listusermap record location for LSF9?

 8 Replies
 0 Subscribed to this topic
 27 Subscribed to this forum
Sort:
Author
Messages
John Costa
Veteran Member
Posts: 154
Veteran Member

    We are on LSF9.0.0.6, Windows Server 2003, and SQL-Server 2005.

    Where is the data provided by the command ‘listusermap’ stored?
     
    If I run ‘listusermap –r’, to dump the data from the Windows Registry, it appears to be no longer stored there as I get a message indicating “UserMap does not exist.” 
     
    If I run ‘listusermap –g’, to dump the data from the UserMap table of the GEN database, I get back zero records.
     
    Lastly, if I run ‘listusermap –c’, to dump the data from the environment cache, I get back my list of users. However, because it is cached, I assume the list generated is dynamic based on who has logged into the environment since it was last started (just an assumption on my part).
     
    I have to assume this cache is built somehow from hard data that is stored somewhere. Ultimately, I have the need to translate NT User ID values (e.g., NT00001509) to their domain user name equivalents (domain\username).
     
    Can anyone help me out?
    _________________ John - Wichita, KS
    Roger French
    Veteran Member
    Posts: 549
    Veteran Member
      Did you try just using listusermap (with no options)?

      John Costa
      Veteran Member
      Posts: 154
      Veteran Member
        Roger - Yes, I tried that but that didn't resolve the problem. However, I have made some headway on this issue though I still have a problem with it. I found that if first run 'listusermap -n' to clean the cache, and I then log into LID and run LAUA, the environment cache gets populated with all users. I can then run 'listusermap -c' and pipe the output to a text file and finally import that text file into a SQL table for use with my various interfaces. What I don't like about this process is that I have to manually go into LID to run LAUA and refresh my listusermap cache. It would be a lot easier for me if I could find some automated means of pulling this information, either via ProcessFlow or some other tool that I could schedule.
        _________________ John - Wichita, KS
        Roger French
        Veteran Member
        Posts: 549
        Veteran Member
          Yeah that will work too.

          You can manually export the ID's also by exporting the right "hive" of the registry using regedit. There are several references on how to do this on Google. I've done it a few times when I wanted to export users from one Windows server and import those users using the same NT id's onto another server.

          You could probablly do it using processflow integrator somehow.
          John Costa
          Veteran Member
          Posts: 154
          Veteran Member
            Thanks Roger, but that's part of the problem. In a LSF9 environment, user info is no longer stored in the Windows registry so there's nothing there to export. All user data is stored encrypted within my MS-ADAM LDAP repository. I thought there might have been a way to pull from the LDAP using ProcessFlow and a ResourceQuery task, but it doesn't look like I have the option to specifically pull the "NTxxxxxxxx" value.
            _________________ John - Wichita, KS
            John Henley
            Posts: 3353
              You can use ProcessFlow's ResourceQuery node to 1) get the RMID, 2) get the UID and 3) get the Windows account info for your LSF9 service. Then use an Assign node with javascript to convert the UID to the NTxxxxxxxx. If you can wait a couple of weeks, that's the article in May 1 LawsonGuru Letter...
              Thanks for using the LawsonGuru.com forums!
              John
              John Henley
              Posts: 3353

                Here's a sneak preview :

                Thanks for using the LawsonGuru.com forums!
                John
                Roger French
                Veteran Member
                Posts: 549
                Veteran Member
                  I like John's method; it's relatively clean and easy if you have PFI.
                  If you don't have PFI, then the NT id's are also stored in GEN\USERINFO and GEN\R_USER. The table contains the NT Id's but not the user names.
                  Posted By John Costa on 04/09/2009 09:14 AM
                  Thanks Roger, but that's part of the problem. In a LSF9 environment, user info is no longer stored in the Windows registry so there's nothing there to export. All user data is stored encrypted within my MS-ADAM LDAP repository. I thought there might have been a way to pull from the LDAP using ProcessFlow and a ResourceQuery task, but it doesn't look like I have the option to specifically pull the "NTxxxxxxxx" value.



                   

                  John Costa
                  Veteran Member
                  Posts: 154
                  Veteran Member

                    Yes, I too, like John's method.  We just purchased PF integrator and are looking forward to leveraging it's capabilities.  I can't wait to see next month's newsletter.

                    _________________ John - Wichita, KS