There are a lot of Provisioning Roles, some exists but never were used. So I need to delete some of them.
How to get all the members from the Provisioning Roles, via LDAP search or something ?
Release : 14.4
Component :
Some examples as list as dsa user:
1. return only Prov role DNs
dxsearch -h <host> -p 20389 -b "eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=eta" -w <password>
-D "eTGlobalUserName=etaadmin,eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=eta" "(&(objectclass=eTGlobalUser)(eTRoleDN=*))" eTRoleDN
2) to get all the global users that have some particular provisioning role:
dxsearch -h <host> -p 20389 -b "eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=eta" -w <password>
-D "eTGlobalUserName=etaadmin,eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=eta"
"(&(objectclass=eTGlobalUser)(eTRoleDN=eTRoleName=<role name>,eTRoleContainerName=Roles,eTNamespaceName=CommonObjects,dc=im))" "1.1"
3) or try
dxsearch -h <host> -p 20389 -b "eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=eta" -w <password>
-D "eTGlobalUserName=etaadmin,eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=eta" "(&(objectclass=eTGlobalUser)(eTRoleDN=*))"
If you need to use LDAP command, see the article
https://knowledge.broadcom.com/external/article/278482