To sign on to the administrative console, use the initial root user DN specified during setup (by default cn=Directory Manager).

You can use the dsconfig command or the administrative console to create additional root DN users in cn=Root DNs,cn=config. These new users require the fully qualified DN as the username, such as cn=new-admin,cn=Root DNs,cn=config. To use a simple username (without the cn= prefix) for signing on to the administrative console, the root DN user must have the alternate-bind-dn attribute configured with an alternate name, such as "admin."

The default link to the administrative console is https://hostname:HTTPport/console/login.

If you need to run the administrative console in an external container, such as Tomcat, you can install a separate package (/server-root/resource/ according to that container's documentation.


The default session timeout for the console is 24 hours. When this duration is exceeded, all inactive users are signed off automatically.

To set a different timeout value, configure the server.sessionTimeout application parameter, which specifies the timeout duration in seconds. You can set the value as an init parameter either in the console or on the command line, as shown below.

For changes to take effect, restart the HTTP(S) Connection Handler or the server.


  1. Go to Web Application Extensions > Console.
  2. Use the Init Parameter field.

Command line

  • The following example uses a value of 1800 seconds (30 minutes).
    dsconfig set-web-application-extension-prop --no-prompt \ 
    --extension-name Console \ 
    --add init-parameter:server.sessionTimeout=1800