Manage LDAP directory services with UMRA - Tools4Ever.com

More documents

Recommendations

Info

User Management Resource Administrator – Managing LDAP directory servicesFigure 33: Script action to initialize the LDAP modification data.The value of the attribute is set equal to the specified variable%NewPassword%.When the modification data is setup, the update can be made.Figure 34: Script action to modify the directory service item.The action is completely specified by the following variables:1. %LdapSession%: The data structure representing the LDAPsession with the LDAP Server.2. %UserDN%: The distinguished name of the of the selecteduser account. The name identifies the directory service item, e.g.the user account.3. %LdapData%: The modification data, holding the newreplacement value of the password attribute of the user account.When the script is executed, the form is returned to allow the end-userto reset the password of the next user account.© Tools4ever 2005 38
User Management Resource Administrator – Managing LDAP directory servicesDelete user accounts in NovelleDirectoryTo delete user accounts or other directory service items, a very simpleUMRA script is required. The script contains two action only:1. Setup LDAP session: Connect to the LDAP Server andauthenticate the connecting eDirectory user account;2. Delete directory service object (LDAP): Delete the directoryservice object or item. The object to delete must be specified byits distinguished name. Example: cn=John Smith, ou=SomeOU,o=Tools4ever.To delete an item from the directory service, no attribute modificationstructure is required. When the directory service item is deleted, allattributes of the item are deleted automatically.Setup user account groupmemberships on Novell eDirectoryTo setup user account group memberships on Novell eDirectory, youneed to update the attributes of two directory service items: the useraccount and the group. This is specified by the eDirectory serviceschema.The following table shows the attribute updates in order to add a useraccount to a group:Item Attribute Value update actionUser account groupMembership Add distinguished name of groupUser account securityEquals Add distinguished name of groupGroup uniqueMember Add distinguished name of user accountGroup equivalentToMe Add distinguished name of user account.Table 7: Required attribute value changes to update group membership in Novell eDirectory.The example project is not very user-friendly but shows exactly how touse the LDAP script actions. The example project can be found at thefollowing location, relative to the UMRA Console program directory:.\Example Projects\LDAP\Novell\AddToGroup\Novell eDirectory - Add User To Group.ufpThe UMRA application consists of a single project with a form and script.The form show some text fields and two input fields for the distinguishednames of the user account and the group.© Tools4ever 2005 39
Page 2 and 3: User Management Resource Administra
Page 86: User Management Resource Administra

Manage LDAP directory services with UMRA - Tools4Ever.com

Create successful ePaper yourself

Delete template?

Save as template?