DIP fails loading dynamic groups into OID

Hello,
we're trying to load groups from OeBS into OID and associate them via dynamic groups feature with user records that was loaded earlier as follows:
personid=18630,cn=dev,cn=hrsyncusers,cn=users,dc=ic,dc=lan
orcltimezone=Asia/Yekaterinburg
displayname=NOT ASCII
employeetype=NOT ASCII
givenname=NOT ASCII
postalcode=628484
orcldateofbirth=19610404000000
orclgender=F
departmentnumber=342
uid=18630
mail=HRNULL
cn=NOT ASCII
initials=NOT ASCII
street=NOT ASCII
employeenumber=4824
middlename=NOT ASCII
l=NOT ASCII
orclhiredate=20051107000000
sn=NOT ASCII
personid=18630
c=Russia
title=NOT ASCII
objectclass=inetorgperson
objectclass=person
objectclass=organizationalperson
objectclass=orcluserv2
objectclass=kapitalperson
objectclass=country
objectclass=residentialperson
objectclass=locality
objectclass=top
Among other attributes each user entity has 'departmentNumber' that indicates number of his/her department.
Now trying to load list of departments as dynamic groups with the following config
files:
*** DevHRAgentGroups.cfg ***
[SELECT]
SELECT psv.version_number
, pos.name hierarchyname
, hou.organization_id depno
, poe.organization_id_parent parent_id
, REPLACE(hou2.name, '"') parentname
, poe.organization_id_child child_id
, REPLACE(hou.name, '"') orgname
, ldap://idm01.ic.lan:389/cn=DEV,cn=HRSyncUsers,cn=Users,dc=ic,dc=lan??sub?(depar
tmentnumber='||hou.organization_id||')' ldapuri
, hrl.meaning org_type
FROM per_organization_structures pos
, per_org_structure_versions psv
, per_org_structure_elements poe
, hr_all_organization_units hou
, hr_all_organization_units hou2
, hr_lookups hrl
WHERE pos.business_group_id = psv.business_group_id
AND pos.organization_structure_id = psv.organization_structure_id
AND pos.primary_structure_flag = 'Y'
AND psv.date_to IS NULL
AND poe.org_structure_version_id = psv.org_structure_version_id
AND poe.business_group_id = hou.business_group_id
AND poe.organization_id_child = hou.organization_id
AND poe.business_group_id = hou2.business_group_id
AND poe.organization_id_parent = hou2.organization_id
AND hrl.lookup_code = hou.type
AND hrl.enabled_flag = 'Y'
AND hrl.lookup_type = 'ORG_TYPE'
AND hrl.lookup_code NOT IN (30,40)
AND TRUNC(SYSDATE) BETWEEN hou.date_from AND NVL(hou.date_to, TO_DATE('31.12.4712','dd.mm.yyyy'))
AND hou.last_update_date >= to_date(:BINDVAR,'YYYYMMDDHH24MISS')
*** DevHRAgentGroups.map ***
DomainRules
NONLDAP:cn=DEV,cn=HRSyncGroups,cn=Groups,dc=ic,dc=lan:departmentID=%,cn=DEV,cn=HRSyncGroups,cn=Groups,dc=ic,dc=lan
AttributeRules
orgname:1: : :cn: :groupOfUniqueNames
depno:1: : :departmentID: :kapitalDepartment
ldapuri: : : :labeledURI: :orclDynamicGroup
We're getting the following error in ?/ldap/odi/log/DevHRAgentGroups.trc during HRAgent execution at mapping phase:
Normalized DN : departmentid=82,cn=dev,cn=hrsyncgroups,cn=groups,dc=ic,dc=lan
Changetype is 5
Processing modifyRadd Operation ..
Entry Not Found. Converting to an ADD op..
Processing Insert Operation ..
Performing createEntry..
Exception creating Entry : javax.naming.NamingException: [LDAP: error code 1 - Dynamic group cache update failed.]; remaining name 'departmentid=82,cn=dev,cn=
hrsyncgroups,cn=groups,dc=ic,dc=lan'
[LDAP: error code 1 - Dynamic group cache update failed.]
javax.naming.NamingException: [LDAP: error code 1 - Dynamic group cache update failed.]; remaining name 'departmentid=82,cn=dev,cn=hrsyncgroups,cn=groups,dc=i
c,dc=lan'
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3028)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2934)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2740)
at com.sun.jndi.ldap.LdapCtx.c_createSubcontext(LdapCtx.java:777)
at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_createSubcontext(ComponentDirContext.java:319)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.createSubcontext(PartialCompositeDirContext.java:248)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.createSubcontext(PartialCompositeDirContext.java:236)
at javax.naming.directory.InitialDirContext.createSubcontext(InitialDirContext.java:176)
at oracle.ldap.odip.gsi.LDAPWriter.createEntry(LDAPWriter.java:1162)
at oracle.ldap.odip.gsi.LDAPWriter.insert(LDAPWriter.java:425)
at oracle.ldap.odip.gsi.LDAPWriter.modifyRadd(LDAPWriter.java:822)
at oracle.ldap.odip.gsi.LDAPWriter.writeChanges(LDAPWriter.java:349)
at oracle.ldap.odip.engine.AgentThread.mapExecute(AgentThread.java:655)
at oracle.ldap.odip.engine.AgentThread.execMapping(AgentThread.java:376)
at oracle.ldap.odip.engine.AgentThread.run(AgentThread.java:237)
DIP_LDAPWRITER_ERROR_CREATE
Error in executing mapping DIP_LDAPWRITER_ERROR_CREATE
DIP_LDAPWRITER_ERROR_CREATE
Please, note. Loading is successful if we commenting out mapping line for labeledURI attribute (that's loading static groups).
Loading is also successful when labeledURI is mapped to
'ldap://idm01.ic.lan:389/cn=DEV,cn=HRSyncUsers,cn=Users,dc=ic,dc=lan??sub?(objec
tclass=person)' but this definetly is not what we are going to get.
I don't have ideas what's wrong for example with the following generated 'labeledURI' attribute:
ldap://idm01.ic.lan:389/cn=DEV,cn=HRSyncUsers,cn=Users,dc=ic,dc=lan??sub?(departmentnumber=82)
Any help is appreciated
Thanks,
Edward

Hi Frank,
there is something wrong with departmentnumber attribute of user records. Searching users with ldapsearch using "departmentnumber=*" filter fails with the following error:
ldap_search: DSA is unwilling to perform
ldap_search: additional info: Function Not Implemented
I think this is probably the cause of failing creation of dynamic groups.
Searching on other user attributes (cn, uid, employyenumber) works fine.
Still don't understand what's wrong with this particular attribute.

Similar Messages

Load dynamic text into Captivate form external file

Is it possible to load dynamic text into a Captivate file from an external file like an XML using Javascript.
I see there's a way to get it form the query scring of the URL ( http://captivatedev.com/2011/05/01/how-to-jump-to-a-specific-slide-in-a-separate-course/ ), but I have a project where I want several pieces of text to be replaced and we want to be able to edit it externally from the Captivate file.
Thanks!

Hi Ned,
What I'm doing is using a yahoo map to load addresses and
place custom swf files as the placemarkers. The main stage has an
instance of myMap, which is the map that yahoo sets us to display
the ACTUAL map. They have also provided coding for placing markers
on the map, which is what I'm using.
I have the addresses throughout multiple xml files, which I
am actually loading through 1 single xml file. These addresses are
being stored in an array, then called by the AS below to place
markers. All the markers are placed correctly, however, I am trying
to have them actually say the address - this is where the problem
lies.
The marker that is being located and placed has a text field
called load_text in it. I want that field to load the same address
that is being used to place it (from the array addressA).
I'm very confused because every loop through the * for (i=0;
i<addressA.length; i++) * loop the marker is placed at the
correct addressA
location, but I cannot actually get the address to load into the
load_txt field in the marker. I can even run a trace during that
loop and it traces addressA for each address, but I can't seem
to actually load those values into the load_txt box.
Do you have any ideas?

Loading LDAP groups into WLS JAAS Subject

Hi,
I have a 10.1.4.3 OAM webgate+OHS setup to protect weblogic 10.3.2 as described ('1st best option') in this blog below.
http://fusionsecurity.blogspot.com/2010/01/integrating-oracle-access-manager-oam.html
In the weblogic security realm, I have the OAM Identity Asserter (REQUIRED), OID Authentication Provider (SUFFICIENT), Default Authenticator (SUFFICIENT), Default Identity Asserter configured in that order.
A simple JSP app with CLIENT-CERT is deployed to the WLS. After the user is authenticated at OHS Webgate, the OAM Identity asserter is correctly asserting the user (and the obSSOCookie) as can be seen from the logs. The JSP app is getting a valid (non-anoymous) JAAS Subject with a single JAAS principal (of the user).
But I 'm not sure it is loading the LDAP groups correctly using the OID provider. Are the LDAP groups supposed to be loaded as principals into the JAAS Subject? The user is part of many LDAP groups but only one principal (user itself) is in the JAAS Subject. Are there any additional steps to 'pair' the OAM Identity Asserter with the OID authentication provider as described in the above blog?
I 'm using weblogic.security.Security.getCurrentSubject() to get the Subject and subject.getPrincipals() to get the principals in the JSP app.
Thanks.

Like I said in my post, subject.getPrincipals() has only one entry, the user id. The LDAP groups aren't in the Set returned. I 'm wondering how to debug this or fix it. I 'm wondering if I need to re-associate the domain policy store with LDAP as described here before the LDAP groups will be loaded into the subject.
http://download.oracle.com/docs/cd/E14571_01/core.1111/e10043/cfgauthr.htm#CHDIIJDB

Failed loading from PSA into Cube

Hello,
I tried to load data from flat file into a cube. I defined the processing as PSA only in Infopackage, the loading was OK, but when I loaded data from PSA to cube, it failed. I checked the PSA, the Status indicator was red, this record is the first record in flat file. The detail error message as follow:
TYPE: Red
Message: Value "01.02.20" of characteristic 0Date is not a number with spaces
ID: BRAIN
NO.: 19
LTxt:
One record in flat file as this:
M-01;GP-01;1000;01.01.2006;2006;K4;20
the corresponded infoobjects:
Material;material group;customer;calend day;fiscal year;fiscal year variant;quantity
I was confused much on the error message, I checked flat file, infosource, transfer and update rules,cube and so on. Could you please help me to solve the problem? thanks advaned!
Ryan

Hi,
0DATE has to be available in internal date fomat to book into the infocube. you have the following options:
-Change the 0DATE-column in your flatfile to the format YYYYMMDD.
-In the transfer structure, choose a conversion routine to convert the external date format to internal date format.
Regards,
Beat

How to load dynamically String into a VI using LabVIEW Run-time Engine Version 7.0?

I would like to be able to traduce string into my application using import string method. I create an program with my VI to translate. When I use the import method, I get this error: the VI is locked. WHY ? because it works well in the edit mode but not using LabVIEW Run-time Engine Version 7.0 .

Hello loup,
If you call dynamically a VI in your LabVIEW application you must add this VI when you build the .exe file.
To add this VI, go to the Tab "Source Files" when you build application and click on "Add Dynamic VI..." then chose the VI you call.
It should solve your problem.
In the attached file you can found an example of LV program that translate front panel.
Try to build exe file and add "Languages.vi" as dynamic VI and .txt files as "Support files".
I test it, it works.
I hope that this will help you.
Best Regards,
Sanaa T
National Instruments
Attachments:
Translation.zip ‏69 KB

Re: Fiori Launchpad Failed load the Group

Hi,
I 've faced with the errors
And also I have an error
I have SAP_UI SP11
UI5 1.26.11
I've assigned all nessesury roles
SAP_UI2_ADMIN_700
SAP_UI2_ADMIN_702
SAP_UI2_ADMIN_731
SAP_UI2_FIORI_CATALOGS_READ
SAP_UI2_LAUNCH_PAGE
SAP_UI2_NEWS_TILE
SAP_UI2_PAGEBUILDER_CONFIG
SAP_UI2_PAGEBUILDER_CUST
SAP_UI2_PAGEBUILDER_PERS
SAP_UI2_USER_700
Also I have implemented all notes mentioned here
http://scn.sap.com/docs/DOC-61494#comment-580882
I have no success.
Could u please suggest what can be the reason.
Thanks a lot.
Best regards,
Olga

Hi Olga,
I hope you are getting : "Resource chip not found" error in your inspect element -> Network tab.
Please check SU53 and assign all missing authorizations.
Follow this link and configure step by step R3TR .
Configuring Authorization Roles - User Interface Add-On for SAP NetWeaver - SAP Library
Also you have missing authorizations for these auth objects : S_PB_CHIP, /UI2/CHIP, S_SERVICE,S_DEVELOP,
Assign manually to your role :SAP_UI2_ADMIN_700
Regards,
Tejas

Dynamic Group containing maintenance mode devices

Hi,
I am using a scheduled script to put a large number of items in maintenance mode for periods of time where we do not which to receive alerts or cause DA state changes. For these objects, the time is overnight or weekends.
The script adds all objects in a dynamic group into maintenance mode. This includes both windows and network devices.
My issue is that when an engineer manually puts an item into maintenance mode for genuine maintenance purposes, it may be overridden.
So my idea is to have another dynamic group containing all objects in maintenance mode, and make it an exclusion in the original group. Is this possible or is there a better way?
FYI The script I am using for the bulk maintenance mode is based from here:
http://www.systemcentercentral.com/opsmgr-2012-group-maintenance-mode-via-powershell-the-way-it-should-be/

Hi,
We can use below command to get all members in a group:
$Groups = Get-MonitoringObjectGroup
$Group = $Groups | where {$_.DisplayName -eq "Group Name"}
$Members = $Group.GetRelatedMonitoringObjects()
And with below command we could get all members that in maintenance mode:
$Members | where{$_.inmaintenancemode -eq $true}
With set-SCOMMaintenanceMode command we can update active maintenance mode entries.
http://technet.microsoft.com/en-us/library/hh920197(v=sc.20).aspx
Regards, Yan Li

Error editing task sequence: Failed to load dynamic properties for class "SMS_TaskSequence_ApplyWindowsSettingsAction" From XML into WMI

I've started getting an intermittent error editing my Windows 7 OSD task sequence. Sometimes I can open the TS to edit, but when I try to apply changes I get the error. Other times I get the error when trying to open the TS. If I try again
right away, I still get the error, but if I wait a few minutes and try again sometimes it will open the TS.
The error reads:
ConfigMgr Error Object:instance of SMS_Extended Status{Description = "Failed to load dynamic properties for class \"SMS_TaskSequence_ApplyWindowsSettingsAction\" from XML into WMI";Error Code = 2147943746;File = "e:\\qfe\\nts\\sms\\siteserver\\sdk_provider\\smsprov\\ssptspackage.cpp";Line = 3454;Operation = "ExecMethod";ParameterInfo = "SMS_TaskSequencePackage";ProviderName = "WinMgmt";StatusCode = 2147749889;}
Coinciding with this error, I show the following entries in the TaskSequenceProvider.log file:
[PID: 7608] Invoking method SMS_TaskSequence.LoadFromXml
TaskSequenceProvider
Failed to protect memory buffer, hr=0x80070542
TaskSequenceProvider
Failed to load dynamic properties for class "SMS_TaskSequence_ApplyWindowsSettingsAction" from XML into WMI 0x80070542 (2147943746)
TaskSequenceProvider
Failed to load node Apply Windows Settings from XML into WMI 0x80070542 (2147943746)
TaskSequenceProvider
Failed to load children steps for node "PostInstall" from XML 0x80070542 (2147943746)
TaskSequenceProvider
Failed to load children steps for node "Execute Task Sequence" from XML 0x80070542 (2147943746)
TaskSequenceProvider
Failed to load children steps for node "" from XML 0x80070542 (2147943746)
TaskSequenceProvider
Failed to load XML for the task sequence into WMI 0x80070542 (2147943746)
TaskSequenceProvider
[PID: 7608] Done with method SMS_TaskSequence.LoadFromXml
TaskSequenceProvider
Setting status complete: status code = 0x80070542; Failed to load dynamic properties for class "SMS_TaskSequence_ApplyWindowsSettingsAction" from XML into WMI
TaskSequenceProvider
I exported the task sequence and checked in "object.xml" for the "ApplyWindowsSettingsAction", to see if there was something odd in the xml, but I don't find anything that jumps out as being wrong. Here's the section of XML for
that step. I've removed identifying info, and replaced it with a generic term in bold.
<step type="SMS_TaskSequence_ApplyWindowsSettingsAction" name="Apply Windows Settings" description="" runIn="WinPE" successCodeList="0" runFromNet="false"><action>osdwinsettings.exe /config</action><defaultVarList><variable name="OSDLocalAdminPassword" property="AdminPassword"></variable><variable name="OSDComputerName" property="ComputerName">%_SMSTSMachineName%</variable><variable name="OSDProductKey" property="ProductKey"></variable><variable name="OSDRandomAdminPassword" property="RandomAdminPassword">false</variable><variable name="OSDRegisteredOrgName" property="RegisteredOrgName">COMPANY NAME</variable><variable name="OSDRegisteredUserName" property="RegisteredUserName">COMPANY NAME</variable><variable name="OSDServerLicenseConnectionLimit" property="ServerLicenseConnectionLimit">5</variable><variable name="OSDTimeZone" property="TimeZone">Central Standard Time</variable></defaultVarList></step><step type="SMS_TaskSequence_ApplyNetworkSettingsAction" name="Apply Network Settings" description="" runIn="WinPEandFullOS" successCodeList="0" runFromNet="false"><action>osdnetsettings.exe configure</action><defaultVarList><variable name="OSDDomainName" property="DomainName">DOMAIN.COM</variable><variable name="OSDJoinPassword" property="DomainPassword"></variable><variable name="OSDJoinAccount" property="DomainUsername">DOMAIN ACCOUNT</variable><variable name="OSDEnableTCPIPFiltering" property="EnableTCPIPFiltering" hidden="true">false</variable><variable name="OSDNetworkJoinType" property="NetworkJoinType">0</variable><variable name="OSDAdapterCount" property="NumAdapters" hidden="true">0</variable></defaultVarList></step>
Is there any other log I should check for a clue on this issue? What could be causing this error?

Thanks for sharing that! I tend to save contacting MS support until after I've exhausted other options. I'm always afraid that I'll spend the $500 to open a case and then it turns out to be something simple that I would have found if I had just
kept working on it myself a little longer.
It looks like that link is for an update released in February as KB3023562. I downloaded and installed it. I'll try opening/editing/saving the task sequence a few times today to see if the issue is resolved.
After I had already installed it, I thought to look up that update in configmgr. The update is listed as superseded by 2 other updates. The newest of those is KB3046049, which just installed last night with the other March patches, so it's possible
that I didn't need to install KB3023562 after all.

Sybase gateway problem - Failed to load dynamic library 'hsdbsyb'

Having problems getting the Sybase gateway working on XP. Environment in Oracle 9.2.0.6 on Linux, Sybase on AIX 5.1 (moving to linux, gateway currently working well on this box) gateway on XP. I get the following error when trying to use my db link: Help appreciated
ORA-28500: connection from ORACLE to a non-Oracle system returned this message:
[Transparent gateway for SYBASE]DRV_InitTdp: DBTYPE.C (473): ; The specified module could not be found.
; at FIND_IMAGE_SYMBOL
DBTYPE.C (7): ; [C079] Failed to load dynamic library 'hsdbsyb'
tnsnames on linux box has:
CIT001TSTW =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = tcp)(HOST = lons00106694)(PORT = 1521))
(CONNECT_DATA =
(SID = cit001tst)
(HS = OK)
on gateway windows box (has oracle client and gateway software and sybase client)
listener.ora:
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = PLSExtProc)
(ORACLE_HOME = c:\progra~1\oracle)
(PROGRAM = extproc)
(SID_DESC=
(SID_NAME = cit001tst)
(ORACLE_HOME = c:\progra~1\oracle)
(PROGRAM = tg4sybs)
initcit001tst.ora
HS_FDS_CONNECT_INFO=CIT1_LON_TST_SQL.cit001tst
HS_FDS_TRACE_LEVEL=ON
HS_FDS_RECOVERY_ACCOUNT=RECOVER
HS_FDS_RECOVERY_PWD=RECOVER
HS_FDS_TRACE_LEVEL=4
HS_FDS_FILE_NAME=trace
# Environment variables required for Sybase
set SYBASE=c:\progra~1\sybase\oc1251
sql.ini
[CIT1_LON_TST_SQL]
win3_query=WNLWNSCK,loncmxs0004.uk.net.intra.,5000
query=NLWNSCK,loncmxs0004.uk.net.intra.,5000

Yes, this VI is damaged. I can not open it.
Colin
LV7.1/8.2/8.2.1/8.5/8.6/9.0/2010/2013; testing system development
Please Mark the solution as accepted if your problem is solved and donate kudoes
Home--www.colinzhang.net

Dynamic group membership Query based on alert description - IS package failed

Hi there all good people,
Ive got the following case:
i need to filter out some of the alerts raised bij the is package failed Alert rule.
All allerts raised need a override accept two alerts with a specific description. example:
Alert description: Package "Full Back-Up" failed. should still raise an alert also the
Alert description: Package "Full Db Back-Up" failed.
I.m playing arround with dynamic groups. Can somebody give me some pointers?
Or do i need to create an new alert rule? en override this one for all objects?
I hope the question is clear, im no native english speaking

Hi,
I would like to suggest you override this one for all objects and then create a new alert rule based on your requirement.
Regards,
Yan Li
Regards, Yan Li

Using tcm to load test scripts into mtm, but action fails.

Hi,
I am trying to load test scripts into mtm but action fails saying : "The work item cannot be saved because at least one field contains a value that is not allowed."
My guess is that this issue is due to the parameters/attributes we give to a test case([testmethod], [description()], etc.). I am unable to find what all parameters/attributes that can be given to a test case.
Please help me with this issue.
Regards,
Payal Prajapati
Payal Prajapati.

Hi,
I use VS 2012.
One of my test method code is:
/// <summary>
/// Test Scenario to validate auto escalation of chat if within some time analyst does not respond to user.
/// </summary>
[TestMethod]
[Description("Validating scenario, Auto-Escalation of chats to other Analyst.")]
[Priority(2)]
[TestCategory("Acceptance")]
public void ValidatingAutoEscalationOfChatsToOtherAnalyst()
User alice = new User(User1);
alice.SubmitChatInfo();
Analyst admin = new Analyst(Analyst_Admin);
admin.Login();
Analyst analysttier1 = new Analyst(Analyst_Tier1);
admin.SelectQueues(Tier1Queue);
admin.MakeAvailable();
alice.USendMessage("I have a problem.");
admin.AnalystWaitForAutoEscalation(25000);
string Message1 = alice.GetAnalystName();
analysttier1.Login();
analysttier1.SelectQueues(Tier1Queue);
analysttier1.MakeAvailable();
alice.USendMessage("I have a problem.");
string Message2 = alice.GetAnalystName();
analysttier1.ASendMessage("hello, i'm here to help.");
SprtTestContext.sprtTestContext.WriteLine("Earlier agent was: '" + Message1 + "' and present agent is: '" + Message2 + "'.");
Assert.AreNotEqual<string>(Message1, Message2, "=> Issue in auto escalation.");
analysttier1.WrapChatClose(4, "fixed", "comments"); }
Payal Prajapati.

OID Dynamic Groups and J2EE security roles

Hi
I've searched the forums but can't get a definite answer. Is it possible to use OID dynamic groups and map them to J2EE security roles? I can't find anything that says specificially not but I can't seem to get it to work.
Thanks
Adam

Hi,
Let me know if you find answer of your question.
thanks

Dynamic Group Resolution Limit?

We recently created a few dynamic groups to assign certain roles and access automatically. I have it set up to resolve these groups via a script that runs at the end of a maintenance job.
The issue we encountered upon our initial load was that it would only add 1000 users at a time via the script. Is there a setting somewhere in the console that puts this limit in place?
Alternatively, I tried to resolve the group from the group properties themselves. This also failed as it gave me a time out message; however it would not allow me to retry because a process to resolve the group was already running! Has anyone encountered this and found a way to terminate that process?
I was just wondering if anyone else had encountered these issues and how they resolved them.
Thanks,
Jared

Yes, on the initial load, they will only load 1000 at a time. We ran into this problem too (had one group of 12,000 people) but just ran it 13 times using Right Click -> Recalculate.
When they crash or deadlock, they will claim to still be running for a long time. This is because of the way they do locking:
1) When the recalculation starts, it chcecks the ModifyTime column on the attribute "MX_DG_AUTORESOLVE_INTERVAL" for that Dynamic Group. If it is in the past, it continues to step two, otherwise it aborts with the error saying it is already running.
2) It sets the ModifyTime on that attribute to a future date (I forget how long exactly, but we're talking about DAYS in the future).
3) It does the calculations.
4) It sets the ModifyTime to the time it finished.
So, you see the problem -- when it crashes, the time remains far in the future.
You mentioned you run the update from a script, and that is what we do too. There is supposed to be a way to trigger the calculation based on an Attribute Change, but the feature does not work as documented in the manual. Frustrating...
Anyway, this is how I get around the issue in our script:
function recalcInternetGroups(Par){
     uSleep(10000); //Give any previous attempts at least 10 seconds to finish resolving
     importPackage(Packages.com.valero.idm);
     var sqlClass = new SQLServerConnection();
     var SQL = "Select MSKEY FROM dbo.MXIV_SENTRIES WHERE searchvalue LIKE 'INTERNET_LEVEL_%' AND attrname = 'MSKEYVALUE'"
     groups = uSelect(SQL);
     var result = groups.split('!!'); //We have 9 INTERNET_LEVEL groups, refresh them all
     for (var i=0; i<result.length; i++) {
          dynamic_group = result<i>;
          // Manually set the date into the past (picked the date I wrote this script, as it doesn't matter how far in the past)
          var sql2 = "update MXI_VALUES set Modifytime = '2010-10-15 00:00:00.000' where MSKEY = " + dynamic_group + " and Attr_ID = 33";
          var resultUpdate = '' + sqlClass.uUpdate(sql2);
          recalc = uIS_ResolveDynamicGroup(dynamic_group);
          if (recalc.indexOf("ERROR")>0) {
               uError("Recalculating " + uIS_GetValue(dynamic_group, uGetIDStore(), "MSKEYVALUE"));
               uError(recalc);
          } else {
               uWarning("Recalculating " + uIS_GetValue(dynamic_group, uGetIDStore(), "MSKEYVALUE") + ' ' + recalc);
You'll note we have our own function to allow us to run database updates in Javascript, which is required for this to work, since uSelect() won't perform updates. Anyway, doing that solves the problem. I guess you could do the same thing if you just made a To Database pass that runs before this and does these changes.
If you pick up any other tips or tricks on dealing with Dynamic Groups, let me know, as we use them fairly extensively and still find them somewhat frustrating at times.

DIP synchronization from Domino LDAP to OID

Hi,
has anyone tried using DIP to synchronize users and groups from Lotus Domino LDAP to OID?
There is a connector available with OIM, but since I don't need provisioning was hoping to get away without extra OIM infrastructure. (I will use OIM if I have to).
My attempts are still in the early stage, and wanted to make sure I was going down the right road.
Using 10.1.4.3 OID, creating an import connector using the import openLDAP template.
Looks like I can get the mapping down and a manual bootstrap does work.
1) Can I adapt elements of the OIM adapter to work within the DIP connector?
2) Domino seems to store groups at the root DSE. The DIP connector does not accept empty or "" as a source domain to search for the groups. It needs that the source groups be stored in a container. Anyone run into this type of thing? Is there something to enter into the DIP connector config that will allow using the ROOT DSE of the target as search source?
3) When I enable the connector, Synchronization delivers a success status. Reconcile is errored and unsuccessful. Can I get by with only synchronization working?
4) Going outside of Oracle here...but is anyone aware if Lotus Domino LDAP maintains a changelog? Or does it use modify timestamps as attributes of users/groups?
5) In the eventuality that I need to write a custom agent for Domino or custom 'Reader' or reconcile agent. Has anyone done this or have sample code to look at? Even if not for Domino, but custom for other LDAP?
Thanks

it's either DIP via LDAP or OIM connector via Lotus Java API. I'd go with LDAP...if DIP doesn't work, it's pretty simple to write a script to export records and then import them into OID. There are a lot of LDAP utilities, google is your friend.

Unable to load TIF images into Photoshop.

CS4 (11.0.2) and Windows 7 Home Edition.
Have developed a problem trying to load some TIF images into Photoshop. I have a large number of images archived over a decade or more. At this point it may some of the older files that exhibit the problem. Now all these files were edited and stored using the Photoshop versions during the complete time period. The files are always saved with no compression. Have tried to load from Photoshop and clicking on the file in a file list. Photoshop just hangs and I get the message Program not responding. I can take these same files and load them into the ROXIO photo editor with no problem. Stranger yet is if I simply load the file into the ROXIO editor then "save as" back into the same folder (overwrite) the file can then be brought into Photoshop with no problem! Any ideas?

Noel,
Will try to keep short.
I reinstalled Photoshop CS4 from the cd CS set. Did not uninstall first. Restarted PC and Photoshop. Still failed the same way with a 3001 image.
Did the following, changing one item in the Edit->Preference->GPU Setting. After each change, closed Photoshop, reopened, brought in 3001 image, restored original setting. 3001 failed each time.
* Unchecked Enable OpenGL Drawing
* Advanced setup: Unchecked Advanced Drawing.
* Advanced setup: Unchecked Color Matching
Next went to the Edit->Color Profile.
Scanned thru options and saw in the Convert Options: Engine. It was set to Adobe (ACE). ACE was the module name in the error detail!
Only other option for this is Microsoft ICM. Changed to that, close/open Photoshop and 3001 came in no problem. So did the Nikon 3000, srgb IEC 61922 2.1 and Untagged. However, when briging in an Adobe RGB(1998) image Photoshop notes Profile Mismatch. It allows me to decide what to do (use embedded profile instead of workspace; convert color to work space color; discard embedded profile. and I choose use the convert color and it loads ok. At least it loads the image! Will use this approach for now. I need to get educated on color profiles!!
Joe

DIP fails loading dynamic groups into OID

Similar Messages

Maybe you are looking for