How to run external code using Policy Xpress on the vApp

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Risk Analytics
• CA Secure Cloud SaaS - Arcot A-OK (WebFort)
• CLOUDMINDER ADVANCED AUTHENTICATION
• CA Secure Cloud SaaS - Advanced Authentication
• CA Secure Cloud SaaS - Identity Management
• CA Secure Cloud SaaS - Single Sign On

Issue/Introduction

Customer needs to run an external tool to complete some process regarding user accounts. To do this, they need to set up Policy Xpress to run external code and call the external tool - but they are using the Virtual Appliance. In their scenario, they need to run the ldapadd command.

Environment

CA Identity Suite Virtual Appliance r14.0

Resolution

Once you log in to the Virtual Appliance via SSH using the "config" user:

 

1. Create a new directory inside /home/config: 

$ mkdir script 

 

2. Enable read/write to everyone: 

$ chmod 777 script 

 

3. Create your script inside the new directory. When finished, run the same chmod command against the script: 

$ chmod 777 /home/config/script/<your_script_name>.sh 

 

4. Now you create your Policy Xpress and set it to run the script. Make sure you use the full path to the script (/home/config/script/<your_script_name>.sh).

 

It is important to note that you should not install external software into the appliance. In this case you can try to use "portable" software - software that can be executed without installation, just copying its files to a folder. This way you ensure that no library, environment variable, etc will be changed.