Identity Manager 4.0.1 Driver for Scripting Implementation ... - NetIQ

Example 2:
EXEC "$cmd"
if [ $? -eq 0 ]; then
if [ -z "$password" ]; then
# created, but no password
STATUS_WARNING "User added without password"
fi
fi
Example 3:
EXEC "$cmd"
if [ $? -ne 0 ]; then
STATUS_ERROR "Command failed"
fi
Writing Values
IDMSETVAR is used to set values to return to Identity Manager. For detailed information on how
tus IDMSETVAR, see Section C.1, “UNIX Shell (idmlib.sh) Reference,” on page 143. It is passed a
name and value. In the previous ADD_ASSOCIATION example, IDMSETVAR is used to set the
ASSOCIATION value. You can specify values for items listed in the table above. Generally, the only
time IDMSETVAR is used is to add, modify and delete associations or return information for a
query operation. Other information returned to the shim by the scripts is done through other
command functions, such as STATUS_SUCCESS, which use IDMSETVAR indirectly.
Handling Query Events
For Query events, Identity Manager submits values that define the parameters of a search of the
external application’s identity management system. Queries are usually issued from the Policies you
have defined for your system. The table below specifies values that can be specified in queries. Not
all values are relevant to your external application.
Table 5-3 Values for Queries
Value Name
SCOPE
ASSOCIATION
DEST_DN
CLASS_NAME
EVENT_ID
Description
Specifies what identities will be searched. A base object is specified
with the ASSOCIATION or DEST_DN values (see below). The value
“entry” means that only the base object is searched. The value
“subordinates” means that the immediate subordinates of the base
object are searched. The value “subtree” (the default) indicates that
the base object and all subordinates are searched. The last two
values are only relevant in a hierarchical system.
The base object for the search. If both ASSOCIATION and
DEST_DN have values, ASSOCIATION is used. If neither is
specified, the base object is the root of the identity management
system.
The base object for the search (see also ASSOCIATION above).
The base class of the base object.
An identifier for the event.
Customizing the Scripting Driver 51