Chapter 6. Security 141
If you use LDAP , consider the following scenarios:
/SM590000The LDAP server runs on another system and it connects to Content Manager OnDemand 
through TCP/IP . 
In this scenario, a time delay occurs between when the verification request is issued by 
Content Manager OnDemand and the result is returned to Content Manager OnDemand. 
The length of this time depends on the Internet Protocol network connection, the response 
time of the LDAP server, and the current LDAP workload.
/SM590000Users with admin-level security bypass LDAP . 
Y ou can compare an admin user’s response time to a production user’s response time to 
determine the LDAP impact.
/SM590000The LDAP server or the connection to the LDAP server fails.
When this scenario happens, users cannot log in to Content Manager OnDemand, except 
for users with admin-level security.
Login Processing (case sensitivity)
With this parameter, you can specify whether user IDs and passwords are case-sensitive. By 
default, user IDs and passwords are case-insensitive. When you add a user, Content 
Manager OnDemand converts lowercase letters in the user ID to uppercase letters. 
A person can type letters in a user ID in uppercase, lowercase, or mixed case letters. For 
example, if you add the user LaGuarde, a person can enter LAGUARDE, laguarde, or 
LaGuarde to log on to the server.
If you select User ID to be case-sensitive, a user must type the user ID exactly as it was 
entered when the user was added. For example, if you add the user ID LaGuarde, the user 
must enter LaGuarde to log on to the server. 
If you set a password as case-sensitive, a user must enter the password exactly as it was 
entered when the user was added. 
Maximum Password Age
This setting specifies a time limit for passwords and determines when Content Manager 
OnDemand prompts users to change passwords. The default setting is Password Never 
Expires, which means that passwords do not expire and Content Manager OnDemand never 
prompts users to change passwords. 
Important: Do not change the case-sensitive settings for user IDs and passwords after you 
install the system.
Decide whether to make user IDs and passwords case-sensitive when you install the 
system. Change the defaults if necessary, but do not change the settings later. Otherwise, 
the following situations occur:
/SM590000If user IDs are initially case-insensitive and you later choose User ID to be 
case-sensitive, user IDs that were added before you changed the parameter must be 
entered in uppercase. The same is true for passwords.
/SM590000If user IDs are initially case-sensitive and you later clear the case-sensitive restriction, 
the user IDs that were added before you changed the parameter might contain mixed or 
lowercase letters, which are no longer valid. The same is true for passwords.
Note: If users log on to Content Manager OnDemand with the IBM CICS® client program, 
you must configure the system to ignore the case of user IDs and passwords.