24.2 Extending the eDirectory Schema Using the Wizard

This section provides instructions for installing the RBPM runtime infrastructure files and then manually extending the eDirectory schema. Complete these steps only if the following circumstances are true:

  • You want to use the RBPM installation wizard.

  • You installed the Identity Vault in a non-default location.

If these circumstances are not true, you might need to use a different process for extending the eDirectory schema or you might not need to extend the schema at all. For more information, see Section 24.1, Understanding the Roles Based Provisioning Module installation.

24.2.1 Extending the Schema on a SUSE Server

To extend the schema, you must copy the driver files to the non-default location and then run the ndssch command against both the srvprv.sch and nrf-extensions.sch schema files.

To extend the schema on SUSE:

  1. Log on to the computer where you installed the Identity Manager engine.

  2. To copy the driver and driver configuration files to the non-default location of Identity Vault, complete the following steps:

    1. Launch rbpm_driver_install_linux.bin, located by default in the products/RBPM directory within the .iso image file for the Identity Manager installation package for each operating system environment directory.

    2. In the Select Components window, select Roles Based Provisioning Module and Configuration Files. Click Next.

    3. For installing the drivers, specify the same location path where you installed Identity Vault. Click Next.

    4. For installing the driver configuration files, specify the same location path where you installed Identity Vault. Click Next.

    5. Complete the installation wizard.

  3. To extend the schema, run the following command against the srvprv.sch file:

    ndssch -h hostname:port -t tree_name -p password admin-FDN path/srvprv.sch
    

    For example:

    ndssch -h 172.16.1.137:524 -t TESTTREE -p PASSWORD
    .cn=admin.o=novell.T=TESTTREE.
    /opt/novell/eDirectory/lib/nds-schema/srvprv.sch
    
  4. Repeat Step 3 against the nrf-extensions.sch file.

  5. Continue to the process for creating the RBPM drivers. For more information, see Section 25.0, Creating the Drivers for the Roles Based Provisioning Module.

24.2.2 Extending the Schema on a Windows Server

To extend the eDirectory schema on a Windows server, you must run schemaStart.bat against the sch_nt.cfg, srvprv.sch, and update-nrf-case.sch files.

To extend the schema on Windows:

  1. Log on to the computer where you installed the Identity Vault.

  2. Stop eDirectory.

  3. Run the following command to extend the schemas listed in the sch_nt.cfg file, located by default in the eDirectory installation location:

    eDirLocation\schemaStart.bat eDirLocation yes admin name
    with tree password yes 6 " " "schemafileName"
    "serverName" dibPathLocation
    

    For example:

    C:\eDir\NDS\schemaStart.bat "C:\eDir\NDS" yes
    ".cn=admin.o=n.T=IDM-INSTALLISSUE." "n" yes 6 " "
    "C:\eDir\NDS\vrschema.sch" ".CN=WIN2008-64-NDS.O=n.T=IDMINSTALLISSUE."
    "C:\DIB\NDS\DIBFiles"
    

    NOTE:

    • The dibPathLocation must contain the DIBFiles folder.

    • The above command does not use sch_nt.cfg file to extend all the schema files, but instead manually extends each and every schema file mentioned in the sch_nt.cfg file.

  4. Log on to the computer where you installed the Identity Manager engine.

  5. To copy the driver and driver configuration files to the non-default location of Identity Vault, complete the following steps:

    1. Launch the rbpm_driver_install.exe, located by default in the products/RBPM directory within the .iso image file for the Identity Manager installation package for each operating system environment directory.

    2. In the Select Components window, select Roles Based Provisioning Module and Configuration Files. Click Next.

    3. For installing the drivers, specify the same location path where you installed Identity Vault. Click Next.

    4. For installing the driver configuration files, specify the same location path where you installed Identity Vault. Click Next.

    5. Complete the installation wizard.

  6. To extend the SrvPrv schema, run the command listed in Step 3 against the srvprv.sch file.

  7. To extend the NrfCaseupdate schema, run the command listed in Step 3 against the update-nrf-case.sch file.

  8. Start eDirectory.

  9. Continue to the process for creating the RBPM drivers. For more information, see Section 25.0, Creating the Drivers for the Roles Based Provisioning Module.