Installation and Upgrade Guides › Directory Configuration Guide › OpenLDAP Server › How to Configure the Directory Server as a Policy Store › Create the Policy Store

Create the Policy Store

To configure an OpenLDAP directory server as a policy store, import the base policy store data.

To create the policy store

1. Start the Policy Server Management Console.
2. Click the Data tab.
3. Type the root DN in the Root DN field, and click OK.

   The root DN is saved.

4. Go to policy_server_home/bin.
   • policy_server_home

     Specifies the Policy Server installation path.

5. Run the following command:

   smreg -su adminPW
   

   The administrator's password is saved.

6. Run the following command:

   smobjimport -ipolicy_server_home\db\smdif\smpolicy.smdif -dAdminDN -wAdminPW -v
   

   • -i

     Specifies the name of the import file.

   • -d AdminDN

     Specifies the name of an LDAP user with privileges to create a new LDAP schema in the LDAP directory.

   • -w AdminPW

     Specifies the password of an LDAP user with privileges to create a new LDAP schema in the LDAP directory.

   • -v

     Turns on tracing and outputs error, warning, and comment messages.

   The base policy store data is imported from the file smpolicy.smdif.

7. Run the following command:

   smobjimport -ipolicy_server_home\db\smdif\ampolicy.smdif
   -dsiteminder_super_user_name -wsiteminder_super_user_password -f -v -l -c
   

   • -dsiteminder_super_user_name

     Specifies the name of the SiteMinder Super User account.

   • -wsiteminder_super_user_password

     Specifies the password for the SiteMinder Super User account.

   • -f

     Overrides duplicate objects

   • -v

     Turns on tracing and outputs error, warning, and comment messages in verbose format so that you can monitor the status of the import.

     Default value: stdout

   • -l

     Creates a log file.

   • -c

     Indicates that the smdif input file contains unencrypted data.

   smobjimport imports the policy store objects. These objects are automatically imported to the appropriate locations.

   Note: Importing ampolicy.smdif makes available Federation Security Services, Web Service Variables, and eTelligent Rules functionality that is separately licensed from SiteMinder. If you intend on using the latter functionality, contact your CA account representative for more information on licensing.

Note: You can now import policy store data definitions.