WAS Security - newbie question

[pjoisha]

Hi All,
Out here at work we use Netegrity's
SiteMinder(SM) to do the User authenticaion
and I'm trying to see how I could integrate this product into WebSphere. Even though Netegrity has a plugin for WebSphere v4 on NT, I'm given to understand that they don't have a solution for WebSphere Enterprise Edition v4.0 on z/OS, which
will be our target platform.
Now my question is what's the best way to do this integration?
I have setup SiteMinder to return Group Names upon successful authentication. I want to tie this Group Name to the "security-role" tag that you find in web.xml or ejb-jar.xml. One idea I have been trying to pursue is why not create these SM Group Names in LDAP and then via the AAT do the mapping between SM Group Names and WAR/EJBJAR Role Names. This lead me to another question - does the Admin Server (I see a lot of this in the "IBM WebSphere V4.0 Advanced edition Security" Redbook) come with an LDAP server?

Thanks for your time
PJ
[ February 11, 2002: Message edited by: Prashanth Joisha ]