User Access- EP must allow user to login only once

Hi,
I have requirement similar to yahoo messanger.
In yahoo messanger you can only login with single user id only once. i.e if you try to login once again with the same user id in yahoo messanger it will noe allow to login.
the same functionality i need in EP.
user must login into EP with single user ID only once.
how can we do this??
please provide some documentation or steps on this
regards
srinivas

Sri,
It sounds like you need a custom logon module. There is no configuration that can be done in the portal to make this happen in the ume. Here is a starting point for customizing the login module...
http://help.sap.com/saphelp_nw70/helpdata/en/3f/1be040e136742ae10000000a155106/frameset.htm
One way it could be done is:
1. Set up a an LDAP for your users
2. Create a custom login module to authenticate the user credentials in the LDAP, then in the login module after a successful authentication, lock the account.
Regards,
Tom

Similar Messages

Viewing swf from HTML- user can view only once

Hi,
I have my swf files which are getting called in browser when user opens its corresponding page.
To ensure my swf is not used by user for his other purposes, i had to strict it to view from HTML page which has a variable. Same variable is passed from swf to this HTML.
if both variables does match then only swf starts preloading. this works fine for first time.
But when user open the same page second time, he is only able to view preloader which does not progress further.
When i delete my temp file then user is again able to view the swf only once.
Can anyone tell me;
1. what is reason the swf from temp file cannot access variable of its HTML
2. am I doing it wrongly?
3. do i need to clear cache everytime or their is another method to do it?
Thanks.

hello following is the code used;
import flash.text.TextField;
import flash.events.ProgressEvent;
import flash.events.Event;
import flash.display.MovieClip;
//////////STAGE PROPERTIES//////////
stage.showDefaultContextMenu = false;
this.tabChildren = false;
Mouse.cursor = "arrow";
//////////CALL & SET VARIABLES//////////
var Progress_txt:TextField = new TextField();
var theFlashVar:String;
var ver:String;
var paramObj:Object = LoaderInfo(this.root.loaderInfo).parameters;
for (ver in paramObj)
                theFlashVar = String(paramObj[ver]);
//////////START USER VERIFICATION//////////
checkFlashvar();
//////////HTML VERIFICATION//////////
function checkFlashvar():void
                //trace("CHECKING Flash VAR");
                if (theFlashVar=="mystring01")
                                InternalPreloader();
                                //trace("pass var found");
                                //InternalPreloader();
                else
                                //trace("VAR NOT FOUND");
                                gotoLocalVar();
//////////LOCAL VERIFICATION//////////
function gotoLocalVar():void
//////////LOAD LOCAL DATA//////////
                var keyLoader:URLLoader = new URLLoader();
                keyLoader.dataFormat = URLLoaderDataFormat.VARIABLES;
                keyLoader.addEventListener(Event.COMPLETE, chkLocalVar);
//////////CHECK ERRORS//////////
                keyLoader.addEventListener(IOErrorEvent.IO_ERROR, onLoadError);
                keyLoader.load(new URLRequest("C:/code.txt"));
//////////CHECK LOCALLY LOADED DATA//////////
                function chkLocalVar(event:Event):void
                                if (keyLoader.data.passKey == "mycode")
                                                //trace("pass key found");
                                                play();
                                else
                                                //trace("Local VAR NOT FOUND");
                                                stop();
                                                parent.removeChild(root);
//////////LOCAL FILE ERROR HANDELLING//////////
function onLoadError(evt:IOErrorEvent):void
                //trace("TXT FILE NOT FOUND");
                stop();
                parent.removeChild(root);
//////////INITIATE PRELOADER STATUS//////////
stop();
function InternalPreloader():void
                stop();
                Progress_txt.x = 400;
                Progress_txt.y = 300;
                addChild(Progress_txt);
                //trace("load progress event");
//////////CHECK PRELOADER STATUS//////////
                if (this.loaderInfo.bytesLoaded == this.loaderInfo.bytesTotal)
                                //trace("checking if condition");
                                finishedLoading();
                else
                                progressLoading();
//////////PRELOADER PROGRESS EVENT LISTENERS//////////
function progressLoading():void
                //trace("progrss loading is running");
                this.loaderInfo.addEventListener(ProgressEvent.PROGRESS,onProgress);
                this.loaderInfo.addEventListener(Event.COMPLETE, onComplete);
//////////PRELOADER PROGRESS STATUS UPDATE//////////
function onProgress(p:ProgressEvent):void
                Progress_txt.text = String(Math.floor((p.bytesLoaded/p.bytesTotal)*100))+ "%";
                preloader_mc.bar_mc.scaleX = (p.bytesLoaded/p.bytesTotal);
                //trace("checking progress");
//////////PRELOADER STATUS COMPLETE-REMOVE LISTENERS//////////
function onComplete(d:Event):void
                //trace("Fully loaded, starting the movie.");
                play();
                //removing unnecessary listeners
                removeChild(Progress_txt);
                loaderInfo.removeEventListener(ProgressEvent.PROGRESS, onProgress);
                loaderInfo.removeEventListener(Event.COMPLETE, onComplete);
//////////PRELOADER STATUS 100% (LOCAL CONDITION)//////////
function finishedLoading():void
                //trace("loading completed");
                removeChild(Progress_txt);
                play();

Allowing clear-text logins for multiple users

I'm not sure if this is the correct section to place this question in, so Mods, please move if needed.
As many know, Apple changed the AFP Client defaults in 10.5.x so that clear-text logins to servers are disallowed by default. You can edit the afpcleartextallow option in ~/Library/Preferences/com.apple.AppleShareClient.plist to enable it on a per user basis.
What I wish to know is wether it's possible to allow clear-text logins on a global basis. I've looked at /Library/Preferences/com.apple.AppleShareClient.plist and it does not contain the afpcleartextallow option, and adding the option and setting it to "yes" (without editing the file in the user's preference folder) does not allow clear-text logins.
Is there some global preference file that this option could be added to that would preclude me from having to edit the preference file for every user? Part of the reason it's a problem is if you have multiple user accounts on multiple machines, or network based home folders stored on an AFP server that only supports clear text, for example, a Netware 6.5 server running NFA for Mac.
One problem I've seen is that until the user is actually at the desktop (well I think it's specifically when the Finder loads and reads the per-user preferences) the OS will prevent clear-text logins, regardless of the setting in the pref file, thus you cannot automatically mount volumes at login if the server only supports clear-text.
Any suggestions or advice greatly welcomed.

If you are familiar with the exchange man shell, use the new-mailboxsearch powershell cmdlet in your code. You can pass it a list of -SourceMailboxes(use get-content to pass your .txt to a variable, you'll want to place each name on a new line) to
search on/set the in place hold.. Here is the technet material on new-mailboxsearch.
http://technet.microsoft.com/en-us/library/dd298064(v=exchg.150).aspx

How can I restrict Lion to only allow certain network users to login when bound to an Active Directory?

Hi,
I'm trying to find a way to configure which network users can login to a lab of iMacs running 10.7.4. They're being deployed using DeployStudio, and the Macs are bound to an MS Active Directory by a script that runs as part of the workflow. I'd like to have another script run after the AD binding to permit only users in certain AD groups to be able login to them.
I'm halfway there, in that using dseditgroup I can easily add AD groups or individual users to the relevant group (deseditgroup -o edit -a <domain\\group name> -t group com.apple.loginwindow.netaccounts. After running this I can see the desired groups added to the list in Sys Prefs -> Users & Groups -> Login Options -> Options. However, membership of this group is deemed irrelevant by the fact the radio button above this list for 'Allow these users to log in at login window' is still set to 'All network users' and not 'Only these network users'.
Does anyone know of a way to enable the 'Only these network users' option via the Terminal/a shell script?
Thanks,
Chris

I tried that, thinking it was exactly what I wanted, but it still sends stuff as SMS (green bubble).

Allow network users to login at login window option missing

I hope someone can shed some light on this.
I have bound a 10.6.2 machine to a Windows 2003 domain successfully. However, the checkbox to "allow network users to login at login window" is missing completely. There's a blank space. I've looked at a few other machines that haven't been joined to the domain and the option is missing from there as well.
Am I missing something simple? Did I miss something during the OS install? This is a fresh 10.6.2 install.
Any help would be greatly appreciated as this is keeping us from allowing domain users to log on. Thanks in advance.

I installed ADmitMac and the option shows up. I removed it and the option goes away. There's obviously a flag being set somewhere. Any thoughts?

Hi all... My user ID is Keychain Access won't allow me to access my information in my Keychain. I can't seem to fix it. What do I need to do? I don't really know how to explain it but I can access all the other keychains just not my user account

Hi all...
My user ID is Keychain Access won't allow me to access my information in my Keychain. I can't seem to fix it. What do I need to do? I don't really know how to explain it but I can access all the other keychains just not my user account keychain. Can this be fixed?
Thanks!

That is correct... I know the Admin password but the password for my keychain is not correct and I can't seem to remember what the last password would have been. Any ideas how to reset it? Maybe delete and recreate? I know I may lose some info. Thanks!

Suddenly user account login requested, but was newer created (OS X 10.5.6), how to get access again

suddenly user account login requested, but was newer created (OS X 10.5.6), how to get access again?

No account ever created, or what?
If not 1.6 Server, then...
Reset OS X Password Without an OS X CD...
http://theappleblog.com/2008/06/22/reset-os-x-password-without-an-os-x-cd/
Admin Hack...
http://www.hackmac.org/?q=node/4
Starts up like the first time you buy a new Mac, but after filling in all that info again, you should have access to the computer and the other Users & files will still be there... give the new User a different name than an existing one.
http://www.macyourself.com/2009/08/03/how-to-reset-your-mac-os-x-password-withou t-an-installer-disc/

How to create a os user and allow user to login as sysoper in open suse-10g

we create a os user and db user with same name and tried to login as sysoper but the new os user can not able to login as sysoper.. can u plz help me??
sudo /usr/sbin/useradd testdba -p XXXXXX
sudo /usr/sbin/usermod -g oinstall -G oper testdba
user: oracle as sysdba
SQL> show parameter os_au
os_authent_prefix string ops$
remote_os_authent boolean FALSE
create user ops$testdba identified by xxxxx;
grant connect,sysoper to ops$testdba;
when i login as testdba
sqlplus "/as sysoper"
SQL*Plus: Release 10.2.0.1.0 - Production on Fri Jan 29 08:10:12 2010
Copyright (c) 1982, 2005, Oracle. All rights reserved.
ERROR:
ORA-09925: Unable to create audit trail file
Linux Error: 13: Permission denied
Additional information: 9925
ORA-01031: insufficient privileges
there is plenty of disk space in systems.. can u help me how to enable a os user to login as sysoper but not sysdba!
Can u help me please thanks in advance.

knowledgespring wrote:
we create a os user and db user with same name and tried to login as sysoper but the new os user can not able to login as sysoper.. can u plz help me??
sudo /usr/sbin/useradd testdba -p XXXXXX
sudo /usr/sbin/usermod -g oinstall -G oper testdba
user: oracle as sysdba
SQL> show parameter os_au
os_authent_prefix string ops$
remote_os_authent boolean FALSE
create user ops$testdba identified by xxxxx;
grant connect,sysoper to ops$testdba;
when i login as testdba
sqlplus "/as sysoper"
SQL*Plus: Release 10.2.0.1.0 - Production on Fri Jan 29 08:10:12 2010
Copyright (c) 1982, 2005, Oracle. All rights reserved.
ERROR:
ORA-09925: Unable to create audit trail file
Linux Error: 13: Permission denied
Additional information: 9925
ORA-01031: insufficient privileges
there is plenty of disk space in systems.. can u help me how to enable a os user to login as sysoper but not sysdba!
Can u help me please thanks in advance.
SQL> !oerr ora 09925
09925, 00000, "Unable to create audit trail file"
// *Cause: ORACLE was not able to create the file being used to hold
// audit trail records.
// *Action: Check the UNIX error number for a possible operating system error.// If there is no error, contact ORACLE customer support.And the next error message is saying clearly that there is a permission error so check whether you have proper permissions to that folder where you audit dump is supposed to get created.
HTH
Aman....

A Mac running Snow Leopard (10.6.8) will no longer allow AD users to login whether they are already cached or never logged on before. Login box just shakes?

Some updates ran the day before the issue started occuring. However as stated above AD/Mobile users cannot login whether they are cached or new to the system.

http://www.apple.com/support/appleid/
http://support.apple.com/kb/HT1922
https://discussions.apple.com/community/mobileme/mobileme_on_my_mac
http://support.apple.com/kb/HT4758
www.apple.com/support/mobileme

Is it possible to force the user to login again when using oauth 2 (implicit grant)

Hi,
I'm trying to build an application based on a rest webservice in APEX which is being accessed by a javascript frontend via ORDS. I'm using the "Implicit grant" flow of OAUTH 2.
When the user is finished with the application, he/she should be able to logout of the application, so another user can login (on the same machine and browser). But, without clearing all cookies, ORDS will automatically give an access token for the previous user, without showing the login screen to allow/deby access to the rest web service.
(Clearing the cookies is not possible via javascript, since they are httponly)
I know it is not the "normal" way to use oauth2, but I would like to be able to log-out a user. So how can I force ORDS to show the loginscreen again to give another user the possibility to login?
Alexander

You can force the implicit code flow to prompt the user to sign in by including _auth_=force in the approval request query string. To follow the example shown in the developer guide [1]
change:
https://server:port/ords/resteasy/oauth2/auth?response_type=token&client_id=CLIENT_IDENTIFIER&state=STATE
to:
https://server:port/ords/resteasy/oauth2/auth?response_type=token&client_id=CLIENT_IDENTIFIER&state=STATE&_auth_=force
[1]: REST Data Services Developers Guide

Unable to login network user from login windom. SSH login ok.

I have a MacOS 10.6 client and ldap network users server by MacOS 10.4 Server. Trying to login via the login window I get "Logging in..." which tries forever (or until I reboot).
* SSH login works fine with network users.
* Local users can login.
* Network access is allowed by all users (Preferences->Login)
* Removing ~/Library/ from the network user doesn't work.
Logging in via SSH while the login screen is hanging I get:
[mikael@melba ~]$ ps -Umikael
PID TTY TIME CMD
330 ?? 0:00.03 /sbin/launchd
480 ?? 0:00.02 /System/Library/CoreServices/CCacheServer.app/Contents
693 ?? 0:00.00 /usr/sbin/sshd -i
694 ttys000 0:00.12 -bash
730 ttys000 0:00.00 ps -Umikael
Any ideas?

I cannot create the mobile account (real username replaced here with '<username>'). This is true whether I run the command as root or as the user in question (via ssh):
root# /System/Library/CoreServices/ManagedClient.app/Contents/Resources/createmobilea ccount -n <username>
createmobileaccount built Jul 23 2009 22:14:42
2009-10-05 15:54:41.906 createmobileaccount[41973:903] MCXCCacheMCXRecordAndGraph(): [localNode createRecordWithRecordType:(null) name:"<username>"] == 4100 (Unable to create record <username> in /Local/Default.)
2009-10-05 15:54:41.908 createmobileaccount[41973:903] MCXCCreateMobileAccount(): Failed to create account. Error = 4100 (MCXCCacheMCXRecordAndGraph failed). Cleaning up mobile account record.
2009-10-05 15:54:41.909 createmobileaccount[41973:903] MCXCDeleteAccount(): Trying to delete user id = 0
* mobile account could not be created: 4100 (Unable to create record <username> in /Local/Default.)
Directory services and DNS are set manually.
Message was edited by: BerkeleyAstroBill

Restrict AD users from login sharepoint?

Dear all,
I have setup User Profile Sync with my AD for particular AD group "Sharepoint Users" only. After the sync timer job run, I can see the user profiles built up. However, there is a user "outsider" not in "Sharepoint Users"
group is able to login Sharepoint. After he login his user profile is auto built in Sharepoint.
May I know is it default setting? If so how can I restrict only "Sharepoint Users" can login Sharepoint? Thanks.
Mark

Hi Mark,
This is by design. When a user logs in to SharePoint, SharePoint checks to see if this user has permissions in the current site (or list/item). If the user has permissions, he can log in to SharePoint, it doesn't matter if he has a user profile or not.
I think the user has permissions on the site he is trying to access. These can be permissions given to him directly, or he is member of a AD security group that allows him to access the site.
You can check this by going to Site Actions -> Site Settings -> Site Permissions. In the ribbon, click "Check Permissions". Enter the username for that user and you can see how the user is given permissions to the site.
Nico Martens - MCTS, MCITP
SharePoint 2010 Infrastructure Consultant / Trainer

OS X Server 10.6.4 - newly created user cannot login to server

As title.
Just turn on the mac mini server (mid-2010) and do some initial setup. It can access the internet. However, all users that I have created cannot log into the server! Only the one (admin account) that created during the 1st time server setup can login to the server. Anyone know why and what I have not setup properly?
New user during login take a while and no error message popup. The login window just acts like it can login but within a second, the login window "shaking" and prompt for me to login again. Watch below youtube video for more detail.
http://www.youtube.com/watch?v=K7wV3rVJK9c
Here are some information hope can help...
1. My mac mini server connect behind a router.
2. No special setting for the DNS / Open directory. Just use the system default.
3. When open "Server Admin", it shown "mac.local" at the upper left hand side.
Message was edited by: rayzine2

rayzine2
After the Server Setup Assistant has finished and by default the Service Access Control Lists (SACLs) denies access to everyone apart from the default admin account. It does this when SSH is enabled. It's one of the options at the bottom of the dialog box you used to create the default administrator account. To turn this off launch Server Admin, select the Server name in the sidebar > Access.
You should be configuring client workstations to allow network users to log in to rather than the server. Read the documentation:
http://support.apple.com/manuals/#serversandenterprisesoftware
Tony

Priventing WLS user from login into OBIEE 11g

I have 100+ users in Weblogic. Only some users say 60 are allowed to access OBIEE 11g.
How do I prevent other users from login into OBIEE (When they have OBIEE url :) ).
Thanks,
Mod

Hello,
You can put those 60 users in a group say OBIEE_Users and use this group in All Users Filter in WLS.
User Base DN : DC=CORP,DC=NET
All user Filter : (&(memberof=CN=OBIEE_Users,OU=BIUsers,DC=CORP,DC=NET)(cn=*)(objectclass=user))
User from name filter : (&(cn=%u)(objectclass=user))
Refer to this example on how its configured : http://paulcannon-bi.blogspot.com/2012/07/configuring-ldap-authentication-for.html
Hope this helps. Please mark if it does.
Thanks,
SVS

Is it possible to save System preference settings for every user that logins to a Mac OS X?

I work at a school and we have iMacs running Mavericks 10.9 in our environment. We have them binded to our Windows domain so that way students can use their own login to access the Macs. I have a number of System preference settings that I would like to take a effect, but I only see that these settings take effect for every user. So even if I login as the Main administrator account and set settings in System Preferences, such as not allowing the Wifi symbol to show, the next user that logins will still see the wifi symbol because the setting isn't taking effect for their System preferences. Does anyone know a way to get System Preference settings to take affect for every user that logins? Maybe a script?

Modifying the user template is not supported. You can Google for people who have done it in the past. I would recommend going to official route, if possible. Here are a couple of training documents. I'm sure there is more available though more official channels.
http://training.apple.com/pdf/wp_osx_configuration_profiles_ml.pdf
https://www.apple.com/education/docs/l521219b_osx_deployment_guide_030513.pdf
http://training.apple.com/pdf/wp_integrating_active_directory_mav.pdf

User Access- EP must allow user to login only once

Similar Messages

Maybe you are looking for