loadusers questions

Sort:
You are not authorized to post a reply.
Author
Messages
ChuckD
Basic Member
Posts: 14
Basic Member

    Hello,

    I am doing some systems integration work for a client.  We're looking at provisioning accounts to Lawson.  Working with Lawson support I began looking at working directly with the ADAM tree, at their direction.

    However, after reading through several posts here it seems that loadusers may be a cleaner solution.  I wanted to ask a couple questions before proceeding down that road.

    Does loadusers support modifying of users?  For example, does an xml file passed to loadusers overwrite existing ADAM entries with new data?

    The clients current verion is 9.0.0.4.  Is the -u switch supported to remove users in this version?  I have read conflicting info, but my best guess that this began with 9.0.0.7.  Can anyone confirm?  I'm guessing it's not supported on 9.0.0.4 as this switch does not show when loadusers is executed on the client's system.

    Thanks very much for your time,

    Chuck

    MattD
    Veteran Member
    Posts: 94
    Veteran Member
      We do not use ADAM, we use Tivoli, but I can tell you that loadusers does allow you to change user information. It simply overwrites the previous information. Additionally I believe that the -u is new to 9.0.0.7. We are on 9.0.0.5 and do not have the option. Let me know if I can be anymore help. Thanks.

      Matt
      ChuckD
      Basic Member
      Posts: 14
      Basic Member

        Thanks for the reply Matt. 

        After speaking with the client it sounds like they have a bind with AD.  Are there any issues I should be aware of while using loadusers under these conditions?

        Will loadusers populate the tree with the appropirate password(etc) from AD?  From what I've been told this is what happens when they manually add a user.

        Thanks again for your help.

        MattD
        Veteran Member
        Posts: 94
        Veteran Member
          No problems should occur because of the bind. No information can be updated by Lawson on the corporate AD, so loadusers cannot update the password. That has to be done at an AD level.

          Loadusers will only populate Lawson information (Security Classes, Roles, Services, etc.)

          Hope this helps.

          Thanks.
          Matt
          ChuckD
          Basic Member
          Posts: 14
          Basic Member

            Thanks again Matt.  You were correct, there were no issues with the AD bind.  After loading in a couple test users, the client reports that the users are showing up in the RM object area, but are not showing up in the portal or the process flow admin tool.  Before I go too far comparing user data...should loadusers populate the areas the client is describing?  If so, do you have any ideas as to what I may be missing(attributes etc.)?

            Thanks again for your time.

            Best Regards,

            Chuck

            Norm
            Veteran Member
            Posts: 40
            Veteran Member
              loadusers loads information only into the LDAP repository. The PF Admin tool requires that LOGAN database records get updated, so I feel comfortable saying that piece has to be done separately. The Portal side is slightly more ambiguous. For us, every user also gets a UNIX account and is assigned an LAUA security class, so the loadusers does not suffice to get them onto Portal. Other customers might have a default access for something like ESS and the loadusers could result in their being able to get into Portal.
              ChuckD
              Basic Member
              Posts: 14
              Basic Member

                Thanks for the reply Norm. 

                I had an opportunity to look at the ADAM data and loadusers is getting the info in, and I am able to log into the portal...however when I attempt to use one of the bookmarks I get:

                Requester does not exist
                Login: username
                Requester: username
                Product Line: PD90

                I tracked down the AD sec group Lawson Environment LAUA authentication, and the test user is not currently a member.  In your environment, if a user is setup in the LDAP tree as a requester and a member of the LAUA group is this sufficient to get the user to show up as an active requester?  I realize my client's environment may differ...I am just trying to pin down how this works.

                Thanks again for helping me out.

                Best Regards

                Chuck

                MattD
                Veteran Member
                Posts: 94
                Veteran Member
                  Chuck,
                  Are you using LAUA or Lawson Security 9?

                  Matt
                  ChuckD
                  Basic Member
                  Posts: 14
                  Basic Member
                    Hi Matt,
                    I believe they are using Lawson Security 9 based on some docs I was looking at today. Any idea where the active requester info is stored so I can populate it?
                    Thanks for your time
                    Nina Mendoza
                    New Member
                    Posts: 2
                    New Member
                      Hello all,
                      I have been using the loadusers utility with the -u without any problems for deleting users from RM. But this will not delete users from Portal. Does anyboby have any idea how I can mass deleted users from Lawson Portal. Lawson Portal only gives you the feature to only delete one user at a time. But how do other companies do it when they have to delete a large amount of users? Would somebody please give a good suggestion if you have tried anything that works? Thank you in advance. Nina.
                      fred.kobos
                      Advanced Member
                      Posts: 27
                      Advanced Member
                        Nina, can you elaborate more. are you laua, 90 security. also are these identities you are looking to delete or the platform ids. If it is the platform you can look in the GEN database.
                        ChuckD
                        Basic Member
                        Posts: 14
                        Basic Member
                          I am adding/modifying/removing users from the portal(etc). in the case of my client(which is my only exposure to Lawson), I'm accessing the DB via vbscript. I'm working with 3 DBs and several tables to accomplish this task:

                          DBs: pd90_db, logan_db, gen_db
                          Tables: [pd90_db].[dbo].[REQUESTER], [logan_db].[dbo].[WFUSRPROFL],[logan_db].[dbo].[WFUSERPREF], [gen_db].[dbo].[USERGRPDTL],[gen_db].[dbo].[R_USER], [gen_db].[dbo].[USERINFO]

                          hth
                          fred.kobos
                          Advanced Member
                          Posts: 27
                          Advanced Member
                            In my case for the iseries besides what chuck said I am also deleting the iseries id that would be the envronment id in the identities. I am not sure what it would be for windows or aix but I would assume it is the same. if you are using pcard their could be one in the po pd files.
                            Nina Mendoza
                            New Member
                            Posts: 2
                            New Member
                              Hello Fred, Thank you for the suggestion. I have to try that and see how it works for me. Nina.

                              ________________________________
                              From: forums-lsf-s3-sys-admin@lawsonguru.com [mailto:forums-lsf-s3-sys-admin@lawsonguru.com]
                              Sent: Friday, March 12, 2010 11:50 AM
                              To: Mendoza, Nina
                              Subject: RE: loadusers questions [00006687:00010860]

                              [https://images.lawsonguru.com/logos/LawsonGuru_com_200.jpg]<https://www.lawsonguru.com/>
                              S3 Systems Administration Forum Notification
                              A message was posted to a thread you are tracking.
                              RE: loadusers questions

                              Posted by: fred.kobos
                              03/12/2010 11:49 AM

                              In my case for the iseries besides what chuck said I am also deleting the iseries id that would be the envronment id in the identities. I am not sure what it would be for windows or aix but I would assume it is the same. if you are using pcard their could be one in the po pd files.

                              ________________________________

                              To view the complete thread and reply via your browser, please visit:
                              https://www.lawsonguru.co...c/10860/Default.aspx

                              You were sent this email because you opted to receive email notifications when someone posted and/or responded to a message on this forum.
                              To unsubscribe to this thread please visit your user profile page and change your subscription options.

                              Thank you,
                              LawsonGuru.com


                              UHS Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient (s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of this information is prohibited. If this was sent to you in error, please notify the sender by reply e-mail and destroy all copies of the original message.
                              You are not authorized to post a reply.