Sun Java System Access Manager 7.1 Postinstallation Guide

Changing the Naming Attribute Before Running the amconfig Script

In this scenario, you install Access Manager with the Java ES installer Configure Later option and then run the amconfig script to set the user naming attribute (as well as other attributes). You want to change the user naming attribute before you run the amconfig script.

Procedure To Specify a User Naming Attribute Other Than the User ID (uid)

  1. In the amsamplesilent file (or copy of the file), set the USER_NAMING_ATTR variable to the new attribute you want to use.

    For example, for the mail attribute: USER_NAMING_ATTR=mail

    Specify a valid naming attribute supported by Directory Server and in the default Access Manager supported naming attribute list. Or, if the naming attribute you want to use is not in the list of Access Manager supported attributes, add the attribute to the ums.xml and amUser.xml files, as described in the following steps.

  2. In the ums.xml file, add the attribute to the list in the CreationTemplate for the BasicUser. For example, to use the mail attribute:

    <SubConfiguration name="CreationTemplates" >
                        <SubConfiguration name="BasicUser" id="CreationUmsObjects">
                            <AttributeValuePair> <Attribute name="name" />
                            <AttributeValuePair> <Attribute name="javaclass" />
                            <AttributeValuePair> <Attribute name="required" />
                            <AttributeValuePair> <Attribute name="optional" />
                            <AttributeValuePair> <Attribute name="namingattribute" />
  3. Also in the ums.xml file, add the attribute to the BasicUserSearch template.

  4. In the amUser.xml file, add the attribute (such as mail) to the <User> schema (if it is not already in the schema).

  5. Run the amconfig script with the amsamplesilent file (or copy of the file) from Step 1.