Anonymous_User Absent Member.
Absent Member.
189 views

Custom written Generic App dirver for GoogleApps


IDM 3.6.1
We are using a custom written driver to sync users to Google apps using
the Generic app driver from Consensus. Now we are planning to go for
4.0.1 where NetIQ has out-of-box GoogleApps driver. If I want to use
Google Apps driver, is it just enough on designer 4.0.1, right click the
Generic App driver --> Package -->import the Google apps packages. In
that way the DirXML-Assoications is not lost.
Is this is enough to migrate from Custom written driver to
Google apps driver?
Or what are the best options?.


--
lvaradha
------------------------------------------------------------------------
lvaradha's Profile: https://forums.netiq.com/member.php?userid=226
View this thread: https://forums.netiq.com/showthread.php?t=46858

Labels (1)
0 Likes
10 Replies
wcscis Absent Member.
Absent Member.

Re: Custom written Generic App dirver for GoogleApps

On 2/17/2013 4:44 PM, lvaradha wrote:
>
> IDM 3.6.1
> We are using a custom written driver to sync users to Google apps using
> the Generic app driver from Consensus. Now we are planning to go for
> 4.0.1 where NetIQ has out-of-box GoogleApps driver. If I want to use
> Google Apps driver, is it just enough on designer 4.0.1, right click the
> Generic App driver --> Package -->import the Google apps packages. In
> that way the DirXML-Assoications is not lost.
> Is this is enough to migrate from Custom written driver to
> Google apps driver?
> Or what are the best options?.
>
>

This could work.....
really the driver object is a shell so if you overwrote all of the policies, all of the driver
configuration, and pointed to the new shim then yes.... this should work.....

It's really not a big deal though to get a new association for a new driver. And you can leave the
old one to dangle around as long as you want. I've left some years before.
0 Likes
Knowledge Partner
Knowledge Partner

Re: Custom written Generic App dirver for GoogleApps

On 2/18/2013 1:27 AM, Will Schneider wrote:
> On 2/17/2013 4:44 PM, lvaradha wrote:
>>
>> IDM 3.6.1
>> We are using a custom written driver to sync users to Google apps using
>> the Generic app driver from Consensus. Now we are planning to go for
>> 4.0.1 where NetIQ has out-of-box GoogleApps driver. If I want to use
>> Google Apps driver, is it just enough on designer 4.0.1, right click the
>> Generic App driver --> Package -->import the Google apps packages. In
>> that way the DirXML-Assoications is not lost.
>> Is this is enough to migrate from Custom written driver to
>> Google apps driver?
>> Or what are the best options?.
>>
>>

> This could work.....
> really the driver object is a shell so if you overwrote all of the
> policies, all of the driver configuration, and pointed to the new shim
> then yes.... this should work.....
>
> It's really not a big deal though to get a new association for a new
> driver. And you can leave the old one to dangle around as long as you
> want. I've left some years before.


Queries into Google are sort of wonky, so reassociating users and groups
might not be entirely possible. So best to keep/re-use the association
if possible. Assuming the values match. As I recall it is
email@domain.com for the new Consensus driver.

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Custom written Generic App dirver for GoogleApps


Thank you! for your reply guys.

Can you guys tell me the best way create new association if i am going
with new Google app driver.
I am thinking of this option
if you do iManager-->Identity Overview-->Driver-->migrate
--> Migrate from Identity vault.
In this case user will not sync to Google Apps since all users
already exists in Google Apps but will it create new association?
Does it require any policy change?


--
lvaradha
------------------------------------------------------------------------
lvaradha's Profile: https://forums.netiq.com/member.php?userid=226
View this thread: https://forums.netiq.com/showthread.php?t=46858

0 Likes
Knowledge Partner
Knowledge Partner

Re: Custom written Generic App dirver for GoogleApps

On 2/18/2013 11:14 PM, lvaradha wrote:
>
> Thank you! for your reply guys.
>
> Can you guys tell me the best way create new association if i am going
> with new Google app driver.
> I am thinking of this option
> if you do iManager-->Identity Overview-->Driver-->migrate
> --> Migrate from Identity vault.
> In this case user will not sync to Google Apps since all users
> already exists in Google Apps but will it create new association?
> Does it require any policy change?


This should work, test with a small number first of course. If you have
100,000 users this could take awhile, which is why I suggest trying to
preserve associations if you already had them.


0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: Custom written Generic App dirver for GoogleApps


Thank you geoffc,

I would like to know more about your suggestion -"preserve
associations if you already had them"-. How do you want me to preserver
the associations? If you can give more details about your suggestion
that would be helpful for me to understand better


--
lvaradha
------------------------------------------------------------------------
lvaradha's Profile: https://forums.netiq.com/member.php?userid=226
View this thread: https://forums.netiq.com/showthread.php?t=46858

0 Likes
Knowledge Partner
Knowledge Partner

Re: Custom written Generic App dirver for GoogleApps

On 2/19/2013 11:54 AM, lvaradha wrote:
>
> Thank you geoffc,
>
> I would like to know more about your suggestion -"preserve
> associations if you already had them"-. How do you want me to preserver
> the associations? If you can give more details about your suggestion
> that would be helpful for me to understand better


What was discussed before. Reuse the driver object you currently have,
and replace its contents (but not the object itself) with all new contents.

The DN in DirXML-Associations, if it goes away (Delete the driver
object) then all the DirXML-Associations in the tree pointing at the
driver go up in a puff of smoke. Even if you had 100 million of them.
(Though eDir will take a while to process that event).

So don't delete the parent object. Delete the contents and replace with
a totally new driver config, and use that instead.

Assuming the association values make sense your version to new version.

Or else back them up with a tool like DAModifier (or the Designer
version by scauwe) and restore them on the new driver.


0 Likes
wcscis Absent Member.
Absent Member.

Re: Custom written Generic App dirver for GoogleApps

On 2/19/2013 11:42 AM, Geoffrey Carman wrote:

> The DN in DirXML-Associations, if it goes away (Delete the driver object) then all the
> DirXML-Associations in the tree pointing at the driver go up in a puff of smoke. Even if you had
> 100 million of them. (Though eDir will take a while to process that event).


As a side note, apparently that behavior is due to change soon. They are going to break the
referential integrity link between the two and when a driver is deleted the associations will
remain. Coming to a patch near you soon!

0 Likes
Knowledge Partner
Knowledge Partner

Re: Custom written Generic App dirver for GoogleApps

On 2/19/2013 12:45 PM, Will Schneider wrote:
> On 2/19/2013 11:42 AM, Geoffrey Carman wrote:
>
>> The DN in DirXML-Associations, if it goes away (Delete the driver
>> object) then all the
>> DirXML-Associations in the tree pointing at the driver go up in a puff
>> of smoke. Even if you had
>> 100 million of them. (Though eDir will take a while to process that
>> event).

>
> As a side note, apparently that behavior is due to change soon. They
> are going to break the referential integrity link between the two and
> when a driver is deleted the associations will remain. Coming to a
> patch near you soon!


Looks like it is going to be a choice, it is still not clear to me (I
tried asking about it at BS with little success) what the exact use case
will be.


0 Likes
wcscis Absent Member.
Absent Member.

Re: Custom written Generic App dirver for GoogleApps

On 2/19/2013 11:57 AM, Geoffrey Carman wrote:

> Looks like it is going to be a choice, it is still not clear to me (I tried asking about it at BS
> with little success) what the exact use case will be.
>
>


I was told the use case was environments with millions of objects. Things just took forever to
catch up.
0 Likes
Highlighted
Anonymous_User Absent Member.
Absent Member.

Re: Custom written Generic App dirver for GoogleApps

On 19.02.2013 20:54, Will Schneider wrote:
> On 2/19/2013 11:57 AM, Geoffrey Carman wrote:
>
>> Looks like it is going to be a choice, it is still not clear to me (I
>> tried asking about it at BS
>> with little success) what the exact use case will be.
>>
>>

>
> I was told the use case was environments with millions of objects.
> Things just took forever to catch up.


I do hope it is optional, as many customers don't ever have the need to
scale to millions of objects and it seems that the new association-lite
format isn't really any improvement for this class of customers
(potentially a downgrade functionality wise).

--
----------------------------------------------------------------------
Alex McHugh
NetIQ Knowledge Partner http://forums.netiq.com

Please post questions in the forums. No support is provided via email.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.