Administering ID mapping

Checking files and fixing file inconsistencies

Periodically you should run a check on the idata files and correct any problems that might exist. idadmin provides options that allow you to check a file, correct entries with syntax errors, sort entries that are out of order, and delete entries for unknown local logins.

NOTE: Deleting an entry does not necessarily invalidate the remote user login. The remote login might be matched by a regular expression in another entry further down in the file. To ensure that the remote login is invalidated, change the local name to %i.

If you use the ID mapping commands to update the mapping databases, inconsistencies will occur only if the ID mapping files get out of sync with the password file.

To check the consistency of the file, enter:

idadmin -S scheme -c

where scheme is the name of the ID mapping scheme.

A report generated by this is shown below:

   Error on line number 2: Mandatory field missing
   Error on line number 4: Duplicate entry
   Error on line number 5: Line out of order
   Error on line number 7: Mandatory field missing
   Error on line number 8: Line out of order
   Error on line number 9: Line out of order
   Error on line number 10: Bad transparent mapping
   Error on line number 15: Line out of order
   Error on line number 18: Unknown mapped user
   9 error(s) was (were) found in system map

To correct problems (such as the ones shown above) in the file, use the -f option, as follows:

idadmin -S scheme -f

When -f is specified, the command gives you the option to delete, skip, or change invalid entries. It also sorts entries in the file that are out of order. Entering the idadmin command with the -c option again will allow you to verify that all changes were made correctly.