Folks: I have spent far too much banging my head against my desk on this topic, and thought I would ask you all.
I've got TSM 7.1.1 running on RHEL 6.5. Our Microsoft AD servers are WIndows 2008 R2 but running in 2003 mode. I wish to configure TSM to allow ADMIN accounts to be authenticated against Active Directory. I am *trying* to follow the directions here: http://www-01.ibm.com/support/knowledgecenter/SSGSG7_7.1.1/com.ibm.itsm.srv.doc/c_mgclinod_managepwlogin.html?lang=en ...but after updating my dsmserv.opt with the following line... and verifying that a "cert.kdb" file is created... and setting the LDAPUser... LDAPURL ldap://ADSERVER.unit.company.com:636/OU=Domain Controllers,DC=unit,DC=company,DC=com Set LDAPUser "CN=accountID,OU=Users,OU=AdminUnits,DC=unit,DC=company,DC=com" The active directory serve "ADSERVER" r is in OU "Domain Controllers" directory under forest unit.company.com. The binding account "accountID" is in OU=Users, under OU=AdminUnits, under forest unit.company.com. I am unable to set the LDAP password, and get this error. I have followed all the troubleshooting instructions... is there perhaps a cookbook or some magic that I am missing? ANR2017I Administrator SERVER_CONSOLE issued command: SET LDAPPASSWORD ?***? ANR3114E LDAP error 81 (Can't contact LDAP server) occurred during ldap_start_tls_s_np. ANR3103E Failure occurred while initializing LDAP directory services. ANR2732E Unable to communicate with the external LDAP directory server. HELP! Best regards, Mike Ryder, x7942 RMD IT Client Services
