Policy Server Guides › Policy Server Configuration Guide › Agents and Agent Groups › Agent Configuration Object Overview › Create an Agent Configuration Object

Create an Agent Configuration Object

The Policy Server installer creates several Agent Configuration Objects for several supported web servers that contain default settings. These sample objects have names, such as IISDefaultSettings or iPlanetDefaultSettings. You can duplicate these default objects and use them as templates for your Agent configuration.

To create an Agent Configuration object

• (Recommended) Copy an existing Agent Configuration Object and modify the parameter values.

  Important! Do not directly modify and use a default object. Always copy the object and then modify it.

• Create a new Agent Configuration object.

Note: We recommend creating a new Agent Configuration Object by copying an existing object and modifying its list of parameters and their values. If you create a new Agent Configuration object without copying an existing one, you must enter all of your parameters and their values manually.

To create an Agent Configuration Object

1. Click Infrastructure, Agent Configuration, Create Agent Configuration.

   The Create Agent Configuration: Search pane opens.

2. Verify that Create a new object is selected, and then click OK.

   The Create Agent Configuration: Name pane opens.

   Note: Click Help for descriptions of settings and controls, including their respective requirements and limits.

3. Type the name and a description of the Agent in the fields on the General group box.
4. Click Add.

   The Create Parameter group box opens.

5. Type the parameter's name and value in the respective fields of the Create Parameter group box.
6. (Optional) Do one of the following:
   • To encrypt the value of the parameter, select the Encrypted check box.
   • To create multiple values for one parameter, do the following:
     1. Click the Multi-value button.
     2. Type a value for the parameter in the Values field.
     3. Click Add.
     4. Repeat Steps b and c until you have added all the values you want.
     5. (Optional) To change the sequence of multiple values, click the up and down arrows. Multiple values are separated by the square symbol () when displayed on the Parameters group box. To delete a value, click the minus sign.

     Note: You cannot enter multiple values for encrypted parameters. A single encrypted value is displayed as a string of symbols on the Parameters group box.

7. Click OK.

   The parameter is added to the list on the Parameters group box.

   Note: Parameters are listed in alphabetical order by name. To edit a parameter on the list, click the right arrow. To delete a parameter from the list, click the minus sign. To add more parameters to the Agent configuration object, repeat Steps 4 through 7.

8. Click Submit.

   The Create Agent Configuration Task is submitted for processing.

Required Agent Configuration Object Parameters

When you configure an Agent Configuration Object, the following parameters must be configured:

• All Agents require DefaultAgentName
• IIS Agents require DefaultUserName and DefaultPassword
• Domino Agents require DominoDefaultUser and DominoSuperUser

Note: More information about these parameters exists in the Web Agent Installation Guide.

Specify the IIS Proxy User

Configuring an IIS Web Agent requires that you configure the following settings in the Agent Configuration Object:

Note: If you plan to use the NTLM authentication scheme, or enable the Windows User Security Context feature, do not specify values for these IIS parameters.

DefaultUserName

Specifies the username of the IIS Proxy user.

DefaultPassword

Specifies the password of the IIS Proxy user.

The DefaultUserName and DefaultPassword identify an existing NT user account that has sufficient privileges to access resources on an IIS Web server protected by SiteMinder. When users want to access resources on an IIS Web server protected by SiteMinder, they may not have the necessary server access privileges. The Web Agent must use this NT user account, which is assigned by an NT administrator, to act as a proxy user account for users granted access by SiteMinder.

Specify the Domino Users

Configuring a Web Agent on a Domino server requires that you edit the following settings to match your system:

DominoDefaultUser

If the user is not in the Domino Directory, and they have been authenticated by SiteMinder against another user directory, this is the name by which the Domino Web Agent identifies that user to the Domino server. This value can be encrypted.

DominoSuperUser

Ensures that all users successfully logged into SiteMinder will be logged into Domino as the Domino SuperUser. This value can be encrypted.

Specify the Agent Name

All Web Agents require that you specify a value for the DefaultAgentName.

DefaultAgentName

Identifies the Agent identity that the Web Agent uses when it detects an IP address on its Web server that does not have an Agent identity assigned to it.

Default: the default Agent name is the name of the installed Web Agent.