prepare-external-store

Description

Prepare an Identity Broker and an external server for for communication.

This tool can be used to update a directory or proxy server for use as a Broker Store or user store by the Identity Broker. Use of this tool is unnecessary if you use the create-initial-broker-config tool to define and prepare Broker Store and user store instances.

This tool creates the Identity Broker user account, sets the correct password, and configures the account with required privileges. It will also install the necessary schema required by the Identity Broker. If necessary, you are prompted for manager credentials so that the tool can perform any required modifications to the external server.

If a secure connection will be used by Identity Broker to communicate with the external server, you can supply the path and password of the trust store to have this tool populate it with the server certificate of the external server.

Examples

prepare-external-store --hostname server.example.com --port 1389 \
     --bindDN "cn=Directory Manager" --bindPassword secret \
     --brokerBindDN "cn=Broker User,cn=Root DNs,cn=config" \
     --brokerBindPassword password --isBrokerStore \
     --brokerStoreBaseDN "ou=Identity Broker,dc=example,dc=com" \
     --brokerAdminUID admin --brokerAdminPassword password --isUserStore \
     --userStoreBaseDN ou=people,dc=example,dc=com

prepare-external-store --hostname server.example.com --port 1636 --useSSL \
     --brokerBindPassword password --brokerTrustStorePath config/truststore \
     --brokerTrustStorePasswordFile config/truststore.pin --isUserStore \
     --userStoreBaseDN ou=people,dc=example,dc=com

Arguments

-V
--version

-H
--help

--help-ldap

--help-sasl

--help-debug

-Z
--useSSL

-q
--useStartTLS

--useNoSecurity

-D {bindDN}
--bindDN {bindDN}

-w {bindPassword}
--bindPassword {bindPassword}

-j {bindPasswordFile}
--bindPasswordFile {bindPasswordFile}

-X
--trustAll

-h {host}
--hostname {host}

-p {port}
--port {port}

-n
--no-prompt

-Q
--quiet

--brokerBindDN {bindDN}

--brokerBindPassword {bindPassword}

--brokerBindPasswordFile {bindPasswordFile}

--brokerStoreBaseDN {baseDN}

--userStoreBaseDN {baseDN}

--isBrokerStore

--isUserStore

--skipBrokerStoreInitialization

--updateSchema

--brokerAdminUID {uid}

--brokerAdminPassword {bindPassword}

--brokerAdminPasswordFile {bindPasswordFile}

--propertiesFilePath {propertiesFilePath}

--noPropertiesFile

--brokerTrustStorePath {trustStorePath}

--brokerTrustStorePassword {trustStorePassword}

--brokerTrustStorePasswordFile {path}