Access rights problem

I have set up two OID instances to talk between one another and think I have the mapping files correct.
I now see Insufficient Access Rights in the logs. Does anyone have any ideas what this could be? Does the exchange between servers run under a specific user?
orclOdipSynchronizationStatus: Mapping Failure, Agent Execution Not Attempted
orclOdipSynchronizationErrors: Error Creating Entry in OID
Sleeping for 1secs
Exception creating Entry : javax.naming.NoPermissionException: [LDAP: error code 50 - Insufficient Access Rights
]; remaining name 'cn=[email protected],cn=users,dc=hoc,dc=test,dc=com'
[LDAP: error code 50 - Insufficient Access Rights]
OIDUserImport:Error in Mapping EngineODIException: DIP_OIDWRITER_ERROR_CREATE
ODIException: DIP_OIDWRITER_ERROR_CREATE
at oracle.ldap.odip.gsi.LDAPWriter.createEntry(LDAPWriter.java:975)
at oracle.ldap.odip.gsi.LDAPWriter.insert(LDAPWriter.java:328)
at oracle.ldap.odip.gsi.LDAPWriter.writeChanges(LDAPWriter.java:239)
at oracle.ldap.odip.engine.AgentThread.mapExecute(AgentThread.java:406)
at oracle.ldap.odip.engine.AgentThread.execMapping(AgentThread.java:262)
at oracle.ldap.odip.engine.AgentThread.run(AgentThread.java:155)
Regards

Do let us know if you find the answer. I've been stuck for days on an LDAP access rights problem.

Similar Messages

Migrating Designer 2.1.2 to 9.2.0.9, access rights problem

Hi,
I am trying to migrate Designer from 2.1.2 to 9.2.0.9 and got some problems in access rights. We have about 30 sub-ordinate users and over 30 different applications in our Repository.
In Designer 2.1.2, if a user shared a table from an application to another user's application, that user was not allowed to change any properties of the original table. In Designer 9.2.0.9 it seems that you can change the properties in the property palette, but if you try to save the changes, you then get an error message.
Can somebody tell me if this is really an error or just a feature of Designer 9i?
Liisa

Just for the record. I found the solution to my problem. Checking more logs I read this:
The installation has encountered a unrecoverable internal error. For further assistance report the following information to your support provider.
"/usr/local/cm/script/cm-dbl-ontape_backup-install RU PostInstall 9.1.2.11900-12 7.1.5.30000-1 /usr/local/cm/ /common/component/database /common/log/install/capture.txt " terminated. Exceeded max time (240)
The system will now halt.
So I accessed the Dissaster Recovery Section on CUCM and deleted the tape backup device that was configured there. After deleting it the upgrade went well.

HT5313 Wrong Access Rights, unable to repair

Since a larger update (Lion 10.7.5 on my Mac-Mini) including parts of OS X itself and iTunes 10.7 I think I have access problems.
I observe the following behavior:
* iTunes:
Every time I start iTunes I have to accept the license agreement again.
* Mail:
When I open the preferences page and then press the red “close” button an error window pops up that states something like “Error storing preferences” (I have a german language OS), probably wrong access rights in ~/Library/Preferences“.
* When moving files from one folder to the other (using the finder) in my home directory tree the systems copies instead of moving ( unix mv ).
* I cannot install the “adblock plus” add-on in Firefox (also because of wrong access rights in the profile folder).
* StandBy does not work any more.
I tried already the following remedies all without success:
* I repaired the access rights using disk-utility. But I think that changes nothing, cause it seems to repair the same errors each time I start it.
* I also reset the access rights of my home folder using “resetpassword” after restart also without any change in the wrong behavior.
* I used applejack.
I'm stuck!

Hello,
thanks for the hint. It did not solve my problem, but it gave me an idea of the cause.
I think, user "system" or "admin" was missing to have rw-access in the home dir, in detail:
The newly created user, although of being an admin, had no rights. He could not start mail and system preferences. So I looked at the access rights in his home directory and realized that "system" has read/write access.
The existing user with my access rights problem had no user "system".
I tried to add "system" but failed. So I added the user "administrators/admin" to the list of users having read/write access in the home directory.
This solved the problem.
Someone (maybe me) must have deleted it before.
Thanks again.
Achim

Problems Managing User Access Rights for Web Gallery

Has anyone else had issues changing the user access rights for a web gallery? It seems like the access is everyone or no one. Are the user rights handled per event in the gallery? I had issues adding events to the user's view/download rights in the publish settings.
Also, can these settings only be set when an event is first published? Attempting to change the user access rights after the event is published seems to require a re-upload of the images.
Any thoughts?

Problem solved.
I had to put the following lines in the specified "0000_any_80.my.website.conf" file:
 <Directory "/Library/WebServer/subdomain.domain">
 Options All +MultiViews -ExecCGI -Indexes -Includes
 AllowOverride None
 # For Password protection
 AuthType Digest
 AuthName "Password Protection"
 require valid-user
 <IfModule mod_dav.c>
 DAV Off
 </IfModule>
 </Directory>

Problem with access rights in web forms

Hii am facing the problem in giving access rights to users inplanning application.i gave write access to all my forms and all my users were giveninteractives user access.but when users tried to open to the forms. they are getting thefollowing error Security and/or filtering has resulted in a requireddimension not being represented on this form i don't where i am missing. please help. thanksBalu

Balu, 1)Check if the security filter have been refreshed. 2)Check if all the members from all dimensions are defined on the webform Thanks..

Can Play iTunes Library from PC on MacBook Air but cannot import, problem with access rights?

I can play Itunes library from Windows Vista PC on my MacBook Air using homeshare but cannot import the library . Error message is problem with access rights. Latest OS and Itunes installed. Both computers registered with Apple on same Apple ID. Wifi Router turned on and off. Still does not allow importing. Any suggestions please?

Might be an alternative for you here > iTunes: How to move your music to a new computer

Problem with orcladmin access rights

We've successfully installed an OAM/OIM platform with Identity Server & Access Server running on one box; WebPass, Policy Manager and WebGate running on Tomcat-2.0 on another box. All screens are coming up but we get access rights errors when trying to add a user or group. The exact error message is 'You do not have sufficient access rights'.
How can we reconfigure orcladmin so it has rights to add users and groups in Identity Administration?

You would need to use the 'Create User' Workflow to create a user from Identity System.
Refer:
http://download.oracle.com/docs/cd/B28196_01/idmanage.1014/b25343/workflow.htm

Access rights in case of a tree-like structure, with inheritance

Hello,
the project I've just started to work on should include an easy way (from the user's point of view) to grant/revoke access rights on a tree-like structure with inheritance.
Basically we are working for several international companies who want to use our application to watch/manage some of their web projects - each project belongs to one company and consisting of several 'campaigns' in several countries (there can be several campaigns per country, but each campaign belongs to exactly one country).
From our point of view this is a tree-like structure, with a 'root' node at the top level, 'companies' at the first level, 'countries' at the second level, 'campaigns' at the third level, and modules of our application (for example a module to display overall stats of the campaing, and so on) at the fourth level. There could be (and probably will be) some more levels, but that's not important at this point - it will always be a tree-like structure.
The customer's reqirements are natural - the administrators should be able to grant/revoke access to 'subtrees' of this structure. For example the top managers should be able to see all the data related to their company, the local managers should be able to see all the data related to their company in the country they work in, etc. On the other hand the relular employees should not see some of the modules (with details about clients of the company).
I wonder whether this can be solved using JAAS in an elegant and flexible manner - from the documents / whitepapers / tutorials I've seen till now it seems to me it seems to me not too suitable.
All the data will be stored in relational database (Oracle, and in some cases PostgreSQL), and it would be nice to have the access rights stored in the same way (but it's not required). We have some ideas how to solve that using a single table containing paths in the tree, but at this point it's only an idea (not a single line of code written).
We are sure somebody has already to solve such a problem - maybe using JAAS, maybe some other technology - and we don't want to reinvent a wheel. Do you have an idea how to solve this (using JAAS or something else)?

Well, I forgot to explain what the 'inheritance' means ...
We do not want to set the access right on each node of the tree - we prefer (as well as the users) to set/store only as much information as needed. We'd like the nodes to inherit the access rights from their parent nodes. For example we'd like granting access to particular project to mean granting access to all campaigns in all countries (related to the project), without the need to set and store these rights for each of the campaigns/countries.

Access rights - heavy issue

I have managed to somehow partly corrupt the access rights on my iMac/SnowLeo system.
Getting a lot of failure messages at the start up and some applications are just not working properly anymore.
iTunes for instance does not longer recognize my iPhone - just doesn't - and again I get some strange messages.
Tried to repair access rights be starting OS x from DVD and used hard disk tools (not sure whether it is called exactly this in English - have a German system installed) and used "repair access rights" on the OS volume - seemed to work because a lot has been repaired but after starting iMAC again - same problem.
Now - what can I do to get this fixed on the access rights? Re-install Mac OS x- what would happen with all applications, e-mails etc?
Any idea - help - would be very much appreciated
Robert

Thanks - tried it (and seemed to make a lot of sense) but didn't help at the end :-(
Still same issues
Am not a Mac OS X specialist or UNIX or whatever - actually I am not very familiar with the details of the OS and all its settings etc etc.
However, following some messages, Internet, other sources ---- here's what I have managed to find out:
1) Mac OS starts up - all fine
2) after the desktop / dock is visible I get some similar but in general the following message (trying to translate since they are in German on my installation)
"insecure start objects disabled" - ../Library/StartUpItems/Executor" has not be started since the object does not have the correct security settings
.. I usually get about 10 of them with different "names"(objects) - e.g. "/Executor","/EyeConnect" etc etc.
Now - this all happens on my iMac; I also have a similar configured MacBook and just checked the security setting for exactly these objects on it - the difference is in "share and access rights" on the MacBook has "System" read and write and all others only read - funnily enough - I can not find "System" within "Share and Access rights" on the iMac!!!!
So - next idea: let's add "System" as a user to these folders/shares with "Share and Access rights" - can find a user named "System".
Uh - it seems I have managed to "kill" something on my iMac ..... just don't know how (but that's not so important) and just don't know how to repair - re-installation of Mac OS X on iMac didn't make a lot of changes.
Help appreciated!!!
Robert

Using Pivot-Slicers on a SSAS Cube with Access Rights

Dear all,
we're using a SSAS Cube and try to access the data by an Excel Pivot. That works fine.
Furthermore, we are using the slicer feature of Excel 2010 to select the specified data.
The problem is that we have a dedicated rights concept and only some users are allowed to see all dimension elements. Other users are not allowed to see all the data. This is ok and works for Pivots, as we can see there only the elements which the respective
user is allowed to see. In the case of slicers this doesn't work: the slicers always show all dimension elements (the restricted ones with 0-values). Can this somehow be repaired, so that the user only sees the elements in the slicer he's allowed to see?
Best Regards
Bjoern

Hi Charlie,
I guess we have some kind of language barrier here because i did not fully understand your explanation.
I've got a User Günther who is only to allowed to see the revenues of his own company.
Therefore, he has got a restriction on the company-dimension, which has 100 companies. He is only allowed on his own company.
If we open a new pivot with the company dimension, he will only see 1 column (with his company) instead of 100.
If I currently add a slicer to the pivot, the list of elements in the slicer contains 100 companies. All of them are also shaded (which shows, that data is available). If i click on a shaded company, on which he is not allowed, Günther only sees zero-values
(0,00).
In this case, it would be better to only see the 1 company the slicer shaded, which has values that Günther is allowed to see. Then, he would only see his own company shaded and 99 would have the look like being "without data".
If my proposal would be impleneted, it would be much easier to use excel BI services on a big SSAS cube with multiple dimensions and multiple users that have different access rights.
The best would be, if a slicer could be customized in more details (e.g., with a mdx query).
// Do I perhaps have misplaced the question into the wrong forum?
Best Regards
Bjoern

Orcladmin: "Insufficient access right to perform action" using oidadmin

After sucessfully installing OID from 8.1.7 CD on Sun Solaris 8
(SPARC) I can start the monitor and the oidldap. After
sucessfully connecting with orcladmin using oidadmin I always get
the same error (either using oidadmin on windows or solaris) when
accessing "entry management", "schema management" or "audit log
management":
Insufficient access right to perform action.
but the default ACP allows everyone (browse add delete)
anyone else had the same problem?
I tried to create the name server with OID with netca which
obviously does not work either.

Hi Christian:
You say that you conencted to OID as "oidadmin". Since OID does
not have any user account called "oidadmin" you were probably
conencted as an anonymous user. If you are trying to connect as
the administrator of OID the correct user account name is
"orcladmin" with a default password of welcome. Try this and let
me know if you sitll have troubles.
Thanks,
Jay Tomlinson

OIM & Menu Items + Access Rights

Hi,
I am trying to customize groups in OIM. I would like to make a specific group to be able to manage users who are for example, managed by user YYY and ONLY them.
So far, I updated the Menu Items of the group so users who belongs to that group can manage users. The problem is, when I make a search request for users, OIM tells me back that no user are found...
My bet is that the group doesn't have the rights to make a lookup query on users. I can't find how to change that. (I already gave all the access rights to the group from the web interface)
I would also like to know how it is possible to customize that query.
Thanks a lot!
Guille

Hello Suita,
In a Business Role you can go into "Fields & Actions" and there you will be able to find some standard fields or actions that you can restrict to a role as well.
We are suing this for some fields changes, or like Account Team modification, Sales Quote creation etc.
I am not sure you will be able to do everything but it's quite flexible and you can probably forward your specific request to Support to have them help you out. I believe you can easily block Status modification from there for instance. We at least do that for Business Partners/Customers.
You can check the Admin Guide page 153, maybe in the Help Center in C4C directly there would be better examples for "Fields & Actions".
Also, the SAP Service Center added a feature called "UI Switches" for us in our of our projects with them to allow us cover some of the fields not protected via the "Fields & Actions" settings. It is working well for us. This can be another solution for specific user right modifications.
Another thing you can look at as well is the Dynamic Screen Layout feature (with a well done guide). Maybe it can also suit your needs depending on the business scenario you want to do?
Hope this helps.
JB.

Bpf - package access rights

Dear Xperts,
i have created a bpf templete say bpf1 & created instance say my process.
there are 5 companies for consolidation,for specific user say user1 i have given right of comapny xyz only.
bpf runs correctly by showing only company xyz in bpf web main menu for user1.
problem is when i run a package,in criteria selection box requiring to select entity,time,category etc details for running package,it shows all 5 company in entity selection box. so user1 is in position to run package for other company for which it does not have right.
so can anyone tell me how to greyout entity selection box so that user1 can run only company xyz or is there any way i can set access rights while running package in criteria selection box.also i m working on nw 7.5 version
thanks
kashyap.

Dear Raju,
i have given secondry admin rights to user1 with bpf excution tasks .
i was able to allow access to this user only to one company by mentioning his domain name in owner property of entity dimension.
do i need to make any further changes?
thanks
kashyap.

Tecra M2: Power Saver - Do Not Have Access Rights

Hi,
I'm running a Tecra M2 with Windows XP SP2 and I recently installed Toshiba Power Saver as I want to get the best out of my battery on a flight I'm taking. However, when I try to run the Toshiba Power Saver from the Control panel I get a window with the following error:
Cannot open because you do not have access rights to use "TOSHIBA Power Saver".
I'm logged on as administrator, but I still get the same problem. I've even re-installed Windows XP, but after installing all the drivers I get the same error. I've tried installing the Win2K version of the app, but it gives the same problem.
Any help much appreciated as I'd like to get the best out of my laptop power wise.
TIA
Klaus

Hi
I dont know what happen in your case but if you are logged as administrator start please Power saver utility and go to SETUP OPTIONS. Check SETUP PROFILES and activate both options there.

Access rights issue on windows formatted HDD

i have a windows formatted HDD connectd via USB, and there seems to be an access privelidges problem. i can't create folders on it, and can't move/delete "some" files.
is there any way (without connecting it back to a windows PC) to reset the access rights on the drive/folders/files? there is too much data on it for me to re-format it just now (don't have the space to move all the stuff off it).

Hi Chenks,
this isn't most likely a 'rights' or 'permission' problem rather than that the external HD uses the NTFS file system, which OSX can only read but not write.
Do a right-click on the drive - choose 'Information' to verify if that is the point.
Without a reformatting to a file system that OSX can rad and write, either HFS+ (when using exclusively with Mac) or FAT32 (when using it with Mac and PC), your only choice is to use MacFuse http://code.google.com/p/macfuse/
Regards
Stefan

Access rights problem

Similar Messages

Maybe you are looking for