Sun Java System Access Manager Policy Agent 2.2 Guide for IBM WebSphere Portal Server 6.0

Policy Client Properties

com.sun.identity.agents.server.log.file.name

com.sun.identity.agents.logging.level

com.sun.identity.agents.notification.enabled

com.sun.identity.agents.notification.url

com.sun.identity.agents.polling.interval

com.sun.identity.policy.client.cacheMode

com.sun.identity.policy.client.booleanActionValues

com.sun.identity.policy.client.resourceComparators

com.sun.identity.policy.client.clockSkew

· com.sun.identity.agents.server.log.file.name

Hot-swap enabled: No

This property specifies the name of the log file for logging messages to Access Manager.

· com.sun.identity.agents.logging.level

Hot-swap enabled: No

This property specifies the level of remote policy logging. The following are valid values for this property:

ALLOW

DENY

BOTH

NONE

· com.sun.identity.agents.notification.enabled

Hot-swap enabled: No

This property is a flag that specifies whether notifications are enabled or disabled for the remote policy client.

· com.sun.identity.agents.notification.url

Hot-swap enabled: No

This property specifies the notification URL for the remote policy client.

Key Properties Affecting This Property

This property is used if notification is enabled for a remote policy client property, which occurs when the following property is set as shown:

com.sun.identity.agents.notification.enabled = true

· com.sun.identity.agents.polling.interval

Hot-swap enabled: No

This property specifies the duration in minutes after which the cached entries are refreshed by the remote policy client.

· com.sun.identity.policy.client.cacheMode

Hot-swap enabled: No

This property specifies the mode of caching to be used by the remote policy client. The following are valid values for this property:

subtree

self

The subtree value is preferable for a small number of policy rules. In all other cases, the self value is preferable.

· com.sun.identity.policy.client.booleanActionValues

Hot-swap enabled: No

This property specifies boolean action values for policy action names. Assign values to this property using the following format:

serviceName|actionName|trueValue|falseValue

· com.sun.identity.policy.client.resourceComparators

Hot-swap enabled: No

This property specifies resource comparators to be used for different service names.

· com.sun.identity.policy.client.clockSkew

Hot-swap enabled: No

This property specifies the time in seconds which is allowed to accommodate the time difference between the Access Manager machine and the remote policy client machine.