ACS 5 search in custom attributes

Hi there
on ACS 5 we have the possibility to add custom attributes under System Administration > Configuration > Dictionaries > Identity > Internal xxx.
At the moment there seems no way to search for a value of a custom attribute or even display a column with the custom attribute under Internal Users or Internal Hosts. Does Cisco have plans to implement this in the future?
Thanks and best regards
Dominic

Good question, I'd like to know this as well for the netscreens. For junos, this is how I tried to do it (you would drop the "netscreen" from yours, but not sure if you would add both as mandatory)
Acs4.x setup
junos-exec
  local-user-name=readonly
acs5.2 setup
attribute -  local-user-name
value - readonly
mandatory
# junos config
    login {
        class admin {
            idle-timeout 30;
            permissions all;
        class read-only {
            idle-timeout 30;
            permissions [ view view-configuration ];
        user admin {                                 
            class admin;                 
        user readonly {                                 
            class read-only;  
The problem I have though, is this fixes my login to work to my JunOS devices, but it breaks the authentication to my Cisco IOS devices. The AAA logs show that the authentication succeeded, but the router says "authorization failed". Once I remove either the attribute from my shell profile, or make it optional then the Cisco router works for auth, but the JunOS device stops working (The username it tries to use is "remote" instead of the user I am trying to authenticate with).

Similar Messages

  • Help needed in Inbox search for Custom attribute

    Hi,
    We have  a requirement where in we are having a custom attribute on Service request to store the ECC Order number.
    We have enhanced the Inbox search to retreive all the service requests havig the ECC order number. 
    Here we are encountering a problem. i just created a new crm service request and entered order number 1234. and now when i search for the same in Inbox search giving the criteria order number as 1234. I get no results found. But when i extend the max list to 2000, then i see the service request appearing in the result list. not sure about the algorithm that is designed for inbox search.
    Any pointers on how to resolve this issue would be of great help.
    Thanks,
    Udaya

    Hi,
    I do not have the time to research this completely, but I had a short look into the class you posted.
    In the GET_DYNAMIC_QUERY_RESULT there is a call to CL_CRM_QCOD_HELPER->PREPROCESS( )
    A little bit lower there are blocks marked by comments for the single searches that are handled by this class. I had a look into the campaign_serach() method. There if you scroll a little bit down (around line 123) they set all search parameters to SIGN = 'I' OPTION = 'EQ'. This is done several times below as well.
    Set a breakpoint in the proprocess() method and check which of the blocks is called and how they handle your search criteria.
    Hope it helps.
    cheers Carsten

  • How to extend the WebUI product search results with customer attributes

    Hello,
    We are using CRM 7.0. We want to extend the WebUI product (Object) searches with customer attributes and to display customer attributes in the search results. We found the note 1026956 that explains how to extend the WebUI product (Object) searches with customer attributes. We want to know if there is also some note that explains how to display customer attributes in the search results for products/Objects.
    Thanks in advance,
    Sergey Kozyrev

    Sergey,
    I doubt whether there exists such note. The note 1026956 which you mentioned is for enhancing the Search for Custom attributes. For Enhancing the Result list you need to do custom development.
    Regards,
    Harshit

  • Custom search using boolean attribute set to True gives no result

    I am setting up an auto-query using the custom search portlet. This is to show all items where a boolean custom attribute is checked, ie = True.
    In step 3 I have tried to set the operator to Equals to and the default value to True. This gives no results even though several items have this attribute set to True.
    The Auto Query check box is checked.

    Found that True = 1 in database. When set to this the search works.

  • Multiple instance of custom attributes ACS 5.x

    Hello,
    is there a way to have multiple instances of user custom attributes and
    insert those as multiple instances of the A/V Pair in the authorisation profile in ACS 5.2/5.3 ?
    Background:
    We have to migrate a ACS 4.2 to 5.3.
    In ACS 4.2 our client used the multiline attribute
    Number
    Name
    Description
    Type of Value
    Inbound/Outbound
    Multiple
    22
    Framed-Route
    Routing  information to configure for the user on this AAA client. The RADIUS  RFC (Request for Comments) format (net/bits [router [metric]]) and the  old style dotted mask (net mask [router [metric]]) are supported. If the  router field is omitted or zero (0), the peer IP address is used.  Metrics are ignored.
    String
    Outbound
    Yes
    to specify multiple routes to various networks in the RADIUS reply spcific for every single PPP username of routers dialing in.
    Using the internal user database, extended by a string attribute and using that attribute as source of a dynamic value
    in the access-policy works basically.
    But as I have only ONE single line instance of the attribute for every user, I can only return ONE framed-route.
    We have lots of cases where multiple routes have to be assigned to one router.
    I 'd like to avoid defining a seperate access profile for every remote RAS router for external PPP Dial-In...
    I Think Jack here https://supportforums.cisco.com/thread/2032506 has a simmilar issue...
    Any idea?
    Thanks, Frank

    I had to do this once and I created several custom attributes
    -Route1   (String)
    -Route2 (String)
    -Route3 (String)
    etc ...
    And in the authorization profile you return all those custom attributes as Framed-route. I was actually sending up to 10 Framed-Routes contained in 10 different attributes.

  • Custom Search Form and custom attribute picklist?

    I have a custom item type which has a custom attribute NAICS_Code. The NAICS codes are stored in a database table and the attribute is set to a list of values that is a query on that table. The attribute is associated with a custom item type as a text attribute.
    Now, when I add the custom item type to a page, the NAICS Code field is a popup selector, as expected.
    On a Portal page, I have the Custom Search Portlet that searches another page that contains the custom item type.
    On the Custom Search Portlet, I can add the NAICS Code as an additional attribute, but the search field is a plain text box and NOT a pick list of any kind.
    Can I configure the Custom Search Portlet to use associated LOVs with filter by attributes?

    I'm afraid that in the version of portal you are using we don't render LOVs for LOV attributes on the search portlet.
    In 10.1.2 attributes are added to the search form using a More Attributes button which simply render an empty row for the attribute details to be filled in.
    In 10.1.4 this was improved considerably. Now attributes are added to the search form like they are added in the edit defaults, with a Choose Attributes link which opens a popup to select the attributes. On closing the popup the search form is re-rendered and any LOV attributes will be rendered with a combo box of available values to select from.

  • Custom attributes not available in ACS version 4.1

    We're trying to enable "authorization" on some new Cisco ACE devices. We're running ACS for Windows 4.1 and don't have a "custom attributes" checkbox to check. Is this not a feature in version 4.1.1?
    Thanks,

    I think it is present in the ACS 4.1.1. The limitation on the custom attributes (of 31,000 as CSAdmin indicates) is that in the T+ Settings per User Group Configuration page, which is accessed from the Interface Configuration page, if you add the 1201st entry in the custom attribute field, the browser crashes.The custom attribute field is currently limited to 31KB (approximately 1,200 attributes.

  • ACS TACACS Custom Attributes

    I have users that require multiple custom attributes under the TACACS configuration.  Below are the two that are required, one is for Cisco UCS and the other is for MDS.  My question is what is the format to get both of them to work for the same user?  Individually they work fine, but when both are configured for the same user, the UCS "admin" privilage seems to work, but I'm only able to get "read" for the MDS.  I've had this working before, and can't figure out what the trick was the first time around.  Thanks.
    cisco-av-pair*shell:roles*"admin"
    shell:roles=“network-admin vsan-admin”

    You can also configure optional custom attributes to avoid conflicts with non-MDS Cisco switches using the same AAA servers.
    cisco-av-pair*shell:roles*"network-admin vsan-admin"
    Configuring TACACS+: on cisco MDS 9000
    http://www.cisco.com/en/US/partner/products/ps5989/products_configuration_guide_chapter09186a008049b8ed.html#wp1244464
    If you have this Cisco-av-pair:
    cisco-av-pair*shell:roles*"admin" -->  Then it means it's optional, this would be the preferred method.
    You can get a list of roles on UCS:
    http://www.cisco.com/en/US/docs/unified_computing/ucs/sw/cli/config/gui/CLI_Config_Guide_chapter9.html#concept_E41FB2D2F363406EAC1011CC59B5D4BB
    HTH
    JK
    Do rate helpful posts-

  • Issue with Sorting by Custom Attributes

    In our custom SES query application, I am trying to implement sorting at the custom attribute level. I am having difficulty in understanding exactly how to set the options on doOracleOrganizedSearch() to achieve the desired result.
    We have a table based content source and allow a user to search via custom search attribute. We are also going to allow them to sort by custom attribute.
    For example, say we have a Project content source and one of the attributes is "Client Name". Users are going to be able to sort by client name (A-Z and Z-A). I have a prototype working but it only seems to work if I set topN to a very high number.
    I want to bring back the first 10 documents sorted by Client Name A - Z and allowing paging to the next set of sorted results. My prototype works if I set topN to 1000 (more than the # of results) but does not work if I set it to 10 (# of results I want to display per page).
    Below if my code. Note I am not setting the group attribute or the cluster list. Perhaps this is the issue?
    Many thanks in advance!
    OracleResultContainer results = service.doOracleOrganizedSearch
    (this.m_query, // query
    this.m_docsRequested, // topN
    this.m_startIndex, // startIndex
    new Integer(10), // docsRequested
    this.m_dupRemoved, // dupRemoved
    this.m_dupMarked, // dupMarked
    this.m_searchDataGroup, // groups
    this.m_queryLang, // queryLang
    this.m_docLang, // docLang
    this.m_returnCount, // returnCount
    this.m_filterConnector, // filterConnector
    filters, // filters
    this.m_fetchAttributeNames, // fetchAttributeNames
    null, // searchControls
    null, // groupAttr
    this.m_sortAttributes, // sortAttrList
    null); // clusterList

    Hi Nikola,
    in 9.0.1 even if you rewrite the web interface you can't sort files by custom attributes setting a SortSpecification to a Folder. You can only sort by base attributes with getItems(). To get item sorted on custom attributes you must perform a search (a lot more codelines).
    Regards, Alessandro

  • Problem with setting custom attribute and it being searchable

    I'm having an issue with setting a custom attribute and having it be searchable using Portal 10.1.4. The situation that we have is that we initially added a bunch of files to Oracle Portal using webdrive. Later on, we decided that we needed another custom attribute called "Pinned Item" that will be used for searching (boolean value) and gave it a default value of false. The attribute was then added to the "File" item type in the "Shared Objects" group.
    It appears that since this attribute wasn't initially available on the file object, we couldn't search on it so we decided to set it programatically. First, I tried using wwsbr.set_attribute but it errored out seemingly because the value wasn't set in the first place. If I set a value first by using the web front end, I could then use the set_attribute procedure.
    So, I moved on to using wwsbr_api.modify_item and it appears to set it (although everything is being set to false until I changed it to "text" instead of "boolean" which is OK because that's what I wanted anyway... see metalink bug 390618.1). I'm using the method outlined in metalink doc 413079.1. When I do set it to a "1", and edit the item the check box is checked indicating that it is set correctly. And if I just click "OK" to save the attributes after I open it everything works like it should.
    However, the advanced search (and custom search portlet) and the search APIs are not picking it up. I'm not sure if I'm hitting Metalink bug ID 5592472 or not as that's using the "set_attribute" procedure instead of the modify_item procedure. And their "workaround" of setting the attribute in the UI isn't really feasible for a couple thousand files.
    So far I've tried the following things to get it working:
    1. I am calling wwpro_api_invalidation.execute_cache_invalidation
    2. I have executed wwv_context.sync
    3. I cleared the page group cache
    4. I invalidated all of the web cache
    Does anyone else have any other suggestions?

    I'm having an issue with setting a custom attribute and having it be searchable using Portal 10.1.4. The situation that we have is that we initially added a bunch of files to Oracle Portal using webdrive. Later on, we decided that we needed another custom attribute called "Pinned Item" that will be used for searching (boolean value) and gave it a default value of false. The attribute was then added to the "File" item type in the "Shared Objects" group.
    It appears that since this attribute wasn't initially available on the file object, we couldn't search on it so we decided to set it programatically. First, I tried using wwsbr.set_attribute but it errored out seemingly because the value wasn't set in the first place. If I set a value first by using the web front end, I could then use the set_attribute procedure.
    So, I moved on to using wwsbr_api.modify_item and it appears to set it (although everything is being set to false until I changed it to "text" instead of "boolean" which is OK because that's what I wanted anyway... see metalink bug 390618.1). I'm using the method outlined in metalink doc 413079.1. When I do set it to a "1", and edit the item the check box is checked indicating that it is set correctly. And if I just click "OK" to save the attributes after I open it everything works like it should.
    However, the advanced search (and custom search portlet) and the search APIs are not picking it up. I'm not sure if I'm hitting Metalink bug ID 5592472 or not as that's using the "set_attribute" procedure instead of the modify_item procedure. And their "workaround" of setting the attribute in the UI isn't really feasible for a couple thousand files.
    So far I've tried the following things to get it working:
    1. I am calling wwpro_api_invalidation.execute_cache_invalidation
    2. I have executed wwv_context.sync
    3. I cleared the page group cache
    4. I invalidated all of the web cache
    Does anyone else have any other suggestions?

  • How to add a custom attributes in Oracle HTML Quotes page?

    Hi,
    Could someone advice on the best way to add a custom attribute in Oracle HTML Sales Quoting page.
    As this page is not an OA page, we are not able to use the concept of View Objects using AK Developer.
    Thanks,
    Arathi

    I have a requirement from our end users that all of them requires a shortcut button in toolbar for submitting a request instead of going the normal way in order to submit a single request.
    please can any one help me out in solving this query.Any reason you want to use a shortcut rather than using (Requests > Submit) window?
    You can use "FND_REQUEST.SUBMIT_REQUEST" API -- https://forums.oracle.com/forums/search.jspa?threadID=&q=FND_REQUEST.SUBMIT_REQUEST&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
    How To Submit A Concurrent Request Set Using Fnd_Request.Submit_Request [ID 382791.1]
    How To Set ORG_ID When Submitting A Concurrent Request Using FND_REQUEST.SUBMIT_REQUEST in Release 12 [ID 1383266.1]
    Thanks,
    Hussein

  • Custom Attribute not available in Available Fields section of Configuration

    Hi Experts,
    My requirement is to add a custom search field in contact search screen. For that i tried various options
    Option1
    Added a model attribute in component/view  BP_CONT SEARCH/Search. The attribute got successfully added. But when i opened the Configuration tab, i could not see the attribute in the available fields.
    Option 2
    In the view CRMVC_SDESIGN, i created a new entry for my attribute in object type: BP_CONTACT and design object . But doing so, i got an error and was not able to add my attribute
    Option3
    Since the View context node 'Search' is bound to the Component Controller Context node 'Search'. I created my custom attribute in compoennt controller also. But this also did not help.
    Option 4
    I deleted the enhancement of the view and created a new enhancement. I created a value node in Search context node. But still the attribute is not available in the Availble Fields in the Configuration of component/view BP_CONT_SEARCH/SEARCH.
    Kindly provide your valuable suggestions to resolve this issue.
    Regards,
    Radhika
    Edited by: Radhika Chuttani on Jan 6, 2012 7:28 AM

    Hi Radhika,
    You need to enhance the search query structure as well in order to get the field in the configuration.
    You can find the BOL structure for the corresponding context node bol model.
    In your case, the BOL model is the search object 'BuilContactAdvancedSearch'.
    The corresponding structure can be found at the BOL Model Browser, under Dynamic Query Objects
    for the search object 'BuilContactAdvancedSearch'. The corresponding structure 'CRMT_BUPA_IL_CONP_SEARCH'
    has to be enhanced with the new custom attribute. Only then, this field would be available in the configuration
    when the following htm code gets executed when you open the configuration tab.
    <thtmlb:advancedSearch id                = "advs0"
                                     fieldMetadata     = "<%= controller->GET_DQUERY_DEFINITIONS( ) %>"
                                     header            = "<%= SEARCH->get_param_struct_name( ) %>"
                                     fieldNames        = "<%= controller->GET_POSSIBLE_FIELDS( ) %>"
                                     values            = "//SEARCH/PARAMETERS"
                                     maxHits           = "//SEARCH/MAX_HITS"
                                     ajaxDeltaHandling = "false"
                                     onEnter           = "search" />
    Here you can see that, it reads the parameter structure using the method SEARCH->get_param_struct_name( ) of
    the context node.This is used for configuration as well.
    Also if you have an F4 help for your custom attribute, you have to add it in the GET_DQUERY_DEFINITIONS( )  of the
    view controller. These additional information will help you to understand better.
    Regards
    Leon
    [SAP Community Network Forums on mobile|https://cw.sdn.sap.com/cw/ideas/7910]

  • AD Import using Custom Attributes?

    by default when you run AD import in UC, it fetched whole AD domain accounts which contains service accounts and a lot other stuff which one don't want to import.
    So choice is to search using a particular Base DN which query only one OU.
    But this simple query is not adequate in a organization which has a very complex and large OUs structure, users which needs to be UC enabled are distributed among many separate OUs.
    Is there some kind of filters or other method during AD import which can query users from AD based on security group membership or CustomAttributes. The best approach will be CustomAttributes based query, because we already published CustomAttribute15 with values "STAFF","Faculty" and "Students".
    The whole purpose which we want to achieve is to exclude STUDENTS category in AD import. Help me friends to achieve this task.

    Hi
    You can edit the LDAP filer used by CCM; with that you could filter on your custom attributes. See this post for a discussion of a similar modification; it's just a matter of putting together a new LDAP filter string to return the results you want.
    https://supportforums.cisco.com/message/3042759#3042759
    Regards
    Aaron
    Please rate helpful posts...

  • Records Management - Custom Attributes

    Hi all,
    I've created a Document Service provider in SRMREGEDIT in my RMS_ID. I archive the created documents with ORGANIZER in Documentum Archive Server.
    I have added a custom attribute to my Document type:
    1.- I want this custom attribute appears in ORGANIZER in the search window, so I can search the documents thru my custom attribute. How I can do this?
    2.- I also want to save my custom attribute in Documentum as attribute. How can I save SAP attributes in Documentum?
    Thanks in advance,
    Regards.
    Urtzi.

    Hi Urtzi,
    for custom attributs you need to create a Content Model (Customizing IMG). The Content Model description needs to be in the connection parameter values of your element typ Document. Then you have to customize your attributes in the dmwb (document modelling workbench), you should find your content model under the entity SRM, there you need to look for your content model id in documents, take the virtual class marked with "V" in the PHIO and LOIO classes, in the instance attribs you can finally customize your attributes by clicking the button "more". You have to hide all attributes you don´t need except SRM_DOCUMENT_ID. If you want to add own attributes you need to add them under IO-attributes first. When you restart your electronic desk now you should see the attributes you customized in the document and you are also able to search for these attributes now.
    You save these attributes for your documents by writing the Content Model ID into the connection parameter values (Document_Class) of your element typ Document. If you have different Documents that need different attributes you need to create a new Content Model.
    Hope that helps!
    Regards, Cornelia

  • Help with custom attributes in PPOMA_BBP

    Hello,
    I have added a custom cost center attribute in PPOMA_BBP. I basically a copied existing attribute CNT (cost center).  I created a data element and added it to BBP_ATTR_F1. I used OOATTRCUST to add the attribute and made an entry in BBP_ATTR_PROP using SE16. Also, I copied function module BBP_ATTR_F4_ACC and revised for created a custom help module.
    The search help works fine in PPOMA_BBP but the selected value is brought back, the value is initally placed the field next to the source system field. However, after a second or two the source system is placed in the custom attribute field and the source system field is blanked out.  The same thing happens when maintaining the value manually without using search help. 
    Is there something I missed?
    Regards, Dean.

    Hi
    Which SRM version are you using ?
    <b>Please see the SAP OSS Note -></b>
    Note 791465 - PPOMA_BBP:Incorrect search help in back-end for WBS elements
    Note 614875 EBP 3.5/4.0: Alpha conversion of the System ID (PPOMA_BBP) 
    Note 387012 Maintainance of customer attributes
    Note 217574 Maintain attribute material group (WGR, RESP_WGR)
    Re: Creating new user attribute
    <u>Other SAP Notes / related links -></u>
    Note 879030 Missing attribute BUK in report BBP_ATTR_TEXT_REFRESH
    Note 580769 EBP 3.+: Database error when saving attributes
    Note 511365 EBP 3.5: Incorrect default values for PRCAT
    Note 544159 EBP 3.+: Backend attributes - no synchronization of texts
    Note 545365 EBP 3.+: Refresh of the attribute texts in BBP_ATTR_VALUE_T
    Note 508710 EBP 3.5: Default backend-specific attributes are not read
    Note 379139 Performance when reading attributes
    Note 445401 BBPOR01: Attributes are read incorrectly (PM_VAWRK)
    Note 393290 BBPOR01: Attributes are read incorrectly
    Hope this will answer all your queries.
    Do let me know.
    Regards
    - Atul

Maybe you are looking for