Disabling a list of external users in Harvest
search cancel

Disabling a list of external users in Harvest

book

Article ID: 391754

calendar_today

Updated On:

Products

CA Harvest Software Change Manager CA Harvest Software Change Manager - OpenMake Meister

Issue/Introduction

Our Harvest system is configured with many "external" users, validated by our Active Directory LDAP system.  We will often get a list from the LDAP administrator of users who have left the company or who no longer work with Harvest that we then must disable in our Harvest system.  This currently requires us to visit the properties window for each user and

  1. Switch the user from external to internal
  2. Provide a password for the user since all "internal" users must have a password in Harvest
  3. Disable the user

If the list is only 3 or 4 users, this is easily done, but if there are many users, this process can be tedious and error prone.  Is there a simpler way to accomplish this task?

Environment

Harvest Software Change Manager all versions

Resolution

The solution is to create a text file containing the list of the userids to be disabled.  For each user you will need to add a tab and a generic password, since switching the user to internal requires supplying a password for the user.  For example, 

testuser1<tab>examplepassword
testuser2<tab>examplepassword
testuser3<tab>examplepassword

You can provide any password that conforms to the password policy Harvest is using.  Since these users are to be disabled, the password will never actually be used.

Once you have this text file, 2 commands will be run to complete the process

To switch the users from "external" to "internal"

husrmgr -b <brokername> -prompt -ow -ae N <path and file name of the list of users>

To disable the same users

husrmgr -b <brokername> -prompt -ow -ad Y <path and file name of the list of users>

As always, you should check the log file produced by the husrmgr command after each time it is used to ensure there were no errors and that the command completed successfully.  By default, the name of this log file will be "husrmgr.log" and it will be located in the current working directory of the command prompt window.

Additional Information

More information about the husrmgr command can be found here: husrmgr Command-User Manager