Extending/Creating CA e-trust directory schema

For CA Identity Manager user e-trust directory is must to use ldap. In the post I am writing few basic things which are require to know in CA-etrust Directory

1. Creating new schema -

After you install the etrust directory open the command prompt and run the following command

dxnewdsa <> <> "<>"

example

dxnewdsa corpstore 11389 "dc=com"

where "dc=com" is root dn
corpstore is directory name and 11389 is the port number

2. Extending the e-trust scehma

for extending the etrust schema create a new file with extenstion .dxc. The contents of file will be in following format

schema set attribute (1.1) = {

name = employeeID

ldap-names = employeeID

syntax = caseIgnoreString

single-valued

};

schema set object-class (1.1) ={

name = CAPerson

ldap-names = CAPerson

subclass-of inetOrgPerson

must-contain objectclass

may-contain

employeeID

};



The syntax is very simple in the first section you have to write all the attributes with schema set attribute(1.2) and then the properties of the attribute and in the second section write the name of the new class and the attribute comma separated after "may contain"
After the file is created add the new schema file in default.dxg file in schema folder