Add Top Secret Profile Using LDAP?

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

What is the syntax in LDAP for Top Secret to add a profile to a Top Secret ACID?

Environment

Release:
Component: TSSMVS

Resolution

To add a new PROFILE after a specified profile, the LDIF script will look like the following: 

dn:tssproflist=[%NEW_PROFILE%],tssacidgrp=ProfList,tssacid=[%YOUR_ACID%],tssadmingrp=acids,[%SUFFIX_VARIABLE%] 
changetype: add 
Profile-After:[%AFTER_PROFILE%] 

where [%NEW_PROFILE%]: This is the new profile that is added 
[%YOUR_ACID%]: This is the User Acid 
[%AFTER_PROFILE%]: This is the profile after which the new profile is added 

The command generated by Top Secret Security will be the following: 
TSS ADDTO([%YOUR_ACID%]) PROFILE([%NEW_PROFILE%]) AFTER([%AFTER_PROFILE%]) 

To add a new PROFILE at the bottom of the profile, the LDIF script will look like the following: 
dn:tssproflist=[%NEW_PROFILE%],tssacidgrp=ProfList,tssacid=[%YOUR_ACID%],tssadmingrp=acids,[%SUFFIX_VARIABLE%] 
changetype: add 

Note: If the Profile attribute is not specified, the new profile is added at the bottom of the profile. 
where [%NEW_PROFILE%]: This is the new profile that is added 
[%YOUR_ACID%]: This is the User Acid 

The command generated by Top Secret Security will be the following: 
TSS ADDTO([%YOUR_ACID%]) PROFILE([%NEW_PROFILE%]) 

To add a new PROFILE before a specified profile, the LDIF script will look like the following: 
dn:tssproflist=[%NEW_PROFILE%],tssacidgrp=ProfList,tssacid=[%YOUR_ACID%],tssadmingrp=acids,[%SUFFIX_VARIABLE%] 
changetype: add 
Profile-Before:[%BEFORE_PROFILE%] 

The command generated by Top Secret Security will be the following: 
TSS ADDTO([%YOUR_ACID%]) PROFILE([%NEW_PROFILE%]) BEFORE([%BEFORE_PROFILE%]) 

To add a new PROFILE at the beginning profile, the LDIF script will look like the following: 
dn:tssproflist=[%NEW_PROFILE%],tssacidgrp=ProfList,tssacid=[%YOUR_ACID%],tssadmingrp=acids,[%SUFFIX_VARIABLE%] 
changetype: add 
Profile-First 

The command generated by Top Secret Security will be the following: 
TSS ADDTO([%YOUR_ACID%]) PROFILE([%NEW_PROFILE%]) FIRST 

The LDAP Server maps all Top Secret data to unique LDAP objects as documented in the LDAP Server documentation. For details see section ‘ObjectClass Hierarchy (TSS)’ in the ‘System z Security Communication Servers (DSI, LDAP, PAM) - 15.1’ documentation.