ars.ini - Revision history

Jderrick: /* Unlisted CMOD Configuration Parameters */

2024-11-20T20:30:09Z

Unlisted CMOD Configuration Parameters

← Older revision		Revision as of 20:30, 20 November 2024
Line 76:		Line 76:

	== Unlisted CMOD Configuration Parameters ==		== Unlisted CMOD Configuration Parameters ==
	~~;SRVR_FLAGS_SECURITY_EXIT~~
	: This is the flag to enable the Content Manager OnDemand User Security Exit. The IBM CMOD Security Exit, <code> arsusec</code> is used to extend and customize user authentication in CM OnDemand. When set to 1, CMOD will call the user exit when a user connects to CMOD and attempts to authenticate. <code> arsusec</code> is normally used for providing alternate authentication methods to OnDemand, like Single Sign On ("SSO") and in previous versions, Lightweight Directory Access Protocol ("LDAP").
	: When enabled, the compiled <code> arsusec</code> binary must be located in the 'exits' directory under the 'bin' directory in your IBM CMOD installation directory, for example, <code> /opt/IBM/ondemand/V9.5/bin/exits</code>. If the parameter is enabled, and the <code> arsusec</code> compiled binary is missing from the 'exits' directory, the server may be unable to start, and cause <code> arssockd </code> to report a [[Unable_to_determine_the_database_engine\|ARS4013E - Unable to determine the database engine]] error.

	;ARSSOCK_TLSV12_ONLY		;ARSSOCK_TLSV12_ONLY
	: When set to '1', this parameter disables all prior levels of TLS - improving security by disabling older, less secure cryptographic methods.		: When set to '1', this parameter disables all prior levels of TLS - improving security by disabling older, less secure cryptographic methods.
Line 90:		Line 86:
	:The default is for CMOD to start up with FIPS compliance enabled.		:The default is for CMOD to start up with FIPS compliance enabled.
	:If you are trying to upgrade to TLS v1.3, you need to disable FIPS support with <code>ARSSOCK_FIPS=0</code>.		:If you are trying to upgrade to TLS v1.3, you need to disable FIPS support with <code>ARSSOCK_FIPS=0</code>.

			;SRVR_FLAGS_SECURITY_EXIT
			: This is the flag to enable the Content Manager OnDemand User Security Exit. The IBM CMOD Security Exit, <code> arsusec</code> is used to extend and customize user authentication in CM OnDemand. When set to 1, CMOD will call the user exit when a user connects to CMOD and attempts to authenticate. <code> arsusec</code> is normally used for providing alternate authentication methods to OnDemand, like Single Sign On ("SSO") and in previous versions, Lightweight Directory Access Protocol ("LDAP").
			: When enabled, the compiled <code> arsusec</code> binary must be located in the 'exits' directory under the 'bin' directory in your IBM CMOD installation directory, for example, <code> /opt/IBM/ondemand/V9.5/bin/exits</code>. If the parameter is enabled, and the <code> arsusec</code> compiled binary is missing from the 'exits' directory, the server may be unable to start, and cause <code> arssockd </code> to report a [[Unable_to_determine_the_database_engine\|ARS4013E - Unable to determine the database engine]] error.

			;SRVR_OD_STASH
			: Specifies the location of the Content Manager OnDemand Server's configuration stash file - passwords for DB2, LDAP, Oracle, ZooKeeper, etc.
			: This parameter should contain the FULL path to the stash file: <code>SRVR_OD_STASH=/opt/ibm/ondemand/V10.5/ars.stash</code>
			: NOTE: For security, this file should be protected at the filesystem level with very restrictive permissions: <code> chmod 600 ars.stash</code>   to prevent the password data from being leaked.

	== Related Articles ==		== Related Articles ==

	[https://www.ibm.com/docs/en/cmofm/10.5.0?topic=services-configuring-arsldapini-file LDAP Configuration File]		[https://www.ibm.com/docs/en/cmofm/10.5.0?topic=services-configuring-arsldapini-file LDAP Configuration File]

Jderrick: Updated version number to CMOD v10.5.

2024-05-13T19:58:25Z

Updated version number to CMOD v10.5.

← Older revision		Revision as of 19:58, 13 May 2024
Line 61:		Line 61:
	: There is no default port number, common choices are 1443 and 1446, but may be any number between 1024 and 65535 not already in use on your server by other services like TSM (1500, 1501) or DB2 (50000-50006, 60000-60006).		: There is no default port number, common choices are 1443 and 1446, but may be any number between 1024 and 65535 not already in use on your server by other services like TSM (1500, 1501) or DB2 (50000-50006, 60000-60006).

	; SSL_KEYRING_FILE=/opt/IBM/ondemand/V9.5/config/ondemand.kdb		; SSL_KEYRING_FILE=/opt/IBM/ondemand/V10.5/config/ondemand.kdb
	: Defines the location of the key database that contains all the requisite certificates and keys.		: Defines the location of the key database that contains all the requisite certificates and keys.

	; SSL_KEYRING_STASH=/opt/IBM/ondemand/V9.5/config/ondemand.sth		; SSL_KEYRING_STASH=/opt/IBM/ondemand/V10.5/config/ondemand.sth
	: Defines the location of the stash file that contains passwords to the keys and certificates in the key database.		: Defines the location of the stash file that contains passwords to the keys and certificates in the key database.
	: This file should have very restrictive permissions.		: This file should have very restrictive permissions.

Jderrick: Updated version numbers, added ARSSOCK_FIPS option and updated link to CMOD LDAP Configuration file.

2024-05-13T19:57:45Z

Updated version numbers, added ARSSOCK_FIPS option and updated link to CMOD LDAP Configuration file.

← Older revision		Revision as of 19:57, 13 May 2024
Line 9:		Line 9:
	SRVR_INSTANCE=archive		SRVR_INSTANCE=archive
	SRVR_INSTANCE_OWNER=archive		SRVR_INSTANCE_OWNER=archive
	SRVR_OD_CFG=/opt/ibm/ondemand/V9.5/config/ars.cfg		SRVR_OD_CFG=/opt/ibm/ondemand/V10.5/config/ars.cfg
	SRVR_DB_CFG=/opt/ibm/ondemand/V9.5/config/ars.dbfs		SRVR_DB_CFG=/opt/ibm/ondemand/V10.5/config/ars.dbfs
	SRVR_SM_CFG=/opt/ibm/ondemand/V9.5/config/ars.cache		SRVR_SM_CFG=/opt/ibm/ondemand/V10.5/config/ars.cache

	; [@SRV@_ARCHIVE]		; [@SRV@_ARCHIVE]
Line 33:		Line 33:
	: The operating system User ID that owns / controls this instance. This parameter may be case sensitive depending on your Operating System.		: The operating system User ID that owns / controls this instance. This parameter may be case sensitive depending on your Operating System.

	; SRVR_OD_CFG=/opt/ibm/ondemand/V9.5/config/ars.cfg		; SRVR_OD_CFG=/opt/ibm/ondemand/V10.5/config/ars.cfg
	: Defines the location of your configuration file for the server.		: Defines the location of your configuration file for the server.

	; SRVR_DB_CFG=/opt/ibm/ondemand/V9.5/config/ars.dbfs		; SRVR_DB_CFG=/opt/ibm/ondemand/V10.5/config/ars.dbfs
	: Defines the location of your configuration file for the database manager.		: Defines the location of your configuration file for the database manager.

	; SRVR_SM_CFG=/opt/ibm/ondemand/V9.5/config/ars.cache		; SRVR_SM_CFG=/opt/ibm/ondemand/V10.5/config/ars.cache
	: Defines the locatio nof your configuration file for defining cache filesystems.		: Defines the locatio nof your configuration file for defining cache filesystems.

	== arsstash related ars.ini configuration parameters ==		== arsstash related ars.ini configuration parameters ==

	SRVR_OD_STASH=/opt/IBM/ondemand/V9.5/config/ars.stash		SRVR_OD_STASH=/opt/IBM/ondemand/V10.5/config/ars.stash

	; SRVR_OD_STASH=/opt/IBM/ondemand/V9.5/config/ars.stash		; SRVR_OD_STASH=/opt/IBM/ondemand/V10.5/config/ars.stash
	: This parameter defines the location of the default stash file to use for database connections, arsload, and LDAP authentication.		: This parameter defines the location of the default stash file to use for database connections, arsload, and LDAP authentication.

Line 52:		Line 52:

	SSL_PORT=1446		SSL_PORT=1446
	SSL_KEYRING_FILE=/opt/IBM/ondemand/V9.5/config/ondemand.kdb		SSL_KEYRING_FILE=/opt/IBM/ondemand/V10.5/config/ondemand.kdb
	SSL_KEYRING_STASH=/opt/IBM/ondemand/V9.5/config/ondemand.sth		SSL_KEYRING_STASH=/opt/IBM/ondemand/V10.5/config/ondemand.sth
	SSL_KEYRING_LABEL=IBM CMOD SSL Certificate		SSL_KEYRING_LABEL=IBM CMOD SSL Certificate
	SSL_CLNT_USE_SSL=1		SSL_CLNT_USE_SSL=1
Line 86:		Line 86:
	;ARSSOCK_STRICT_SHA2_ONLY_CERTS		;ARSSOCK_STRICT_SHA2_ONLY_CERTS
	: When set to '1', this flag instructs Content Manager OnDemand to only allow certificates that use the SHA2 hashing method in CMOD server certificates. This increases security, as certificates signed with SHA1 are considered vulnerable to 'collision' attacks, and as a result, are not secure.		: When set to '1', this flag instructs Content Manager OnDemand to only allow certificates that use the SHA2 hashing method in CMOD server certificates. This increases security, as certificates signed with SHA1 are considered vulnerable to 'collision' attacks, and as a result, are not secure.

			;ARSSOCK_FIPS
			:The default is for CMOD to start up with FIPS compliance enabled.
			:If you are trying to upgrade to TLS v1.3, you need to disable FIPS support with <code>ARSSOCK_FIPS=0</code>.

	== Related Articles ==		== Related Articles ==

	[https://www.ibm.com/~~support~~/~~knowledgecenter~~/~~SSEPCD_9~~.5.0~~/com.ibm.ondemand.installmp.doc/dodso059.htm~~ LDAP ~~Messages~~ File]		[https://www.ibm.com/docs/en/cmofm/10.5.0?topic=services-configuring-arsldapini-file LDAP Configuration File]

Jderrick: /* Unlisted CMOD Configuration Parameters */

2023-08-30T08:13:10Z

Unlisted CMOD Configuration Parameters

← Older revision		Revision as of 08:13, 30 August 2023
Line 82:		Line 82:
	;ARSSOCK_TLSV12_ONLY		;ARSSOCK_TLSV12_ONLY
	: When set to '1', this parameter disables all prior levels of TLS - improving security by disabling older, less secure cryptographic methods.		: When set to '1', this parameter disables all prior levels of TLS - improving security by disabling older, less secure cryptographic methods.
			: When setting SSL/TLS parameters for CMOD, you can also add environment variables to modify the behavior of IBM Global Security Kit like <code>GSK_PROTOCOL_TLSV1_2=1</code>.

	;ARSSOCK_STRICT_SHA2_ONLY_CERTS		;ARSSOCK_STRICT_SHA2_ONLY_CERTS

Jderrick: Added more info to CMOD ars.ini PROTOCOL parameter.

2022-09-24T16:56:39Z

Added more info to CMOD ars.ini PROTOCOL parameter.

← Older revision		Revision as of 16:56, 24 September 2022
Line 20:		Line 20:

	; PROTOCOL=2		; PROTOCOL=2
	: The protocol to use between the server and client. Leave the default value for the version of CMOD you've installed.		: The protocol to use between the server and client. Leave the default value for the version of CMOD you've installed. Communications between Content Manager OnDemand Clients and Servers works over TCP/IP.

	; PORT=0		; PORT=0

Jderrick: added description of the CMOD ARSSOCK_TLSV12_ONLY parameter.

2021-11-16T00:24:30Z

added description of the CMOD ARSSOCK_TLSV12_ONLY parameter.

← Older revision		Revision as of 00:24, 16 November 2021
Line 79:		Line 79:
	: This is the flag to enable the Content Manager OnDemand User Security Exit. The IBM CMOD Security Exit, <code> arsusec</code> is used to extend and customize user authentication in CM OnDemand. When set to 1, CMOD will call the user exit when a user connects to CMOD and attempts to authenticate. <code> arsusec</code> is normally used for providing alternate authentication methods to OnDemand, like Single Sign On ("SSO") and in previous versions, Lightweight Directory Access Protocol ("LDAP").		: This is the flag to enable the Content Manager OnDemand User Security Exit. The IBM CMOD Security Exit, <code> arsusec</code> is used to extend and customize user authentication in CM OnDemand. When set to 1, CMOD will call the user exit when a user connects to CMOD and attempts to authenticate. <code> arsusec</code> is normally used for providing alternate authentication methods to OnDemand, like Single Sign On ("SSO") and in previous versions, Lightweight Directory Access Protocol ("LDAP").
	: When enabled, the compiled <code> arsusec</code> binary must be located in the 'exits' directory under the 'bin' directory in your IBM CMOD installation directory, for example, <code> /opt/IBM/ondemand/V9.5/bin/exits</code>. If the parameter is enabled, and the <code> arsusec</code> compiled binary is missing from the 'exits' directory, the server may be unable to start, and cause <code> arssockd </code> to report a [[Unable_to_determine_the_database_engine\|ARS4013E - Unable to determine the database engine]] error.		: When enabled, the compiled <code> arsusec</code> binary must be located in the 'exits' directory under the 'bin' directory in your IBM CMOD installation directory, for example, <code> /opt/IBM/ondemand/V9.5/bin/exits</code>. If the parameter is enabled, and the <code> arsusec</code> compiled binary is missing from the 'exits' directory, the server may be unable to start, and cause <code> arssockd </code> to report a [[Unable_to_determine_the_database_engine\|ARS4013E - Unable to determine the database engine]] error.

			;ARSSOCK_TLSV12_ONLY
			: When set to '1', this parameter disables all prior levels of TLS - improving security by disabling older, less secure cryptographic methods.

	;ARSSOCK_STRICT_SHA2_ONLY_CERTS		;ARSSOCK_STRICT_SHA2_ONLY_CERTS

Jderrick: /* Unlisted CMOD Configuration Parameters */

2021-11-15T15:56:53Z

Unlisted CMOD Configuration Parameters

← Older revision		Revision as of 15:56, 15 November 2021
Line 79:		Line 79:
	: This is the flag to enable the Content Manager OnDemand User Security Exit. The IBM CMOD Security Exit, <code> arsusec</code> is used to extend and customize user authentication in CM OnDemand. When set to 1, CMOD will call the user exit when a user connects to CMOD and attempts to authenticate. <code> arsusec</code> is normally used for providing alternate authentication methods to OnDemand, like Single Sign On ("SSO") and in previous versions, Lightweight Directory Access Protocol ("LDAP").		: This is the flag to enable the Content Manager OnDemand User Security Exit. The IBM CMOD Security Exit, <code> arsusec</code> is used to extend and customize user authentication in CM OnDemand. When set to 1, CMOD will call the user exit when a user connects to CMOD and attempts to authenticate. <code> arsusec</code> is normally used for providing alternate authentication methods to OnDemand, like Single Sign On ("SSO") and in previous versions, Lightweight Directory Access Protocol ("LDAP").
	: When enabled, the compiled <code> arsusec</code> binary must be located in the 'exits' directory under the 'bin' directory in your IBM CMOD installation directory, for example, <code> /opt/IBM/ondemand/V9.5/bin/exits</code>. If the parameter is enabled, and the <code> arsusec</code> compiled binary is missing from the 'exits' directory, the server may be unable to start, and cause <code> arssockd </code> to report a [[Unable_to_determine_the_database_engine\|ARS4013E - Unable to determine the database engine]] error.		: When enabled, the compiled <code> arsusec</code> binary must be located in the 'exits' directory under the 'bin' directory in your IBM CMOD installation directory, for example, <code> /opt/IBM/ondemand/V9.5/bin/exits</code>. If the parameter is enabled, and the <code> arsusec</code> compiled binary is missing from the 'exits' directory, the server may be unable to start, and cause <code> arssockd </code> to report a [[Unable_to_determine_the_database_engine\|ARS4013E - Unable to determine the database engine]] error.

			;ARSSOCK_STRICT_SHA2_ONLY_CERTS
			: When set to '1', this flag instructs Content Manager OnDemand to only allow certificates that use the SHA2 hashing method in CMOD server certificates. This increases security, as certificates signed with SHA1 are considered vulnerable to 'collision' attacks, and as a result, are not secure.

	== Related Articles ==		== Related Articles ==

	[https://www.ibm.com/support/knowledgecenter/SSEPCD_9.5.0/com.ibm.ondemand.installmp.doc/dodso059.htm LDAP Messages File]		[https://www.ibm.com/support/knowledgecenter/SSEPCD_9.5.0/com.ibm.ondemand.installmp.doc/dodso059.htm LDAP Messages File]

Jderrick: Added IBM CMOD ars.ini parameter SRVR_FLAGS_SECURITY_EXIT.

2018-10-12T17:38:38Z

Added IBM CMOD ars.ini parameter SRVR_FLAGS_SECURITY_EXIT.

← Older revision		Revision as of 17:38, 12 October 2018
Line 75:		Line 75:
	: This is not necessary if you're not performing remote loads (via arsload), or queries or retrievals (via arsdoc).		: This is not necessary if you're not performing remote loads (via arsload), or queries or retrievals (via arsdoc).

			== Unlisted CMOD Configuration Parameters ==
			;SRVR_FLAGS_SECURITY_EXIT
			: This is the flag to enable the Content Manager OnDemand User Security Exit. The IBM CMOD Security Exit, <code> arsusec</code> is used to extend and customize user authentication in CM OnDemand. When set to 1, CMOD will call the user exit when a user connects to CMOD and attempts to authenticate. <code> arsusec</code> is normally used for providing alternate authentication methods to OnDemand, like Single Sign On ("SSO") and in previous versions, Lightweight Directory Access Protocol ("LDAP").
			: When enabled, the compiled <code> arsusec</code> binary must be located in the 'exits' directory under the 'bin' directory in your IBM CMOD installation directory, for example, <code> /opt/IBM/ondemand/V9.5/bin/exits</code>. If the parameter is enabled, and the <code> arsusec</code> compiled binary is missing from the 'exits' directory, the server may be unable to start, and cause <code> arssockd </code> to report a [[Unable_to_determine_the_database_engine\|ARS4013E - Unable to determine the database engine]] error.
	== Related Articles ==		== Related Articles ==

	[https://www.ibm.com/support/knowledgecenter/SSEPCD_9.5.0/com.ibm.ondemand.installmp.doc/dodso059.htm LDAP Messages File]		[https://www.ibm.com/support/knowledgecenter/SSEPCD_9.5.0/com.ibm.ondemand.installmp.doc/dodso059.htm LDAP Messages File]

Jderrick: Moved IBM CMOD LDAP config sample to ars.cfg.

2017-11-19T12:59:04Z

Moved IBM CMOD LDAP config sample to ars.cfg.

← Older revision		Revision as of 12:59, 19 November 2017
Line 74:		Line 74:
	: Determines if utility clients like arsload should use SSL to connect to IBM CMOD.		: Determines if utility clients like arsload should use SSL to connect to IBM CMOD.
	: This is not necessary if you're not performing remote loads (via arsload), or queries or retrievals (via arsdoc).		: This is not necessary if you're not performing remote loads (via arsload), or queries or retrievals (via arsdoc).

	~~== LDAP related ars.ini configuration parameters ==~~

	~~ARS_LDAP_SERVER= ldap.example.com~~
	~~ARS_LDAP_PORT=~~
	~~ARS_LDAP_USE_SSL=FALSE~~
	~~ARS_LDAP_BASE_DN=ou=examplegroup,o=example.com~~
	~~ARS_LDAP_BIND_ATTRIBUTE=userid~~
	~~ARS_LDAP_MAPPED_ATTRIBUTE=userid~~
	~~ARS_LDAP_ALLOW_ANONYMOUS=TRUE~~
	~~ARS_LDAP_BIND_MESSAGES_FILE=/var/log/LDAPmessages.log~~
	~~ARS_LDAP_IGN_USERIDS=ADMIN,ARSLOAD,ARSMAINT~~
	~~ARS_LDAP_BIND_MESSAGES_FILE=/opt/IBM/ondemand/V9.5/config/arsldap.ini~~


	== Related Articles ==		== Related Articles ==

	[https://www.ibm.com/support/knowledgecenter/SSEPCD_9.5.0/com.ibm.ondemand.installmp.doc/dodso059.htm LDAP Messages File]		[https://www.ibm.com/support/knowledgecenter/SSEPCD_9.5.0/com.ibm.ondemand.installmp.doc/dodso059.htm LDAP Messages File]

Jderrick: Added definitions for most of the ars.ini parameters.

2017-03-09T02:07:18Z

Added definitions for most of the ars.ini parameters.

← Older revision		Revision as of 02:07, 9 March 2017
Line 13:		Line 13:
	SRVR_SM_CFG=/opt/ibm/ondemand/V9.5/config/ars.cache		SRVR_SM_CFG=/opt/ibm/ondemand/V9.5/config/ars.cache

			; [@SRV@_ARCHIVE]
			: This is the header that defines a server. Any of the parameters below refer to this server - ARCHIVE.

			; HOST=cmod.example.com
			: The fully qualified domain name of the server.

			; PROTOCOL=2
			: The protocol to use between the server and client. Leave the default value for the version of CMOD you've installed.

			; PORT=0
			: The TCP/IP port number to use for CMOD. 0 uses the default, 1445.
			: Each server must have it's own port number, servers cannot share a port.
			: This port number must be entered in the client software when defining a server.

			; SRVR_INSTANCE=archive
			: Name of the instance.

			; SRVR_INSTANCE_OWNER=archive
			: The operating system User ID that owns / controls this instance. This parameter may be case sensitive depending on your Operating System.

			; SRVR_OD_CFG=/opt/ibm/ondemand/V9.5/config/ars.cfg
			: Defines the location of your configuration file for the server.

			; SRVR_DB_CFG=/opt/ibm/ondemand/V9.5/config/ars.dbfs
			: Defines the location of your configuration file for the database manager.

			; SRVR_SM_CFG=/opt/ibm/ondemand/V9.5/config/ars.cache
			: Defines the locatio nof your configuration file for defining cache filesystems.

	== arsstash related ars.ini configuration parameters ==		== arsstash related ars.ini configuration parameters ==

	SRVR_OD_STASH=/opt/IBM/ondemand/V9.5/config/ars.stash		SRVR_OD_STASH=/opt/IBM/ondemand/V9.5/config/ars.stash

			; SRVR_OD_STASH=/opt/IBM/ondemand/V9.5/config/ars.stash
			: This parameter defines the location of the default stash file to use for database connections, arsload, and LDAP authentication.

	== SSL / TLS related ars.ini configuration parameters ==		== SSL / TLS related ars.ini configuration parameters ==
Line 25:		Line 56:
	SSL_KEYRING_LABEL=IBM CMOD SSL Certificate		SSL_KEYRING_LABEL=IBM CMOD SSL Certificate
	SSL_CLNT_USE_SSL=1		SSL_CLNT_USE_SSL=1

			; SSL_PORT=1446
			: Defines the port number for encrypted connections to CMOD.
			: There is no default port number, common choices are 1443 and 1446, but may be any number between 1024 and 65535 not already in use on your server by other services like TSM (1500, 1501) or DB2 (50000-50006, 60000-60006).

			; SSL_KEYRING_FILE=/opt/IBM/ondemand/V9.5/config/ondemand.kdb
			: Defines the location of the key database that contains all the requisite certificates and keys.

			; SSL_KEYRING_STASH=/opt/IBM/ondemand/V9.5/config/ondemand.sth
			: Defines the location of the stash file that contains passwords to the keys and certificates in the key database.
			: This file should have very restrictive permissions.

			; SSL_KEYRING_LABEL=IBM CMOD SSL Certificate
			: Defines the label of the SSL Certificate to be used to identify the IBM CMOD server.

			; SSL_CLNT_USE_SSL=1
			: Determines if utility clients like arsload should use SSL to connect to IBM CMOD.
			: This is not necessary if you're not performing remote loads (via arsload), or queries or retrievals (via arsdoc).

	== LDAP related ars.ini configuration parameters ==		== LDAP related ars.ini configuration parameters ==
Line 38:		Line 87:
	ARS_LDAP_IGN_USERIDS=ADMIN,ARSLOAD,ARSMAINT		ARS_LDAP_IGN_USERIDS=ADMIN,ARSLOAD,ARSMAINT
	ARS_LDAP_BIND_MESSAGES_FILE=/opt/IBM/ondemand/V9.5/config/arsldap.ini		ARS_LDAP_BIND_MESSAGES_FILE=/opt/IBM/ondemand/V9.5/config/arsldap.ini


			== Related Articles ==

			[https://www.ibm.com/support/knowledgecenter/SSEPCD_9.5.0/com.ibm.ondemand.installmp.doc/dodso059.htm LDAP Messages File]