Idea Details

Enhance CA Provisioning Directory/Server to configure schema Attributes as case insensitive

Last activity 4 days ago
Arun Tripathi's profile image
02-14-2020 08:16 AM

We are facing issue in EnC when Provisioning directory/server custom attribute is having lower case value  and endpoint is having in upper case or vice versa, that time EnC rule could not correlate to actual user because of case mismatch and Account is getting defaulted.


Comments

4 days ago

We noticed a discrepancy in the OOTB eTCustomFields / eTCustomFieldNames for case-sensitivity in etrust_admin.schema (on Provisioning Servers/CCS servers)
- Some fields are marked as case-insensitive; others as case-sensitive.

Due to this fact, and that we have access to the Provisioning SDK for extended CommonObjects Extended, aka COSX,
we can modified the eTCustomFields100-900 & eTCustomFieldsNames100-900 to case-insensitive.



Proposal:

1.   Install MS Visual Studio VC 2010 Express, to have access to the 'nmake' process.

2.  Install CA Provisioning SDK on same server/workstation.

3.   Execute the following steps.

cd “C:\Program Files (x86)\CA\Identity Manager\Provisioning SDK\admin\samples\COSX”

gencosx.bat 900
{ Max allowed value is 900 }

The output text file:  cosxparse.pty

4.  Search and replace a string in the following file, cosxparse.pty    

"case=sensitive"  to  "case=insensitive"

{May be selective and only replace a few attributes instead of all}

5.  Execute the following commands to generate the binary file

- Set the path to the nmake program.
"C:\Program Files (x86)\Microsoft Visual Studio 10.0\VC\vcvarsall.bat“
- Execute 'nmake'
nmake

The output file (binary) will be:
C:\Program Files (x86)\CA\Identity Manager\Provisioning SDK\admin\data\cosxparse.ptt

6.  Backup prior files of IMPS/CCS data folder for:
etrust_cosx.schema
etrust_cosx.dxc
cosxparse.ptt

7.  Copy this file, cosxparse.ptt, to the IMPS server data folder

8.  Stop IMPS service:   su - imps  &  imps stop

9.  Execute the follow command:   schemagen -n COSX

10. Copy the output file of  etrust_cosx.dxc  to all CA Directory schema folders; including DX routers (on IMPS servers).

11. Copy the output file of etrust_cosx.schema & cosxparse.ptt to all CA IMPS Servers and CCS Servers data folders.

12. Restart CA Directory and IMPS/CCS Services.

13. Validate that E&C Correlation Rules will now work for these extended fields with case-insensitivity.

14.  Note:   For existing users, may need to export the IMPD LDIF, rebuild the IMPD DSA and then re-import users.