ACS and AD groups

I have ACS v5 connected to a Windows 2008 AD.
Why cant I see any other groups besides the default builtin or Users?  If I set my Base DN to search for groups :  CN=Groups,DC=LAB,DC=LOCAL, I do not see any groups listed within it. But if I do CN=Builtin,DC=LAB,DC=LOCAL
Thank you
William

Hi,
You are hitting DDTS
CSCtc51643
http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtc51643
Please upgrade to ACS 5.1.

Similar Messages

  • AAA ACS and Nexus

    Hello,
    i am setting up tacacs+ aaa on nexus switch.
    Using nexus cli i can record all entered commands (see example 1).
    Using Cisco Device Manager with the same switch i cannot get a record of entered commands (see example 2).
    Via CDM, nexus is using snmpv3 and MD5 for authentication allowing me to type username/password to authenticate.
    How can i setup aaa on nexus to provide same level of reporting when using CDM and CLI?
    If anyone can provide some config info would be greatly appreciated.
    AAA config lines:
    feature tacacs+
    aaa authentication login default group AAA
    aaa accounting default group AAA
    tacacs-server host 5.5.5.5 key <key>
    aaa group server tacacs+ AAA
        server 5.5.5.5
        use-vrf management
    Example 1
    22/03/2011,14:45:57,MaxPower,Nexus,terminal length 0 (SUCCESS),0,none,0,10.2.2.44@pts/0,1.1.1.1,
    22/03/2011,14:45:57,MaxPower,Nexus,terminal session-timeout 60 (SUCCESS),0,none,0,10.2.2.44@pts/0,1.1.1.1,
    22/03/2011,14:45:57,MaxPower,Nexus,sync-snmp-password ******** MaxPower 10.2.2.44 (SUCCESS),0,none,0,10.2.2.44@pts/0,1.1.1.1,
    22/03/2011,14:46:02,MaxPower,Nexus,terminal length 0 (SUCCESS),0,none,0,10.2.2.44@pts/3,1.1.1.1,
    22/03/2011,14:46:02,MaxPower,Nexus,terminal session-timeout 60 (SUCCESS),0,none,0,10.2.2.44@pts/3,1.1.1.1,
    22/03/2011,14:46:03,MaxPower,Nexus,sync-snmp-password ******** MaxPower 10.2.2.44 (SUCCESS),0,none,0,10.2.2.44@pts/3,1.1.1.1,
    22/03/2011,14:46:11,MaxPower,Nexus,target (name:10.2.2.44/2162/0 address:10.2.2.44:2162 timeout:1500 retry:3 tagList:trap params:10.2.2.44/2162/0) added ,0,none,0,snmp_3277_10.2.2.44,1.1.1.1,
    22/03/2011,14:46:16,MaxPower,Nexus,target (name:10.2.2.44/2162/0 address:10.2.2.44:2162 timeout:1500 retry:3 tagList:trap params:10.2.2.44/2162/0) added ,0,none,0,snmp_3279_10.2.2.44,1.1.1.1,
    Example 2
    22/03/2011,14:46:36,MaxPower,ACSGroup,write <cr>,15,shell,tty2,2,10.10.10.15,
    22/03/2011,14:48:26,MaxPower,ACSGroup,configure terminal <cr>,15,shell,tty1,29,10.10.10.34,
    22/03/2011,14:49:06,MaxPower,ACSGroup,aaa group server tacacs+ AAA <cr>,15,shell,tty1,31,10.10.10.34,

    Hi
    there are many ways to achieve this, but the *correct* and most scalable is to enable command authorisation on your devices.
    In ACS create some groups based on the permissions levels each group should have.
    In the groups enable the shell (exec) service.
    At this point you can either list the denied commands for certains groups right in the group edit page itself.
    Alternatively, you can created Device Command Sets in the share profiles UI. These are more flexible because inside a single group you cap map to different DCSs based on the device being managed (either by device ip or by network device group)
    Its all there in the ACS docs!
    Good luck.

  • ACS and HA

    Hello,
    The purpose is to use a 802.1X authentication with ACS server, AD and high availibility.
    I have 2 sites with one AD with a 4 mega link bandwidth and one ACS for each site.
    I know that it is possible to use ACS active/passive mode with replication of database.
    but I also read that it's possible to use 2 groups on ACS and use HA,and my question is
    In my configuration with one AD and 2 ACS, can I use this functionality ?
    Is it possible to know the bandwidth between ACS in case of replication or active/active mode?
    Regards

    You can make it active / active too... Second Only one AD it is not at all problem. As sson as it need one IP or Name of AD server. Specify same name at both server. It will be replicate.
    Regards,
    Dharmesh Purohit

  • ACS and AAA deny statements

    I have 1 Windows box running ACS and four 7505 routers configured with AAA commands. Authentication is working fine on the routers via the ACS server. Now I need to deny certain commands like "DEBUG" to certain users without taking off their administrative rights. How can I achieve this?

    Hi
    there are many ways to achieve this, but the *correct* and most scalable is to enable command authorisation on your devices.
    In ACS create some groups based on the permissions levels each group should have.
    In the groups enable the shell (exec) service.
    At this point you can either list the denied commands for certains groups right in the group edit page itself.
    Alternatively, you can created Device Command Sets in the share profiles UI. These are more flexible because inside a single group you cap map to different DCSs based on the device being managed (either by device ip or by network device group)
    Its all there in the ACS docs!
    Good luck.

  • Lost connection between ACS and AD

    Hi
    I'm having a trouble with authentication to my WLAN. We are running a solution with LEAP and ACS 3.0 which gets it's users from our Active Directory. During the summer our ACS-servers seems to have lost the AD-connection and I'm no longer able to EAP-authenticate. All I get in the ACS is "Radius extension DLL rejected user".
    The AD and the ACS are on the same network but not on the same machine. I can log in if I add a local user in the ACS. I've also tried to empty my cached user database in the ACS but to no avail.
    One theory of mine is that it has something to do with a couple och hotfixes that Microsoft released in the middle of July.
    T.I.A
    /Tommy

    Hi
    Thanks for your replies. An update on the issue:
    I've gone through the issues in the suggestion made by cisco in the link:
    http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_field_notice09186a00800b1583.shtml
    but to no avail.
    At first we could se an error in the eventlog stating that the user didn't have sufficient rights but it disapeared when we created an account and ran the ACS-services via it.
    After that we tried to set up a local user in the ACS and it works like a charm even then the AD-accounts can't connect.
    We also tried to remove the hotfixes released by Microsoft but still nothing.
    Right now it seems as if the AD authenticates the user correctly but then the ACS says no. Here's the eventlog and the corresponding ACS-log.
    NT
    AUTH 08/19/2004 08:20:27 I 0266 1524 External DB [NTAuthenDLL.dll]: Starting MSCHAP authentication for user [LINEDU\gustomedu]
    AUTH 08/19/2004 08:20:27 I 0266 1524 External DB [NTAuthenDLL.dll]: Attempting NT/2000 authentication
    AUTH 08/19/2004 08:20:27 I 0266 1524 External DB [NTAuthenDLL.dll]: NT/2000 authentication SUCCESSFUL (by METIS)
    AUTH 08/19/2004 08:20:27 E 0266 1524 External DB [NTAuthenDLL.dll]: LookupAccountSidA failed
    ACS
    08/19/2004 08:20:27 Authen failed LINEDU\gustomedu Default Group 000a8aa291a8 Radius extension DLL rejected user .. .. 37 148.136.120.30
    The status right now is that it is working as long as we restart the ACS-server once a day.
    Tommy

  • Can Cisco ASA work with spaces in LDAP DN string to authenticate and assign group policies?

    I am having the hardest time getting a definitive answer to this;  basically, I have a Cisco ASA firewall that is using AD via LDAP to authenticate  users and assign them a group policy based on certain AD group memberships.
    The problem I think I have is that due to how our AD forest is structured, I have spaces in the DN string, as shown below...  I have tried enclosing the entire string in quotes, etc.  - nothing seems to work.  Basically, the string is not matched, and the users are assigned a non-matching default policy.  Cisco TAC thinks it is due to the spaces (highlighted) but I am not sure sure.
    Can some one please advise?
    CN=VPN_SSL_SPLIT,OU=Grps - ACS,OU=Res - Groups,OU=BU - Vesna.Resources,DC=DOM1,DC=US,DC=LOCAL

    We can troubleshoot this issue. Please provide me the following outputs:
    show run aaa-server
    show run ldap
    Turn on "debug ldap 255" and reproduce the issue. Paste the output here.
    Regards,
    Jatin Katyal
    *Do rate helpful posts*

  • How to restrict Sales office and Sales Group.

    Hi All,
    I want to restrict the users from changing the sales office and sales group in the sales order.
    Is there any standard way to achieve this or do we need to do with User exit??
    Please help.
    Thanks,
    Pavan.

    hi
    there is no standard settings for estrict the users from changing the sales office and sales group in the sales order
    so you have to write the logic in userexit
    DATA: lt_user_list   TYPE STANDARD TABLE OF tvarvc,
           lw_user_list   TYPE tvarvc,
           lr_user        TYPE RANGE OF syuname,
           lw_user        LIKE LINE OF lr_user.
    IF screen-name EQ ' VBAK-VKBUR' and   VBAK-VKGRP.
    * IF sy-tcode EQ 'VA02'.
    **Get list of users who are allowed to change SO - only they can change payment terms
         SELECT *
           FROM tvarvc
           INTO TABLE lt_user_list
          WHERE name = 'ZSD_VA02_ALLOWED'
            AND type = 'S'.
         IF sy-subrc = 0.
           LOOP AT lt_user_list INTO lw_user_list.
             lw_user-sign = lw_user_list-sign.
             lw_user-option = lw_user_list-opti.
             lw_user-low    = lw_user_list-low.
             lw_user-high   = lw_user_list-high.
             APPEND lw_user TO lr_user.
             CLEAR lw_user.
           ENDLOOP.
    **    If user is not in the users listed for change allowed
           IF sy-uname NOT IN lr_user.
             screen-input = 0.
           ELSE.
             screen-input = 1.
           ENDIF.
         ENDIF.
       ENDIF.
    ENDIF.
    go to STVARV t code here you check the NAME and give the user ids who need to change

  • V I Engineering, Inc has immediate needs for Systems Engineers (Contract) and Senior Systems Engineers (Contract) (reporting to the Test Software and Integration Group Manager)

    Company: V I Engineering, Inc.
    Locations: Various - USA
    Salary/Wage: $negotiable
    Status: Hourly Contractor
    Relevant Work Experience: 5+ years system integration (LabVIEW/TestStand experience required)
    Career Level: Intermediate/Experienced
    Education Level: Bachelor's Degree
    Residency/Citizenship: USA Citizenship or Greencard required
    Driving Business Results through Test Engineering
    V I Engineering, Inc. has a vision for every client we engage. That vision is to achieve on-time and on-budget program launch more efficiently that the competition. To realize this vision, customers need to achieve predictable test systems development, eliminate waste in test information management, and drive increased leverage of test assets. An underlying requirement for all of these areas is metrics tracking and measurement based decision making.
    Job Description
    Ready to make a difference? Bring your experiences and skills to the industry leading test organization. Help us to continue to shape the way the world views test. We are seeking a talented Systems Engineer Contractor to be responsible for technical execution of successful projects in the Medical, Military, Transportation, Consumer Electronics and Aerospace Industries. The position will have very high visibility to customers and vendors. This is a very fast paced team with close customer contact and strong career development opportunities. A large part of the position is to identify, own and drive technical design, development and installation of test systems. You will work alongside other like-minded and equally talented engineers, and be creative in a fast-paced and flexible environment that encourages you to think outside the box. You will be available to spend extended periods at our customer sites to complete system installations.
    Required
    5+ years of Systems Integration experience
    3+ years LabVIEW experience
    1+ years TestStand experience
    Experience in Implementation and Delivery of Test Systems, including integration
    Experience in ATE usage and development
    Experience in building and Integrating Mechanical Fixtures
    Experience in Understanding the design of Circuit Boards as they relate to a total system, and their fault-finding
    Experience in Taking Part in Technical Teams throughout All Phases of Project Lifecycle
    Experience in Interfacing with Sub-vendors and Customers
    Ability to Multitask
    Comfortable Working on Various Team Sizes
    Excellent Communication Skills
    Desired
    Requirements generation and review experience
    National Instruments Hardware knowledge
    Experience with Source Code Control (SCC)
    Experience executing verification and validation for projects
    Experience generating and/or reviewing cost proposals
    RF Technology (DAQ, General RF Theory)
    FPGA (with LabVIEW)
    Professional software engineering processes and metrics experience
    TortoiseSVN
    V I Package Manager (VIPM)
    Experience with Projects for Regulated Industries
    MS Project
    Formal Education
    Technical degree (BS Engineering, Computer Science, Physics, Math)
    National Instruments Courses a plus
    National Instruments certification a plus
    Notes:
    Expected Travel Time is up to 50%.
    V I Engineering, Inc. offers a dynamic work environment and the flexibility of a small company.
    The Test Software and Integration Group values innovation, out-of-the-box thinking, high-tech toys and a fun / amazingly collaborative working environment. We're a National Instruments Select Integrator, and we're the closest you can get to playing with all the pre-released and new NI toys without joining the NI R&D team - and we get to play with them in the real world.
    To apply for this position, email a cover letter and resume to [email protected] with the subject "TSIG Systems Engineer (Contract) employment application".
    Copyright © 2004-2015 Christopher G. Relf. Some Rights Reserved. This posting is licensed under a Creative Commons Attribution 2.5 License.

    Edit
    Jeff

  • V I Engineering, Inc has immediate needs for Systems Engineers and Senior Systems Engineers (reporting to the Test Software and Integration Group Manager)

    Company: V I Engineering, Inc.
    Locations: Positions available in our Farmington Hills, MI Office
    Salary/Wage: $negotiable
    Status: Full Time, Employee
    Relevant Work Experience: 5+ years system integration (LabVIEW/TestStand experience preferred, but not required)
    Career Level: Intermediate (Non-Manager)
    Education Level: Bachelor's Degree
    Residency/Citizenship: USA Citizenship or Greencard required
    Driving Business Results through Test Engineering
    V I Engineering, Inc. has a vision for every client we engage. That vision is to achieve on-time and on-budget program launch more efficiently that the competition. To realize this vision, customers need to achieve predictable test systems development, eliminate waste in test information management, and drive increased leverage of test assets. An underlying requirement for all of these areas is metrics tracking and measurement based decision making.
    Job Description
    Ready to make a difference? Bring your experiences and skills to the industry leading test organization. Help us to continue to shape the way the world views test. We are seeking a talented Systems Engineer to be responsible for technical execution of successful projects in the Medical, Military, Transportation, Consumer Electronics and Aerospace Industries. The position will have high visibility to customers and vendors. This is a very fast paced team with close customer contact and strong career development opportunities. A large part of the position is to identify, own and drive technical design and development of test systems. You will work alongside other like-minded and equally talented engineers, and be creative in a fast-paced and flexible environment that encourages you to think outside the box.
    Required
    5+ years of Systems Integration experience
    Experience in Design and Implementation of Test Systems, including integration
    Experience in ATE usage and development
    Experience in reviewing of Mechanical Fixtures
    Experience in understanding the design of Circuit Boards as they relate to a total system
    Experience in Taking Part in Technical Teams throughout All Phases of Project Lifecycle
    Experience in Interfacing with Sub-vendors and Customers
    Ability to Multitask
    Comfortable Working on Various Team Sizes
    Excellent Communication Skills
    Desired
    Requirements generation and review experience
    National Instruments Hardware knowledge
    LabVIEW/TestStand experience
    Experience with Source Code Control (SCC)
    Experience executing verification and validation for projects
    Experience generating and/or reviewing cost proposals
    RF Technology (DAQ, General RF Theory)
    FPGA (with LabVIEW)
    Professional software engineering processes and metrics experience (statement coverage, code size, reuse measurement, etc)
    TortoiseSVN
    V I Package Manager (VIPM)
    UML
    Experience with Projects for Regulated Industries
    MS Project
    Formal Education
    Technical degree (BS Engineering, Computer Science, Physics, Math)
    National Instruments Courses a plus
    National Instruments certification a plus
    Notes:
    Expected Travel Time is up to 25%Re
    location assistance is possible.
    V I Engineering, Inc. offers incredible opportunities to grow and advance your career, a dynamic work environment and the flexibility of a small company.
    The Test Software and Integration Group values innovation, out-of-the-box thinking, high-tech toys and a fun / amazingly collaborative working environment. We're a National Instruments Select Integrator, and we're the closest you can get to playing with all the pre-released and new NI toys without joining the NI R&D team - and we get to play with them in the real world.
    To apply for this position, email a cover letter and resume to [email protected] with the subject "TSIG Systems Engineer employment application".
    Copyright © 2004-2015 Christopher G. Relf. Some Rights Reserved. This posting is licensed under a Creative Commons Attribution 2.5 License.

    Edit
    Jeff

  • PO Line Item wise gross value for combination of WBS and Material Group

    Hello,
    Our requirement is to get report for PO Line Item wise gross value for combination of WBS and Material Group. Standard report ME2J gives net price but not gross value for Material Line items. Please let me know if any standard report( or ME2J) will suffice this requirement.
    Regards,
    Milind Dumbre

    Dear Milind
    No standard report available to get the PO Line Item wise gross value for combination of WBS and Material Group. Please go for development by taking reference ME2J.
    Warm regards
    Ramakrishna

  • Excise modvat accounts not defined for DLFC transaction and excise group

    Dear Experts,
    Iam raising this question after checking all the contents related to Sub Transaction type in SDN.
    My prob is: for raw material sales scenario i have created order delivery and invoice. For Invoice i have done account determination with a different G/L in VKOA. Now i have to create an excise invoice and the accounting entry for central ED on sales should go to different G/L account. for account determination i have done the following settings:
    Maintained Sub transaction type in
    IMG -> Logistics - General -> Tax on Goods movement -> India -> Basic Settings
    ->Maintain Sub Transaction types
    IMG -> Logistics - General -> Tax on Goods movement -> India ->
    Account determination -> Specify Excise Accounts per Excise Transaction.
    Here against DLFC sub transaction Type is maintained..
    Also
    IMG -> Logistics - General -> Tax on Goods movement -> India -> Account determination -> Specify G/L Accounts per Excise Transaction
    Here maintained Excise group with DLFC Company Code subtransaction type, chart of accounts and all required GL Account .
    But when the iam creating Excise Invoice in J1IIN and clicking on Subtransaction type-F4, no entries are shown. No values found is the message in green. Message no. DH801
    If i use subtransaction type and enter billing document and enter, the following error message comes:
    "Excise modvat accounts not defined for DLFC transaction and excise group"
    Iam unable to understand why the subtransaction type maintained is not showing in TCODE J1IIN?
    Regards

    For the error message DH801, please check note 840911
    Excise modvat accounts not defined for
           DLFC transaction and excise group"
    Please check  your G/L assignments "Specify G/L Accounts per Excise Transaction"
    thanks
    G. Lakshmipathi

  • Default Excise and series group

    Dear All,
    We have maitnain the Excise group and series group defaults for one sales area and shipping point and the plant and series group and excise group.
    The requirement is with the same combition we are doing local sale and the deemed export.We can do this by changing document type under utilization tab in excise invoice.As We have too many transections daily  we have done  settings as create excise invoice during creation of Invoice.In this its not possible to change the excise document type.In this case we want the excise documene type should come automatically.How we can do this?
    Furhter,with the same sales area and shipping point and the plant and excise group we have different series group.We want this also default. Is there any user exit to address this scenario.
    Please give your valuable inputs.
    Regards,
    Deepti

    Dear Dipti
    you can use J_1I7_USEREXIT_EXCISE_BEF_SAVE userexit , here you are refering to changing EXPIND in J_1IEXCHDR , then change the same and try
    for determining series group you can use the user exit J_1I7_USEREXIT_SERGRP_DETERM , to determine series group
    Jitesh

  • Maintain Excise and series group determination setting

    Hi Everybody,
    In maintain excise group and series group determination setting. My all the fields are common for both domestic and export and i have to differentiate with automatic excise invoice. When i was trying to do the setting in Maintain excise and series setting. Its not allowing me to save it.
    I explain in a better way
    Sales org.      Distribution ch.      Division    shipping point    Plant     excise Group    series group     export        sub transt. type
    in03                    z1                        z1                inpa              inpa            z1                  z1
    All these fields are common for export also. when i try to maintain setting for export. i just try to add export field as export under bond.  But it stops to do that. And our company policy is we can not create more distribution channel  or division.
    Can anybody tell me how to do that or is there any user exit for this.

    Hi,
    I had created a new series group and tried to assign in the maintain excise and series group determination. But it give the same error  "target ket must be different from the source key"
    What i had done is : i had created new series group i.e z3
    and maintained setting like that
    in03         z1       z1        inpa       inpa        z1     z3       Export under bond
    when i try to save it, it gives error.

  • How do I restore my tabs and tab groups after an update to version 36.0?

    I work with many tabs when I use Firefox. I keep them ordered in Tab Groups, which helps separate the different kids of work I do and interests I have. I have been using this environment for years. When I started my work today, Firefox updated to v36.0, and the following behaviour was noticed:
    1. There is only one tab group when attempting to show Tab Groups in Panorama, as opposed to around a dozen;
    2. Normally though the hidden tabs (the tabs in the same group as the startup group and not the default page) don't download content until clicked, the name of the page and icon, if available, will show on the tab. Presently, the tabs show "New Tab" and no icon. There appears, however, to be the number of tabs that exist across all Tab Groups but now are ghosts this one, default Tab Group. I'd have to add, though, I don't count the number of tabs, so I can't be exactly sure. When clicked, there is just a blank page. So it is odd that Firefox knows they are there but cannot simply attach the address to it.
    I have tried to restore the following files from my Windows Home Server backup to the AppData\Roaming\Mozilla\Firefox\Profiles\<gobbletygook>.default folder:
    1. In the sessionstore-backups folder, I replaced the previous.js, recovery.bak and recovery.js files (not any of the upgrade~) with files from yesterday and from two days before.
    When that didn't do anything, I replaced
    2. sessionCheckpoints.json
    I didn't see any file with a recent date that appeared to be one that I should restore. I should add that I do see hidden files. I thought about restoring the whole lot, but wasn't sure how this would affect the program on v36.0 and the profile files on 35.0.1.
    I have deadlines this week and need to immediately restore my environment in order to make those deadlines. I have no list of addresses to my Web pages to work in IE or other. Any help would be very much appreciated.
    On a second note, I had been wondering recently whether this tab group environment is a suitable way to maintain my work environment. Occasionally, when opening Panorama, I would get an error saying a script is taking too long, but if I clicked Continue, it would display the groups in a few seconds. I had considered putting all of it in Bookmarks though it would be tedious and more difficult to access and open multiple tabs. In the beginning, I tried Tab Groups thinking it was a simple matter of maintaining a table of addresses (in tabs) with a tab group ID or name. How could that go wrong? Well, it has, so it is obviously more complicated than that, and I didn't realise that upgrades would affect personal data. Should I abondon using tab groups?

    With the help of information from user, ptressel, in [https://support.mozilla.org/en-US/questions/1032154#answer-673322 a post here about the existence of sessionstore.js when version 33 was released], I was able to easily recover my tabs and tab groups as follows:
    # close Firefox and, perhaps, allow a few seconds (30s?) for any final closing of files;
    # check to see if you have a sessionstore.js file in your profile folder, named like the one I documented in my original post above;
    # if it is not timestamped prior to the discovery of your problem, open the sessionstore-backups folder;
    # check if the recovery.js file is suitably timestamped and, if not, the recovery.bak.
    # At this point, you are likely to find that none of them are prior to your problem occuring. If so, open your backups of this folder and go through steps 2-4 to find a file prior to your problem occuring.
    # When you find a file, copy it to the root of your current profile folder and name it, "sessionstore.js"
    # Open Firefox. Mine opened up as desired.
    This is a Windows solution. Sorry I can't comment on other platforms, but I'd bet that as this is just a file copy and renaming, it is likely the same.
    For Windows users, you may find you need to sign out and login as an administrator in order to access the backups. You need not logoff your standard account, but do have Firefox closed as described above.
    Hope that helps.

  • How to include Sales Office and Sales Group into FI report?

    Hi,
    I have a requirement to add Customer characteristics u201CSales Groupu201D and u201CSales Officeu201D into a FI report which is based on the InfoCube 0COOM_C02. The values that needs to be presented is actual data (Customer Master Data; NOT transactional value.
    In the DataSource u201C0COORDER_ATTRu201D, fields Sales Organization and Sales Group are present and it is brought to BW from R3. But I am not able to find the way to get the field Sales Office into SAP BW.
    I checked the extraction program for the DataSource u201C0COORDER_ATTRu201D, the fields Sales Org and Sales Group are coming from a table u201CCE41000u201D but in this particular table there is no Sales Office present.
    So can anyone guide me out in getting the Sales Office to the DataSource u201C0COORDER_ATTRu201D, or is there any way of getting it in BW directly by reading some Master Data table.
    Thanks in advance
    Prasapbi

    Hi Sangeeta,
    As per your statement, my understanding is that the Organization Attributes are not maintained in the Customization. If all the values are properly maintained then based on the Organization Data determination, the system would have picked up the data. You can first check the Organization Structure and see all the attributes are properly maintained or not and then check whether the Object Permitted in determination checkbox is checked. Then create a Transaction and see that all the Organization data are getting filled properly.
    Have a look at the following link for a complete guide to the Organization data determination customization.
    http://help.sap.com/saphelp_crm70/helpdata/en/6d/5c1738453fde16e10000009b38f8cf/frameset.htm
    If the Organization data customization is not meeting your requirements then you can have a second look at the development approach. Then we can have a look at the available Objects to get the desired functionality.
    Hope this helps.
    Thanks,
    Samantak.

Maybe you are looking for