How to use ldapseach command to find eTID of a Global User

Products

• CA Identity Manager

Issue/Introduction

Sometimes we need run ldapsearch command to find eTID of a Global User to investigate correlation issue.
What is the correct ldapsearch syntax to do this?

Environment

Release : 14.x
Component : IdentityMinder(Identity Manager)

Resolution

Run the following ldapsearch command

ldapsearch -LLL -h <Provisioning Directory hostname> -p 20391 -D "eTDSAContainerName=DSAs,eTNamespaceName=CommonObjects,dc=etadb" -W -b "eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=etadb" -s sub "(eTGlobalUserName=<Global User Name>)" eTID

For example:

<Provisioning Directory hostname>: provdir01
<Global User Name>: testuser

ldapsearch -LLL -h provdir01 -p 20391 -D "eTDSAContainerName=DSAs,eTNamespaceName=CommonObjects,dc=etadb" -W -b "eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=etadb" -s sub "(eTGlobalUserName=testuser)" eTID

The command will prompt password to access Provisioning Directory. On vApp you should key in the Master Password.