12.3 Registering Administrators

Register an administrator user (privileged user) to be specified when installing Resource Orchestrator with the directory service.

Use the following object classes.

Table 12.1 Object Class
Directory Service	Object Class	Attribute Used for the Login User ID
OpenDS	inetOrgPerson	uid or cn
Active Directory	user	sAMAccountName or cn (*)

* Note: Specify these either as the User Search Filter in the Directory Service Settings of ServerView Operations Manager. Specify the same value as the value of the attribute specified as the User Search Filter as the value of the User ID of all the users including the privileged user (an administrator) of Resource Orchestrator.

When using OpenDS, the user ID (uid attribute) must be unique in the directory service.

When using the OpenDS provided with ServerView Operations Manager, a predefined user exists when installing ServerView Operations Manager.
When using the predefined "Administrator"(ServerView Administrator) as an administrator user in Resource Orchestrator, the following procedure is unnecessary.

For details on predefined user information, refer to the following ServerView Operations Manager manual.

"ServerView user management with OpenDS" in "ServerView Suite User Management in ServerView"

An example of how to register a privileged user of Resource Orchestrator in OpenDS is indicated below.

ServerView Operations Manager V5.5 or later
1. Start the "User Management Wizard" of ServerView Operations Manager.
2. Add an administrator user. Allocate the appropriate role of ServerView Operations Manager.
For details on the "User Management Wizard", refer to the following manual.
- "ServerView user management with OpenDS" in "ServerView Suite User Management in ServerView"
Versions earlier than ServerView Operations Manager V5.5
1. Add an administrator user. Allocate the appropriate role of ServerView Operations Manager.
  For details on the "User Management Wizard", refer to the following manual.
  - "ServerView user management with OpenDS" in "ServerView Suite User Management in ServerView"
2. Create an ldif file.
  dn: cn=manager,ou=users,dc=fujitsu,dc=com
  changetype: add
  objectclass: inetOrgPerson
  cn: manager
  sn: manager
  uid: manager
  userPassword: mypassword
3. Use the OpenDS client function to register the ldif file created in step 1 with the directory service.
  Set the Java SE 6 path for the environment variable JAVA_HOME, before executing the ldapmodify command of OpenDS.
  For details on the command, refer to the OpenDS documentation.
  [Windows]
  >"OpenDS_installation_folder\bat\ldapmodify.bat" -p Port_number -f ldif_file -D OpenDS_administrator_user_DN -w Password <RETURN>
  [Linux]
  # "OpenDS_installation_folder/bin/ldapmodify" -p Port_number -f ldif_file -D OpenDS_administrator_user_DN -w Password <RETURN>
  SSL communications are not required when registering a user in OpenDS. The default value of the port number when not using SSL communications is "1473" in the OpenDS provided with ServerView Operations Manager.
  For details on how to configure connection settings of the OpenDS provided with ServerView Operations Manager, refer to README and the manuals of "ServerView Suite User Management in ServerView".
  Example
  >"C:\Program Files\Fujitsu\ServerView Suite\opends\bat\ldapmodify.bat" -p 1473 -f manager.ldif -D "cn=Directory Manager" -w admin <RETURN>