Symantec Access Management

 View Only

Symantec Directory Manager RestAPI Shell Script Framework 

Nov 28, 2021 11:36 AM

To All,

You are invited to help contribute to this effort. Please add your comments/inputs for all to see and discuss. With your participation, I am hoping to have an official github presence for this work in the long run. Attached is a zip file contains the framework as it is. It also contains the .git structure so that you can start forking your own branches as well.

This framework is a Symantec Directory Manager implementation based on my article at the API academy site.

DevOps: REST API Execution Through Bash Shell Scripting
DevOps: REST API Execution Through Bash Shell Scripting II
DevOps: REST API Execution Through Bash Shell Scripting III

This implementation is the this implementation after the first "SiteMinder RestAPI Shell Script Framework" available at 

https://community.broadcom.com/enterprisesoftware/viewdocument/siteminder-restapi-shell-script-fra

This project is the one I promised after the publication of the "Symantec Directory dxagent RestAPI Shell Script Framework". As I mentioned in the dxagent one:

https://community.broadcom.com/enterprisesoftware/viewdocument/symantec-directory-dxagent-restapi

this is the one you are encouraged to try to explore the powerful capabilities the Directory Manager RestAPI has to offer.

This is the first iteration of the Directory Manager RestAPI, it focuses on using the restapis to help automating the
creation of multiple Router DSAs and DATA DSAs that have the mult-write configured as manual attempts for
the tasks are tedious and error-prone.

Many features of the Directory Manager RestAPI have not yet explored. You are welcome to post your comments on this thread to share your experiences of using this framework and to suggest how you may want to see how the Directory Manager restapi features being used. For now,

Your inputs will be most appreciated.


For the Linux Impatience

If you are using Linux, CentOS or RedHat, for your Directory installation and if you know the client name when you installed the dxagent, there is now a utility can quickly get you started. The flow is like the following:

  • On your Directory machine, confirm that you have the dxagent installed and you need the client name, say clientName, you used for that installation.
  • Download the attached zip file.
  • Login as user dsa
  • unzip the zip file
  • Modify the utils/env.shlib to provide hostname, port number, adminID, and password to connect to the Directory Manager UI machine of your choice. It could be localhost if you have had dxserver, dxagent, and Directory Manager UI all installed on the same machine.
  • Run the following to the environment ready.

    bash utils/getstarted.sh

  • Run

    cd samples/selfreg
    bash make.sh

    to confirm that it works. In the process, it will create a registrar environment that is meant to hold all dxagents to be managed through the same Directory Manager. By default, the dxagent name used in the registrar is myname, you can pick another short name of your choice by modifying the env.shlib under the samples/selfreg before you run.
Getting Started

Otherwise, please take a look at the README.md to get it started.

More to Come

In stead of cluttering this space with too much unmanaged details. I will be publishing them separately and add links here to show the ideas behind this framework and how you may want to use it.

Statistics
0 Favorited
23 Views
1 Files
0 Shares
4 Downloads
Attachment(s)
zip file
cadirMgmt.zip   1.72 MB   1 version
Uploaded - Dec 06, 2021

Tags and Keywords

Comments

Nov 28, 2021 12:53 PM

Directory 14.1/SP3 now encrypts the dxagent private kay by default. As a result, unless the encryption is disable, it is not allowing the registrar environment concept to work. This registrar environment concept is an essential part of this framework.

Nov 28, 2021 11:50 AM

To download the cadirMgmt.zip file,

I have tried

curl -o cadirMgmt.zip https://community.broadcom.com/HigherLogic/System/DownloadDocumentFile.ashx?DocumentFileKey=edfa9a1c-8611-97d9-fa87-f4aaaf3f477a



Also, the dxagent restapi is actually included in this zip file as well. There is no need for you to download it separately.

Related Entries and Links