How do I add multiple attributes with a single ssoadm command in AM (All versions)?
The purpose of this article is to provide information on setting multiple attributes with a single ssoadm command in AM. This is useful when you want to add multiple attributes for a single sub-command, for example, set-identity-attrs or set-attr-defs.
1 reader recommends this article
Adding multiple attributes
You can add multiple attributes using a single ssoadm command either by using a data file or by specifying multiple attributes against the -a parameter with a space as the separator.
For example, if you want to run the following ssoadm commands to make session related changes:
- AM 7 and later $ ./ssoadm set-attr-defs -s iPlanetAMSessionService -t dynamic -u uid=amAdmin,ou=People,dc=am,dc=forgerock,dc=org -f pwd.txt -a iplanet-am-session-max-session-time=150 $ ./ssoadm set-attr-defs -s iPlanetAMSessionService -t dynamic -u uid=amAdmin,ou=People,dc=am,dc=forgerock,dc=org -f pwd.txt -a iplanet-am-session-max-idle-time=15 $ ./ssoadm set-attr-defs -s iPlanetAMSessionService -t dynamic -u uid=amAdmin,ou=People,dc=am,dc=forgerock,dc=org -f pwd.txt -a iplanet-am-session-max-caching-time=5
- AM 6.x $ ./ssoadm set-attr-defs -s iPlanetAMSessionService -t dynamic -u amadmin -f pwd.txt -a iplanet-am-session-max-session-time=150 $ ./ssoadm set-attr-defs -s iPlanetAMSessionService -t dynamic -u amadmin -f pwd.txt -a iplanet-am-session-max-idle-time=15 $ ./ssoadm set-attr-defs -s iPlanetAMSessionService -t dynamic -u amadmin -f pwd.txt -a iplanet-am-session-max-caching-time=5
You could use one of the following approaches instead of running them separately:
Data file
- Create a data file (called DATA_FILE to match the next command) with the following contents: iplanet-am-session-max-session-time=150 iplanet-am-session-max-idle-time=15 iplanet-am-session-max-caching-time=5
- Run the following command: $ ./ssoadm set-attr-defs -s iPlanetAMSessionService -t dynamic -u [adminID] -f [passwordfile] -D DATA_FILEreplacing [adminID] and [passwordfile] with appropriate values.
Multiple attributes in one command
Run the following command to change all the attributes at the same time:
$ ./ssoadm set-attr-defs -s iPlanetAMSessionService -t dynamic -u [adminID] -f [passwordfile] -a iplanet-am-session-max-session-time=150 iplanet-am-session-max-idle-time=15 iplanet-am-session-max-caching-time=5replacing [adminID] and [passwordfile] with appropriate values.
Note
If you want to change multiple attributes for multiple sub-commands, you will need to use the ssoadm do-batch command or a script. This is detailed in: How do I make batch changes using ssoadm in AM (All versions)?
See Also
How do I make batch changes using ssoadm in AM (All versions)?
FAQ: Installing and using ssoadm in AM
Related Training
N/A
Related Issue Tracker IDs
N/A