How to search for users with RSA Mobile administration GUI
3 years ago
Originally Published: 2004-06-15
Article Number
000060342
Applies To
RSA Mobile
RSA Mobile 1.5 Authentication Server
iPlanet Directory Server
Issue
How to search for users with RSA Mobile administration GUI
Cause
The iPlanet Directory Server has 2 types of administrators with significant power: 1) "Topology Manager" (the user "admin" is an example) and 2) "cn=Directory Manager". For any accounts other than ?Directory Manager?, wildcard searches can be restricted by a parameter called the ?look through limit?, which is set to 5000 by default on a iPlanet system.
Resolution
For a new installation, in step 1 for configuring iPlanet LDAP, the file called "configuredatastore.cmd" is altered to have site specific data. At this stage, modify the line shown as:

    @rem set LDAP_ACCOUNT_DN="uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoot"

to the following:

    set LDAP_ACCOUNT_DN="cn=Directory Manager"
On an existing installation, you can modify the behavior of the iPlanet Directory Server using the iPlanet console; the "Look-through" limit needs to be modified. For example, on iPlanet 5.1, the steps would be as follows:

1. Go to the Directory Server --> Configuration

2. Expand tree view: Data --> Database Settings

3. Click on LDBM Plug-in Settings

4. Increase Look-through limit