IBM AS/400e, Руководство пользователя

Страница: 489 / 834

Operating System/400, 5769-SS1
459
Operating System/400, 5769-SS1
TLS Version 1 and SSL Version 3 share the same basic record construction and
line flows. TLS provides the same function as SSL and is compatible with SSL,
but includes some new features and clarifications for protocol flows.
TLS helps standardize the SSL definition and implementation, makes the SSL
protocol more secure, and makes the specification of the protocol more concise
and complete.
Supporting TLS on the AS/400 system allows AS/400 customers and business
partners to continue to have access to and take advantage of the latest
technology implementation of Internet application security enablement in the
industry. TLS support is automatically part of any SSL-enabled application, such
as the HTTP and TELNET servers. Parameter values on the AS/400 SSL APIs
enable TLS for business partner and customer-provided SSL applications.
– LDAP
• An LDAP-accessible directory server and corresponding APIs that communicate
with other LDAP directory servers are provided in OS/400. APIs are provided for
both OS/400 and Windows applications written in Java, C, and C++.
LDAP-enabled applications, such as Internet mail clients, can access, update, and
manage the AS/400 directory.
• OS/400 applications can be developed to use LDAP for managing distributed
information across the Internet and intranets using LDAP directories for both IBM
and non-IBM platforms. AS/400 user information, such as e-mail addresses, is
accessible to mail clients and other LDAP applications.
Directory Services LDAP V3 Enhancements
Enhancements in V3 Directory Services LDAP include:
–Support of the latest version of LDAP
Directory Services implements SecureWay Directory V3.1.1 for OS/400. This
provides support for LDAP v3. LDAP V3 includes support for internal
characters (Utf-8), which supports national language data and is a mixed,
multibyte codepage. LDAP V3 also provides support for dynamic schema
where the schema is stored in the directory and is managed by the LDAP
server. The schemas can be updated using the new Directory Management
Tool, importing from an LDIF file, or from LDAP command line utilities.
– Directory Management Tool (DMT) to administer directory contents and
schema. DMT is a GUI tool used to manage LDAP directory content. It is part
of the Windows LDAP client, which is included with AS/400 Directory Services.
Use the Directory Management Tool to:
• Browse the directory schema
• Add, edit, and delete object classes and attributes
• Browse and search the directory tree