Has anyone scripted addition of a list of users to WindchillDS (local LDAP), other than through the INTRALINK Data Migrator tools?
We use Active Directory for all active users, but kept WindchillDS entries for those who were no longer in Active Directory (at migration). Since migrating we've left users "Disconnected" because we haven't decided exactly how we want to proceed.
However, upgrade to Windchill 10 is forcing our hand on clearing the Disconnected Principals now (probably a good thing). We will be deleting those who were "read only" and didn't create any content and adding the others to WindchillDS. We could do this manually but there are about 200 of them now so we'd rather catch up with a script, and perhaps even automate this as we go forward.
I see that there is information in OpenDS documentation that could lead to a script, and I saw a jndi script that is sort of close, but we're not getting anything from PTC on this yet.
Why not just create a dummy user with full name of "Disabled User" to which no one knows the password and update the entries in the database for all the disconnected users to point at this new user's dn. You then have a single valid entry outside of the database to worry about keeping up-to-date (and can use procedure in the future for other disconnected users). If you need something more auditable, this can still work with a little more elbow grease.
On what I think you are asking for: I would look into using an LDIF file. LDIF is based on the directory schema and you can modify, add, and delete in addition to create.