Attributes of IBM i profiles that correspond to attributes of eDirectory User and Group objects are mapped by the default driver mapping policy. You must extend the schema if you want to use the Identity Vault to manage additional IBM i attributes.
For details about the attributes in the default mapping policy, see Table 1-2, Default eDirectory User to i5/OS UserProfile Mapping and Table 1-3, Default eDirectory Group to IBM i GroupProfile Mapping.
Extending the schema adds auxiliary classes to eDirectory User and Group objects for the profile and distribution directory attributes.
To extend the schema, using the Import Conversion Export Utility (ICE) Command Line Interface:
Obtain the i5os.sch file to import.
Open a terminal on your eDirectory server.
Run the ice command using the following syntax:
ice -S LDIF -f i5os.sch -D LDAP -s <host> -p <port> -d <admin> -W
The host option specifies the DNS name or IP address of the LDAP server. The default is localhost.
The port option specifies the integer port number of the LDAP server specified by host. The default is 389. For secure operations, the default port is 636.
The admin option specifies the distinguished name of the entry that should be used when binding to the server-specified bind operation.
NOTE:For a complete list of options, please see the Import Conversion Export Utility section of the .