Prev
Next
Forums S3 Security

Prod and Test: Can they be the same?

Sort:
You are not authorized to post a reply.
Author
Messages
MattD
Veteran Member
Posts: 94
Veteran Member
7/28/2009 6:21 PM
    Greetings Lawsons Gurus,
    I have a simple, yet somehow complicated quesiton.  Has anyone figured out a way to create an exact copy of their production environment in a test environment.  I ask with Lawson Security in mind.  We are currently utilizing Lawson Security 9.0 (CheckLS=Y), but there seems to be no good way to make sure our Prod and Test environments stay identical without making changes in both all the time.  The lsload and lsdump feature do no allow you to copy all aspects of security over in a functioning state.  You can copy each piece but then have to link the pieces together.  Does anyone have any suggestions on how to do this?  Has anyone been able to write a script that can perform this task.

    Secondly, is there also a way to dump users from one environment and load them in another.  Our test users are no where close to being accurate and I do not want to have to manually update all our customers since we have over 5,000 currently.

    Any suggestions would be sublime.

    Thank you!

    Matthew
    Alex Tsekhansky
    Veteran Member
    Posts: 92
    Veteran Member
    8/11/2009 9:34 PM
      Hello, Matthew!

      The simple answer would be YES. The details are much more complicated.

      I believe Lawson considers putting in a utility at some point that would dump users and their attributes from LDAP into XML format compatible with LOADUSERS. Right now I use a cusotm program I wrote that does just that - it scans LDAP directly, and dumps users, their identities and user attributes from the list into XML files compatible with LOADUSERS. Notably, it will not handle mass-deletions (I have a separate program for that) - meanig it can be used to COPY users, but not SYNCHRONIZE them. Also you cannot easily copy lawson-stored passwords from one environment to another because encryption keys are different. Again, I have a separate program just to do that. It's NOT easy to decrypt passwords lawson internally stores, and the algorithms may be different in different installations.
      Note also that such procedures differ between ADAM and Tivoli as user information is stored in slightly differently-formatted LDAP trees.

      The actual security classes and roles are easier to copy. LSDUMP/LSLOAD work fine if you have apporpriate environment patches installed.

      Thanks.

      Alex.
      MattD
      Veteran Member
      Posts: 94
      Veteran Member
      8/13/2009 2:55 PM
        Thanks Alex!

        I will have to look into coding a program to do the same. This solution is a little more complicated than what I was seeking, but definitely better than waiting for a Lawson built function. Once again thanks for the help.
        You are not authorized to post a reply.