Overview

If Access Manager 7 2005Q4 is installed in Realm Mode, delegation privileges are used to determine access permissions, and therefore some Directory Server ACIs are not needed. Access Manager 7 2005Q4 patch 5 allows you to remove the unnecessary ACIs by running the amtune-directory script, which is generated by the amtune-prepareDSTuner script. This script read a list of ACIs from the remacis.ldif file and then calls the ldapmodify utility to remove them.

The Access Manager tuning scripts are available in the following directory, depending on your platform:

• Solaris systems: AccessManager-base/SUNWam/bin/amtune

• Linux and HP-UX systems: AccessManager-base/identity/bin/amtune

• Windows systems: AccessManager-base\identity\bin\amtune

AccessManager-base is the base installation directory: /opt on Solaris systems and /opt/sun on Linux and HP-UX systems.

On Windows systems, AccessManager-base is javaes-install-directory\AccessManager. For example: C:\Program Files\Sun\AccessManager

Access Manager 7 2005Q4 patch 5 allows you to run the tuning scripts with either a password file or the password string as a command-line argument.

For more information about the Access Manager tuning scripts, see the Sun Java System Access Manager 7 2005Q4 Performance Tuning Guide.