How to synchronize repo users with LDAP if they not belong to JazzUsers group
According to https://jazz.net/help-dev/clm/topic/com.ibm.jazz.repository.web.admin.doc/topics/cldapsynctask.html, name and email address fields are updated in the Jazz Team Server repository if the values in repository and the LDAP user directory do not match (which is our goal) but it happens for all users in the LDAP user directory who are members of the mapped LDAP groups.
How can we update name and email address fields for users in the repository who are not members of the mapped LDAP groups anymore?
Thanks in advance.
Cheers.
2 answers
I would try repotools -exportUsers and repotools -importUsers. You might need to change the registry type like explained in http://www-01.ibm.com/support/docview.wss?uid=swg21470141 if the import does not allow that.
Note that this might require a federated realm. I know some customers use a mix of LDAP and local registry (e.g. for the technical users) this way.
This API would also be available: https://rsjazz.wordpress.com/2012/10/12/changing-the-jazz-user-id-using-the-rtc-plain-java-client-libraries/
like explained in http://www-01.ibm.com/support/docview.wss?uid=swg21470141
According to this technote we have to manually update the fields, instead we would be able to automatically update the fields via LDAP nightly sync task.
This API would also be available: https://rsjazz.wordpress.com/2012/10/12/changing-the-jazz-user-id-using-the-rtc-plain-java-client-libraries/
We already have our own custom async task, but we are wondering if there is any chance to use out-of-the-box solution from Jazz (i.e., LDAP nightly sync task).
Anyway, thank you Ralph for all your good info (as always).
Cheers.
Comments
