Novell IDENTITY MANAGER 3.6.1 - WORKORDER DRIVER IMPLEMENTATION GUIDE... Manuel utilisateur

Novell®

www.novell.com

novdocx (en) 17 September 2009

AUTHORIZED DOCUMENTATION

Identity Manager 3.6.1 WorkOrder Driver Implementation Guide.

Identity Manager

3.6.1

December 18, 2009

WorkOrder Driver Implementation Guide

novdocx (en) 17 September 2009

Legal Notices

Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and

specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.

Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time,

without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims

any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.

reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to

notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the

trade laws of other countries. You agree to comply with all export control regulations and to obtain any required

licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on

the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws.

You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the

Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information on

exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export

approvals.

stored on a retrieval system, or transmitted without the express written consent of the publisher.

Novell, Inc. has intellectual property rights relating to technology embodied in the product that is described in this

document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.

patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents/) and one or

more additional patents or pending patent applications in the U.S. and in other countries.

Novell, Inc.

404 Wyman Street, Suite 500

Waltham, MA 02451

U.S.A.

www.novell.com

Online Documentation: To access the latest online documentation for this and other Novell products, see

the Novell Documentation Web page (http://www.novell.com/documentation).

novdocx (en) 17 September 2009

Novell Trademarks

For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/

trademarks/tmlist.html).

Third-Party Materials

All third-party trademarks are the property of their respective owners.

4Identity Manager 3.6.1 WorkOrder Driver Implementation Guide.

novdocx (en) 17 September 2009

Contents 5

Contents

novdocx (en) 17 September 2009

About This Guide 7

1Overview 9

1.1 The Work Order Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1.1.1 Subscriber Channel Functions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1.1.2 Publisher Channel Functions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

1.2 Key Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

1.3 Support for Standard Driver Functions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

1.4 Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

2 Implementation Checklist 15

3 Installing Driver Files 17

4 Creating a New Driver 19

4.1 Creating the WorkOrder Container in the Identity Vault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

4.2 Creating the Driver in Designer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

4.2.1 Importing the Driver Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

4.2.2 Configuring the Driver Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

4.2.3 Deploying the Driver . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

4.2.4 Starting the Driver . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

4.3 Creating the Driver in iManager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

4.3.1 Importing the Driver Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

4.3.2 Configuring the Driver Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

4.3.3 Starting the Driver . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

4.4 Activating the Driver . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

5 Upgrading an Existing Driver 27

5.1 Supported Upgrade Paths . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

5.2 What’s New in Version 3.6.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

5.3 Upgrade Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

6 Customizing the Driver 29

6.1 Policies and Rules Used in the Basic Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

6.1.1 Subscriber Channel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

6.1.2 Publisher Channel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

6.2 Human Resource Example Using an HR Driver . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

6.2.1 Human Resource Driver Policies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

6.2.2 WorkOrder Driver Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

6.3 Human Resource Example without an HR Driver . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

6.3.1 Filter Additions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

6.3.2 Subscriber Create Rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

6.3.3 Subscriber Command Transform. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

6.3.4 Work Order E-Mail Notification of Work Order Completion . . . . . . . . . . . . . . . . . . . . 34

6Identity Manager 3.6.1 WorkOrder Driver Implementation Guide.

novdocx (en) 17 September 2009

7 Creating and Managing Work Orders 35

7.1 Using Drivers to Create Work Orders. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

7.2 Using iManager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

7.2.1 Creating a New Work Order . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

7.2.2 Editing Work Order Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

7.2.3 Filtering the Work Order List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

8 Managing the Driver 39

9 Troubleshooting Driver Processes 41

A Driver Properties 43

A.1 Driver Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

A.1.1 Driver Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

A.1.2 Driver Object Password (iManager Only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

A.1.3 Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

A.1.4 Startup Option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

A.1.5 Driver Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

A.1.6 ECMAScript (Designer Only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

A.2 Global Configuration Values . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

B Objects and Attributes Used 49

B.1 New Objects Used by the Driver . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

B.1.1 DirXML-WorkOrder Object. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

B.1.2 DirXML-WorkToDo Object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

B.2 DoItNow and SendToPublisher Flags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

B.2.1 DoItNow Flag . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

B.2.2 SendToPublisherFlag . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

C Schema and Policy Rules For Work Order Management 51

C.1 DirXML-WorkOrder Object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

C.2 DirXML-WorkToDo Object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

C.3 Publisher Placement Rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

C.4 Subscriber Placement Rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

C.5 Subscriber Create Rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

About This Guide 7

novdocx (en) 17 September 2009

About This Guide

This guide explains how to install and configure the Novell®Identity Manager WorkOrder driver.

Chapter 1, “Overview,” on page 9

Chapter 2, “Implementation Checklist,” on page 15

Chapter 3, “Installing Driver Files,” on page 17

Chapter 4, “Creating a New Driver,” on page 19

Chapter 5, “Upgrading an Existing Driver,” on page 27

Chapter 6, “Customizing the Driver,” on page 29

Chapter 7, “Creating and Managing Work Orders,” on page 35

Chapter 8, “Managing the Driver,” on page 39

Chapter 9, “Troubleshooting Driver Processes,” on page 41

Appendix A, “Driver Properties,” on page 43

Appendix B, “Objects and Attributes Used,” on page 49

Appendix C, “Schema and Policy Rules For Work Order Management,” on page 51

Audience

This guide is intended for developers and administrators using Identity Manager and the WorkOrder

driver.

Feedback

We want to hear your comments and suggestions about this manual and the other documentation

included with this product. Please use the User Comments feature at the bottom of each page of the

online documentation, or go to www.novell.com/documentation/feedback.html and enter your

comments there.

Documentation Updates

For the most recent version of the Identity Manager WorkOrder Driver Implementation Guide, visit

the Identity Manager Documentation Web site (http://www.novell.com/documentation/

idm36drivers).

Additional Documentation

For documentation on other Identity Manager drivers, see the Identity Manager Documentation Web

site (http://www.novell.com/documentation/idm36drivers).

Documentation Conventions

In Novell documentation, a greater-than symbol (>) is used to separate actions within a step and

items in a cross-reference path.

8Identity Manager 3.6.1 WorkOrder Driver Implementation Guide.

novdocx (en) 17 September 2009

A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party

trademark.

Overview

novdocx (en) 17 September 2009

Overview

Typically, changes to data in the Identity Vault or a connected application are immediately

processed. Work orders enable you to schedule when tasks are to be performed.

For example, a new employee is hired but is not scheduled to start for a month. The employee needs

to be added to the HR database but should not be granted access to any corporate resources (e-mail,

servers, and so forth) until the start date. In a typical scenario, the user would be granted access as

soon as he or she is added to the HR database. With work orders implemented, a work order is

created that delays account provisioning to the user’s start date.

The WorkOrder driver provides work order functionality. The following sections introduce the

WorkOrder driver and the key concepts and terminology associated with the driver:

Section 1.1, “The Work Order Process,” on page 9

Section 1.2, “Key Features,” on page 14

Section 1.3, “Support for Standard Driver Functions,” on page 14

Section 1.4, “Terminology,” on page 14

1.1 The Work Order Process

From a high-level perspective, work orders are processed as follows:

1. A work order is created, either through an automated process (another driver) or a manual

process (iManager), and is added as a WorkOrder object in a the Identity Vault’s work order

container.

2. At the scheduled time (as defined in the WorkOrder object), the driver begins processing the

work order.

3. The driver applies any policies to the work order (performing any actions associated with the

policies) and creates a WorkToDo object in the Identity Vault’s work order container.

4. Depending on how you configure the WorkOrder driver and the other drivers in your system,

either the WorkOrder driver performs the desired work or other drivers use the information in

the the WorkToDo object to perform the work. Because the WorkOrder driver is designed to

accomodate a variety of configuration scenarios, sample scenarios are provided in Chapter 6,

“Customizing the Driver,” on page 29.

The following sections provide detailed information about the work performed by the driver’s

Subscriber and Publisher channels. Because the WorkOrder driver channels function differently than

with other drivers, you should carefully review the information.

Section 1.1.1, “Subscriber Channel Functions,” on page 9

Section 1.1.2, “Publisher Channel Functions,” on page 11

1.1.1 Subscriber Channel Functions

This section provides a basic understanding of the functions the Subscriber channel performs in the

WorkOrder driver.

10 Identity Manager 3.6.1 WorkOrder Driver Implementation Guide.

novdocx (en) 17 September 2009

First, Placement and Create rules are configured so all new work orders that contain the required

attributes are sent to the Subscriber channel. The following attributes must be present for a work

order to pass the Create rule and go to the Subscriber channel:

DirXML-nwoContent

DirXML-nwoStatus

DirXML-DoItNow Flag

DirXML-SendToPublisher Flag

Figure 3-1 shows what happens when the Subscriber channel receives a work order.

Figure 1-1 Subscriber Channel Configuration

The Subscriber channel performs the following actions:

1. Creates an association for each WorkOrder object it receives.

2. Checks if the DoItNow and SendToPublisher flags are set to True. If these attributes are set to

True, the Subscriber channel builds a work order and sends it immediately to the Publisher

channel.

3. If the DoItNow and SendToPublisher flags are not set to True, the Subscriber channel waits

until the next event.

Is it an Add

work order?

Subscriber gets the

WorkOrder XML

from the engine.

Write the

association

to the engine.

Returns to

the engine.

Write the Work

Order object to

the Publisher.

Yes

Is the

SendToPublisher

or the DoItNow

flag set?

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Novell Logiciel

Novell

Novell PLATESPIN PORTABILITY SUITE 8.1 Manuel utilisateur

Novell

Novell CLIENT FOR LINUX 2.0 SP1 - ADMINISTRATION Mode d’emploi

Novell

Novell PLATESPIN PORTABILITY SUITE 8.1 Manuel utilisateur

Novell

Novell LINUX ENTERPRISE DESKTOP 11 - KDE 17-03-2009 Manuel utilisateur

Novell

Novell SENTINEL RAPID DEPLOYMENT 6.1 - 06-15-2009 Manuel utilisateur

Novell

Novell GROUPEWISE 8 - SUPPORT PACK 2 05-2010 Manuel utilisateur

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - NETWORK DISCOVERY DATABASE... Manuel utilisateur

Novell

Novell ZENWORKS APPLICATION VIRTUALIZATION 8.0 - INTEGRATION AND STREAMING GUIDE... Manuel utilisateur

Novell

Novell SUSE LINUX ENTERPRISE SERVER 10 STORAGE Manuel utilisateur

Novell

Novell IDENTITY MANAGER 3.6.1 - TASK SERVICE DRIVER Manuel utilisateur

Novell

Novell ACCESS MANAGER 3.1 SP2 BETA 1 - SCENARIOS... Manuel utilisateur

Novell

Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5 Mode d’emploi

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - ZENWORKS REPORTING SERVER 10.3... Manuel utilisateur

Novell

Novell LINUX ENTERPRISE DESKTOP 10 - IPRINT CLIENT Manuel utilisateur

Novell

Novell ACCESS MANAGER 3.1 SP2 - SSL VPN USER GUIDE... Manuel utilisateur

Novell

Novell OPEN ENTERPRISE SERVER 2.0 SP2 - DOMAIN SERVICE FOR... Manuel utilisateur

Novell

Novell LINUX ENTERPRISE SERVER 10 - START-UP GUIDE... Manuel utilisateur

Novell

Novell DST - READ ME 03-2007 Manuel utilisateur

Novell

Novell APPARMOR - AND Manuel technique

Novell

Novell GROUPWISE 7 - SECURITY POLICIES Manuel utilisateur

Novell

Novell APPARMOR - AND Manuel

Novell

Novell GROUPWISE 8 - MONITOR Manuel utilisateur

Novell

Novell LINUX ENTERPRISE DESKTOP 11 - ADMINISTRATION GUIDE... Guide de référence rapide

Novell

Novell GROUPWISE 7 - SECURITY POLICIES Manuel utilisateur

Manuels Logiciel populaires d'autres marques

COMPRO

COMPRO COMPROFM Manuel utilisateur

Muratec

Muratec OFFICEBRIDGE ONLINE Manuel utilisateur

Oracle

Oracle Contact Center Anywhere 8.1 Manuel utilisateur

Adobe

Adobe 65007312 - Photoshop Lightroom Manuel

Avaya

Avaya NULL One-X for RIM Blackberry Manuel utilisateur

HP ProLiant BL420c Manuel utilisateur

PS Audio

PS Audio PowerPlay Manuel du propriétaire

Brady

Brady LOCKOUT PRO 3.0 Manuel de service

Avaya

Avaya Interaction Center Manuel utilisateur

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manuel

Oracle

Oracle Application 9i Manuel utilisateur

Acer

Acer RDM Manuel utilisateur

Canon

Canon Vixia HF21 Manuel utilisateur

Canon

Canon ZR950 Manuel utilisateur

Samsung

Samsung Auto Backup Manuel utilisateur

Polycom

Polycom Vortex EF2201 Instructions d'installation et d'utilisation

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manuel utilisateur

Lexmark

Lexmark Apps Manuel de service