ACS user creation from external interface

Hello
We have a bundle de Cisco WLC 5508 which authenticate users that try to connect to Wifi networks. Those users are stored in a Cisco Secure ACS 4.2 internal database.
We want to have a simple external web interface so that non-technical people can create users without access to the ACS.
Is it possible to create users in a certaing group through an script or any kind of external connector?

Yes, that is possible.
Scott
P.S. Please tell us your first name and put in in your handle and/or profile to help us.

Similar Messages

How to import user profiles from external sources(other than AD) into SharePoint

Hi,
I want to import user profiles from external sources other than AD.
Badri

You have to use BCS for importing the profiles,
Check the following link with explanations
http://msdn.microsoft.com/en-us/magazine/ee819133.aspx
Please Mark it as answer if this reply helps you in resolving the issue,It will help other users facing similar problem

Delete Intransit from APO which Loaded by PI from external interface

Hi all,
I am facinf a problem in deleting the Order created by External Interface.
We are loading Inransit as PO Mamo (ATP Category AH). Now we need to delete all the Record with AH ATP categoy before we reload new intransit to APO.
Problem is we are not able to delete those order as those are not in Live Cache.
We try using transaction /n/sapapo/bp2 but every time its throwing error "SAP APO system Q51CLNT100 has been declared as an SAP R/3 system.
and even i try deleting from /SAPAPO/RLCDEL. but its not deleting those order.
Can some one suggest what to do.
What all the option that we can try to delete the intransit.
Thanks & Regards,
Amit Sharma

Hi Amit,
You can use BAPI to delete AH ATP Category.
1. Read all Purchase Documents from BAPI_POSRVAPS_GETLIST3 for product u2013 location for AH Type ATP Category only.
2.Get the ORDID on the selection made.
3.Call BAPI_POSRVAPS_REMOVEITEMS and load the list of order no. and then delete it.
Please try this.
Thanks,
Dipankar

Move Users folders from external drive to a new internal drive

Hi All,
I have a white Intel iMac running Snow Leopard. I have kept the Users folder (4 users) on an external hard disk (too many photos and movies). The internal hard disk recently died, but since all user data was on the external, I wasn't too worried.
The iMac now has a new hard disk, and I've installed the system back, starting from the original System Install DVD so that all the iApps are also reinstalled.
What I want to do now is to move the user folders to the internal drive, and use the external for backups. It seems that I can't use Migration Assistant because it only works when moving data from another Mac or another startup drive. I've looked around the forums and on the web, and the only thing I found was a post on TUAW in which the writer talked about eventually having to do this but without giving much info about how to do it (http://www.tuaw.com/2009/05/14/tuaw-tip-moving-your-home-folder-to-another-disk- or-moving-it).
Does anyone have any experience moving the user folders from an external drive to an internal drive, (or even just having a Mac recognize user folders on an external drive from another machine)?

Hilal Malawi wrote:
Thanks, but that site doesn't have a clear answer.
Correct. As it clearly states, there are too many variables to have detailed solutions for every possible situation.
In the 'pink' box, which best matches my situation, the instructions begin with: "•You must be logged on to the account being moved...".
That's not clear at all. How do I log in to an account that doesn't exist yet? Connecting a hard disk that has a home folder to a new Mac doesn't allow me to 'log on' to that home folder's account, because it doesn't yet exist on the new Mac.
You may have to set up user accounts "from scratch." Then change the ownership and permissions on the old home folders so you can copy the contents of the sub-folders from the old home folders to the new ones.
If you're comfortable with permissions and Terminal, this may help: http://reviews.cnet.com/8301-13727_7-20013630-263.html

Ajax postback from external interface

Hi I need some help
I wanna be able to call a Javascript funktion which triggers an ajax postback, but when I call the function from flash with an external interface the page reloads in IE, not in FF or Chrome.
If I make a button outside flash which triggers the button and then the postback everything works fine.
Hope someone can help me with this one, cause im kinda stuck.
A sample of the problem can be viewed at flashproblem.dev.akopa.dk/

Screenath,
You need to setup the replication from R/3 to CRM to be able to do this. So external numbering in CRM with a different number range. Follow th best practice for master data, that should help.
Best regards,
Pascal.

Restoring a User Database from External Backup

It has been a good 8 years since I have had to recover a user database from backup and I just really wanted a verification of what needs to be recovered.
Just recently had a user get a C00E error and the analyzer suggested restoring from backups. No problem, we run backups daily on the mail server (yes ... we use windows *sigh*) and we use Veritas Backup Exec. to run full/incremental backups.
In order to recover the user, do I just need to restore the userXXX.db located in the ofuser folder? Since it will be a couple days older, will I need to restore anything else or should that folder alone be fine?
Thanks in advance for any input.

On 11/13/2012 1:26 PM, dpenney wrote:
>
> It has been a good 8 years since I have had to recover a user database
> from backup and I just really wanted a verification of what needs to be
> recovered.
>
> Just recently had a user get a C00E error and the analyzer suggested
> restoring from backups. No problem, we run backups daily on the mail
> server (yes ... we use windows *sigh*) and we use Veritas Backup Exec.
> to run full/incremental backups.
>
> In order to recover the user, do I just need to restore the userXXX.db
> located in the ofuser folder? Since it will be a couple days older,
> will I need to restore anything else or should that folder alone be
> fine?
>
> Thanks in advance for any input.
>
>
try that first
other things like MSGxxx and OFFILES are shared...

Mass User Creation from Excel

Hi,
May i know is it possible to mass create user in ecc6 with details(name, password, role) from excel?
May I know the steps to do this?
thank you.

Hi Alex.
From your post, I think you are using an R/3 system. We are using the SAP-CRM 5.0 server. Do the same things apply?
Someone had suggested that i need to enter A in the user type. But i am unable to understand where to enter 'A' for the dialog users. It is not prompting me anywhere to enter an alphabet. i just have to select the user type from the drop down provided. These are the steps i am following:
1. After activating ecatt in my system, i am accessing tr. SECATT and giving the required details and am starting the recording session. In that, after giving the login details, i am selecting 'Dialog' from the dropdown menu. After the recording is done, i am saving it and exiting.
2. then reentering the test script i just created, i used the simulator and gave all the parameters. but in user type, i could not give anything different from dialog.
3. then accessing the test configurator, i extracted the .txt file, opened with the excel sheet, and gave all the details. Here too, it did not have a column for user type.
Could you just help me in this regard?

Vendor Creation from external system

Hi there,
I have a requirement from the user:
An external system is used for vendor registration. The current process is where users need to create the vendor manually in SAP as there is no integration between the systems.
We can not make amendments to the external system due to business limitations.
The question is, can creation of vendor be automated via an scheduled interface where SAP grabs data from the external system? If yes, care to explain how can it be achieved?
SAP is running on DB2 and the external system is running on Oracle.
Please advice. Thanks!

Hi
I think it can be done.You need to develop a file based Interface.As soon as vendor data files placed in a dorectory program should pick that file and it should call a transaction code XK01 to create a vendor.
I belive this is high level infomation I am giving. A developer or Interface expert can help you.
Hope this will helps you.
Cheers
Umakanth

LabView user-event from external dll source

Hi!
I'm dealing with the following issue:
I use a CAN sniffer device, wich sends data over USB to a PC. The main goal is to create a vi that can process the incoming data. I already have a vi wich works with polling mechanism. It calls external DLL functions with the "Call library function node". The main problem is the polling mechanism.
I would like to recreate this vi so that it would work event-driven. I have an other application, written in C++, that does the same thing, and it gets interrupts from a DLL, when a new data is available in the input buffer.
The callback mechanism is implemented in the DLL.
In LabView I would like to do tha same thing. There is the "event case structure", but there is no option for defining such user-events, that i would prefer.
I have found a similar topic, there the solution is "occurrences". The occurrence is called from a DLL, too. But this solution uses the "waiting for occurrence to set", that is an endless-loop-like thing.
The other thing I've found is the ActiveX and .NET events. I don't know, probably that is the solution.
Anyway: is there a possibility to create such events, that can be generated from a simple external DLL and can be handled by "event case structure"? How should I do this?
Or how NI does this? I mean that NIs DAQ cards must use some similar methods for data processing. Is there some tutorial or support about it?
Thank you for your answer!

2716jag wrote:
Hi Wiebe, From your answer i have a doubt that What it exactly means "If the dll is used from within LabVIEW". Also i want to know Is there any way to access the functuions defined in the .SYS file in Labview Environment. Regards,Jagan Can you be a litte more specific with your first sentence. I have no good idea what you mean. A .sys driver is usually a kernel device driver. This driver has to be started and run in the kernel subsystem which LabVIEW can not access directly. Such a driver is initialized using the CreateFile() Windows API. The returned handle is then used with other API functions such as ReadFile(), WriteWile(), DeviceIoControl(), and finally CloseHandle().Theoretically you could call all this APIs directly from within LabVIEW using the Call Library Node. In practice you do not want to do this even for fairly simple kernel drivers since the parameters for those APIs do get fairly complex in most cases, and you usually do also want to have some sort of asynchronous operation using events or such to make the driver access user friendly. All these things are most easily handled in a user space DLL written in C that exports a more LabVIEW friendly API that you can then import into LabVIEW using the Call Library Node. Usually most kernel device drivers do come with a accompagning user space DLL already, as this is the only sensible way of accessing such a driver. So you can usually look for the documentation of that user space DLL API and go from there trying to import that into LabVIEW using the Call Library Node. Even then it may not be easy at all if that API uses complicated function parameters and even completely impossible if it uses callbacks or such, requiring you to write a so called wrapper DLL that translates between the native API and a more LabVIEW friendly API. You don't have to believe me but I can guarantee you that if writing such a user space DLL or wrapper DLL is beyond your capabilities, trying to go directly about accessing the Windows APIs in LabVIEW to access a kernel device driver is going to make you squirm in real pain. And those knowing how to write such a DLL would never even consider spending the time to try to access a kernel device driver directly from LabVIEW. Rolf Kalbermatter

What is the best way to get/change data in R/3 from external interface?

Hi SAP gurus,
I have a problem to know what is the best technology to access and maintenance all SAP functionality and data too in R/3 systems.
Anyone know if connectors (.NET or JCO) are the only solution to manipulate all SAP system data or exist other way?
One thing more, what is the best connector, with more functionality?
E.g. The screen painter was made in C++ and is executed by user event in R/3 system, so would like to know if it's exist any way to do the same but replace the screen painter to another custom application?
Regards

Hello Vitor
Not all functions and data are externally accessible. Only those business objects (e.g. like sales order, customer, material) for which BAPIs are available (transaction BAPI ) can be accessed via RFC.
Regards,
Uwe

Editing LDAP User attributes from UME interface

Hi Gurus,
We want to develop a solution with user management screens in WD. These screens will provide password reset and unlock functionality for users. Our users are stored in LDAP. Current connection to LDAP is in Read Only manner.
I want to know
1. How to enable the connection from UME to LDAP in read/write manner?
2. What certificates need to be exchanged for write access? if any?
3. What changes needs to be done in config file of UME?
4. Which permissions should be granted for communication user to edit LDAP user attributes?
Even after performing the change to read LDAP in read/write manner, will it be sure: If we lock user from UME, it will lock LDAP user? please comment.
regards
Kedar Kulkarni

Hi,
We are half way into our application between UME and LDAP. We have developed screens and tested in our internal server. In internal landscape, UME is connected to LDAP in read only fashion. So when we try to create User, it gets created in UME.
But when we deploy same application into client landscape, we receive error as below:
No data source feels responsible for principal. Please check the data source configuration
Now we are not sure why this error is getting displayed.
In client landscape there are 2 LDAPs connected to UME, with only one LDAP in read/ write access.
Is there any way we can check which LDAP is being accessed by our code? Is there any concept of Default LDAP?
Any code to access LDAP details will help us lot.
regards
Kedar Kulkarni

PR creation from External / Service Activity

Hi all,
we are currently using External and Services activities.
The Service activity should generate a PR as soon as it's released whereas the External activity should never generate a PR.
I'm trying to link the "Reservation Relevance/Generation of Purchase Requisition" field with the "Control Key" :
Never create a PR <=> PS02
Create a PR from Release <=> PS04
Do you know if there is a way in Customizing do default the field depending on the Control Key? (I would like to avoid a validation rule...)
Thanks for your help.
Kind regards,
Thibault

Hello,
If you never want ot generate the PR for external activity, then work is simple:
1) Change the control key PS02 in transaction OPSU and check the box "service".OR alternatively you can make new control key copying PS02 and abandon the use of original PS02 in your projects.
This will make sure that every time you are using PS02, it will always generate the service PR. Also in network profile settings(OPUU), maintain indicator "2" for Res/Pur Req.
Hope this solves your problem without using any validation !
Regards,
Mahendra

User creation from existing SU01 user

Hi All
While creating a user from an existing Su01 user, i am getting the follwoing error:
'Action is not possible, HR/ALE distribution active'
Could someone help me with this ?
Regards

Hi,
We are facing same issue " HR/ALE distribution is active. Distribute the user information newly".
But in our case we have HR integration is there since all HR master coming from HR system. Now this is strange because we are facing this issue only for one user. Rests of the users are ok.
I think in our case we can not change the status of PBPHR as off.
Is there any other opinion on this?
Thanks,
SRM

User roles from external active directory

Hi,
I am using my own active directory and not the embedded LDAP on weblogic.
On weblogic server, there the role names and the Provider configured
at path Home >Summary of Security Realms >myrealm >Users and Groups > Groups tab
The provider is configured at path
Home >Summary of Security Realms >myrealm >Users and Groups >Providers
Under 'Provider specific' tab, I have configured the Host, Port, Principal, Credentials etc.
I want to get these roles for the user who is login to the app.
I tried to follow the steps on http://biemond.blogspot.com/2008/12/using-weblogic-provider-as.html, However, when I run the 'Configure ADF Security' wizard I don't get the 'Identity Store' and 'LDAP Identity Store'.
Can someone please guide me on this with the proper steps and some specific jars if required for this?

I don't think these links are useful for me. Here is what I am trying to do. Not sure this is right way to do this. I am really stuck on this and need quick help. Please help.
public boolean isInitiatorRole(String userName) {
      System.out.println("++++ Calling isInitiatorRole()");
      boolean hasRole = false;
      Hashtable factEnv = new Hashtable();
      Hashtable storeEnv = new Hashtable();
      IdentityStoreFactoryBuilder builder = new IdentityStoreFactoryBuilder();
      IdentityStoreFactory adFactory =null;
      IdentityStore idStore =null;
      System.setProperty("javax.net.ssl.trustStore", "/xxx/local/apps/oracle/SOA/jrmc-3.1.2-1.6.0/jre/lib/security/cacerts");
      System.setProperty("javax.net.ssl.trustStorePassword", "changeit");
      String   storeLocation1 = System.getProperty("javax.net.ssl.trustStore")!=null?System.getProperty("javax.net.ssl.trustStore"):"###";
      String   storePass1 = System.getProperty("javax.net.ssl.trustStorePassword")!=null?System.getProperty("javax.net.ssl.trustStorePassword"):"###";
// creating the factory instance
      factEnv.put(ADIdentityStoreFactory.ST_SECURITY_PRINCIPAL,"ABCD");
      factEnv.put(ADIdentityStoreFactory.ST_SECURITY_CREDENTIALS,"*****");
      factEnv.put(ADIdentityStoreFactory.ST_LDAP_URL, "ldap://xxx-xxxx-01.xxx.com:389/");
      factEnv.put("java.naming.security.protocol","SSL");
// creating the store instance
      storeEnv.put(ADIdentityStoreFactory.ST_SUBSCRIBER_NAME, "CN=itfusion,OU=Service Accounts,OU=Security,DC=adweb,DC=bmc,DC=com");
      System.out.println("++ AFTER setting prop storeLocation1:"+ storeLocation1 + "   ++ storePass1:"+ storePass1);
        try {
            System.out.println("++++ TRY LOOP");
//          System.out.println("++++ User from context: " +ADFContext.getCurrent().getSecurityContext().getUserRoles());
            adFactory = builder.getIdentityStoreFactory("oracle.security.idm.providers.ad.ADIdentityStoreFactory", factEnv);
            if(adFactory != null){
              System.out.println("++++ adFactory not null");
            }else{
              System.out.println("++++ adFactory null");
            idStore= adFactory.getIdentityStoreInstance(storeEnv);
            if(idStore != null){
              System.out.println("++++ idStore not null");
            }else{
              System.out.println("++++ idStore null");
            User user;
            user = idStore.searchUser(userName);
              if(user != null){
                  System.out.println("++++ User not null");
                  RoleManager roleManager;
                  roleManager = idStore.getRoleManager();
                  SearchResponse resp;
                  resp = roleManager.getGrantedRoles(user.getPrincipal(), true);
                  System.out.println("++++ IN WHILE LOOP");
                  while( resp.hasNext() ) {
                      System.out.println("++++ IN WHILE LOOP");
                      Identity id = resp.next();
                      String roleName = id.getName();
                      if(roleName != null){
                        System.out.println("Role Name:" + roleName);
                      }else{
                        System.out.println("Role Name is null");
      //                if( roleName != null && roleName.toUpperCase().indexOf("INITIATOR")>0) {
      ////                  if( roleName != null && roleName.toUpperCase().indexOf("XXXXX")>0) {
      //                    hasRole = true;
      //                    break;
                }else{
                  System.out.println("User is null");
        } catch (IMException e) {
            log.info("??? Error occured while checking the role for Initiator");
        return hasRole;
}

Password Violation error while creating users from Admin interface

Guys,
The Sun Identity Manager system throws policy violation error while creating users from Sun Identity Manager Admin interface.
Current System:
1. I have configured TAM Pass-Thru authentication for End User Login Application.
2. I have an admin user 'testsjimadmin1' who has admin capabilities. testsjimadmin1 user has default SJIM password policy.
3. I have custom password policies configured for different orgainizatoions
Problem:
1. The Sun Identity Manager throws a password policy violation error when 'testsjimadmin1' tries to create an user with valid or invalid password from Sun Identity Manager Admin interface.
2. If TAM Pass-thru authentication is removed for 'End User Login Application' and Sun Identity Manager default authentication is configured for 'End User Login Application' then testsjimadmin1 was able to create user successfully without any errors.
Please let me know if any configurations are required to be made on Sun Identity Manager for TAM Pass-Thru authentication so that admin users can create users successfully from admin interface.
Appreciate your help!!!
Thanks
Vijay

Guys,
The Sun Identity Manager system throws policy violation error while creating users from Sun Identity Manager Admin interface.
Current System:
1. I have configured TAM Pass-Thru authentication for End User Login Application.
2. I have an admin user 'testsjimadmin1' who has admin capabilities. testsjimadmin1 user has default SJIM password policy.
3. I have custom password policies configured for different orgainizatoions
Problem:
1. The Sun Identity Manager throws a password policy violation error when 'testsjimadmin1' tries to create an user with valid or invalid password from Sun Identity Manager Admin interface.
2. If TAM Pass-thru authentication is removed for 'End User Login Application' and Sun Identity Manager default authentication is configured for 'End User Login Application' then testsjimadmin1 was able to create user successfully without any errors.
Please let me know if any configurations are required to be made on Sun Identity Manager for TAM Pass-Thru authentication so that admin users can create users successfully from admin interface.
Appreciate your help!!!
Thanks
Vijay

ACS user creation from external interface

Similar Messages

Maybe you are looking for