Modifying native Access Manager configuration files

You might need to modify native Access Manager configuration files when the files are generated by native Access Manager utilities.

You might need to make the following modifications.
  • The Access Manager client needs at least one authorization server replica. You can create authorization server replicas while defining the configuration of the Access Manager client. Alternatively, you can define replica entries in the [manager] stanza. When defined in the configuration file, the replicas are not shown in the authorization server replica list.
  • Ensure that the obfuscated version of the configuration file is on the DataPower® Gateway and has the same name as the ASCII version. If the names differ, ensure that the file entry in the [configuration-database] stanza defines the location of the obfuscated version of the configuration file in the DataPower file system.
  • In most production environments, LDAP client caching can improve performance. The LDAP client cache stores search results that are similar to the ones obtained from the Access Manager registry. LDAP client caching significantly reduces the number of external network calls to the registry on subsequent requests. You can define limits on the cache behavior in the [ldap] stanza.