IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

Active
Directory
[uraf-ad]
stanza
ad-server-config
=
fully_qualified_path
Location
and
file
name
of
the
Active
Directory
registry
activedir.conf
configuration
file.
This
value
is
generated,
but
it
can
be
changed.
The
fully_qualified_path
value
represents
an
alphanumeric,
non-case
sensitive
string.
The
maximum
string
length
for
the
Active
Directory
user
registry
is
256
alphanumeric
characters.
This
stanza
entry
is
required
when
your
user
registry
is
Microsoft
Active
Directory
and
is
required
only
for
configuration
files
other
than
activedir.conf.
Default
value
for
UNIX:
/opt/PolicyDirector/etc/activedir.conf
Default
value
for
Windows:
c:\Program
files\tivoli\Policy
Director\etc\activedir.conf
Example
for
UNIX:
ad-server-config
=
/opt/PolicyDirector/etc/activedir.conf
enabled
=
{yes|no}
Indication
of
whether
Active
Directory
is
being
used
as
the
user
registry.
Valid
values:
yes
Indicates
that
Active
Directory
is
the
user
registry.
no
Indicates
that
Active
Directory
is
not
the
user
registry.
Anything
other
than
yes,
including
a
blank,
is
interpreted
as
no.
This
stanza
entry
is
required
when
your
user
registry
is
Microsoft
Active
Directory.
Default
value:
no
Example:
enabled
=
yes
multi-domain
=
{true|false}
Indication
of
whether
the
domain
is
a
single-domain
or
multi-domain
configuration.
You
select
the
value
at
the
time
the
runtime
is
configured
for
Tivoli
Access
Manager.
The
value
is
filled
in
automatically,
based
on
information
supplied
during
the
runtime
configuration.
Valid
values:
true
For
multiple
Active
Directory
domains.
false
For
a
single
Active
Directory
domain.
This
stanza
entry
is
required
when
your
user
registry
is
Microsoft
Active
Directory.
There
is
no
default
value.
Example:
multi-domain
=
true
hostname
=
hostname
400
IBM
Tivoli
Access
Manager
for
e-business:
WebSEAL
Administration
Guide