Top
Systemwalker Runbook Automation Installation Guide
Systemwalker

C.2.2 Registering Users in LDAP

To upgrade from the following versions or levels, register the user information that will be required for Systemwalker Runbook Automation V15.1.1 in the authentication infrastructure currently used.

Note

  • Only follow this procedure when upgrading from the following version/level:

    • Systemwalker Runbook Automation V14g V14.1.0

  • This procedure assumes that the user information required by Systemwalker Runbook Automation V15.1.2 is registered in the authentication infrastructure currently used.

  • Refer to the Systemwalker Runbook Automation Installation Guide for information on how to register users.

[When Interstage Directory Service is used (when the sample LDIF files are used)]
Location of sample LDIF files

[Windows]

ldapmodify -H ldap://hostname:389 -D "cn=manager,ou=interstage,o=fujitsu,dc=com" -w password -a -f rbauser.ldif

[Linux]

/opt/FJSVirepc/bin/ldapmodify -H ldap://hostname:389 -D "cn=manager,ou=interstage,o=fujitsu,dc=com" -w password -a -f rbauser.ldif

Content in the samples, and how to edit this content

This sample assumes the LDAP configuration shown below.

Edit the files according to the LDAP environment that will be used for operations. The password must also be changed.

Public directory

ou=interstage,o=fujitsu,dc=com

Organizational unit that stores the users

ou=User

Organizational unit that stores the groups

ou=Group

User for Schedule Startup

swrbasch

Password of User for Schedule Startup

systemwalker#2

Refer to " [When Interstage Directory Service is used (when new LDIF files are created)]" for information on the content defined in the LDIF files.

How to define the samples

Register the LDIF file definition information in LDAP using the ldapmodify command (refer to "Interstage Directory Service Operation Commands" in the Interstage Application Server/Interstage Web Server Reference Manual (Command Edition) for details):

[Windows]

ldapmodify -H ldap://<Interstage Directory Service host name>:<port> -D "<Administrator DN>" -w <password> -a -f <edited LDIF file>

[Linux]

/opt/FJSVirepc/bin/ldapmodify -H ldap://<Interstage Directory Service host name>:<port> -D "<Administrator DN>" -w <password> -a -f <edited LDIF file>

Information

Interstage Directory Service host name: hostname

Port number: 389

Administrator DN: cn=manager,ou=interstage,o=fujitsu,dc=com

Administrator DN password: password

Edited LDIF file name: rbauser.ldif

[Windows]

ldapmodify -H ldap://hostname:389 -D "cn=manager,ou=interstage,o=fujitsu,dc=com" -w password -a -f swrba_swrbasch.ldif

[Linux]

/opt/FJSVirepc/bin/ldapmodify -H ldap://hostname:389 -D "cn=manager,ou=interstage,o=fujitsu,dc=com" -w password -a -f swrba_swrbasch.ldif

For the detail of ldapmodify command, refer to "Interstage Directory Service Operation Commands" in the Interstage Application Server Reference Manual (Command Edition).

[When Interstage Directory Service is used (when new LDIF files are created)]

This section explains example of replacement string for actual case with using below.

Replacement string

Settings value after replacement

%DOMAIN%

Public directory

(Example) ou=interstage,o=fujitsu,dc=com

%USER%

Organizational Unit (OU) "User" (if this name was changed, this will be the Organizational Unit (OU) of the name that was changed)

(Example) User

%GROUP%

Organizational Unit (OU) "Group" (if this name was changed, this will be the Organizational Unit (OU) of the name that was changed)

(Example) Group

Registering the User for Schedule Startup

Register the user required by Systemwalker Runbook Automation to start the Automated Operation Process according to a schedule. The following user name and password are used in the example below. The following user name is the suggested value, however this can be changed to any name. Note that the value set here is specified in the parameter input file when the installation preparation command is executed.

User name

Password

swrbasch

systemwalker#2

Following the settings example shown below, create the LDIF file for registering the user, then register the user in LDAP using the ldapmodify command (refer to "Interstage Directory Service Operation Commands" in the "Interstage Application Server/Interstage Web Server Reference Manual (Command Edition)" for details).

Settings example

dn: uid=swrbasch,ou=%USER%,%DOMAIN%

changetype: add

objectClass: inetOrgPerson

objectClass: organizationalPerson

objectClass: person

objectClass: top

objectClass: ssoUser

cn: swrbasch

sn: swrbasch

givenName: swrbasch

userPassword: systemwalker#2

uid: swrbasch

dn: cn=AdminRole,ou=%GROUP%,%DOMAIN%

changetype: modify

member: uid=swrbasch,ou=%USER%,%DOMAIN%

dn: cn=IflowUsers,ou=%GROUP%,%DOMAIN%

changetype: modify

member: uid=swrbasch,ou=%USER%,%DOMAIN%

[When Active Directory is used]

Register the user shown below in Active Directory.

Last name

First name

Initial

User logon name

Password

Will there be a check mark in the enter password window? (*1)

User's group

Description

swrbasch

(Note 2)

Blank

Blank

swrbasch

(Note 2)

systemwalker#2

(Note 3)

A: User must change password at next logon
B: User cannot change password
C: Password never expires
A: Account is disabled

AdminRole

IflowUsers

User for Schedule Startup

*1A: The check mark has been removed B: There may be a check mark C: There is a check mark
*2 Recommended value, can be changed to any value.

*3Initial value, can be changed to any value.

To register the user, follow the steps below:

  1. From the start menu, click Control Panel >> Administrative Tools >> Active Directory Users and Computers.

  2. Right-click the name in Organizational Unit (OU) "User" (if the name was changed in "Creating an organizational unit (OU)", this will be the Organizational Unit (OU) of the name that was changed), then select New >> User.

  3. The New Object - User window will be displayed.
    As shown in the above table, enter Last name, First name, Initials, and User logon name, then click Next.

  4. The password window will be displayed.
    As shown in the above table, set the password and check boxes, then click Next.

  5. The confirmation window will be displayed.
    If the content is correct, click OK.

  6. Right-click the user registered to open the properties window.

  7. Select the Member Of tab, then click Add.

  8. In the Enter the object names to select text box, enter the name of the owner group shown in the above table, then click OK.

  9. Click the OK button of the properties window.

[When OpenLDAP is used]

This section explains example of replacement string for actual case with using below.

Replacement target string

Settings value after replacement

%DOMAIN%

Public directory

(Example) ou=interstage,o=fujitsu,dc=com

%USER%

Organizational Unit (OU) "User" (if this name was changed, this will be the Organizational Unit (OU) of the name that was changed)

(Example) User

%GROUP%

Organizational Unit (OU) "Group" (if this name was changed, this will be the Organizational Unit (OU) of the name that was changed)

(Example) Group

Registering the User for Schedule Startup

Register the user required by Systemwalker Runbook Automation to start the Automated Operation Process according to a schedule. The following user name and password are used in the example below. The following user name is the suggested value, however this can be changed to any name. Note that the value set here is specified in the parameter input file when the installation preparation command is executed.

User name

Password

swrbasch

systemwalker#2

Following the settings example shown below, create the LDIF file for registering the user, then use the ldapadd command to register the user in LDAP.

Settings example

dn: uid=swrbasch,ou=%USER%,%DOMAIN%
changetype: add
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: person
objectClass: top
cn: swrbasch
sn: swrbasch
givenName: swrbasch
userPassword: systemwalker#2
uid: swrbasch

dn: cn=AdminRole,ou=%GROUP%,%DOMAIN%

changetype: modify

member: uid=swrbasch,ou=%USER%,%DOMAIN%

dn: cn=IflowUsers,ou=%GROUP%,%DOMAIN%

changetype: modify

member: uid=swrbasch,ou=%USER%,%DOMAIN%