Configuration Guides › Policy Server Configuration Guide › User Directories › How to Configure a CA Directory User Directory Connection › Enable Caching for a CA Directory User Store

Enable Caching for a CA Directory User Store

You can improve SOA Security Manager authentication and authorization performance for large user stores by enabling the CA Directory DXcache feature. A 5 MB user store is considered large.

To enable caching

1. As the dsa user, edit the user store DSA’s DXI file (for example, <dxserver_install>\config\servers\eTrustDsa.dxi) and add the following lines to the end of the file:

   # cache configuration
   set max-cache-size = 100;
   set cache-index = commonName, surname, objectClass;
   set cache-attrs = all-attributes;
   set cache-load-all = true;
   set lookup-cache = true;
   

   Note: The max-cache-size entry is the total cache size in MB. Adjust this value based on the total memory available on the CA Directory server and overall size of the user store. In addition, set the cache-index fields to those fields used by SOA Security Manager to perform a user search in the user store. For example, if users are authenticated and authorized based on their common name (cn=*), make sure that the commonName is set in the cache-index.

2. As the dsa user, stop and restart the user DSA to allow the DXcache configuration changes to take effect:

   dxserver stop eTrustDsa
   dxserver start eTrustDsa