Issue with Reset Password from Active Directory Integration Pack

I seem to be having some issues with a subscription in the Reset Password activity from the Active Directory Integration Pack. The "User Password" field refuses to take a value from a subscription provided earlier in a Generate Random
Text activity. As you will see in the screenshot below, when the Reset Password activity runs, the User Password value is blank.
Any idea why this might be happening? It looks like a possible bug with the Active Directory Integration Pack.

Hi John,
I think this is not a bug, this should be by design because the password is a secure string. If you look for the Published data for Reset User Password activity at
http://technet.microsoft.com/en-us/library/hh553463.aspx it is not listed there as well.
If you need the the string (e.g. to send it via email) use the
data from the "Generate Random Text" Activity.
Regards,
Stefan
www.sc-orchestrator.eu ,
Blog sc-orchestrator.eu

Similar Messages

Link DN with information coming from active directory

I have setup a Unified CM and IM/presence server. The Unified CM server is connected to LDAP active directory to authenticate the users that login via the Cisco Jabber Windows client. I have configured CSFdevices for each user and created a DN which has the same number as the normal phone line number. The users logging in to the cisco jabber client appears well as reachable in to the client for the other user that are logged in. However when I try to call them (via the number that comes from active directory) this doesn't work. (busy number) When I type the number that I have configured as a DN I succeed to make a connection with a different user.
Any idea how to link the DN from the CSF softphone with the information that comes from Active directory.
Any help would be appreciated.

Forget about application dial rules mate, if you do desk phone control using Jabber, and you dial a person using that person's telephone attribute in AD, just put a translation pattern in place. That should work.
that way you can also use DNA for troubleshooting purposes.
Alternatively, you can populate the ipphone in AD and populate that with the extension that is configured on the phone/CSF device and alter the LDAP atrribute mappings in Presence (applications>cisco jabber>jabber settings). but this will not solve your problem if you use like iphones, ipads .
=============================
Please remember to rate useful posts, by clicking on the stars below.
=============================

Issue with resetting password on AD

Hi guys,
I have configured Access manager for authentication with ADS (active directory server) but with i reset the users password on ADS and try logging with the old password it still gets authenticated is this a bug in ADS? I faced the same issue when i used Jxplorer to connect to ADS.
Thanks
Shilu.

Guys i got it myself....:)
Microsoft Windows Server 2003 Service Pack 1 (SP1) modifies NTLM network authentication behavior. After you install Windows Server 2003 SP1, domain users can use their old password to access the network for one hour after the password is changed. Existing components that are designed to use Kerberos for authentication are not affected by this change.
How to change the lifetime period of an old password
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.
To change the lifetime period of an old password, add a DWORD entry that is named OldPasswordAllowedPeriod to the following registry subkey on a domain controller:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
To do this, follow these steps:
1.     Click Start, click Run, type regedit, and then click OK.
2.     Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
3.     On the Edit menu, point to New, and then click DWORD Value.
4.     Type OldPasswordAllowedPeriod as the name of the DWORD, and then press ENTER.
5.     Right-click OldPasswordAllowedPeriod, and then click Modify.
6.     In the Value data box, type the value in minutes that you want to use, and then click OK.
Note The lifetime period is set in minutes. If this registry value is not set, the default lifetime period for an old password is 60 minutes.
7.     Quit Registry Editor.

Issue with RMAN DUPLICATE FROM ACTIVE DATABASE....

Hi All,
Not sure if I should continue from a closed thread, so apologies, opening a new one..
I ran the following command:
DUPLICATE TARGET DATABASE TO ' AUX1"
from ACTIVE DATABASE
NOFILENAMECHECK:
So the copy went in fine...so I am confiused now....why when doing a recover, i get the below errors from output:
archived log for thread 1 with sequence 68346 is already on disk as file H:\ORAC
LE_ARCHIVE_LOGS\RBS1\ARCHIVELOG\2013_12_08\O1_MF_1_68346_ARCH_D-RBS_ID-295728924
5_S-68346_T-1_A-780292253_C1OQVOSU_.ARC
archived log for thread 1 with sequence 68347 is already on disk as file H:\ORAC
LE_ARCHIVE_LOGS\RBS1\ARCHIVELOG\2013_12_08\O1_MF_1_68347_ARCH_D-RBS_ID-295728924
5_S-68347_T-1_A-780292253_C3OQVOU1_.ARC
archived log for thread 1 with sequence 68348 is already on disk as file H:\ORAC
LE_ARCHIVE_LOGS\RBS1\ARCHIVELOG\2013_12_08\O1_MF_1_68348_ARCH_D-RBS_ID-295728924
5_S-68348_T-1_A-780292253_C4OQVOU6_.ARC
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
RMAN-03002: failure of Duplicate Db command at 12/08/2013 07:36:04
RMAN-03015: error occurred in stored script Memory Script
RMAN-06053: unable to perform media recovery because of missing log
RMAN-06025: no backup of archived log for thread 1 with sequence 64713 and start
ing SCN of 12728145997 found to restore
RMAN-06025: no backup of archived log for thread 1 with sequence 64712 and start
ing SCN of 12728133322 found to restore
RMAN-06025: no backup of archived log for thread 1 with sequence 64711 and start
ing SCN of 12728121403 found to restore
RMAN-06025: no backup of archived log for thread 1 with sequence 64709 and start
ing SCN of 12727730726 found to restore
RMAN-06025: no backup of archived log for thread 1 with sequence 64708 and start
ing SCN of 12727717143 found to restore
RMAN-06025: no backup of archived log for thread 1 with sequence 64707 and start
ing SCN of 12727701799 found to restore
RMAN-06025: no backup of archived log for thread 1 with sequence 64704 and start
ing SCN of 12726617917 found to restore
RMAN-06025: no backup of archived log for thread 1 with sequence 64703 and start
ing SCN of 12726605080 found to restore
RMAN-06025: no backup of archived log for thread 1 with sequence 64702 and start
No archivelogs were purged or backed up and the current logs were retained....so im somewhat confused....i am not restoring from backup but running active duplicate...
should I re-run the command with:
SET UNTIL SEQUENCE 64713 THREAD 1

This fails saying that "ORA-12528: TNS:listener: all appropriate instances are blocking new connections" which is quite normal given that the listener is havig a handle in BLOCKED state for this AUXDB as it is in NOMOUNT state.
Could you please help me on how to proceed?
One option can be to create the controlfile manually and mount the instance before doing the duplicate. I hope Rman can continue from there.
Another option is to go for backup based duplicate.
Is there any other way to go?
Provide static registration on AUXILIARY side for your auxiliary instance and try again.For example change listener.ora file as
SID_LIST_LISTENER =
(SID_LIST =
    (SID_DESC =
      (GLOBAL_DBNAME = AUXDB)
      (ORACLE_HOME = <your oracle home>)
      (SID_NAME = AUXDB)
LISTENER =
(DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP)(HOST = <auxiliary host/ip>)(PORT = 1521))
)And restart listener on auxiliary host then try again

Mac os x wiki server can't authenticate user password from active directory recently after we upgraded to windows 2008 server.

after upgraded to windows 2008 server, our mac os x wiki server can't authenticate user password anymore. How can I re-bind the wiki server to the AD again? thanks in advance.

Solved it by deleting the user and creating a new one with the same userID.
Maybe it occured because I marked the "user has to change password after first login" box when resetting the password but didn't yet allow him to do so in the webpages menu?!?

Appending a csv column exported from Active Directory

Hi Guys
We have a new access control system. The DB of the control system needs to be updated with new people from Active Directory. It has an import tool to this. I want to automate it to do it every hour. So I started writing a powershell script to export any
users that have changed in the last day. Here is what I have so far:
Get-ADUser -Filter * -Properties * | Where {$_.Modified -ge $(Get-Date).AddDays(-1)} | select rcscardcode | Export-Csv -path C:\Users\johncolfer\Desktop\TempStuff\Active-dir\export12.csv
So as you can see I have selected a property "rcscardcode". It is a custom attribute in AD. An example of 1 of these numbers in the exported csv file is "1141410511000000" I need to be able to change this number to "1141410511"
and all subsequent numbers in that column of the csv file. Is this possible?
Any help would be great.
Thanks
John

Still no joy:
I changed a property for a test account in AD which is a standard attribute. So I changed the "company" attribute to "987654321000000" in attribute editor. I then ran the following
Get-ADUser-Identitygoofy-Properties*|select
company|%{
$_.company=$_.company.Substring(0,10)
} |Export-Csv-pathC:\Users\johncolfer\Desktop\TempStuff\Active-dir\export1342.csv-NoType
It ran ok, but there was nothing in the exported CSV. I was hoping to see 1 column with a value of "987654321"

Integrating SAP ECC 6.0 with Microsoft Windows 2003 Active Directory

Hi Gurus,
We are planning to integrate our SAP ECC 6.0 with Microsoft Windows 2003 Active directory.
I have several questions on this:
1. Can i authenticate all the users from SAP
2. It is used only for user authentication or can it be also used for password authentication
ie user can login using his windows password?
3. While integration in SAP does a separate table or a field is created in database.
4.If a employee leaves a company than in SAP is it possible to lock & deactivate the user automatically.
Thanks in advance.
Regards,
Nihar

Hi Mastek,
You should be able to accomodate your needs with respect to integration of your AD accounts with SAP ECC ABAP. This can be done via LDAP connector configuration. The below has info on how to perfrom the configuration at a high level. You will have to integrate, and map certain user data. You may also want to do some LDAP Connector research:
[http://help.sap.com/saphelp_nw70/helpdata/en/10/1a063a15c611d4b61f0000e835363f/content.htm]
On the Java stack - you can also confugure UME to integrate/authenticate with AD:
[http://help.sap.com/saphelp_nw70ehp2/helpdata/en/12/7678123c96814bada2c8632d825443/content.htm]
Hope this helps!

Tutorial: Azure Active Directory integration with Igloo Software

Click reply and tell us what you think:
Tutorial: Azure Active Directory integration with Igloo Software
Markus Vilcinskas, Knowledge Engineer, Microsoft Corporation

Hello
Can you be little clear, what you have tested with Airwatch MDM cloud?.. which scenarios?..
1) Device Enrollment ?
2) Access to Airwatch console?
3) Access to Airwatch self service portal?
By following the steps We do not get it working at all. by the way some of the steps in this tutorial are unclear and outdated;
I finally personally figured out how things should look like, and make it work but only with Device Enrollment scenarios from the mobile devices itself. not from the pc and browsers or from the Access panel.

Active directory Integration with OBIEE

Hi all,
Can any one send me a link for active directory integration with OBIEE.
I have imported the users succesfully and I was able to login to analytics as an AD user.
But SSO is not possible. Kindly help me over this.
Thanks,
Haree.

Thanks for reply veeravalli.
Me too followed the same link and successfully imported all the users from AD into OBIEE and login in is also possible.
But my requirement is to have Single Sign On ie.., users may log on to their Windows PCs and access Oracle BI EE via a standard web browser with no further authentication required on their part.
Thanks,
Haree

Help with Active Directory Integration and kerberos

Hello,
Im encountering a bug preventing me to use Active Directory integration with kerberos :
Our domain name is CORP.DOMAIN.COM.
When we request the GC in this domain :
bash-3.00# nslookup -query=any gc.tcp.corp.domain.com
Server: 1.2.1.6
Address: 1.2.1.6#53
** server can't find gc.tcp.corp.domain.com: NXDOMAIN
there is no answer.
But when we request without corp, we find the servers :
bash-3.00# nslookup -query=any gc.tcp.domain.com | grep sis
gc.tcp.domain.com service = 0 100 3268 serveur02.corp.domain.com.
gc.tcp.domain.com service = 0 100 3268 serveur01.corp.domain.com.
bash-3.00#
Is-it possible to add the possibility to enter the domain name where reside the gc.tcp ?
Thank you.

Hello
the domain.com domain exist, but it's not our domain.
so, when I put domain.com, it search with no result (nothing appends).
our kdc.conf :
[kdcdefaults]
kdc_ports = 88,750
[realms]
CORP.DOMAIN.COM = {
profile = /etc/krb5/krb5.conf
database_name = /var/krb5/principal
admin_keytab = /etc/krb5/kadm5.keytab
acl_file = /etc/krb5/kadm5.acl
kadmind_port = 749
max_life = 8h 0m 0s
max_renewable_life = 7d 0h 0m 0s
default_principal_flags = +preauth
krb.conf
[libdefaults]
default_realm = CORP.DOMAIN.COM
default_checksum = rsa-md5
[realms]
CORP.DOMAIN.COM = {
kdc = dc01.corp.domain.com
kdc = dc02.corp.domain.com
[domain_realm]
.corp.domain.com = CORP.DOMAIN.COM
corp.domain.com = CORP.DOMAIN.COM
in every domain, I think the GC are in corp.domain.com. but in my company, it's in domain.com...
Thank you,

How to create an embedded link with VBScript that references user website from Active Directory?

I have scoured the web for days and have not been able to quite come up with exactly what I need for this. I have created an Outlook signature deployment using VBScript which sets information in an already formatted Word doc using placeholders. (Ex. [Displayname],
[Initial], [City])
All of that works as expected, but now marketing would like to have an embedded link reference some of our users personal web pages. So the link would display some kind of standard text like "Click Here". Once clicked on the user would be redirected
to the personal web page of the person who sent the email. My problem is, I have no idea how to get the hyperlink to pull in the information from Active Directory...another problem is I know only enough coding to be dangerous so I am stuck.
Here is a sample of what I am working with, I am hoping someone can point me in the right direction. Thanks!
'----- Connect to AD and get user info -----'
Set objSysInfo = CreateObject("ADSystemInfo")
Set WshShell = CreateObject("WScript.Shell")
strUser = objSysInfo.UserName
Set objUser = GetObject("LDAP://" & strUser)
strDisplayName = objUser.displayName
strFirstname = objUser.FirstName
strLastName = objUser.givenName
strInitials = objUser.initials
strName = objUser.FullName
strTitle = objUser.Title
strDescription = objUser.Description
strOffice = objUser.physicalDeliveryOfficeName
strCred = objUser.info
strPOBox = objUser.postOfficeBox
strStreet = objUser.StreetAddress
strCity = objUser.l
strPostCode = objUser.PostalCode
strPhone = objUser.TelephoneNumber
strMobile = objUser.Mobile
strFax = objUser.FacsimileTelephoneNumber
strEmail = objUser.mail
strWeb = objuser.wWWHomePage
'----- Apply any modifications to Active Directory fields -----
'Use company info page if user does not have a Linked-In account specified
if strweb = "" Then strweb = "http://www.linkedin.com/company/58654"
'----- Open Word template in read-only mode {..Open(filename,conversion,readonly)} -----
Set objWord = CreateObject("Word.Application")
Set objDoc = objWord.Documents.Open(strTemplatePath & strTemplateName,,True)
Set objEmailOptions = objWord.EmailOptions
Set objSignatureObject = objEmailOptions.EmailSignature
Set objSignatureEntries = objSignatureObject.EmailSignatureEntries
'----- Replace template text placeholders with user specific info -----
SearchAndRep "[DisplayName]", strDisplayName, objWord
SearchAndRep "[Name]", strName, objWord
SearchAndRep "[Description]", strDescription, objWord
SearchAndRep "[Title]", strTitle, objWord
SearchAndRep "[Street]", strStreet, objWord
SearchAndRep "[POBox]", strPOBox, objword
SearchAndRep "[City]", strCity, objWord
SearchAndRep "[State]", strState, objWord
SearchAndRep "[PostCode]", strPostCode, objWord
SearchAndRep "[Phone]", strPhone, objWord
SearchAndRep "[Mobile]", strMobile, objWord
SearchAndRep "[Fax]", strFax, objWord
SearchAndRep "[Email]", strEmail, objWord
'SearchAndRep "[Web]", strWeb, objWord
'----- Replace template hyperlink placeholders with user specific info -----
'SearchAndRepHyperlink "[email]", strWeb, objDoc
SearchAndRepHyperlink "[Web]", strWeb, objDoc
'----- Set signature in Outlook -----
Set objSelection = objDoc.Range()
objSignatureEntries.Add "NewCBSig", objSelection
objSignatureObject.NewMessageSignature = "NewCBSig"
'see note below if a different reply signature is desired
'objSignatureObject.ReplyMessageSignature = "Full Signature"
'----- Close signature template document -----
objDoc.Saved = TRUE
objDoc.Close
objWord.Quit

Can you ask a specific question? You have posted a script and noted you need a link but there is no question.
¯\_(ツ)_/¯

Can Microsoft active directory integrated with Oracle Applications

Hi,
Can anyone provide me any document on Microsoft Active Directory Integration with Oracle Applications(12.0.6)
Manish

Hi,
It is possible, please refer to the following documents for details.
Note: 376811.1 - Integrating Oracle E-Business Suite Release 12 with Oracle Internet Directory and Oracle Single Sign-On
Note: 415007.1 - Oracle Application Server with Oracle E-Business Suite Release 12 FAQ
Regards,
Hussein

How do I get info from Active Directory and use it in my web-applications?

I borrowed a nice piece of code for JNDI hits against Active Directory from this website: http://www.sbfsbo.com/mike/JndiTutorial/
I have altered it and am trying to use it to retrieve info from our Active Directory Server.
I altered it to point to my domain, and I want to retrieve a person's full name(CN), e-mail address and their work location.
I've looked at lots of examples, I've tried lots of things, but I'm really missing something. I'm new to Java, new to JNDI, new to LDAP, new to AD and new to Tomcat. Any help would be so appreciated.
Thanks,
To show you the code, and the error message, I've changed the actual names I used for connection.
What am I not coding right? I get an error message like this:
javax.naming.NameNotFoundException[LDAP error code 32 - 0000208D: nameErr DSID:03101c9 problem 2001 (no Object), data 0,best match of DC=mycomp, DC=isd, remaining name dc=mycomp, dc=isd
[code]
import java.util.Hashtable;
import java.util.Enumeration;
import javax.naming.*;
import javax.naming.directory.*;
public class JNDISearch2 {
// initial context implementation
public static String INITCTX = "com.sun.jndi.ldap.LdapCtxFactory";
public static String MY_HOST = "ldap://99.999.9.9:389/dc=mycomp,dc=isd";
public static String MGR_DN = "CN=connectionID,OU=CO,dc=mycomp,dc=isd";
public static String MGR_PW = "connectionPassword";
public static String MY_SEARCHBASE = "dc=mycomp,dc=isd";
public static String MY_FILTER =
"(&(objectClass=user)(sAMAccountName=usersignonname))";
// Specify which attributes we are looking for
public static String MY_ATTRS[] =
{ "cn", "telephoneNumber", "postalAddress", "mail" };
public static void main(String args[]) {
try { //----------------------------------------------------------
// Binding
// Hashtable for environmental information
Hashtable env = new Hashtable();
// Specify which class to use for our JNDI Provider
env.put(Context.INITIAL_CONTEXT_FACTORY, INITCTX);
// Specify the host and port to use for directory service
env.put(Context.PROVIDER_URL, MY_HOST);
// Security Information
env.put(Context.SECURITY_AUTHENTICATION, "simple");
env.put(Context.SECURITY_PRINCIPAL, MGR_DN);
env.put(Context.SECURITY_CREDENTIALS, MGR_PW);
// Get a reference toa directory context
DirContext ctx = new InitialDirContext(env);
// Begin search
// Specify the scope of the search
SearchControls constraints = new SearchControls();
constraints.setSearchScope(SearchControls.SUBTREE_SCOPE);
// Perform the actual search
// We give it a searchbase, a filter and the constraints
// containing the scope of the search
NamingEnumeration results = ctx.search(MY_SEARCHBASE, MY_FILTER, constraints);
// Now step through the search results
while (results != null && results.hasMore()) {
SearchResult sr = (SearchResult) results.next();
String dn = sr.getName() + ", " + MY_SEARCHBASE;
System.out.println("Distinguished Name is " + dn);
// Code for displaying attribute list
Attributes ar = ctx.getAttributes(dn, MY_ATTRS);
if (ar == null)
// Has no attributes
System.out.println("Entry " + dn);
System.out.println(" has none of the specified attributes\n");
else // Has some attributes
// Determine the attributes in this record.
for (int i = 0; i < MY_ATTRS.length; i++) {
Attribute attr = ar.get(MY_ATTRS);
if (attr != null) {
System.out.println(MY_ATTRS[i] + ":");
// Gather all values for the specified attribute.
for (Enumeration vals = attr.getAll(); vals.hasMoreElements();) {
System.out.println("\t" + vals.nextElement());
// System.out.println ("\n");
// End search
} // end try
catch (Exception e) {
e.printStackTrace();
System.exit(1);
My JNDIRealm in Tomcat which actually does the initial authentication looks like this:(again, for security purposes, I've changed the access names and passwords, etc.)
<Realm className="org.apache.catalina.realm.JNDIRealm" debug="99"
connectionURL="ldap://99.999.9.9:389"
connectionName="CN=connectionId,OU=CO,dc=mycomp,dc=isd"
connectionPassword="connectionPassword"
referrals="follow"
userBase="dc=mycomp,dc=isd"
userSearch="(&(sAMAccountName={0})(objectClass=user))"
userSubtree="true"
roleBase="dc=mycomp, dc=isd"
roleSearch="(uniqueMember={0})"
rolename="cn"
/>
I'd be so grateful for any help.
Any suggestions about using the data from Active directory in web-application.
Thanks.
R.Vaughn

By this time you probably have already solved this, but I think the problem is that the Search Base is relative to the attachment point specified with the PROVIDER_URL. Since you already specified "DC=mycomp,DC=isd" in that location, you merely want to set the search base to "". The error message is trying to tell you that it could only find half of the "DC=mycomp, DC=isd, DC=mycomp, DC=isd" that you specified for the search base.
Hope that helps someone.
Ken Gartner
Quadrasis, Inc (We Unify Security, www -dot- quadrasis -dot- com)

User profiles from Active directory when loggedin then userdisplay, useredit shows blank white screen in SharePoint 2013

User profiles from Active directory when loggedin then userdisplay, useredit shows blank white screen in SharePoint 2013
I can login with the these AD users and AD direct import is working just fine. We are not using UPS.
With admin user when I click on the user it shows up proper data. But when I login with the same user it does not show me userdisplay/useredit and shows blank data. Also another strange thing is when I add new item in list with these AD users created by
modified by is blank and its really strange. I checked user information list, tried to rerun user sync with direct AD import option but no success.
MCTS Sharepoint 2010, MCAD dotnet, MCPDEA, SharePoint Lead

Hi Amit,
According to your description, my understanding is that the page is blank when the use accessed /_layouts/15/userdisp.aspx and the created by field was blank when the user created a new list item in SharePoint 2013.
I tested the same scenario per your post, however I cannot reproduce your issue.
For troubleshooting this issue, I recommend to verify the things below:
Check the permission of the user in the corresponding site collection to see if he can access /_layouts/15/userdisp.aspx.
Delete the user from AD and SharePoint, then re-add the user to AD and grant proper permission to the user in SharePoint to see if the issue still occurs.
Did this issue occur with all the users? Add a new user in AD and test the same scenario.
Best regards.
Thanks
Victoria Xia
TechNet Community Support

HT2623 how do i delete icloud account on my ipad when my apple ID is non active email and i don't know the password and can't reset password without active email

how do i delete icloud account on my ipad when my apple ID is non active email and i don't know the password and can't reset password without active email

If the iCloud account you are trying to delete is old ID that was later updated to change it to your current ID, you can go to https://appleid.apple.com, click Manage my Apple ID and sign in with your current iCloud ID. Click edit next to the primary email account, change it back to your old email address and save the change. Then edit the name of the account to change it back to your old email address. You can now use your current password to turn off Find My iPhone on your device, even though it prompts you for the password for your old account ID. Then go to Settings>iCloud, tap Delete Account and choose Delete from My iDevice when prompted (your iCloud data will still be in iCloud). Next, go back to https://appleid.apple.com and change your primary email address and iCloud ID name back to the way it was. Now, if desired, you can go to Settings>iCloud and sign in with your current iCloud ID and password.

Issue with Reset Password from Active Directory Integration Pack

Similar Messages

Maybe you are looking for