Policy Server Guides › Policy Server Administration Guide › Policy Server Tools › Manage an LDAP Policy Store Using smldapsetup

Manage an LDAP Policy Store Using smldapsetup

The smldapsetup utility allows you to manage an LDAP policy store from the command line. Using smldapsetup, you can configure an LDAP policy store, generate an LDIF file, and remove policy store data and schema.

To use smldapsetup, specify a mode, which determines the action that smldapsetup will perform, and arguments, which contain the values that are used to configure the LDAP server.

The following table contains the modes you can use with smldapsetup and the arguments each mode uses:

To use smldapsetup

1. Navigate to one of the following locations:
   • (Windows) siteminder_home\bin
   • (UNIX) siteminder_home/bin
   • siteminder_home

     Specifies the installed location of SiteMinder.

2. Enter the following command:

   smldapsetup mode arguments
   

   Important! If you are running a SiteMinder utility or executable on Windows Server 2008, be sure to open the command–line window with Administrator permissions, even if you are logged into the system as an Administrator. For more information, see the release notes for your SiteMinder component.

   Example: smldapsetup reg -hldapserver.mycompany.com -d"LDAP User"
   -wMyPassword123 -ro=security.com

   Note: When running smldapsetup, make sure that the LDAP user you specify has the appropriate administrator privileges to modify schema in the LDAP Directory Server. If this user does not have the proper privileges, then the LDAP server will not allow you to generate the policy store schema. After running the smldapsetup command, this user appears in the Admin Username field on the Data tab of the Policy Server Management Console.