Skip to content

/AWS1/IF_DSR=>CREATETRUST()

About CreateTrust

Directory Service for Microsoft Active Directory allows you to configure trust relationships. For example, you can establish a trust between your Managed Microsoft AD directory, and your existing self-managed Microsoft Active Directory. This would allow you to provide users and groups access to resources in either domain, with a single set of credentials.

This action initiates the creation of the Amazon Web Services side of a trust relationship between an Managed Microsoft AD directory and an external domain. You can create either a forest trust or an external trust.

Method Signature

METHODS /AWS1/IF_DSR~CREATETRUST
  IMPORTING
    !IV_DIRECTORYID TYPE /AWS1/DSRDIRECTORYID OPTIONAL
    !IV_REMOTEDOMAINNAME TYPE /AWS1/DSRREMOTEDOMAINNAME OPTIONAL
    !IV_TRUSTPASSWORD TYPE /AWS1/DSRTRUSTPASSWORD OPTIONAL
    !IV_TRUSTDIRECTION TYPE /AWS1/DSRTRUSTDIRECTION OPTIONAL
    !IV_TRUSTTYPE TYPE /AWS1/DSRTRUSTTYPE OPTIONAL
    !IT_CONDALFORWARDERIPADDRS TYPE /AWS1/CL_DSRDNSIPADDRS_W=>TT_DNSIPADDRS OPTIONAL
    !IT_CONDALFORWARDERIPV6ADDRS TYPE /AWS1/CL_DSRDNSIPV6ADDRS_W=>TT_DNSIPV6ADDRS OPTIONAL
    !IV_SELECTIVEAUTH TYPE /AWS1/DSRSELECTIVEAUTH OPTIONAL
  RETURNING
    VALUE(OO_OUTPUT) TYPE REF TO /aws1/cl_dsrcreatetrustresult
  RAISING
    /AWS1/CX_DSRCLIENTEXCEPTION
    /AWS1/CX_DSRENTITYALRDYEXEX
    /AWS1/CX_DSRENTDOESNOTEXISTEX
    /AWS1/CX_DSRINVALIDPARAMETEREX
    /AWS1/CX_DSRSERVICEEXCEPTION
    /AWS1/CX_DSRUNSUPPORTEDOPEX
    /AWS1/CX_DSRCLIENTEXC
    /AWS1/CX_DSRSERVEREXC
    /AWS1/CX_RT_TECHNICAL_GENERIC
    /AWS1/CX_RT_SERVICE_GENERIC.

IMPORTING

Required arguments:

iv_directoryid TYPE /AWS1/DSRDIRECTORYID /AWS1/DSRDIRECTORYID

The Directory ID of the Managed Microsoft AD directory for which to establish the trust relationship.

iv_remotedomainname TYPE /AWS1/DSRREMOTEDOMAINNAME /AWS1/DSRREMOTEDOMAINNAME

The Fully Qualified Domain Name (FQDN) of the external domain for which to create the trust relationship.

iv_trustpassword TYPE /AWS1/DSRTRUSTPASSWORD /AWS1/DSRTRUSTPASSWORD

The trust password. The trust password must be the same password that was used when creating the trust relationship on the external domain.

iv_trustdirection TYPE /AWS1/DSRTRUSTDIRECTION /AWS1/DSRTRUSTDIRECTION

The direction of the trust relationship.

Optional arguments:

iv_trusttype TYPE /AWS1/DSRTRUSTTYPE /AWS1/DSRTRUSTTYPE

The trust relationship type. Forest is the default.

it_condalforwarderipaddrs TYPE /AWS1/CL_DSRDNSIPADDRS_W=>TT_DNSIPADDRS TT_DNSIPADDRS

The IP addresses of the remote DNS server associated with RemoteDomainName.

it_condalforwarderipv6addrs TYPE /AWS1/CL_DSRDNSIPV6ADDRS_W=>TT_DNSIPV6ADDRS TT_DNSIPV6ADDRS

The IPv6 addresses of the remote DNS server associated with RemoteDomainName.

iv_selectiveauth TYPE /AWS1/DSRSELECTIVEAUTH /AWS1/DSRSELECTIVEAUTH

Optional parameter to enable selective authentication for the trust.

RETURNING

oo_output TYPE REF TO /aws1/cl_dsrcreatetrustresult /AWS1/CL_DSRCREATETRUSTRESULT

Domain /AWS1/RT_ACCOUNT_ID
Primitive Type NUMC

Examples

Syntax Example

This is an example of the syntax for calling the method. It includes every possible argument and initializes every possible value. The data provided is not necessarily semantically accurate (for example the value "string" may be provided for something that is intended to be an instance ID, or in some cases two arguments may be mutually exclusive). The syntax shows the ABAP syntax for creating the various data structures.

DATA(lo_result) = lo_client->createtrust(
  it_condalforwarderipaddrs = VALUE /aws1/cl_dsrdnsipaddrs_w=>tt_dnsipaddrs(
    ( new /aws1/cl_dsrdnsipaddrs_w( |string| ) )
  )
  it_condalforwarderipv6addrs = VALUE /aws1/cl_dsrdnsipv6addrs_w=>tt_dnsipv6addrs(
    ( new /aws1/cl_dsrdnsipv6addrs_w( |string| ) )
  )
  iv_directoryid = |string|
  iv_remotedomainname = |string|
  iv_selectiveauth = |string|
  iv_trustdirection = |string|
  iv_trustpassword = |string|
  iv_trusttype = |string|
).

This is an example of reading all possible response values

lo_result = lo_result.
IF lo_result IS NOT INITIAL.
  lv_trustid = lo_result->get_trustid( ).
ENDIF.

To create a trust

The following example creates a trust between Microsoft AD in the AWS cloud and an external domain.

DATA(lo_result) = lo_client->createtrust(
  it_condalforwarderipaddrs = VALUE /aws1/cl_dsrdnsipaddrs_w=>tt_dnsipaddrs(
    ( new /aws1/cl_dsrdnsipaddrs_w( |172.30.21.228| ) )
  )
  iv_directoryid = |d-92654abfed|
  iv_remotedomainname = |europe.example.com|
  iv_trustdirection = |One-Way: Outgoing|
  iv_trustpassword = |Str0ngP@ssw0rd|
  iv_trusttype = |Forest|
).