AD Import using Custom Attributes?

by default when you run AD import in UC, it fetched whole AD domain accounts which contains service accounts and a lot other stuff which one don't want to import.
So choice is to search using a particular Base DN which query only one OU.
But this simple query is not adequate in a organization which has a very complex and large OUs structure, users which needs to be UC enabled are distributed among many separate OUs.
Is there some kind of filters or other method during AD import which can query users from AD based on security group membership or CustomAttributes. The best approach will be CustomAttributes based query, because we already published CustomAttribute15 with values "STAFF","Faculty" and "Students".
The whole purpose which we want to achieve is to exclude STUDENTS category in AD import. Help me friends to achieve this task.

Hi
You can edit the LDAP filer used by CCM; with that you could filter on your custom attributes. See this post for a discussion of a similar modification; it's just a matter of putting together a new LDAP filter string to return the results you want.
https://supportforums.cisco.com/message/3042759#3042759
Regards
Aaron
Please rate helpful posts...

Similar Messages

Using Custom Attributes in HBR

<p>Does anyone know how to use custom attributes to limit local orglobal HBR variables (run-time prompts)? We have business rulesthat were developed in the graphical designers and the run timeprompt was set up to limit the user's selection based on a customattribute. When these business rules are imported into EAS theywill no longer validate.</p>

Hi Maarten,
I have applied the logic mentioned above to my code. But it still does not procure any data from the container.
<ItemType name="uwl.task.webflow.decision.<task>" connector="WebFlowConnector" defaultView="travel" defaultAction="launchTravelUwl" executionMode="default">
      <ItemTypeCriteria systemId="UWL_R3" externalType="<task>" connector="WebFlowConnector"/>
       <CustomAttributes>
        <CustomAttributeSource id="ABAP_BOR" objectIdHolder="NOTIFICATION" objectType="ZBUS2078" cacheValidity="final">
          <Attribute name="STARTDATE" type="date" displayName="Creation Date"/>
          <Attribute name="ENDDATE" type="double" displayName="Due By"/>
        </CustomAttributeSource>
        <CustomAttributeSource id="WEBFLOW_CONTAINER" objectIdHolder="NOTIFICATION" objectType="WebflowContainer" cacheValidity="final">
          <Attribute name="NOTIFICATION" type="string" displayName="NOTIFICATION"/>
        </CustomAttributeSource>
      </CustomAttributes>
      <Actions>
        <Action name="replan" groupAction="no" handler="UserDecisionHandler">
          <Properties>
            <Property name="UserDecisionNote" value="mandatory"/>
            <Property name="decisionKey" value="4"/>
          </Properties>
        </Action>
        <Action name="reject" groupAction="yes" handler="UserDecisionHandler">
          <Properties>
            <Property name="UserDecisionNote" value="true"/>
            <Property name="decisionKey" value="1"/>
          </Properties>
        </Action>
      </Actions>
    </ItemType>

Importing/using custom package

Hello all,
I've been having trouble find a solution (likely because I'm not sure how to properly word this question, so bear with me).
FYI, I'm not really sure what I need to do here... this is a gap in my Java knowledge.
I've written a custom class with a static method that I'd like to use in other programs. In trying to figure out how to do this, I've reviewed sections of the Sun tutorials including Packages. I've created a custom lib folder and I've added it to my system CLASSPATH. I'm using Eclipse and when I try to import my custom package, it recognizes the package subfolders I have nested in the lib folder, but I get errors stating the package cannot be resolved. What do I need to place in this custom folder? .class file? .jar file? I have tried both From what I can tell, Eclipse recognizes it as a valid location (path-wise), but something's not, hence the error.
I've done some searching on the forums and web, but I haven't come up with anything... again, because I'm not really sure what exact keywords to search for.
Can anyone give me some ideas, or point me to specific documentation/threads relating to this?
Thanks!

Thok wrote:
kajbj wrote:
Eclipse ignores the system classpath. You should instead configure the classpath for your project.
KajAh, that explains it. Okay, that worked; I added the custom code as an external jar in the build path and it works. Is this the recommended method, or is there a "preferred" way? Or does it matter at all?
It's the way that Eclipse wants to see it.
Every IDE is a variation on that theme.
App servers all want to see CLASSPATH their way, too.
The one thing they all have in common is that they ignore a system CLASSPATH environment variable. I don't have one, because it's pretty much useless.
%

Bind control using custom attribute

Everyone!
I have to create a ACL which will allow users to bind Directory Server only who has custom status attribute value as active.
all others should be denied.
I tried some thing like this ...
first i created a dynamic group ie) whose members are having attribute value as active.
then i created an acl placed on root dc=example,dc=com
(targetattr = "*") (target = "ldap:///ou=People, dc=example,dc=com") (version 3.0;acl "portal";allow (read,compare,search)(groupdn = "ldap:///cn=temp_access,ou=Groups, dc=example,dc=com");)
Problem still users whose status is not active is able to bind ...may be i am missing something here .
Also what is best way to disable binding of user entry without inactivating entry ...
.any advise will be greatly appreciated.
Thank you

A "typical" user authentication works like this:
1) User enters their uid and password into a gui.
2) The application binds to the directory with an application ID and password and searches for the user based on uid and retrieves the user's DN
3) The application then binds to the directory with the user's DN and password to perform authentication
My suggestion is to block the application's access to the user's record at step 2 so that the user's DN cannot be retreived and the application will fail with a "entry not found" error.
An ACI can allow or deny access to a user entry based on an attribute in that entry. So the ACI I am suggesting would deny access to the application for any user entries where status=lock.
I understand that you are trying something else with dynamic groups, etc. but I don't know if that will work without testing it, and I barely have time to test my own ideas!

Assistance with Powershell custom attribute population

I'm currently undertaking an exchange 2003 to exchange 2010 migration and as part of this am having to redesign the email address policies. Our legacy recipient policies have worked well by targeting exchange alias but in 2010 this won't work.
We have a number of exchange domains and in order to update the email addresses for a group of users we have decided to use custom attribute 15 to target these AD groups, however updating this manually for over 2000 users would prove very time consuming.
Exchange 2010 seems to be geared towards powershell and as it's still early days in my knowledge am looking for assistance.
Does anyone know a powershell command I can run to update custom attribute 15 for users of a specific security group?
Many Thanks

I am no exchange expert but also not sure what you mean by custom attribute 15. Since you want to update "users" in a specific "group" I assume this will be in Active Directory?
If so, you can use the AD cmdlets to get the job done. On a machine that has AD users and computers installed you can do something like this:
Import-Module ActiveDirectory
Get-ADGroupMember -Identity groupName | ForEach-Object{
Set-ADUser -Identity $_ -Replace @{customeAttributeName = "Replacement"}
This hasn't been tested as I do not have an environment to test in, and not sure on the custom attribute name or what needs to be replaced with, so you will need to replace groupName with the group in question, customAttributeName with the correct name and
"Replacement" with what you are replacing.
If you find that my post has answered your question, please mark it as the answer. If you find my post to be helpful in anyway, please click vote as helpful.
Don't Retire Technet

Custom attributes in Service Registry

Hi!
Is it possible to use custom attributes in Service Registry?
And if Yes, where can these attributes be displayed in Business Service Control or Registry Control?
Thanks

Hi,
Please see the below link. This might help you.
http://weblogs.sdn.sap.com/cs/blank/view/wlg/20379
http://wiki.sdn.sap.com/wiki/display/BPX/Chapter+3
Thanks and regards,
SNJY

How to use Custom Search in Dynamic Page or HTML Portlet ?

Gurus,
1. I have a tab called My Space in the portal web site, where user gets a personalized view of the content.
2. I am using custom attributes and custom item types. I have a custom attribute called 'Location', which is a attribute of custom item types.
3. I have 2 pages - News and Events.
4. All the content in News and Events page is tagged by the attribute 'Location'.
5. The requirement is to let the user search the News and Events by Location.
6. To achieve this I used the Custom Search portlet and the user can select the attribute Location and see the resultant News and Event items by location in the Search portlet.
7. The requirement is to present the News items and Event items in separate regions on the page and show only the first 5 News and Event items in the result and show a More link which would guide the user to rest of the News and Event items.
8. Eventually there may be more content other than News and Events tagged by location. If so, the requirement is to create a new region and display the new content.
9. How would I do this using custom search ? I was thinking if there is anyway I could use the custom search api (where can i find it ?) in the HTML portlet or Dynamic page and submit the result to IFRAMES in each region and show the output ?
Pls advise.
Thanx a bunch.

I would suggest that you use two custom search portlets; one for the news items and one for the events items. Switch the custom search portlets to "AutoQuery" mode and add the relevant criteria. On the results display tab of the the "edit defaults" screen, choose to show just 5 items.
To add a link to show the user mode results, I'd create two new pages that have just a single custom search portlet on it that is customised to show more of the results and maybe has the pagination links enabled.
Then I'd add two "Page Link" items underneath the two news and events portlets on the first page in an item region.
I'm sure there are other ways of doing this as well. Hope that helps to get you started.

HTML 5 and Spry.. Making custom attributes valid

The HTML 5 spec is still a "Editors Draft" but doesn't mean browser haven't started intergating it. While i was reading through the specification i noticed that HTML allows you to specify custom attributes on elements (see: http://dev.w3.org/html5/spec/Overview.html#embedding-custom-non-visible-data ). We all know Spry also uses custom attributes for the Spry dataset. These are typically prefixed with spry:action_here=""
At this point its not valid HTML even though, when serving your page as xhtml it should be valid.. as xml allows you to specify custom attributes as well. But that aside, with the release of HTML5 getting closer and closer we could make Spry attibutes valid if we started prefixing all custom attributes with data-
For example:
spry:region="ds1" => data-spry:region="ds1"
spry:if="0 == false" => data-spry:if="0 == false"
A switch to the data- prefix would require very little editing of the existing spry files. The only thing users would have to do, is switch to the HTML5 doc type declaring to make it valid. As this doc type has backwards compatiblity and do not force IE6 in quirksmode i feel this is better alternative to externalizing the custom attributes or waiting for browser to support extended doctypes.
So i wonder what you opinions are on this . Is Spry ready for HTML5 and is HTML5 ready for Spry ?

Am I excited about the upcoming HTML5? YES! But not because it validates our Spry attributes.
Spry, if used properly, already works well and the fact that it is not validated by W3C can be regarded as a curious fact. Sort of like a driver of mine that has not been validated by Microsoft; without the driver my hardware does not work. So what do I do?
Well for some people its not a problem that the pages do not validate. But there companies and clients who value validation. Its understandable because people are overhyping it. In this case, it would allow to validate out of the box, without any changes to your code. Making it easier for starting developers and create a W3C valid document.
I am excited about the new HTML5 elements that will be introduced, hopefully making life easier.
Well doesn't really make a life easier. I'm currently creating my online resume in HTML and its harder... Normally you would just use divs for almost every layout wrapper now you got to choose between aside, section, article, details, hgroup, header etc. So much elements to choose from, but using them wisely is the hard part.
I am not excited about the fact that HTML5, being backward compatible, will come with the deficiencies of its predecesors
I am confused about the near simultaneous release of XHTML2. Where is the logic? Cannot the regulators and validators agree on a standard? I guess not. Even the browser-producers cannot agree on a standard. Remember the confusion with audio and video tapes?
All of this confusion only adds weight to my argument, who cares about W3C validation or Microsoft validation? if it works it works!
Some people like it strict some people don't, for performance reasons i actually choose for the loose version. It allows me to build a more compressed file .
Video codec wars are fun to.. Ogg vs MPEG. Using flash as fallback or silver light for unsupported browsers, or just generate multiple formats.. Hard to choose.. I personally hope h.264 codec will be used because its quality wise its much better. But we will see what the browser vendors will decide.

Custom search using boolean attribute set to True gives no result

I am setting up an auto-query using the custom search portlet. This is to show all items where a boolean custom attribute is checked, ie = True.
In step 3 I have tried to set the operator to Equals to and the default value to True. This gives no results even though several items have this attribute set to True.
The Auto Query check box is checked.

Found that True = 1 in database. When set to this the search works.

How can i add custom attributes to a new Class Object using the API ?

Hello everyone,
Here is my problem. I just created a subclass of Document using the API (not XML), by creating a ClassObjectDefinition and a ClassObject. Here is the code :
// doc is an instance of Document
ClassObject co = doc.getClassObject();
ClassObjectDefinition cod = new ClassObjectDefinition(ifsSession);
cod.setSuperclass(co);
cod.setSuperclassName(co.getName());
cod.setName("MYDocument");
ClassObject c = (ClassObject)ifsSession.createSchemaObject(cod);
Everything seems to be OK since i can see the new class when i use ifsmgr. But my question is : how can i add custom attributes to this new class ? Here is what i tried :
AttributeDefinition value = new AttributeDefinition(ifsSession);
value.setAttribute("FOO", AttributeValue.newAttributeValue("bar"));
c.addAttribute(value);
But i got the following error message :
oracle.ifs.common.IfsException: IFS-30002: Unable to create new LibraryObject
java.sql.SQLException: ORA-01400: impossible d'insirer NULL dans ("IFSSYS"."ODM_ATTRIBUTE"."DATATYPE")
oracle.ifs.server.S_LibraryObjectData oracle.ifs.beans.LibrarySession.DMNewSchemaObject(oracle.ifs.server.S_LibraryObjectDefinition)
oracle.ifs.beans.SchemaObject oracle.ifs.beans.LibrarySession.NewSchemaObject(oracle.ifs.beans.SchemaObjectDefinition)
oracle.ifs.beans.SchemaObject oracle.ifs.beans.LibrarySession.createSchemaObject(oracle.ifs.beans.SchemaObjectDefinition)
void fr.sword.ifs.GestionDocument.IFSDocument.createDocument(java.lang.String)
void fr.sword.ifs.GestionDocument.IFSDocument.main(java.lang.String[])
So, what am i doing wrong ?
More generally, are we restricted in the types of the attributes ? (for example, would it be possible to add an attribute that would be an inputStream ? Or an object that i have already created ?).
Any help would be appreciated. Thanks in advance.
Guillaume
PS : i'm using Oracle iFS 1.1.9 on NT4 SP6 and Oracle 8.1.7
null

Hi Guillaume,
you're welcome. Don't know exactly, but assume that ATTRIBUTEDATATYPE_UNKNOWN
is used to check for erronous cases only
and it shouldn't be used otherwise.
Creating your own objects could be simply done via
ClassObject ifsClassObject;
DocumentDefinition ifsDocDef = new DocumentDefinition(ifsSession);
// get class object for my very own document
ifsClassObject = ClassObject.getClassObjectFromLabel(ifsSession, "MYDOCUMENT");
// set the class for the document i'd like to create
ifsDocDef.setClassObject(ifsClassObject);
// set attributes and content for the document...
ifsDocDef.setAttribute("MYFOO_ATTRIBUTE",....);
ifsDocDef.setContent("This is the content of my document");
// create the document...
PublicObject doc = ifsSession.createPublicObject(ifsDocDef);
null

Using Rich Text Editor with a Custom Attribute

Hello All,
Can anyone please tell me as how can I use the Rich Text Editor with a Custom Attribute?
I want to create a custom attribute based on text datatype, but when entering the value for this attribute in a Custom Item, portal shows a normal textarea. I want that the user should see the Richt Text Editor.
Thanks for help.
Regards

Hi,
Can you tell me what steps you are using to produce this, and which Portal version you are using. When I tried it, I wasn't able to reproduce it. Here are my steps:
1) Created Custom Item Type, based on Text, under
Page Groups > Shared Objects > Item Types
2) Selected Three attributes (Description, Name, Publish Date). Note Text and Display Name were already selected
3) In Add Item Wizard, configured list to allow for my
custom item type selection.
4) Then I was able to see the Rich Text Editor when editin
my custom item type.
Regards,
J.

Accessing custom attributes in LDAP using WD Java - UME APIs

Hello Friends,
I am trying to access a custom attribute from LDAP in WebDynpro Java. I am using bellow code.
IWDClientUser clientUser = WDClientUser.getCurrentUser();
IUser sapUser = clientUser.getSAPUser();
if (sapUser != null) {
String[] str_emp = sapUser.getAttribute(<Name Space>,"Attribute Name");
if (str_emp == null || str_emp.length == 0) {
wdComponentAPI.getMessageManager().reportSuccess(" NULL ");
return;
} else {
strEmpID = str_emp[0];
wdComponentAPI.getMessageManager().reportSuccess(strEmpID);
The name space is "$usermapping$". I am not sure why it is like that only for this attribute i am trying to access.
I am getting null value if i run this code.
Can any one help
thanks
Shobhan

Hi,
Are you sure this is the right namespace? The default namespace is com.sap.security.core.usermanagement.
You can get all namespaces and the names of all attributes defined for a user using methods getAttributeNamespaces and getAttributeNames : [Interface IPrincipal|http://help.sap.com/javadocs/NW04S/current/se/index.html].
Regards,
Pierre

Using LOV with bind var as custom attribute?

I have an Portal LOV which uses a bind variable.
Can I use this LOV as a custom attribute? If so, how do I specific the bind variable value?
In the display option of the attribute I tried LOV_NAME(LOV_Bind => 'value'), but the LOV is not applied.

It's been quite a while, but I think I remember trying this and not being able to achieve it. You can use a LOV with a bind variable in a report or in a form, or similar, but there is no way in an item to from specify where to get the bind variable. My suggestion if this is a requirement would be to use a portal form which submits to a stored procedure or pl/sql generated form to gather the attributes and then programmatically create the item using the APIs. Takes a bit of work, but gets you exactly what you described above.
Rgds/Mark M.

How can i set "Createdby" attribute When using Custom JheadStart Security

Hello
We do not use JASS for Authentication , please help us how can i set createtby attributes with jhs.username in application for any entity object?
thanks

See a similar question at History Attributes when using Custom Authentication Type

Problem using multiple choice LOV with custom attribute in IAS 10.1.2.0.2

Hi
When aplying a multiple choice and selecting multiple selection and saving in the content area , everything looks fine .
However when looking at the page the selection is only the first one selected and not the miltiple choices I made
can someone tell me what is going on , does the miltiple selection with custom attribute
works ??
thanks in advance
Igal

Hi there,
I don't really understand what you're doing but I used lot of LOV in custom attributes on my custom items and everything works fine.
Can you explain more your problem ?

AD Import using Custom Attributes?

Similar Messages

Maybe you are looking for