< Home

display user-manage import-policy

Function

The display user-manage import-policy command displays the configurations of an import policy.

Format

display user-manage import-policy [ policy-name ]

Parameters

Parameter Description Value
policy-name Specifies the name of a policy for importing user information from a server. If parameter policy-name is not specified, the system displays the configurations of all import policies. The value must be the name of an existing import policy.

Views

All views

Default Level

2: Configuration level

Usage Guidelines

None

Example

# Display the configurations of an import policy.

<sysname> display user-manage import-policy
Total User Management Import Policy Number : 4  
 ---------------------------------------------------------------------------
 Policy Name       :             import_ad  
 Server Type       :             AD  
 Server Template   :             auth_server_ad   
 Server BaseDN     :             dc=cce,dc=com
 Server SearchDN   :             ou=research,dc=cce,dc=com
 Destination Group :             /default/cc/abc  
 Destination security group :    file_share
 Import Type       :             User
 Same Name Override:             Yes   
 User Attribute    :             sAMAccountName
 User Filter       :             (&(|(objectclass=person)(objectclass=organizationalPerson))(cn=*)(!(objectclass=computer)))
 Group Filter      :             (|(objectclass=organizationalUnit)(ou=*))
 Security Group Filter :         (&(objectclass=group)(|(grouptype=-2147483640)(grouptype=-2147483644)(grouptype=-2147483646)))
 Sync-mode Incremental Schedule Interval : 300                                  
 Sync-mode Full Schedule Daily :  00:00      
 User Time Stamp :                20151215030054
 Group Time Stamp :               20151215030054
 Dynamic Security Group Time Stamp : 20151215030054
 Static Security Group Time Stamp : 20151215030054
 User Import Version :           0  
 Group Import Version :          0  
 Security Group Import Version : 0  
 ---------------------------------------------------------------------------
 Policy Name       :             import_open_ldap
 Server Type       :             LDAP
 Server Template   :             auth_server_open_ldap
 Server BaseDN     :             dc=abc,dc=com
 Destination Group :             /default 
 Import Type       :             Group   
 Same Name Override:             Yes   
 User Attribute    :             cn
 User Filter       :             (&(|(objectclass=person)(objectclass=organizationalPerson))(cn=*))
 Group Filter      :             (|(objectclass=organizationalUnit)(ou=*))
 Security Group Filter :         (&(objectclass=group)(|(grouptype=-2147483640)(grouptype=-2147483644)(grouptype=-2147483646)))
 User Import Version :           0  
 Group Import Version :          0  
 Security Group Import Version : 0
 --------------------------------------------------------------------------- 
 Policy Name       :             import_sun_one_ldap
 Server Type       :             LDAP
 Server Template   :             auth_server_sun_one_ldap
 Server BaseDN     :             dc=test,dc=com
 Destination Group :             /default 
 Import Type       :             User and Security-group   
 Same Name Override:             Yes   
 User Attribute    :             uid
 User Filter       :             (&(|(objectclass=person)(objectclass=organizationalPerson))(uid=*))
 Group Filter      :             (|(objectclass=organizationalUnit)(ou=*))
 Security Group Filter :         (&(objectclass=groupofuniquenames)(!(memberURL=*)))
 User Import Version :           0  
 Group Import Version :          0  
 Security Group Import Version : 0
 --------------------------------------------------------------------------- 
 Policy Name       :             import_tsm
 Server Type       :             TSM
 Server Template   :             auth_server_tsm
 Server BaseDN     :             root
 Destination Group :             /default 
 Import Type       :             User and Group   
 Same Name Override:             Yes   
 Time interval     :             120
 --------------------------------------------------------------------------- 
Table 1 Description of the display user-manage import-policy command output

Item

Description

Total User Management Import Policy Number

Number of import policies

Policy Name

Name of an import policy

Server Type

Type of the server used by an import policy
  • AD: imports user, user group and security group information from the AD server.
  • LDAP: imports user, user group and security group information from the LDAP server.
  • Agile Controller: imports user or user group information from the Agile Controller server.

Server Template

Name of a server template

You can view the information only by running the server template command.

Server BaseDN

Path from which the user or user group information is imported

You can view the information only by running the server basedn command.

Server SearchDN

Sub-path from which the user or user group information is imported. This parameter applies only to AD or LDAP servers.

You can view the information only by running the server searchdn command.

Destination Group

Target group to which the user or user group information on the server is imported

You can view the information only by running the destination-group command.

Destination security group

Target security group to which the user information on the server is imported

You can view the information only by running the destination-security-group command.

Import Type

Method of importing user information from a server
  • All: The users, organizational structure and security groups are imported from an authentication server to the device.
  • User: Only the users are imported from an authentication server to the device.
  • Group: Only the organizational structure is imported from an authentication server to the device.
  • Security-group: The security groups are imported from an authentication server to the device.
  • User and Group: The users and organizational structure are imported from an authentication server to the device.
  • User and Security-group: The users and security groups are imported from an authentication server to the device.

Same Name Override

Whether users or user groups on an authentication server replace the user or user groups with the same name:
  • Yes
  • No

Time interval

Interval of automatic synchronization from server. This parameter applies only to Agile Controller server.

You can view the information only by running the time-interval command.

User Attribute

User attribute that can be used as the local user name
  • sAMAccountName: Login name on an AD server or an AD LDAP server
  • cn: Display name on an Open LDAP server
  • uid: Login name on a Sun ONE LDAP

User Filter

Filtering condition of a user. This parameter applies only to AD or LDAP servers.

Group Filter

Filtering condition of a user group. This parameter applies only to AD or LDAP servers.

Security Group Filter

Filtering condition of a security group. This parameter applies only to AD or LDAP servers.

Sync-mode Incremental Schedule Interval

Incremental synchronization interval. This parameter applies only to AD or LDAP servers.

You can view the information only by running the sync-mode incremental schedule interval command.

Sync-mode Full Schedule Daily

Sync-mode Full Schedule Week

Full synchronization time. This parameter applies only to AD or LDAP servers.

You can view the information only by running the sync-mode full schedule command.

User Time Stamp

Timestamp for the first incremental synchronization of users. This parameter applies only to AD or LDAP servers.

You can view the information only by running the user time-stamp command.

Group Time Stamp

Timestamp for the first incremental synchronization of user groups. This parameter applies only to AD or LDAP servers.

You can view the information only by running the group time-stamp command.

Dynamic Security Group Time Stamp

Timestamp for the first incremental synchronization of dynamic security groups. This parameter applies only to AD or LDAP servers.

You can view the information only by running the dynamic-security-group time-stamp command.

Static Security Group Time Stamp

Timestamp for the first incremental synchronization of static security groups. This parameter applies only to AD or LDAP servers.

You can view the information only by running the static-security-group time-stamp command.

User Import Version

User import version. The version number is increased by 1 each time all user information is imported manually or periodically. In case of an import failure, the version number is unchanged.

This parameter applies only to AD or LDAP servers.

Group Import Version

User group import version. The version number is increased by 1 each time all user group information is imported manually or periodically. In case of an import failure, the version number is unchanged.

This parameter applies only to AD or LDAP servers.

Security Group Import Version

Security group import version. The version number is increased by 1 each time all security group information is imported manually or periodically. In case of an import failure, the version number is unchanged.

This parameter applies only to AD or LDAP servers.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >