NK0whsytij6syCySaFQIB6V7RPBatFr 6XQ9hpsARdkGytZmGTgGTJ1hSS/jA6mbxpgmttz9HPECAwEAAaAAMA0GCSqGSIb3 DQEBAgUAA4GBADxA1cDkvXhgZntHkwT9tCTqUNV9sim8N/U15HgMRh177jVaHJqb N1Er46vQSsOOOk4z2i/XwOmFkNNTXRVl9TLZZ/D+9mGZcDobcO+lbAKlePwyufxK Xqdpu3d433H7xfJJSNYLYBFkrQJesITqKft0Q45gIjywIrbctVUCepL END CERTIFICATE REQUEST IBM Tivoli Identity Manager: Lotus Notes Agent

49 . CA(Certificate Authority). :, ( ) bin. 1. B(Install certificate from file).. Enter name of certificate file: 2. Enter.. PKCS12 PKCS12(.pfx).. : bin. : C:\Tivoli\Agents\<agentname>\bin 1. C(Install certificate and key from PKCS12 file). 2. PKCS12 Enter. Enter name of PKCS12 file: : DamlSrvr.pfx 3. Enter. Enter password:. D(View currently installed certificates). D(View currently installed certificates). 5 39

50 .. The following certificate is currently installed. Subject: c=us,st=california,l=irvine,o=daml,cn=daml Server CA CA. E(List CA certificates). CA.. Subject: o=ibm,ou=samplecacert,cn=testca Valid To: Wed Jul 26 23:59: CA CA. 1. F(Install a CA certificate).. Enter name of certificate file: 2. Enter.. e=admin@ibm.com,c=us,st=california,l=irvine,o=ibm,ou=engineering,cn=eng Install the CA? (Y/N) 3. Y Enter. CA CACerts.pem. CA CA. 1. G(Delete a CA certificate). CA. 0 - e=admin@ibm.com,c=us,st=california,l=irvine,o=ibm,ou=engineering,cn=eng 1 - e=support@ibm.com,c=us,st=california,l=irvine,o=ibm,ou=support,cn=support Enter number of CA certificate to remove: 2. CA Enter. CA CACerts.pem. 40 IBM Tivoli Identity Manager: Lotus Notes Agent

51 .. H(List registered certificates) e=admin@ibm.com,c=us,st=california,l=irvine,o=ibm,ou=engineering,cn=eng 1 - e=support@ibm.com,c=us,st=california,l=irvine,o=ibm,ou=support,cn=support. 1. I(Register certificate).. Enter name of certificate file: 2. Enter.. e=admin@ibm.com,c=us,st=california,l=irvine,o=ibm,ou=engineering,cn=eng Register this CA? (Y/N) 3. Y Enter J(Unregister a certificate) e=admin@ibm.com,c=us,st=california,l=irvine,o=ibm,ou=engineering,cn=eng 1 - e=support@ibm.com,c=us,st=california,l=irvine,o=ibm,ou=support,cn=support 2. Enter.. 3. Y Enter

52 42 IBM Tivoli Identity Manager: Lotus Notes Agent

53 A. Lotus Notes Agent Tivoli Identity Manager. Tivoli Identity Manager Tivoli Identity Manager Server. 9. Tivoli Identity Manager Server Lotus Notes Agent. Tivoli Identity Manager Server Lotus Notes Agent. Lotus Notes Agent.. Directory Server $Conflict ernotesreplicationconflict. $FILE ernotesfile Notes.W1 AddCertPasswd ernotespasswdaddcert AddCertPath ernotesaddcertpath Administrator ernotesadministrator AltFullName ernotesaltfullname AltFullNameLanguage ernotesaltlanguagefullname AltFullNameSort ernotesaltsortfullname Assistant ernotesassistant () AvailableForDirSync ernotesavailablefordirsync,. CalendarDomain ernotescalendardomain () ccmaillocation ernotesccmaillocation () CcMailUserName ernotesccmailusername () CellPhoneNumber ernotescellphonenumber () CertExpiryDate ernotescertexpirydate CertIDfileName ernotescertidfilename ID Copyright IBM Corp

54 9. () Directory Server CheckPassword ernotescheckpassword. Children ernoteschildren () City ernotescity () ClientType ernotesclienttype Notes. () Comment ernotescomment () CompanyName ernotescompanyname () Country ernotescountry () CreateNorthAmericanID ernotescreatenorthamericanid ID. Delet DB ernotesdelet db. Department ernotesdepartment () DocumentAccess ernotesdocumentaccess () EmployeeID ernotesemployeeid ID EncryptIncomingMail ernotesencryptincomingmail,. FirstName ernotesfirstname () Form ernotesform Lotus Notes FullName ernotesfullname () HomeFAXPhoneNumber ernoteshomefaxphonenumber () HomePostalAddress ernoteshomepostaladdress InternetAddress ernotesinternetaddress JobTitle ernotesjobtitle () LastName ernoteslastname () Location ernoteslocation () MailAddress ernotesmailaddress () MailDomain ernotesmaildomain () MailFile ernotesmailfile MailServer ernotesmailserver MailSystem ernotesmailsystem () () 44 IBM Tivoli Identity Manager: Lotus Notes Agent

55 9. () Directory Server MailTemplateName ernotesmailtemplatename MailQuotaSize ernotesmailquotasize Manager ernotesmanager () MemberOfGroups ernotesmemberofgroups MessageStorage ernotesmessagestorage MiddleInitial ernotesmiddleinitial NetUserName ernotesnetusername America Online Prodigy () () NewCertExpiryDate ernotesnewcertexpirydate NewCertPasswd ernotespasswdnewcert NewCertPath ernotesnewcertpath OfficeCity ernotesofficecity / OfficeCountry ernotesofficecountry OfficeFAXPhoneNumber ernotesofficefaxphonenumber () OfficeNumber ernotesofficenumber () OfficePhoneNumber ernotesofficephonenumber () OfficeStreetAddress ernotesofficestreetaddress OfficeZip ernotesofficezip OrigCertifier ernotesorigcertifier OrigCertPasswd ernotesorigcertpasswd Owner ernotesowner () Password ernotespassword HTTP(Hyper Text Transport Protocol) PasswordChangeDate ernoteschangedatepassword PasswordChangeInterval ernoteschangeintervalpassword ( ) PasswordDigest ernotespassworddigest PasswordGracePeriod ernotespasswordgraceperiod ( ) () () (Teletex) PersonalID ernotespersonalid ID PhoneNumber ernotesphonenumber () PhoneNumber_6 ernotespagernumber PostalAddress ernotespostaladdress A. 45

56 9. () Directory Server Profiles ernotesprofiles.. () ProposedAltCommon Name ernotesaltcommonnameproposed (,, ) PublicKey ernotespublickey SametimeServer ernotessametimeserver Sametime SaveIDInAddressBook ernotessaveidinaddressbook Lotus Notes ID.. ShortName ernotesshortname. ID () () Spouse ernotesspouse () SSOName erssoname State ernotesstate () Street ernotesstreet StreetAddress ernotesstreetaddress () Suffix ernotessuffix Title ernotestitle Type ernotestype () UserIDfileName ernotesuseridfilename ID () UserIDInCertLog ernotesuseridincertlog CertLog ID., CertLog ID. UserName eruid UserPassword erpassword UserStatus eraccountstatus /.,. WebSite ernoteswebsite () (Teletex) 46 IBM Tivoli Identity Manager: Lotus Notes Agent

57 9. () Directory Server x400address ernotesx400address x400 O/R (/C, /A, /P ) () Zip ernoteszip () Lotus Notes Agent Lotus Notes Agent. Lotus Notes Agent UserID LastName AddCertPath Password. 11. UserID LastName AddCertPath Password Active Directory. 12. UserID A. 47

58 UserID UserID Password Tivoli Identity Manager.. (*) IBM Tivoli Identity Manager: Lotus Notes Agent

59 B..,.... setupconsole.exe. setupconsole.exe Java setup.exe... <agent or profile install>.exe -is:javaconsole -console GUI. Telnet.. -is:javaconsole -console GUI. <agent or profile install>.exe -options-record <filename>. <agent or profile install>.exe -options-template <filename>.. Copyright IBM Corp

60 <agent or profile install>.exe -options-silent <filename>. Lotus Notes Agent.., Lotus Notes Agent. Lotus Notes Agent. 1. Lotus Notes Agent. 2. Windows uninstaller.exe Lotus Notes Agent. 4.. Lotus Notes Agent. 5.. : Lotus Notes Agent,. Lotus Notes Agent. 50 IBM Tivoli Identity Manager: Lotus Notes Agent

61 C.. IBM,. IBM. IBM, IBM,. IBM,,. IBM,. IBM ,.. : (DBCS) IBM. IBM World Trade Asia Corporation Licensing 2-31 Roppongi 3-chome, Minato-ku Tokyo , Japan. IBM, (, ).,..,. IBM / /. Copyright IBM Corp

62 IBM,. IBM. IBM. (1) ( ) (2) ,.. (, ). IBM IBM, IBM (IPLA)....,.. IBM,. IBM, IBM,. IBM. IBM Corporation. AIX DB2 IBM 52 IBM Tivoli Identity Manager: Lotus Notes Agent

63 IBM SecureWay Tivoli Tivoli Universal Database WebSphere Lotus IBM Corporation / Lotus Development Corporation. Domino IBM Corporation Lotus Development Corporation. Microsoft, Windows, Windows NT Windows Microsoft Corporation. Java Java Sun Microsystems, Inc.. UNIX Open Group.,. C. 53

64 54 IBM Tivoli Identity Manager: Lotus Notes Agent

65 3 16 agentcfg 15 agentcfg 16 15, agentcfg 24 vii i agentcfg / , agentcfg 25 /, agentcfg 25, agentcfg 26 / / 25 / (), 25 30, agentcfg 24, 25 / 18 vii vi, Lotus Notes Agent , 11 4, 29 vi 3, , Tivoli Identity Manager Server agentcfg / 25 Copyright IBM Corp

66 agentcfg , Lotus Notes Agent agentcfg 3 / () () DN agentcfg 20, CertTool request.pem CertTool CA CertTool 33, 4 48 agentcfg 18 agentcfg 18 agentcfg 17 agentcfg IBM Tivoli Identity Manager: Lotus Notes Agent

67 24 A agentcfg , 30 agentcfg -agent 30 -confidencetest 30 -findall 30 -help 30 -hostname 30 -list 30 -netsearch 30 -portnumber 30 -schema 30 -setup 30 -tail 30 -version 30 -help 30 C CertTool, , 39 CertTool () CA D DAML 18, agentcfg password 18 srv_nodename 19 srv_password 19 srv_portnumber 19 srv_username 19 username 18 validate_client_ce 19 P password agentcfg 18 portnumber S srv_nodename, agentcfg 19 srv_password, agentcfg 19 srv_portnumber, agentcfg 19 srv_username, agentcfg 19 57

68 T Tivoli Identity Manager 35 U username, agentcfg 18 UTF8 29 V validate_client_ce, agentcfg IBM Tivoli Identity Manager: Lotus Notes Agent

69

70 Printed in Denmark by IBM Danmark A/S SA