Novell Doc: Identity Manager 3.6.1 Driver for Role-Based Entitlements: Implementation Guide

A.1 Driver Configuration

In iManager:

In iManager, click to display the Identity Manager Administration page.
Open the driver set that contains the driver whose properties you want to edit. To do so:
1. In the Administration list, click Identity Manager Overview.
2. If the driver set is not listed on the Driver Sets tab, use the Search In field to search for and display the driver set.
3. Click the driver set to open the Driver Set Overview page.
Locate the Entitlements Service driver icon, then click the upper right corner of the driver icon to display the Actions menu.
Click Edit Properties to display the driver’s properties page.
Click Driver Configuration.

In Designer:

Open a project in the Modeler.
Right-click the driver icon or line, then select click Properties > Driver Configuration.

The Driver Configuration options are divided into the following sections:

A.1.1 Driver Module

The Driver Module section lets you change the driver from running locally to running remotely or the reverse.

Option	Description
Java	Used to specify the name of the Java^* class that is instantiated for the shim component of the driver. This class can be located in the classes directory as a class file, or in the lib directory as a .jar file. If this option is selected, the driver is running locally. The name of the Java class is: com.novell.nds.dirxml.driver.entitlement.EntitlementServiceDriver
Native	Used to specify the name of the .dll file that is instantiated for the application shim component of the driver. If this option is selected, the driver is running locally.
Connect to Remote Loader	This setting does not apply to the Entitlements Service driver. You cannot use the driver with the Remote Loader.

Option

Description

Java

Used to specify the name of the Java^* class that is instantiated for the shim component of the driver. This class can be located in the classes directory as a class file, or in the lib directory as a .jar file. If this option is selected, the driver is running locally.

The name of the Java class is:

com.novell.nds.dirxml.driver.entitlement.EntitlementServiceDriver

Native

Used to specify the name of the .dll file that is instantiated for the application shim component of the driver. If this option is selected, the driver is running locally.

Connect to Remote Loader

This setting does not apply to the Entitlements Service driver. You cannot use the driver with the Remote Loader.

A.1.2 Driver Object Password (iManager Only)

Option	Description
Driver Object Password	This setting does not apply to the Entitlements Service driver.

A.1.3 Authentication

The Authentication section stores the information required to authenticate to the connected system and to the Remote Loader. The Entitlements Service driver functions only against the Identity Vault and cannot use the Remote Loader. Therefore, the authentication settings do not apply.

The only setting that applies to the Entitlements Service driver is the cache setting.

Option	Description
Driver Cache Limit (kilobytes) or Cache limit (KB)	Specify the maximum event cache file size (in KB). If it is set to zero, the file size is unlimited. Click Unlimited to set the file size to unlimited in Designer.

Option

Description

Driver Cache Limit (kilobytes)

Cache limit (KB)

Specify the maximum event cache file size (in KB). If it is set to zero, the file size is unlimited.

Click Unlimited to set the file size to unlimited in Designer.

A.1.4 Startup Option

The Startup Option section enables you to set the driver state when the Identity Manager server is started.

Option	Description
Auto start	The driver starts every time the Identity Manager server is started.
Manual	The driver does not start when the Identity Manager server is started. The driver must be started through Designer or iManager.
Disabled	The driver has a cache file that stores all of the events. When the driver is set to Disabled, this file is deleted and no new events are stored in the file until the driver state is changed to Manual or Auto Start.
Do not automatically synchronize the driver	This option applies only if the driver is deployed and was previously disabled. If this is not selected, the driver re-synchronizes the next time it is started.

A.1.5 Driver Parameters

The Driver Parameters section lets you configure the driver-specific parameters.

Parameter	Description
Driver parameters for server	Displays or specifies the server name or IP address of the server whose driver parameters you want to modify.
Edit XML	Opens an editor so that you can edit the driver’s configuration file.
Driver Options	There are no general driver options.
Subscriber Options
Result Threshold	Specifies the maximum number of results that the driver logs for each object to which an entitlement is granted or revoked. For example, if a user is granted four entitlements, the default threshold of 10 results per entitlement causes a maximum of 40 results to be logged on the User object.
Publisher Options	There are no Publisher channel options.

A.1.6 ECMAScript (Designer Only)

Enables you to add ECMAScript resource files. The resources extend the driver’s functionality when Identity Manager starts the driver.