Sending Title attribute to the AD Endpoint using etautil - Identity Manager

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

This article explains how to bulk update and propagate the Title attribute for AD Endpoint accounts without triggering the "Synchronize User with Account Template" task. This procedure is useful when the Title attribute is not a Capability attribute and requires manual propagation via the etautil utility.

Environment

Identity Manager 14.5 & 15

Cause

The "Synchronize User with Account Template" task does not propagate the Title attribute because it is not defined as a Capability attribute. Bulk updates must be performed using the Provisioning Server's command-line interface.

Resolution

Use the etautil command on the Provisioning Server to update the Title and trigger propagation to the endpoint.

1. Construct the update command using the following syntax:

   etautil -d im -u [admin_user] -p [password] update '[Container_DN]' eTGlobalUser eTGlobalUserName='[User_Name]' to eTSyncAccounts=1 eTTitle='[New_Title]';

2. To perform a bulk update, create an input file (e.g., update_titles.txt) and list each command on a single line ending with a semicolon:

   update 'eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=eta' eTGlobalUser eTGlobalUserName='user1' to eTSyncAccounts=1 eTTitle='Vice President';update 'eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects,dc=im,dc=eta' eTGlobalUser eTGlobalUserName='user2' to eTSyncAccounts=1 eTTitle='Director';

3. Execute the input file using the -f flag:

   etautil -u [USER] -p [PASSWORD] -f update_titles.txt

Note: See Etautil command fails if command line length is more than 4096 if your command string is excessively long.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.