LDAP suffix
Specify an LDAP suffix for the msys for Setup management directory subtree
in the LDAP suffix entry field. You can:
- Accept the default; this is the LDAP server suffix
- Select the suffix from the associated drop down list
- Type the LDAP server suffix into the entry field
Consult the LDAP administrator on which prefix you should be using.
Notes:
- If you specify the suffix for a nonexistent subtree, msys for Setup will
prompt you to log on as the LDAP administrator to log on to create that
subtree. Only an LDAP administrator can perform this task.
- If you want to set up different subtrees for your enterprise, you
can. However, you must not register any one sysplex to more than one
msys for Setup subtree. If you register the same sysplex to multiple
subtrees you will get unpredictable results.
To create a new management directory subtree:
You can:
- Accept the default suffix
- Extend the default suffix by typing additional specifications into the
entry field
msys for Setup traverses the existing tree until the end of the suffix and
creates a subtree there.
Rules for the suffix:
- The suffix must be equal to or include the TDBM suffix that is specified
in the LDAP server configuration file. This is the default
suffix.
- The suffix can have further specifications for:
- ou
- organization unit
- o
- organization
- l
- locality
- c
- country
Recommendations:
- Use only lower case characters for the attribute values in the suffix
- Create only one msys for Setup subtree, even if you have sysplexes in
different countries.
The c for country, is only a conceptual representation, and is
not meant to be geographical location. If you have defined a subtree at
c=us, and you have a sysplex in c=de, you do not have to create a second
subtree at c=de. You can register the sysplex that is located in c=de
to the msys for Setup subtree at c=us and you can manage its resources from
one msys for Setup workplace.
Related information: