10.4 SA OpenDirectory archive misses some users

I am migrating services from an Xserve G5 running 10.4.11 to an Intel Xserve running 10.5.6.
To move all users and groups from the G5 to the Intel, I've decided to backup the LDAP data and move it over, since I wanted to keep the passwords intact.
I archived the LDAP database on the old server using ServerAdmin's Archive feature. Then moved the sparseimage to the new server. Finally I used the Archive feature on the new server to load the LDAP data.
I opened up WGM and it all seemed to be fine until I noticed the total number of users at the bottom of the window. I was missing three users. I went back to the old server to check and they were there. I did a filter on the WGM and could not find the missing users. I looked up the users on the new server using the Directory.app to no avail.
What makes this happen? How do I migrate the missing users while keeping the passwords?

I've found out more technical info about this problem at AFP548.
http://www.afp548.com/article.php?story=20050615173039158
Apparently in LDAP speak, records missing the sn attribute will not import into LDAP databases on servers newer than 10.4. I'm guessing sn is the surname entry under the Information tab for each user in WGM. The sn attribute was introduced to the Mac OS X server LDAP schema in 10.3.9.
That's was it! The 10.4 server that I'm working on started out as a 10.3 server. The sn attribute was added for all existing users to the LDAP database when I incrementally upgraded the OS to 10.3.9. But I had a template in WGM that I used to create new users that did not have the sn attribute. So any new users created using this template after the upgrade to 10.3.9, and even after the upgrade to 10.4, would be missing the sn attribute.

Similar Messages

OpenDirectory Archive Missing Element

I have attempted to follow the instructions to migrate my OpenDirectory configuration from a 10.4.11 server to a new Snow Leopard Server. On the 10.4.11 server, using Workgroup Manager, I had added a JobTitle ldap element for each of my users using the "Inspector" tab. When I import the archived file into my Snow Leopard Server it seems to be missing the JobTitle element. Is there something I need to do when I make my archive to make sure it gets everything including elements I had added manually? I'd rather not have to enter job titles for over 200 employees again.
Thanks in advance.

Hi,
Some query elements that might be common would've got transported. Hence, even though the affected query was not transported some the elements it has might have been as part of the other query transports.
Best way to prevent this happening, is to have a robust P2P (Promote to Production ) process, don't have users transport the queries and also develop them. Check for possible conflicts like these.
Cheers,
Kedar

Value Maps for Collections in Archiver missing some fields

Hi all,
I'm using Archiver and I need to map some of my folder metadata like the profile trigger but when I'm at the "Edit Value Maps" to map the old value to the new value for this field I find that the field I want is missing (in fact all fields that start with ColMeta. are missing.. something tells me these are the fields that are custom).
It does not let me do a custom query either! is there any way I can get this to work?
This field does appear for Content tho, it's just for folder/project metadata.
I'm looking into doing a "Field Map" from ColMeta.xProfileTrigger to some field available and then use that field for the value map but I'm not sure of the implications this will have in the field I choose since those others are fields used for something else and I don't want my mapping going to that other field.
Thanks for any help,
malky

Well nevermind I solved it, but I'll say how in case someone has the same problem:
Just create the archive with any field, then go and replace that field with the one you want everywhere in the archive.hda file.
If someone has a more elegant or better way to do this I'd like to hear it for future reference.
Cheers,

"Missing signed entry in resource" for only some users

Hi,
I have recently updated my .jnlp file and .jar file and added some extra jar resources in the new jnlp.
Since this new version, some users receive an error saying
"Missing signed entry in resource:" for one particular resource.
While for other users it works fine.
I have signed the jar with jarsigner.
Does anyone have an idea what could be the problem here?
Thanks very much in advance,
Best regards,
Stein Aerts,
University of Leuven, Belgium

I remember hearing something like this, and had to do with :
1.) what version of jarsigner was used to sign the jar, and
2.) what version of JRE was used to validate the signed jar file on the client.
(including US only vs. International version of JRE)
For the jar that gets this error:
Does it have any empty directories in it., or does it have entries with non-english characters in the resource names ?
What version of the JDK was used to run jarsigner to sign this jar, and what jre is the application running on ?

Missing Monitor Task: Some users can see, some cannot

We have a task in the monitor that came up missing in February 2009. We do not know if it was accidently deleted and sent with a transport we recently sent or if it has been missing for a while and noticed until February 2009 was closed. The task is still in all previous periods/years. It was added back in February 2009 and we thought successfully transported. We now have some users who can see the task and others who cannot. One user cannot see it in February 2009, but in all periods going forward. We do not have any authorizations by task and this task has been in the monitor for 4 years.

Have the users that cannot see the task refresh the monitor to see if that helps.
In the configuration for the task, with the parameters set to the version period and year (Feb. 2009), make certain that the consolidation frequency is up-to-date as well as the method assignments. I have experienced the method assignment missing when there are several different consolidation frequencies in play.

OID can not display some users - java.lang.ArrayIndexOutOfBoundsException:0

We have set up AD to OID synchronization for users and groups using Import connector, and it worked fine. The users in OID can log into applications protected by OAM. But recently I found that some users that could be displayed in OID before can not be displayed now. If I click on the DN in Oracle Directory Manager, a error window pops up. It is a long error message, and the first a few lines are as follows :
0
java.lang.ArrayIndexOutOfBoundsException:0
at oracle.ldap.admin.AttrOptions.<init>(entry.jave:3151)
at Oracle.ldap.admin.Entry.getProp(entry.java:457)
I don't see any error message in the integration profile or log files. I am testing things on an account that is having this trouble, and the strange thing is that it can not log into application protected by OAM any more, but it can log into OAM console.
We use OID 10.1.2.3 on Windows, and OAM 10.1.4.0.1.
I searched in Metalink but didn't find anything helpful. Any help is appreciated. Thanks for your time.
Hailie

Pramod,
Thank you for your reply. Please see below my answers to your questions:
-> Do you see any pattern in the users (DN) that are unable to be displayed/login?
Yes I do see some pattern. There is one change on the problem user's dn - the "\" after the last name is gone.
Before: cn=smith\, john, cn=users,dc=abc,dc=com
Now: cn=smith, john, cn=users,dc=abc,dc=com
However I check in Active directory "\" is presented. In OID if I right click on cn=smith, john and try to delete it, I got a error message "LDAP: error code 34 - Error in DN Normalization". Is that caused by the missing of "\"?
-> Does ldapsearch on these users (with all attributes) show something (special chars, etc)?
ldapsearch on cn=cn=smith, john,cn=users,dc=abc,dc=com returns no objects:
$ldapsearch -L -D "cn=orcladmin" -w "*****" -h host -p 389 -b "cn=smith, john,cn=users,dc=abc,dc=com" -s sub "objectclass=*"
ldap_search: No such object
ldap_search: matched: cn=Users, dc=abc,dc=com
Ldap search on cn=smith\, john,cn=users,dc=abc,dc=com:
$ldapsearch -L -D "cn=orcladmin" -w "*****" -h host -p 389 -b "cn=smith\, john,cn=users,dc=abc,dc=com" -s sub "objectclass=*"
dn: cn="smith, john",cn=users,dc=abc,dc=com
uid: [email protected]
employeenumber: 916963
cn: smith, john
registeredaddress: 512
krbprincipalname: [email protected]
orclsamaccountname: ABC.COM$JSmith
sn: johnsmith
displayname: John
orclobjectguid: lJO0N+8H4UW/30yHukSfsw==
orclobjectsid: AQUAAAAAAAUVAAAAohxTYWIV3XFeP55cYjwAAA==
orcluserprincipalname: [email protected]
objectclass: oblixorgperson
objectclass: inetorgperson
objectclass: orcluserv2
objectclass: person
objectclass: orcladuser
objectclass: organizationalPerson
objectclass: top
obver: 10.1.4.0
-> Do you see the same behavior when you use any generic LDAP browser (Ex: Apache Directory Studio) instead of ODM?
I don't have Apache Directory Studio installed yet. I will try that later.
-> Does the changelog for the particular synch (for the affected users) show something?
Here is what I found in ActiveChgImp.aud
(weeks ago)
97426524 : Success : MODIFY : cn=smith\, john,cn=users,dc=abc,dc=com
(Recently change - The back slach after smith was gone, and "" showed up)
97469970 : Success : MODIFY : cn="smith, john",cn=users,dc=abc,dc=com
-> If login to OAM is possible, can the user modify his/her profile, and does it save the changes? If it does, can you try logging in to apps?
This user can log into OAM identity system, but when I click on "My profile" under "User manager", I got a error message "You do not have sufficient access rights".
If I log into identity system as orcladmin, I was able to modify it and save the changes. But in OID the user is still not displayed. Same error message. When I tried to add it as administrator, I could search on it, add it, but when I press "done", it didn't show up on the admin list. The users that can be displayed in OID can be added to admin list without a problem.
Thanks,
Hailie

No Data in Report for some users in Discoverer Viewer

Hi we have some users for discoverer reports .The report show data to Admin user. But if the same report is run through any other user id , it displays 'No data is available'. the report is shared to the user, Proper grants on the table is given and also the user is given access to Business Area. It has been an issue only from last week before that it was working fine . There was a data dump taken from the database last week , would that be an issue ? not sure what DBA has done ..The same report is able to run through the user logins in Discoverer desktop tool .The issue is only when accessed via Discsoverer viewer
Edited by: 801473 on Oct 11, 2010 4:59 AM

HI Preetham,
You can take a look at the selection and identification you have made in the multiprovider definition. Most of the cases of a multiprovider report not fetching any data relates to missing identifications of base chars.
For testing purpose also try to include the the InfoProvider in your query so that you can see what data somes from which base cube.
Hope this helps...

Has anyone encountered problem with VIRSA_CC_ACTUSAGE missing some data?

Has anyone encountered a problem where the VIRSA_CC_ACTUSAGE table is missing some transaction activity?
We have a situation where the monthly ST03 file shows that a user executed the MI31 transaction some time back in August. However our ACTUSAGE table does not show this user performing MI31 for any day in August.
It does have records of other people using MI31 in August. It also has records of this same user performing other transactions in August. It even has records showing other transactions this same user performed in August.
This is now an issue with our external Auditors.
We are on GRC 5.3 SP 13.
Thanks.

Hi Bob,
VIRSA_CC_ACTUSAGE holds information on the transactions executed by users and it gets the data from STAD. Did you notice the time user has spent in the MI31 transaction code (I know even if the user hasn't spent more time, it should be recorded), but this another step to isolate the issue.Also, check SM21 logs on that specific day, and see if there are any events registered during that time related to STAD. I think it was not able to collect the data.
Also, check VIRSA_CC_ALTCDLOG. This is the Alter log table that stores information of ACTUSAGE. The purge utility will only delete the data from the ACTUSAGE, but it remains in the ALTCDLOG.
Refer to SAP Note 1512020 for additional details on the Alert files.
Hope this helps!!
BR,
Raghu

Workitem exists in SAP Inbox But does not appear in UWL for some users

Hi,
We have a peculiar problem with a standard workflow. This workflow is working fine in SAP Inbox and UWL in portal for most of the users. But sometimes, it does not send workitem to UWL for some users.
Any input of as why this happens?

Hi All,
I had experienced this type of problem as well, just to share it could be that the Identity of the Portal user misses a role which can be solved by any user assigning the identity in their identity management or it could also be the connection status of the UWL to the backend, there should be at least two connection statuses for workflow items to get into the UWL I could not recall it but I would post it here once I have the access to our system again.
Cheers,

My solution to missing main user/admin acct...

Well, here's how I fixed my missing main user (me)/admin account.
After doing an *Archive & Install*, I was quite surprised to see that my account was not transferred. My wife's and sons' accounts were there, but nothing else. Logged into my wife's account, but her account was Standard and my sons' account was Managed. So, I couldn't download the two updates. But I did see that my "old" Home folder was still in the Previous Systems' Users folder. So, I moved it back into the "new" Users folder.
First off, I was unable to use Single User Mode (Command-S). It booted into Single User mode, but I never got any echo when typing?!?! And yes, I was using a wired keyboard.
So, I booted off the Leopard DVD and performed the Password Reset from the Utility Menu, as mentioned in other threads. I selected System Administrator (root) changed the password.
And to top it off, we just had an EARTHQUAKE... Preliminary 5.6 magnitude, centered 9 mi NE of San Jose, CA.
Continuing...
Restarted and logged in via the "Other" user login and used Root and the new password. This allow me to get back and download the new updates. However, the updates didn't help.
So, I went back and tried to created a new user with Admin privileges. I used the same user name, short name, and password as my previous account. I got the message about using the existing folder for the "new" user and I clicked Yes/OK. After a wait, the new account was created! YEAH!
So, all is well...after approx. 3-4 hours.
So, how do I get rid of the "Other" user login?

Please mark this post and the other one you posted on the same subject as solved.

Workflow task showing in sap inbox but not executable by some users

Hello Experts,
We have a workflow task that correctly show in the user inbox but is not executable by some users, we have two users with the same roles, and one is unable to execute the task when it is workflowed into his/her inbox. we have checked if this is an authorization issue and found nothing.
We debugged through program SAPLRHW1 under include LRHW1F02 subroutine READ_ORG_BUFFER, it imports TASK_INFO_BUFFER from the shared memory(see code below) and come back with a number of tasks that the system user can execute. We have task TS&&&&&&&& as a general task but some of the users cannot execute it.
Please advise of what could be the cause of this and the possible solution.
using shared memory
        IMPORT CREATION_DATE
               CREATION_TIME
               ORG_INFO_BUFFER
               TASK_INFO_BUFFER
                 FROM SHARED BUFFER INDX(RH) ID ACT_KEY.
regards,
Thabiso
Edited by: Kamanga Thabiso on Dec 15, 2011 5:33 PM

Hi All,
I had experienced this type of problem as well, just to share it could be that the Identity of the Portal user misses a role which can be solved by any user assigning the identity in their identity management or it could also be the connection status of the UWL to the backend, there should be at least two connection statuses for workflow items to get into the UWL I could not recall it but I would post it here once I have the access to our system again.
Cheers,

Oracle Utilities forum was archived and now users are lost

I really hope a forum admin reads this!
Oracle Utilities was a very active forum and for some reason was archived and now users can't post there. Consequently Users are now posting Utilities-related questions in random places and they are not getting any replies. e.g. in the Insurance place.
@admin: can you make sure a new group is created?

It may be you got no responses here because your questions really belong in other forums:
Backup:
http://discussions.apple.com/forum.jspa?forumID=956
iWeb:
http://discussions.apple.com/forum.jspa?forumID=1108
PS Since Backup has a QuickPick for the iWeb Domain file, I am puzzled how you could not find it to back it up.

All email shows up on OWA, but some users are seeing constant "updating this folder".

Im having an issue in our environment where some users aren't getting new email. It's hit or miss, for example mine works perfectly both incoming/outgoing.
ON a few of them I tried logging into their owa online account and all the emails show up...so it's still there/on the server, but when we open up outlook when logged in it does not update their inbox. I tried going into control panel, mail, and deleting
the local profile/adding a new profile and after it autodiscovers/populates the acccount it sits at an empty mailbox and says "Updating this folder" and shows it as connected to microsoft exchange.
I need some help here, thank you

Hi,
It seems like Outlook connection issue, please check account settings between worked Outlook client and problematic outlook client.
Meanwhile, please check the following settings of outlook.
Close Outlook and start control panel, double-click the Mail icon.
Click the E-mail Accounts button, choose the account and double-click it.
Check the server name and User name are correct, and check box
Use Cached Exchange Mode. Then click More Settings.
Under Advanced tab, check box Use Cached Exchange Mode
and Download Shared folders.
Under Security tab, Check the box "Encrypt data between Microsoft Outlook and Microsoft Exchange."
Under Connection tab, check the box "Connect to Microsoft Exchange using HTTP" and click
Exchange Proxy Settings.
Make sure the following selections and input the listed information:
"https://" field and check the box "Connect using SSL only."
Check the box "Only connect to proxy servers that have this principal name in their certificate" then check the field below.
Check the boxes (On fast/slow networks) "connect using HTTP first, then connect using TCP/IP."
From the authentication drop-down menu, select NTLM Authentication.
Click OK -> OK -> Next
Best Regards.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Lynn-Li
TechNet Community Support

Some users are experiencing difficulty opening certain docx files sent as email attachments. These files contain content controls to protect data in the document. Could someone please confirm that the content controls are the reason the files won't open.

Some users are experiencing difficulty opening certain docx files sent as email attachments. These files contain content controls to protect data in the document. Could someone please confirm that the content controls are the reason the files won't open.
These files open correctly when sent as doc files.
Thanks

Congrats to Saeid, Ronen, and Ricardo! Big thank you to all our contributors!
Transact-SQL Technical Guru - February 2015
Saeid Hasani
T-SQL: How the Order of Elements in the ORDER BY Clause Implemented in the Output Result
Durval Ramos: "Very well structured and with examples that clarify how a T-SQL statement can change the data output order."
Richard Mueller: "Good use of Wiki guidelines and great examples."
Ronen Ariely
Free E-Books about SQL and Transact-SQL languages
Richard Mueller: "An excellent collection and a great idea."
Durval Ramos: "A good initiative. Very useful !!!"
Ricardo Lacerda
Declare Cursor (Transact-SQL) versus Window with Over - Running Totals
- Accumulated Earnings
Durval Ramos: "The "Window function" sample was well presented, but it was unclear how the chart was generated."
Richard Mueller: "A new idea that can be very useful. Grammar needs work"
Also worth a mention were the other entries this month:
[T-SQL] Retrieve Table List with Number of Rows by
Emiliano Musso
Richard Mueller: "Short but sweet solution to basic question."
Durval Ramos: "A simple T-SQL script, but useful."
[T-SQL] Search for Missing Values within a Numerical Sequence by
Emiliano Musso
Richard Mueller: "Clever solution with good code examples."
Durval Ramos: "You need add more details about development of the idea and create a "Conclusion" section to easy understanding."
[T-SQL] Converting Multiple Rows into HTML Format single ROW by
Maheen Khizar (Bint-e-Adam)
Durval Ramos: "In some situations, It's need to consume and format HTML tags for a UI, but It's important to remember that Best Practices recommend this formatting process preferably in Presentation Layer"
Richard Mueller: "A great new idea. Some features need more explanation. Avoid first person."
Ed Price, Azure & Power BI Customer Program Manager (Blog,
Small Basic,
Wiki Ninjas,
Wiki)
Answer an interesting question?
Create a wiki article about it!

Missing some function on photo editing on iphone5

missing some function on photo editing on iphone5

Hi crtravis55,
Welcome to the Support Communities!
It's possible that your iOS apps may have been moved.
Page 139 of the iPhone User Guide will show you how to reset the Home Screen layout:
manuals.info.apple.com/en_US/iphone_user_guide.pdf
Go to Settings > General > Reset, then choose an option:
Reset the Home screen layout: Returns the built-in apps to their original layout on the Home screen.
I hope this information helps ....
Have a great day!
- Judy

10.4 SA OpenDirectory archive misses some users

Similar Messages

Maybe you are looking for