4.1 Self Service Password Reset Configuration Worksheet

Use the following worksheet to gather the required information to use the Configuration Guide or to manually configure your environment.

Table 4-1 Self Service Password Reset Configuration Worksheet

Component

Gather the following information:

Feature Usage Statics

 

 

 

Decide whether to allow NetIQ to gather statistical data about how you use Self Service Password Reset. We use this information to focus development on the most used features. You must select whether to enable or disable this feature. You can turn this feature on through the Configuration Editor. For more information, see Configuring the Telemetry Options in the Self Service Password Reset 4.2 Administration Guide.

LDAP Directory Information

 

 

 

Full DNS name or IP address and the port of the LDAP server

NOTE:Do not use a virtual address or a proxy server address.

 

LDAP server certificates

Self Service Password Reset manages the LDAP server certificates for you. When you define the default LDAP profile or create a new profile, the Configuration Editors imports the LDAP service certificate for you.

 

Fully qualified LDAP distinguished name (DN) of the proxy administrator credentials

For security reasons, create a proxy LDAP administrator that has sufficient rights to administer the users that log in to this system.

 

Fully qualified DN of the root container of your LDAP users

You can add additional containers after the Configuration Guide completes.

 

Fully qualified DN of an LDAP administrators group

A group in your LDAP directory to use to control administrative access to Self Service Password Reset.

Fully qualified DN of an LDAP test user

Self Service Password Reset uses this test user to periodically test the connection between the LDAP server and the system.

 

LDAP attribute permissions

You must change the LDAP attribute permissions to allow Self Service Password Reset to manage your users’ credentials. The Configuration Guide displays the specific permissions you must change for your environment.

If you perform a manual install, you must change these same attribute permissions for your environment. For more information, see Configuring the LDAP Directories.

Self Service Password Reset URL

 

 

URL to this deployment of Self Service Password Reset that the users access

The fully qualified hostname of the server running Self Service Password Reset.

Challenge-Response Storage Local Database

 

NOTE:Select one of the locations to store the challenge-response information: local database, LDAP, or remote database.

 

Local database - Testing Only

Use for testing only and nothing else must be done to your environment.

Challenge-Response Storage LDAP

 

 

LDAP

You must extend the schema in your LDAP directory and assign rights to allow Self Service Password Reset to manage the users. If you are using eDirectory, you can allow the Configuration Guide to extend the schema for you or you can manually extend the schema with the provided files.

For Active Directory, you must manually extend the schema using the provided files. For more information, see Configuring the LDAP Directories.

Challenge-Response Storage Remote Database

 

 

 

Empty database

You must install an empty database that Self Service Password Reset supports. The configuration process adds the appropriate tables and schema to the database.

 

Database driver

You must download the JDBC driver from the website of the database you are using. You upload the JAR or ZIP file during the configuration of Self Service Password Reset.

Database class

You must specify the Java class name of the JDBC driver. For example:

  • Microsoft SQL: com.microsoft.sqlserver.jdbc.SQLServerDriver

  • Microsoft SQL using jTDS: net.sourceforge.jtds.jdbc.Driver

  • Oracle: oracle.jdbc.OracleDriver

  • PostgreSQL: org.postgresql.Driver

 

Database connection string

This setting configures the Java JDBC database driver with the information required to reach your database server such as IP address, port number, and database name. For example:

  • Microsoft SQL: jdbc:sqlserver://host.example.net:port;databaseName=SSPR

  • Microsoft SQL using jTDS: jdbc:jtds:sqlserver://host.example.net:port/SSPR

  • Oracle: jdbc:oracle:thin:@//host.example.net:1521/SSPR

  • PostgreSQL: jdbc:postgresql://host:port/database

 

Library Path - Microsoft SQL only

Set the appropriate values for JAVA_OPTS in catalina.bat in the tomcat/bin folder. For more information, see the Tomcat documentation.

 

Database user name

A user name that Self Service Password Reset uses to authenticate to the database.

 

Database password

The password of the database user Self Service Password Reset uses to authenticate to the database.