This section describes the information provided for each adapter, and the topics are organized as follows:
The introductory section lists the versions of the resource supported by the adapter. Other versions might be supported, but they have not been tested.
This section also lists the adapter’s Java class name. The class name is always used for tracing. In addition, if the resource is a custom resource, the class name must be specified on the Configure Managed Resources page. See Waveset Installation Notes for more information about custom resources.
Some resources have multiple adapters. For example, Waveset provides adapters for Windows Active Directory and Windows Active Directory ActiveSync. In these cases, a table similar to the following is listed in the introductory section:
GUI Name |
Class Name |
---|---|
Windows 2000 / Active Directory |
com.waveset.adapter.ADSIResourceAdapter |
Windows 2000 / Active Directory ActiveSync |
com.waveset.adapter.ActiveDirectoryActiveSyncAdapter |
The GUI name is displayed on the drop-down menu on the Resources page. Once the resource has been added to Waveset, this name is also displayed in the resource browser.
This section lists additional steps you must perform on the resource to allow you to manage the resource from Waveset. (It is assumed that the resource is fully functional before you attempt to establish a connection with Waveset.)
From an installation perspective, there are two types of adapters:
Waveset adapters
Custom adapters
Waveset adapters do not require additional installation procedures. Use the following steps to display the resource on the actions menu on the Resource page:
From the Waveset Administrator Interface, click Resources, and then click Configure Types.
Select the appropriate options in the Waveset Resources section.
Click Save at the bottom of the page.
Custom adapters require additional installation steps. Typically, you must copy one or more jar files to the InstallDir\idm\WEB-INF\lib directory and add the adapter’s Java class to the list of adapters. The JAR files are usually available on the installation media, or through download from the Internet.
The following example from the DB2 resource adapter illustrates this procedure:
Copy the db2java.jar file to the InstallDir\idm\WEB-INF\lib directory.
From the Waveset Administrator interface, click Resources, and then click Configure Types.
Click Add Custom Resource near the bottom of the page.
Enter the full class name of the adapter in the bottom text box, such as com.waveset.adapter.DB2ResourceAdapter.
Click Save at the bottom of the page.
The following table lists the adapters that require jar files to be installed on the Waveset server.
This section lists dependencies and limitations related to using the resource. The contents of this section varies among adapters.
This section provides resource-specific configuration information that can be viewed on the Edit Synchronization Policy page. The following attributes are applicable to most Active Sync adapters.
The Security Notes section provides connection and authorization information.
Supported Connections lists the type of connection used to communicate between Waveset and the resource. The following types of connections are commonly used:
Waveset Gateway
Secure Shell (SSH)
Java Database Connectivity (JDBC) over Secure Sockets Layer (SSL)
Java Naming and Directory Interface (JNDI) over SSL
Telnet/TN3270
Other connection types are possible.
Required Administrative Privileges lists the privileges the administrator account must have to create users and perform other tasks from within Waveset. The administrator account is specified on the Resource Attributes page.
For all Active Sync adapters, the administrator account must have read, write, and delete permissions on the directory specified in the Log File Path field in the Active Sync Running Settings
This section contains a table that summarizes the provisioning capabilities of the adapter. These capabilities include:
Enable/Disable Account. The ability to enable and disable user accounts is determined by the resource. For example, on some UNIX systems, an account is disabled by changing the password to a random value.
Rename Account. The ability to rename user accounts is determined by the resource.
Pass-Through Authentication. A Waveset feature that enables resource users to log in to the Waveset User interface.
Before/After Actions. Actions are scripts that run within the context of a managed resource, if native support exists for scripted actions.
For example, on UNIX systems, actions are sequences of UNIX shell commands. In Microsoft Windows environments, actions are DOS-style console commands that can execute within the CMD console.
Dataloading Methods. Indicates how data can be loaded into Waveset. The following methods are supported:
Active Sync. Allows information that is stored in an “authoritative” external resource (such as an application or database) to synchronize with Waveset user data. The adapter can push or pull resource account changes into Waveset.
Discovery (load from resource). Initially pulls resource accounts into Waveset, without viewing before loading. Resource account information can also be imported from or exported to a file.
Reconciliation. Periodically pull resource accounts into Waveset, taking action on each account according to configured policy. Use the reconciliation feature to highlight inconsistencies between the resource accounts on Waveset and the accounts that actually exist on a resource, and to periodically correlate account data.
The Account Attributes page, or schema map, maps Waveset account attributes to resource account attributes. The list of attributes varies for each resource. You should remove all unused attributes from the schema map page. If you add attributes, you will probably need to edit user forms or other code.
The Waveset User Attributes can be used in rules, forms, and other Waveset-specific functions. The Resource User Attributes are used only when the adapter communicates with the resource.
Waveset supports the following types of account attributes:
string
integer
Boolean
encrypted
binary
Binary attributes include graphic files, audio files, and certificates. Most resources do not support binary account attributes. Currently, only certain directory, flat file, and database adapters can process binary attributes. In your forms and workflows, make sure you do not attempt to push binary attributes to resources that do not support them. Consult the “Account Attributes” section of the adapter documentation to determine if binary attributes are supported for your adapter.
In addition, keep the file size for any file referenced in a binary attribute as small as possible. Loading extremely large graphics files, for example, can cause the performance of Waveset to decrease.
Most adapters do not support binary account attributes. Some adapters support binary attributes, such as graphics, audio, and certificates. Consult the “Account Attributes” section of the adapter documentation to determine if it is supported for your adapter.
name is a reserved word in views and should not be used as an Identity System User Attribute on resource schema maps.
Lists the objects on the resource that can be managed through Waveset.
Defines account name syntax for users. For most resources, the syntax is the same as the account ID. However, the syntax is different if the resource uses hierarchical namespaces.
A form is an object associated with a page that contains rules about how the browser should display user view attributes on that page. Forms can incorporate business logic and are often used to manipulate view data before it is presented to the user.
Some forms are loaded into the Waveset repository by default. To view a list of forms in the repository, perform the following steps:
From a web browser, go to http://WavesetHost/idm/debug
The browser displays the System Settings page.
From the options menu adjacent to List Objects, select Type: ResourceForm.
Click List Objects. The List Objects of Type: ResourceForm page is displayed. This page lists all editable forms that reside in the Waveset repository.
Waveset provides many additional forms that are not loaded by default. These forms are located in the InstallDir\idm\sample\forms\ directory.
Trace output can be helpful when identifying and resolving problems with any adapter. Generally, these are the steps you will follow when using tracing to help identify and resolve problems:
Turn on tracing.
To turn tracing on, follow these steps:
Log in to Waveset as the Configurator account.
Go to the Debug page: http://WavesetHost:Port/idm/debug.
Click Show Trace.
Ensure that Trace Enabled is checked.
Enter the full class name in the Method/Class text box.
Enter a trace level (1-4).
Each level captures different types of information:
1, which identifies entry and exit of public methods, plus major exceptions.
2, which identifies entry and exit of all methods.
3, which identifies significant informational displays (such as the value of variables that control flow) that occur only once per method invocation.
4, which identifies informational displays that occur n times per method invocation.
Fill out the rest of the page as desired. Click Save when you are ready to begin tracing.
To disable tracing, either deselect the Show Trace option, or delete the class name from the Method/Class text box.
Reproduce the problem and evaluate the results.
Optionally turn tracing on for additional packages or classes, or turn up the tracing level and repeat steps 2 and 3 as needed.
Turn off tracing.