Reassociating Groups
Pre-requisites:
To reassociate a group through the CentraSite Command Line (.cmd) Interface, you must have the CentraSite Administrator role.
Before you run the tool, we strongly recommend that you create a database backup.
In addition to the database backup, make sure the following conditions are satisfied:
There is a unique registry object for the old external group.
The old external group can be uniquely identified in the security configuration.
There is no registry object for the new external group.
There is no security configuration for the new external group.
The domain of the new external group exists in the security configuration.
A GUI configuration does not exist for the new external group.
You can change the association of a CentraSite group from one external group to another. This can be necessary, for example, if the permission assignments for certain CentraSite assets moves from one group to another group in the same authentication domain. By reassociating the group, you can keep the name of the CentraSite group unchanged. Another possible use would be to handle group IDs when the default domain name changes; for example, when switching from operating system authentication to LDAP authentication.
CentraSite provides a Java tool named ReassociateGroups.jar for this purpose.
The tool automatically grants the new external group the same permissions that were granted for the old external group.
Run the Java tool ReassociateGroups.jar. Given the group ID:
C:\SoftwareAG\CentraSite\utilities>CentraSiteToolbox.cmd ReassociateGroups.jar <CentraSite URL> <admin user id> <password> groups <old group id> <new group id>
Given the group mapping details:
C:\SoftwareAG\CentraSite\utilities>CentraSiteToolbox.cmd ReassociateGroups.jar <CentraSite URL> <admin user id> <password> file <group mapping file path>
The input parameters are:
Parameter | Description |
CentraSite URL | The URL of the CentraSite registry. For example, http://localhost:53307/CentraSite/CentraSite. |
admin user id | The user ID of a registered CentraSite user who has the CentraSite Administrator role. For example, Administrator. |
password | The password for the CentraSite user identified by the parameter admin user id. |
old group id | The domain ID of the old external group. |
new group id | The domain ID of the new external group. |
group mapping file path | The absolute or relative path to the group mapping file. If relative, the path should be relative to the location from where the command is executed. The group mapping file contains a map of key-value pairs, and defines the group objects as simply lines of comma separated old group and new group IDs (for example, "OLDDOMAIN\oldGroup, NEWDOMAIN\newGroup "). Note:
The same group ID must not be specified more than once in the mapping file. |
The reassociation may take some time. The tool’s progress is reported to standard output.
Examples (all in one line):
C:\SoftwareAG\CentraSite\utilities>CentraSiteToolbox.cmd ReassociateGroups.jar http://localhost:53307/CentraSite/CentraSite DOMAIN\admin pAsSw0rD groups OLDDOMAIN\oldGroup NEWDOMAIN\newGroup
C:\SoftwareAG\CentraSite\utilities>CentraSiteToolbox.cmd ReassociateGroups.jar http://localhost:53307/CentraSite/CentraSite DOMAIN\admin pAsSw0rD file groups.txt