If you are using both CA Access Control and LDAP, you can transfer user names between them using scripts of your own design; three sample scripts are provided.
Important! To set up sebuildla and the required LDAP configuration settings you must to be familiar with LDAP and be able to execute the ldapsearch command. We recommend that you read the man pages for ldap(1), ldapsearch(1) and the information about setting up in the documentation for your LDAP client.
Two of the provided scripts-ldap2seos and seos2ldap-export whole sets of users from CA Access Control to an LDAP server and imports them from an LDAP server to CA Access Control.
A third sample script, S50CREATE_Ldap_u.sh, automatically transfers new UNIX user names from CA Access Control to LDAP as they are created.
The sample scripts require access to a TCL shell environment; they use the Language Client API (LCA) library extension, tcllca.so.
Note: For more information about LCA and the TCL extension, see the Language Client API and the appendix the LCA Extension respectively in the SDK Guide.
If you do not have TCL, consult the FAQ posted monthly to comp.lang.t_c_l by Larry Virden, which is available on the MIT web site and the Terafirm website.
You can also refer to the Sun web site for TCL news, documentation, and resources.
| Copyright © 2012 CA. All rights reserved. |
|