See the documentation appropriate for the LDAP server which you are using. LDAP servers usually allow you to install multiple files (LDIF), each containing different objects in the LDAP hierarchy. Structural objects higher in the directory tree must be installed before objects that are contained below them. Check for any error messages as each LDIF is installed. Some LDAP servers interpret two consecutive blank lines as end of file. Ensure that all of the objects in the LDIF have been installed by the LDAP server.
When starting the Policy Agent, first check for any error messages issued to the console. Message EZZ8434I indicates something is wrong with the Policy Agent environment. Message EZZ8438I indicates a syntax or semantic error in the policy definitions. Messages EZZ8439I and EZZ8440I indicate a problem with the LDAP server configuration or the server itself. For more information on diagnosing Policy Agent problems, see z/OS Communications Server: IP Diagnosis Guide. Use the UNIX pasearch command to display policy definitions. The output from this command indicates whether or not policy rules are active, and shows the parsed results of the policy definition attributes. One thing to note is that the Policy Agent is designed to ignore unknown attributes, so misspelled attributes will result in default values being used. The pasearch output can be used to verify that policies are correctly defined.
The import policy configuration files are parsed only once and always start with new policies. Any syntax or semantic errors in the import policy definitions are reported to the import requester, and result in message EZZ8438I being issued. For more information about diagnosing Policy Agent problems, see z/OS Communications Server: IP Diagnosis Guide.