Installation and Upgrade Guides › Directory Configuration Guide › IBM Directory Server › IBM Directory Server as a Policy Store › IBM Directory Server › Edit the V3 Matching Rules File

Edit the V3 Matching Rules File

Edit the V3 matching rules (V3.matchingrules) file before you import the policy store schema and the default policy store objects.

To edit the file

1. Open the V3 matching rules file.

   Note: For more information about the V3 matching rules file, see your vendor–specific documentation.

2. Add the following line:

   MatchingRules=(2.5.13.15 NAME
   ‘integerOrderingMatch’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.27)
   

3. Save the file.

   The V3 matching rules file is edited.

Create a Directory Entry and Root Nodes

You use the IBM Tivoli Directory Server Web Administration Tool to create a directory entry and root nodes.

Note: If applicable, create or load a server suffix using the IBM Tivoli Directory Server Configuration Tool.

Follow these steps:

1. Create a directory entry for the root DN of the policy server data.

   Example:

   ou=Nete
   

2. Create the following root nodes under the root DN:

   Example:

   ou=Netegrity,ou=SiteMinder,ou=PolicySvr4,ou=XPS
   

Gather Directory Server Information

Configuring an LDAP directory server as a policy store or upgrading an existing policy store requires specific directory server information. Gather the following information before beginning. You can use the Policy Store Worksheets to record your values.

Note: Policy and data store worksheets are provided to help you gather and record information before configuring or upgrading a SiteMinder data store. You can print the applicable worksheet and can use it to record required information before beginning.

Host information

Specifies the fully-qualified host name or the IP Address of the directory server.

Port information

(Optional) Specifies a non-standard port.

Default values: 636 (SSL) and 389 (non-SSL)

Administrative DN

Specifies the LDAP user name of a user who has privileges to create, read, modify, and delete objects in the LDAP tree underneath the policy store root object.

Administrative password

Specifies the password for the Administrative DN.

Policy store root DN

Specifies the distinguished name of the node in the LDAP tree where policy store objects are to be defined.

SSL client certificate

Specifies the pathname of the directory where the SSL client certificate database file resides.

Limit: SSL only

More information:

Policy and Data Store Worksheets