Active Directory + Resource action to delete home directory

Question

Hi all,
I am trying to delete home directory from the disk physically after the user is deleted from AD. I followed the link http://docs.sun.com/app/docs/doc/820-6551/bzbuc?a=view and implemented the delete resource action as mentioned in the link.
here are the steps i followed (For testing, I mentioned delete >> C:\test.txt to see if it deletes the text file)
1. Enter delete after action in the Identity Manager User Attribute column of the resource’s schema map.
2. In the Attribute Type column, select string.
3. In the Resource User Attribute column, enter IGNORE_ATTR. Leave the Required, Audit, Read Only, and Write Only columns unchecked.
4. Add this to the Deprovision Form user form after the </Include> tag:
<Field name= ’resourceAccounts.currentResourceAccounts[AD].attributes.
delete after action’>
<Expansion>
<s>AfterDelete</s>
</Expansion>
</Field>
5. Create the following XML file and import into Identity Manager. (Change file paths according to your environment.)
<?xml version=’1.0’ encoding=’UTF-8’?> <!DOCTYPE Waveset PUBLIC
’waveset.dtd’ ’waveset.dtd’>
<Waveset>
<ResourceAction name=’AfterDelete’>
<ResTypeAction restype=’Windows Active Directory’ timeout=’6000’>
<act>
echo delete >> C:\test.txt
exit
</act>
</ResTypeAction>
</ResourceAction>
</Waveset>
6. Edit the XML for the Active Directory resource and add information to the “delete after action” schema mapping. Here is an example of a complete schema mapping for this resource with the new additions. (You will be adding the views-related information.)
<AccountAttributeType id=’12’ name=’delete after action’ syntax=’string’
mapName=’IGNORE_ATTR’ mapType=’string’>
<Views>
<String>Delete</String>
</Views>
</AccountAttributeType>
To test, I deleted a user from AD and I was expecting the file c:\test.txt to be deleted as it invokes the Resource action after delete. Has anyone been successful in deleting the home directory from drive after the user is deleted. Any pointers or help
Thanks,
Ani

Answer 1

Hi Gaurav,
I have to implement Resource Action functionality for Solaris system. I followed the link http://download.oracle.com/docs/cd/E19225-01/820-6551/bzbuc/index.html and the first message of this thread. I am using 8.1 IDM.
But unfortunately I can’t trigger any bash commands on the resource like echo deleting of user wiht next name - $WSUSER_accountId >> /tmp/resultFile.txt.
There are any errors on log file.
Can you share your work configuration and steps to reproduce?
I have done next but Resource Action doesn’t triggered:
1. My Action:
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE Waveset PUBLIC 'waveset.dtd' 'waveset.dtd'>
<Waveset>
<ResourceAction name='AST-ResAct-SOL-AfterDelete'>
<ResTypeAction restype='Solaris' timeout='6000'>
<act>
#!/usr/bin/bash
echo deleting of user wiht next name - $WSUSER_accountId >> /tmp/resultFile.txt
exit 0
</act>
</ResTypeAction>
</ResourceAction>
</Waveset>
2. Added next line to “Deprovision Form”
<Field name='resourceAccounts.currentResourceAccounts[SOLARIS 10].attributes.delete after action'>
<Expansion>
<s>AST-ResAct-SOL-AfterDelete</s>
</Expansion>
</Field>
3. Added a new attribute mapping on the resource:
<AccountAttributeType id='12' name='delete after action' syntax='string' mapName='IGNORE_ATTR' mapType='string'>
</AccountAttributeType>
4. Assigned role (this role provisioned resource to user) to user, delete user from resource via Deprovision IDM page. But my Action commands didn’t trigger on resource.
Thanks’ in advance!