nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Q about tokens in iwidmap (find if/where used?)

System

I'm having fun with iwidmap (again)...

it seems like some of the users/groups that have tokens, aren't used in the system anymore...as if they were added in originally, then later changed out, but the token for them wasn't removed...are tokens supposed to be removed when all references to them are removed?

is there a CLT or other method to get a list of what a specific iwidmap token is associated with? if we're positive that a user/group is no longer used anywhere within TS, what happens if we just delete the token entry in the iwidmap output file before reimporting it?

feel free to reply with an RTFM if you have a CLT name for me to read up on ;-)

thanks,
-Rori

Find more posts tagged with

Comments

JonathonG

<sarcasm on/>From the plethora of information on SID mapping and iwidmap contained in the 6.1 manuals...<sarcasm off/>
I would guess that deleting the tokens from the iwidmap output file would have no effect on their presence in the actual map used. Reading between the lines, it appears that iwidmap is only for changing the actual mapping, not for managing the tokens. So, a non-present token simply would not be updated. I base this on the fact that iwidmap has a single-token mode. I'm assuming that the file approach is simply a bath-mode version of the single-token mode.

Of course, if I'm wrong, maybe one of the authors for the Fine Manuals can chip in and correct me

Jonathon
Interwoven Developer
Allstate, Inc.

Migrateduser

Hey Jonathon!

<sarcasm>FYI there's a plethora of KB articles discussing SID mapping and iwidmap which are just as useful as the 6.1 manuals</sarcasm>

that would be my guess, too, the more I thought about it...but there actually are gaps in the token sequence numbers, so it seems like there's _some_ internal mechanism to delete them...I can apprecaite that they don't want to have it as a CLT to create a situation where it could be used incorrectly and blow up a backing store (gee, take the fun out of it! ;-) ), but if there was a way to at least figure out where the tokens were being used/referenced so we could force the delete through removal of all their references, that would be great...

guess it's "feature request" time? any interwoven engineers (or Fine Manual authors) reading this have any words of wisdom?

thanks,
-Rori

Adam Stoller

It's possible that something like iwrmuser.ipl might actually delete the token associated with a user - however, if you just have a token without a valid user it probably won't work. You could try remapping the token to a user you can remove and see if iwrmuser.ipl removes the token too...

--fish
Senior Consultant, Quotient Inc.
http://www.quotient-inc.com

Migrateduser

just following up for people's future reference purposes...

In reply to:

I would guess that deleting the tokens from the iwidmap output file would have no effect on their presence in the actual map used. Reading between the lines, it appears that iwidmap is only for changing the actual mapping, not for managing the tokens. So, a non-present token simply would not be updated.

and as it turns out, a non-present token is removed, not ignored!

if you do the iwidmap -u -x (filename) (storename) to get the full XML file of all tokens, and then DELETE a node out of this file before doing the iwidmap -u -a -i (filename) (storename), that token is completely removed, such that if you do the iwidmap -u -x again, it won't be there at all...

I'm not recommending anyone do this until there has been clarification of whether this is a bad thing to do or not (it was purely accidental on my part LOL)...

In reply to:

Of course, if I'm wrong, maybe one of the authors for the Fine Manuals can chip in and correct me

hmmm..."interesting" that no one from Interwoven has piped in on this thread....I'd still really like to see a CLT or some such to tell me what a token is connected to, but I guess the only way to get it (or any official info about how the tokens work) would be to file an official feature request, eh?

cheers,
-Rori

JonathonG

In reply to:

if you do the iwidmap -u -x (filename) (storename) to get the full XML file of all tokens, and then DELETE a node out of this file before doing the iwidmap -u -a -i (filename) (storename), that token is completely removed, such that if you do the iwidmap -u -x again, it won't be there at all...

Yikes! Hopefully, this is only true if that token is no longer being used. Otherwise, I would think a simple fat-finger edit of the idmap file could cause major issues. What would TeamSite do if it found a file with a token that no longer existed? Pretty scary. Guess the response should be "be vewy vewy caweful editing idmap files"

In reply to:

hmmm..."interesting" that no one from Interwoven has piped in on this thread....I'd still really like to see a CLT or some such to tell me what a token is connected to, but I guess the only way to get it (or any official info about how the tokens work) would be to file an official feature request, eh?

I also find it interesting. Maybe my "The sky is falling" comment above will prompt a response.

Jonathon
Interwoven Developer
Allstate, Inc.

Screen shot 2010-03-02 at 12.51.08 PM.jpg

Tigris_active_projects_by_download.rptdesign

Migrateduser

Hi,
iwidmap does not do any token management. If you are sure that a particular token is no longer used, then you could do an iwidmap -u -x and get all the entire map into an xml file, delete the non used tokens and then do an iwidmap -u -i -a.

Now if there is some asset within teamsite that still has this token in either its acl list or as owner or as primary group, then that entry will be replaced by the default user/group.

Shashi