JNDI TDI Connector to ITIM Accounts

[Mysta]

I may not have a grasp on fundamentally how JNDI works, but would it be possible to use JNDI to modify an account directly instead of a person record?(Under accounts instead of person)

[Franzw]

Post by Mysta
I may not have a grasp on fundamentally how JNDI works, but would it be possible to use JNDI to modify an account directly instead of a person record?(Under accounts instead of person)

No - ITIM does not allow that. It is using a different mechanism called "unsolicited notification events" - there a some very sketchy details around this process available in the examples and in e.g. the AD Adapter documentation where it is referenced as "event based reconciliation" IIRC.

Unless you are really REALLY willing to spend a lot of time in a very undocumented area of ITIM I would advice you to stick to the normal reconciliation processes and use event based only for those adapters that supports this OOB. But what you can do is to setup e.g. an AD Adapter and study what is send back to ITIM (and how) you should be bl to deduct the mechanism - but this is very close to unsupported land (and definitely not well documented).

HTH
Regards
Franz Wolfhagen

[@ErikSorensen]

It's not JNDI... but I've used the ITIM web services modifyAccount() api to modify an account directly from a TDI assembly line.

See https://www.ibm.com/developerworks/community/forums/html/topic?id=77777777-0000-0000-0000-000014161295 for details

I hear this is built in to ISIM 6...

[Franzw]

Post by @ErikSorensen
It's not JNDI... but I've used the ITIM web services modifyAccount() api to modify an account directly from a TDI assembly line.
See https://www.ibm.com/developerworks/community/forums/html/topic?id=77777777-0000-0000-0000-000014161295 for details
I hear this is built in to ISIM 6...

Yes - you can use the ISIM APIs (WS or Java remote) in combination with TDI to do this. But AFAIK it is up to you to handle policy conflicts - if you use the unsolicited notification i will be handled with the normal reconciliation procedure - e.g. corrected if you run with "correct compliance" set on the service.

So this is really a trade off as most things here in the world.

In older times people updated accounts directly in ldap - this should never be an option.

Regards
Franz Wolfhagen

[g***@gmail.com]

Post by Franzw

Post by @ErikSorensen
It's not JNDI... but I've used the ITIM web services modifyAccount() api to modify an account directly from a TDI assembly line.
See https://www.ibm.com/developerworks/community/forums/html/topic?id=77777777-0000-0000-0000-000014161295 for details
I hear this is built in to ISIM 6...

Yes - you can use the ISIM APIs (WS or Java remote) in combination with TDI to do this. But AFAIK it is up to you to handle policy conflicts - if you use the unsolicited notification i will be handled with the normal reconciliation procedure - e.g. corrected if you run with "correct compliance" set on the service.
So this is really a trade off as most things here in the world.
In older times people updated accounts directly in ldap - this should never be an option.
Regards
Franz Wolfhagen

Hi Franz,

Can you get me the assemblyline code for this

[Franzw]

Post by g***@gmail.com

Post by Franzw

Post by @ErikSorensen
It's not JNDI... but I've used the ITIM web services modifyAccount() api to modify an account directly from a TDI assembly line.
See https://www.ibm.com/developerworks/community/forums/html/topic?id=77777777-0000-0000-0000-000014161295 for details
I hear this is built in to ISIM 6...

Yes - you can use the ISIM APIs (WS or Java remote) in combination with TDI to do this. But AFAIK it is up to you to handle policy conflicts - if you use the unsolicited notification i will be handled with the normal reconciliation procedure - e.g. corrected if you run with "correct compliance" set on the service.
So this is really a trade off as most things here in the world.
In older times people updated accounts directly in ldap - this should never be an option.
Regards
Franz Wolfhagen

Hi Franz,
Can you get me the assemblyline code for this

Come on - I do not know what exactly you are trying to solve - and I am not going to do your work - sorry - that is not part of this forum.

You have to try to solve it - we can assist on helping on specific problems - remember we are doing this on our own time...

You should really study this link : http://www.catb.org/esr/faqs/smart-questions.html

Regards
Franz Wolfhagen

[g***@gmail.com]

Post by @ErikSorensen
It's not JNDI... but I've used the ITIM web services modifyAccount() api to modify an account directly from a TDI assembly line.
See https://www.ibm.com/developerworks/community/forums/html/topic?id=77777777-0000-0000-0000-000014161295 for details
I hear this is built in to ISIM 6...

The link is not opening for me can you get me assemblyline of this

[Franzw]

Post by g***@gmail.com

Post by @ErikSorensen
It's not JNDI... but I've used the ITIM web services modifyAccount() api to modify an account directly from a TDI assembly line.
See https://www.ibm.com/developerworks/community/forums/html/topic?id=77777777-0000-0000-0000-000014161295 for details
I hear this is built in to ISIM 6...

The link is not opening for me can you get me assemblyline of this

The forum is sunset - you may be able to load a cached version via google...

And no - I am not going to send you some AL for a problem I do not know - see my answer later in this thread...

Regards
Franz Wolfhagen