IGA 15.0 - User/Group Auxiliary Schema

[Icaro Serpeloni]

Hi everyone,

I'm starting a new environment with the new version 15.04.

I deployed it and everything went well, however I'm trying to extend the user store attributes from customfield01 to customfield100. I set up the file according to the documentation https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-suite/15-0/user-store/managed-user-store-configuration/user-group-auxiliary-schema.html in the topic "Extend the User Store Schema with the User/Group Auxiliary Object Class". However, when I access the user store and try to add the object class imAuxUSer, it doesn't appear, and therefore any user creation fails in IDM.

Has anyone experienced this before or could give me some advice?

-------------------------------------------

[Geeta Vani Gudaru]

Hi 

we didn't face the issue, can you please update us with the error that appears, when the user creation fails on IDM.

Regards
Geeta.

-------------------------------------------

[Rinat Matityahu]

Hi Icaro

In addition to Geeta's request, can you please share the following with us?

1. Output of ls -las /opt/brcm/iga/conf/ustore/aux_schema
2. Content of
   /opt/brcm/iga/conf/ustore/aux_schema/imUserAux
3. Export of Identity Manager User Store XML

Thank you

Regards

Rinat

-------------------------------------------

[Icaro Serpeloni]

Hi Rinat.

I managed to get it working.

The documentation notes that we could take the im_user_aux.dxc file from /opt/brcm/iga/inst/ustore/config/schema and then move it to the /opt/brcm/iga/conf/ustore/aux_schema folder. We did this, but it didn't work, so we deleted the copied file from /opt/brcm/iga/conf/ustore/aux_schema and created a new file from scratch, and that worked.

Anyway, here's the file that worked.

Thank you for your time.

-------------------------------------------

[Rinat Matityahu]

Hi Icaro

Appreciate your update.

The OOTB file provided as a sample under /opt/brcm/iga/inst/ustore/config/schema and is empty, by default. It is meant to use as a starting point, since it contains oid-prefix for attributes / object Classes / name binding - but no actual attributes are specified - this is for each site to add their own attributes as required.

Did you manually add any attributes / object classes to the sample file?

We are asking it to make sure nothing is missing or otherwise misleading in the documentation.

Regards

Rinat

-------------------------------------------

[Icaro Serpeloni]

Hi Rina,

Yes, I added it, but the file I sent you wasn't complete. I'll add a new version.

Below is how I left the oid 

#
#
# IM Unified User (UU)Auxiliary Schema
#
#

schema set oid-prefix im-UUA-attr = (1.3.6.1.4.1.791.2.3.5.3.6485.1);
schema set oid-prefix im-UUA-oc = (1.3.6.1.4.1.791.2.3.5.3.6485.2);
schema set oid-prefix im-UUA-nb = (1.3.6.1.4.1.791.2.3.5.3.6485.3);
schema set oid-prefix im-UUA-Aset = (1.3.6.1.4.1.791.2.3.5.3.6485.4);

#
#
# IM Unified User Aux Schema (UUS): Attribute Type Definitions
#
#

-------------------------------------------

Attachment(s)

im_user_aux_3.txt   20 KB 1 version

[Rinat Matityahu]

Many thanks for providing those details Icaro. Much appreciated

-------------------------------------------