I'd like to find documentation about 2 things : - describes which SQL Query is executed when policy server set the response; - when Policy Server does the search of a user from User Directory definition; Where can I find it ?
At first glance, our documentation gives guide line on the SQL statement sent for different use case : SQL Query Scheme Dialog "SQL Query Scheme Settings The SQL Query Scheme dialog contains fields that describe SQL queries that that Policy Server uses to access user and group information. The default values for each query field correspond to the CA Single Sign-on sample relational database schema called SmSampleUsers. You must change the table and column names if you are using a different database schema. [...]" https://docops.ca.com/ca-single-sign-on/12-8/en/using/administrative-ui/user-directory-dialog/sql-query-scheme-dialog Even if that documentation is related to 12.8, this should apply to Policy Server 12.52SP1. Following that documentation, when Policy Server searches a User in an ODBC Store for authentication, then it should send something equivalent to : select Name from SmUser where Name = '%s' and Password = '%s' When it looks for a user property (which might be the case when triggering a response), then it should send something like : select %s from SmUser where Name = '%s' More, to get a more precise view on SQL statement sent depending the different operation, you might configure the Policy Server profiler to get the full SQL and ODBC traces with all the data field set in the Profiler. This should give you the SQL statement.
KB : KB000111227