Adding a uniquemember Attribute to an Oracle Group

Novell Cool Solutions: Tip

Digg This - Slashdot This Posted: 1 Mar 2006

Problem

A reader asked the following question:

"I'd like to add a user to an Oracle Group in a certain way. When the user gets added, I want Identity Manager to add a uniquemember attribute (equal to the destination DN of the user I am adding) to a predefined Oracle group.

Can I do this? If so, how?"

... And here's a solution from Famous Father Ramon ...

Solution

1. Add a subscriber command transformation rule:

<rule>
  <description>Add default group memberships</description>
  <conditions>
   <and>
    <if-operation op="equal">add</if-operation>
    <if-class-name mode="nocase" op="equal">User</if-class-name>
   </and>
  </conditions>
  <actions>
   <do-add-dest-attr-value class-name="Group" name="member" when="after">
    <arg-association>
     <token-text xml:space="preserve">dn of group in OID</token-text>
    </arg-association>
    <arg-value>
     <token-dest-dn/>
    </arg-value>
   </do-add-dest-attr-value>
  </actions>
</rule>

2. Repeat the action for each group.

3. Make sure your schema mapping maps Group/member to the correspondig OID class/attribute.

Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com