Home

Page 1 of 2 12 LastLast
Results 1 to 10 of 13

Thread: ICE bug?

Hybrid View

  1. #1
    David Gersic NNTP User

    ICE bug?

    Trying to do an export here, and it seems that ICE can't export the
    "workforceID" attribute.

    The attribute is there, it has data in it. It's not a rights issue, because I
    can use openldap's ldapsearch with the same account and password and it exports
    fine.

    Watching both of these in dstrace is interesting.

    ldapsearch passes in the list of requested attributes.

    ice requests all attributes, then appears to try to filter out the ones you
    asked for.

    I've tried this with a couple of different versions of ice.exe on Win32 here.
    All do the same thing.


    ---------------------------------------------------------------------------
    David Gersic dgersic_@_niu.edu

    I'm tired of receiving rubbish in my mailbox, so the E-mail address is
    munged to foil the junkmail bots. Humans will figure it out on their own.

  2. #2
    Peter Kuo NNTP User

    Re: ICE bug?

    David Gersic wrote:

    > Trying to do an export here, and it seems that ICE can't export the
    > "workforceID" attribute.


    What happens when you try? Just no 'output'?

    --


    Peter
    eDirectory Rules!

  3. #3
    David Gersic NNTP User

    Re: ICE bug?

    On Sat, 05 Nov 2005 23:51:03 GMT, "Peter Kuo"
    <Peter@Novell.Product.Support.Forums> wrote:

    >David Gersic wrote:
    >
    >> Trying to do an export here, and it seems that ICE can't export the
    >> "workforceID" attribute.

    >
    >What happens when you try? Just no 'output'?


    I'm using the DELIM output selection, and there's no output. The place where
    there should be "...stuff,workforceid,morestuff..." is just
    "...stuff,,morestuff...".



    ---------------------------------------------------------------------------
    David Gersic dgersic_@_niu.edu

    I'm tired of receiving rubbish in my mailbox, so the E-mail address is
    munged to foil the junkmail bots. Humans will figure it out on their own.

  4. #4
    Peter Kuo NNTP User

    Re: ICE bug?

    Oh, version of NetWare/SP and eDir?

    --


    Peter
    eDirectory Rules!

  5. #5
    Peter Kuo NNTP User

    Re: ICE bug?

    Just did a quick test against eDir 8.7.3.3 on a Win2K box using C1
    (1.3.6)'s ICE wizard interface (version 10552.40) and it worked just
    fine?


    --


    Peter
    eDirectory Rules!

  6. #6
    David Gersic NNTP User

    Re: ICE bug?

    On Sun, 06 Nov 2005 00:09:57 GMT, "Peter Kuo"
    <Peter@Novell.Product.Support.Forums> wrote:

    >Just did a quick test against eDir 8.7.3.3 on a Win2K box using C1
    >(1.3.6)'s ICE wizard interface (version 10552.40) and it worked just
    >fine?


    I'm doing this from the command line if that matters. ICE says:

    Novell Import Convert Export utility for Novell eDirectory
    version: 10552.51
    Copyright 2000 Novell, Inc. All rights reserved. Patent Pending.

    Source Handler: ICE LDAP handler for Novell eDirectory (version: 10552.40 )

    Destination Handler: ICE Delimited data handler for Novell eDirectory (version:
    10552.40 )

    ICE log file: ice.log

    Start time: Tuesday, November 08, 2005

    Press control-C to exit

    Operation in progress ...




    Total entries processed: 1

    Total entries failed: 0

    End time: Tuesday, November 08, 2005

    Total Time: 0:00:01.062

    Time per entry: 00:01.062




    Here's the command line (edited to hide the ip addr, user, and password):

    \novell\consoleone\1.2\bin\ice -S LDAP -s 127.0.0.1 -p 1636 -d cn=User,o=niu -w
    password -L DEVFSelfSignedCert.der -F "(workforceid=122326)" -b ou=users,o=niu
    -D DELIM -f mike1.csv -t
    dn,cn,niupositionnumber,niufullparttime,niuregtemp ,workforceid,niudateofbirth,
    niubusinessunit,niussn,departmentnumber,employeety pe,jobcode,initials,givenname,
    sn,fullname,title,telephonenumber,ou,physicaldeliv eryofficename,employeestatus,
    niurank


    (Minor gripe: unlike ldapsearch, the ice command line length is limited, so I
    can't actually get all of the data that I want out of it. But ldapsearch doesn't
    put out CSV files. And, unlike ldapsearch, I can't even just tell it to get all
    attributes, since the CSV file output insists on having a "template" to work
    from. Argh.)


    And here's the resulting CSV output (user personal data hidden):

    "cn=DSMIT10,ou=Users,o=NIU",DSMIT10,00020855,P,T,, 1990xxxx,STDTS,999999999,CG00000,
    H,1105,E,First,Last,First Last,Negotiated Rates,,Student Affairs,CL 180 - 0,A,


    Now, I _know_ that this guy has a workforceid. He has to. I used it in the
    search filter, and it found him, but it won't put it out in to the CSV file. And
    it seems to be just the workforceid. Every other attribute seems to export ok.


    Using the LDIF output option doesn't seem to work any better. I can find him by
    workforceid, but I can't output it. And I'm sure it's not a rights problem
    because I can use the same user/password to bind with ldapsearch and it outputs
    workforceid just fine.



    ---------------------------------------------------------------------------
    David Gersic dgersic_@_niu.edu

    I'm tired of receiving rubbish in my mailbox, so the E-mail address is
    munged to foil the junkmail bots. Humans will figure it out on their own.

  7. #7
    Peter Kuo NNTP User

    Re: ICE bug?

    David Gersic wrote:

    > Minor gripe: unlike ldapsearch, the ice command line length is
    > limited,


    No kidding! Off you go to the "enhancement page" <g>

    --


    Peter
    eDirectory Rules!

  8. #8
    David Gersic NNTP User

    Re: ICE bug?

    On Sun, 06 Nov 2005 00:09:57 GMT, "Peter Kuo"
    <Peter@Novell.Product.Support.Forums> wrote:

    >Just did a quick test against eDir 8.7.3.3 on a Win2K box using C1
    >(1.3.6)'s ICE wizard interface (version 10552.40) and it worked just
    >fine?


    Ok, I figured it out. The problem is how they're doing the return attribute
    list, in conjunction with how I have the LDAP server set up.

    As I said in my first post:

    ice requests all attributes, then appears to try to filter out
    the ones you asked for.

    In fact, this is exactly what it does. You can see it if you watch the search
    request in dstrace. I'm used to ldapsearch, which actually passes in the
    requested attribute list, so that it gets back only what it asked for, so this
    is a bit strange to me.

    So, looking at it some more, I figured it out. To make something else work out
    the way it was documented for our developpers, I have "niuEmplId" mapped to
    "workforceid" in the LDAP Group. This works fine, as if you ask for workforceid,
    you get workforceid, but if you ask for niuEmplID, you get niuEmplID. They're
    actually the same attribute in the directory, I'm not storing both. I was
    originally going to have to store both, but we had a last minute design change
    that made it no longer necessary to have two attributes with almost the same
    data in them. It's a long story.

    Actually, this works great with ldapsearch. With ICE, though, you tell ICE you
    want workforceid. It asks for all attributes. It gets back niuEmplID due to the
    attribute map, which it then filters out because it thinks it's looking for
    workforceid in the output. Argh.

    This is not what I expected it to be doing. It's probably legal to do it this
    way, but it's dumb work being done by ICE that it should (IMHO) be allowing the
    directory to do for it.


    ---------------------------------------------------------------------------
    David Gersic dgersic_@_niu.edu

    I'm tired of receiving rubbish in my mailbox, so the E-mail address is
    munged to foil the junkmail bots. Humans will figure it out on their own.

  9. #9
    Peter Kuo NNTP User

    Re: ICE bug?

    David Gersic wrote:

    > With ICE, though, you tell ICE you
    > want workforceid. It asks for all attributes. It gets back niuEmplID
    > due to the attribute map, which it then filters out because it thinks
    > it's looking for workforceid in the output. Argh


    This kind of sucks! So, I guess if the two attributes were not mapped
    to each other (which I didn't as it was a default setup), it would have
    worked for on first try ...

    --


    Peter
    eDirectory Rules!

  10. #10
    Peter Kuo NNTP User

    Re: ICE bug?

    David Gersic wrote:

    > This is not what I expected it to be doing. It's probably legal to do
    > it this way, but it's dumb work being done by ICE that it should
    > (IMHO) be allowing the directory to do for it.


    I fully agree and let me know what Novell thinks of this ...

    --


    Peter
    eDirectory Rules!

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •