ADSI and extended schema

I am using iPlanet Directory Server 5.1SP2 on Solaris 8 in a replicated environment (Multi Master with iDar for load balancing and fail over).
I've created an object class by extending the inetOrgPerson class and included some new attributes.
Then, I use ADSI functions to get informations related to users.
All it's ok until I update the objectClass I created with a new attribute and added this attribute to user entries.
Any search performed on entries asking the new attribute returns an error similar to this one for a not existing attribute.
It seems that ADSI calls does not see the new attribute in the schema.
Note that any LDAP query (ldapsearch, I mean) works fine.
All the extension operations of the schema have been made correctly (by console and replicated, not directly in 99users.ldif).
There can be any problem of caching of the schema ?
Is it a caching on DS side or ADSI side ?
How can I force to get a refreshed view of the schema ?
Thanks for any info.
Marina

Similar Messages

Extended Schema

Hello,
I am trying to extend my Active Directory schema in order to store my managed preferences in AD.
I am following this white paper : http://images.apple.com/business/solutions/it/docs/Modifyingthe_Active_DirectorySchema.pdf
I am unable to manage groups or computer lists. I cannot create a new computer list as I receive an error when attempting to do so. I have attempted to completely remove all of the extended schema changes, re-compare an OD master against the AD PDC, recreate the schema changes LDF, and re-apply the changes to no avail.
I do see the following in the debug logs:
2010-10-15 14:09:41 EDT - T[0xB0081000] - Active Directory: Using existing connection for testdomain.com - test.testdomain.com. user [email protected] cache MEMORY:YVKESUz
2010-10-15 14:09:41 EDT - T[0xB0081000] - Active Directory: Attempting to Create Record Type dsRecTypeStandard:ComputerLists Name Untitled_1
2010-10-15 14:09:41 EDT - T[0xB0081000] - Active Directory: Add record CN=Untitled_1,CN=Mac OS X,DC=testdomain,DC=com with FAILED - LDAP Error 19
Any help would be greatly appreciated.

To clarify: the objectClassCategory for apple-computer, apple-group, and apple-user should be 3; all the other classes should be imported with objectClassCategory set to 1. Nothing should have an objectClassCategory of 0.
I finally got a chance to test what happens if the apple-computer-list class is added to AD with objectClassCategory: 0, and the results match what you described. When I tried creating a computer list in Workgroup Manager, WGM popped up a dialog with the error "Not authorized. This action failed because you are not authorized to perform the operation.", and the DS debug log had this:
2011-01-22 18:19:57 PST - T\[0xB030B000\] - Client: Workgroup Manage, PID: 63007, API: dsCreateRecord(), Active Directory Used : DAC : Node Ref = 33576284 : Rec Type = dsRecTypeStandard:ComputerLists : Rec Name = Untitled_1
2011-01-22 18:19:57 PST - T\[0xB030B000\] - Active Directory: Using existing connection for example.com - windows-server.example.com. user [email protected] cache MEMORY:wHgljeI
2011-01-22 18:19:57 PST - T\[0xB030B000\] - Active Directory: Add record CN=Untitled_1,CN=Mac OS X,DC=example,DC=com with FAILED - LDAP Error 19
2011-01-22 18:19:57 PST - T\[0xB030B000\] - Client: Workgroup Manage, PID: 63007, API: dsCreateRecord(), Active Directory Used : DAR : Node Ref = 33576284 : Record Ref = 0 : Result code = -14120
2011-01-22 18:19:57 PST - T\[0xB030B000\] - Plug-in call "dsCreateRecord()" failed with error = -14120.
2011-01-22 18:19:57 PST - T\[0xB030B000\] - Port: 27927 Call: dsCreateRecord() == -14120
so having the zero objectClassCategory would account for the problem. Unfortunately, I don't know of any way to change the objectClassCategory once it's set. I hope this happened in a test environment, so you can fix it (set objectClassCategory to 1 for all but the apple-user, apple-group, and apple-computer) before rolling it out to live.
If this did make it to the live domain, there's a workaround: use AD tools (e.g. ADSI Edit) to create apple-computer objects inside the CN=Mac OS X container, then use WorkGroup manager to set them up.
BTW, there's a newer version of the Apple instructions at [http://images.apple.com/business/solutions/it/docs/L407117B-USMod_AD_Schema_Support_MacsWP-4.pdf], for Snow Leopard (the one you linked was based on Leopard). The changes aren't terribly important. They removed a bunch of stuff that Snow doesn't use, and added the apple-hwuuid attribute to apple-computer. But the stuff that was removed was hardly ever used under Leopard, and apple-hwuuid isn't actually needed for Snow Leopard, so in fact either set of instructions should work fine with either version of Mac OS X.

Creating a new context in OID and extending DIT

I am developing a portal. I need to create a new context in the OID and extend the DIT so that i can store Subscriber information in it. Please help me with the procedure, and sample schema.
thanks in advance,
udai.

Hello JB-Baby
You can't create a subfolder in Sent. Mail does this automatically for each account you set up. If you wish to organise messages you send by some criteria or other, why not consider a Smart Mailbox?
I assume by your second question you mean can you change the columns in the message viewer? Yes you can. You select View -> Columns and check the ones you want. You can adjust the order of the columns by dragging the titles around in the message viewer.
If you didn't mean this, maybe you could explain what you are after in a little more detail.

EPPM Extended schema functional description

Hi,
I have installed EPPM 8.3 using sql server database in a windows 2008 server.
In the documentation it says opening the PXReporting_83.dmd file I can find a functional description of a view in "Coments from RDBMS" property but there are no comments in any view in the model.
Is there any other place where I can found an explanation of every extended schema view ?
Thanks,

Here are the services you need to start:
Project Arbiter service
Publish Project service
Publish Enterprise Data
Publish Enterprise Summaries
Publish Resource Management
Publish Security
More info on the above is here: http://docs.oracle.com/cd/E20686_01/English/Technical_Documentation/Reporting_Database/P6%20Extended%20Schema%20White%20Paper.pdf
Information on the tables is in a thread I started (and answered) here: R8.2 Extended Schema Tables Question

Extending Schema for SCCM 2012 R2

I have looked everywhere for this information, but it's not listed in the LDF file nor is it notated on the MS documentation.
When extending the schema using extadsch.exe from the media for SCCM 2012 R2, does it touch the schema version or does it only add the classes required? Is there a difference in versions of extadsch.exe 5.0 and the exadsch.exe in the SCCM 2007 media?

Active Directory schema extensions for Configmgr 2012 are similar to the Active Directory schema extensions for Configmgr 2007.
If the schema was already extended for Configmgr 2007, you dont need to extend schema again for Configmgr 2012.
Eswar Koneti | Configmgr blog:
www.eskonr.com | Linkedin: Eswar Koneti
| Twitter: Eskonr

AD OD Extended Schema Computer Groups

Mac OS 10.6.5
Server 2003
AD-OD w/ Extended Schema
Kerberos
Hello,
So far I have a wonderfully working AD-OD setup with an extended schema. I have a few services running which require kerberos so I know that the foundation of the setup is solid. However, I am able to apply MCX settings to AD-users, user groups, and computers, but am unable to create computer groups with Workgroup Manager applied to AD. The error I get is:
This action failed because you are not authorized to perform the operation
The only way I have found to create computer groups is to switch WGM to the OD domain and add the AD computer objects to an OD managed computer group. I hope that makes sense...
The only information I've been able to find on the intertubes is this:
Did you create the Mac OS X container at the root of the domain?
AFAIK, all computer lists are automatically added to the Mac OS X container at the root of whatever domain you are pointed at. If that container does not exist, or you don't have the appropriate privs, you won't be able to create the computer lists.
If you are in a multi-domain environment and authenticate to "All Domains", WGM will attempt to create the computer list in the Mac OS X container located in your forest root domain.
At least thats been my experience. I can also add the WGM against AD has always been buggy for me. Random weird permissions errors don't always accurately reflect the outcome of an operation.
In the case of computer lists, I sometimes need to type * into the search box to find the lists I created, after I was told they weren't created
http://www.afp548.com/forum/viewtopic.php?showtopic=23022
I'm unsure of any container that Mac OS created at the root of the AD domain. I certainly don't see one listed in the AD Users and Computers GUI and wasn't aware that the extended schema was suppose to create one. The above quote was pulled from a 10.5.x thread so it may be outdated information.
Thanks for any and all suggestions!
Nick.

bumpskies

8.2 EPPM which process updates the extended schema?

Hello which process updates the 8.2 EPPM extended schema and is it possible to invoke from sqlplus command line?
Is there any doc. that shows which extended schema fields map to the main schema, are there any calculations being done or is it a straight copy?

Here are the services you need to start:
Project Arbiter service
Publish Project service
Publish Enterprise Data
Publish Enterprise Summaries
Publish Resource Management
Publish Security
More info on the above is here: http://docs.oracle.com/cd/E20686_01/English/Technical_Documentation/Reporting_Database/P6%20Extended%20Schema%20White%20Paper.pdf
Information on the tables is in a thread I started (and answered) here: R8.2 Extended Schema Tables Question

DSGW customisation. Has anyone else had problems getting Directory Express to allow users to edit extended schema attributes?

I can get the form to display extended schema but when editting the data it just returns errors.

Yes, the documentation is lacking in instructions on how to customise Directory Express. The Gateway Customisation Guide has instructions on how to do this in Chapter 5 under the section entitled Extending Object Classes.
I suggest you follow these first to set up your extended attributes for the DSGW.
The go into your Directory Express folder which is under dsgw/pbconfig and make a backup of the following file:
display-orgperson
then replace that file with the one you created when customising DSGW - display-airiusperson or whatever you called it.
When you next attempt to edit the person details in Directory Express, you will see that the form is the same as the one in DSGW. Maybe you can edit this to look like Express.
Good luck

R8.2 Extended Schema Tables Question

Can someone explain the difference between the extended schema’s tables with the same name, but different suffixies? For example: NAME, NAME_FULL, NAME_S and NAME_U. They seemingly have the same columns and data (rows).

I took some time today to look at the selects of the views. Here are some of my initial findings:
NAME - The select on the production tables, lots of column aliases to make the naming more intuitive. Filters out deleted sessions. The ETL, if you will.
NAME_FULL - This is simply a view of the above view with no new aliases or where statement. Basically SELECT * FROM NAME. This is presumably the view they want you to hit.
NAME_U - I assume the U stands for User. It basically does an INNER JOIN from the data (NAME view) you need to the PROJECTSECURITY, RESOURCESECURITY, GLOBALSECURITY, etc table(s) to limit the data. But not all of these views look at the security views/tables, therefore, you get the same data as the original view. No WHERE statement on these - the INNER JOIN effectively does it for you.
NAME_S (NOT MANY VIEWS INCL THIS ONE) - I assume the S stands for Secure Code, although one DBA mistakenly wrote out SECURITY instead of S on the pxrptuser.RESOURCE view. This view uses an inner joins to look at the object userIDs, secure code flags, etc.
This is what I needed for an immediate assignment, but I will be digging into these more and will edit this and/or post a better white paper on my web site.

Supressing the JAXB code for Extended Schemas using JWSDP

Hi,
Im trying to generate the JAXB code for the XML Schema using JWSDP using ANT build tool.
Q : My schema(eg., Schema01.xsd) extends other two schemas(Schema02.xsd, Schema03.xsd).Here using JWSDP package using ANT Build tool, i want to Generate the JAXB java classes only for Schema01.xsd not for other two schemas.
Can somebody help in this regard.
Note : By default using JWSDP, Ant build tool, in "Build.xml" it expects schema name(eg. Schema01.xsd"). when i generate the java code, it generates code for the Schema and as well as its all exetended schemas.
Q : how can supress generating the java code for the extended schemas.
Regards
Madhu

Hi, no I didn't notice this, tried it now and got
<?xml version="1.0" encoding="UTF-8" standalone="yes"?><metadata xmlns="http://musicbrainz.org/ns/mmd-1.0#"><artist-list offset="0" count="1"><artist type="Group" id="ccd4879c-5e88-4385-b131-bf65296bf245" ext:score="100" xmlns:ext="http://musicbrainz.org/ns/ext#"><name>Echo & The Bunnymen</name><sort-name>Echo & The Bunnymen</sort-name><life-span begin="1978"/></artist></artist-list></metadata>is this right, its different to what I was originally trying to get

What is classical starschema and extended starschema.

Hi All,
What is classical starschema and extended starschema.Diff betwn both .
Thanks in advance.

Hi,
As per my knowledge there is no classical star schema.... It is jus the star schema and extended star schema...
Star Schema :
Star schema is nothing but Fact table in the center and surrounded by the master data tables...... In star schema we have some draw backs thats why we move accross to extended star schema.....
1. There is no usability of master data becoz it is inside the cube.
2. We can analyse only from 13 angles
3. Performance issue becoz data will be in alpha numerics....
We have come accross with these in Extended star schema
Extended star schema :
Fact table in the center surrounded by the Dimension tables.. And we have out the Master data tables from the cube to outside and these tables linked to the dimensions with the foreign key and primary key relationship... Between these Dimension and master data tables we have SID tables in which the data will be stored in numeric format..........
And final one is we can analyze the data in 13 * 248 angles.....
Khaja

Time Capsule Access Control and Extended Network Question

I have a Time Capsule where I have set up a wireless network access list…and extended the network using an Airport Express unit. The Airport Express unit also has settings for an Access Control list. Do these need to be the same as the those for the network from TC that it is extending…or does that happen automatically…and if not what on earth are they for?
Thanks for any help…this doesn't seem clear from what I've read/seen.
James

I have a Time Capsule where I have set up a wireless network access list…and extended the network using an Airport Express unit. The Airport Express unit also has settings for an Access Control list. Do these need to be the same as the those for the network from TC that it is extending…or does that happen automatically…and if not what on earth are they for?
Unfortunately, they are not automatically applied to each base station in an extended network. You would have to manually enter the exact same list in each base station.

Questions about CIN tax procedure choice and pricing schemas

Hi all,
I have to implement SAP on a Indian company and I'm verifying all particularity about this country (in particular tax procedures and the great number of differents tax conditions used).
I have two questions about tax procedures and pricing schemas. Every feedback about thse points will be appreciated.
a) To choose tax procedure TAXINN or TAXINJ which are the elements that I have to consider?
I have read lot of documentation about CIN implementation and Iu2019m oriented to choose TAXINN schema, but If possible I would to understand better which are on behalf of one choice or another.
b) To define pricing schemas for India, after check with local users and using examples of documents (in particular tax invoice) actually produced, I have understood that taxes have to be applied on amount defined starting from price list, minus discounts recognized to customer plus surcharges eventually to bill (packing, transport, etc.).
Itu2019s correct for any type of taxes that tax amount is calculated on u201Cnet valueu201D defined at item level or there are exceptions to this rule?
Thanks in advance
Gianpaolo

hi,
this is to inform you that,
a) About point 1 I know the difference between the 2 tax procedures (conditions or formulas). I also have read in others post in the FORUM that TAXINN is preferable. So I would to understand which are the advantages to choose instead TAXINJ. There are particular reasons or it'a only an alternative customizing setting?
a.a. for give for posting the link : plese give me the advantages of TAXINJ and TAXINN
CIN - TAXINN and TAXINJ
b) About point 2, to define which value has to be used as base amount to calculate taxes isn't a choice, but is defined depending by fiscal requirement of the country, in this case India fiscal requirement. I know that, as Lakshmipathi
write as answer on my question, exception could be, but it was important for me to understand if I have understood correctly the sequence of the pricing condition in the schema in "normal" situation.
b.b. you can create your own pricing procedure for this and go ahead.
hope this clears your issue.
balajia

648 max , testing base and extended memory

I dont see the thread i answered to one time that someone spoke of using ddr400 with 648 max or max-L board and they were getting testing base and extended memory error from the LED's. Well i just got the same error today and my system would not boot i cut the power to the PS. and turned it back on it would start to boot and hang i could barely get to the windows logo sometimes the vid card wouldnt even boot the logo to the screen. This is with an updated mobo that msi sent me that i had just put in , it seemed to run fine at first then this problem started occuring. The only difference i had in the setup from the previous outdated board was i had the mem in DIMM 3 and not DIMM 1, so i moved the memory back over to DIMM 3 and now the problem is gone. Just something for those of you with the same problem to try.
Oh and i forgot one more issue, i cannot set the dram speed in the bios manually i have ddr 333 it should be 167 mhz so i set it to 4/5 and the system will not boot at all i end up having to reset cmos. I called MSI about that and they told me to just have it set to SPD , I said i know that and im fine with leaving it that way but it should let me set it manually if i wanted to and that i wondered if that had anything to do with the random " testing base and extended memory " problem.

It was probably myt thread...
http://www.msi.com.tw/program/e_service/forum/viewindex.php?threadid=6204&boardid=10&styleid=1
Have done some testing with both DDR333 and DDR400 and my results are in the thread.
Right no I'm using my DDR400 as DDR333, manually set to 167MHz, using DIMM1, and havn't seen any problems. I'll try the DIMM3 to see if I get any changes.
And by the way.. I tried setting my DDR400 manually to 200MHz and it wouldn't boot at all. After a lot of ugly language I finally got it back to the BIOS....after a reset of the CMOS.
Seams like you should use SPD if you want to use the correct freq for your RAM.
Have you tested the new 1.3 BIOS?

Classic and Extended classic scenario

Hi All,
Can we have classic scenario for Service procurement (MM-SRV) and Extended classic for direct material procurement in the same SRM system.
This is because Extended classic doesnot support service procurment where as Classic scenario supports
Does any body implemented like this. If so pls let me know Pros and cons
Abdul Raheem

Hi Laurent,
Thanks for reply.
Do we have any limitations if we go by this model like Service procurement by Classic and Direct procurement by Extended Classic.
If any thing breif on PRos and Cons of going by this model.
Abdul raheem

ADSI and extended schema

Similar Messages

Maybe you are looking for