Solaris Connector

Last modified 09 Aug 2024 12:59 +02:00

Identity connector for Solaris servers, possibly usable for other UNIX-like servers.

Functionalitystable
Development statusabandoned (no longer developed or maintained, legacy code)
Support statusunsupported
OriginICF
Support provided by
Target systemsSolaris servers, possibly also other Unix systems.
ProtocolSSH/Telnet
Source codehttps://github.com/Evolveum/openicf/tree/master/connectors/java/solaris

Capabilities and Features

Provisioning

YES

Live Synchronization

NO

Password

YES

Activation

YES

su

YES

sudo

YES

History

This is mostly the original Sun ICF Solaris connector. It was extended for Linux use by Evolveum.

Version Origin Binary Sources Build Date Description

1.1.0.e6322d

OpenICF development version, built and tested by Evolveum

download jar

OpenICF: solaris-connector-1.1.1.x-dev branch, revision 6322

Feb 2013

Solaris well tested, Linux slightly tested. There may be problems with sudo authorization.

1.1.0.e6327d

OpenICF development version, built and tested by Evolveum

download jar

OpenICF: solaris-connector-1.1.1.x-dev branch, revision 6327

Feb 2013

Works well
Known issues: sudo password matching

1.1.0.em13

OpenICF Evolveum version

download jar

Evolveum OpenICF, revision emark-13-gd1b4de0

15 Aug 2013

Works well

1.1.0.em77

OpenICF Evolveum version

download jar

Evolveum OpenICF, revision emark-77-gbbe5fa6

Oct 2013

Somehow tested.
Contains features not available in the OpenICF trunk yet.

Documentation

Patterns

The connectors works by matching patterns of the input that it receives from the Telnet/SSH channel. Therefore also some of the configuration parameters are patterns. Especially the expected prompt configuration parameters rootShellPrompt and loginShellPrompt. It is usual to set them to $ especially if sudo is used. However, the dollar sign is a pattern that matches the end of line. If set like this it will match too early and offset all the other commands. The dollar sign needs to be escaped to avoid its special meaning. Therefore the correct setting for prompt patterns is \$.

Troubleshooting

Enable Logging

Set appropriate logger in midPoint:

Logger class name

org.identityconnectors.solaris

Connector functions

com.jcraft.jsch

SSH connection details (logs from the underlying JSch library)

expect4j

Sent and received data, pattern matching (logs from the underlying Expect4j library, see also a note below)

The connector is using Expect4j library to do most functions. The logging of the connector itself should be enough for normal troubleshooting (e.g. it displays every send and received command). But for some problems a finer logging is needed. Unfortunately the Expect4j is using obsolete java.util.logging (JUL) framework that does not work well with ICF. Yet there is a workaround for this. Use the following line in logging.properties file to enable Expect4j logging:

logging.properties
expect4j.level = ALL
Was this page helpful?
YES NO
Thanks for your feedback