Identity Broker Documentation Index
Configuration Reference Home

LDAP Policy Store

The LDAP Policy Store is a Policy Store implementation that uses an UnboundID Identity Data Store as the backend to store the policy data.

Parent Component
Relations To this Component
Properties
dsconfig Usage

Parent Component

The LDAP Policy Store component inherits from the Policy Store

Relations from This Component

The following components have a direct aggregation relation from LDAP Policy Stores:

Properties

The properties supported by this managed object are as follows:


Basic Properties: Advanced Properties:
↓ description  None
↓ policy-store-base-dn
↓ load-balancing-algorithm

Basic Properties

description

Description
A description for this Policy Store
Default Value
None
Allowed Values
A string
Multi-Valued
No
Required
No
Admin Action Required
None. Modification requires no further action

policy-store-base-dn

Description
Specifies the base DN for the LDAP Policy Store where policy data will be stored.
Default Value
None
Allowed Values
A valid DN.
Multi-Valued
No
Required
Yes
Admin Action Required
None. Modification requires no further action

load-balancing-algorithm

Description
Specifies the load-balancing algorithm that will be used to communicate with the set of servers available to access the Policy Store.
Default Value
None
Allowed Values
The DN of any Load Balancing Algorithm. The associated load balancing algorithm must be enabled.
Multi-Valued
No
Required
Yes
Admin Action Required
None. Modification requires no further action


dsconfig Usage

To list the configured Policy Stores:

dsconfig list-policy-stores
     [--property {propertyName}] ...

To view the configuration for an existing Policy Store:

dsconfig get-policy-store-prop
     --store-name {name}
     [--tab-delimited]
     [--script-friendly]
     [--property {propertyName}] ...

To update the configuration for an existing Policy Store:

dsconfig set-policy-store-prop
     --store-name {name}
     (--set|--add|--remove) {propertyName}:{propertyValue}
     [(--set|--add|--remove) {propertyName}:{propertyValue}] ...

To create a new LDAP Policy Store:

dsconfig create-policy-store
     --store-name {name}
     --set policy-store-base-dn:{propertyValue}
     --set load-balancing-algorithm:{propertyValue}
     [--set {propertyName}:{propertyValue}] ...

To delete an existing Policy Store:

dsconfig delete-policy-store
     --store-name {name}