Sun Java System Access Manager 7.1 Postinstallation Guide

Directory Server Configuration Variables

For the versions of Directory Server supported by Access Manager 7.1, see the Sun Java System Access Manager 7.1 Release Notes. This section describes the Directory Server configuration variables.

Table 2–9 Directory Server Configuration Variables

Variable 

Description 

DIRECTORY_MODE

Directory Server modes: 

1 = Use for a new installation of a Directory Information Tree (DIT). 

2 = Use for an existing DIT for multiple Access Manager instances on either the same host server or on multiple host servers. The naming attributes and object classes are the same, so the configuration scripts load the installExisting.ldif and umsExisting.xml files.

The configuration scripts also update the LDIF and properties files with the actual values entered during configuration (for example, BASE_DIR, SERVER_HOST, and ROOT_SUFFIX).

This update is also referred to as “tag swapping,” because the configuration scripts replace the placeholder tags in the files with the actual configuration values. 

3 = Use for an existing DIT when you want to do a manual load. The naming attributes and object classes are different, so the configuration scripts do not load the installExisting.ldif and umsExisting.xml files. The scripts perform tag swapping (described for mode 2).

You should inspect and modify (if needed) the LDIF files and then manually load the LDIF files and services. 

4 = Use for an existing multiple-server installation. The configuration scripts do not load the LDIF files and services, because the operation is against an existing Access Manager installation. The scripts perform tag swapping only (described for mode 2) and add a server entry in the platform list. 

5 = Use for an existing upgrade. The scripts perform tag swapping only (described for mode 2). 

Default: 1 

USER_NAMING_ATTR

User naming attribute: Unique identifier for the user or resource within its relative name space. Default: uid

To specify another value such as the user's email attribute (mail) or common name (cn), see Specifying a User Naming Attribute Other Than the User ID (uid).

ORG_NAMING_ATTR

Naming attribute of the user’s company or organization. Default: o

ORG_OBJECT_CLASS

Organization object class. Default: sunismanagedorganization

USER_OBJECT_CLASS

User object class. Default: inetorgperson

DEFAULT_ORGANIZATION

Default organization name. Default: none