Installation and Upgrade Guides › Policy Server Installation Guide › Unattended Installation › How to Run an Unattended Policy Server Install › Viewing the Correct FSS Administrative UI on IIS 7.0 after Using IIS 6.0 › Policy Store

Policy Store

If you set the DEFAULT_POLICYSTORE_CHOICE parameter to true, then set the following:

DEFAULT_POLICYSTORE_TYPE

Specifies the type of store that is to function as the policy store.

Valid values: LDAP and RDB.

LDAP

Specifies an LDAP policy store.

RDB

Specifies an ODBC policy store.

DEFAULT_POLICYSTORE_IP

(LDAP) Specifies the IP address or name of the LDAP directory server host system.

Example: 172.16.0.0

DEFAULT_POLICYSTORE_PORT

(LDAP) Specifies the port on which the LDAP directory server is listening.

Example: 1356.

DEFAULT_POLICYSTORE_ADMINDN

(LDAP) Specifies the LDAP user name of an administrator who has permission to:

• Create schema.
• Create, read, modify, and delete objects in the LDAP tree under the policy store root object.

Example: cn=Directory Manager.

DEFAULT_POLICYSTORE_ADMINPW

(LDAP) Lets you enter a cleartext password for the administrator of the LDAP directory server.

If you comment ENCRYPTED_POLICYSTORE_ADMINPW and uncomment DEFAULT_POLICYSTORE_ADMINPW, then the unattended installer uses the cleartext password from DEFAULT_POLICYSTORE_ADMINPW.

Default: The DEFAULT_POLICYSTORE_ADMINPW parameter is commented out after the initial Policy Server installation.

ENCRYPTED_POLICYSTORE_ADMINPW

(LDAP) Represents the encrypted password for the administrator of the LDAP directory server. This password was entered the last time the Policy Server installer configured the policy store. You can use the existing encrypted value to provide the LDAP administrator password for the new policy store. This password cannot be changed.

Important! Do not modify this password. The password is encrypted. If you comment out the DEFAULT_POLICYSTORE_ADMINPW and uncomment ENCRYPTED_POLICYSTORE_ADMINPW, then the installer uses the encrypted password from ENCRYPTED_POLICYSTORE_ADMINPW.

DEFAULT_POLICYSTORE_ROOTDN

(LDAP) Specifies the root DN of the LDAP directory server.

Example: o=example.com.

DEFAULT_POLICYSTORE_USER_CHOICE

(LDAP) The DEFAULT_POLICYSTORE_ADMINDN parameter requires an LDAP administrator user name that has permission to create schema. By default, the Policy Server uses this account to manage the policy store. An alternate LDAP user account can manage SiteMinder data in the policy store after the policy store is configured. The alternate account must have permission to create, read, modify, and delete objects.

Valid values: true and false.

true

Specifies that an alternate LDAP user account is to manage the policy store after the policy store is configured.

false

Specifies that the LDAP administrator user account identified by DEFAULT_POLICYSTORE_ADMINDN is to manage the policy store after the policy store is configured.

DEFAULT_POLICYSTORE_USERDN

(LDAP) Specifies the DN of the alternate LDAP user account.

Example: uid=SMAdmin, ou=people, o=security.com.

DEFAULT_POLICYSTORE_USERPW

(LDAP) Lets you enter a cleartext password for the alternate LDAP user. If you comment ENCRYPTED_POLICYSTORE_USERPW and uncomment DEFAULT_POLICYSTORE_USERPW, then the unattended installer uses the cleartext password from DEFAULT_POLICYSTORE_USERPW.

Default: The DEFAULT_POLICYSTORE_USERPW parameter is commented out after the initial Policy Server installation.

ENCRYPTED_POLICYSTORE_USERPW

(LDAP) Represents the encrypted password for the alternate LDAP user. This password was entered the last time the Policy Server installer configured the policy store. You can use the existing encrypted value to set the alternate administrator password for the new policy store. This password cannot be changed.

Important! Do not modify this password. This password is encrypted.

If you comment DEFAULT_POLICYSTORE_USERPW and uncomment ENCRYPTED_POLICYSTORE_USERPW, then the installer uses the encrypted password from ENCRYPTED_POLICYSTORE_USERPW.

DEFAULT_INIT_POLICYSTORE_CHOICE

(LDAP/RDB) Specifies if the Policy Server installer should initialize the policy store.

Valid values: true and false.

true

The installer initializes the policy store.

false

The installer does not initialize the policy store.

DEFAULT_SM_ADMINPW

(LDAP/RDB) Lets you enter a cleartext password for the SiteMinder super user account (siteminder).

If you comment ENCRYPTED_SM_ADMINPW and uncomment DEFAULT_SM_ADMINPW, then the installer uses the cleartext password from DEFAULT_SM_ADMINPW.

Default: The DEFAULT_SM_ADMINPW parameter is commented out after the initial Policy Server installation.

ENCRYPTED_SM_ADMINPW

(LDAP/RDB) Represents the encrypted password for the SiteMinder super user (siteminder). This password was entered the last time the Policy Server installer configured the policy store. You can use the existing encrypted value to set the SiteMinder super user password for the new policy store. This password cannot be changed.

Important! Do not modify this password. This password is encrypted.

If you comment DEFAULT_SM_ADMINPW and uncomment ENCRYPTED_SM_ADMINPW, then the installer uses the encrypted password from ENCRYPTED_SM_ADMINPW.

DEFAULT_RDB_DSN

(RDB) Specifies the name of the DSN that the Policy Server installer creates.

DEFAULT_RDB_DBSERVER

(RDB) Specifies the IP address or name of the database host system.

DEFAULT_RDB_DBNAME

(RDB) Specifies one of the following:

• (SQL Server) the named instance or database name of SQL Server database that is to function as the policy store.
• (Oracle) the service name of the Oracle database that is to function as the policy store.

DEFAULT_RDB_PORT

(RDB) Specifies the port on which the database is listening.

DEFAULT_RDB_USER_NAME

(RDB) Specifies the name of the database administrator account that has permission to

• Create schema
• Create, read, modify, and delete objects.

DEFAULT_RDB_DBTYPE

Specifies the type of database that is to function as the policy store.

Valid values: DB_MSSQL and DB_ORACLE.

DB_MSSQL

Specifies a SQL Server policy store.

DB_ORACLE

Specifies an Oracle policy store.

DEFAULT_RDB_PASSWORD

(RDB) Lets you enter a cleartext password for the database administrator.

Default: This parameter is commented out after the initial Policy Server installation.

If you comment ENCRYPTED_RDB_PASSWORD and uncomment DEFAULT_RDB_PASSWORD, then the installer uses the cleartext password from DEFAULT_RDB_PASSWORD.

ENCRYPTED_RDB_PASSWORD

(RDB) Represents the encrypted value of the database administrator password that was entered the last time the installer configured the policy store.

Default: This parameter is uncommented. The installer uses this value, unless you comment this parameter and uncomment DEFAULT_RDB_PASSWORD.

DEFAULT_KEYSTORE_CONFIG

Specifies if the SiteMinder key store is to be collocated with the policy store.

Valid values: true and false.

true

The installer collocates the key store with the policy store.

false

The installer does not configure a key store. You configure a stand–alone key store after configuring the policy store.