Detailed instructions for use are in the User's Guide.
[. . . ] novdocx (en) 13 May 2009
AUTHORIZED DOCUMENTATION
implementation Guide
Novell®
3. 6. 1
June 05, 2009
Identity Manager Driver for ID Provider
www. novell. com
Identity Manager 3. 6 ID Provider Driver Implementation Guide
novdocx (en) 13 May 2009
Legal Notices
Novell, Inc. , makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. , reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. Further, Novell, Inc. , makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. , reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes. [. . . ] The policy container can only be created under the ID Provider driver.
Policy Container DN
LDAP DN for the policy container under the driver object. For example cn=idpolicies, cd=idprovider, cn=driverset1, dc=idm, dc=services, dc=system.
Client Options The client options are for the ID Provider clients. For more information, see Chapter 4, "Configuring ID Clients, " on page 23.
Table 3-2 Client Options
Parameter
Default Value
Description
Client name
ID-Provider Driver
This is the name the driver uses when it acts as an ID client and requests and ID from the provider. This is useful for tracing and if access control is enabled on any of the ID policies. If access control is enabled, a list of ID client names can be specified that are allowed to obtain an ID from the policy. If the client name associated with the request is not in that list, the provider does not issue an ID.
18
Identity Manager 3. 6 ID Provider Driver Implementation Guide
novdocx (en) 13 May 2009
Parameter
Default Value
Description
ID Generation Map
workforceID=wfid
Enter a comma-separated list of attribute=policy pairs. This example configures the driver to request IDs from the wfid policy and stores them in the workforceID attribute whenever a new object is created or whenever someone tries to change this attribute. The driver only issues IDs for any attribute if that attribute and the object class holding the attribute are in both the Subscriber, Publisher, Filter, and are set to synchronize. Note: Attribute names must be in the Identity Namespace (not LDAP) and must be case-exact.
Server Options Allow you to setup clients other than the ID Provider driver using Java remote method invocation (RMI). It also allows you to set ID Provider trace level.
Table 3-3 Server Options
Parameter
Default Value
Description
Start RMI
True
Controls whether the ID provider starts an RMI service or not. You only need a running RMI service if you request IDs from other clients than the driver (for example, DirXMLScript policies. ) If all IDs are managed through this driver's filter and ID Generation Map settings, then no RMI service is needed. Leave this field empty if you want the server to bind to all IP addresses. If that port is already in use (you see errors in the trace when you start the driver), use a different port lower than 1024. This configuration assumes a port of 1199 to avoid common port conflicts. Enables the backward compatibility mode when migrating an existing ID-Server configuration to run with the new ID Provider driver. Setting this to True allows you to keep using legacy ID policies, which do not use the new schema that ships with the ID Provider.
RMI server
172. 17. 2. 117
RMI port
1199
Use legacy ID-server schema?
False
Creating a New Driver
19
novdocx (en) 13 May 2009
Parameter
Default Value
Description
Trace level
ALL
This is not the driver trace level, but the ID Provider trace level. ALL: Displays all messages.
3. 2 Creating ID Policies
An ID Policy container is a repository for ID policies and is used in conjunction with the ID Provider driver. When the ID Provider driver receives an ID request from a client, it generates an ID based on the ID policy specified in the request and passes it to the client. By default, there are three ID policies that are created when the driver is imported. The default policies are: pid: The pid policy generates unique ids between the range of 100000 to 2000000000. wfid: The wfid policy generates unique ids between the range of 10000000 to 99999999. It also adds the prefix of WFID to each unique ID for the workforce ID. [. . . ] Example: hostname=10. 0. 0. 1 port=8090
kmo=IDMCertificate
Driver Cache Limit (kilobytes) or Cache limit (KB) Application Password or Set Password Remote Loader Password or Set Password Used only if the driver is connecting to the application through the Remote Loader. It must be the same password specified during the configuration of the Remote Loader on the connected system. Specify the password for the user object listed in the Authentication ID field.
A. 1. 4 Startup Option
The Startup Option allows you to set the driver state when the Identity Manager server is started.
Table A-4 Startup Options
Option
Description
Auto start Manual
The driver starts every time the Identity Manager server is started. The driver does not start when the Identity Manager server is started. [. . . ]