Anonymous_User Absent Member.
Absent Member.
146 views

which policy manage the disable a/c ?


We are using IDM 4.0.1a in Suse 11 sp1 and remote loader in Windows
2003.

We do not use any Entitlement in the environment, I want to trace which
policy / rule manage the disable account stuff. I've tried to switch off
the rule

Trigger credential de-provisioning when user is being disabled but seems
that it is not the related rule. Would anyone knows which rule will
cater for disable account stuff without any entitlement enabled.

Thanks & Regards,

Agnes


--
ayeungied
------------------------------------------------------------------------
ayeungied's Profile: https://forums.netiq.com/member.php?userid=548
View this thread: https://forums.netiq.com/showthread.php?t=45027

Labels (1)
0 Likes
4 Replies
Anonymous_User Absent Member.
Absent Member.

Re: which policy manage the disable a/c ?

On 25.10.2012 10:24, ayeungied wrote:
>
> We are using IDM 4.0.1a in Suse 11 sp1 and remote loader in Windows
> 2003.
>
> We do not use any Entitlement in the environment, I want to trace which
> policy / rule manage the disable account stuff. I've tried to switch off
> the rule
> Trigger credential de-provisioning when user is being disabled but seems
> that it is not the related rule. Would anyone knows which rule will
> cater for disable account stuff without any entitlement enabled.


In the driver filter, ensure Login Disabled is set to Subscriber sync
and Publisher either Ignore or Reset.

Without entitlements, that will enable/disable the account when Login
Disabled changes in the IDVault.
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: which policy manage the disable a/c ?


Got it, thank you Alex.


--
ayeungied
------------------------------------------------------------------------
ayeungied's Profile: https://forums.netiq.com/member.php?userid=548
View this thread: https://forums.netiq.com/showthread.php?t=45027

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: which policy manage the disable a/c ?

On Thu, 25 Oct 2012 08:24:01 +0000, ayeungied wrote:

> I want to trace which policy / rule manage the disable account stuff.


It's not done in a policy or rule. The schema map maps eDirectory "Login
Disabled" to MAD's userAccountControl bitfield value that disables/
enables the account.


--
--------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu
Knowledge Partner http://forums.netiq.com

Please post questions in the forums. No support provided via email.

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: which policy manage the disable a/c ?


thank you David.


--
ayeungied
------------------------------------------------------------------------
ayeungied's Profile: https://forums.netiq.com/member.php?userid=548
View this thread: https://forums.netiq.com/showthread.php?t=45027

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.