Can the Policy Store administrator rights or the store itself be read only?

Products

• SITEMINDER

Issue/Introduction

The customer was setting up a DR environment in which the Policy Store was replicated to another instance in a new datacenter.

In order to maintain consistency with the original PROD environment, the DR Policy Store was configured as read only.

However, during the DR testing, the Policy Server was not able to start.

Environment

SiteMinder Policy Server R12.8 ANY

Policy Store any LDAP or ODBC

Resolution

If the Policy Server is unable to write to the Policy Store, it will be unable to start as it needs write permissions for various tasks such as:

- writing server commands

- writing agent commands

- saving configuration changes via XPS, the AdminUI etc

- creating the SiteMinder super user

- importing the base objects and data definitions