Previous Topic: Enabling the Administrator's AccountNext Topic: ACC Support for FIPS and IPv6


Installing Filtering Rules for the Policy Model Database (PMDB)

The following step should be performed after you enable the administrator's account.

The following PMDB filtering rules should be specified for each PMDB on the CA Access Control server if you want to administer the PMDB. These rules prevent internal updates to the pre-defined account __ACCAgt (use two underscores with this account name) from being propagated to the subscribers of the PMDB.

#--------------------------------------------------------------------------------
# ACCESS   ENV.      CLASS     OBJECTS     PROPERTIES   ACTION
#--------------------------------------------------------------------------------
  MODIFY	   eTrust    USER     	__ACCAgt      *          NOPASS
  CREATE	   eTrust    USER    	__ACCAgt      *          NOPASS
  DELETE	   eTrust    USER    	__ACCAgt      *          NOPASS

For example, if the PMDB is for CA Access Control for UNIX, add these rules to the filter file specified in the pmd section of the pmd.ini file for the PMDB. For CA Access Control for Windows, the filter file is specified in the registry for the PMDB. For either platform, create the filter file if it does not exist.

The Utilities Guide for CA Access Control for UNIX and the Administrator Guide for CA Access Control for Windows provide the instructions for setting up filtering rules for PMDB propagation.