Finding Global User eTID via ldapsearch - Identity Manager

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

This article provides the required ldapsearch syntax to retrieve the eTID attribute for a specific Global User. This process is frequently used when investigating user correlation issues.

Environment

Identity Manager 14.5 & 15

Cause

In scenarios where correlation failures occur, it is necessary to identify the unique eTID of a Global User to verify its status within the Provisioning Directory.

Resolution

To retrieve the eTID attribute, execute the ldapsearch command using the syntax below:

1. Open a command prompt on the server.
2. Run the following command, replacing HOSTNAME with your Provisioning Directory host and USERNAME with the target Global User:
   ldapsearch -LLL -h HOSTNAME -p 20391 -D "eTDSAContainerName=DSAs,eTNamespaceName=CommonObjects,dc=etadb" -W -b "eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=etadb" -s sub "(eTGlobalUserName=USERNAME)" eTID
   
   
3. Enter the Provisioning Directory password when prompted. If using a vApp deployment, enter the Master Password.

Example: ldapsearch -LLL -h provdir01 -p 20391 -D "eTDSAContainerName=DSAs,eTNamespaceName=CommonObjects,dc=etadb" -W -b "eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=etadb" -s sub "(eTGlobalUserName=testuser)" eTID

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.