...
To check e.g. if the user whose family name is 'Sgaravatto' is compliant with all these the 3 rules, you can execute this ldapsearch query:
...
| Code Block | ||
|---|---|---|
| ||
l: pd givenName: Massimo sn: Sgaravatto cn: Massimo Sgaravatto telephoneNumber: +390499677360 mail: Massimo.Sgaravatto@pd.infn.it |
If you want to check only the first a result is not returned, check if the first 2 requirement (the "LoA2: stuff ), the and if the user has accepted the INFN rules on IT resource usage). The query will be:
| Code Block | ||
|---|---|---|
| ||
$ ldapsearch -x -LLL -Z -h ds2.infn.it -b ou=People,dc=infn,dc=it "(&(sn=sgaravatto)(eduPersonAssurance=urn:mace:infn.it:loa2))" |
...
( |
...
| Code Block | ||
|---|---|---|
| ||
$ ldapsearch -x -LLL -Z -h ds2.infn.it -b ou=People,dc=infn,dc=it "(&(sn=sgaravatto)(schacUserStatus=urn:schac:userStatus:it:infn.it:disciplinareict:approvato+on=*))" |
If you want to check only the third requirement (the one related with the IT security course, the query will be:
...
| language | bash |
|---|
...
a result is returned, this means that the user didn't follow the course. In this case the request can be accepted, but please notify the user via e-mail that he/she must follow the course within 30 days.
Pre-check [7]
Select the relevant request and click on Action → Pre check.
...