Add Group of LDAP Users

I want to add just a group of users to our Teaming 2.0 server. I have a group in eDir that I created so that I don't have to synch a Context. How do I add this group? I've specified the context that the group is in, but when I try applying, nothing happens. Am I incorrect that you can add a group of users to teaming using LDAP?
jv

johnnyv5,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Similar Messages

  • Configure Groups to LDAP Users

    Hi,
    We have configured LDAP for authentication of users. We would like to associate set of users to groups.
    Can we create custom groups and associate LDAP users to those groups in Weblogic server ?
    Or is it the only way we need to create groups in LDAP and associate users to those groups?
    Thanks,
    Satya

    Satya, if u have a user in ur LDAP, you cant make a user from ur LDAP be a member of a Group in WLS.
    What you can do it modify the Global Roles so that the user has the same previledge as a user belonging to the group in WLS.
    Follow the steps below
    1. Go to "myrealm"
    2. Click the tab "Roles and Policies"
    3. Click the tab "Realm Roles"
    4. Expand the link "Global Roles"
    5. Click the link "View Role Conditions" coressponding to the name "Admin". Enter the panel "Edit Global Role"
    6. Click the button "Add Conditions"
    7. Select "Predicate List" as "user"
    8. Click the button "Next"
    9. Enter my username (ldapuser) in LDAP to the field "User Argument Name:"
    10. Click the button "Add"
    11. Click the button "Finish"
    12. Back to the page "Edit Global Role"
    13. Here I can see
    User :ldapuser
    Or
    Group : Administrators
    14. Click the button "Save"
    15. Restart the server
    ldapuser will have the same previledge as a user belonging to Administrator group..

  • Not able to add groups to the user ODSEE via OIM 11g R2

    Hi,
    I have created some groups in ODSEE and ran the recon job to sync these groups in OIM 11g R2.
    Groups are populated in OIM 11g R2 and while raising the request for ODSEE Application Instance I can see these groups.
    Now following are the issues I am facing :
    1. ODSEE groups are not getting displayed in Catalog ( I have ran the Entittlement-List job also)
    2. When I request for a group while creating the request, the group is not getting assigned to the user in ODSEE, wherein user is getting created in ODSEE successfully.
    Please help.
    Thanks

    Please let me know what could be the reason of not adding the groups to the user in ODSEE.
    I was able to add the groups successfully to user by assigning the groups while raising the request in OIM 11g R1.
    But the same is not working in OIM 11g R2, if I check the OIM logs it is calling the function ADDUSERTOGROUP but the groups are not getting assigned to user.
    Thanks

  • Add groups to a user

    Hello,
    we want do add groups (groupwise memberships) to a user. We have groupsie 8. But the commit don't add the group. The user, who wants to write to the nds have admin rights. What shell i do?
    Kind regards
    monika

    we use visual Basic 6

  • Add group to AD user gives errors

    Hi,
    I have AD 9.1.1.5 connector installed in our environment and adding AD group to the user gives the below error:
    ERROR,28 Sep 2011 04:31:59,280,[OIMCP.ADCS],================= Start Stack Trace =======================
    ERROR,28 Sep 2011 04:31:59,280,[OIMCP.ADCS],com.thortech.xl.integration.ActiveDirectory.tcADUtilLDAPController : hashTableEnvForDirContext
    ERROR,28 Sep 2011 04:31:59,280,[OIMCP.ADCS],
    ERROR,28 Sep 2011 04:31:59,280,[OIMCP.ADCS],Description : null
    ERROR,28 Sep 2011 04:31:59,280,[OIMCP.ADCS],java.lang.NullPointerException
    at java.util.Hashtable.put(Hashtable.java:396)
    at com.thortech.xl.integration.ActiveDirectory.tcADUtilLDAPController.hashTableEnvForDirContext(Unknown Source)
    at com.thortech.xl.integration.ActiveDirectory.tcADUtilLDAPController.connectToAvailableAD(Unknown Source)
    at com.thortech.xl.integration.ActiveDirectory.tcADUtilLDAPController.getAttributeValues(Unknown Source)
    at com.thortech.xl.integration.ActiveDirectory.tcUtilADTasks.addUserToGroup(Unknown Source)
    Thanks!

    Run OIM under debugger, set a breakpoint at tcADUtilLDAPController.hashTableEnvForDirContext(). Check that the map in the hmConstantsLookUp instance field has the following attributes set:
    "SCONTEXTFACTORY"
    "ATT_BINARY"
    "LDAP_OBJECT_GUID"
    "SSL"
    check also that the following instance fields are not null:
    sPrincipal
    sPassword

  • Cannot add groups to new users

    1, I add users in WebLogic 11g. However, in the Parent Groups page, I cannot move any groups to the right dropdown list.
    2, I am going to add new users for Oracle SOA Suite worklist. Does anyone know how to do it?

    you need to update and add user in jazn-data.xml file and restart bpel server then you will be able to look up the users using jazn tool
    To assign the credentials navigate to $Oracle_Home\integration\ orabpel\system\appserver\oc4j\j2ee and use the command
    java -jar jazn.jar -adduser jazn.com soauser1 admin123
    RealmLoginModule username: admin
    RealmLoginModule password:
    This will create a user 'soauser1' with password 'admin123'
    update the jazn-data.xml :
    <user>
    <name>soauser1</name>
    <credentials>!admin123</credentials>
    </user>
    This is one way also you can create users using EM console
    Regards,
    Deepa

  • HT4837 3rd Party LDAP users in local groups aren't recognized by wiki

    Having followed the KB article on setting up wiki webauth to allow 3rd party LDAP users to authenticate (http://support.apple.com/kb/HT4837) I have found that while individual users can be given permissions to access certain wikis, but LDAP users placed into local groups cannot.  Is this a bug?
    To be more specific:
    - Directory Access setup to allow authentication from LDAP server (this works fine for all other services like File Sharing)
    - Directions followed in the KB article which basically enables plain text authentication and turns off inline login window (http://support.apple.com/kb/HT4837)
    - Local groups created in Server.app -- Accounts -> Groups
    - LDAP users placed into those local groups
    - Services like file sharing recognize proper permissions based on the groups the LDAP users are in
    - Configure a wiki to allow access from a single LDAP user (Gear Icon -> Wiki Settings...) ... this works fine
    - Configure a wiki to allow access from the local groups containing LDAP users (again, Gear Icon -> Wiki Settings) ... this appears like it is going to work, but it in fact will fail to give permissions to LDAP users of the respective group upon that user's login.  A local user (Server.app -> Accounts -> Users) added to one of these local groups with LDAP people in it works fine and receives proper access to the wiki as expected.
    Any ideas before I submit this as a bug?

    Having followed the KB article on setting up wiki webauth to allow 3rd party LDAP users to authenticate (http://support.apple.com/kb/HT4837) I have found that while individual users can be given permissions to access certain wikis, but LDAP users placed into local groups cannot.  Is this a bug?
    To be more specific:
    - Directory Access setup to allow authentication from LDAP server (this works fine for all other services like File Sharing)
    - Directions followed in the KB article which basically enables plain text authentication and turns off inline login window (http://support.apple.com/kb/HT4837)
    - Local groups created in Server.app -- Accounts -> Groups
    - LDAP users placed into those local groups
    - Services like file sharing recognize proper permissions based on the groups the LDAP users are in
    - Configure a wiki to allow access from a single LDAP user (Gear Icon -> Wiki Settings...) ... this works fine
    - Configure a wiki to allow access from the local groups containing LDAP users (again, Gear Icon -> Wiki Settings) ... this appears like it is going to work, but it in fact will fail to give permissions to LDAP users of the respective group upon that user's login.  A local user (Server.app -> Accounts -> Users) added to one of these local groups with LDAP people in it works fine and receives proper access to the wiki as expected.
    Any ideas before I submit this as a bug?

  • Can't add groups or users to the wiki

    I've found a few threads on this, but none of them have presented a solution.
    Setup:
    XServe with Leopard 10.5.4 on it.
    Advanced mode.
    Problem:
    Under the Server Admin panel, if I add a user or group to have Wiki and Blog permissions, if I click save, the user and or groups do not stay in the list. And on the site they do not have wiki or blog options. The group/user vanished.
    If I try to enable wiki and blog options for a group under the "basic" tab in Workgroup Manager, all options are disabled (i.e. - "Enable the following services for this group on: (None)" is disabled.
    The DNS is set appropriately.
    The machine is (correctly) set for Open Directory - Stand Alone server.
    Here is an interesting addition to the problem.
    1.) Through the System Admin panel, if I add a user to the wiki permission list, and click save
    2.) Open a broswer over the System Admin panel (without navigating to anywhere else in System Admin) and log in to the local wiki
    3.) The "groups" button is enabled, but the "users" button is not.
    4.) Click on "groups"
    5.) Now the "users" button is also enabled.
    6.) Go to "Users"
    7.) Select "create a blog" and enter my username and password.
    8.) Give my blog a name.
    9.) Now the blog shows up under the Users list.
    10.) Open my blog in the users list.
    11.) Create a new blog entry.
    12.) Go back to System Admin panel, navigate anywhere else, and then return to the wiki settings for the appropriate site, the user and or groups are gone once again.
    13.) Go back to the web broswers and pull up the local wiki.
    14.) "groups" will be enabled. "users" will be disabled.
    15.) Click "groups"
    16.) "Users" is now enabled.
    17.) Click on "users"
    18 a.) Often a 404 page appears, or a wiki page that is pure text (no html).
    18 b.) Refresh the page, and now the normal list of user blogs appears.
    19.) Click on the blog I created previously.
    20.) Viola! It is completely usable and viewable, but the User will NEVER appear as having permissions under the Web options in Server Admin.

    @ Pope7
    Hi
    The machine is (correctly) set for Open Directory - Stand Alone server
    If this is truly what is says then whatever you are trying to achieve won't happen. The Server has to be an OD Master and users and groups need to exist in the LDAP node. Wiki, Blog and iCal will not be available as services until you you do this.
    The DNS is set appropriately
    The foundation for a successful Open Directory Master offering LDAP and SSO is DNS. Don't confuse an external DNS service with an internal one that the server will require. You don't have to configure DNS on the server itself just as long as it is configured on another server on the same network will do.
    @ simonblackledge
    Hi
    Using DM to make a group. Goto the tab for services and everything ..wiki etc.. is ghosted out
    What's DM? If you are not seeing an option to enable calendaring in the Users Advanced Tab or similar options for Wiki, Blog etc in the Groups Tab then either you are in the Local node in which case these services won't work or your Server is not configured as an OD Master. Same advice applies to you really.
    The admin manual although poor does clearly state what's required:
    http://images.apple.com/server/macosx/docs/iCalService_Admin_v10.5_2ndEd.pdf
    You should download this one as well:
    http://images.apple.com/server/macosx/docs/OpenDirectory_Admin_v10.5_2ndEd.pdf
    Finally there is a requirement for clients to be bound to the Server for this to be truly effective. Use Directory Utility found in /Applications/Utilites to achieve this.
    If I'm telling you something you already know then please accept my apologies.
    Tony

  • Server App not seeing external LDAP users & groups

    I have a clean 10.8.2 + Server install set up with our standard external LDAP directory (Novell's eDirectory in our case) configuration that is known to support Lion & Mountain Lion client LDAP authentication. With this same configuration on OS X 10.8.2 Server both Directory Utility and WGM can see all the LDAP users and groups as expected.
    When I look for the external users & groups in the LDAP domain under the Server App "Accounts" heading I cannot see any entries in either users or groups lists. Should I be able to or is this a Server App quirk?
    I can add individual LDAP users to a local group and enable access to individual services. How can I give access to services to all LDAP users without having to build & maintain a massive "All LDAP Users" local group?
    Is there a published list of required LDAP attributes for users & groups for Mountain Lion Server? I suspect there are new requirements over and above those for 10.6 server but I have failed to find a good reference. I've noticed I get different behaviours for LDAP templates that includes a mapping for GeneratedUID to one which does not for example.
    This is all so much more opaque than our superbly reliable Snow Leopard servers!
    TIA

    Ok, and again:
    You want to see Users and Groups , which are stored in an third Party directory service like OpenLDAP, in your Server.app? This is what you have to do:
    Connect the third party ldap to your server
    Have all your external LDAP entries made so you can see them in the Workgroup Manager and are able to Login with them
    When you see your LDAP-entry in the Directory Manager, change it from "From Server" to "RFC2307"
    Edit the entry, add the following mapping to it:GeneratedUUID maps to apple-generateduuid
    To your group and user entries in the external LDAP add the follwing attribute:apple-generateduuid gets the value taken from the output of "uuidgen"
    Feel lucky
    And there ist ist; now you are able to use The accounts taken from an external LDAP.

  • LDAP Users and Groups

    Hi,
    <p>
    I have configured an LDAP Authenticator for an external LDAP directory in the security realm of the samples portal. User Management is working, but when I try to access the Group Management for the LDAP Authenticator I get the following error:
    </p>
    <i>com.bea.p13n.usermgmt.hierarchy.TreeNotBuiltException: State: UNINITIALIZED. Tree is uninitialized. Add provider GAAD to list of providers to build. Tree is uninitialized. Add provider GAAD to list of providers to build.
    </i>
    <p>
    It seems that this needs to be setup. How do I do this?
    </p>
    <p>
    Some general notes on LDAP:
    </p><p>
    I think that in a production environment it is of great value to manage users and groups in a LDAP directory. For instance we have a company directory which contains all users. It seems that users from LDAP can not been added to groups which are in the DB. LDAP also has the advantage of supporting dynamic groups.
    As in previous weblogic releases the LDAP authenticator is read only. It would be great if the write functionality could be added as well. Actually managing LDAP users and groups in one place would be a tremendous improvement for us.
    </p><p>
    Another thing on my wishlist are examples for delegated administration and visitor entitlements. For the sample portal these are empty. But I think it would be nice to have some out of the box examples that show what is possible and help developers and business analysts to understand the concepts and create their own roles.
    </p><p>
    It would be interesting to read what Bea and other developer think about this.
    </p><p>
    Kind regards,
    <p>
    Kai
    </p>

    Marcus,
    Yes, I am using 9.2 TP.
    We are already using LDAP for user management with 8.1.
    Now, I try to configure 9.2 as well. I am running 9.2 installations on different machines. When I click on Service Administration in the Admin Portal, I get the following error message for each installation:
    java.lang.NullPointerException at com.bea.jsptools.serviceadmin.ads.ToolAdServiceBean.cloneFromAdServiceBean(ToolAdServiceBean.java:190) at com.bea.jsptools.serviceadmin.ServiceAdminTreeBuilder.buildAdContentProviderNodes(ServiceAdminTreeBuilder.java:769) at com.bea.jsptools.serviceadmin.ServiceAdminTreeBuilder.buildAdServiceBranch(ServiceAdminTreeBuilder.java:746) at com.bea.jsptools.serviceadmin.ServiceAdminTreeBuilder.createTreeElement(ServiceAdminTreeBuilder.java:184) at com.bea.jsptools.patterns.tree.TreeService$DefaultTreeServiceImpl.buildWholeTree(TreeService.java:234) at com.bea.jsptools.patterns.tree.TreeService$DefaultTreeServiceImpl.buildWholeTree(TreeService.java:235) at com.bea.jsptools.patterns.tree.TreeService$DefaultTreeServiceImpl.buildTree(TreeService.java:122) at util.tree.TreeController.constructTree(TreeController.java:142) at util.tree.TreeController.buildTree(TreeController.java:422) at jrockit.reflect.VirtualNativeMethodInvoker.invoke(Ljava.lang.Object;[Ljava.lang.Object;)Ljava.lang.Object;(Unknown Source) at java.lang.reflect.Method.invoke(Ljava.lang.Object;[Ljava.lang.Object;I)Ljava.lang.Object;(Unknown Source) at org.apache.beehive.netui.pageflow.FlowController.invokeActionMethod(FlowController.java:852) at org.apache.beehive.netui.pageflow.FlowController.getActionMethodForward(FlowController.java:782) at org.apache.beehive.netui.pageflow.FlowController.internalExecute(FlowController.java:456) at org.apache.beehive.netui.pageflow.PageFlowController.internalExecute(PageFlowController.java:285) at org.apache.beehive.netui.pageflow.FlowController.execute(FlowController.java:336) at org.apache.beehive.netui.pageflow.internal.FlowControllerAction.execute(FlowControllerAction.java:48) at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:419) at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.access$201(PageFlowRequestProcessor.java:97) at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor$ActionRunner.execute(PageFlowRequestProcessor.java:1984) at org.apache.beehive.netui.pageflow.interceptor.action.internal.ActionInterceptors.wrapAction(ActionInterceptors.java:90) at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.processActionPerform(PageFlowRequestProcessor.java:2055) at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:224) at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.processInternal(PageFlowRequestProcessor.java:535) at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.process(PageFlowRequestProcessor.java:821) at org.apache.beehive.netui.pageflow.AutoRegisterActionServlet.process(AutoRegisterActionServlet.java:625) at org.apache.beehive.netui.pageflow.PageFlowActionServlet.process(PageFlowActionServlet.java:156) at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:414) at org.apache.beehive.netui.pageflow.PageFlowUtils.strutsLookup(PageFlowUtils.java:1178)
    java.lang.NullPointerException
    java.lang.NullPointerException
    at com.bea.jsptools.serviceadmin.ads.ToolAdServiceBean.cloneFromAdServiceBean(ToolAdServiceBean.java:190)
    at com.bea.jsptools.serviceadmin.ServiceAdminTreeBuilder.buildAdContentProviderNodes(ServiceAdminTreeBuilder.java:769)
    at com.bea.jsptools.serviceadmin.ServiceAdminTreeBuilder.buildAdServiceBranch(ServiceAdminTreeBuilder.java:746)
    at com.bea.jsptools.serviceadmin.ServiceAdminTreeBuilder.createTreeElement(ServiceAdminTreeBuilder.java:184)
    at com.bea.jsptools.patterns.tree.TreeService$DefaultTreeServiceImpl.buildWholeTree(TreeService.java:234)
    at com.bea.jsptools.patterns.tree.TreeService$DefaultTreeServiceImpl.buildWholeTree(TreeService.java:235)
    at com.bea.jsptools.patterns.tree.TreeService$DefaultTreeServiceImpl.buildTree(TreeService.java:122)
    at util.tree.TreeController.constructTree(TreeController.java:142)
    at util.tree.TreeController.buildTree(TreeController.java:422)
    at jrockit.reflect.VirtualNativeMethodInvoker.invoke(Ljava.lang.Object;[Ljava.lang.Object;)Ljava.lang.Object;(Unknown Source)
    at java.lang.reflect.Method.invoke(Ljava.lang.Object;[Ljava.lang.Object;I)Ljava.lang.Object;(Unknown Source)
    at org.apache.beehive.netui.pageflow.FlowController.invokeActionMethod(FlowController.java:852)
    at org.apache.beehive.netui.pageflow.FlowController.getActionMethodForward(FlowController.java:782)
    at org.apache.beehive.netui.pageflow.FlowController.internalExecute(FlowController.java:456)
    at org.apache.beehive.netui.pageflow.PageFlowController.internalExecute(PageFlowController.java:285)
    at org.apache.beehive.netui.pageflow.FlowController.execute(FlowController.java:336)
    at org.apache.beehive.netui.pageflow.internal.FlowControllerAction.execute(FlowControllerAction.java:48)
    at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:419)
    at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.access$201(PageFlowRequestProcessor.java:97)
    at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor$ActionRunner.execute(PageFlowRequestProcessor.java:1984)
    at org.apache.beehive.netui.pageflow.interceptor.action.internal.ActionInterceptors.wrapAction(ActionInterceptors.java:90)
    at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.processActionPerform(PageFlowRequestProcessor.java:2055)
    at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:224)
    at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.processInternal(PageFlowRequestProcessor.java:535)
    at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.process(PageFlowRequestProcessor.java:821)
    at org.apache.beehive.netui.pageflow.AutoRegisterActionServlet.process(AutoRegisterActionServlet.java:625)
    at org.apache.beehive.netui.pageflow.PageFlowActionServlet.process(PageFlowActionServlet.java:156)
    at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:414)
    at org.apache.beehive.netui.pageflow.PageFlowUtils.strutsLookup(PageFlowUtils.java:1178)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       

  • Can you add a group in LDAP as owners for a calendar?

    The documentation indicates that you can create a group calendar by adding
    owners to a calendar. The set_calprops
    WCAP command allows you to specify
    a list of owners for the calendar. However, I would like to know if there is
    a way to add a group in LDAP as owners for a calendar.
    <P>
    No, you cannot reference an LDAP group in this version of the iPlanet Calendar
    Server.

    Has this problem been resolved in Update 3 ?
    I just set up LDAP ACL with OpenLdap v 2.4.10 . Every thing work fine so far, except that I can't add a user or group by Admin Console ,
    It response this :
    {color:#ff0000}for host x.x.x.x trying to POST /admingui/admingui/newUserDialog, service-j2ee reports: Exception : ADMIN3132: Error while communicating to the LDAP server: ldap://127.0.0.1:389/dc=xxx,dc=xxx,dc=xxx
    {color}
    Though I can do this task in other tool . It will be good for SJSWS to support OpenLdap .

  • How to only synchronize one specific LDAP user group with SAP?

    Hi,
    Hopefully this is the correct forum to post this in. I want to have continuous one-way synchronization of users from my LDAP server to my SAP central system. I've started configure in SAP using transaction SM59 and LDAP. Can I somewhere set that only one specific LDAP user group shall be transferred to SAP (they do not need to be assigned to any specific group, profile, role in SAP) - or should this be done on the LDAP server side (or is it at all possible)?
    Correct me if I'm wrong, but the User Group field in the report RSLDAPSYNC_USER only concerns SAP user groups right? This would therefore not be sufficient since I want to select the users to synchronize based on user groups in the directory.
    Thanks, Oscar

    We've used a repository constant to specify the LDAP filter for reading users / groups from the LDAP target.
    E.g. LDAP_FILTER_USERS (&(objectCategory=person)(objectClass=user))
    Then we also have a constant for the LDAP_STARTING_POINT
    For our AD Group Initial Load we filter according to these settings:
    LDAP_FILTER_GROUPS = (objectclass=group)
    LDAP_STARTING_POINT_GROUPS = ou=IDMManagedGroups,ou=Groups,dc=cfstest,dc=le,dc=ac,dc=uk
    The above example only reads AD groups starting at the specified OU
    Then in a Job From LDAP Pass the LDAP URL looks like this:
    LDAP://%$rep.LDAP_HOST%:%$rep.LDAP_PORT%/%$rep.LDAP_STARTING_POINT_GROUPS%?*?SUB?%$rep.LDAP_FILTER_GROUPS%
    I hope this helps
    Paul

  • LDAP user group

    I have configured the LDAP to connect to the AD. I can see the required Roles in the "Roles to Map" Tab on LDAP user Configuration.
    I am able to import the Users.
    I am able to see the groups in the SAP xMII Menu -> Portal Services -> Navigation tab and also in SAP xMII Menu -> Security Services -> System Security.
    But when i assign pages to the Roles and Login with the Users under the Role. The Navigation menu doesnt show the pages linked to the role. When i tried accessing the property using http://<server name>/Lighthammer/PropertyAccessServlet?Mode=List, It shows that the user doesnt belong to any roles(blank space in place of roles).
    However, when i try to check the same using LDAP queries (Select Roles for User & Select Role by Distinguished Name) it shows that the user belongs to the group to which i assigned the pages in the SAP xMII Menu -> Portal Services -> Navigation Menu.
    Does it have something to do with the Role mapping in the LDAP user configuration? I havent assigned any of the groups(including the one i want) to any of the default xMII roles.
    I also tried assigning all the roles to all the services in xMII. It still shows that the user doesnt belong to any group. Manually if i assign to any group through SAP xMII Menu ->Security manager ->Roles ->Admin, it works fine. But, as the imported groups are not listed in the security manager I cannot manually assign these users to the groups(also i cannot do this for all the users, even if it was possible)
    Any ideas?

    I tried assigning the user to the Everyone group and also checked the Logs. Below are the results:
    cmsseclogin.log
    2007-11-28 17:12:04,097 [login] IP 64.240.152.5 - Successful login for user a0000, service url http://phixmiiqas01.sbs.int/Lighthammer/
    2007-11-28 17:12:04,534 [login] IP 10.144.18.63 - Ticket has been validated for user a0000
    cmssecurity.log
    2007-11-28 17:12:04,472 [ServletExec: request: time=1196287924456, uri=/LHSecurity/validate] WARN   Validate - Proxy URL requested [http://phixmiiqas01.sbs.int], is not a authorized proxy
    no luck so far!!

  • How to add administrator group to weblogic user

    Hi All,
    How to add Administrator Group to weblogic user if weblogic user is accidently removed from Administrator group.
    Weblogic version is 10.0.1.0.
    Thank you in Advance!!!
    Cheers,
    Ankur

    http://docs.oracle.com/cd/E21764_01/apirefs.1111/e13952/taskhelp/security/ManageUsersAndGroups.html

  • Add UME Role to LDAP User

    Hi,
    i'm having a problem with portal user management. We have a LDAP user called charlie81 in an Active Directory Server, which has a set of LDAP groups. We have also a UME Role (a role created in the portal) called "Manutenzione". Our target is to assign "Manutenzione" to charlie81 through the portal. I made it but when charlie81 is logged in, he can see only LDAP Roles; "Manutenzione" is not visible!!!! How can i resolve this problems? Do you help me, please? Thank you in advance, Carlo Paglia

    Hi,
    What kind of role did you assign to the user? A portal role (source = portal role) or a "UME role" (source = UME database)?
    If it's a portal role, is it a standard or a custom role? If it is a custom portal role, make sure an entry point is defined or your role won't be visible. Here's a link to the documentation : [Defining Entry Points|http://help.sap.com/saphelp_nw70ehp1/helpdata/en/4e/3e703e632c7937e10000000a114084/frameset.htm].
    Regards,
    Pierre

Maybe you are looking for

  • Sometimes an e-mail will take a long time to open

    Not all my e-mails open immediately. Some of them take a long time and I have to keep going back to them or wait until the next day. All my e-mails don't do this. Just some.

  • SQL execution error, ORA-01843: not a valid month

    Im using ASP/VBScript and its my first time starting to use Oracle as a DB provider. Just having an issue with a statement that I have. Heres my statement: SELECT T592_NOON.SHIP_CODE, T592_NOON.REPORT_DATE, T592_NOON.L_B, T592_NOON.AVERAGE_SPEED, T59

  • My macbook pro keeps freezing when I am on the internet. How can I find out what the issue is and fix it?

    my macbook pro keeps freezing when I am on the internet. How can I find out what the issue is and fix it?

  • CTRL+SHIFT+O does not work

    WHen i attempt to save a record in an infopath form, I receive an error that the form cannot be submitted and to press CTRL+SHIFT+O to identify errors.  This does nothing!  Is  there any other means to identify the errors on the form or to show the u

  • Printer Default to Photo Tray

    Hello all, I am trying to change my printer's default settings. I need to change the default paper size from "US Letter" to 4x6. It is a HP Printer. I am printing files via Applescript. An applescript command or just a way to change the default setti