create-initial-broker-config

Description

Create an initial Identity Broker configuration.

This tool is used to generate a basic Identity Broker configuration. You will be asked to identify one or more UnboundID Identity Data Store instances that will store policy definitions, application registry, and identity service configuration. You can also identify one or more UnboundID Identity Data Store instances where you currently store or intend to store user entries. The UnboundID Identity Proxy is also supported as both a Broker Store and user store proxy.

This tool will configure both the local server and the Broker Store to be shared by other Identity Broker instances. For each Broker Store server identified, an account for Identity Broker access will be created, schema will be updated to allow the storage of Identity Broker operational data, and an initial administrative account will be defined for managing the Broker Store. This tool will also update the schema for each LDAP user store server identified to support additional information for each user entry.

Before configuring the Identity Broker, you should have set up one or more Identity Data Store instances to serve as the Broker Store. You can use a Broker Store server as a user store. If you intend to use a separate Identity Data Store as a user store, make sure that you have access to this server as well.

Examples

create-initial-broker-config --hostname idbroker.example.com --port 1389 \
     --bindDN "cn=Directory Manager" --bindPassword password

Arguments

-V
--version

-H
--help

--help-ldap

--help-sasl

--help-debug

-Z
--useSSL

-q
--useStartTLS

--useNoSecurity

-h {host}
--hostname {host}

-p {port}
--port {port}

-D {bindDN}
--bindDN {bindDN}

-w {bindPassword}
--bindPassword {bindPassword}

-j {bindPasswordFile}
--bindPasswordFile {bindPasswordFile}

-o {name=value}
--saslOption {name=value}

-X
--trustAll

-P {trustStorePath}
--trustStorePath {trustStorePath}

-T {trustStorePassword}
--trustStorePassword {trustStorePassword}

-U {path}
--trustStorePasswordFile {path}

-K {keyStorePath}
--keyStorePath {keyStorePath}

-W {keyStorePassword}
--keyStorePassword {keyStorePassword}

-u {keyStorePasswordFile}
--keyStorePasswordFile {keyStorePasswordFile}

-N {nickname}
--certNickname {nickname}

--propertiesFilePath {propertiesFilePath}

--noPropertiesFile

--script-friendly

--brokerTrustStorePath {trustStorePath}

--brokerTrustStorePassword {trustStorePassword}

--brokerTrustStorePasswordFile {path}