NCM Dynamic Groups

We are currently runing CiscoWorks Network Compliance Manager 1.3.SP2 (Build 4755-070308) and our dynamic groups are limited by 10 "Search  Criteria" and because some of the devices dont follow the same naming standard and NCM is case sensitive I am having issues getting all the correct devices into the correct groups.  Is there a way to use linux grep commands to add devices to groups?  I see NCM has a command line but it does not appear to allow any type of grep or regular expression commands.

Hey josephenix, it sounds like you have a very reasonable need and use.  Be aware that dynamic groups do require higher CPU resources because of the need to process conditional logic on the device inventory.  I would think that having 10 conditional rules puts you at the extreme case.
I can appreciate your need to have the inventory dynamically updated as multiple users are adding/changing things.  However, you might be negatively impacting normal use with your current process.
I might suggest this...
Using the method I described earlier, connect to the NCM proxy and issue a 'list device" - this will get you a list of all devices in inventory - put this into an array.  Iterate over the array and send each into a query for the NCM proxy with command "list groups -type device -host $DEVICENAME" - this will show you the device groups the device is in - this can go into another array.  You can use your Linux grep commands to determine if it's in the right group.  Then use the 'add device to group' command we discussed earlier, if it isn't in the right group.
You could automate/cron this to run once every 2 hours or so.  This would allow you to programmatically map devices to static device groups and get the benefits of performance with that, but still allow you some flexibility in dynamic naming...
I hope that helps!

Similar Messages

  • Use Granfeldts Create Object to create dynamic groups

    Trying to use Sorens Granfeldts, Create Object WF activity to create dynamic groups.
    In a standard function evaluator activity I generate the Filter as [//WorkflowData/Filter]
    The "string" I set it to is:
    <Filter xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" Dialect="http://schemas.microsoft.com/2006/11/XPathFilterDialect" xmlns="http://schemas.xmlsoap.org/ws/2004/09/enumeration">/Person[ObjectID
    = /*[ObjectID = '8dfcb5e8-ff01-400c-8ca7-2a0002d2d2d4']/ComputedMember]</Filter>
    In the CreateObject activity I then just have [//WorkflowData/Filter],Filter among the initial values.
    The creation works if I remove this attribute so the rest of the attributes seems to be working.
    The creation fails however end I get the error below in the Forefront Identity Manager event log.
    System.NullReferenceException: Object reference not set to an instance of an object.
       at Microsoft.ResourceManagement.WFActivities.Resolver.GetDisplayStringFromGuid(Guid id, String[] expansionAttributes)
       at Microsoft.ResourceManagement.WFActivities.Resolver.ReplaceGuidWithTemplatedString(Match m)
       at System.Text.RegularExpressions.RegexReplacement.Replace(MatchEvaluator evaluator, Regex regex, String input, Int32 count, Int32 startat)
       at System.Text.RegularExpressions.Regex.Replace(String input, MatchEvaluator evaluator)
       at Microsoft.ResourceManagement.WFActivities.Resolver.GetStringAttributeValue(Object attribute)
       at Microsoft.ResourceManagement.WFActivities.Resolver.ResolveEvaluatorWithoutAntiXSS(String match, ResolverOptions resolveOptions)
       at Microsoft.ResourceManagement.WFActivities.Resolver.ResolveEvaluatorForWithAntiXSS(String match, ResolverOptions resolveOptions)
       at Microsoft.ResourceManagement.WFActivities.Resolver.ReplaceMatches(String input, Boolean useAntiXssEncoding, ResolverOptions resolveOptions)
       at Microsoft.ResourceManagement.Workflow.Hosting.ResolverEvaluationServiceImpl.ResolveLookupGrammar(Guid requestId, Guid targetId, Guid actorId, Dictionary`2 workflowDictionary, Boolean encodeForHTML, String expression)
       at Microsoft.ResourceManagement.Workflow.Activities.ResolveGrammarActivity.Execute(ActivityExecutionContext executionContext)
       at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(T activity, ActivityExecutionContext executionContext)
       at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(Activity activity, ActivityExecutionContext executionContext)
       at System.Workflow.ComponentModel.ActivityExecutorOperation.Run(IWorkflowCoreRuntime workflowCoreRuntime)
       at System.Workflow.Runtime.Scheduler.Run()
    Have anyone used this WF activity to create dynamic groups and can tell how to set the Filter?

    Hey Kent!
    I did the same thing, with Søren`s Create Object WF. I did it like this on the filter part:
    <Filter xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" Dialect="http://schemas.microsoft.com/2006/11/XPathFilterDialect" xmlns="http://schemas.xmlsoap.org/ws/2004/09/enumeration">/Person[(Department = '[//Target/ObjectID]')]</Filter>,Filter
    The whole thing looks like this:
    (I use Function evaluator to generate a AccountName for groups based on a clean version of DisplayName).
    [//Target/DisplayName],DisplayName
    SEC_[//WorkFlowData/CleanAccountName],AccountName
    [//Target/Manager],Owner
    Security,Type
    DOMAIN_STRING,Domain
    Universal,Scope
    [//Target/DisplayName]_SecGroup,Description
    [//Target/Manager],DisplayedOwner
    None,MembershipAddWorkflow
    True,MembershipLocked
    [//Target/CleanAccountName],MailNickname
    <Filter xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" Dialect="http://schemas.microsoft.com/2006/11/XPathFilterDialect" xmlns="http://schemas.xmlsoap.org/ws/2004/09/enumeration">/Person[(Department = '[//Target/ObjectID]')]</Filter>,Filter
    Regards, Remi www.iamblogg.com

  • LMS 2.6 dynamic groups with wildcards

    Is is possible to build dynamic groups in RME using wildcards or regular expresions? The rules that I want to define would look similar to the following:
    Device.System.Name StartsWith "SW" AND (
    Device.System.Name contains "........X" OR
    Device.System.Name contains "........Y" OR
    Device.System.Name contains "........E" OR
    Device.System.Name contains "........Z")
    Where the device name begins with SW and there is either an X, Y, E or Z in the 8th position of the device name.

    This is not possible. The ruleset matching is based only on the operators available for the given property.
    The best workaround I can give you is to apply your first rule, then manually adjust the membership list based on the other rules. The downside of this is that the membership list would require modification when you add new devices.

  • DIP fails loading dynamic groups into OID

    Hello,
    we're trying to load groups from OeBS into OID and associate them via dynamic groups feature with user records that was loaded earlier as follows:
    personid=18630,cn=dev,cn=hrsyncusers,cn=users,dc=ic,dc=lan
    orcltimezone=Asia/Yekaterinburg
    displayname=NOT ASCII
    employeetype=NOT ASCII
    givenname=NOT ASCII
    postalcode=628484
    orcldateofbirth=19610404000000
    orclgender=F
    departmentnumber=342
    uid=18630
    mail=HRNULL
    cn=NOT ASCII
    initials=NOT ASCII
    street=NOT ASCII
    employeenumber=4824
    middlename=NOT ASCII
    l=NOT ASCII
    orclhiredate=20051107000000
    sn=NOT ASCII
    personid=18630
    c=Russia
    title=NOT ASCII
    objectclass=inetorgperson
    objectclass=person
    objectclass=organizationalperson
    objectclass=orcluserv2
    objectclass=kapitalperson
    objectclass=country
    objectclass=residentialperson
    objectclass=locality
    objectclass=top
    Among other attributes each user entity has 'departmentNumber' that indicates number of his/her department.
    Now trying to load list of departments as dynamic groups with the following config
    files:
    *** DevHRAgentGroups.cfg ***
    [SELECT]
    SELECT psv.version_number
    , pos.name hierarchyname
    , hou.organization_id depno
    , poe.organization_id_parent parent_id
    , REPLACE(hou2.name, '"') parentname
    , poe.organization_id_child child_id
    , REPLACE(hou.name, '"') orgname
    , ldap://idm01.ic.lan:389/cn=DEV,cn=HRSyncUsers,cn=Users,dc=ic,dc=lan??sub?(depar
    tmentnumber='||hou.organization_id||')' ldapuri
    , hrl.meaning org_type
    FROM per_organization_structures pos
    , per_org_structure_versions psv
    , per_org_structure_elements poe
    , hr_all_organization_units hou
    , hr_all_organization_units hou2
    , hr_lookups hrl
    WHERE pos.business_group_id = psv.business_group_id
    AND pos.organization_structure_id = psv.organization_structure_id
    AND pos.primary_structure_flag = 'Y'
    AND psv.date_to IS NULL
    AND poe.org_structure_version_id = psv.org_structure_version_id
    AND poe.business_group_id = hou.business_group_id
    AND poe.organization_id_child = hou.organization_id
    AND poe.business_group_id = hou2.business_group_id
    AND poe.organization_id_parent = hou2.organization_id
    AND hrl.lookup_code = hou.type
    AND hrl.enabled_flag = 'Y'
    AND hrl.lookup_type = 'ORG_TYPE'
    AND hrl.lookup_code NOT IN (30,40)
    AND TRUNC(SYSDATE) BETWEEN hou.date_from AND NVL(hou.date_to, TO_DATE('31.12.4712','dd.mm.yyyy'))
    AND hou.last_update_date >= to_date(:BINDVAR,'YYYYMMDDHH24MISS')
    *** DevHRAgentGroups.map ***
    DomainRules
    NONLDAP:cn=DEV,cn=HRSyncGroups,cn=Groups,dc=ic,dc=lan:departmentID=%,cn=DEV,cn=HRSyncGroups,cn=Groups,dc=ic,dc=lan
    AttributeRules
    orgname:1: : :cn: :groupOfUniqueNames
    depno:1: : :departmentID: :kapitalDepartment
    ldapuri: : : :labeledURI: :orclDynamicGroup
    We're getting the following error in ?/ldap/odi/log/DevHRAgentGroups.trc during HRAgent execution at mapping phase:
    Normalized DN : departmentid=82,cn=dev,cn=hrsyncgroups,cn=groups,dc=ic,dc=lan
    Changetype is 5
    Processing modifyRadd Operation ..
    Entry Not Found. Converting to an ADD op..
    Processing Insert Operation ..
    Performing createEntry..
    Exception creating Entry : javax.naming.NamingException: [LDAP: error code 1 - Dynamic group cache update failed.]; remaining name 'departmentid=82,cn=dev,cn=
    hrsyncgroups,cn=groups,dc=ic,dc=lan'
    [LDAP: error code 1 - Dynamic group cache update failed.]
    javax.naming.NamingException: [LDAP: error code 1 - Dynamic group cache update failed.]; remaining name 'departmentid=82,cn=dev,cn=hrsyncgroups,cn=groups,dc=i
    c,dc=lan'
    at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3028)
    at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2934)
    at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2740)
    at com.sun.jndi.ldap.LdapCtx.c_createSubcontext(LdapCtx.java:777)
    at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_createSubcontext(ComponentDirContext.java:319)
    at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.createSubcontext(PartialCompositeDirContext.java:248)
    at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.createSubcontext(PartialCompositeDirContext.java:236)
    at javax.naming.directory.InitialDirContext.createSubcontext(InitialDirContext.java:176)
    at oracle.ldap.odip.gsi.LDAPWriter.createEntry(LDAPWriter.java:1162)
    at oracle.ldap.odip.gsi.LDAPWriter.insert(LDAPWriter.java:425)
    at oracle.ldap.odip.gsi.LDAPWriter.modifyRadd(LDAPWriter.java:822)
    at oracle.ldap.odip.gsi.LDAPWriter.writeChanges(LDAPWriter.java:349)
    at oracle.ldap.odip.engine.AgentThread.mapExecute(AgentThread.java:655)
    at oracle.ldap.odip.engine.AgentThread.execMapping(AgentThread.java:376)
    at oracle.ldap.odip.engine.AgentThread.run(AgentThread.java:237)
    DIP_LDAPWRITER_ERROR_CREATE
    Error in executing mapping DIP_LDAPWRITER_ERROR_CREATE
    DIP_LDAPWRITER_ERROR_CREATE
    Please, note. Loading is successful if we commenting out mapping line for labeledURI attribute (that's loading static groups).
    Loading is also successful when labeledURI is mapped to
    'ldap://idm01.ic.lan:389/cn=DEV,cn=HRSyncUsers,cn=Users,dc=ic,dc=lan??sub?(objec
    tclass=person)' but this definetly is not what we are going to get.
    I don't have ideas what's wrong for example with the following generated 'labeledURI' attribute:
    ldap://idm01.ic.lan:389/cn=DEV,cn=HRSyncUsers,cn=Users,dc=ic,dc=lan??sub?(departmentnumber=82)
    Any help is appreciated
    Thanks,
    Edward

    Hi Frank,
    there is something wrong with departmentnumber attribute of user records. Searching users with ldapsearch using "departmentnumber=*" filter fails with the following error:
    ldap_search: DSA is unwilling to perform
    ldap_search: additional info: Function Not Implemented
    I think this is probably the cause of failing creation of dynamic groups.
    Searching on other user attributes (cn, uid, employyenumber) works fine.
    Still don't understand what's wrong with this particular attribute.

  • SQL Query for members of dynamic group - Need to include Name, Path and Type

    Hello,
    I built a custom dynamic group that has all my SQL databases in it using SCOM 2012 SP1.  The group works fine as I can see the Name(ie, Database name), Health State, Path (ie, hostname/instance) and Types (ie; SQL 2005).  Now I'm trying to
    build a custom report based off this same information using a SQL query.   I'm no DBA and could use some help.  So far this is what i have
    use
    select
    SourceObjectDisplayName as
    'Group Name',
    TargetObjectDisplayName,TargetObjectPath
    from RelationshipGenericView
    where isDeleted=0
    AND SourceObjectDisplayName
    like
    'SQL_Databases_All'
    ORDERBY TargetObjectDisplayName
    This gets me the Group Name (which i really don't care about), database name, and hostname/instance. What I am missing is the Health State and most importantly the Type (ie, SQL Server 2005 DB, SQL Server 2008DB).
    If someone could assist me here I would appreciate it. I believe I need to do some type of INNER JOIN but have no idea where the SQL type info lives or the proper structure to use. Thanks
    OperationsManager

    Here's the updated Query for OpsMan 2012 R2:
    To find all members of a given group (change the group name below):
    select SourceObjectDisplayName as 'Group Name', TargetObjectDisplayName as 'Group Members' 
    from RelationshipGenericView 
    where isDeleted=0 
    AND SourceObjectDisplayName = 'Agent Managed Computer
    Group' 
    ORDER BY TargetObjectDisplayName

  • LDAP Dynamic Groups

    Hi,
    I have been trying to do some coding around - fetching members of dynamic ldap groups. In both these code snippets.. I get the same exception:
    java.lang.ClassCastException: com.sun.jndi.ldap.LdapCtx
    no matter whatever i tried. Can anyone please - let me know what could be causing this exception.
    Regards.
    String filter = LDAPRealm.DYNAMIC_GROUP_FILTER;
              String[] targets = new String[] { target, "memberUrl" };
              try {
                   SearchControls ctls = new SearchControls();
                   ctls.setReturningAttributes(targets);
                   ctls.setSearchScope(SearchControls.SUBTREE_SCOPE);
                   ctls.setReturningObjFlag(true);
                   NamingEnumeration e = context.search(baseDN, filter, ctls);
                   while(e.hasMore()) {
                        SearchResult res = (SearchResult)e.next();
                        Object searchedObject = res.getObject();
                        //if(searchedObject instanceof com.sun.jndi.ldap.obj.GroupOfURLs){ // dynamic group
                             com.sun.jndi.ldap.obj.GroupOfURLs gurls = (com.sun.jndi.ldap.obj.GroupOfURLs) searchedObject;
                             Principal x500principal = new X500Principal(userDN);
                             if (gurls.isMember(x500principal)) {
    and
    java.security.acl.Group obj = (java.security.acl.Group)ctx.lookup(groupDN);
                   Enumeration members = obj.members();
                   Principal member = null;
                   while (members.hasMoreElements()) {
                        member = (Principal)members.nextElement();
                        memberDNs.add(member.getName());
                   }

    How is this different from [your previous question|http://forums.sun.com/thread.jspa?threadID=5434523&messageID=10965220#10965220]? If it is the same queston, then please stay in the same thread.

  • Dynamic group membership Query based on alert description - IS package failed

    Hi there all good people,
    Ive got the following case:
    i need to filter out some of the alerts raised bij the is package failed Alert rule.
    All allerts raised need a override accept two alerts with a specific description. example:
    Alert description: Package "Full Back-Up" failed.  should still raise an alert also the
    Alert description: Package "Full Db Back-Up" failed.
    I.m playing arround with dynamic groups. Can somebody give me some pointers?
    Or do i need to create an new alert rule? en override this one for all objects?
    I hope the question is clear, im no native english speaking

    Hi,
    I would like to suggest you override this one for all objects and then create a new alert rule based on your requirement.
    Regards,
    Yan Li
    Regards, Yan Li

  • Dynamic group for HSW object based on Site (Gateway) server

    Hi
    Using the SiteName parameter when deploying gateway servers like described in the blog post from Cameron Fuller
    http://blogs.catapultsystems.com/cfuller/archive/2015/02/12/creating-dynamic-groups-for-objects-which-exist-behind-a-gateway-in-opsmgr-part-1.aspx
    I would like to create an aditional dynamic Group with all Health Service Watcher objects related to an Site (Autocreate) Group.
    Any ideas on the XML Query or other ways of duing this?

    Yes I know this one, but the SiteName Group is not in my MP.
    So I need to reference the XML to a Group outside of my own MP.
    Like:
    http://blogs.technet.com/b/kevinholman/archive/2014/04/09/creating-groups-of-health-service-watcher-objects-based-on-other-groups.aspx
    But with the '<MonitoringClass>$MPElement[Name="grouptest.compgroup"]$</MonitoringClass>'
    Line pointing to a autocreated SiteName Group.

  • Using dynamic groups for j2ee security

    Hi all,
    I have my realm setup in server.xml and my standard and sun-specific deployment descriptors setup for j2ee security.
    Everything seems to work fine for groups defined via uniquemember attributes (all users are specified), but I'm having trouble with dynamic groups (defined with the memberurl attribute)
    How do I configure my realm in my server.xml to get this working?

    Hi,
    I got an official answer from SUN.
    "Dynamic Groups" are not (longer) supported with SJS AS 7!
    It will probably be supported with SJS AS 8 SE.
    If you have a iPlanet 6.5 application that is running with dynamic groups, just wait a little bit before you migrate.

  • Dynamic Group members error

    I create 5 Dynamic Group and 1 Universal Distribution Group. I add 5 Dynamic Group in 1 Universal Distribution Group. If i view members in every all correct, but if i run in powershell Get-DynamicDistributionGroup/Get-Recipient -recipientPreviewFilter
    - i view all users in domain with mailbox. How fix this?

    Hi,
    Do you mean that you can use EAC to view members in 5 dynamic distribution groups respectively and the preview shows correct users, but shows wrong when using EMS?
    Please use the following command in EMS to preview the list of members of your dynamic distribution group:
    To view Group1:
    $Group1 = Get-DynamicDistributionGroup "Group1"
    Get-Recipient -RecipientPreviewFilter $Group1.RecipientFilter
    To view Group2:
    $Group2 = Get-DynamicDistributionGroup "Group2"
    Get-Recipient -RecipientPreviewFilter $Group2.RecipientFilter
    Please check the results with the preview in EAC:
    1. In the EAC, navigate to Recipients > Groups.
    2. Select a dynamic distribution group.
    3. In the details pane under Membership, the number of people who received the last message sent to the dynamic distribution group is displayed.
    Regards,
    Winnie Liang
    TechNet Community Support

  • Dynamic groups

    Folks,
    Dynamic groups do not work in my add event window in calendar. I can search and select the group but nothing is done. I have run a search with the search filter from the group and it works as expected.
    keith

    Hi Rob,
    I've been told by engineering that Dynamic Groups aren't supported by ZESM. A reference to this will be added into the known issues section.
    Sorry for the delay,
    Daniel
    >>>
    From: rbannerman<[email protected]>
    To:novell.support.zenworks.endpoint-security-management
    Date: 2/26/2010 5:46 PM
    Subject: Dynamic Groups
    Hi,
    I have setup a couple of dynamic groups as I wanted to setup security
    policy based on employee title. I assigned and published the policy but
    the published icon only appears next to the dynamic group. I did test
    and the policy is not applies to users.
    Does endpoint 4.1 work with dynamic group and if so what do I need to
    do to make work?
    Rob
    rbannerman
    rbannerman's Profile: http://forums.novell.com/member.php?userid=10471
    View this thread: http://forums.novell.com/showthread.php?t=403159

  • Dynamically group records by date

    I am attempting to create a report that will dynamically group records into a set number of date buckets.  This is similar to grouping records by a date field and setting the days, weeks, months, etc property but instead of grouping by a set time span I want to a specific number of date groups regardless of date span.  So say i have records where the first date is today at 1am and the last record is today at 9 pm.  I want the data grouped into 10 groups and the time calculated for that group based on total time span / 10.  The first group would be 1AM to 3AM, the second would group 3AM to 5AM, etc..  The reason I am doing this is for a chart that displays record counts over time but the overall timespan will never be known until runtime.  Setting the chart for hourly or weekly doesn't work because if the user runs the report over a year the dates will be illegible.
    Thanks in advance!

    Well this SHOULD be easy. But leave it to CR make not...
    You can start by finding the minimum & maximum dates within your range:
    Local DateTimeVar MinDate;
    MinDate := Minimum({Table.DateField})
    and
    Local DateTimeVar MaxDate;
    MaxDate := Maximum({Person.ModifiedDate})
    Then figure out what the the interval would be if the span is broken down into 10 equal parts"
    DateDiff("n", {@MinDate}, {@MaxDate}) / 10
    From there just use a formula to segregate each records into the appropriate groups:
    EvaluateAfter({@Interval});
    IF {Table.DateField} >= {@MinDate}
        AND {Table.DateField} <= DateAdd("n",{@Interval}, {@MinDate}) THEN 1 ELSE
    IF {Table.DateField} > DateAdd("n",{@Interval}, {@MinDate})
        AND {Table.DateField} <= DateAdd("n",{@Interval} * 2, {@MinDate}) THEN 2 ELSE
    IF {Table.DateField} > DateAdd("n",{@Interval} * 2, {@MinDate})
        AND {Table.DateField} <= DateAdd("n",{@Interval} * 3, {@MinDate}) THEN 3 ELSE
    IF{Table.DateField} > DateAdd("n",{@Interval} * 3, {@MinDate})
        AND{Table.DateField} <= DateAdd("n",{@Interval} * 4, {@MinDate}) THEN 4 ELSE
    IF {Table.DateField} > DateAdd("n",{@Interval} * 4, {@MinDate})
        AND {Table.DateField} <= DateAdd("n",{@Interval} * 5, {@MinDate}) THEN 5 ELSE
    IF {Table.DateField} > DateAdd("n",{@Interval} * 5, {@MinDate})
        AND {Table.DateField} <= DateAdd("n",{@Interval} * 6, {@MinDate}) THEN 6 ELSE
    IF {Table.DateField} > DateAdd("n",{@Interval} * 6, {@MinDate})
        AND {Table.DateField} <= DateAdd("n",{@Interval} * 7, {@MinDate}) THEN 7 ELSE
    IF {Table.DateField} > DateAdd("n",{@Interval} * 7, {@MinDate})
        AND{Table.DateField} <= DateAdd("n",{@Interval} * 8, {@MinDate}) THEN 8 ELSE
    IF {Table.DateField} > DateAdd("n",{@Interval} * 8, {@MinDate})
        AND {Table.DateField} <= DateAdd("n",{@Interval} * 9, {@MinDate}) THEN 9 ELSE
    IF {Table.DateField} > DateAdd("n",{@Interval} * 9, {@MinDate})
        AND {Table.DateField}  <= {@MaxDate} THEN 10
    This is where CR drops the ball... IMHO... it WON'T allow you to to group by a formula field that uses an aggregate in the formula (in this case Minimum & Maximum)... It will however allow to to graph on it, which I assume is what you are actually trying to do.  If anyone knows a way to work around the grouping issue, I'd love to know it myself.
    HTH,
    Jason

  • Using Dynamic Groups in Ldap for Accounts and Roles

    Does anyone currently use dynamic groups in LDAP for accounts and roles? I have set up a dynamic group in ldap (we are using OID Oracle internet Directory 10.1.2.0) , ldapsearch returns the correct list of unique names, but the account does not appear on my profile page when I log in to UCM (10.1.3). I cannot find any documentation so I'm asking myself if it is supported .....

    Thanks tim ... will check, but Oracle are saying :
    Oracle Universal Content Management - Version: 7.5.1
    Information in this document applies to any platform.
    Product: Content Server
    Version: 6.0
    Goal
    Can the Content Server's LDAP provider support, or can it be configured to support, dynamic LDAP groups?
    Solution
    The Content Server by itself is unable to process dynamic LDAP groups since the filter that is used cannot read dynamic groups. However, dynamic groups can still work in the Content Server if the permissions for the queried user are generated on the LDAP server side. For example: Novell and Active Directory both have this functionality.
    to which I have replied you suport 3rd party ldaps, but not your own? Shurely shome mishtake ..... if ldap search works in a seamless way, surely provider should too ....
    Billy, you may well be right, just got a cashflow problem over here !

  • Dynamic Groups in OAM

    Hi,
    Can we configure dynamic gruops in OAM, if yes, please let me know the steps to perform it.
    I have created a workflow for dynamic groups, but after doing dat, when i try to create a group, is says "You dont have permissions to perform this action".
    Thanks in advance
    Rashi

    Yes, you can create dynamic groups through OAM.
    Whatever your structural group objectclass (typically groupOfUniqueNames), OAM will allow you to create objects of this type via Group Manager Create Group Workflow.
    My suggestion, based on your post, is to first confirm that you can create a workflow that will allow you to create a simple groupOfUniqueNames object. Sounds like your workflow was not enabled or you were not a valid participant in the initiate step.
    To reach your goal, you need to configure Group Type Panels (poorly documented today). This allows you to define other 'types' of groups based on the inclusion of auxiliary objectclasses.
    Create two group type panels: Call the first one BASIC GROUPS and associate it with the groupOfUniqueNames structural objectclass. Create a second group type panel and call it Advanced Groups and associate with oblixAdvancedGroup auxiliary objectclass.
    With these configured, proceed to define a Create Group workflow. As you do, you will notice a change to the user interface to include a checkbox for 'Advanced Groups' (which comes from the name you gave your group type panel). Checking this before proceeding into the workflow applet has the effect of giving you access to the attributes of the oblixAdvancedGroup class. This is where you find the oblixDynamicFilter and other useful attributes.
    Use Group Type Panels to provide appropriate inclusion for any other aux classes that you require to build the type of group object that you need.
    I hope that is enough to get you going in the right direction.
    Cheers,
    Mark

  • Dynamic Group Resolution Limit?

    We recently created a few dynamic groups to assign certain roles and access automatically. I have it set up to resolve these groups via a script that runs at the end of a maintenance job.
    The issue we encountered upon our initial load was that it would only add 1000 users at a time via the script. Is there a setting somewhere in the console that puts this limit in place?
    Alternatively, I tried to resolve the group from the group properties themselves. This also failed as it gave me a time out message; however it would not allow me to retry because a process to resolve the group was already running! Has anyone encountered this and found a way to terminate that process?
    I was just wondering if anyone else had encountered these issues and how they resolved them.
    Thanks,
    Jared

    Yes, on the initial load, they will only load 1000 at a time. We ran into this problem too (had one group of 12,000 people) but just ran it 13 times using Right Click -> Recalculate.
    When they crash or deadlock, they will claim to still be running for a long time. This is because of the way they do locking:
    1) When the recalculation starts, it chcecks the ModifyTime column on the attribute "MX_DG_AUTORESOLVE_INTERVAL" for that Dynamic Group. If it is in the past, it continues to step two, otherwise it aborts with the error saying it is already running.
    2) It sets the ModifyTime on that attribute to a future date (I forget how long exactly, but we're talking about DAYS in the future).
    3) It does the calculations.
    4) It sets the ModifyTime to the time it finished.
    So, you see the problem -- when it crashes, the time remains far in the future.
    You mentioned you run the update from a script, and that is what we do too. There is supposed to be a way to trigger the calculation based on an Attribute Change, but the feature does not work as documented in the manual. Frustrating...
    Anyway, this is how I get around the issue in our script:
    function recalcInternetGroups(Par){
         uSleep(10000); //Give any previous attempts at least 10 seconds to finish resolving
         importPackage(Packages.com.valero.idm);
         var sqlClass = new SQLServerConnection();
         var SQL = "Select MSKEY FROM dbo.MXIV_SENTRIES WHERE searchvalue LIKE 'INTERNET_LEVEL_%' AND attrname = 'MSKEYVALUE'"
         groups = uSelect(SQL);
         var result = groups.split('!!');  //We have 9 INTERNET_LEVEL groups, refresh them all
         for (var i=0; i<result.length; i++) {
              dynamic_group = result<i>;
              // Manually set the date into the past (picked the date I wrote this script, as it doesn't matter how far in the past)
              var sql2 = "update MXI_VALUES set Modifytime = '2010-10-15 00:00:00.000' where MSKEY = " + dynamic_group + " and Attr_ID = 33";
              var resultUpdate = '' + sqlClass.uUpdate(sql2);
              recalc = uIS_ResolveDynamicGroup(dynamic_group);
              if (recalc.indexOf("ERROR")>0) {
                   uError("Recalculating " + uIS_GetValue(dynamic_group, uGetIDStore(), "MSKEYVALUE"));
                   uError(recalc);
              } else {
                   uWarning("Recalculating " + uIS_GetValue(dynamic_group, uGetIDStore(), "MSKEYVALUE") + ' ' + recalc);
    You'll note we have our own function to allow us to run database updates in Javascript, which is required for this to work, since uSelect() won't perform updates. Anyway, doing that solves the problem. I guess you could do the same thing if you just made a To Database pass that runs before this and does these changes.
    If you pick up any other tips or tricks on dealing with Dynamic Groups, let me know, as we use them fairly extensively and still find them somewhat frustrating at times.

Maybe you are looking for

  • How do i transfer an itunes account from my old computer to another computer which already has an itunes account registered to someone else

    how do i transfer an itunes account from one computer to another which already has another account on it which is registered with someone else

  • Epson R2400 'Filter' failed error after 10.8.2 Update

    After the recent 10.8.2 update my Epson R2400 printer fails when printing with a 'Filter' failed error. Everything was working normally beforehand (10.8). I've rebooted printer. I've removed and installed printer in the control panel. I can get the p

  • Conditional Lookups in MDM?

    I'm an MDM newbie, just learning my way around, trying to figure out how I will be able to make MDM work with the data landscape we have around here. My question today is, is it possible to have what I will call a "conditional" lookup for a field?  T

  • NLS in BI

    Hi, We are currently looking to put in a bit of a ILCM to our BI system. We are on BW 7.0 and currently have no archiving in place. The main issue we would have when archiving is still being able to report on the data that is archived, and for this I

  • Programatically read of a PDF

    I have created a form using Adobe LiveCycle Designer for capturing user input. This form will be distrubuted to end users who will open using Acrobat Reader, enter the values and save it. My requirement is to read these PDFs programatically and extra