Policy Server Guides › Policy Server Administration Guide › Policy Server Tools › XPSSecurity

XPSSecurity

XPSSecurity is an interactive command-line utility that allows administrators and members of operations to create and delete administrators and edit their rights. To use XPSSecurity, you must be an administrator with XPSSecurity rights.

Syntax

XPSSecurity has the following format:

XPSSecurity [-?] [-vT | -vI | -vW | -vE | -vF]
[-l log_path] [-e err_path] [-r rec_path]

Parameters

XPSSecurity includes the following options:

-?

(Optional) Displays help information for this utility.

-vT | -vI | -vW | -vE | -vF

(Optional) Specifies when to log error information to the error file and how much information to log.

-vT

Logs detailed information so that you can TRACE errors.

-vI

Logs information in case there is an error.

-vW

Logs error information in the event of a WARNING, ERROR, or FATAL error.

-vE

Logs error information in the event of an ERROR or FATAL error.

-vF

Logs error information in the event of a FATAL error.

-l

(Optional) Outputs logging information to the specified location.

Default: stdout

-e

(Optional) Outputs error information to the specified location.

Default: stderr

-r

(Optional) Outputs a record of the session to the specified location.

Make an Administrator a Super User

A super user is defined when the connection to the external administrator store is configured. The super user is used to create and manage all other administrator accounts. If the super user is unavailable, use XPSSecurity to make any user in the external store a super user.

To make an administrator a super user

1. Log into the Policy Server host system with a CA SiteMinder® administrator account that has XPSSecurity rights.

   Note: If an administrator with XPSSecurity rights is not available, you can log in as one the following:

   • (Windows) the system administrator
   • (UNIX) root
   • the user who installed the Policy Server
2. Be sure that the XPSSecurity utility is located in policy_server_home/bin.

   policy_server_home

   Specifies the Policy Server installation path.

   Note: If the utility is not present, you can find it in the Policy Server installation media available on the Support site.

3. Open a command window and run the following command:

   XPSSecurity
   

   The main menu appears.

4. Type A and press Enter.

   The administrator menu lists the CA SiteMinder® administrators in the external store. Each administrator is prefixed with a number.

5. Type the number of the administrator and press Enter.

   The administrator menu displays attributes specific to the administrator you chose. Each attribute is prefixed with a number.

6. Type 2 and press Enter.

   The administrator menu updates with flag settings.

7. Type a question mark (?) and press Enter.

   The Disabled and Super User flags appear. Each flag is prefixed with a number.

8. Type 2 and press Enter.

   The Super User flag is selected.

9. Type Q and press Enter.

   The administrator menu displays attributes specific to the administrator. The Flags attribute is set to Super User.

10. Type U and press Enter.

    The administrator record is updated.

11. Type Q and press Enter.

    The administrator menu lists the CA SiteMinder® administrators in the external store. The administrator you chose appears as a super user.

12. Type Q and press Enter for the next two prompts to exit the utility.

    The administrator you chose is a super user. Use this administrator to restore modified or deleted permissions.

More information:

Locate the Installation Media