Directory Services 7.4.2

Install DS as an IDM repository

When IDM uses multiple DS replicas, configure IDM for failover.

  1. Before proceeding, install the server files.
    For details, refer to Unpack files.

  2. Run the setup command with the --profile idm-repo option:

    $ /path/to/opendj/setup \
     --deploymentId $DEPLOYMENT_ID \
     --deploymentIdPassword password \
     --rootUserDN uid=admin \
     --rootUserPassword str0ngAdm1nPa55word \
     --hostname localhost \
     --adminConnectorPort 34444 \
     --ldapPort 31389 \
     --enableStartTls \
     --profile idm-repo \
     --set idm-repo/domain:forgerock.com \
     --acceptLicense
    • The deployment ID for installing the server is stored in the environment variable DEPLOYMENT_ID. Install all servers in the same deployment with the same deployment ID and deployment ID password. For details, read Deployment IDs.

    • The administrative account to use in IDM when connecting to DS has:

      • Bind DN: The DN set with the --rootUserDN option.

      • Password: The password set with the --rootUserPassword option.

    • The base DN for IDM data is dc=openidm,dc=forgerock,dc=com.

    • IDM requires change number indexing with the default settings.

    For the full list of profiles and parameters, refer to Default setup profiles.

  3. Finish configuring the server before you start it.

    For a list of optional steps at this stage, refer to Install DS for custom cases.

  4. If all access to DS goes through IDM, IDM manages password policy.

    In this case, relax the default password policy settings:

    $ dsconfig \
     set-password-policy-prop \
     --policy-name "Default Password Policy" \
     --reset password-validator \
     --offline \
     --no-prompt
    
    $ dsconfig \
     set-password-policy-prop \
     --policy-name "Root Password Policy" \
     --reset password-validator \
     --offline \
     --no-prompt
  5. Start the server:

    $ /path/to/opendj/bin/start-ds
Copyright © 2010-2024 ForgeRock, all rights reserved.