Skip to main content

psupdate

The psupdate program initiates and controls the auto discovery process. It is responsible for calling a series of programs and PSLang scripts, which in turn, control execution of each auto discovery task.

These tasks include:

  • Refreshing proxy servers

  • Listing information from managed systems

  • Evaluate the import rules on discovered systems and accounts and assign them to managed system policies

  • Monitoring list file size

  • Configuring listed computer objects as Bravura Privilege resources

  • Updating the Bravura Security Fabric database

  • Detecting out-of-band changes

  • Cleaning up the database

  • Checking inventory levels

  • Loading user class cache

  • Submitting automatic assignment requests

  • Synchronize server files and registry keys

  • Notifying the Bravura Security Fabric administrator of errors or warnings

  • Creating the default scheduled task to run psupdate

You can also run psupdate to update a single user.

Warning

Never run psupdate on more than one replicated Bravura Security Fabric server at the same time

Note

In a replication environment, the sending node creates additional queue files in the <instance>/db/replication directory. These are used to store the data to be sent to all replication nodes. Once this data has been replicated to the nodes, these files are removed.

Usage

psupdate.exe 
  [-account <accountID>] -alltasks][-checkinv] [-enforce_list <enforcement-list>] 
  [-enforce_submit <enforcement-list>] [-forcerun][-import][-importlws][-list] 
  [-list_reset_threshold] [-loaddb][-no-plugins] [-profile <profileID>]  
  [-resattr <attrID>]  [-resattrvalue <attrVal>]  [-schedule] [-status] 
  [-target <targetID>] [-targetdiscovered] [-targetmanual] [-updproxy]  [-v|--version]

Argument

Description

-updproxy

Refresh proxy servers.

-list

Only list login IDs and supported information from specified target systems. At least one target must be specified.

-list_reset_threshold

Resets the recorded object count before listing. This disables listthresholdmaxrelativechange for that specific list.

-loaddb

Only load data from specified target systems based on the existing list files to the database. At least one target must be specified.

-checkinv

Check inventory levels.

- alltasks

Complete all tasks that are done during a full update even though specific target systems are being listed and/or loaded.

-import

Evaluate all discovered objects from target systems against push mode import rules where they apply. Applies to the discovered computers from the target, and the subsequent discovered accounts from discovered systems that get managed.

-importlws

Evaluate all discovered objects from target systems against local service mode import rules where they apply. Applies to the local service mode discovered computers, and the subsequent discovered accounts from discovered systems that get managed.

-no-plugins

Run psupdate without executing plugin scripts (*_pre.cmd, *_post.cmd).

-enforce_list <enforcement-list>

Run the rbacenforce program to list role enforcement violations.

-enforce_submit <enforcement-submit>

Run the rbacenforce program to submit requests role enforcement violations.

-profile <profile ID>

Run psupdate for a single user defined by a Bravura Security Fabric profile ID. You can use this with the -target option zero or more times to specify the targets on which psupdate will update the accounts. When used without the -target option, psupdate will update the accounts on all target systems.

-account <profile ID>

Run psupdate for a single user defined by an account ID on a single specified target system. You must use the -target option to specify the target system.

-target <target ID>

Specify a target system on which psupdate will list a single user. This option must be used with the -profile, -account, -list or -loaddb option.

-targetdiscovered

Specify all discovered target systems.

-targetmanual

Specify all target systems that are manually defined.

-forcerun

Force psupdate to have it continue even if it looks like psupdate is already running or scheduled to run on some other node.

-resattr

Select target systems based on a specified resource attribute ID. This option must be used with the -resattrvalue and -target option.

-resattrvalue

Select target systems that match a resource attribute value. This option must be used with the -resattr and -target option.

-schedule

Creates the default scheduled task to run psupdate if it does not already exist. No other tasks are run.

-status

Returns the current status of the auto discovery process:

  • No configuration changes can be made until it is completed %RUNNINGACTIONS%

  • Running connector for target [%TARGETID%] (elapsed time: %ELAPSEDTIME%)

  • Listing files on proxy [%PROXYSERVER%] (elapsed time: %ELAPSEDTIME%)

  • Loading staging table [%STAGETABLE%] (elapsed time: %ELAPSEDTIME%)

  • Running plug-in [%PLUGIN%] (elapsed time: %ELAPSEDTIME%)

  • Running stored procedure [%STOREDPROC%] (elapsed time: %ELAPSEDTIME%)

  • Replicating file [%REPLFILE%] to proxy [%PROXYSERVER%] (elapsed time: %ELAPSEDTIME%)

  • Updating database (%ACTION%)

  • Listing target (%ACTION%)

  • Updating proxy (%ACTION%)

-v — --version

Display version information.

Examples

  1. To run auto discovery, as it would be run during the scheduled psupdate job, type:

    psupdate.exe

  2. To determine the current status of the auto discovery process, type:

    psupdate.exe -status

  3. To list information from all manually added target systems, type:

    psupdate.exe -targetmanual -list

  4. To list information from the target system ADDOM, type:

    psupdate.exe -target ADDOM -list

  5. To list information without running plugin scripts, type:

    psupdate.exe -targetmanual -targetdiscovered -list -no-plugins

  6. To list, load, and evaluate information from all discovered target systems, type:

    psupdate.exe -targetdiscovered -list -loaddb -import

  7. To update accounts for a single profile on all target systems, type:

    psupdate.exe -profile <profile ID>

  8. To only list from specified target systems that have "New York" as a value for resource attribute "Location".

    psupdate.exe -list -resattr Location -resattrvalue "New York" -target TARGET1 -target TARGET2
In this section: