Top Secret Application Interface RESLIST functionality in CA LDAP

Products

• Top Secret
• Top Secret - LDAP
• WEB ADMINISTRATOR FOR TOP SECRET

Issue/Introduction

Top Secret application interface TSSAI can invoke RESLIST to return a list of resources for a user.

Is there equivalent functionality built into CA LDAP?

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

Please make sure published fix LU00588 is applied which introduces the RESLIST function in CA LDAP.

 

The following ldapsearch command line example is the equivalent to the TSSAI RESLIST:

ldapsearch -x -D cn=ACID_HERE -w PSWD_HERE -H ldap://HOST_HERE:PORT_HERE -s base -b tssacid=ACID_TO_CHECK,tssadmingrp=acids,SUFFIX_HERE reslist=RESOURCE_HERE


The key is to pass a search filter of reslist=RESOURCE


Replacing the uppercase words (see list below) with the appropriate values:

ACID_HERE - bind/login acid

PSWD_HERE - bind/login password

HOST_HERE - host name

PORT_HERE - port number LDAP is listening on

ACID_TO_CHECK - ACID to check, does not have to be same as ACID_HERE

SUFFIX_HERE - LDAP suffix per "F LDAPR151,BACKEND" console output

RESOURCE_HERE - resource name like ejbrole, tsoproc, sdsf, webappl, etc




For example:

ldapsearch -x -D cn=testacid -w PSWD_HERE -H ldap://host.broadcom.com:389 -s base -b tssacid=TESTACID,tssadmingrp=acids,host=myhost,o=broadcom,c=us  reslist=TSOPROC


*IF* there is data for the specified resource, it will be returned looking like:

reslist: TSOPROC=PROC394
reslist: TSOPROC=PROCZ5
reslist: TSOPROC=ANTS
reslist: TSOPROC=PROCMIN
reslist: TSOPROC=PROCY6