Changes between Initial Version and Version 1 of UPDT_unit_changes

Timestamp:

11/17/14 15:53:23 (12 years ago)

Author:

lttoth@…

Comment:

--

UPDT_unit_changes

@@ +1 @@
+= Monthly Process: EDIR Unit Changes Following BOR Structure Table Changes =
+    Original author:  Beth Mercer - 20070607    
+
+
+Approximately monthly, IR updates their BOR structure table and the corresponding 
+EDIR_STRUCTURE table, adding/deleting/modifying unit records.  An EDIR stored procedure 
+is subsequently executed to update EDIR unit records with EDIR_STRUCTURE table changes.  
+Following the EDIR update, departments depending on EDIR unit information are informed of 
+the changes and requested to provide feedback.
+
+# on receipt of email stating BOR table updates are complete,
+# update the registry and generate and apply directory LDIF
+
+# either via Appworx:
+
+        EDIR_UNIT_UPDATES
+
+# or manually:
+
+        # execute stored procedure to update registry
+        # ssh to sxldap account on summit
+        cd $HOME/local/ldap/registry
+        sqlplus /
+                @execute_xprocess
+                        -- when prompted, enter the following:
+                        ldap_dept_maint(false,return_status)
+
+                -- the resulting output will be written to /tmp
+                exit
+        
+        # on completion of the registry update,
+        # copy and apply resulting LDIF
+        
+                # ask DBA group to execute the following to 
+                # add world read permission to ldif files in /tmp
+                ~oracle/local/production/PMldap_tmp_chmod.ksh
+        
+                # after the file permissions have been changed,
+                # copy the resulting ldif to sxldap owned 
+                # directory and to iplanet account on eklutna
+                cd $HOME/appworx/
+                ./manage_ldif_files.ksh
+        
+                # after copying the resulting ldif,
+                # tell iplanet on eklutna to apply it
+                ./apply_ldif_files.ksh
+        
+                # have DBA group run this script to 
+                # delete ldif from /tmp/
+                ~oracle/local/production/PMldap_tmp_cleanup.ksh
+
+# after confirming LDIF applied,
+# email summary of changes to sdedirregistry@email.alaska.edu
+
+        # changes are listed in ldap_RPTS_dept_<date>.changes file
+        cd $HOME/local/ldap/extracts/
+        ls -lrt *dept*changes|tail -1   # check date/time stamp
+        awk '{print $1}' $(ls -1rt *dept*changes|tail -1)|sort |uniq -c
+
+# compare EDIR structure to BOR structure and send
+# email to Budget Offices soliciting response to unit changes
+
+        cd $HOME/local/ldap/query
+        sqlplus /
+                @compare_edir_structure_to_bor.sql
+                exit
+
+        # copy and paste screen output to email for budget offices 
+        # with request for feedback
+        Recipients: Joan Harings <anjmh@uaa.alaska.edu>, Phill Harrington <fnplh@uaf.edu>, Lynn Wrightsman <lynn.wrightsman@uaf.edu>, Barbara Hyde <barbara.hyde@uas.alaska.edu>, Barbara Stockwell <barbara.stockwell@alaska.edu>
+        CC: sdedirregistry@email.alaska.edu
+
+        # if the budget office respond with feedback
+        # then 
+                # move EDIR data to new unit records if applicable
+                (TBD - see beth in meantime)
+
+                # flag to keep, or delete, old unit records if applicable
+                (TBD - see beth in meantime)
+        
+        # Note: No EDIR unit record will be dropped from EDIR unless flagged
+        # in the EDIR_STRUCTURE table.  This allows EDIR to reflect units w/o
+        # budget that are **not** retained in the BOR structure table.
+
+# notify sdtsaa of new/obsolete EDIRroles (associated with unit changes)
+# NOTE: run show scripts before running add/delete scripts in next step
+
+        # first generate list of new and obsolete edir unit related roles
+        # send 2 emails to sdtsaa; one with needed one with obsolete
+        @show_needed_dlevel_roles.sql
+        @show_needed_unit_roles.sql
+        @show_obsolete_dlevel_roles.sql
+        @show_obsolete_unit_roles.sql
+
+# update LDAP_ZUAUSR_ADMIN table, adding needed roles and deleting obsolete roles
+# NOTE: run show scripts before running add/delete scripts
+
+        @add_needed_dlevel_roles.sql
+        @add_needed_unit_roles.sql
+        @delete_obsolete_dlevel_roles.sql
+        @delete_obsolete_unit_roles.sql
+
+########################################################[[br]]
+LEGACY CHANGE HISTORY - NOTE: All subsequent changes are recorded in TracWiki[[br]]
+########################################################[[br]]
+20070906 sxelm corrected ldap_dept_maint reference (erroneously ldap_dept_update)
+20070608 sxelm replaced edir-admin-l references with sdedirregistry
+20070607 sxelm added reference to Appworx job that circumvents need for DBA support