CorporateConnect 1.1 for ISOCOR Global Directory Server

---

• System Requirements
• Configuration of search parameters
• ISOCOR specific configuration parameters
• Support for "\" in T.61 character set

System Requirements

A successful installation of CorporateTime Server 3.5 and CorporateConnect 1.1 for ISOCOR Global Directory Server requires:

• the minimum hardware and software requirements as set out in the "System Requirements" section of this guide
• an installation of ISOCOR Global Directory Server version 2.2x or 2.31

Configuration of search parameters

To allow for thorough and efficient searches using the CorporateTime Server with ISOCOR Global Directory Server, the following parameters in both servers must be tuned for each installation. The dependencies between the parameters should be understood in order to configure the search behaviour appropriate for your organization.

CorporateTime Server search parameters

• Maximum size of returned set for a search

  This parameter, found in the /users/unison/mics/unison.ini file under [LIMITS] maxsearchresult, defines the maximum number of records returned by a directory search. The default value is 100.

ISOCOR Global Directory Server search parameters

• Maximum number of entries returned from a search operation

  The environment variable MAXSEARCH sets the upper limit for the number of entries returned for a list or search operation. The default value is 10240.

ISOCOR specific configuration parameters

Modification of resource password

Section

[UTL]

Parameter

adm_modrespassword

Description

This parameter controls the ability of the CorporateTime Administrator to modify the password of a CorporateTime resource.

Accepted values

TRUE (password can be modified)

FALSE (password cannot be modified)

Default value

The default value is TRUE.

Modification of user password

Section

[UTL]

Parameter

adm_moduserpassword

Description

This parameter controls the ability of the CorporateTime Administrator to modify the password of a CorporateTime user.

Accepted values

TRUE (password can be modified)

FALSE (password cannot be modified)

Default value

The default value is FALSE.

Changing user passwords

Section

[LDAP]

Parameter

dsausedeladdtoreplacepwd

Description

To change user passwords, you must first delete and then add a new value. This behaviour is specific to ISOCOR implementations.

Accepted values

TRUE (password value deleted and then added as replacement procedure)

FALSE (password value simply replaced)

Default value

The default value is TRUE.

ISOCOR LDAP compare function

Section

[LDAP]

Parameter

dsausesearchtocompare

Description

This parameter must be set to TRUE for all installations of CorporateConnect 1.0 for ISOCOR Global Directory Server. With this parameter enabled, the ldap_compare_s() call is simulated with the ldap_search_s() call as a workaround for an ISOCOR limitation.

Accepted values

TRUE (correct setting for ISOCOR installations)

FALSE (overrides ISOCOR setting)

Default value

The default value is TRUE (for ISOCOR only?).

ISOCOR object class groupOfNames

Section

[LDAP]

Parameter

groupobjectclass

Description

The ISOCOR Global Directory Server schema does not recognize the object class groupOfUniqueNames, used to store the list of CorporateTime Server administrators (6 reserved users per node). Thus the ISOCOR object class groupofnames must be mapped to groupobjectclass.

Accepted values

groupofnames

Default value

In the absence of this parameter, the default object class is groupOfUniqueNames.

ISOCOR attribute member(object class groupOfNames)

Section

[LDAP]

Parameter

groupmemberattribute

Description

The ISOCOR Global Directory Server schema does not recognize the attribute type uniqueMember, associated with the object class groupOfUniqueNames. Instead, the attribute member must be used with the object class groupOfNames. This parameter is dependent on the value set by [LDAP]groupobjectclass=groupofnames.

"> Accepted values

member

Default value

In the absence of this parameter, the default attribute type is uniqueMember.

ISOCOR LDAP search filters

Section

[LDAP]

Parameter

groupfilter

Description

This parameter specifies the LDAP filter used when searching groups. Only object classes and attributes recognized by ISOCOR Global Directory Server can be included in this search filter; thus, this parameter alters the default group filter to exclude unrecognized values.

Accepted values

(&(member=*)(objectclass=groupofnames)

Default value

In the absence of this parameter, the default group filter will include the object classes groupofnames and groupOfUniqueNames and the attribute types member and uniqueMember.

attr_fax (version 2.2x)

Section

[LDAP]

Parameter

attr_fax

Description

Determines the attribute name that the LDAP directory server will use for the "fax" attribute. For ISOCOR Global Directory Server 2.2x, this parameter must be set to officefax.

Accepted values

Any attribute name defined in the LDAP directory schema

Default value

facsimileTelephoneNumber

attr_uid (version 2.31)

Section

[LDAP]

Parameter

attr_uid

Description

Determines the attribute name that the LDAP directory server will use for the "uid" attribute. For ISOCOR Global Directory Server 2.31, this parameter must be set to userid.

Accepted values

Any attribute name defined in the LDAP directory schema

Default value

uid

Support for "\" in T.61 character set

CorporateTime data is converted to the T.61 character set before it is sent to the ISOCOR 2.31 directory. This character set does not support the the backslash character "\" without the following modification.

In /etc/charset/T61.MAP (line 93) change:

0x5C<tab>0xFFFD<tab># SUBSTITUTE

to:

0x5C<tab>0x005C<tab># REVERSE SOLIDUS