# Installation and Upgrade Guide

# Post-Installation Tasks

This chapter contains information on the following post-installation tasks:

- IIS Virtual Directory Settings
- Windows Installation Directory Settings
- Registering the Active Directory IDS in the Portal

## IIS Virtual Directory Settings

To edit virtual directory time-out and security settings:

1. Open Internet Information Services.
2. Expand the IIS hierarchy as necessary, right-click the adaws virtual directory, and select Properties.
3. In the Properties dialog box, click Configuration.
4. In the Application Configuration dialog box, click the Options tab. The ASP Script timeout can be left at the default of 90 seconds.

The Session timeout should be set to the same value as the timeout value specified in the web.config file. See Editing the Web.config File for more information.

For synchronizations of large user directories, a timeout between 120 and 240 minutes is recommended.

5. Return to the Properties dialog box and click the Directory Security tab to edit anonymous access and authentication control. The account used for anonymous access can be either a local or domain user, but in most circumstances the local user IUSR is recommended.
6. When you are done, close the Properties dialog box.

## Windows Installation Directory Settings

The Windows installation directory settings are located in <install_dir>\ptadaws\6.3\webapp\adaws (for example, C:\bea\alui\ptadaws\6.3\webapp\adaws).

The following security settings are the minimum requirements needed for the Active Directory IDS and logging to work correctly:

- The local ASPNET user must have Full Control rights. Allow ASPNET and the SYSTEM group Full Control rights on the folder.
- The account used for anonymous access, described in IIS Virtual Directory Settings, must have Read and Execute, List Folder Contents, and Read rights on the folder. Whether this is a domain user or the local IUSR user, this account will be a member of the Authenticated Users group. Allow Authenticated Users these rights on the folder.
- Administrators will want to be able to view and modify the content of the folder, so allow the Administrators group Full Control rights on the folder.

## Registering the Active Directory IDS in the Portal

After completing installation, you must register the Active Directory IDS in the portal. To register the Active Directory IDS in the portal, perform the following steps:

1. Import the Active Directory Migration Package.
2. Create a Remote Authentication Source.
3. Create a Remote Profile Source.

### Import the Active Directory Migration Package

To import the Active Directory IDS migration package (pte) into the portal:

1. Log on to the portal as a user with administrative rights.
2. Click Administration.
3. In the Select Utility menu, click Migration-Import.
4. On the Package Settings page, leave File Path selected and click Browse to locate the pte file (for example, C:\bea\alui\ptadaws\6.3\serverpackages\IdentityService-ActiveDirectory.pte).
5. Click Load Package.
6. Click Finish.

New portal objects are imported into the Active Directory folder.

### Create a Remote Authentication Source

After importing the pte file, you must create an authentication source:

1. In the Administrative Object Directory, open the Active Directory folder.
2. In the Create Object menu, click Authentication Source - Remote.
3. In the Choose Web Service dialog box, select Active Directory (the Web service created during import), and click OK.
4. On the Remote Active Directory Agent Configuration page, fill out the information specific to your Active Directory server. For more information, refer to online help.
5. Create a job to run your authentication source:

1. Open an administrative folder.
2. In the Create Object menu, click Job.
3. Complete the Job Editor. For more information, refer to online help.

### Create a Remote Profile Source

After importing the pte file and creating a remote authentication source, you must create a remote profile source:

1. In the Administrative Object Directory, open the Active Directory folder.
2. In the Create Object menu, click Profile Source - Remote.
3. In the Choose Web Service dialog box, select Active Directory (2) (the Web service created during import), and click OK.
4. On the Remote Active Directory Configuration page, fill out the information specific to your Active Directory server. For more information, refer to online help.
5. Create a job to run your profile source:

1. Open an administrative folder.
2. In the Create Object menu, click Job.
3. Complete the Job Editor. For more information, refer to online help.