Previous Topic: Point the Policy Server to the Directory ServerNext Topic: Import the Policy Store Data Definitions


Create the Policy Store

To configure an OpenLDAP directory server as a policy store, import the base policy store data.

To create the policy store

  1. Start the Policy Server Management Console.
  2. Click the Data tab.
  3. Type the root DN in the Root DN field, and click OK.

    The root DN is saved.

  4. Go to policy_server_home/bin.
    policy_server_home

    Specifies the Policy Server installation path.

  5. Run the following command:
    smreg -su adminPW
    

    The administrator's password is saved.

  6. Run the following command:
    smobjimport -ipolicy_server_home\db\smdif\smpolicy.smdif -dsiteminder_super_user_name  -wsiteminder_super_user_password -v
    
    -i

    Specifies the name of the import file.

    -dsiteminder_super_user_name

    Specifies the name of the SiteMinder Super User account.

    -wsiteminder_super_user_password

    Specifies the password for the SiteMinder Super User account.

    -v

    Turns on tracing and outputs error, warning, and comment messages.

    The base policy store data is imported from the file smpolicy.smdif.

  7. Run the following command:
    smobjimport -ipolicy_server_home\db\smdif\ampolicy.smdif
    -dsiteminder_super_user_name -wsiteminder_super_user_password -f -v -l -c
    
    -dsiteminder_super_user_name

    Specifies the name of the SiteMinder Super User account.

    -wsiteminder_super_user_password

    Specifies the password for the SiteMinder Super User account.

    -f

    Overrides duplicate objects

    -v

    Turns on tracing and outputs error, warning, and comment messages in verbose format so that you can monitor the status of the import.

    Default value: stdout

    -l

    Creates a log file.

    -c

    Indicates that the smdif input file contains unencrypted data.

    smobjimport imports the policy store objects. These objects are automatically imported to the appropriate locations.

    Note: Importing ampolicy.smdif makes available Federation Security Services, Web Service Variables, and eTelligent Rules functionality that is separately licensed from SiteMinder. If you intend on using the latter functionality, contact your CA account representative for more information on licensing.

Note: You can now import policy store data definitions.