Provisioning multiple Solaris servers, need consistient uid

Question

I will be provisioning users to a number of Solaris servers using Identity Manager. However in order to accomodate some internal applications the user must have the same numeric uid for a particular user on all Solaris servers. The only way I can think of doing this is to create a database table and whenever I create a new user get the next value and use that as the uid.
Anyone else with any suggestions on how to do this? I would have liked to have the first server in the provisioning order simply assign the uid and then use that same uid for the other servres, but I can't find a way to use a value from one provisioned server on another server when they're both being provisioned in the same Identity Manager Save operation.

Answer 1

We had some help setting this up .. this is a rule which returns a unique uid:
<Rule name='UidDBRule' createDate='1195697964630' lastModifier='Configurator' lastModDate='1195701542165' lastMod='26'>
    <block>
        <defvar name='value'/>
        <defvar name='type'>
            <s>mysql</s>
        </defvar>
        <defvar name='driverClass'>
            <s>org.gjt.mm.mysql.Driver</s>
        </defvar>
        <defvar name='url'>
            <s>jdbc:mysql://%h:%p/%d</s>
        </defvar>
        <defvar name='host'>
            <s>localhost</s>
        </defvar>
        <defvar name='port'>
            <s>3306</s>
        </defvar>
        <defvar name='db'>
            <s>dbname ..</s>
        </defvar>
        <defvar name='userName'>
            <s>dbuser ..</s>
        </defvar>
        <defvar name='passwd'>
            <s>dbpass ..</s>
        </defvar>
        <setvar name='value'>
            <add>
                <invoke name='queryString' class='com.waveset.util.JdbcUtil'>
                    <map>
                        <s>type</s>
                        <ref>type</ref>
                        <s>driverClass</s>
                        <ref>driverClass</ref>
                        <s>url</s>
                        <ref>url</ref>
                        <s>host</s>
                        <ref>host</ref>
                        <s>port</s>
                        <ref>port</ref>
                        <s>database</s>
                        <ref>db</ref>
                        <s>user</s>
                        <ref>userName</ref>
                        <s>password</s>
                        <ref>passwd</ref>
                        <s>sql</s>
                        <s>Select uidNumber from user</s>
                    </map>
                </invoke>
                <s>1</s>
            </add>
        </setvar>
        <invoke name='sql' class='com.waveset.util.JdbcUtil'>
            <map>
                <s>type</s>
                <ref>type</ref>
                <s>driverClass</s>
                <ref>driverClass</ref>
                <s>url</s>
                <ref>url</ref>
                <s>host</s>
                <ref>host</ref>
                <s>port</s>
                <ref>port</ref>
                <s>database</s>
                <ref>db</ref>
                <s>user</s>
                <ref>userName</ref>
                <s>password</s>
                <ref>passwd</ref>
                <s>sql</s>
                <concat>
                    <s>update user set uidNumber=</s>
                    <ref>value</ref>
                </concat>
            </map>
        </invoke>
        <ref>value</ref>
    </block>
    <MemberObjectGroups>
        <ObjectRef type='ObjectGroup' id='#ID#Top' name='Top'/>
    </MemberObjectGroups>
</Rule>The dbtable has one single attribute, called uidNumber, and I initially set it to 15000, to make sure that sim-users would not get uidnumbers allready in use on our redhat servers.
I ended up using the rule in the Redhat Linux User Form, like this:
      <Field name='global.unixId'>
        <Display class='Label'>
          <Property name='title' value='unixId: '/>
        </Display>
        <Default>
          <rule name='UidDBRule'/>
        </Default>
      </Field>