Look up a User ID and/or associated Logon Aliases in Authentication Manager 8.x (at the command line)
2 months ago
Article Number
000068080
Applies To
RSA Product Set:  SecurID
RSA Product/Service Type:  RSA Authentication Manager
RSA Version/Condition:  8.6 or later
Platform: Linux
Issue
An administrator has a requirement to lookup user data information in the Authentication Manager database, perhaps where a duplicate user ID is being reported in the Security Console.
Resolution
This knowledge article provides a Linux shell script which can be executed on a primary instance in an Authentication Manager deployment to search user data in the Authentication Manager database to look up User IDs and Logon Aliases. The Linux shell script has a option to enter a token serial number to lookup user information, especially where the assigned user to a token is displayed as <unknown> in the Security Console.

An example of the menu provided by the Linux shell script: 
RSA Customer Support (Asia Pacific) - Tue Jan 9 10:36:19 AEDT 2024

Look up a User ID and associated Logon Aliases in Authentication Manager (AM)

AM hostname : <hostname>

AM version  : 8.n.n.n.n

1) Lookup a User ID
2) Token Serial Number to Lookup a User ID
3) Duplicate User ID Check
4) Generate a User Report
0) Exit

Please select an option

When the administrator exits the program a log file name is provided. For example:

- log filename : /tmp/userid_logfile_202401091036.log

Please note the Linux shell script must be run with root privileges and requires the Operations Console username and password to read the data stored in the Authentication Manager database.
 

Installation

  1.  Download and copy the attached 'lookupuserid.sh' shell script into the /tmp folder on the primary instance in the Authentication deployment.  Use the procedure at URL https://community.rsa.com/s/article/Enable-Secure-Shell-on-the-Appliance-bf9a6052 to enable secure shell on the Appliance, if needed.  Where secure shell has been enabled, a secure FTP client, such as WinSCP, can be used to copy the shell script into the /tmp folder.
  2. Change the permissions of the lookupuserid.sh so it can be run at the command line: 
chmod 755 /tmp/lookupuserid.sh
Usage
  1. Logon to the Authentication Manger instance with the rsaadmin account, either in an secure shell session or at the local console.
  2. Elevate the privileges of the rsaadmin account using the command:
sudo su -
  1. Navigate to the /tmp folder using the command:
cd /tmp
  1. Run the shell script program using the command:
./lookupuserid.sh
Attachments
If the attachment does not open when clicked, please refresh the page and try again. You must be logged into view the file(s).