Installation and Upgrade Guides › Policy Server Installation Guide › Configuring LDAP Directory Servers as a Policy or Key Store › CA Directory as a Policy Store › How to Configure the Policy Store › Create the Policy Store Schema

Create the Policy Store Schema

You create the policy store schema so the directory server can function as a policy store and store SiteMinder objects.

To create the Policy Store schema

1. Copy the following files into the CA Directory DXHOME\config\schema directory:
   • netegrity.dxc
   • etrust.dxc
   • DXHOME

     Specifies the Directory Server installation path.

   Note: The netegrity.dxc file is installed with the Policy Server in policy_server_home\eTrust. The etrust.dxc file is installed with the Policy Server in siteminder_home\xps\db.

   • siteminder_home

     Specifies the policy server installation path.

2. Copy the following files into the CA Directory DXHOME\bin directory.
   • etrust_schema.txt
   • schema.txt

   Note: The etrust_schema.txt file is installed with the Policy Server in policy_server_home\xps\db. The schema.txt file is installed with the Policy Server in siteminder_home\eTrust.

3. Create a new SiteMinder schema file by copying the default.dxg schema file and renaming it.

   Note: The default.dxg schema file is located in DXHOME\config\schema\default.dxg.

   Example: copy the default.dxg schema file and rename the copy to smdsa.dxg

4. Add the following lines to the bottom of the new SiteMinder schema file:

   #CA Schema
   

   source "netegrity.dxc";
   

   source "etrust.dxc";
   

5. Edit the DSA's DXI file (DSA_Name.dxi) by changing the schema from default.dxg to the new SiteMinder schema file.
   • DSA_Name

     Represents the name of the DSA you created using the dxnewdsa utility.

   Note: the DSA's DXI file is located in DXHOME\config\servers.

6. Add the following lines to the end of the DSA's DXI file:
   • r8.1

     # cache configuration
     set max-cache-size = 100;
     set cache-index = all-attributes;
     set cache-attrs = all-attributes;
     set cache-load-all = true;
     set lookup-cache = true;
     set ignore-name-bindings = true;
     

   • r12.x

     # cache configuration
     set max-cache-size = 100;
     set cache-attrs = all-attributes;
     set cache-load-all = true;
     set ignore-name-bindings = true;
     

   Note: The max-cache-size entry is the total cache size in MB. Adjust this value based on the total memory available on the CA Directory server and overall size of the policy store.

7. Open the DSA's default DXC file (default.dxc).

   Note: The default DXC file is located in DXHOME\dxserver\config\limits.

8. Edit the settings to match the following:
   • r8.1

     # size limits
     set max-users = 1000;
     set credits = 5;
     set max-local-ops = 1000;
     set max-dsp-ops = 1000;
     set max-op-size = 1000;
     set multi-write-queue = 20000;
     

   • r12.x

     # size limits
     set max-users = 1000;
     set credits = 5;
     set max-local-ops = 1000;
     set max-op-size = 1000;
     set multi-write-queue = 20000;
     

   Note: Editing the size limits settings prevents cache size errors from appearing in your CA Directory log files.

9. Save the DXC file.
10. As the DSA user, stop and restart the DSA using the following commands:

    dxserver stop DSA_Name
    dxserver start DSA_Name
    

    • DSA_Name

      Specifies the name of the DSA.

    The policy store schema is created.