Highlighted
Absent Member.
Absent Member.
863 views

Can the Code Map Refresh be scheduled?

Hey all,

Trying to determine if the Code Map refresh in IDM 4.5 can be scheduled. It says 1440 min (24 hours) but is that from the last time it ran? If I manually initiated it is that the new point in time or is t based on the application startup time?

I ask because it causes a backup of events as we have an Active Directory with over 17,000 groups. If we leave the driver trace file on it takes about an hour.

Thanks,

Jeff
Labels (1)
0 Likes
7 Replies
Highlighted
Micro Focus Expert
Micro Focus Expert

Hi Jeff,

On 21.06.2017 02:16, JNCService wrote:
>
> Hey all,
>
> Trying to determine if the Code Map refresh in IDM 4.5 can be scheduled.


you can disable the automatic refresh and then refresh the code map
tables when needed using the SOAP API:
https://www.netiq.com/documentation/identity-manager-developer/rest-api-documentation/agpropartwebservices.html#bz9yaoh


> It says 1440 min (24 hours) but is that from the last time it ran? If I
> manually initiated it is that the new point in time or is t based on the
> application startup time?
>
> I ask because it causes a backup of events as we have an Active
> Directory with over 17,000 groups. If we leave the driver trace file on
> it takes about an hour.


That's the main use case for the subscriber service channel. Hopefully
the AD driver will be updated to support it as well...

--
Norbert
--
Norbert
Highlighted
Knowledge Partner
Knowledge Partner

Norbert Klasen <klasen@no-mx.forums.microfocus.com> wrote:
>
>> I ask because it causes a backup of events as we have an Active
>> Directory with over 17,000 groups. If we leave the driver trace file on
>> it takes about an hour.

>
> That's the main use case for the subscriber service channel. Hopefully
> the AD driver will be updated to support it as well...
>


Hoping this service channel rolls out quickly to popular shims and isn't
dependant on more engine updates.
Alex McHugh - Knowledge Partner - Stavanger, Norway
Who are the Knowledge Partners
If you appreciate my comments, please click the Like button.
If I have resolved your issue, please click the Accept as Solution button.
0 Likes
Highlighted
Absent Member.
Absent Member.

Sorry for the very late reply the information is helpful!!

Thank you!
Jeff
0 Likes
Highlighted
Valued Contributor.
Valued Contributor.

So we could say that can be scheduled depending on the IDM SOAP driver?

0 Likes
Highlighted
Knowledge Partner
Knowledge Partner

Norbert's point is, you have two options.

1) Let the system run it every 24 hours (Or change the time gap between)

2) Turn off the auto run, and then call the SOAP endpoint, which is very simple.  Basically it takes a single parameter, the LDAP DN of the entitlement to be refreshed.  I THINK that you can list multiple DN's in one document.

So make the SOAP call.  You COULD use the SOAP driver, but if you are not licensed for that it would be overkill.  You can do it in a Java call (We have a JAR that lets us make SOAP calls in policy).  There are ECMA implementations you should be able to find in this forum. 

So you could use any driver, schedule a Job (so you have full cron like functionality) and have it react to the <trigger> document and make the call. 

Or you could use Fernando's RBPM SOAP calls bash shell script, and make the call and then use cron on a linux box to make it.  Lots and lots of options. (His script uses bash to build the SOAP document, based on parameters passed in, and looks like a Linux command line utility, and then passes it all to 'curl' to make the SOAP call. 

 

Highlighted
Valued Contributor.
Valued Contributor.

Okey thanks a lot for your complete answer!
I will try this two options to schedule to test the differences on it.
0 Likes
Highlighted
Knowledge Partner
Knowledge Partner

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.