I recently discovered some useful command line tools available for uploading, deleting and tailing files on the IBM Security Identity Governance and Intelligence (ISIGI) virtual appliance:

1. Transferring connector files to the virtual appliance using scp
As described in the ISIGI documentation it is possible to upload connector files to the virtual appliance using scp, as follows:

(a) Set up a password for the Secure Copy (scp) user ‘igiuser’ on your ISIGI system by sshing to the ISIGI VA and then issuing:

igi connectors user_settings change_password

(You will be prompted to specify, twice, the password for user ‘igiuser’.)

(b) To upload a file from Linux, type something similar to the following:

scp /home/igi/ACME_Identities_t3.csv igiuser@192.168.42.125:connectors/csv/hr/users_full

(You will be prompted to enter the password for user ‘igiuser’.)

(b) To upload a file from Windows using pscp, supplying the password for igiuser on the command line, type something similar to the following:

pscp -pw <igiuser_password> -scp "ACME_Identities_t3.csv" igiuser@192.168.42.125:connectors/csv/hr/users_full

(b) To upload a file from Windows using pscp, supplying the password for igiuser interactively, type something similar to the following:

pscp -scp "ACME_Identities_VH_t3.csv" igiuser@192.168.42.125:connectors/csv/hr/users_full

(You will be prompted to enter the password for user ‘igiuser’.)

Note that if you are using pscp you need to specify ‘-scp’ to force the use of SCP protocol.

2. Listing connector files from the CLI
ssh to the ISIGI VA
log in as admin and go to:
igi > connectors > connector_files > list
It is possible to enter these all on one line:

igi connectors connector_files list

3. Deleting connector files from the CLI (this is useful as it’s not possible to do this from the LMI)
ssh to the ISIGI VA
log in as admin and go to:
igi > connectors > connector_files > delete
It is possible to enter these all on one line:

igi connectors connector_files delete

For example:

igi523.demo.com> igi connectors connector_files delete
1: connectors/csv/hr/users_full/ACME Identities_VH_t1.csv
2: connectors/csv/hr/users_full/ACME Identities_VH_t2.csv
3: connectors/csv/hr/users_full/ACME Identities_VH_t3.csv
4: connectors/csv/hr/users_full/ACME Identities_VH_t4.csv
5: all
Enter index: 5
Are you sure you want to delete the selected file? The file cannot be restored. Enter YES to confirm that you want to continue: YES

Note: if you change your mind about deleting the files don’t type Ctrl-C as this will terminate the putty session – instead type an invalid index, such as:

igi523.demo.com> igi connectors connector_files delete
1: connectors/csv/hr/users_full/ACME Identities_VH_t1.csv
2: connectors/csv/hr/users_full/ACME Identities_VH_t2.csv
3: connectors/csv/hr/users_full/ACME Identities_VH_t3.csv
4: connectors/csv/hr/users_full/ACME Identities_VH_t4.csv
5: all
Enter index: 6
Invalid index

4. Tailing log files from the CLI
It is possible to certain tail log files on the ISIGI VA using the CLI (such as the ISIGI trace log, but not the Directory Integrator log) – to do this ssh to the ISIGI VA, log in as admin and type something similar to the following:

igi523.demo.com> igi
igi523.demo.com:igi> logs
igi523.demo.com:logs> monitor
Options:
1: System
2: LMI
3: Configuration
4: IGI Application Server
5: Broker Application Server
Enter index: 1
Options:
1: messages
Enter index: 1
Enter the number of lines to tail: 1000
Dec 13 08:37:36 kernel: ACPI: LAPIC_NMI (acpi_id[0x7d] high edge lint[0x1])
Dec 13 08:37:36 kernel: ACPI: LAPIC_NMI (acpi_id[0x7e] high edge lint[0x1])
Dec 13 08:37:36 kernel: ACPI: LAPIC_NMI (acpi_id[0x7f] high edge lint[0x1])
Dec 13 08:37:36 kernel: ACPI: IOAPIC (id[0x80] address[0xfec00000] gsi_base[0])
Dec 13 08:37:36 kernel: IOAPIC[0]: apic_id 128, version 17, address 0xfec00000, GSI 0-23
Dec 13 08:37:36 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 high edge)
Dec 13 08:37:36 kernel: Using ACPI (MADT) for SMP configuration information
Dec 13 08:37:36 kernel: ACPI: HPET id: 0x8086af01 base: 0xfed00000
Dec 13 08:37:36 kernel: SMP: Allowing 128 CPUs, 124 hotplug CPUs
Dec 13 08:37:36 kernel: PM: Registered nosave memory: 000000000009e000 - 000000000009f000
...

Vaughan

Tagged IBM, IBM Security Directory Suite, Identity Governance