How to create or export a list of unassigned DIGIPASS in IDENTIKEY Authentication Server?

Transcription

1 KB How to create or export a list of unassigned DIGIPASS in IDENTIKEY Authentication Server? Creation date: 01/12/2009 Last Review: 11/12/2012 Revision number: 2 Document type: How To Security status: EXTERNAL Summary Depending on the data store used (AD or ODBC) there are different possibilities in IDENTIKEY Authentication Server to create a list of unassigned DIGIPASS. This article gives an overview and procedure. Details. The different possibilities to generate a list of unassigned DIGIPASS are: 1. Use the IDENTIKEY Authentication Server web administration to make a list of unassigned DIGIPASS. This method can be used when an ODBC database is used as data store. With this method, you can generate a list on the display, but you cannot export it to a file. In the web administration tool, select Find/manage from the DIGIPASS tab: In the screen with selection criteria, use the No radio button for the Assigned? property as shown in the screenshot below. Then press the Search button. Page 1 of 9

2 The result page will show a list of the unassigned DIGIPASS: 2. Use the Saved Query Unassigned Digipass. This method can be used when AD is used as data store. With this method, you can generate a list on the display, but you cannot export it to a file. When the IDENTIKEY Authentication Server Active Directory Users and Computers (ADUC) extensions are installed, a number of saved queries are installed. Open and select the Saved Query Unassigned Digipass in the ADUC as shown in the screenshot below. You can right-click a DIGIPASS from the result pane and open its properties to check its exact location in AD from the Object tab. Page 2 of 9

3 3. Use the reporting in the web administration to generate an XML list of unassigned DIGIPASS. This method can be used with AD and ODBC data store. Select the Define report option from the REPORTS tab: Enter a report name and select List analysis as Type of report. Press the NEXT button: Page 3 of 9

4 Select Grouping Level = Digipass and Data source = Digipass. Then press the NEXT button: Add a query with the values as shown in the screenshot below. Then press the NEXT button. Press the NEXT button in the Query overview screen: Page 4 of 9

5 Set the report permissions as desired and press the NEXT button: Select the radio button use default XML template only and press the NEXT button: Confirm the overview screen with the FINISH button: Page 5 of 9

6 Select the option List from the REPORTS tab and select the report we just created: Press the RUN button from the available actions: Page 6 of 9

7 Select the report options as shown in the screenshot below: Do not add any runtime queries, just press the NEXT button: (the query has been configured in the report definition) View the report by selecting the Open link: The report is also available from the directory C:\Program Files\VASCO\Identikey 3.1\reports Page 7 of 9

8 4. Use a TCL script to generate a list of unassigned DIGIPASS on the screen and in a text file. This method can be used with AD and ODBC data store. The TCL script to be used is shown below: (put the script in a textfile with name Create List Unassigned DIGIPASS.TCL ) puts "\n\ntcl script to create a list of all Unassigned DIGIPASS Devices. For each DP, return:\n\ \tserial number\n\ \tdomain of the DIGIPASS\n\ \tdigipass Type\n" #open output file set out [open "test.txt" w] Page 8 of 9

9 # get a list of all DPs that are Unassigned in a variable dplist set dplist [digipass query {status unassigned} {serial_no domain dp_type}] puts "Number of DP found: [llength $dplist]" puts "\n\n" # for each unassigned DIGIPASS that has been found, output the data (serial_no, domain and DP_type) to display and file. foreach dp $dplist { # output to the console puts "[lindex $dp 1], [lindex $dp 3], [lindex $dp 5]" # output to the file puts $out "[lindex $dp 1], [lindex $dp 3], [lindex $dp 5]" } #close output file close $out Execute the TCL script with the command dpadmincmd as shown below for an ODBC data store: Execute the TCL script with the command dpadmincmd as shown below for an AD data store: Page 9 of 9