AciSource object-class and dpsaci attribute

Dear all,
I am trying to create a proxy server that is connected to a JDBC data view.
All went well according to the documentation until I reached the point of creating ACI to control access to the data view.
According to the documentation, I have to extend the schema to use aciSource object-class and the dpsaci attribute.
However, there are no documentation on how to get the correct values of them.
I would be grateful for any type of help.
Thanks.

Got it in dps/etc/config_schema.ldif file
The values are
attributeTypes: ( "" NAME ( 'dpsaci' ) DESC '' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'DPS' )
attributeTypes: ( "" NAME ( 'aciSource' ) DESC '' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'DPS' )
objectClasses: ( "" NAME 'aciSource' DESC 'Access Control Instructions container' MUST ( cn ) MAY ( dpsaci ) X-ORIGIN 'DPS')
I hope this could help someone in the future.

Similar Messages

Differences between Property Classes and Visual Attributes

Hi folks
Can anybody know the exact difference between a property class and a visual attribute?
I'm substantially good at Forms but doesn't know the exact difference.
Any reply will be deeply appreciated.
Cheers,
PCZ

Visual Attributes are only for the visual representation of your items, buttons, blocks, canvas, ...
Property Classes are for inheriting all objects including visual attributes.
If you create a style guide for your company, then first define the visual attributes for the look and feel. After that create property classes for all of the other objects in your application. On top of that create object groups, where you centralize your property classes and visual attributes.
If you have created such a form, then call this form reference-template. Now you inherit the object-groups to a second form and call this form "template".
If you create new forms, copy the template and rename it. Then you have in all your forms inherited visual attributes, property classes, etc. and all this stuff is in one "reference-template"
try it
Gerd

Object Class and Object Id for material Determination tables.

I want to know what is the Object Class and Object Id for material Determination records to verify tables CDHDR and CDPOS.
The purpose is to know the changes done by the different users for material determination records.
Can any one help.

Hi ZZZSUNNY,
Similar question is answered recently.Please find the below link which will helps you
Material determination: how to see the creater of a record?
Thanks
Dasaradha

Custom object classes and access rights

Hi,
I have added a few object classes to the NDS schema; objects
belonging to one of them should be able to authenticate against the
directory and retrieve some attributes. I managed the login part having
the class inherit from ndsLoginAttributes, but if I login as the object
itself, I can't retrieve any attributes. I can browse the entry (it's a
container), but all I get are DNs and objectclass attributes. Is there a
way to grant the object the right to retrieve its own attributes, or
some of them, through the Java LDAP interface?
Thanks,
Juan
jheguia
jheguia's Profile: http://forums.novell.com/member.php?userid=84575
View this thread: http://forums.novell.com/showthread.php?t=415769

Hello,
I found a solution which is *almost* the right one. Basically I
deleted the class and created it again with a default ACL:
X-NDS_ACL_TEMPLATES ( '2# subtree#[Self]#[All Attributes Rights]' )
This allows the object to do as it pleases with its own attributes. I'd
prefer it to be only able to read them, but I haven't found a syntax for
ACLs. Is there anything I can read to see how to fine tune the access
rights templates?
Thanks,
Juan
jheguia
jheguia's Profile: http://forums.novell.com/member.php?userid=84575
View this thread: http://forums.novell.com/showthread.php?t=415769

Package distribution frequently failing with Failed to get object class and CSendFileAction::AddFile failed; 0x800706ba

Dear Experts,
Frequently I see packages that are being transferred over WAN links failing with the below posted error.
We're running SCCM 2012 SP1, the DP's are rate limited and firewalled.
Some applications end up on the DP's fine (even OS images), some don't. When they don't, the issue is non-recoverable, even if I retry it 100 times the error will remain the same while other applications do distribute properly. This seems like there can't
be a firewall issue at play. Logs on the DP's do not show any errors.
Here is the PkgXferMgr.log
Attempt to write 750652 bytes to \\SERVER\SMS_DP$\Content_0a017ff5-3a9b-4794-ab57-e4e50ba2db79.1-F6BCF13B583E95DC14FBA81B712675EAD0A2A8D25D1C5127B3E79519897D1337 at position 394372096 SMS_PACKAGE_TRANSFER_MANAGER 6/4/2014 11:53:42 AM 7476 (0x1D34)
Wrote 750652 bytes to \\SERVER\SMS_DP$\Content_0a017ff5-3a9b-4794-ab57-e4e50ba2db79.1-F6BCF13B583E95DC14FBA81B712675EAD0A2A8D25D1C5127B3E79519897D1337 at position 394372096 SMS_PACKAGE_TRANSFER_MANAGER 6/4/2014 11:53:44 AM 7476 (0x1D34)
Sending completed [E:\SCCMContentLib\FileLib\F6BC\F6BCF13B583E95DC14FBA81B712675EAD0A2A8D25D1C5127B3E79519897D1337] SMS_PACKAGE_TRANSFER_MANAGER 6/4/2014 11:53:44 AM 7476 (0x1D34)
Failed to get object class SMS_PACKAGE_TRANSFER_MANAGER 6/4/2014 11:54:05 AM 7476 (0x1D34)
ExecStaticMethod failed (800706ba) SMS_DistributionPoint, AddFile SMS_PACKAGE_TRANSFER_MANAGER 6/4/2014 11:54:05 AM 7476 (0x1D34)
CSendFileAction::AddFile failed; 0x800706ba SMS_PACKAGE_TRANSFER_MANAGER 6/4/2014 11:54:05 AM 7476 (0x1D34)
Deleting remote file \\SERVER\SMS_DP$\Content_0a017ff5-3a9b-4794-ab57-e4e50ba2db79.1-F6BCF13B583E95DC14FBA81B712675EAD0A2A8D25D1C5127B3E79519897D1337 SMS_PACKAGE_TRANSFER_MANAGER 6/4/2014 11:54:06 AM 7476 (0x1D34)
CSendFileAction::SendFiles failed; 0x800706ba SMS_PACKAGE_TRANSFER_MANAGER 6/4/2014 11:54:06 AM 7476 (0x1D34)
CSendFileAction::SendFiles failed; 0x800706ba SMS_PACKAGE_TRANSFER_MANAGER 6/4/2014 11:54:06 AM 7476 (0x1D34)
Notifying pkgXferJobMgr SMS_PACKAGE_TRANSFER_MANAGER 6/4/2014 11:54:06 AM 7476 (0x1D34)

0x800706ba = "The RPC server is unavailable."
This is often associated with some sort of network connectivity issue but is very hard to track down without watching the traffic because there is no way to know why traffic didn't make it.
Generally, it is also associated with WMI communication so it's possible that WMI is having issues or is being blocked on the destination system.
If this is happening sporadically on the same DP for the same content but works for other content, that would indicate to me that some type of network filter or security mechanism is in place that has for some reason decided that that content should not
be allowed. This is pure speculation though.
Do you happen to have a WAN accelerator in place or something else that is supposed to help, scan, or filter traffic? If so, this is where you should concentrate your investigation and exclude ConfigMgr traffic from interference.
Jason | http://blog.configmgrftw.com

OAM 10g attribute is not visible in object class in Identity System console

Hi All,
This is about OAM 10g environment with OID used as user/config/policy store. There are one custom user object class and custom attributes defined in Identity System console already. Now there is a requirement to add another custom attribute to that already existing custom user object class.
I have created the attribute in schema through ldap command and I am able to see it in LDAP browser as well. However even after restarting OAM identity server and webpass services, the attribute is not visible in Identity System console -> Common Configuration -> Objectclasses -> Custom object class.
Appreciate any help. Please treat this as urgent.
Thanks
Mahendra.

The solution is to add the attributes in OVD schema as OVD is the user store.

Unable to map/get Attributes with import of LDIF Object Class

Hi All,
We are trying to take import of Customized Object Class and Attributes into OID through LDIF.
LDIF import command is:
./ldapadd -p 3060 -h myhost -D "cn=orcladmin" -w Ac123456 -f xyzObjClass.ldif
LDIF contents are:
dn: cn=subSchemaSubentry
changetype: modify
add: objectclasses
objectclasses: ( 1.3.6.1.4.1.1436.2.46 NAME 'ProviderObjClass' SUP ( organizationalPerson $ person $ top ) STRUCTURAL MAY ( attr1 $ attr2 ) )
Note: attr1 and attr2 are already imported into OID.
Result: We are able to create Object Class and also able to inherit Super Class. But we are not able to map the attributes to our Object Class.
Can anybody help me in importing ?
Thanks & Regards,
Newbie

Again, I don't work with Java and you should ask Java-related question in Flex (or Java) forum.
Java or not - you need to package your server side language specific object into something that AS understands (text, XML, AMF object) and load this data into AS via, perhaps, URLLoader. Or you can open socket. Then you parse this data with AS3 code in SWF.

Needed SAP CRM Data model with Object, Entity and Attribute level details

Hello all,
We are working on a huge IS-U / CRM implementation and we are still in the data gathering phase. The client has a whole load of legacy systems that will be replaced with IS-U and CRM. Right now we are in the process of developing data models using Excel first and then presenting them to the client to go forward from there. For this we need to have all the business objects, entities and their attributes.
I know about the SD11 transaction, but we don't have a CRM system yet. My colleagues have access to a German ERP system and they were able to get models for HR, FI and Asset management. I tried for the Business partner / customer in there, but the models were not proper.
So, once again, I need the specific data models out of SD 11 for CRM business partner. If anybody has the information, please do pass it on to me as I need them urgently. It would be a great help if somebody can do so.
Regards
Rajesh

I suggest the following:
Please, check whether the system works if you activate the implementation BUPA_F4_AUGRP.
In addition check the notes 559662, 674869 and 782927. Maybe the notes are already implemented but you can try then the implementation of the BADI (SE19). It should resolve your issue.
I have implemented this Badi solution before, and after activation; the search help ; nor search result list did NOT show any Business partners anymore that had an authorization group I was not allowed to see.
kind regards
Davy Pelssers
SAP CRM/Security consultant

LDAP BC QUESTION ABOUT OBJECT CLASSES

Hi
i am working with a bpel and its ldap-bc, when i create an entry in my ldap through the bpel it has all the object classes from the attributes i set. for example if i set cn and sn attributes then my entry has the object class person; i want to know if there is any way of setting object classes to my entry on the ldap, even if i am not setting any attributes; for example if i only set the cn and sn attributes using the bpel, i still can tell the entry that it can has another objectclass like iplanet-am-user-service with out setting any of its attributes.
thanks for your help

Actually, I'm not getting duplicate objects, but I like to get rid of
doubles in one particular column.
For example if I had a table as follows:
Table DESC
int pkid
String description
description can contain duplicate entries, I want to query as follows:
select distinct description from DESC
How could I write a query which retrieves all tuples in a table, but removes
duplicate from a specific column?
Thanks.
Andreas.
Abe White wrote:
How does the engine use DISTINCT automatically?It detects whether joins are made such that duplicate rows might be
returned from the JDOQL filter, and if so adds a DISTINCT.
What I basically want to do is to remove any doubles I get from the
query. When I turn logging on to see the sql statement, I only get a
SELECT without the DISTINCT keyword.You shouldn't be getting doubles. If you are, could you please post the
offending JDOQL filter and give some description of the schema and/or
object model? There is a bug in Kodo in which some queries involving OR
clauses and joins are not made DISTINCT when they should be, but it has
been resolved for our upcoming 2.5 release.
Is there also a way I can specify GROUP BY?No, JDOQL does not have an equivalent to GROUP BY.

How dod I add eduperson object class to OpenDirectory

I have modified /etc/openldap/slapd.conf
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
include /etc/openldap/schema/eduperson.schema
and place the eduperson.schema in the schema directory
restarted
but I do not have access to the eduperson object class nor the attributes.
What is the best way to add an objectclass to OS X Opendirectory?
Thanks

Hi,
There could be several ways. For instance, you can try to modify .*-pre ..*-post targets in your App/Makefile file.
Or you can create probe as file in project with "Custom Build Tool" and specify build command
Additional object files to link you should specify in linker options of Project Properties

Can I create a class and package for my inframe AS and access it global

Ls,
I made an app using only inframe actionscript in a .fla;
transfrerring variables from frame 1 to frame 2 is unreliable.
Some sources say the persist over frames but i found that not to be reliable.
Arrays seem to be filled with the right values. Normal int vars declared in frame 1 fail some time.
You should have used classes i hear you say, and right you are.
But I didnt.
Now im using either reloading, re-initing and/or the sharedobject.
Anyhoe..
Question:
If I declare a class for my main .fla file.,
then declare, instantiate and load the globals i want in this main class,
will I be able to acces these variables in my main .fla timeline script?
If so, I could slowely reconstruct my .fla into smaller objects/classes and make it a real app.
Just starting from scratch is. welll..i dont even want to think about that.
Highest regards,
Mac

Yes! I got it to run as Mobile project.
Now, how to test on my mobile thru USB.
I'm more/only used to working from FLASH CS5.5
Although I like the builder, it feels really flexible, it also seems more work(yeah still lazy).
Is there an advantage to using the builder over Flash CS?
Thank you.. again...again
Mac

Why wait() is there in Object class why not in Thread class

why wait() is there in Object class why not in Thread class .
while we use wait() in the case of thread environment?
If there is any situation where we use it without using threads please mention with example. or link to that example..

839091 wrote:
The question still remain un-answered as the answers provided are not clear. Can anybody explain why wait(), notify() methods are available in Object class and not thread?What part of the answers given did you not understand?
Have you even tried writing any code that uses wait/notify and thought about how you'd write the same code if they existed only on Thread rather than on Object?
Have you studied the basics of Java's multithreading?
Do you know what a lock is?
Do you know what the synchronized keyword does?
Do you understand the relationship between synchronized and wait/notify?
If you can answer yes to these questions, then the reason that wait/notify exist on Object should be obvious. So, which of the above are "no"?

List of Object Classes

Hello,
Does anyone know the relationship between 'Object Class' and R/3 Document Types... My question is how one determines, for example, that VERKBELEG pertains to Sales Document Changes; and LIEFERUNG is for ... and so on...? Where in R/3 (or in Help Documentation)is this defined?
This relationship is helpful in searching thru the massive table CDHDR.
The table TCDOB <b>only</b> lists all of Object Classes.
Thanks in advance.
Naved

Hello Naved,
I do not think that the Object List will be linked to a document type. At best, we can expect to find the purpose of an Object Class, as intended (not "defined") by SAP.
If you go to the table TCDOBT (text table of TCDOB), you will find the descriptions of each of the change document classes, as given by SAP. For Example,
LIEFERUNG          Delivery
LIBE               Change document vendor evaluation
VERKBELEG          Sales document
PRCTR              Profit center master record
PRODCAT            Product catalog
and so on.
Also, there's a Function Module that you might find to be useful - CDNAMES_GET.
If you want to find out the Object Class for a particular scenario, the best way that I can think of is to go to the table TCDOBT and search with the help of the OBTEXT field.
Hope this information was helpful. All the best.
Regards,
Anand Mandalika.

Restritions on id and name attributes?

Are there any known restrictions in respect to what ascii characters are valid for object id and name attribute?
I created (via xml file) a ObjectGroup (aka Organization) with id='#ID#ObjectGroup:Approve_org' name='Approve_org' displayName='Approve_org'
The Organiozation did not open and did not show the contained users.
With this id and name it worked fine.
id='#ID#ObjectGroup:ApproveOrg' name='ApproveOrg' displayName='Approve_org'
Any thoughts?
Ugato

From my experience, the name and id attribute may contain pretty much every character - at least I have yet to find anything that isn't accepted. I even tried your example "Approve_org" and it worked (in IDM 8.1).
This is what I uploaded:
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE ObjectGroup PUBLIC 'waveset.dtd' 'waveset.dtd'>

<ObjectGroup
      id='#ID#ObjectGroup#Approve_Org'
      name='Approve_Org'
      displayName='Approve_Org'
      creator='Configurator'
      primaryObjectClass='ObjectGroup'>
<PathFromTop>
    <List>
      <String>#ID#Top</String>
      <String>#ID#ObjectGroup#Approve_Org</String>
    </List>
</PathFromTop>
<MemberObjectGroups>
    <ObjectRef type='ObjectGroup' id='#ID#Top' name='Top'/>
</MemberObjectGroups>
</ObjectGroup>Maybe you had something else wrong?

Copy object from one authorization object classe to another one

Hello experts,
due our revision we have the demand to copy our custom context sensitve authorization object from the old authorization class to a new one.
Ist this generally possible? What are the impacts?
Any ideas?
Many Thanks!
Marco

> due our revision we have the demand to copy our custom context sensitve authorization object from the old authorization class to a new one.
That is a strange revision (audit) demand... Did you challenge them whether they have ever done this before and survived as release upgrade?
Is SAP_ALL otherwise okay for them? For example that people can write their own programs or maintain PRGN_CUST to include Z-classes again...
Have you tried to simply remove all profile assignments to SAP_ALL and replace them with proper roles and restrict SAP*'s HR profiles to that which applies to all users which are not employees?
You are definately barking up the wrong tree here by moving SAP objects to Z object classes and expecting it to be secure...
Cheers,
Julius

AciSource object-class and dpsaci attribute

Similar Messages

Maybe you are looking for