Populating Profiles with photos from LDAP

You can use the IBM® Tivoli® Security Integrator assembly-line command load_photos_from_ldap to load the Profiles database with photos of your users.

Before you begin

Make sure that the Profiles database is already populated with users. The assembly line relies on the distinguished name to locate photos in LDAP.

Procedure

To load photos from LDAP:
  1. Open profiles_tdi.properties, locate the load_photos_from_ldap_attr_name property, and set it to the name of the LDAP binary attribute that contains the photo.

    Typical names for the LDAP binary attribute are photo;binary, jpegPhoto;binary, and image;binary, but you must use the same name that your LDAP uses. For example:

    load_photos_from_ldap_attr_name=photo;binary

  2. Run the load_photos_from_ldap assembly line command.
    Note: You must run this command for each LDAP server and each LDAP branch that contains photos.