Manage LDAP directory services with UMRA - Tools4Ever.com

More documents

Recommendations

Info

User Management Resource Administrator – Managing LDAP directory servicesUMRA LDAP script actionsScript actions overviewIn UMRA, a number of script actions are available to manage an LDAPdirectory service. The script actions cover the most important LDAPfunctions to update a directory service and execute a query in thedirectory service. All LDAP calls are executed synchronously.Script actionsUMRA LDAP actionSetup LDAP sessionLoad LDAP modificationdataAdd directory serviceobject (LDAP)Modify directory serviceobject (LDAP)Delete directory serviceobject (LDAP)DescriptionInitialize a secure or not secure LDAPsession with the LDAP Server. The sessionparameters are stored in a variable that isused in subsequent UMRA LDAP actions.Setup a data structure that is used to addand edit directory service items. Theresulting LDAP modification data is stored ina variable that is referenced in subsequentscript actions. The action is always used incombination with the Add and Edit UMRALDAP actions.Add an item to the LDAP directory service.The data added is setup with action LoadLDAP modification data.Update an existing item in the directoryservice. The data used to modify the existingdirectory service item is setup with actionLoad LDAP modification data.Delete an item from the directory service.Search directory service(LDAP)Table 1: Overview UMRA LDAP script actionsLDAP script actionsScript action: Setup LDAP sessionExecute a search action in the LDAPdirectory service. The results are returned ina generic table variable that can be used insubsequent script actions and forms.For each action to update or search the LDAP directory service, a sessionmust be initialized first. The session is most often initialized in thebeginning of the script and than used in all subsequent LDAP actions.© Tools4ever 2005 10
User Management Resource Administrator – Managing LDAP directory servicesThe session is automatically released by the UMRA software when thescript is finished.PropertyLDAP serverLDAP portSSL encryption flagUser nameUser passwordDescriptionThe name of the host running the LDAP server. The name must bespecified using the TCP/IP address or DNS name. Optionally, thename can be followed by a colon (:) and port number.Optional: The TCP port number of the LDAP server to which toconnect. The property is ignored if the specified 'LDAP server'includes a port number. If not specified, the default port is used.For not secure LDAP, the default LDAP port is 389, for secureLDAP (SSL), the default port is 636.If set to 'Yes', the session uses SSL encryption to communicate. Inthis case, on both the LDAP client and server side, appropriate SSLcertificates need to be installed. If set to 'No', the actionestablishes a plain TCP connection and uses clear text (noencryption). Several topics in this document describe how to setupsecure LDAP.The name of the user to connect to the LDAP server. If notspecified, no user is authenticated, and no other LDAP actions canbe executed. The format and exact name depends on the directoryservice.The password of the user specified with property User name.Note that the password is stored with encryption.LDAP sessionA data structure representing the resulting LDAP session. Thisproperty is an output only property and is generatedautomatically. The data is stored in a variable. (Default name:%LdapSession%) This property is used in other script actions.Table 2: Properties of action Setup LDAP sessionThe LDAP session variable can be passed to other scripts that areexecuted within the context of the outer script. When the outer scriptends, the LDAP session is released.Script action: Load LDAP modification dataAttributes and valuesWhen a directory service is updated to create a new item or update anexisting item, the operation is always specified by the one or moreattributes, the attribute value(s) and the type of attribute valuemodification: add, delete or replace.To support this mechanism, the script action is Load LDAPmodification data is used. All attributes, attribute values and valuemodification types are specified with this action. The result is stored in avariable that holds all the attribute information. The variable is then usedin the action to:• Create the item with action Add directory service object (LDAP)or,• Update the item with action Modify directory service object(LDAP).The action Load LDAP modification data does not communicate withthe LDAP Server, that is, no session variable is required.The LDAP modification data window is used to specify the LDAP© Tools4ever 2005 11
Page 2 and 3: User Management Resource Administra
Page 62 and 63:
User Management Resource Administra
Page 64 and 65:
Page 66 and 67:
Page 68 and 69:
Page 70 and 71:
Page 72 and 73:
Page 74 and 75:
Page 76 and 77:
Page 78 and 79:
Page 80 and 81:
Page 82 and 83:
Page 84 and 85:
Page 86:
show all

Manage LDAP directory services with UMRA - Tools4Ever.com

Create successful ePaper yourself

Delete template?

Save as template?