ARQ: Does LDAP User Search action require any special authorization for requester???

Hi All,
I was wondering if requester need to be given any special authorization to search users in LDAP?
Because, I have noticed that a requester can not search users from LDAP. However, another user who is a super user in GRC system and has SAP_ALL profile assigned, can search users from LDAP easily!
I have noticed only this change between these two users and not sure what authorizations should be granted to requester to search users from LDAP. I have tried to search relevant auth. object in his role "SAP_GRAC_ACCESS_REQUESTER" but could not find. I also check security guide for this but did not get any details.
Can anyone advise?
Regards,
Faisal

Alessandro,
I switched on trace using ST01 for one of the requesters and viewed its details later. I found RC=4 or 12 for some of the auth. objects.
For example:
I opened of of the records and could see above details. I am unable to interpret it further. Can you please assist in this?
Regards,
Faisal

Similar Messages

Are there any apps which will allow local calling using data only that do not require any special numbers called out initially and does not require the receiver to have a similar app or account?

Are there any apps which will allow local calling using data only (not minutes, no extra charge) that do not require any special numbers called out initially and does not require the receiver to have a similar app or account? Just for random local calling.

Yup.
Here is a way you could solve this by adding an extra column and a small lookup table:
The lookup table is here for the copying:
0
1
k
kilo
2
M
mega
3
G
giga
4
T
tera
5
P
peta
6
E
exa
7
Z
zetta
8
Y
yotta
In table 8 (the one on the left in the image) column A is where the values are.
B1=A1÷(1024^VLOOKUP(INT(LOG(A1, 1024)), Binary Prefixes::A:D, 1))&" "&VLOOKUP(INT(LOG(A1, 1024)), Binary Prefixes::A:D, 2)&"B"
this is shorthand for... select cell B1, then type (or copy and paste from here) the formula:
=A1÷(1024^VLOOKUP(INT(LOG(A1, 1024)), Binary Prefixes::A:D, 1))&" "&VLOOKUP(INT(LOG(A1, 1024)), Binary Prefixes::A:D, 2)&"B"
select cell B1, copy,
now select all the cells in column B, paste

Sql statement substituion - any special rules for formatting the query?

Hey,
I was wondering - are there any special rules for formatting the query that is to be substituted?
I am asking, as somehow I am unable to make the DSP substitute my query. I took the basesql from the server console (to make sure that I have the correct version), configured a query substitution, and well, nothing happens.
I've tried to substitute it with a modified version of the original query (where NVL(,0) is changed to NVL(,-9999)), then also with select * from dual (which I hope would generate some error), but DSP is ignoring everything...
The query is rather big (400 lines), so maybe I need to format it somehow? I've noticed that in the docs (http://edocs.bea.com/aldsp/docs25/admin/server.html#wp1049919) that the query used in the example has all leading spaces removed. I've tried that, but DSP is still not doing any substitution...
Any suggestions welcomed...
Thanks,
Leszek

Michael,
I am doing everything as in edocs, retrieving from logs the basesql (so with place holders). I've removed all new lines (so the query is now in a single line) and all excessive blanks (so all double/more blanks replaced with a single blank). Still the DSP is like ignoring the substitution. I've tried to do it even with a simple query, like:
SELECT t4."PRODUCT_ID" AS c1, t4."PRODUCT_NAME" AS c2 FROM {DB}.{SELECTION} t1 JOIN {DB}.{CUSTOMER_FACT} t2 ON (t1."VAL" = t2."CUSTOMER_ID") JOIN {DB}.{CUSTOMER} t3 ON (t3."CUSTOMER_ID" = t2."CUSTOMER_ID") JOIN {DB}.{PRODUCT} t4 ON (t4."PRODUCT_ID" = t3."PRODUCT_ID") WHERE ((? = t1."SESSN_ID") AND (t1."NAME" = 'CUSTOMER_ID') AND (t3."DELET_DATE" IS NULL) AND (t3."PRODUCT_TYPE" = 11))
am I missing something here? do I need to remove/add something , to make it work?
I've tried removing blanks around = signs (which from the DSP pov results in a different query), sitll with no results.
Edited by xnts at 06/24/2008 7:37 AM

How to install plugin and exta filter in photoshop cs ? and any special filter for special effects ?

how to install plugin and exta filter in photoshop cs ? and any special filter for special effects ?
kindly recommend me any best one and tel me step by step how i will add more plugins n filters

A Plug_in normally come with an installer or install instructions. Check the documentation for the plug-in you trying to install. It sounds like you don't know what plug-ins you want to install. In that case you don't need to install any. At some point you may read about a plug-in and what it can do and feel you have a need for it. Then you will have a reason to install a plug-in that is not installed by default. There may also be a cost involved most worthwhile plug-ins are not free.
Adobe Optional Plug_ins downloads are Plugins Adobe want to remove from Photoshop and no longer install by default. Also at some point in time these will no longer install into the current Photoshop for Adobe will remove feature or interfaces the use. For example the CS5 optional plugins will install in Windows CS6 perpetual version 13.0.1.3 but not in Subscription version 13.1.2 or perpetual Mac version 13.0.6 fot its 64bit only and the Mac CS5 optional plug-in for Picture package is only a 32bit plug-in.
You will need to keep and maintain old versions of Photoshop if Adobe remove features you use in new versions of Photoshop.

Trying to connect IPhone 4s to TV using AV TV RCA Video USB connector Does this require any special software?

Have been unable to get IPhone 4S to show up on AV TV
Using AV TV RCA Video USB connection. Have tried in
HD 720i, HD 1080i and 1080p TV's. Is there any special
software needed on the I Phone to do this? if so please
advise.

I don't think the dock can support the HDMI dongle. I know it will do Video Out via Composite cable.
The actual dock itself has not been updated for a few years, so this may explain your problem. The packaging was changed last year to include the new remote, dock adapters, and a wall charger. The dock itself is still identical to the 2009 model.

Router required any license bundle for handling voip trafic

i have a cisco c2951 how do i check the voice capability ? does it required any license to handle voip traffic

Hi,
You need to install the UC license for the voice support. When you issue the Show version command on the router, it will show you all the installed and active licenses on your device:
Technology Package License Information for Module:'c2900'
Technology    Technology-package           Technology-package
                        Current       Type                Next reboot
ipbase        ipbasek9      Permanent         ipbasek9
security      securityk9    Permanent         securityk9
uc               None              None               None
data           None            None                None
In My case I do not have the UC license Activated. You need to first have the license installed in order to activate it.
There are two ways of getting the license. One is by purchasing the license from Cisco and the other is by requesting for a free 60 day trial license. Once you have the license with you.. copy the license file to the flash of the router and then key in the command
2951#license install flash0:FHH1216P07R_20090528163510702.lic
The following link gives you more information:
http://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/software-activation-on-integrated-services-routers-isr/white_paper_c11_556985.html
Thanks,

Any special reason for this behavior...?

Is there any special reason why the Process Black shows in ink separation list, when the only black i have is an an object with applied shadow in a hidden and unprintable layer and no other object has black as fill or stroke in any of the visible layers? Thanks for any tips ...

The separations preview is just what it implies - an overview of the inks used in the doc, based on the assumption that the document is going to be printed at some point using a standard process. It doesn't matter, whether the objects are invisible, non-printable or what else. AI has no concept of these things. And you can't print anything without any kind of ink, can you? I really don't see why you think it's a problem.
Indeed?
(When in doubt, pound the pulpit.)
The document is empty except for four squares.
The blue is process global.
The orange is process non-global.
The green is spot.
The black is 100%K.
The black is on its own layer.
The green is on its own layer.
The blue and orange are on the same layer.
Screenshots are from the Output tab of the Print dialog. Mode is Separations. Printer is Adobe PDF.
All Layer visibility on:
Layer containing the green spot color visibility off. Note that the green sep will not print:
Layers containing the green and the black visibility off:
Layer containing the black is off.
The only difference here is that a 40% K drop shadow has been applied to the black path:
The only difference here is that the drop shadow has been removed from the black path:
Clearly, AI does have some "concept about these things." But AI's "concept" about this--like so many other things--is rather illogical.
JET

Locked LDAP user search

Hi,
I want to a list of users (we are fatching from LDAP) that are locked(Acount Locked) in portal.
I tried advance search, but no elements found there. But there are lots of users (account)locked.
Thanks,
Anumit

You can use the ICE utility for command line execution of LDAP scripts, exports, imports LDIF's etc. ICE is in the ConsoleOne folder on a server sys: volume.
I dont think you can export passwords though. If pwds come out they'll ptobably be hashed up in their MD5 hashes. I only ever did this once and that was between two NDS trees.
For password sync you'll need something else like Novells Identity Manager or else don't sync but direct all auths into the LDAP repository.
N.

LDAP User Search Base

Need help configuring LDAP from Novell I can not find much reference to the command strings to use.
I have 1000+ users in the Novell tree and would like to import them into the CCM database and be able to keep the passwords updated between the two.
Thanks

You can use the ICE utility for command line execution of LDAP scripts, exports, imports LDIF's etc. ICE is in the ConsoleOne folder on a server sys: volume.
I dont think you can export passwords though. If pwds come out they'll ptobably be hashed up in their MD5 hashes. I only ever did this once and that was between two NDS trees.
For password sync you'll need something else like Novells Identity Manager or else don't sync but direct all auths into the LDAP repository.
N.

It's not clear to me why within the Apple eccosystem of products something as basic as editing a MOV file recorded with an iPhone requires any 3PV software for conversion so that it may be edited in iMovie09. Is this an iMovie Bug?

Is this a bug within the iMovie? This seems as if it should be extremely simple. I recorded a movie with my iPhone 4. iPhone records that in the standard apple MOV format. I can play the file in Quicktime. However, when I try to drag and drop it into iMovie09 or import it into iMovie09 it is not allowed. It used to be said that Apple just "Works".
Sean

I own the movies and I want them to stay in my iTunes library basically forever.
But in both cases the file name no longer shows in the movie list, so I don't know how to re-download it from the Cloud.
iTunes prefs > Store > Show iTunes in the Cloud purchases.
This will show all your iTunes purchases in your library with a cloud icon down arrow. Click the icon to redownload or click on Play to stream without downloading.
Also see this , -> Download past purchases
and techncially, you don't "own" the movie, You simply have a license to use it.
Yet the first thing iTunes does when you hit the delete key is tell you that it will remove the movie forever from all devices and the library.
Actually, no it does not tell you that.
FYI: You should keep copies of all yoru iTnue spurahses as the labels/movie studios/copyright owners can pull their product at anytime and it won't be available to redownload.
Suggestions here -> http://www.apple.com/feedback/

Why should users in Korea go to service center for request of bumper?

As far as I know, users in USA can request Apple to send bumper through application.
But the company called "Apple Korea" tells users to walk to service center for bumper and they just provides only black bumper!!
And you should wait for 1~3 weeks to get the bumper. Definitely you should walk to service center again to get the bumper....What the ...
What makes us more angry is that the company, "Apple Korea" sells other same bumpers in apple store of online site. The bumpers are not only black...but also green, white...
I am very doubtful that the company,"Apple Korea" is really a company related to Apple. Why do they do differently about CS???

It's unlikely anyone here would know the answer to your question. This is a user-to-user forum and Apple does not answer questions. You really have two choices.
1. Call Apple directly and ask
2. Send feedback to Apple by clicking on this link:
http://www.apple.com/feedback/iphone.html

Any special procedure for turning off a passive Exchange server?

I need to perform some maintenance on the passive server of a two-member DAG. Do I need to do anything special in order to shut it down (i.e. running the StartDAGServerMaintenance script)? Or can I simply shut it down and start it back up again?

I would put server into maintenance before doing anything to ensure all services are down properly and set for reboot or whatever maintenance I am doing.
I assume you have Exchange 2010 based on StartDAGServerMaintenance reference you have given, that's the one to put server into maintenance mode. But if you have Exchange 2013 then follow "Performing maintenance on DAG members" over here http://technet.microsoft.com/en-us/library/dd298065(v=exchg.150).aspx

Any special Warranty for blown caps?

I have one of the 9 million MSI series MB's that all died after a year or two due to blown capacitors. As this is a chronic failure I am wondering if anyone has done a class action lawsuit or if there are special warranty conditions since these MB's were doomed to failure from the start?
This mainboard is the KM133, however I also have 4 other boards ranging from pro2-a to turbo's some of which I even got back from RMA and were still bad.

bad capacitor settlement

Are there any special plans for Non-profits?

Part of a very small not profit that currently uses Photoshop and Premeire - would love to upgrade but, have to watch the expense. Thank you.

Not that I know about...
Cloud Plans https://creative.adobe.com/plans
-and subscription terms http://www.adobe.com/misc/subscription_terms.html

GRC 10.0: Access Request Creation - LDAP user advanced search not working

Dear Experts,
We are implementing SAP GRC Access Control and we have an issue in Access Request Creation. If we put the user name in “User” field and press intro, the user details are updated, but if we want to make an "Advanced search" the user is not found and the application give us the following message: “No records found for the search criteria entered.”
Scenario 1: If we put the user name in “User” field and press intro, the user details are updated:
Scenario 2: If we want to make an "Advanced search" the user is not found and the application give us the following message: “No records found for the search criteria entered.”
We are using the Active Directory as Data Source.
Thanks and Regards.

Hi Jose,
Try maintaning the parameter 2050 as YES and check once.
Kindly, also make refer to the below list of SAP notes:
1757906 - GRC 10.0 - LDAP user search does not work in NWBC
1745370 - LDAP search in GRC does not work anonymously
1718242- UAM: User search not working in Access Request.
Regards,
Neeraj Agarwal

ARQ: Does LDAP User Search action require any special authorization for requester???

Similar Messages

Maybe you are looking for