Admin ID question

Hello there,
I have the following requirements... can any one help me .
1. To create an Individual id which should have full rights against all the existing and new instances like add/mod/del and also to create a new instance privilege. The ultimate goal is to avoid using "cn=Directory Manager" id for any changes in the directory. I even want to use the individual id to do any changes againts NetscpeRoot also.
I'm running Sun ONE 5.2 Patch2 on Solaris.
any help is much appreciated.

Just my idea, what you could probably do:
1) Add this user account, eg: dirmgr2 or any normal account, into the group called "cn=Directory Administrators,dc=example,dc=com".
2) Define FULL ACCESS rights to the DIT and the ability to open the "Default View" under "Servers and Applications" at the admin. console.
Login as "cn=Directory Manager"
- Open Directory Server,
- Click at the root level, i.e. dc=example,dc=com,
- Right click and click "Set Access Permissions",
- Enter the following ACI:
(targetattr = "*")
(version 3.0;
acl "Full Access Rights to Directory Administrators";
allow (all)
(groupdn = "ldap:///cn=Directory Administrators, dc=example,dc=com")
- Save it and exit admin. console
Login as "admin"
- Open Directory Server,
- Click o=NetscapeRoot,
- Click ou=example.com,
- Right click and click "Set Access Permissions"
- Enter the following ACI:
(targetattr = "*") (version 3.0;acl "Access to Servers and Applications Default View";allow (all)(groupdn = "ldap:///cn=Directory Administrators, dc=example,dc=com");)
- Save it and exit admin. console
3) Test, login as "dirmgr2" to see if you could stop/start slapd, and edit user password(s).
It is said that "cn=Directory Manager" is not restricted to any directory search limit in place, I am not sure if the backup dirmgr2 will have the same privileges.
HTH. If anyone knows of other better way of granting a second dirmgr pls let us know.
Gary
See also:
http://www.ldapguru.org/modules/newbb/viewtopic.php?viewmode=thread&topic_id=2704&forum=6&post_id=8134#8134

Similar Messages

PSS: Password Self Service: No "Admin Defined Questions" available for security question registration

Dear Experts,
I have configured PSS as below,
Activated "PSS" in connector configuration.
Configure PSS as per SAP note.
Configured 2 Questions and activated them.
Maintained "Service User" in 10 services mentioned in SAP note
After this when I try to register new user with "Admin Defined Questions" I do not get any question to select, it comes as a blank field. But I can register with user defined questions and can reset password as well as get mail for the same too.
Questions:
How to deactivate "User Defined Questions" option?
Why I am not getting "Admin Defined Questions" for security question registration?
Did anybody faced the same issue?
Thanks in advance,
BR,
Mangesh

Hi Friends,
Any advice on the same.
I have three issues for PSS,
Admin question are not visible
set option "Challenge response"
Set admin questions and marked them active
No system displayed during password reset
Marked connector as PSS activated
User available in backend as this is allow me to login for users available in backend system through end user logon page
GRACUSER and GRACUSRCONN has the entry
How to deactivate option "user defined question" for all users
Any suggestions. I have tried options suggested on community through threads but no luck till.
Raised it to SAP now but if anyone can suggest would be great so I would try it.
BR,
Mangesh

Admin Cockpit question

Hi,
We are trying to activate the admin cockpit thru ABAP "RSTCC_ACTIVATE_ADMIN_COCKPIT" and have couple of question.
1. Activate SAPI DataSources ( wat is mean by this)
2. Activate MySelf Source sytem (My source system is already in active, does this reactivate again
Force MySelf System activation
3. Replicate DataSources ( Is this relevant for only Techincal content DS?)
   Force DataSource Replication
   Repair Missing Infopackage
4. Activate Techincal content
   only simulaiton
Is there any webtemplate behind the cockpit?
Angeli

Hi,
yes there are webtemplates behind the cockpit. It is running in the portal. The presentation 'SAP NetWeaver BI Administration Cockpit' will show. For the admin cockpit you have to activate technical BI content.
Check this articles/threads to get the information:
[BI Administration Cockpit and new BI Statistics Content in SAP NetWeaver 2004s|https://www.sdn.sap.com/irj/scn/elearn?rid=/library/uuid/50f95b21-7fb8-2910-0c81-f6935d4c654b&overridelayout=true]
[SAP NetWeaver BI Administration Cockpit|https://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/c0e5ca3b-95ce-2b10-4d94-864ab29a8b63&overridelayout=true]
Regards
Andreas

XRaid Admin Newbie Questions

I am an admin. I am more familiar with Mac OS X Server than XServe RAID. XServe RAID looks spooky. My boss set up the RAID and then sort of left server administration in my lap while he goes and does other things.
We've ordered a G5 Dual 2.3 XServe. It is coming soon. The XServe RAID we have is the older type - ATA 133 drives. The new XServe will not have enough space to contain our legacy data. So we are hoping we can add an XServe RAID array or two to serve the data. The RAID now has 4x180 drives - the last is a hot spare.
My questions -
1. Can I dynamic ally change an existing XServe RAID array to add additional drives thus making it larger? We have two ATA 133 drive modules (1x250GB and 1x180) from our older XServe that I would like to reuse.
2. Is is possible to take an drive module and mount it all by itself on the XServe RAID?
3. Do all drive modules have to be the same size to create an array?
Please list any gotchas or strategies that I need to know about.
Thanks in advance.
- PaulS

Good questions.
1. Can I dynamic ally change an existing XServe RAID array to add additional drives thus making it larger? We have two ATA 133 drive modules (1x250GB and 1x180) from our older XServe that I would like to reuse.
Yes, but...
The gotcha is that not all filesystems support dynamic resizing, including HFS+, the standard Mac OS X filesystem. If you format the array as UFS you can add drives to increase space, but if it's HFS+ formatted, adding a drive does not increase usable space without reformatting the drive.
2. Is is possible to take an drive module and mount it all by itself on the XServe RAID?
No. The XServe RAID only supports RAID combinations, not single disks. The minimum configuration is two drives in a RAID 0 or RAID 1 combination. A single disk option is not supported.
3. Do all drive modules have to be the same size to create an array?
No but for all intents and purposes, yes.
If you mix drives of different sizes, the smallest drive size is what is used. For example, if you take three 180GB drives and one 250GB drive and create a RAID 5 array, the 70GB extra space on the 250GB drive will be lost - it will be treated as if it were a 180GB drive. So you can use different sized drives, you just can't always use all the space on it.
For simplicity's sake, though, I'd always stick with like-sized drives in each array.

Strange Sharing and Permissions and Admin Users question.

I am having problems printing and need to change the permissions and ownership on a library file
My directions were to:
[ The fiery cups filter needs ownership changed from admin to system (root) ]
My secondary question is I am making the assumption that when someone refers to my "system (root)" that this is the same as "my name (me)" Yes?
But my primary mystery question is
As I went to change the permissions on the above top topic I noticed I had four choices.
I am the only single user of this computer. My permissions are set to Administrator status.
I apparently had a guest account enabled but I don't remember turning this on.
On the get info window, at the bottom, under sharing and permissions, NAME and PRIVILEGE when I add - select a new user or group, I have:
My account "my name (me)"
"administrators"
and *"firebird database"?*
"everyone" is already there as a standard default.
*I don't know what the **** "firebird database" is. It shows as a single user account.* My guest settings were enabled to connect to my shared folders, which I have turned off. Is this "firebird" part of Apple code or has something been compromised without me knowing?
Anyone know? Thanks in advance.

Root or System ownership is not the same as you. You are a restricted user. Root is an unrestricted user.
If you have installed third-party printing software with incorrect permissions, then start by using Disk Utility to repair permissions. Do not begin changing file/folder permissions when you obviously do not know what you are doing as this could screw up your entire system.
Firebird is a third-party database program that you must have installed. Obviously there is a problem with it. Either uninstall it or contact the developer for assistance.

Cisco ISE and Admin CLI question

Hi there.
I have strange problem with my ISE installation. First of all I use AD users for authentication. It works fine over HTTPS. I can login with my AD admin by HTTPS.
The problem starts when I try to login via CLI (SSH). I got login prompt. When I type my AD credentials it says "Login Incorrect" and I got the same result if I try with the local admin account.
I did try to reset the local admin account password via HTTPS to verify that type the correct password. But no effect.
My ISE is installed on VMware.
Any experiences with this one?
BR.

The CLI authentication which is the base Linux OS is not/cannot be tied to AD for admin authentication. You only integrate the application installed on the top of Linux, which in this case is ISE, to AD. So to login to the cli shell you will need to use the username/password that you configured during setup. If you don't recall those you will need to perform a password rest via the installation CD/ISO
Thank you for rating helpful posts!

Weblogic portal 10.3.2 sample domain admin console question

I'm using the sample domain shipped with WebLogic Portal 10.3.2 for some testing. I'm trying to access the admin console, could someone tell me how to find the user name and password to access the console? I thought weblogic/welcome1 was the default.
thanks

Hi,
Just installed WLS10.3.2 and created the default base_domain using the conf wizard. When asked, I provided the username "weblogic" and password "welcome1". But now I can't logon to the admin console. I've tried also passwords like webl0gic, weblogic, weblogic1, password1, passw0rd and then some. Any other possibilities?
Thanks

Solaris 10 Admin Interview Questions

Does anyone have some general Solaris 10 Administrator Interview Questions?
Can anyone give some general insight on "Performance Issue", "Performance Tuning", and some possible Network Troubleshooting steps in the unix production world?
Really Appreciate it.
Gabe

take a look on the web sites:
http://www.techinterviews.com/?p=197
http://www.allinterview.com/Interview-Questions/Solaris.html
http://www.devbistro.com/tech-interview-questions/Unix.jsp
http://www.coolinterview.com/type.asp?iType=137
and may others

Adobe Media Server Admin Consol Question and buffering

2 part question
Under applications and streams for VOD what exactly is cache hits and misses. also is there an option that if you pause VOD video it will still continue to download to clients computer for people who have slow internet connections Thanks

The description of those fields can be found here: http://help.adobe.com/en_US/adobemediaserver/adminapi/WSa4cb07693d12388431df580a12a34991eb c-8000.2.3.html#WS5b3ccc516d4fbf351e63e3d11a0d3ed999-7fe5AdminAPI.2.3
hits
Number; total number of segment “hits” since the server started.
misses
Number; total number of segment misses since the server started.
And:
"If requested data is contained in the cache (cache hit), this request can be served by simply reading the cache, which is comparatively faster. Otherwise (cache miss), the data has to be recomputed or fetched from its original storage location, which is comparatively slower. Hence, the greater the number of requests that can be served from the cache, the faster the overall system performance becomes." -- The all knowing Wikipedia

AirPort Admin Utility question

Is AirPort Admin Utility, PowerPC v. 4.2, the older version of AirPort Utility, Universal v. 5.3.1?
I've got a new MacMini Intel and I somehow have both of the above in my Utilities Folder. I'm thinking that AirPort Admin Utility is the older outdated version of AirPort Utility. Is this correct?
Thanks

More or less that is true. If you have a 802.11b Apple base station you will need the older "AirPort Admin Utility".
The newer "AirPort Utility" only works with AirPort Extreme base station (AEBS), AirPort Express (AX), and Time Capsule.

Writeback issue - Admin tool question

I'm trying to configure writeback per pg 90 of the BI Presentation Service Admin Guide. I am having an issue on the steps related to the Admin tool. I created a new table, set up the connection pool and made the table noncacheable.
Can someone explain in detail the steps I need to take to add this table in the logical and presentation layers? I dragged this table into my logical fact table and then to my presentation layer. No rpd warnings or errors, but am I missing a step? Do I need to create any physical/logical joins?
When I create my report in Answers, I get the following error.
Error Details
Error Codes: OPR4ONWY:U9IM8TAC:OI2DL65P
State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. [nQSError: 14026] Unable to navigate requested expression: Dim - Employee.Employee Name. Please fix the metadata consistency warnings. (HY000)
SQL Issued: SELECT Employee."Employee Name" saw_0, Employee."Employee Number" saw_1, Facts.Comment saw_2, "Employee Expense Facts"."Total Expense" saw_3 FROM "Employee Expenses" ORDER BY saw_0, saw_1, saw_2

I am able to view the results before adding the column I want for writeback.
I tried making the change you suggested.
1. already done
2. already done
3. changed to mention total level for employee dimension
Checked consistency and no warnings or errors returned.
When I try to access the report I now receive the following error.
Error Codes: OPR4ONWY:U9IM8TAC:OI2DL65P
State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. [nQSError: 14020] None of the fact tables are compatible with the query request Total Expense:[DAggr(Fact - Employee Expense.Total Expense by [ Dim - Employee.Employee Name, Dim - Employee.Employee ROW_ID, Dim - Employee.Employee Number, Fact - Employee Expense.Comment] )]. (HY000)
SQL Issued: SELECT Employee."Employee Name" saw_0, Employee."Employee Number" saw_1, "Employee Expense Facts"."Total Expense" saw_2, Facts.Comment saw_3 FROM "Employee Expenses" ORDER BY saw_0, saw_1, saw_3
I appreciate your help. I'm not familiar with adding an unrelated table/column into our model to use for writeback.

Admin Console Question

Hi Experts,
if I goto user--> resources--> ad resource--> view and then goto child table to view groups that user belong to it shows some time 's all the groups on child form some times it shows blank record but underlying table has record. in the database but admin console wont show where do I make change?

if A user has 6 groups on database; it is showing 6 records on admim console but some are records 1,2,5 are visible some are records 3,4, 6 are empty not showing on the child form; if I run group lookup recon will that fix.

User admin role questions

Does one really have to individually give User Admin status to each user
in order for them to be able to change their own data? I was not able to
select a group to assign to the role.
Also, having assigned users to this role, can they then modifiy any
other user's info? (This seems to be implied by the docs.)
Tia,
Ken
Ken McLeod
The Delphian School
http://www.delphian.org

Ken,
It appears that in the past few days you have not received a response to your posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com/ to search the knowledgebase and check the other support options available on that page under "Self Support" and "Support Programs".
- You could also try posting your message again. Make sure it is posted in the correct newsgroup. (http://support.novell.com/forums)
If this is a reply to a duplicate posting, please ignore and accept our apologies and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Root/Admin password question

I upgraded to Snow Leopard and successfully installed MySQL 5.4.3-beta...x86 on the old white Intel iMac. I am the only user on the machine and have an admin password that works for everything that asks for the admin password.
So far so good.
However, looking at the MySQL data directory (/usr/local/mysql/data)in a Terminal window shows that the owner is _mysql and the group is wheel with permissions set to 750. I need to put some MySQL databases in that directory, but setting user (with su or sudo) to _mysql asks for a Password, and keying in my admin password fails with su: Sorry. Su to root returns the same thing.
Is there system root password or is the admin password the same as root?
If so, is there some anomaly in 10.6 with user/group/passwords or am I missing something simple?

I also set a password for MySQL but that still fails to allow me to do anything from a Terminal with the data directory.
I changed the owner of the directory to root and can sudo ls -l the directory, but I don't know if the _mysql owner is required somewhere in MySQL code and changing it to be owned by root will cause problems.

Admin Rights Question

I need to allow my Technologist to run an application using Quick Task -> Launch Application and have the ability to set it to run as the Secure System User. I have give the rights to Remote Execute and to the Quick Tasks (except ILB, INV and TI) but the option to run as Secure System User is greyed out. How can I allow them access to this without opening up the whole system? We do not allow Technologists to assign bundles and other activities to maintain licensing and accountability.

TSOJaybird,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Admin ID question

Similar Messages

Maybe you are looking for