Previous Topic: OpenWave Directory Server 6.0.1

Next Topic: Create a SiteMinder 6.0 Policy Store in an Openwave Directory Server

Policy Store Schema Considerations

When manually configuring a policy store on Windows, you can choose one of two .smdif files:

While both files contain the default policy store objects that you import into the policy store, there are a couple of factors to consider when choosing the file that best fits the requirements of your production environment:

The following table summarizes the differences between the default web agent configuration parameters in the two files:

Parameter Name

Value in smpolicy.smdif

Value in smpolicy-secure.smdif

BadCssChars

No value

<, >, ', ;, ), (, &, +, %00

BadQueryChars

No value

<, >, ', ;, ), (, &, +, %00

BadUrlChars

//, ./, /., /*, *., ~, \, %00-%1f,

%7f-%ff, %25

smpolicy.smdif values plus:

<, >, ', ;, ), (, &, +

IgnoreExt

.class, .gif, .jpg, .jpeg, .png, .fcc, .scc, .sfcc, .ccc, .ntc

smpolicy.smdif values plus .jsp

ValidTargetDomain

Note: This parameter does not exist in smpolicy.smdif.

Provide a valid redirection domain as follows:

validtargetdomain=".example.com"

Note: Before using smpolicy-secure.smdif, you must initialize the new web agent configuration parameter: validtargetdomain.

Important! Before running a SiteMinder utility or executable on Windows Server 2008, open the command line window with Administrator permissions. Open the command line window this way, even if your account has Administrator privileges. For more information, see the release notes for your SiteMinder component.