Symantec IGA

 View Only
  • 1.  How to explore/correlate SAP endpoint with etautil tool

    Posted Sep 18, 2018 05:39 PM

    Hello,

    In the SAP connector, after creating a new account on the CUA Master System, How it is possible explore and correlate a especific account user on the endpoint set up to manage such child systems with eTautil?

     

    Thank you.

     

    Adolfo.



  • 2.  Re: How to explore/correlate SAP endpoint with etautil tool
    Best Answer

    Broadcom Employee
    Posted Sep 19, 2018 04:02 AM

    Hi Adolfo,

     

    Yes this is possible via etautil to explore a specific endpoint account which is not yet into the provisioning directory.

    I had no SAP endpoint under the hand this morning, So I wrote a sample for Lotus Notes endpoint:

     

     

    etautil -d im -u superadmin -p secret -DYN explore
    'eTLNDOrganizationalUnitName=support,eTLNDOrganizationName=caorg,eTLNDDirectoryName=lnd901fp5,

    eTNamespaceName=Lotus Domino Server' eTLNDAccount eTLNDAccountName='John Do' list ExploreUpdateEtrust

     

    :ETA_S_0023<EAC>, Lotus Domino Account 'John Do' exploration successful: (objects added: 1, deleted: 0, updated: 0, unchanged: 0, failures: 0)
    :ETA_I_1336, ETAUTIL command completed Wed Sep 19 09:39:54 2018

     

    You should not get obstacles to do the same for a SAP account.

    The account container DN should be something as:

    'eTSAPAccountContainerName=Accounts,eTSAPDirectoryName=YourEndpointName,eTNamespaceName=SAP R3'


    Use the Provisioning Manager UI help to get info.
    By instance for the list options;
    At least one of the following keywords is required:

    ExploreUpdateEtrust
    Retrieves all managed objects.

    ExploreCorrelateUsers
    Correlates accounts with existing global users.

    ExploreCreateUsers
    Creates global users as needed during the correlation.

    ExploreUpdateUsers
    Sets/refreshes the global user attributes using account attribute values.

    Note: Combining explore, correlate and update actions into a single request is not supported.

     

    Regards,

    Philippe.



  • 3.  Re: How to explore/correlate SAP endpoint with etautil tool

    Posted Sep 25, 2018 07:05 PM

    Hello Philippe,

    I try to execute the command but only works with imps user. Please review the sent images.

    Please your comments.

    Thank You.

    Adolfo.