Sun Identity Manager 8.1 Resources Reference

Support for Additional Segments

The RACF LDAP adapter can be configured to support attributes that are not in the segments supported by default.

ProcedureConfiguring the RACF LDAP Resource Adapter to Support Attributes

  1. Create an AttrParse object that parses the segment. See Chapter 49, Implementing the AttrParse Object for information about defining custom AttrParse objects. Example AttrParse objects are defined in $WSHOME/web/sample/attrparse.xml.

  2. Add a ResourceAttribute element to the RACF LDAP resource object. For example:


    <ResourceAttribute name=’OMVS Segment AttrParse’ displayName=’OMVS Segment AttrParse’ 
       description=’AttrParse for OMVS Segment’ value=’Default RACF OMVS Segment AttrParse’>
    </ResourceAttribute>

    This example adds a field labeled OMVS Segment AttrParse to the Resource Parameters page. The value assigned to the name attribute must be of the form SegmentName Segment AttrParse.

  3. Add an element to the RACF LDAP resource object that defines a custom account attribute.


    <AccountAttributeType id=’32’ name=’OMVS Mem Max Area Size’ syntax=’int’ 
      mapName=’OMVS.MMAPAREAMAX’ mapType=’int’>
    </AccountAttributeType>

    The value of the mapName attribute must be of the form SegmentName.AttributeName. When the adapter detects a mapName in this format, it asks the resource for the specified segment and uses the object specified in the SegmentName Segment AttrParse field to parse it.