How to control authorization cache at policy server?

Document ID : KB000011029
Last Modified Date : 14/02/2018
Show Technical Document Details

What does the registry key DsInfoEnabled used for?

CA Single Sign-On (SiteMinder) Policy Server : r12.5 and above

This key provides information about User authorization cache parameters that cannot all be set in smconsole. Only the User Authorization cache size can be set in the SMConsole > Settings Tab > Performance. 


Name: DsInfoEnabled
Detail: Specifies whether User Authorization cache is enabled or disabled. DWORD=1 implies that User Authorization cache is enabled.
Default Value: 0
Range: 0-3
Pre-existing: Yes

The values have the following meaning:


0: Cache Disabled.
1: Cache All.
2: Cache entries if given policy is applicable irrespective of the authorization result. Policy applicable doesn't mean authorization is successful. Authorization can be failed due to IP restriction or time restriction or user namespace restriction etc.
3: Cache entries only when given policy is not applicable for user