Novell IDENTITY MANAGER Jobs Guide
Novell®
www.novell.com
Jobs Guide
Identity Manager
novdocx (en) 13 May 2009
AUTHORIZED DOCUMENTATION
3.6.1
June 05, 2009
Identity Manager 3.6 Jobs Guide
Legal Notices
Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and
specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.
Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time,
without obligation to notify any person or entity of such revisions or changes.
Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims
any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.
reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to
notify any person or entity of such changes.
Any products or technical information provided under this Agreement may be subject to U.S. export controls and the
trade laws of other countries. You agree to comply with all export control regulations and to obtain any required
licenses or classification to export, re-export, or import deliverables. You agree not to export or re-export to entities
on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export
laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses.
Please refer to the International Trade Services (http://www.novell.com/company/policies/trade_services) for more
information on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary
export approvals.
novdocx (en) 13 May 2009
Copyright © 2008 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied,
stored on a retrieval system, or transmitted without the express written consent of the publisher.
Novell, Inc. has intellectual property rights relating to technology embodied in the product that is described in this
document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.
patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents/) and one or
more additional patents or pending patent applications in the U.S. and in other countries.
Novell, Inc.
404 Wyman Street, Suite 500
Waltham, MA 02451
U.S.A.
www.novell.com
Online Documentation: To access the latest online documentation for this and other Novell products, see
the Novell Documentation Web page (http://www.novell.com/documentation).
Novell Trademarks
For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/
trademarks/tmlist.html).
Third-Party Materials
All third-party trademarks are the property of their respective owners.
novdocx (en) 13 May 2009
novdocx (en) 13 May 2009
4 Identity Manager 3.6 Jobs Guide
Contents
About This Guide 7
1Overview 9
2 Adding a Predefined Job 11
3 Configuring a Predefined Job’s Properties 15
3.1 Configuring the Random Password Generator Job . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
3.2 Configuring the Schedule Driver Job . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
3.3 Configuring the Subscriber Channel Trigger Job . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
3.4 Configuring the Driver Health Job . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
3.5 Configuring the Password Expiration Notification Job . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
novdocx (en) 13 May 2009
4 Creating a Custom Job 25
4.1 Job Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
4.2 Creating the Job Definition and Job Implementation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
4.3 Adding the Job . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
5 Starting a Job 29
6 Stopping a Job 31
7 Disabling a Job 33
8 Checking a Job’s Status 35
9 Deleting a Job 37
Contents 5
novdocx (en) 13 May 2009
6 Identity Manager 3.6 Jobs Guide
About This Guide
This guide contains information about managing Identity Manager jobs. The guide is organized as
follows:
Chapter 1, “Overview,” on page 9
Chapter 2, “Adding a Predefined Job,” on page 11
Chapter 3, “Configuring a Predefined Job’s Properties,” on page 15
Chapter 4, “Creating a Custom Job,” on page 25
Chapter 5, “Starting a Job,” on page 29
Chapter 6, “Stopping a Job,” on page 31
Chapter 7, “Disabling a Job,” on page 33
Chapter 8, “Checking a Job’s Status,” on page 35
Chapter 9, “Deleting a Job,” on page 37
novdocx (en) 13 May 2009
Audience
This guide is intended for administrators, consultants, and network engineers who require a highlevel introduction to Identity Manager business solutions, technologies, and tools.
Documentation Updates
For the most recent version of this document, see the Identity Manager Documentation Web site
(http://www.novell.com/documentation/idm36/index.html).
Additional Documentation
For documentation on other Identity Manager drivers, see the Identity Manager Drivers Web site
(http://www.novell.com/documentation/idm36drivers/index.html).
Documentation Conventions
In Novell documentation, a greater-than symbol (>) is used to separate actions within a step and
items in a cross-reference path.
A trademark symbol (
trademark.
When a single pathname can be written with a backslash for some platforms or a forward slash for
other platforms, the pathname is presented with a backslash. Users of platforms that require a
forward slash, such as Linux* or UNIX*, should use forward slashes as required by your software.
®
, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party
About This Guide 7
novdocx (en) 13 May 2009
8 Identity Manager 3.6 Jobs Guide
1
Overview
Identity Manager provides the ability to launch jobs that perform specific tasks. The jobs can be run
one or more times either manually or at scheduled times.
Identity Manager provides five predefined jobs:
novdocx (en) 13 May 2009
1
Random Password Generator: Generates a random password for each object defined in the
job’s scope. The password is generated by NMAS
job references. The job submits the generated passwords one at a time to a driver’s Subscriber
channel. The Subscriber channel policies must take action on the passwords.
Schedule Driver: Starts or stops a driver.
Subscriber Channel Trigger: Sends event documents to be processed by a driver’s Subscriber
channel. For example, a job could generate an event document to trigger policies associated
with a user. Submitted event documents can be queued to the driver cache, or they can bypass
the cache and be processed immediately.
Driver Health: Evaluates the health conditions for a driver, assigns the health state, and carries
out any actions associated with the health state. This job is used in conjunction with driver
health monitoring. For complete instructions about setting up driver health monitoring,
including using the Driver Health job, see “Monitoring Driver Health” in the Identity Manager
3.6.1 Common Driver Administration Guide.
Password Expiration Notification: Searches an LDAP directory for objects whose passwords
expire in a specified number of days. When an object that meets the criteria is discovered, the
job sends an e-mail to the address contained in the object’s mail LDAP attribute.
Information about using the predefined jobs is provided in Chapter 2, “Adding a Predefined Job,” on
page 11 and Chapter 3, “Configuring a Predefined Job’s Properties,” on page 15.
You can also develop custom jobs to perform tasks. A custom job requires you to create a Job
Definition and a Job Implementation. The Job Definition is XML code that defines the parameters
for the job. The Job Implementation is a JAR file that contains the Java* classes that perform the
task. The job can perform any task that you can implement through Java classes. Because the job is
initiated through the Metadirectory engine, the job also has access to the Identity Vault data. For
more information, see Chapter 4, “Creating a Custom Job,” on page 25.
TM
to match a Password Policy object that the
Overview
9
novdocx (en) 13 May 2009
10 Identity Manager 3.6 Jobs Guide
2
Adding a Predefined Job
Identity Manager includes the following predefined jobs:
Random Password Generator: Generates a random password for identified objects.
Schedule Driver: Starts or stops the driver.
Subscriber Channel Trigger: Submits XML documents to the Subscriber channel to trigger
events.
Driver Health: Evaluates the health conditions for the driver, assigns the health state, and
carries out any actions associated with the health state.
Password Expiration Notification: Sends e-mail notifications to users whose passwords are
about to expire.
The first three jobs (Random Password Generator, Schedule Driver, and Subscriber Channel
Trigger) operate at the driver level, which means that you add them to individual drivers. The other
two jobs (Driver Health and Password Expiration Notification) operate at the driver set level; they
automatically apply to all drivers in the driver set unless you change the job’s scope to exclude some
drivers.
novdocx (en) 13 May 2009
2
The following steps provide instructions for using iManager to add predefined jobs. For information
about using Designer to add jobs, see “Scheduling Jobs” in the Designer 3.5 for Identity Manager
3.6 Administration Guide.
1 In iManager, click to display the Identity Manager Administration page.
2 Open the Overview page for the driver or driver set where you want to add the job:
2a In the Administration list, click Identity Manager Overview to display the Identity
Manager Overview page.
2b In the Search in field, specify the fully distinguished name of the container where you
want to start searching for driver sets and then click , or leave [root] in the field and
click to search from the root of the tree.
You can also click to browse for and select the container in the tree structure, or click
to select the container from a list of previously selected objects.
2c After the available driver sets are displayed on the Driver Sets page, click the desired
driver set to display the Driver Set Overview page.
2d (Conditional) If you are adding the job to a driver, click the driver to display the Driver
Overview page.
3 Click the Jobs tab.
4 Click New to display the Create Job page.
Adding a Predefined Job
11
novdocx (en) 13 May 2009
5 In the Job Name field, specify a descriptive name for the job.
6 Under Job Type, make sure that Installed is selected, then choose one of the following job
types:
Random Password Generator (Driver Only): Generates a random password for each
object in the job’s scope. The password is generated by NMAS
Policy object that the job references. These Password Policy objects are not usually the
same as those used for eDirectory
The job submits the generated passwords one at a time to the driver’s Subscriber channel.
The Subscriber channel policies must take action on the passwords.
Schedule Driver (Driver Only): Starts or stops the associated driver. You can also toggle
a driver to start the driver if it is stopped or to stop the driver if it is running.
Subscriber Channel Trigger (Driver Only): Submits zero or more trigger documents to
the Subscriber channel. The submission can either be a document per object if a scope is
defined, or it can be a single trigger event if no scope is defined.
Trigger event documents identify the job and the scope object. A trigger event can bypass
the cache and be processed immediately if desired. Trigger jobs allow you to use driver
policies that you can customize for your personal requirements.
12 Identity Manager 3.6 Jobs Guide
TM
user password policies.
TM
to match the Password
Loading...