Policy Server Guides › Policy Server Configuration Guide › Policies › Policy Processing › Sample SiteMinder Configuration with Nested Realms › User Directory

User Directory

Assume that the policy domain that contains the policies and other relevant Policy Server objects includes a connection to the LDAP user directory in the following diagram.

The sample user directory contains the following:

• o=myorg.org

  This is an organization.

• ou=people

  This is an organizational unit that contains information for all employees.

• employee<n>

  These are directory entries for each employee. Note that a_lvl is a user attribute that indicates an access level. For the purpose of the examples in this section, assume that employee1 and employee2 have an access level of zero (a_lvl=0).

• cn=employees

  This is a group that contains all company employees as its members.

• cn=managers

  This is a group that contains all employees with a managerial title as its members. Note that employee3 and employee4 are the only employees in this group, and their respective access levels are greater than zero.