Anonymous_User Absent Member.
Absent Member.
1585 views

ICE bug?

Trying to do an export here, and it seems that ICE can't export the
"workforceID" attribute.

The attribute is there, it has data in it. It's not a rights issue, because I
can use openldap's ldapsearch with the same account and password and it exports
fine.

Watching both of these in dstrace is interesting.

ldapsearch passes in the list of requested attributes.

ice requests all attributes, then appears to try to filter out the ones you
asked for.

I've tried this with a couple of different versions of ice.exe on Win32 here.
All do the same thing.


---------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu

I'm tired of receiving rubbish in my mailbox, so the E-mail address is
munged to foil the junkmail bots. Humans will figure it out on their own.
Labels (2)
0 Likes
12 Replies
Anonymous_User Absent Member.
Absent Member.

Re: ICE bug?

David Gersic wrote:

> Trying to do an export here, and it seems that ICE can't export the
> "workforceID" attribute.


What happens when you try? Just no 'output'?

--


Peter
eDirectory Rules!
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: ICE bug?

Oh, version of NetWare/SP and eDir?

--


Peter
eDirectory Rules!
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: ICE bug?

Just did a quick test against eDir 8.7.3.3 on a Win2K box using C1
(1.3.6)'s ICE wizard interface (version 10552.40) and it worked just
fine?


--


Peter
eDirectory Rules!
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: ICE bug?

On Sat, 05 Nov 2005 23:51:03 GMT, "Peter Kuo"
<Peter@Novell.Product.Support.Forums> wrote:

>David Gersic wrote:
>
>> Trying to do an export here, and it seems that ICE can't export the
>> "workforceID" attribute.

>
>What happens when you try? Just no 'output'?


I'm using the DELIM output selection, and there's no output. The place where
there should be "...stuff,workforceid,morestuff..." is just
"...stuff,,morestuff...".



---------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu

I'm tired of receiving rubbish in my mailbox, so the E-mail address is
munged to foil the junkmail bots. Humans will figure it out on their own.
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: ICE bug?

On Sun, 06 Nov 2005 00:09:57 GMT, "Peter Kuo"
<Peter@Novell.Product.Support.Forums> wrote:

>Just did a quick test against eDir 8.7.3.3 on a Win2K box using C1
>(1.3.6)'s ICE wizard interface (version 10552.40) and it worked just
>fine?


I'm doing this from the command line if that matters. ICE says:

Novell Import Convert Export utility for Novell eDirectory
version: 10552.51
Copyright 2000 Novell, Inc. All rights reserved. Patent Pending.

Source Handler: ICE LDAP handler for Novell eDirectory (version: 10552.40 )

Destination Handler: ICE Delimited data handler for Novell eDirectory (version:
10552.40 )

ICE log file: ice.log

Start time: Tuesday, November 08, 2005

Press control-C to exit

Operation in progress ...




Total entries processed: 1

Total entries failed: 0

End time: Tuesday, November 08, 2005

Total Time: 0:00:01.062

Time per entry: 00:01.062




Here's the command line (edited to hide the ip addr, user, and password):

\novell\consoleone\1.2\bin\ice -S LDAP -s 127.0.0.1 -p 1636 -d cn=User,o=niu -w
password -L DEVFSelfSignedCert.der -F "(workforceid=122326)" -b ou=users,o=niu
-D DELIM -f mike1.csv -t
dn,cn,niupositionnumber,niufullparttime,niuregtemp,workforceid,niudateofbirth,
niubusinessunit,niussn,departmentnumber,employeetype,jobcode,initials,givenname,
sn,fullname,title,telephonenumber,ou,physicaldeliveryofficename,employeestatus,
niurank


(Minor gripe: unlike ldapsearch, the ice command line length is limited, so I
can't actually get all of the data that I want out of it. But ldapsearch doesn't
put out CSV files. And, unlike ldapsearch, I can't even just tell it to get all
attributes, since the CSV file output insists on having a "template" to work
from. Argh.)


And here's the resulting CSV output (user personal data hidden):

"cn=DSMIT10,ou=Users,o=NIU",DSMIT10,00020855,P,T,,1990xxxx,STDTS,999999999,CG00000,
H,1105,E,First,Last,First Last,Negotiated Rates,,Student Affairs,CL 180 - 0,A,


Now, I _know_ that this guy has a workforceid. He has to. I used it in the
search filter, and it found him, but it won't put it out in to the CSV file. And
it seems to be just the workforceid. Every other attribute seems to export ok.


Using the LDIF output option doesn't seem to work any better. I can find him by
workforceid, but I can't output it. And I'm sure it's not a rights problem
because I can use the same user/password to bind with ldapsearch and it outputs
workforceid just fine.



---------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu

I'm tired of receiving rubbish in my mailbox, so the E-mail address is
munged to foil the junkmail bots. Humans will figure it out on their own.
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: ICE bug?

On Sun, 06 Nov 2005 00:09:57 GMT, "Peter Kuo"
<Peter@Novell.Product.Support.Forums> wrote:

>Just did a quick test against eDir 8.7.3.3 on a Win2K box using C1
>(1.3.6)'s ICE wizard interface (version 10552.40) and it worked just
>fine?


Ok, I figured it out. The problem is how they're doing the return attribute
list, in conjunction with how I have the LDAP server set up.

As I said in my first post:

ice requests all attributes, then appears to try to filter out
the ones you asked for.

In fact, this is exactly what it does. You can see it if you watch the search
request in dstrace. I'm used to ldapsearch, which actually passes in the
requested attribute list, so that it gets back only what it asked for, so this
is a bit strange to me.

So, looking at it some more, I figured it out. To make something else work out
the way it was documented for our developpers, I have "niuEmplId" mapped to
"workforceid" in the LDAP Group. This works fine, as if you ask for workforceid,
you get workforceid, but if you ask for niuEmplID, you get niuEmplID. They're
actually the same attribute in the directory, I'm not storing both. I was
originally going to have to store both, but we had a last minute design change
that made it no longer necessary to have two attributes with almost the same
data in them. It's a long story.

Actually, this works great with ldapsearch. With ICE, though, you tell ICE you
want workforceid. It asks for all attributes. It gets back niuEmplID due to the
attribute map, which it then filters out because it thinks it's looking for
workforceid in the output. Argh.

This is not what I expected it to be doing. It's probably legal to do it this
way, but it's dumb work being done by ICE that it should (IMHO) be allowing the
directory to do for it.


---------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu

I'm tired of receiving rubbish in my mailbox, so the E-mail address is
munged to foil the junkmail bots. Humans will figure it out on their own.
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: ICE bug?

David Gersic wrote:

> Minor gripe: unlike ldapsearch, the ice command line length is
> limited,


No kidding! Off you go to the "enhancement page" <g>

--


Peter
eDirectory Rules!
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: ICE bug?

David Gersic wrote:

> With ICE, though, you tell ICE you
> want workforceid. It asks for all attributes. It gets back niuEmplID
> due to the attribute map, which it then filters out because it thinks
> it's looking for workforceid in the output. Argh


This kind of sucks! So, I guess if the two attributes were not mapped
to each other (which I didn't as it was a default setup), it would have
worked for on first try ...

--


Peter
eDirectory Rules!
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: ICE bug?

David Gersic wrote:

> This is not what I expected it to be doing. It's probably legal to do
> it this way, but it's dumb work being done by ICE that it should
> (IMHO) be allowing the directory to do for it.


I fully agree and let me know what Novell thinks of this ...

--


Peter
eDirectory Rules!
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: ICE bug?

Hi David:

I know this is resolved. However, I got a couple of people interested
in this issue and they are wondering what version of eDir you have
there so they can try to duplicate it. Thanks.

--


Peter
eDirectory Rules!
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: ICE bug?

On Sun, 20 Nov 2005 05:05:58 GMT, "Peter Kuo"
<Peter@Novell.Product.Support.Forums> wrote:

>Hi David:
>
>I know this is resolved. However, I got a couple of people interested
>in this issue and they are wondering what version of eDir you have
>there so they can try to duplicate it. Thanks.


Sorry, was on vacation last week. eDir here is 8.7.3.something. I don't think it
matters on the version, though, since it's ICE that's doing the dirty deed, not
eDir.


---------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu

I'm tired of receiving rubbish in my mailbox, so the E-mail address is
munged to foil the junkmail bots. Humans will figure it out on their own.
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: ICE bug?

OK, just wanted to be at least on similar version of eDir (that's what
was asked for). Thanks.


--


Peter
eDirectory Rules!
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.