Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Re: ICE import new and/or update existing users

97 views
Skip to first unread message

Peter Kuo

unread,
Nov 26, 2009, 6:20:39 PM11/26/09
to
stevewatts wrote:

> but if an account doesn't exist it will
> create that account in the vault?

No.


--


Peter
eDirectory Rules!
http://www.DreamLAN.com

a...@novell.com

unread,
Nov 26, 2009, 7:16:32 PM11/26/09
to
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

But you could do this with just plain old LDAP. If you have a CSV
formatting that into modify or add operations is pretty trivial, but it
requires that you know which objects already exist and which do not. You
could also do the brute-force method of trying to add all operations and
then, after 90% of them fail, do the modify of all of them so those that
already existed still exist but those that did not now do, and everything
has the attribute(s) added properly.

Good luck.

Peter Kuo wrote:
> stevewatts wrote:
>
>> but if an account doesn't exist it will
>> create that account in the vault?
>
> No.
>
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=LxXl
-----END PGP SIGNATURE-----

Wolfgang Schreiber

unread,
Nov 26, 2009, 8:54:01 PM11/26/09
to
Steve,

that should be fairly easy with my DSImport and shouldn't take longer than a
minute or two.
Just do two runs - one with "Create Objects" and the next run with "Modify
Objects".

http://www.novell.com/communities/node/9253/dsimport-win32-tool-update-edirectory-csv-files

Of course you'll need to have the users' mandatory attributes in the file.

Wolfgang

"stevewatts" <steve...@no-mx.forums.novell.com> wrote in message
news:stevewat...@no-mx.forums.novell.com...
>
> Is it possible to use ICE to import a csv file which will update
> attributes of existing accounts, but if an account doesn't exist it will


> create that account in the vault?
>
>

> We need to update a single attribute on upto 80 accountsat a time to
> force syncing with another system. Some of these accounts exist in
> the vault, others will not.
>
>
>
> We previously achieved this in test using a delimited text driver, but
> have now realised that it needs additional Activation. I'd like to look
> at options as its a bit late in the project to start trying to get extra
> funding for something I thought was bundled with Identity Manager.
>
> Thanks
>
>
> --
> stevewatts
> ------------------------------------------------------------------------
> stevewatts's Profile: http://forums.novell.com/member.php?userid=50603
> View this thread: http://forums.novell.com/showthread.php?t=394141
>


Peter Kuo

unread,
Nov 26, 2009, 9:52:32 PM11/26/09
to
Why bother checking for failure? Just do the operation twice ... add then
modify ... but that's a rather "gluggy" way of doing things.

a...@novell.com

unread,
Nov 26, 2009, 11:14:06 PM11/26/09
to
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sorry... I didn't mean to watch for failure but rather just meant to state
that 90% of them (assuming 90% of the objects in the imported data already
existed) would fail but just keep on going with the modify, which is what
you just said. I agree... "gluggy" (whatever that is it sounds right) and
knowing what you are importing seems to be a good thing.

Good luck.


Peter Kuo wrote:
> Why bother checking for failure? Just do the operation twice ... add
> then modify ... but that's a rather "gluggy" way of doing things.
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=/vDw
-----END PGP SIGNATURE-----

Peter Kuo

unread,
Nov 27, 2009, 12:16:35 AM11/27/09
to
> will update attributes of existing accounts, but if an account doesn't
> exist it will create that account in the vault?


ICE nor any of the 'standard' LDAP modification tools would, however, the
ldapModify module in the ldapGadgets
(http://www.dreamlan.com/gadgets.html) could so that in the same pass.
Simply select the "Replace values or Add DN if not exist" option.

Peter Kuo

unread,
Nov 27, 2009, 12:21:42 AM11/27/09
to
a...@novell.com wrote:

> ... would fail but just keep on going with the modify,

Right .. just have to be careful in checking the log file to ensure the
'failures' are of the -601 type (no such entry) for the modify pass and
failures for the add pass are of the -606 type (entry already exist).

Peter Kuo

unread,
Nov 27, 2009, 6:46:02 PM11/27/09
to
You don't have to convert to LDIF since ICE will accept CSVs (and so do
the ldapGadget modules - and one of them is a LDIF<->CSV Converter).
0 new messages