Changing a Non-CN Identifier During Rename

Novell Cool Solutions: Tip
By Raymon Epping

Digg This - Slashdot This

Posted: 15 Nov 2006


How can you change an object identifier other than the CN during a rename operation? Let's say that you want the uniqueID attribute of the user object-Class populated by the CN, and the object gets renamed in your connected application.

In this specific case I wanted to update the uniqueID attribute and set a new IDM association when the user got renamed. I set a new IDM association because it was based on the source-dn.


The answer to this question is in the following policy, which, again, shows how easy it is to implement policy rules with Novell IDM.

<?xml version="1.0" encoding="UTF-8"?><policy> 
        <description>React on user renames</description>
        <comment xml:space="preserve">This policy reacts on user renames. 
            It sets a new uniqueID for the user and updates the IDM association</comment> 
                <if-operation op="equal">rename</if-operation>
            <do-set-dest-attr-value class-name="User" name="uniqueID" when="before">
                    <token-xpath expression="./new-name"/>
            <do-remove-association when="after">
            <do-add-association when="after">
                    <token-parse-dn dest-dn-format="slash" length="-2" src-dn-format="slash" start="0"> 
                        <token-xpath expression="./@dest-dn"/>
                    <token-text xml:space="preserve">\</token-text> 
                    <token-xpath expression="./new-name"/>

Below is a screen shot of the policy itself.

Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com

© Micro Focus