ADS LogonWithAlias - cannot logon with alias user id

Hi,
We have Erec and use ADS. Now when the candidate enters their detials - such as logon id - into EREC, the SAP ERP backend generates a random user id and their logon id in put into the alias field in the SAP record (SU01) btw we use ABAP for the user administration. The candidate can then logon with their Alias into Erec and this works fine. Now when we send them an ADS form link to fill in, the signon prompy does not allow them to use the Alias to logon - only the random generated user id work. I have change the option in VA under Security Provider - Basic - BasicPasswordLoginModule=true but this has not helped it still does not work with the user alias id. I have noticed that the ADS form logon prompt is a netweaver prompt and different from the Erec logon prompt. Any ideas appreciated.

Found the error in SICF the adobe form was not set tin internet user.

Similar Messages

Logon With Alias

Can someone tell how to change the LogonWithAlias option of the BasicPasswordLoginModule which is needed if you want to use the 'Alias' defined for the user id?
SAP help is quoted below:
Basic Authentication is an HTTP standard method to use for authentication, whereby the user provides a user ID and password for authentication. Per default, the SAP J2EE Engine uses Basic Authentication for applications that are set up to use basic or form authentication. The corresponding login module is BasicPasswordLoginModule.
You can configure the LogonWithAlias option of the BasicPasswordLoginModule to enable logon with an ABAP alias. The possible values for this option are true or false. The default value for this option is false. If you change this value to true, then entered usernames are regarded as ABAP aliases.

HiShekhar Shende ,
STEP-1: Create one user in ABAP System with Alias name.
STEP-2: Do below steps in Visual Admin.
1.Open the Visual Admin (VA) tool, login with administrator.
2.Go to Server 0 XXX(ex. 3_36825) --> Services -->Security Provider
3.Then go to right pane Runtime --> Policy Configurations --> Components --> ticket
4.Change the screen into edit mode and click on Modify button.
5.Then go to right pane select
BasicPasswordLoginModule REQUISITE {}
6.Enter the value in Option name as LogonWithAlias and value as TRUE then say ok.
STEP-3: login with Alias of R/3 User in portal
Thanks,
Nagaraju

One user cannot logon to multi-user iMAC

I have am iMAC running latest Snow leopard with multiple user account. All accounts can logon but one.
when I try and logon with the offending account , the password is accepted, the screen turns Blue, then goes back to the the logon screen. I suspect something is corrupted but have no idea how to diagnose.
any help is appreciated.

Hmmm. Tough problem.
Try removing and replacing the account, keeping the home folder. To do that, use System Preferences -> Accounts to delete the account. When it asks what to do with the home folder, tell it to just leave it alone. Then make a new account with the same username. It should tell you that it found a home folder with the same name, and do you want to use it with the new account. Answer yes.
Can you then log in to the account?

Fail to logon with SYS user: ORA-01031: insufficient privileges

Hello,
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production
PL/SQL Release 11.2.0.1.0 - Production
CORE 11.2.0.1.0 Production
TNS for Linux: Version 11.2.0.1.0 - Production
NLSRTL Version 11.2.0.1.0 - Production
OS: CentOS 5.5
I fail to log on with SYS user through PL/SQL Developer. I receive the error: ORA-01031: insufficient privileges. PL/SQL Developer is installed on Windows 7 Professional. Oracle Client Version is 11.2.0.1.0. However I logon successfully with SYSMAN and SYSTEM.
For those who might ask whether I try to connect "as sysdba" when I use SYS user, the answer is YES, I do.
Besides I think the name of the tool (PL/SQL Developer) doesn't matter because I think I'll face the same error with any other tool (but I mentioned it just in case).
On server side I have no issues with SYS user. I can connect through SQLPlus with connect / as sysdba or connect "/as sysdba" faultlessly.
The initialization parameter sec_case_sensitive_logon is set to FALSE
SQL> show parameter sensi
NAME TYPE VALUE
sec_case_sensitive_logon boolean FALSE
I'm using local naming to connect and on client side I've a tnanames.ora file. The sqlnet.ora file looks like this:
SQLNET.AUTHENTICATION_SERVICES= (NTS)
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)I read in this forum (another thread) about using a password file. I created a password file using orapwd this way:
orapwd file=orapwDB11G2 entries=100 ignorecase=y password=a_passwordwhere I replaced "a_password" with the SYS password.
Actually I'm not sure the client is influenced by the password file anyway because I tell it to use local naming.
Any clues?
Thank you very much!

Verdi wrote:
Hello, Chinar, AlexeyDev,
ORACLE_SID variable is:
[oracle@localhost bin]$ echo $ORACLE_SID
planetThe directory $ORACLE_HOME/dbs:
[oracle@localhost ~]$ ls -l $ORACLE_HOME/dbs
total 28020
-rw-rw---- 1 oracle oinstall    1544 Apr 10 12:43 hc_DBUA0.dat
-rw-rw---- 1 oracle oinstall    1544 Apr 27 18:02 hc_planet.dat
-rw-r--r-- 1 oracle oinstall    2851 May 15 2009 init.ora
-rw-r--r-- 1 oracle oinstall    2966 Apr 26 16:33 initplanet.ora
-rw-r----- 1 oracle oinstall      24 Apr 1 18:22 lkPLANET
-rw-r----- 1 oracle oinstall 9519104 Apr 27 18:43 ora_control1
-rw-r----- 1 oracle oinstall 9519104 Apr 27 18:43 ora_control2
drwx------ 2 oracle oinstall    4096 Apr 10 12:43 peshm_DBUA0_0
drwx------ 2 oracle oinstall    4096 Apr 1 18:19 peshm_planet_0
-rw-r----- 1 oracle oinstall 9519104 Apr 8 11:25 snapcf_planet.f
-rw-r----- 1 oracle oinstall    2560 Apr 27 18:41 spfileplanet.oraThe value of the parameter remote_login_passwordfile is:
*.remote_login_passwordfile='EXCLUSIVE'
I start up the instance using the spfile.As a side observation, it appears you have two control files also in this directory. That is risky, and goes against the intent of having multiplexed the control file. Ideally they would be on separate disk devices - including separate controllers, but at the very least they should be in directories that are separate all the way back to the root directory. If you can't protect against hardware failure, at least protect against human failure.

How to logon with different user when use of SPNego

Hi
We have implemented SPNego as Windows Integrated Authentication - but how to logoff the portal to log on with another user?
Since the users are authenticated when logging on the network from their client pc - the user will be using the standard logon page. But when logging off the portal - the users are automatic redirected and logged back in to the portal.
I have created a HTML page which the users are redirected to by use of the ume.redirect.url. But how to logon to the portal again?
When entering the portal url - the users are once more directly logged in due to the SPNego configuration.
I need to develop a new logon page where the users are able to enter another uid and pw to enter the portal.
Regards
Kay-Arne

Hi Kay-Arne
The whole idea of Windows authentication is to remove the need for a user to enter a username and password. If you want a user to not get the automatic log on, then you'll need to access the portal with a URL that is in a different domain
Cheers

Cannot logon with ftp

Hello,
I'm trying to logon to Files with ftp, but I get access denied. I'm trying to logg on using a Files users' files spesific passord. No success. (I'm able to logg on as site_admin user though..)
How do I enable the ftp protocol to accept "files spesific password"?
The manual says that the service configuration property
IFS.SERVICE.CREDENTIALS.Oid.IfsPasswordApplications
gives the set of protocols that require files specific passwords, but I cannot find it.
Any ideas, hits, experiences?
Regards,
Anders.

I found the configuration property
IFS.SERVICE.CREDENTIALS.Oid.IfsPasswordApplications
It lists AfpServer and FtpServer in the value area in the properties section.
Still, I cannot logg on with ftp.
/Anders

Cannot logon with SAP*

I Have installed EP 6 SP2 on Windows 2003 and Oracle. Now when try to logon to the portal for the fisrt time with SAP* with default password 06071992 , it does not give any error message and the same page just gets refreshed .. If i try diff password , then user authentication fails . Pl help .
Thanking in advance
Pegs

Jyotirmoy,
Did you use ip address or hostname for the url to access the portal? If you use Ip address, the log on function will not work, try to use the hostname of the portal server.
regards,
David

Cannot logon with Fingerprint in Win10 TP

I have Lenovo ThinkPad T410 with a fingerprint device that I use all the time
I had a user with my fingerprint configured
I added my computer to our company's domain and then deleted the other user account as it is not in use anymore
now, when I try to add my fingerprint to the domain user I get the message:
as I mentioned - the other user does not exists!
here already, I would expect to have something more intuitive for normal users. like for example - delete the fingerprint database when I deleted the user...
now, I can't find a way to get rid of the fingerprint database in order to configure my fingers on my current account
when I'm on the logon-screen \ lock-screen I automatically try to swipe my finger and the worst thing - it tries to log-in to my previous deleted user and doesn't succeed!
I tried deleting the registry SIDS under
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FingerprintLogon
still doesn't help.
now what I care about is deleting my current fingerprint database and I'd be glad to get some help
but what I think Microsoft should be care about is to make this process seamless for end users...
thanks
Tamir Levy

Make sure report this issue through Feedback App.
Check user profile setting and try back up user profile for deleted account (if it still exist) and then delete it.
Restart your PC and try again.

Logon with multiple users goes directly into user without password prompt?

I upgraded to Lion after Hard drive crashed and was replaced by apple even though I had Lion OSX they insisted that I upgraded which I eventually had to do.
The problem is as follows:
When PC is intially turned on the User selection screen does not appaer and the system goes straight into the first account created without password validation. All accounts setup have PW added to prevent my kids from accessing th PC. However if I loggoff the user screen appears and PW must be used. This does this on ever restart or turn on. Tried resetting & re adding the accounts but same issue occurs.
Any help on this issue will be appreciated.
Thanks

System Preferences -> Security -> General -> Disable automatic login

"Logon failure: unknown user name or bad password" even with correct Credentials

I have networked PCs before many times successfully, so this is not my first time trying to network PCs in a home environment. Though I’m wondering if Windows 8.1 is part of the problem.
I would have thought that for sure, until one of the new laptops running W8.1 would not connect to any of the other three PCs/Laptops running W8.1. Yet these other three W8.1 PCs/Laptops CAN connect to this laptop. Then it gets a little more interesting:
this same laptop that couldn’t connect to those three W8.1 PCs/Laptops, CAN connect to a Windows 7 desktop, and a XP Laptop, and those two can also connect back to it without issue. It’s almost like my network is divided in half, and only half can talk to
each other. But then when I thought it couldn’t get any more interesting, I realized the first three W8.1 PCs/Laptops can talk to the others, it’s just that the others (W8.1 Laptop, W7 Desktop, XP Laptop) can’t talk back to them without getting the error,
"Logon failure: unknown user name or bad password” even though the username and password are 100% correct.
I don’t fully understand this error, because on the surface, it’s just WRONG!
My username and password are correct, but it appears something somewhere is interfering or hijacking the authentication process. Three of the computers (laptops) are brand new, just purchased last week and setup this week. The HostPC is also fairly new,
just purchased last month.
I am not using a HomeGroup, and have removed all computers that were part of a HomeGroup. I have enabled file sharing and network discovery and enabled “Use user accounts and passwords to connect to other computers” on all PCs.
I have DSL and am using the wireless modem provided by my ISP which has router functionality built into it. It is a Sagemcom Model: F@ST 1704N.
All computers are connected wirelessly. Time is correct on all PCs. I cannot use Group Policy, since they're all Standard or Home edition. DHCP is enabled and all computers are on the same subnet, using the 192.168.254.x range of ip addresses.
The six computers are as follows: (I figured this may make is easier to visualize the layout)
HostPC: HP Desktop W8.1
PC Name: DrsBlend
U/N: DrsBlend p/w: 123456 (not showing my real password)
PC1: HP Laptop W8.1
PC Name: DrsBlend-1
U/N: DrsBlend    P/W: 123456
PC2: HP Laptop W8.1
PC Name: DrsBlend-2
U/N: DrsBlend    P/W: 123456
PC3: HP Laptop W8.1
PC Name: DrsBlend-3
U/N: DrsBlend    P/W: 123456
PC4: HP Desktop W7 SP1
PC Name: DrsBlend-4
U/N: DrsBlend    P/W: 123456
PC5: Dell Laptop XP SP3
PC Name: DrsBlend-5
U/N: DrsBlend    P/W: 123456
Every PC stated above has the same user name and password and is logged-in with the username, DrsBlend and the password 123456. The "Logon failure: unknown user name or bad password” happens when trying to access HostPC, PC1, or PC2 from PC3, PC4, or
PC5.
The HostPC can see and connect to all the PCs, but only PC1 and PC2 can talk back or access the HostPC.
It’s like the HostPC and PC1, and PC2 are in their own little clique, and can talk back and forth to each other. Those three PCs can also talk to PC3, PC4, and PC5 as well, but PC3, PC4, and PC5 cannot talk back to them (HostPC, PC1, PC2).
Profile corruption? I would have entertained that thought, but the fact the first three PCs can access and talk to one another kind of defeats that idea, and the fact the PCs were just recently setup.
Firewall? Disabled, and disabled TrendMicro with no change. With them on/off, the first three PCs can still talk to each other and the rest of the PCs.
Anyone have any additional suggestions?

Hi，
How did you connect to other PCs? Do you use RDP to connect to other PCs? If so, check the version of the RDP, as I know, some low version RDP can't connect to higher Windows like 8.1.
And could you please tell us the detailed information about how the six PCs connect to the home network?
Can PC1, PC2, PC3 ping back to host PC, PC1 and PC2?
You can also run command " rundll32.exe keymgr.dll, KRShowKeyMgr " view the credentials stored in your PC,check whether this issue is related with some old credentials stored in your system.
Yolanda Zhu
TechNet Community Support

Login to EP either with Alias name or user id.

Hi All,
We need to allow the users to login to the portal either with the user alias or userId.
We have installed portal on dual stack & UME is on ABAP stack. All user details are getting stored in ABAP data base .
I enabled login with alias by adding the option "LogonWithAlias" with the value "true" to the BasicPasswordLoginModule under 'BASIC" Authentication in the Security Provider service of the J2EE Engine Visual Administrator.
Now it allows the user to login only with the 'Alias'. I just need to know is there anyother parameter options to be added to allow the login with both alias and username.
Also tell me about the flags to be set.
Expecting your valuable inputs.
Thank You.
Regards,
Eben.

Hi Michael Shea ,
Thank you for your helpful replies. I am following that.
As you suggested, I have added "BasicPasswordLoginModule" twice with two set of options ( LogonWithAlias true&false) under " basic" Authentication template under SAP-j2ee Engine Policy Configuration.
What Flags are to be set ? Can you tell me the difference between OPTIONAL, SUFFICIENT, REQUIRED,REQUISITE Flags.
I have set as follows in the J2ee Visual Admin for the "BASIC" Authentication Template :
BasicPasswordLoginModule SUFFICIENT LogonWithAlias- true
BasicPasswordLoginModule REQUIRED LogonWithAlias- false
But still it is not allowing me to login with user alias.
Edited by: Eben Chella Metilda on Nov 26, 2008 6:43 AM

TMG 2010 publishing Exchange 2010 OWA cannot change password if user must change password at first logon is set

Hi,
I have an odd issue whereby if I set "user must change password" on an AD account, the end user cannot logon, they're simply taken back to the OWA login page as if their password is incorrect.
My setup is as follows:
outer TMG -- uses a listener for email.contoso.com and is configured for no authentication.This uses a publishing rule to publish the inner TMG server. This server is not a domain member.
inner TMG - uses a listener for email.contoso.com and is configured for NLTM\kerberos negotiation with forms authentication (Windows Active Directory). This server is a domain member and use a publishing rule to publish the internal CAS. Allow users to change
password is selected in the publishing rules.
Exchange 2010 SP1 - uses integrated windows and basic authentication. Has the appropriate registry key configured to allow users to change their AD password on first logon.
I've registered an snp for "http/email.contoso.com mailserver-dc1", all SSL certificates being used are valid and my configuration used to allow users to login and change their password with "user must change password on first login"
set in AD.
If I launch a web browser on an internal server and point it to email.contoso.com I'm immediately presented with a generic Windows authentication request (similar to what's seen in ADFS) rather than the standard OWA page. No matter what I do, I cannot login
and change my password using the correct URL. However if I point my browser at
http://192.168.4.10/owa I'm prompted to login and I can change my password using the sam credentials.
The only recent changes made are:
- Disabling SSL 3.0 and enabling TLS (http://www.isaserver.org/articles-tutorials/configuration-security/improving-ssl-security-forefront-threat-management-gateway-tmg-2010-published-web-sites.html)
- Replacing the TMG listener certificates so that they now use SHA2 rather than SHA2 (certificates are trusted on each TMG server)
Looking on the outer TMG and the DC logs I can see schannel errors which I believe are related to the problem. TMG monitoring also shows "Failed connection attempt: 1907 The user'spassword must be changed before logging on for the first time"
I've checked that my inner TMG and DC are using the same certificate for server authentication and gone through this guide:
http://blogs.technet.com/b/keithab/archive/2012/02/29/setting-up-and-troubleshooting-ldaps-authentication-in-forefront-tmg-2010.aspx
If I try to use ldp.exe on the inner TMG, I get the error in the pic below
Thanks
IT Support/Everything

Hi,
You could try to analyze the TMG tracing and try the troubleshoot steps in the blog below.
TMG 2010 – FBA, troubleshooting the change password feature
http://blogs.technet.com/b/isablog/archive/2012/05/07/tmg-2010-fba-troubleshooting-the-change-password-feature.aspx
Best Regards,
Joyce

IMac with multiple user accounts "cannot associate apple id for ....."

I have an iMac with multiple user accounts each with an Apple ID and individual iTunes library and Itunes match linking to iPhones iPads etc.
I bought songs on my iPhone yesterday, on trying to listen to them on the iMac (my user account) this morning I get the "cannot associacte Apple ID for another 31 day" meassage.
Is there any way round this? or is the answer only purchase via iTunes on the iMac in the individual account. Why do Apple do this?

http://support.apple.com/kb/ht4627
I'm guessing it's for piracy reasons.

HT1527 I have windows 8.1 and cannot access itunes store even creating a new apple id. With other users on the same computer I can access itunes store. How can I solve this?

I have windows 8.1 and cannot access itunes store even creating a new apple id. With other users on the same computer I can access itunes store. How can I solve this?

i had the same problem before using a fresh install of Windows 8.1. I have resolved this issue by running the program compatibility wizard. This I did by right-clicking on the iTunes icon in the desktop, selecting Troubleshoot compatibility, waited for it to detect compatibility issues and when presented with the following options: 1.) Try recommended settings; 2.) Troubleshoot program, I chose the latter. When asked what problems I noticed, I checked the following: "The program worked in earlier versions of Windows but won't install or run" and "The program requires additional permission"
After that, it tired to resolve the issue, and provided the necessary settings to run iTunes. Now it's running flawlessly. I have Avast anti-virus installed though.
HTH!

"User names cannot start with a number" error while adding a user

Is it possible to use WL Portal 7.0 admin framework to manage users with all numeric
user id ?
I got an error "User names cannot start with a number" while trying to add users
with all numeric user ids. I am using "portalAppTools" web app provided with WL
7.0 out of the box.
What "out the box" functionality do I need to change to make this happen ? Thanks
Shah

The problem is that when we have user groups starting with a number, then the search
feature doesn't work for user groups (case # 466837 with BEA).
So, which brings me to the following question:
a. Should the search feature work?
b. What is the limitation? I mean, it is designed not to allow user groups starting
with a number. So, there must be a reason for this. So, if we change "disallowFirstCharDigit",
will it have any impacts on Portal?
As an aside, it seems somewhat strange that the Portals can start with a number!
Thanks in advance
Venkatesh
"Ture Hoefner" <replyto@newsgroup> wrote:
Hello Shah,
Search your tools web app for the UsermgmtTools.properties file. In
my
installation, it is at:
D:\bea70sp1\weblogic700\samples\portal\sampleportalDomain\beaApps\sampleport
al\tools\WEB-INF\classes\com\bea\jsptools\p13n\usermgmt\servlets\jsp
It starts with this:
# Messages and other properties used by usermgmt jsp tools
# Name properties - UserBean and GroupBean
disallowedCharacters: ~`!$%^&-*() {}[]|\\/?<>,:;+="'
disallowFirstCharDigit: true
Ture Hoefner
BEA Systems, Inc.
www.bea.com
"Shah Sidi" <[email protected]> wrote in message
news:3db0a001$[email protected]..
Is it possible to use WL Portal 7.0 admin framework to manage userswith
all numeric
user id ?
I got an error "User names cannot start with a number" while tryingto add
users
with all numeric user ids. I am using "portalAppTools" web app providedwith WL
7.0 out of the box.
What "out the box" functionality do I need to change to make this happen?
Thanks
Shah

ADS LogonWithAlias - cannot logon with alias user id

Similar Messages

Maybe you are looking for