{"id":36,"date":"2007-06-28T07:04:23","date_gmt":"2007-06-28T07:04:23","guid":{"rendered":"https:\/\/www.wapshere.com\/missmiis\/?p=36"},"modified":"2023-01-16T05:55:41","modified_gmt":"2023-01-16T05:55:41","slug":"miis-db-tricks-listing-disconnectors","status":"publish","type":"post","link":"https:\/\/www.wapshere.com\/missmiis\/miis-db-tricks-listing-disconnectors","title":{"rendered":"MIIS DB Tricks: Listing Disconnectors"},"content":{"rendered":"<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">A frustrating deficiency of the Identity Manager application is the inability to copy the list of disconnectors from the Joiner page. I really don&#8217;t understand why this functionality wasn&#8217;t included &#8211; was it just an oversight? Ploughing through the disconnectors is an inevitable part of taking over an existing directory, and to do that you&#8217;re going to need the list.<\/span><\/span><\/p>\n<p><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">There is a way to get the list however &#8211; and it involves querying the MicrosoftIdentityIntegrationServer database.<\/span><\/span><\/p>\n<p><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">First you need to find the identifying number for the MA you&#8217;re interested in:<\/span><\/span><\/p>\n<blockquote>\n<p class=\"Code\" style=\"margin: 0cm 0cm 0pt;\"><span lang=\"EN-GB\"><span style=\"font-size: small;\"><span style=\"font-family: Microsoft Sans Serif;\">select ma_id, ma_name from dbo.mms_management_agent<\/span><\/span><\/span><\/p>\n<\/blockquote>\n<p><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">Now insert the ma_id into the following query to find all disconnected objects (the curly brackets must be included):<\/span><\/span><\/p>\n<blockquote>\n<p class=\"Code\" style=\"margin: 0cm 0cm 0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Microsoft Sans Serif; font-size: small;\">select rdn from dbo.mms_connectorspace cs<\/span><\/span><\/p>\n<p class=\"Code\" style=\"margin: 0cm 0cm 0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Microsoft Sans Serif; font-size: small;\">left outer join dbo.mms_csmv_link mv<\/span><\/span><\/p>\n<p class=\"Code\" style=\"margin: 0cm 0cm 0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Microsoft Sans Serif; font-size: small;\">on cs.object_id = mv.cs_object_id<\/span><\/span><\/p>\n<p class=\"Code\" style=\"margin: 0cm 0cm 0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Microsoft Sans Serif; font-size: small;\">where cs.ma_id = &#8216;{<em>ma_id<\/em>}&#8217;<\/span><\/span><\/p>\n<p class=\"Code\" style=\"margin: 0cm 0cm 0pt;\"><span lang=\"EN-GB\"><span style=\"font-family: Microsoft Sans Serif; font-size: small;\">and mv.cs_object_id is null<\/span><\/span><\/p>\n<\/blockquote>\n<p><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">There&#8217;s an extra point to mention about using this method against an LDAP-style directory. The SQL query will return a CN list, rather than the full DN. If you have same-named objects in different OUs it is not immediately obvious which one is the disconnector.<\/span><\/span><\/p>\n<p><span lang=\"EN-GB\"><span style=\"font-family: Times New Roman;\">There is probably a way to do the SQL query so it includes the parent OUs, but I&#8217;ve as yet been unable to work it out. Typically there is some uniquely identifying attribute, such as a staff number, that I have already pushed out to the connected objects in the directory. By matching my list of CNs against an LDAP search I can figure out which are the disconnectors.<\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A frustrating deficiency of the Identity Manager application is the inability to copy the list of disconnectors from the Joiner page. I really don&#8217;t understand why this functionality wasn&#8217;t included &#8211; was it just an oversight? Ploughing through the disconnectors is an inevitable part of taking over an existing directory, and to do that you&#8217;re&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":[]},"categories":[34,28,5],"tags":[],"class_list":["post-36","post","type-post","status-publish","format-standard","hentry","category-ilm2007","category-miis2003","category-sql"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pkp1o-A","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts\/36","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/comments?post=36"}],"version-history":[{"count":3,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts\/36\/revisions"}],"predecessor-version":[{"id":3334,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts\/36\/revisions\/3334"}],"wp:attachment":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/media?parent=36"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/categories?post=36"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/tags?post=36"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}