...
This is a manual process. The attached script /usr/local/sysnet/sbin/nace_export.pl script relies on a slapcat dump of LDAP and then parses the results for a bash on the server idmprod.its.carleton.edu can be run to produce import files for undergraduates, facstaff, and alumni import/updates. . We run the script and give the files to Brad Kmoch, who has admin rights in NACElink to perform this import.
...
Provisioning
A series of scripts on Atlantis IDMProd (/homeusr/local/sysnet/jams/update_jams.sh run nightly as root by /etc/crontaband /usr/local/sysnet/jams/transferfiles.sh, run -manually-) updates the following
- students accounts
- student photos
- a list of campus buildings
These scripts take three inputs:
- JAMS-students.txt, from Avanti/Colleague data; contains student information, including course enrollment and address information
- reason_buildings.txt, from Chicago; contains information about buildings and rooms, mostly to associate courses with teaching location
- a slapcat dump in LDIF format of our LDAP tree, used to capture student photographs for the Advocate system
And produce three outputs:
- buildings.tab: a tab-delimited list of building/room locations
- pictures.zip: a zipped file containing raw .jpg photos, named by advance ID, for all Carleton students in the feed
- students.tab: a tab-delimited file of student information, with a prepended header naming each field
Which are then SCPd (as the user 'jams' via pubkey auth, see idmprod:/home/jams/.ssh/) to the following address at Symplicity via /usr/local/sysnet/jams/transferfiles.sh:
- carleton-jams.symplicity.com
Staff accounts must be created manually. JAMS uses advanceids passed by Shibboleth as the primary key, so when creating an account use that in the username field. 
...