Basic requirements

IBM Security stores UNIX-specific properties for users, groups, and computers, as well as zones and zone properties, within Active Directory by adhering to Microsoft standards for data storage. Because of this adherence to Microsoft standards, IBM Security stores the UNIX-specific information differently depending on the Active Directory schema you are using and the type of IBM Security zones you create.

The IBM Security Windows API provides a logical abstraction of the data model so that you can manipulate IBM Security-specific information without understanding the differences between zone types. If you want to manipulate the data directly without the logical abstraction, however, you need to understand the details of how UNIX-specific properties and zone information are stored for each type of zone and schema. Once you have a more detailed understanding of the physical and logical data model for each zone type, you may be able to perform tasks that are not possible with the Access Manager console.