Novell IDENTITY MANAGER 3.6.1 - JOBS GUIDE User manual

Novell®
www.novell.com
novdocx (en) 13 May 2009
AUTHORIZED DOCUMENTATION
Identity Manager 3.6 Jobs Guide
Identity Manager
3.6.1
June 05, 2009
Jobs Guide

novdocx (en) 13 May 2009
Legal Notices
Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and
specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.
Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time,
without obligation to notify any person or entity of such revisions or changes.
Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims
any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.
reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to
notify any person or entity of such changes.
Any products or technical information provided under this Agreement may be subject to U.S. export controls and the
trade laws of other countries. You agree to comply with all export control regulations and to obtain any required
licenses or classification to export, re-export, or import deliverables. You agree not to export or re-export to entities
on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export
laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses.
Please refer to the International Trade Services (http://www.novell.com/company/policies/trade_services) for more
information on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary
export approvals.
Copyright © 2008 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied,
stored on a retrieval system, or transmitted without the express written consent of the publisher.
Novell, Inc. has intellectual property rights relating to technology embodied in the product that is described in this
document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.
patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents/) and one or
more additional patents or pending patent applications in the U.S. and in other countries.
Novell, Inc.
404 Wyman Street, Suite 500
Waltham, MA 02451
U.S.A.
www.novell.com
Online Documentation: To access the latest online documentation for this and other Novell products, see
the Novell Documentation Web page (http://www.novell.com/documentation).

novdocx (en) 13 May 2009
Novell Trademarks
For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/
trademarks/tmlist.html).
Third-Party Materials
All third-party trademarks are the property of their respective owners.

4Identity Manager 3.6 Jobs Guide
novdocx (en) 13 May 2009

Contents 5
Contents
novdocx (en) 13 May 2009
About This Guide 7
1Overview 9
2 Adding a Predefined Job 11
3 Configuring a Predefined Job’s Properties 15
3.1 Configuring the Random Password Generator Job . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
3.2 Configuring the Schedule Driver Job . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
3.3 Configuring the Subscriber Channel Trigger Job . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
3.4 Configuring the Driver Health Job . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
3.5 Configuring the Password Expiration Notification Job . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
4 Creating a Custom Job 25
4.1 Job Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
4.2 Creating the Job Definition and Job Implementation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
4.3 Adding the Job . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
5 Starting a Job 29
6 Stopping a Job 31
7 Disabling a Job 33
8 Checking a Job’s Status 35
9 Deleting a Job 37

6Identity Manager 3.6 Jobs Guide
novdocx (en) 13 May 2009

About This Guide 7
novdocx (en) 13 May 2009
About This Guide
This guide contains information about managing Identity Manager jobs. The guide is organized as
follows:
Chapter 1, “Overview,” on page 9
Chapter 2, “Adding a Predefined Job,” on page 11
Chapter 3, “Configuring a Predefined Job’s Properties,” on page 15
Chapter 4, “Creating a Custom Job,” on page 25
Chapter 5, “Starting a Job,” on page 29
Chapter 6, “Stopping a Job,” on page 31
Chapter 7, “Disabling a Job,” on page 33
Chapter 8, “Checking a Job’s Status,” on page 35
Chapter 9, “Deleting a Job,” on page 37
Audience
This guide is intended for administrators, consultants, and network engineers who require a high-
level introduction to Identity Manager business solutions, technologies, and tools.
Documentation Updates
For the most recent version of this document, see the Identity Manager Documentation Web site
(http://www.novell.com/documentation/idm36/index.html).
Additional Documentation
For documentation on other Identity Manager drivers, see the Identity Manager Drivers Web site
(http://www.novell.com/documentation/idm36drivers/index.html).
Documentation Conventions
In Novell documentation, a greater-than symbol (>) is used to separate actions within a step and
items in a cross-reference path.
A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party
trademark.
When a single pathname can be written with a backslash for some platforms or a forward slash for
other platforms, the pathname is presented with a backslash. Users of platforms that require a
forward slash, such as Linux* or UNIX*, should use forward slashes as required by your software.

8Identity Manager 3.6 Jobs Guide
novdocx (en) 13 May 2009

Overview
1
9
novdocx (en) 13 May 2009
1
Overview
Identity Manager provides the ability to launch jobs that perform specific tasks. The jobs can be run
one or more times either manually or at scheduled times.
Identity Manager provides five predefined jobs:
Random Password Generator: Generates a random password for each object defined in the
job’s scope. The password is generated by NMASTM to match a Password Policy object that the
job references. The job submits the generated passwords one at a time to a driver’s Subscriber
channel. The Subscriber channel policies must take action on the passwords.
Schedule Driver: Starts or stops a driver.
Subscriber Channel Trigger: Sends event documents to be processed by a driver’s Subscriber
channel. For example, a job could generate an event document to trigger policies associated
with a user. Submitted event documents can be queued to the driver cache, or they can bypass
the cache and be processed immediately.
Driver Health: Evaluates the health conditions for a driver, assigns the health state, and carries
out any actions associated with the health state. This job is used in conjunction with driver
health monitoring. For complete instructions about setting up driver health monitoring,
including using the Driver Health job, see “Monitoring Driver Health” in the Identity Manager
3.6.1 Common Driver Administration Guide.
Password Expiration Notification: Searches an LDAP directory for objects whose passwords
expire in a specified number of days. When an object that meets the criteria is discovered, the
job sends an e-mail to the address contained in the object’s mail LDAP attribute.
Information about using the predefined jobs is provided in Chapter 2, “Adding a Predefined Job,” on
page 11 and Chapter 3, “Configuring a Predefined Job’s Properties,” on page 15.
You can also develop custom jobs to perform tasks. A custom job requires you to create a Job
Definition and a Job Implementation. The Job Definition is XML code that defines the parameters
for the job. The Job Implementation is a JAR file that contains the Java* classes that perform the
task. The job can perform any task that you can implement through Java classes. Because the job is
initiated through the Metadirectory engine, the job also has access to the Identity Vault data. For
more information, see Chapter 4, “Creating a Custom Job,” on page 25.

10 Identity Manager 3.6 Jobs Guide
novdocx (en) 13 May 2009