Identity Manager 4.0.1 Driver for Scripting Implementation ... - NetIQ

More documents

Recommendations

Info

C.3.3 Publisher Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151 C.3.4 Query Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151 C.3.5 Heartbeat Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151 C.4 Microsoft VBScript (IDMLib.vbs) Reference. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 152 C.4.1 General Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 152 C.4.2 Subscriber Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153 C.4.3 Publisher Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154 C.4.4 Query Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155 C.4.5 Heartbeat Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157 C.5 Windows PowerShell (IDMLib.ps1) Reference . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157 C.5.1 General Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 158 C.5.2 Subscriber Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159 C.5.3 Publisher Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160 C.5.4 Query Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161 C.5.5 Heartbeat Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163 D Technical Details 165 D.1 Using the usdrv-config Command (Linux/UNIX only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165 D.1.1 Setting the Remote Loader and Driver Object Passwords . . . . . . . . . . . . . . . . . . . 165 D.1.2 Configuring the Driver for SSL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166 D.2 Driver Shim Command Line Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166 D.2.1 Options Used to Set Up Driver Shim SSL Certificates . . . . . . . . . . . . . . . . . . . . . . 166 D.2.2 Other Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167 D.3 Publisher Change Log Tool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167 D.4 Files and Directories Modified by Installing the Driver Shim . . . . . . . . . . . . . . . . . . . . . . . . . 170 D.4.1 Driver Shim Directory. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170 D.4.2 /usr/sbin Files (Linux/UNIX only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170 D.4.3 init.d Files (Linux/UNIX only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170 D.4.4 Man Pages (Linux/UNIX only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171 D.4.5 Driver Shim Configuration File. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171 D.4.6 Windows Support Files (Windows only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171 E Documentation Updates 173 E.1 July 27, 2011 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173 E.2 February 3, 2012 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173 8 Identity Manager 4.0.1 Driver for Scripting Implementation Guide
About This Guide This guide describes implementation of the Novell ® Identity Manager 4.0.1 driver for Scripting. The driver synchronizes data from a connected system through a scriptable interface with Identity Manager 4.0, the comprehensive identity management suite that allows organizations to manage the full user life cycle, from initial hire, through ongoing changes, to ultimate retirement of the user relationship. This guide includes the following sections: • Chapter 1, “Overview,” on page 11 • Chapter 2, “Planning for the Scripting Driver,” on page 15 • Chapter 3, “Installing the Scripting Driver,” on page 19 • Chapter 4, “Configuring the Scripting Driver,” on page 25 • Chapter 5, “Customizing the Scripting Driver,” on page 35 • Chapter 6, “Using the Scripting Driver,” on page 117 • Chapter 7, “Securing the Scripting Driver,” on page 121 • Appendix A, “Troubleshooting,” on page 125 • Appendix B, “System and Error Messages,” on page 133 • Appendix C, “IDMLib Reference,” on page 143 • Appendix D, “Technical Details,” on page 165 Audience This guide is for system administrators and others who plan, install, configure, and use the Scripting driver for Identity Manager. It assumes that you are familiar with Identity Manager, Novell eDirectory TM , and the administration of systems and platforms you connect to Identity Manager. Feedback We want to hear your comments and suggestions about this manual and the other documentation included with this product. Please use the User Comments feature at the bottom of each page of the online documentation, or go to the Novell Documentation Feedback site (http://www.novell.com/ documentation/feedback.html) and enter your comments there. Documentation Updates For the most recent version of this guide, visit the Identity Manager 4.0.1 Drivers Documentation Web site (http://www.novell.com/documentation/idm401drivers). Additional Documentation For additional documentation about Identity Manager drivers, see the Identity Manager 4.0.1 Drivers Documentation Web site (http://www.novell.com/documentation/idm401drivers). About This Guide 9
Page 1 and 2: AUTHORIZED DOCUMENTATION Implementa
Page 4 and 5: 4 Identity Manager 4.0.1 Driver for
Page 6 and 7: 5 Customizing the Scripting Driver
Page 10 and 11: For additional documentation about
Page 12 and 13: The Publisher shim of the embedded
Page 14 and 15: 1.2.1 Data Flow Filters and policie
Page 16 and 17: 2.1.2 Supported Operating Systems
Page 18 and 19: Operation [Entry Rights] [All Attri
Page 20 and 21: 8 If you select Perl, you are optio
Page 22 and 23: 3.2.4 Running the Script Service fo
Page 24 and 25: Removing an Instance To remove an i
Page 26 and 27: Table 4-1 Driver Import-Only Parame
Page 28 and 29: Remote Loader Connection Parameters
Page 30 and 31: Property Name Publish Passwords to
Page 32 and 33: Notify the User of Password Synchro
Page 34 and 35: 34 Identity Manager 4.0.1 Driver fo
Page 36 and 37: • What types of identities exist
Page 38 and 39: • Modify-password: An identity’
Page 40 and 41: 5.3 The Connected System Include/Ex
Page 42 and 43: EXCLUDE . . . ENDEXCLUDE You can us
Page 44 and 45: A plus sign (+) indicates that the
Page 46 and 47: Developing a custom driver with She
Page 48 and 49: Table 5-1 Items Name COMMAND ASSOCI
Page 50 and 51: # Removing an association IDMSETVAR
Page 52 and 53: Value Name SEARCH_CLASSES SEARCH_AT
Page 54 and 55: Publisher Script Development Events
Page 56 and 57: Table 5-5 Scripting Driver Paramete
Page 58 and 59:
2. Authenticate by using any userna
Page 60 and 61:
For command line tools, you can con
Page 62 and 63:
Name DEST_ENTRY_ID ADD_{attr_name}
Page 64 and 65:
Returning an Event Status On the Su
Page 66 and 67:
Execute the query against the exter
Page 68 and 69:
Polling for Application Events The
Page 70 and 71:
Parameter Name Driver/Channel Descr
Page 72 and 73:
5.6.3 Deployment The Scripting driv
Page 74 and 75:
Application Event Monitoring You al
Page 76 and 77:
Name REMOVE_REF_attr_name OLD_PASSW
Page 78 and 79:
Table 5-14 STATUS Subroutines Subro
Page 80 and 81:
Table 5-16 Query Values Value Name
Page 82 and 83:
#!/usr/bin/python import os from id
Page 84 and 85:
Parameter Name Driver/Channel Descr
Page 86 and 87:
Deploying a Custom Driver To deploy
Page 88 and 89:
IDMExecuteIO’s first parameter is
Page 90 and 91:
Value SRC_DN EVENT_ID SRC_ENTRY_ID
Page 92 and 93:
Table 5-21 Query Values Value Name
Page 94 and 95:
If Results(0) = 0 Then Phone = Resu
Page 96 and 97:
functions can be used to retrieve t
Page 98 and 99:
IDMQueryInit IDMQuerySetAssociation
Page 100 and 101:
Directory Description Required File
Page 102 and 103:
# Create an array with two lines $i
Page 104 and 105:
Value SRC_DN EVENT_ID SRC_ENTRY_ID
Page 106 and 107:
Handling Query Events For Query eve
Page 108 and 109:
Handling a query is similar, except
Page 110 and 111:
The response to the heartbeat is im
Page 112 and 113:
Function idm_getqueryinstanceparent
Page 114 and 115:
Deploying a Custom Driver To deploy
Page 116 and 117:
116 Identity Manager 4.0.1 Driver f
Page 118 and 119:
Operating System Windows Command/Ta
Page 120 and 121:
Page 122 and 123:
Ensure that the security certificat
Page 124 and 125:
Page 126 and 127:
Table A-1 Message Priorities Messag
Page 128 and 129:
A.2.1 Driver Shim Installation Fail
Page 130 and 131:
• To provision identities from th
Page 132 and 133:
Page 134 and 135:
Possible Cause: Action: The stateme
Page 136 and 137:
LWS0002I All services are now activ
Page 138 and 139:
Action: Action: Action: Action: Ver
Page 140 and 141:
OAP004E HTTP Error: cause. Explanat
Page 142 and 143:
Possible Cause: Possible Cause: Pos
Page 144 and 145:
IDMTRACE Message Appends the specif
Page 146 and 147:
This is a heartbeat message HEARTBE
Page 148 and 149:
idmsetvar($Name, $Value) Sets a sin
Page 150 and 151:
status(Level, Message) Sends a stat
Page 152 and 153:
C.4 Microsoft VBScript (IDMLib.vbs)
Page 154 and 155:
Function IDMGetSubscriberParam(Para
Page 156 and 157:
Sub IDMQueryInit Initializes a quer
Page 158 and 159:
The Publisher calls Heartbeat.ps1 p
Page 160 and 161:
function idm_writevalue($name, $val
Page 162 and 163:
function idm_querysetreadparent($re
Page 164 and 165:
Page 166 and 167:
5 Click Apply. 6 Restart the driver
Page 168 and 169:
[-r] [-y old-association] [-z new-a
Page 170 and 171:
some new value ^d D.4 Files an
Page 172 and 173:
Page 174:
show all

Identity Manager 4.0.1 Driver for Scripting Implementation ... - NetIQ

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?