/**
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
*
* Copyright (c) 2014 ForgeRock AS. All rights reserved.
*
* The contents of this file are subject to the terms
* of the Common Development and Distribution License
* (the License). You may not use this file except in
* compliance with the License.
*
* You can obtain a copy of the License at
* http://forgerock.org/license/CDDLv1.0.html
* See the License for the specific language governing
* permission and limitations under the License.
*
* When distributing Covered Code, include this CDDL
* Header Notice in each file and include the License file
* at http://forgerock.org/license/CDDLv1.0.html
* If applicable, add the following below the CDDL Header,
* with the fields enclosed by brackets [] replaced by
* your own identifying information:
* "Portions Copyrighted [year] [name of copyright owner]"
*/

sciptedrest2dj Sample - Scripted REST to OpenDJ

This sample demonstrates how to use Scripted REST to connect to OpenDJs REST API. This sample enables the basic create, read, update, and delete (CRUD) operations for groups and users. This sample requires a fresh install of OpenIDM and OpenDJ.

Setup OpenDJ

1. Extract OpenDJ to a folder called opendj.

2. Run the following command to initalize OpenDJ.

   $ opendj/setup --cli --hostname localhost --ldapPort 1389 --rootUserDN "cn=Directory Manager" \
   --rootUserPassword password --adminConnectorPort 4444 --baseDN dc=com --acceptLicense --addBaseEntry \
   --no-prompt --quiet
   

3. Setup Replication on OpenDJ.

   $ opendj/bin/dsconfig create-replication-server --hostname localhost --port 4444 --bindDN "cn=Directory Manager" \
   --bindPassword password --provider-name "Multimaster Synchronization" --set replication-port:8989 \
   --set replication-server-id:2 --type generic --trustAll --no-prompt
   
   $ opendj/bin/dsconfig create-replication-domain --hostname localhost --port 4444 --bindDN "cn=Directory Manager" \
   --bindPassword password --provider-name "Multimaster Synchronization" --domain-name example_com \
   --set base-dn:dc=example,dc=com --set replication-server:localhost:8989 --set server-id:3 --type generic \
   --trustAll --no-prompt
   

4. Enable OpenDJ HTTP Connection Handler.

   $ opendj/bin/dsconfig set-connection-handler-prop --hostname localhost --port 4444 \
   --bindDN "cn=Directory Manager" --bindPassword password --handler-name "HTTP Connection Handler" \
   --set enabled:true --set listen-port:8090 --no-prompt --trustAll
   

5. Enable OpenDJ HTTP logs.

   $ opendj/bin/dsconfig set-log-publisher-prop --hostname localhost --port 4444 --bindDN "cn=Directory Manager" \
   --bindPassword password --publisher-name "File-Based HTTP Access Logger" --set enabled:true --no-prompt \
   --trustAll
   

6. Load the ldif supplied in the data folder into OpenDJ.

   $ opendj/bin/ldapmodify --bindDN "cn=Directory Manager" --bindPassword password --hostname localhost \
   --port 1389 --filename /path/to/openidm/samples/scriptedrest2dj/data/ldap.ldif
   

7. Copy the http-config.json file located in the data folder to the opendj/config directory.

   $ cp /path/to/openidm/samples/scriptedrest2dj/data/http-config.json opendj/config
   

8. Restart OpenDJ.

   $ opendj/bin/stop-ds --restart
   

OpenIDM Instructions

1. Start OpenIDM with the configuration for sample scriptedrest2dj.

   $ /path/to/openidm/startup.sh -p samples/scriptedrest2dj
   

2. Create a Group.

   $ curl --header "Content-Type: application/json" \
     --header "X-OpenIDM-Username: openidm-admin" \
     --header "X-OpenIDM-Password: openidm-admin" \
     --request POST \
     --data '{
     "_id" : "group1"
     }' \
     http://localhost:8080/openidm/system/scriptedrest/group?_action=create
   
   {
     "_id": "group1",
     "cn": "group1",
     "members": null,
     "lastModified": null,
     "created": "2014-09-24T17:34:27Z",
     "displayName": "group1"
   }
   

3. Create a User.

   $ curl --header "Content-Type: application/json" \
     --header "X-OpenIDM-Username: openidm-admin" \
     --header "X-OpenIDM-Password: openidm-admin" \
     --request POST \
     --data '{
     "givenName" : "User",
     "familyName" : "Smith",
     "emailAddress" : "user@example.com",
     "telephoneNumber" : "444-444-4444",
     "password" : "TestPassw0rd",
     "displayName" : "User.Smith",
     "uid" : "user"
     }' \
     http://localhost:8080/openidm/system/scriptedrest/account?_action=create
   
   {
     "_id": "user",
     "displayName": "User.Smith",
     "uid": "user",
     "groups": null,
     "familyName": "Smith",
     "emailAddress": "user@example.com",
     "givenName": "User",
     "created": "2014-09-24T17:35:46Z",
     "telephoneNumber": "444-444-4444"
   }
   

4. Update user telephone number.

   $ curl --header "Content-Type: application/json" \
     --header "X-OpenIDM-Username: openidm-admin" \
     --header "X-OpenIDM-Password: openidm-admin" \
     --request PUT \
     --data '{
     "givenName" : "User",
     "familyName" : "Smith",
     "emailAddress" : "user@example.com",
     "telephoneNumber" : "555-555-5555",
     "password" : "TestPassw0rd",
     "displayName" : "User.Smith",
     "uid" : "user"
     }' \
     http://localhost:8080/openidm/system/scriptedrest/account/user
   
   {
     "_id": "user",
     "displayName": "User.Smith",
     "uid": "user",
     "groups": null,
     "familyName": "Smith",
     "emailAddress": "user@example.com",
     "givenName": "User",
     "created": "2014-09-24T17:35:46Z",
     "telephoneNumber": "555-555-5555"
   }
   

5. Update group by adding a user.

   $ curl --header "Content-Type: application/json" \
     --header "X-OpenIDM-Username: openidm-admin" \
     --header "X-OpenIDM-Password: openidm-admin" \
     --request PUT \
     --data '{
     "_id" : "group1",
     "members" : [{"_id" : "user"}]
     }' \
     http://localhost:8080/openidm/system/scriptedrest/group/group1
   
   {
     "_id": "group1",
     "cn": "group1",
     "members": [
       {
         "displayName": "User.Smith",
         "_id": "user"
       }
     ],
     "lastModified": "2014-09-24T17:31:42Z",
     "created": "2014-09-24T17:27:37Z",
     "displayName": "group1"
   }
   

6. Read the user data.

   $ curl --header "Content-Type: application/json" \
     --header "X-OpenIDM-Username: openidm-admin" \
     --header "X-OpenIDM-Password: openidm-admin" \
     --request GET \
     http://localhost:8080/openidm/system/scriptedrest/account/user
   
   {
     "_id": "user",
     "displayName": "User.Smith",
     "uid": "user",
     "groups": [
       {
         "_id": "group1"
       }
     ],
     "familyName": "Smith",
     "emailAddress": "user@example.com",
     "givenName": "User",
     "created": "2014-09-24T17:31:04Z",
     "telephoneNumber": "555-555-5555"
   }
   

7. Read the group.

   $ curl --header "Content-Type: application/json" \
     --header "X-OpenIDM-Username: openidm-admin" \
     --header "X-OpenIDM-Password: openidm-admin" \
     --request GET \
     http://localhost:8080/openidm/system/scriptedrest/group/group1
   
   {
     "_id": "group1",
     "cn": "group1",
     "members": [
       {
         "displayName": "User.Smith",
         "_id": "user"
       }
     ],
     "lastModified": "2014-09-24T17:31:42Z",
     "created": "2014-09-24T17:27:37Z",
     "displayName": "group1"
   }
   

8. Delete the user.

   $ curl --header "Content-Type: application/json" \
     --header "X-OpenIDM-Username: openidm-admin" \
     --header "X-OpenIDM-Password: openidm-admin" \
     --request DELETE \
     http://localhost:8080/openidm/system/scriptedrest/account/user
   
   {
     "_id": "user"
   }
   

9. Delete the group.

   $ curl --header "Content-Type: application/json" \
     --header "X-OpenIDM-Username: openidm-admin" \
     --header "X-OpenIDM-Password: openidm-admin" \
     --request DELETE \
     http://localhost:8080/openidm/system/scriptedrest/group/group1
   
   {
     "_id": "group1"
   }
   

Other Available Commands

This sample also supports running reconciliation on users and groups.

$ curl -k -H "Content-type: application/json" -u "openidm-admin:openidm-admin" -X POST \
"https://localhost:8443/openidm/recon?_action=recon&mapping=systemRestLdapUser_managedUser"

{"_id":"a72d6c6f-c019-4598-a199-52d9dcca9dae","state":"ACTIVE"}

$ curl -k -H "Content-type: application/json" -u "openidm-admin:openidm-admin" -X POST \
"https://localhost:8443/openidm/recon?_action=recon&mapping=systemRestLdapGroup_managedGroup"

{"_id":"5d887e40-250a-4da7-af48-d2c9bc6c0b00","state":"ACTIVE"}

This shows the basic CRUD operations on users and groups using ScriptedREST and the OpenDJ rest2ldap API. To read more documentation on the groovy scriptedrest connector and for help with customization please see the Groovy Connector Framework Docs