This section contains the following topics:
Policy Server Settings Overview
Configure Policy Server Settings
The Policy Server allows you to configure a number of general settings that determine the way it behaves and performs from the Policy Server Management Console Settings tab:
To configure general Policy Server settings
Important! If you are accessing this graphical user interface on Windows Server 2008, open the shortcut with Administrator permissions. Use Administrator permissions even if you are logged in to the system as an Administrator. For more information, see the release notes for your SiteMinder component.
Note: For more information about the settings and controls on this tab, click Help, Management Console Help.
The Policy Server uses three separate TCP ports to communicate with SiteMinder Agents for authentication, authorization, and accounting.
To enable or disable these Agent communication ports, as well as change the TCP port numbers used for each function, use the controls in the Access Control group box on the Management Console Settings tab.
The Policy Server uses a TCP port to communicate with the Administrative UI to allow browser-based policy management.
To enable or disable and change the TCP port number used to communicate with the Administrative UI, as well as specifying a timeout value for administrative inactivity, use the controls in the Administration group box on the Management Console Settings tab.
To specify the maximum number of Policy Server threads, and the idle timeout for a connection to the Policy Server, use the controls in the Connection Options group box on the Management Console Settings tab.
To configure cache and thread settings to tune Policy Server performance, use the Performance group box on the Management Console Settings tab.
To specify settings to enable support of RADIUS components in your deployment, use the RADIUS group box on the Management Console Settings tab.
By default the OneView Monitor runs locally on the Policy Server that it is monitoring.
To configure the monitor to accept connections from other Policy Servers to be monitored remotely or to specify a central remote Policy Server that is to monitor all Policy Servers in a cluster, use the OneView Monitor group box on the Management Console Settings tab.
SiteMinder automatically synchronizes Policy Data using the XPSSweeper tool. You can change how often this tool runs by setting the following parameter:
Specifies the days and times (hour and minute) at which the XPSSweeper process runs.
Default: Mondays at 08:30
Limits: GMT Time zone using the 24-hour clock. Separate multiple entries with commas or spaces
Example: Mon@13:30,Tue@14:00
Note: If you do not have write access to the SiteMinder binary files (XPS.dll, libXPS.so, libXPS.sl), an Administrator must grant you permission to use the related XPS command line tools using the Administrative UI or the XPSSecurity tool.
To reschedule the synchronization of the SiteMinder databases
xpsconfig
The tool starts and displays the name of the log file for this session, and a menu of choices opens.
xps
A list of options appears.
8 (AutosweepSchedule)
The current schedule for the XPSSweeper tool appears.
Mon@13:30,Tue@14:00
The new and old settings appear. The values you added are shown at the bottom of the settings as a "pending value."
Your changes are saved and the command prompt appears.
Copyright © 2012 CA.
All rights reserved.
|
|