Configuring the Proxy Addresses attribute

You can modify the Proxy Addresses attribute of a user account. In this case, IBM® Security Identity Manager sends the erADEProxyAddresses attribute in the modify operation with an attribute operation type of replace.

About this task

When the attribute operation type is replace, the adapter resets the proxy addresses for the user account on the Active Directory. You do not get the proxy addresses that are added to the user account by using the external application with an attribute operation type of replace when:
  • You have additions to the Proxy Addresses attribute of a user account on the Active Directory by using an external application.
  • The user accounts are not reconciled frequently.

To avoid a reset of the Proxy Addresses attribute on the Active Directory, modify the adapter profile for sending the erADEProxyAddresses attribute in the modify operation with an attribute operation type of Add or Delete. To handle the erADEProxyAddresses attribute with an attribute operation type of Add or Delete, modify the profile for Active Directory. The adapter profile (ADprofile.jar) is included in the JAR file for the adapter.

To modify the ADprofile.jar file for handling the erADEProxyAddresses attribute with an attribute operation type of Add or Delete, perform the following steps:

Procedure

  1. Copy the ADprofile.jar file to a temporary directory, for example, C:\Temp directory.
  2. Extract the contents of the ADprofile.jar file into the temporary directory by running the following command:
    cd C:\Temp 
    jar -xvf ADprofile.jar 
    The jar command creates the C:\Temp\ADprofile directory that has all the profile files.
  3. From the extracted ADprofile directory, open the resource.def file in a text editor and search for this entry:
    <Parameter Name="erADEProxyAddresses" Source="account" ReplaceMultiValue="true" />
  4. Delete all the occurrences of the above entry from the resource.def file and save the file.
  5. Run the following command to create the new jar file:
    cd C:\Temp 
    jar -cvf ADprofile.jar ADprofile
  6. Import the new ADprofile.jar file on IBM Security Identity Manager.
  7. After you import the adapter profile, restart IBM Security Identity Manager to reflect the updates.