12.3 Registering Administrators

Register an administrator user (privileged user) to be specified when installing Resource Orchestrator with the directory service.

Use the following object classes.

Table 12.1 Object Class
Directory Service	Object Class	Attribute Used for the Login User ID
Directory Services Provided with ServerView Operations Manager	inetOrgPerson	uid or cn
Active Directory	user	sAMAccountName or cn (*)

* Note: Specify these either as the User Search Filter in the Directory Service Settings of ServerView Operations Manager. Specify the same value as the value of the attribute specified as the User Search Filter as the value of the User ID of all the users including the privileged user (an administrator) of Resource Orchestrator.

When using the directory service provided with ServerView Operations Manager, the user ID (uid attribute) must be unique in the directory service.

When using the directory service provided with ServerView Operations Manager, a predefined user exists when installing ServerView Operations Manager.
When using the predefined "Administrator"(ServerView Administrator) as an administrator user in Resource Orchestrator, the following procedure is unnecessary.

For details on predefined user information, refer to the following ServerView Operations Manager manual.

"Configuring directory service access" and "ServerView user management with OpenDS" in "ServerView Suite User Management in ServerView"

An example of how to register a privileged user of Resource Orchestrator in the directory service provided with ServerView Operations Manager is indicated below.

ServerView Operations Manager V5.5 or later
1. Start the "User Management Wizard" of ServerView Operations Manager.
2. Add an administrator user. Allocate the appropriate role of ServerView Operations Manager.
For details on the "User Management Wizard", refer to the following manual.
- "Configuring directory service access" and "ServerView user management with OpenDS" in "ServerView Suite User Management in ServerView"
ServerView Operations Manager V5.5 or earlier
1. Add an administrator user. Allocate the appropriate role of ServerView Operations Manager.
  For details on the "User Management Wizard", refer to the following manual.
  - "Configuring directory service access" and "ServerView user management with OpenDS" in "ServerView Suite User Management in ServerView"
2. Create an ldif file.
  dn: cn=manager,ou=users,dc=fujitsu,dc=com
  changetype: add
  objectclass: inetOrgPerson
  cn: manager
  sn: manager
  uid: manager
  userPassword: mypassword
3. Use the directory service client function to register the ldif file created in step 2 with the directory service.
  Before executing the ldapmodify command of the directory service, set the installation directory of the Java Runtime Environment (JRE) for the environment variable JAVA_HOME.
  For details on the command, refer to the directory service manual.
  [Windows]
  >"Directory_service_installation_folder\bat\ldapmodify.bat" -p Port_number -f ldif_file -D Directory_service_administrator_user_DN -w Password <RETURN>
  [Linux]
  # "Directory_service_installation_folder/bin/ldapmodify" -p Port_number -f ldif_file -D Directory_service_administrator_user_DN -w Password <RETURN>
  SSL communication is not required when registering a user in the directory service provided with ServerView Operations Manager. The default value of the port number when not using SSL communication is "1473" in the directory service provided with ServerView Operations Manager.
  For details on how to configure connection settings of the directory service provided with ServerView Operations Manager, refer to README and the manual "ServerView Suite User Management in ServerView".
  Example
  >"C:\Program Files (x86)\Fujitsu\ServerView Suite\Directory service\bat\ldapmodify.bat" -p 1473 -f manager.ldif -D "cn=Directory Manager" -w admin <RETURN>