How To Remove a Profile To An Acid? And What Happens When There Is No Profile Attached To That Acid?

Document ID : KB000010685
Last Modified Date : 14/02/2018
Show Technical Document Details
Introduction:

 

 

- When trying to remove a PROFILE from an acid, if that acid is not connected to thePROFILE, we do not see any error for this command in the result of. 

Environment:
TSS r16.0, Z/OS 2.2, CA LDAP 15.1
Instructions:

 

- The correct syntax to REMOVE a PROFILE with CA Ldap for z/OS is:

 

ldapmodify -c -h YOURHOST -p nnnn -D cn=admin01 -w xxxxxxxx -x -f admin01_rem_profile.ldif 

 

Ldif file is below:

dn:tssproflist=profldap,tssacidgrp=proflist,tssacid=myacid,tssadmingrp=acids,host=yourhost,o=ca,c=us 
changetype: delete

 

If the PROFILE is not connected to the acid, you will receive the following messages:

 

deleting entry "tssproflist=profldap,tssacidgrp=proflist,tssacid=myacid,tssadmin 
grp=acids,host=yourhost,o=ca,c=us" 
ldap_delete: Other (e.g., implementation specific) error (80) 
additional info: LDP2507E TSS error issuing TSS REMOVE(myacid) PROFILE(profldap)(TSS0346E PROFILE/GROUP NOT FOUND) 

 

Additional Information:

 

- If you want to have more details about PROFILE object in CA LDAP for z/OS go to link:

 


https://docops.ca.com/ca-system-z-security-communication-servers-dsi-ldap-pam/15-1/en/configuring/configuring-ca-ldap-server/configure-the-catss_utf-backend/user-friendly-name-override-file-ca-top-secret-to-ca-ldap-server/objectclass-tssacid-tssprofile-tssdept-tssdiv-tsszone-tssgroup