How to generate a report of registered users in RSA Authentication Manager 8.x database

[#1]

Article Number

000039696

Applies To

RSA Product Set:  SecurID
RSA Product/Service Type:  Authentication Manager
RSA Version/Condition:  8.x

Issue

This article provides information about how to generate a report of registered users in Authentication Manager database.

Resolution

The report is generated at the command line where the administrator has access to the rsaadmin account password and knows the Operations Console username and password.

1. Logon to the SecurID Appliance either with an SSH session or at the local console with the rsaadmin account.
2. Go to /opt/rsa/am/utils.
3. Retrieve the password for the rsa_dba user using the following command:

/opt/rsa/am/utils/rsautil manage-secrets -a get com.rsa.db.dba.password

4. Enter the Operations Console username and password when prompted. 
5. Make a note of the returned com.rsa.db.dba.password value.
6. Create a text file in /opt/rsa/am/utils with an appropriate name; for example, registered_users.sql.
7. Copy the SQL statement below into the text file and save the change.

SELECT 
      ipd.loginuid,
      ipd.IDENTITY_SRC_KEY,
      iis.name,
      iis.principal_base_dn
FROM
      RSA_REP.IMS_PRINCIPAL_DATA ipd
INNER JOIN
      RSA_REP.IMS_IDENTITY_SOURCE iis
ON
      iis.id = ipd.IDENTITY_SRC_ID;

8. From /opt/rsa/am/utils, use the following command to generate a .csv output file using registered_users.sql.

/opt/rsa/am/pgsql/bin/psql -h localhost -p 7050 -d db -U rsa_dba -A -F , -X -t -f registered_users.sql -o regusers_report.csv

9. When prompted, enter the com.rsa.db.dba.password value obtained in step 3.
10. Open the regusers_report.csv to see a list of all of the registered users in the Authentication Manager 8.x database.