You can use the Jython or Jacl scripting languages to configure security with the wsadmin tool. The commands and parameters in the WIMManagementCommands group can be used to create and manage groups, members, and users in the virtual member manager.
The createGroup command creates a new group in the virtual member manager. After the command completes, the new group will appear in the repository. For LDAP, a group must contain a member. The memberUniqueName parameter is optional in this case. If you set the memberUniqueName parameter to the unique name of a group or a user, the group or user will be added as a member of the group.
Parameters and return values
Examples
Batch mode example usage:
$AdminTask createGroup {-cn groupA -description a group of admins}
AdminTask.createGroup ('[-cn groupA -description a group of admins]')
AdminTask.createGroup (['-cn', 'groupA', '-description', 'a group of admins'])
Interactive mode example usage:
$AdminTask createGroup {-interactive}
AdminTask.createGroup ('[-interactive]')
AdminTask.createGroup (['-interactive'])
The createUser command creates a new user in the default repository or a repository that the parent command parameter specifies. This command creates a person entity and a login account entity in the virtual member manager.
Parameters and return values
Examples
Batch mode example usage:
$AdminTask createUser {-uid 123 -password tempPass -confirmPassword tempPass -cn Jane -surname Doe -ibm-primaryEmail janedoe@acme.com}
AdminTask.createUser ('[-uid 123 -password tempPass -confirmPassword tempPass -cn Jane -surname Doe -ibm-primaryEmail janedoe@acme.com]')
AdminTask.createUser (['-uid', '123', '-password', 'tempPass', '-confirmPassword', 'tempPass', '-cn', 'Jane', '-surname', 'Doe', '-ibm-primaryEmail', 'janedoe@acme.com'])
Interactive mode example usage:
$AdminTask createUser {-interactive}
AdminTask.createUser ('[-interactive]')
AdminTask.createUser (['-interactive'])
The deleteGroup command deletes a group in the virtual member manager. You cannot use this command to delete descendants. When this command completes, the group will be deleted from the repository.
Parameters and return values
Examples
Batch mode example usage:
$AdminTask deleteGroup {-uniqueName cn=operators,cn=users,dc=yourco,dc=com}
AdminTask.deleteGroup ('[-uniqueName cn=operators,cn=users,dc=yourco,dc=com]')
AdminTask.deleteGroup (['-uniqueName', 'cn=operators,cn=users,dc=yourco,dc=com'])
Interactive mode example usage:
$AdminTask deleteGroup {-interactive}
AdminTask.deleteGroup ('[-interactive]')
AdminTask.deleteGroup (['-interactive'])
The deleteUser command deletes a user from the virtual member manager. This includes a person object and an account object in the non-merged repositories.
Parameters and return values
Examples
Batch mode example usage:
$AdminTask deleteUser {-uniqueName uid=dmeyers,cn=users,dc=yourco,dc=com}
AdminTask.deleteUser ('[-uniqueName uid=dmeyers,cn=users,dc=yourco,dc=com]')
AdminTask.deleteUser (['-uniqueName', 'uid=dmeyers,cn=users,dc=yourco,dc=com'])
Interactive mode example usage:
$AdminTask deleteUser {-interactive}
AdminTask.deleteUser ('[-interactive]')
AdminTask.deleteUser (['-interactive'])
Use the duplicateMembershipOfGroup command to make a one group a member of all of the same groups as another group. For example, group A is in group B and group C. To add group D to the same groups as group A, use the duplicateMembershipOfGroup command.
Parameters and return values
Examples
Batch mode example usage:
$AdminTask duplicateMembershipOfGroup {-copyToName cn=operators,cn=groups,dc=yourco,dc=com -copyFromName cn=admins,cn=groups,dc=yourco,dc=com}
AdminTask.duplicateMembershipOfGroup ('[-copyToName cn=operators,cn=groups,dc=yourco,dc=com -copyFromName cn=admins,cn=groups,dc=yourco,dc=com]')
AdminTask.duplicateMembershipOfGroup (['-copyToName', 'cn=operators,cn=groups,dc=yourco,dc=com', '-copyFromName', 'cn=admins,cn=groups,dc=yourco,dc=com'])
Interactive mode example usage:
$AdminTask duplicateMembershipOfGroup {-interactive}
AdminTask.duplicateMembershipOfGroup ('[-interactive]')
AdminTask.duplicateMembershipOfGroup (['-interactive'])
Use the duplicateMembershipOfUser command to make a one user a member of all of the same groups as another user. For example, user 1 is in group B and group C. To add user 2 to the same groups as user 1, use the duplicateMembershipOfUser command.
Parameters and return values
Examples
Batch mode example usage:
$AdminTask duplicateMembershipOfUser {-copyToName uid=meyersd,cn=users,dc=yourco,dc=com -copyFromName uid=jhart,cn=users,dc=yourco,dc=com}
AdminTask.duplicateMembershipOfUser ('[-copyToName uid=meyersd,cn=users,dc=yourco,dc=com -copyFromName uid=jhart,cn=users,dc=yourco,dc=com]')
AdminTask.duplicateMembershipOfUser (['-copyToName', 'uid=meyersd,cn=users,dc=yourco,dc=com', '-copyFromName', 'uid=jhart,cn=users,dc=yourco,dc=com'])
Interactive mode example usage:
$AdminTask duplicateMembershipOfUser {-interactive}
AdminTask.duplicateMembershipOfUser ('[-interactive]')
AdminTask.duplicateMembershipOfUser (['-interactive'])
The getGroup command retrieves the common name and description of a group.
Parameters and return values
Examples
Batch mode example usage:
$AdminTask getGroup {-uniqueName cn=operators,cn=groups,dc=yourco,dc=com}
AdminTask.getGroup ('[-uniqueName cn=operators,cn=groups,dc=yourco,dc=com]')
AdminTask.getGroup (['-uniqueName', 'cn=operators,cn=groups,dc=yourco,dc=com'])
Interactive mode example usage:
$AdminTask getGroup {-interactive}
AdminTask.getGroup ('[-interactive]')
AdminTask.getGroup (['-interactive'])
The getMembershipOfGroup command retrieves the groups of which a group is a member.
Parameters and return values
Examples
Batch mode example usage:
$AdminTask getMebmershipOfGroup {-uniqueName uid=dmeyers,cn=users,dc=yourco,dc=com}
AdminTask.getMebmershipOfGroup ('[-uniqueName uid=dmeyers,cn=users,dc=yourco,dc=com]')
AdminTask.getMebmershipOfGroup (['-uniqueName', 'uid=dmeyers,cn=users,dc=yourco,dc=com'])
Interactive mode example usage:
$AdminTask getMembershipOfGroup {-interactive}
AdminTask.getMembershipOfGroup ('[-interactive]')
AdminTask.getMembershipOfGroup (['-interactive'])
The getMembershipOfUser command retrieves the groups of which a user is a member.
Parameters and return values
Examples
Batch mode example usage:
$AdminTask getMebmershipOfUser {-uniqueName uid=dmeyers,cn=users,dc=yourco,dc=com}
AdminTask.getMebmershipOfUser ('[-uniqueName uid=dmeyers,cn=users,dc=yourco,dc=com]')
AdminTask.getMebmershipOfUser (['-uniqueName', 'uid=dmeyers,cn=users,dc=yourco,dc=com'])
Interactive mode example usage:
$AdminTask getMembershipOfUser {-interactive}
AdminTask.getMembershipOfUser ('[-interactive]')
AdminTask.getMembershipOfUser (['-interactive'])
The getMembersOfGroup command retrieves the members of a group.
Parameters and return values
Examples
Batch mode example usage:
$AdminTask getMembersOfGroup {-uniqueName cn=operators,cn=groups,dc=yourco,dc=com}
AdminTask.getMembersOfGroup ['(-uniqueName cn=operators,cn=groups,dc=yourco,dc=com]')
AdminTask.getMembersOfGroup [('-uniqueName', 'cn=operators,cn=groups,dc=yourco,dc=com'])
Interactive mode example usage:
$AdminTask getMembersOfGroup {-interactive}
AdminTask.getMembersOfGroup ('[-interactive]')
AdminTask.getMembersOfGroup (['-interactive'])
The getUser command retrieves information about a user in the virtual member manager.
Parameters and return values
Examples
Batch mode example usage:
$AdminTask getUser {-uniqueName uid=dmeyers,cn=users,dc=yourco,dc=com}
AdminTask.getUser ('[-uniqueName uid=dmeyers,cn=users,dc=yourco,dc=com]')
AdminTask.getUser (['-uniqueName', 'uid=dmeyers,cn=users,dc=yourco,dc=com'])
Interactive mode example usage:
$AdminTask getUser {-interactive}
AdminTask.getUser ('[-interactive]')
AdminTask.getUser (['-interactive'])
The removeMemberFromGroup command removes a user or a group from a group.
Parameters and return values
Examples
Batch mode example usage:
$AdminTask removeMemberFromGroup {-memberUniqueName uid=meyersd,cn=users,dc=yourco,dc=com -groupUniqueName cn=admins,cn-groups,dc=yourco,dc=com}
AdminTask.removeMemberFromGroup ('[-memberUniqueName uid=meyersd,cn=users,dc=yourco,dc=com -groupUniqueName cn=admins,cn-groups,dc=yourco,dc=com]')
AdminTask.removeMemberFromGroup (['-memberUniqueName', 'uid=meyersd,cn=users,dc=yourco,dc=com', '-groupUniqueName', 'cn=admins,cn-groups,dc=yourco,dc=com'])
Interactive mode example usage:
$AdminTask removeMemberFromGroup {-interactive}
AdminTask.removeMemberFromGroup ('[-interactive]')
AdminTask.removeMemberFromGroup (['-interactive'])
Use the searchGroups command to find groups in the virtual member manager that match criteria that you provide. For example, you can use the searchGroups command to find all of the groups with a common name that begins with IBM. You can search for any virtual member manager property because the command is generic.
Parameters and return values
Examples
Batch mode example usage:
$AdminTask searchGroups {cn *IBM*}
AdminTask.searchGroups('[-cn *IBM*]')
AdminTask.searchGroups(['-cn', '*IBM*'])
Interactive mode example usage:
$AdminTask searchGroups {-interactive}
AdminTask.searchGroups ('[-interactive]')
AdminTask.searchGroups (['-interactive'])
Use the searchUsers command to find users in the virtual member manager that match criteria that you provide. For example, you can use the searchUsers command to find all of the telephone numbers that contain 919. You can search for any virtual member manager property because the command is generic.
Parameters and return values
Examples
Batch mode example usage:
$AdminTask searchUsers {-principalName */IBM/US*}
AdminTask.searchUsers ('[-principalName */IBM/US*]')
AdminTask.searchUsers (['-principalName', '*/IBM/US*'])
Interactive mode example usage:
$AdminTask searchUsers {-interactive}
AdminTask.searchUsers ('[-interactive]')
AdminTask.searchUsers (['-interactive'])
The updateGroup command updates the common name or the description of a group.
Parameters and return values
Examples
Batch mode example usage:
$AdminTask updateGroup {-uniqueName cn=operators,cn=groups,dc=yourco,dc=com -cn groupA}
AdminTask.updateGroup ('[-uniqueName cn=operators,cn=groups,dc=yourco,dc=com -cn groupA]')
AdminTask.updateGroup (['-uniqueName', 'cn=operators,cn=groups,dc=yourco,dc=com', '-cn', 'groupA'])
Interactive mode example usage:
$AdminTask updateGroup {-interactive}
AdminTask.updateGroup ('[-interactive]')
AdminTask.updateGroup (['-interactive'])
The updateUser command updates the following properties: uniqueName, uid, password, cn, sn, or ibm-primaryEmail.
Parameters and return values
Examples
Batch mode example usage:
$AdminTask updateUser {-uniqueName uid=dmeyers,cn=users,dc=yourco,dc=com -uid 123}
AdminTask.updateUser ('[-uniqueName uid=dmeyers,cn=users,dc=yourco,dc=com -uid 123]')
AdminTask.updateUser (['-uniqueName', 'uid=dmeyers,cn=users,dc=yourco,dc=com', '-uid', '123'])
Interactive mode example usage:
$AdminTask updateUser {-interactive}
AdminTask.updateUser ('[-interactive]')
AdminTask.updateUser (['-interactive'])