Display Custom Directory Objects

[Guest]

Our AD Schema has recently been extended with new "HP Objects" and "HP Roles" to support AD authentication into HP Remote Insight Boards. The new object types display in AD Users & Computers without customization - was hoping to find out if anyone else has configured Hyena to display these new HP object types.

[cmccullough]

Re: Display Custom Directory Objects

You can add custom attributes under File->Manage Object View->AD Custom. Once you add them there you will get a new tab in user properties called Custom.

[Guest]

Re: Display Custom Directory Objects

man...you guys are fast.

I was trying to post this in such a way that others wouldn't be forced into a step-by-step description of what I need to do. I'm hoping someone has already done this so I could piggy-back on the proper settings.

I have been to this dialog box - the first question that came to mind is how do I figure that out what type of objects these new HP attributes are? I obviously need that info before I can select the proper Directory Object Type, the answer isn't obvious to me.

[kstanush]

Re: Display Custom Directory Objects

There are a couple of ways to get at these extended attributes:

- If you select Account Functions->Shell Properties, you will see the same dialog that you see in ADU&C. I assume that HP has added a new property page for you to see and manage these attributes.

- If you right click on a user and select Listing Views->User (All) you will see all of the attributes that exist for a user. This will help get the names of the new schema attributes. As for the data type, that you will need to get from HP or a tool like ADsVw.exe or ADSIedit, as Hyena currently does not display the attribute data type.

[Guest]

Re: Display Custom Directory Objects

OK, I've access to the attributes with ADSIEDIT, but i'm finding it difficult to match the Hyena dialog boxes with the schema attributes. I don't see much correlation between the two...and I don't see any mention of the Data Type.

[kstanush]

Re: Display Custom Directory Objects

The only items you need are the name of the directory attribute and the data type. Most attribute are single-valued.

You get the data type from the Syntax field in AdsiEdit. A value of 'Directory string' will generally mean a IGNORE_CASE datatype.

It would help a lot if HP provided a detailed list of the changes that they made to your AD schema, as this should be very well documented.

I found this page on Microsoft's site that can be used to reconcile the 'friendly' name of the datatype to the true internal AD data type:
http://msdn.microsoft.com/library/defaul...ry_and_ldap.asp

[Guest]

Re: Display Custom Directory Objects

I found a doc titled "HP Directory Services Schema Information Booklet". In that doc, it documents three "core classes" and six "core attributes". In terms of the Hyena AD Custom dialog box, does this mean I need to add each of the six "core attributes"?

What also continues to confuse me is that Hyena requires me to select a type Active Directory Group, Workstation, or Active Directory User for each of these atributes. Yet I don't see any reference to any of these options in the attribute definitions. I see the Class SuperClass - one is user, one is group and one is "top", but Hyena doesn't mention "top".

In terms of Data Type, I have good news and bad news. The good news is that one of the new HP "core attributes" is a ADSTYPE_BOOLEAN. The bad news is that the other five are either "ADSTYPE_OCTET_STRING" or "ADSTYPE_DN_STRING", which Hyena apparently doesn't support???

[kstanush]

Re: Display Custom Directory Objects

You only need to add the attributes that you want to add and to be able to view/edit in Hyena.

You select the type of object that you want the custom attributes to be displayed for. If these new HP attributes apply to the user object, then add them under the Active Directory User object in Hyena.

Hyena no longer uses the Group type for custom attribute displays, as we now rely on Microsoft own dialog for managing group properties, but both User and Computer are still supported.

We don't support the OCTET_STRING type in the custom dialog as you generally can't view or modify the contents of these binary string (they don't make any sense).

While we don't directly support the DN type, you should be able to view the contents of any attribute with this type by using the IGNORE_STRING type. Try it and see. If you need to modify the DN attribute type, test it on a test account first.

And, like I said, you can always use the Account Functions->Shell Properties dialog to view whatever shell extension pages that HP has designed for these AD objects.

[Guest]

Re: Display Custom Directory Objects

OK, I think I see now where I am getting confused now. I don't think these new HP schema objects are users or groups - they are entirely new AD objects. In AD Users and Computers, the object representing the RIB card is type "HP Target". There are also new objects of type "HP Role" which allow you to delegate security for a RIB card in a modular fashion.

So somehow I need to get Hyena to display AD objects of an entirely new type "HP Target" and "HP Role" - which are neither users, groups or workstations. If I understand the purpose of the AD Custom tab in Hyena, nothing I add will show up because these new HP schema objects are not simply new user or group attributes - they are entirely new schema objects.

[kstanush]

Re: Display Custom Directory Objects

Hyena v6.2 won't let you see these objects, as it will only show certain types of more 'standard' objects.

However, Hyena v6.3, now available as a beta, may allow you to see these objects and manage them.

I'll have the instructions on how to get the beta sent to you seperately.

[Guest]

Re: Display Custom Directory Objects

Great, thanks for your responsiveness. Hyena is a great tool!

[Guest]

Re: Display Custom Directory Objects

I am using Hyena 6.2 I cannot get the Custom tab to display under the User Properties. How do I get this tab to display.

My AD_CUSTOM.DAT file looks like this (all on one line in the file):

102 2 1 legacyExchangeDN legacyExchangeDN 200

Thank you

[cmccullough]

Re: Display Custom Directory Objects

Verify that you are using Hyena's user dialogs. To do so, hold down the Alt key and double click on a user. If you see the Custom tab there, you can make this your default by going to Tools->Settings->Active Directory and unchecking the box to Show shell property pages by default for user objects.

[Guest]

Re: Display Custom Directory Objects

That worked! Thank you!

Have a great day! I love this tool!