Reference Guide › Configuration Files › The seos.ini Initialization File › policyfetcher

policyfetcher

In the [policyfetcher] section, the tokens control the behavior of the policy fetcher daemon (policyfetcher).

check_deployment_tasks

Defines how often, in seconds, policyfetcher checks for new deployment tasks (DEPLOYMENT resources) on the Distribution Host.

Default: 3600 (every 10 minutes)

Limits: A minimum value of 60

deploy_timeout

Defines the number of seconds policyfetcher waits for a deployment or undeployment task to complete on the endpoint.

Default: 900

devcalc_command

Defines the selang command that policyfetcher uses to run the deviation calculation.

Default: start DEVCALC params(-nonotify)

Example: start DEVCALC params(-nonotify -precise)

dh_command_retry_interval

Defines the number of seconds between each DH notification command retry.

Default: 60

endpoint_heartbeat

Defines the frequency at which policyfetcher sends a heartbeat to the Distribution Host (DH). The frequency is a factor of the check_deployment_task setting, and determines how many times policyfetcher checks deployment tasks before it sends a heartbeat. For example, if check_deployment_task is set to the default 600 seconds (10 minutes) and you set this to 6, policyfetcher sends a heartbeat every 3600 seconds (1 hour).

The policyfetcher runs the deviation calculator (start devcalc command) after sending the heartbeat, and then waits 60 seconds for the deviation calculation to complete. After 60 seconds, policyfetcher continues to check that local endpoint information is identical to DH information.

Default: 6

max_deployment_errors

Defines the maximum number of deployment errors that the endpoint sends to the DMS.

Default: 10

max_dh_command_retry

Defines the maximum number of times policyfetcher retries to get update notifications from DH before giving up.

Default: 10

max_dh_retry_cycles

Defines the maximum number of cycles policyfetcher retries to get update notifications from production DHs before moving to disaster recovery DHs.

Default: 5

policy_verification

Specifies whether the policyfetcher daemon verifies new deployment tasks on a backup CA ControlMinder database before executing the tasks.

Valid values:

1 - Run policy verification

0 - Disable policy verification

Default: 0

policyfetcher_enabled

Specifies whether to run the policyfetcher daemon.

Valid values:

1 - Run policyfetcher

0 - Disable policyfetcher

Default: 0

Note: To run policyfetcher on UNIX, specify value 1 for policyfetcher_enabled token. To run policyfetcher on Windows, specify value 1 for policyfetcher_enabled token and enable the registry value at the following location:

HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\AccessControl\Applications\Policyfetcher

More information:

start devcalc Command—Initiate Policy Deviation Calculation