Adding Entitlements to Account
import java.util.*;
import javax.naming.NamingEnumeration;
import javax.naming.NamingException;
import javax.naming.directory.Attributes;
import javax.naming.directory.BasicAttribute;
import javax.naming.directory.ModificationItem;
import javax.naming.directory.SearchControls;
import javax.naming.directory.SearchResult;
import javax.naming.ldap.InitialLdapContext;
import javax.naming.ldap.LdapContext;
import Thor.API.tcResultSet;
import Thor.API.Exceptions.tcAPIException;
import Thor.API.Exceptions.tcColumnNotFoundException;
import Thor.API.Exceptions.tcITResourceNotFoundException;
import Thor.API.Operations.tcITResourceInstanceOperationsIntf;
import Thor.API.Operations.tcLookupOperationsIntf;
import oracle.core.ojdl.logging.ODLLogger;
import oracle.iam.identity.exception.NoSuchUserException;
import oracle.iam.identity.exception.UserLookupException;
import oracle.iam.identity.usermgmt.api.UserManager;
import oracle.iam.platform.Platform;
import oracle.iam.provisioning.api.EntitlementService;
import oracle.iam.provisioning.api.ProvisioningService;
import oracle.iam.provisioning.exception.GenericProvisioningException;
import oracle.iam.provisioning.exception.UserNotFoundException;
public class EntitlementsOfServiceAccount {
private static final ODLLogger logger = ODLLogger.getODLLogger(EntitlementsOfServiceAccount.class.getName());
private final String adGroupNames = "Lookup.XYZ.ServiceAccounts.ADGroups";
private final String adGroupCongifuration = "Lookup.XYZ.ServiceAccounts.Configuration";
String userDN = null;
String groupDN = null;
LdapContext adConnection = null;
Map<String, String> AD_IT_RESOURSE_PARAMETERS = null;
HashMap<String, String> adGroups = new HashMap<String, String>();
HashMap<String, String> adConfigurations = new HashMap<String, String>();
// OIM API's
UserManager userManager = Platform.getService(UserManager.class);
ProvisioningService provisioningService = Platform.getService(ProvisioningService.class);
EntitlementService entitlementService = Platform.getService(EntitlementService.class);
// taking input from adapter as user i.e., common name
public void addEntitlementsToUser(String user) {
adGroups = getLookupEntries(adGroupNames);
adConfigurations = getLookupEntries(adGroupCongifuration);
userDN = adConfigurations.get("GroupDN");
groupDN = adConfigurations.get("UserDN");
for (String key : adGroups.keySet()) {
provisionEntitlementsToServiceAccount(user, key, adConnection);
}
}
// Getting AD connection and IT Resource details
public void addADGroupsToSeriveAccounts(String itReourceName) throws NamingException, NoSuchUserException,
UserLookupException, UserNotFoundException, GenericProvisioningException {
AD_IT_RESOURSE_PARAMETERS = getITResourcesProperties(itReourceName);
adConnection = getADConnection(itReourceName, AD_IT_RESOURSE_PARAMETERS);
addEntitlementsToUser("SRC-ACCTEST");
}
// Testing purpose passing IT Resource from main method
public static void main(String[] args) throws Exception {
String itResourceName = "Active Directory";
EntitlementsOfServiceAccount eOfServiceAccount = new EntitlementsOfServiceAccount();
eOfServiceAccount.addADGroupsToSeriveAccounts(itResourceName);
}
// AD Connection
private LdapContext getADConnection(final String itResource, Map<String, String> TEST_AD_IT_RESOURSE_PARAMETERS) {
logger.info("Entering into getADConnection method : ");
String adminName = null;
String adminPassword = null;
String hostName = null;
String userName = null;
String containerDN = null;
InitialLdapContext ctx = null;
TEST_AD_IT_RESOURSE_PARAMETERS = getITResourcesProperties(itResource);
if (null != TEST_AD_IT_RESOURSE_PARAMETERS && !TEST_AD_IT_RESOURSE_PARAMETERS.isEmpty()) {
hostName = TEST_AD_IT_RESOURSE_PARAMETERS.get("LDAPHostName");
userName = TEST_AD_IT_RESOURSE_PARAMETERS.get("DirectoryAdminName");
containerDN = TEST_AD_IT_RESOURSE_PARAMETERS.get("Container");
if (userName.contains("\\")) {
userName = userName.substring(userName.indexOf("\\") + 1);
userName = "cn=" + userName + ",cn=users," + containerDN;
}
adminName = userName;
adminPassword = TEST_AD_IT_RESOURSE_PARAMETERS.get("DirectoryAdminPassword");
}
if (adminPassword.equals("Null Password")) {
System.out.println("Null Password: Connection Failed");
return null;
}
Hashtable<String, Object> env = new Hashtable<String, Object>();
env.put("java.naming.factory.initial", "com.sun.jndi.ldap.LdapCtxFactory");
env.put("java.naming.security.authentication", "simple");
env.put("java.naming.security.principal", adminName);
env.put("java.naming.security.credentials", adminPassword);
env.put("java.naming.provider.url", "ldap://" + hostName + ":389");
try {
ctx = new InitialLdapContext(env, null);
} catch (NamingException e) {
System.out.println("Error while getting the connection : " + e.getMessage());
e.printStackTrace();
}
System.out.println("AD connection is success : ");
return ctx;
}
// fetch Entitlements, userDN and groupDN from lookup
public HashMap<String, String> getLookupEntries(String lookupName) {
// tcLookupOperationsIntf lookupOperationsIntf = Platform.getService(tcLookupOperationsIntf.class);
logger.info("Entering into getLookupEntries method : ");
HashMap<String, String> lookupEntryMap = new HashMap<String, String>();
try {
tcResultSet result = lookupOperationsIntf.getLookupValues(lookupName);
for (int i = 0; i < result.getRowCount(); i++) {
result.goToRow(i);
lookupEntryMap.put(result.getStringValue("Lookup Definition.Lookup Code Information.Code Key"),
result.getStringValue("Lookup Definition.Lookup Code Information.Decode"));
}
} catch (Exception e) {
e.printStackTrace();
}
return lookupEntryMap;
}
// IT Resource
private Map<String, String> getITResourcesProperties(String itResourceName) {
System.out.println("Entering into the getITResourcesProperties method : ");
tcITResourceInstanceOperationsIntf resourceFactory = null;
long vdResourceKey = 0L;
Map<String, String> result = new HashMap<String, String>();
try {
resourceFactory = (tcITResourceInstanceOperationsIntf) Platform.getService(tcITResourceInstanceOperationsIntf.class);
Map<String, String> filter = new HashMap<String, String>();
filter.put("IT Resource.Name", itResourceName);
tcResultSet resources = resourceFactory.findITResourceInstances(filter);
vdResourceKey = resources.getLongValue("IT Resource.Key");
tcResultSet params = resourceFactory.getITResourceInstanceParameters(vdResourceKey);
int j = 0;
for (int objectRowCount = params.getRowCount(); j < objectRowCount; j++) {
params.goToRow(j);
result.put(params.getStringValue("IT Resources Type Parameter.Name"),
params.getStringValue("IT Resource.Parameter.Value"));
}
} catch (tcAPIException e) {
e.printStackTrace();
} catch (tcColumnNotFoundException e) {
e.printStackTrace();
} catch (tcITResourceNotFoundException e) {
e.printStackTrace();
} catch (Exception e) {
e.printStackTrace();
}
return result;
}
// add enetitlements to servieaccount
private String provisionEntitlementsToServiceAccount(String userID, String groupName, LdapContext context) {
System.out.println("Entering into the provisionUserToAD");
try {
String groupDN = adConfigurations.get("GroupDN");
String userDngroup = adConfigurations.get("UserDN");
String groupNameFullName = "CN=" + groupName + "," + groupDN;
String userDN = "CN=" + userID.toLowerCase() + "," + userDngroup;
ModificationItem[] modItem = new ModificationItem[1];
modItem[0] = new ModificationItem(1, new BasicAttribute("member", userDN));
context.modifyAttributes(groupNameFullName, modItem);
System.out.println("Addition completed");
} catch (Exception e) {
System.out.println("Error Message" + e.getMessage());
return "Failed";
}
return "Success";
}
}
