To create a provider organization, one subordinate organization, and an SPA, you need to replace parameters in the custom service-provider template with information specific to your installation.
As you read about these parameters, you can look at a listing of the da.provider.skeleton.ldif shown in Custom Service-Provider Template. Or open the actual ldif file, located in the following directory:
da_base/lib/config-templates
For definitions of the attributes associated with these parameters, see “Chapter 5: Communications Services Delegated Administrator Classes and Attributes (Schema 2)” and “Chapter 3: Messaging Server and Calendar Server Attributes” in the Sun Java System Communications Services Schema Reference.
To create a provider organization and subordinate organization, edit the following parameters:
ugldapbasedn
Root suffix of user/group data in your directory.
Examples:
o=usergroup
dc=red,dc=iplanet,dc=com
maildomain_dn
Complete DN of the mail domain underneath which the provider organization will be created.
Examples:
o=siroe.com, o=usergroup
o=sesta.com,o=SharedDomainsRoot,o=Business,dc=red, \ dc=iplanet,dc=com |
maildomain_dn_str
The mail domain DN with all commas (,) replaced by underscores (_).
For example, if the mail domain DN is
o=siroe.com,o=SharedDomainsRoot,o=Business,dc=red, \ dc=iplanet,dc=com |
The mail domain DN string will be
o=siroe.com_o=SharedDomainsRoot_o=Business_dc=red_ \ dc=iplanet_dc=com |
providerorg
Name of the provider organization. The directory node where the provider organization resides will be given this name.
This parameter is used multiple times in the da.provider.skeleton.ldif template.
Examples:
sunProviderOrgDN: o=MyProviderOrg,o=siroe.com,o=usergroup
o=MyProviderOrg
sunBusinessOrgBase: o=MyProviderOrgdomainsroot, o=usergroup
servicepackage
Name of a service package that can be assigned to users in the organizations subordinate to the provider organization. This is a multivalued parameter.
In the “Provider Organization” section of the da.provider.skeleton.ldif file, you will see the following attribute:
sunIncludeServices: <servicepackage>
For each service package you want to include in the provider organization, add one instance of the sunIncludeServices attribute and servicepackage parameter. Only those service packages listed here can be assigned to users in subordinate organizations.
Example:
sunIncludeServices: gold sunIncludeServices: platinum sunIncludeServices: ruby sunIncludeServices: silver |
If you do not use the sunIncludeServices attribute (if you delete the line containing the servicepackage parameter), all service packages in the directory can be assigned.
domain_name
Domain name that can be assigned to subordinate organizations in the provider organization. This is a multivalued parameter.
In the “Provider Organization” section of the da.provider.skeleton.ldif file, you will see the following attribute:
sunAssignableDomains: <domain_name>
The domain names in the sunAssignableDomains attribute are a subset (some or all) of the names listed in the mail domain organization’s sunPreferredDomain and associatedDomain attributes. (The mail domain is the organization under which this provider organization is created.)
For each domain name you want to include in the provider organization, add one instance of the sunAssignableDomains attribute and domain_name parameter. Only the domain names listed here can be assigned to subordinate organizations.
Example:
sunAssignableDomains: siroe.com sunAssignableDomains: siroe.net sunAssignableDomains: varrius.com sunAssignableDomains: sesta.com sunAssignableDomains: sesta.net |
provider_sub_org
Name of the shared organization in which the SPA user resides. When you install the edited ldif information in the directory, this organization is created as shared and subordinate to the provider organization. It is designated as the organization that contains the SPA user. Other users who are assigned the SPA role for this provider organization must reside in this subordinate shared organization.
In the “Provider Organization” section of the da.provider.skeleton.ldif file, you will see the following attribute:
sunProviderOrgDN: o=<provider_sub_org>,o=<providerorg>,<maildomain_dn> |
The sunProviderOrgDN attribute identifies the organization designated for provider organization users, particularly the SPA user.
Example:
sunProviderOrgDN: o=MySPAUserOrg,o=MyProviderOrg,o=siroe.com,o=usergroup |
preferredmailhost
Machine name of the preferred mail host for the provider organization’s subordinate organization (in which the SPA user resides). You must use a fully qualified domain name (FQDN).
In the “Shared Subordinate Organization” section of the da.provider.skeleton.ldif file, you will see the following attribute:
preferredMailHost: <preferredmailhost>
Example:
preferredMailHost: mail.siroe.com
available_domain_name
Domain name that can be assigned to a user in a particular subordinate organization. This is a multivalued parameter.
The values for available_domain_name are a proper subset of the values given for the sunAssignableDomains: <domain_name> attribute and parameter. Whereas domain_name applies to the entire provider organization, available_domain_name applies to a single subordinate organization.
In the “Shared Subordinate Organization” section of the da.provider.skeleton.ldif file, you will see the following attribute:
sunAvailableDomainNames: <available_domain_name>
For each domain name you want this subordinate organization to inherit from the list of domain names in the provider organization’s sunAssignableDomains attribute, add one instance of the sunAvailableDomains attribute and available_domain_name parameter. Only the domain names listed here can be assigned to the subordinate organization.
Example:
sunAvailableDomainNames: siroe.com sunAvailableDomainNames: siroe.net sunAvailableDomainNames: varrius.com |
available_services
Service package available to a particular subordinate organization. This is a multivalued parameter.
The service packages assigned to the subordinate organization are a subset of those assigned to the entire provider organization with the sunIncludeServices attribute.
In the “Shared Subordinate Organization” section of the da.provider.skeleton.ldif file, you will see the following attribute:
sunAvailableServices: <available_services>
The format of the available_services parameter is
service package name: count |
where count is an integer. If count is absent, the default value is an unlimited number.
For each service package you want this subordinate organization to inherit from the service packages available in the provider organization’s sunIncludeServices attribute, add one instance of the sunAvailableServices attribute and available_services parameter.
Example:
sunAvailableServices: gold:1500 sunAvailableServices: platinum:2000 sunAvailableServices: silver:5000 |
To create an SPA, edit the following parameters:
spa_uid
The user ID for the SPA user.
Example:
uid: user1
spa_password
The password for the SPA user.
Example:
userPassword: x12P3&qrS
spa_firstname
The first name of the SPA user.
Example:
givenname: John
spa_lastname
The last name of the SPA user.
Example:
sn: Smith
spa_servicepackage
The service package assigned to the SPA user. For information about service packages, see Service Packages in Chapter 1, Delegated Administrator Overview.
Example:
inetCos: platinum
spa_mailaddress
The mail address of the SPA user. The domain part of the mail address must be one of the domain values that replace the available_domain_name parameter. That is, it must be a domain that has been made available for use in the subordinate organization in which the SPA user resides. For more information, see Parameters Defining the Provider and Subordinate Organization.
Example:
mail: user1@siroe.com
For instructions in how to edit the custom service-provider template and install the information in your directory, see Steps for Creating a Provider Organization and Service Provider Administrator.