Associate eDir user object with GroupWise account

After moving a user form secondary domain (GW802) to a new primary
domain (GW2012) the association of edir object and GW account was lost.
The user move state showed "completed" and i can see the user's db in
the /ofuser directory. If i try to associate the GW account it is not
listed in the po. I tried validation of the po and domain but i got no
errors.
Can i manually assign the userdb to the eDir object ?

maxx,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/

Similar Messages

2 GW accounts/mailboxes for 1 edir user object - possible?

Hi all,
in a screnario where users must have 2 strictly separated mail accounts the only way I know is creating 2 users as well in GW and edir. It would be easier to have just 1 edir user with 2 GW accounts as there is no separation required there. Anybody an idea how to achieve this?
TIA,
Sndor

Originally Posted by based
Hi all,
in a screnario where users must have 2 strictly separated mail accounts the only way I know is creating 2 users as well in GW and edir. It would be easier to have just 1 edir user with 2 GW accounts as there is no separation required there. Anybody an idea how to achieve this?
Or... create an account used for proxy only, the user need not know the password or manage it. They can choose to be which ever user they want to reply to messages.
Or... use IDM to create parallel account in another branch of your existing edir tree.
For a small number of users, the former may be a solution.
-- Bob

Moving distribution list memberships from contact to user object with sync engine

We only have the FIM sync engine and when replacing an AD contact object with a user object I am being asked to move the distribution lists that the contact is a member of over to the new user object. I've done the contact to user replacement provisioning
many times before but never had to migrate the group memberships over.
Does anyone have any advice for the best approach to do this?

This is what I suspected. You are not doing conversions. You are simply Deprovisioning contact and provisioning user. For all intends and purposes, the 2 objects are not related in any shape of form. So how do you know that this contact
is related to that user??
What you need is, to have both objects connected at the same time in MV before contact is deprovisioned. Only this way you know that user 'U' is the same as contact 'C'. FIM needs to know this.
For this, you need to have one MV object with 2 AD connectors, one for user and one for contact. You can use to MAs, or you can use code to have one object with 2 connectors. (Usually this is not allowed, but with code you can pass this)
Before deprovisioning contact, you do the group membership changes, then you deprovision contact.
Nosh Mernacaj, Identity Management Specialist

Any method to prevent a user login with 1 account, but several machines?

May I ask for your recommendations to prevent a user to login my application with his/her account through different computers?
Background information:
1. My application is developed with BC4J framework.
2. Login details: Once a user's is validated with their user id and password stored in a backend database table, he/she would be granted the right to use my application with a common connection account, as stated with the configuration details specified.
Here is my solution:
- When a user login my application, I'll lookup if there is any existing user record in a database table, let say, TBL_CURR_USERS. If no user record is found, the user will be granted the right of launching my applications and have a user record written down in the table TBL_CURR_USERS. If a user record is found, the user will receive an error message - "Your specified account is in use. You are not allowed to enter until your specified account has been logged off."
- Problem: My problem is - how to trigger the event for removing the record in the table TBL_CURR_USER when user logs out implicity or internet connection interrupts. Let say, when the user close the browser by clicking the 'X' icon, I have nothing to trigger my deletion for the user record in the TBL_CURR_USERS table. If so, in the long term, many users will not be able to use my application until housekeeping is done for the table TBL_CURR_USERS ... what should I do? Any Java solutions or JDeveloper solutions available?
Thanks for your replying!

I had the same problem and I resolved in a different way. In the application server I have a Set in the context and I add a user when the login is successful and I remove it (I store the user even in the session) when the session expires (I have a session listener) or when the user explicitly logouts.
I don't need table and I don't need to do anything if the application server crashes.
If you don't use connection pooling you could use a logon trigger on the database.
I hope it helps,
Giovanni

OD Upgrade: merge backed up user data with new accounts?

Hi All,
After trying many paths to upgrade a 10.6.8 OD server to 10.10 we gave up on export / import of the whole directory. We kept running into the “Existing connection is not authenticated” error caused by some kind of certificate mis-match. Searching for fixes inevitably led to this article which indicates the “rekerberize” method should not be used on Yosemite.
So we punted and installed everything clean from scratch. We think we found a method that restores all users and their home dirs. I’m posting here to see if anyone may critique our method as unsafe. We’ve done some testing but users are not let loose on the new system yet so we aren’t quite 100% certain.
The basic steps we eventually took were:
Grab export of users from 10.6 server
Fresh install of OS X 10.10, patch to 10.10.1 (cloned old system first so we can always go back)
Install Server
Correctly configure DHCP and DNS and File Sharing
Create Directory
Create self signed cert (this was necessary to get 10.6 clients to auth; 10.10 clients work out of the box)
Edit user export file to fixup change in FQDN: %s/<old_fqdn>/<new_fqdn>/g
Import users into Directory using the fixed up export file
Copy user home dirs from 10.6 backup into new file share (the user home dir path matches the fixed up export file)
chown each user dir to the new user: sudo chown -R <user>:students /Users/<user> (In earlier passes at the upgrade, we also propagated permissions and ACLs from within Server.app at this step. But the fresh install didn’t seem to need this — chown appears to be enough.)
The Keychain came across with wrong perms and instead of resetting the perms, it made more sense in our case to just delete it: sudo rm -rf /Users/<user>/Library/Keychains
We’ve done a reasonable amount of testing and it looks like all of the user’s files are accessible and working fine. I expect we may find some application data in user home dirs that may have wrong perms (like keychain did) or otherwise be incoherent to the new system. But so far we haven’t found any such issues.
So the crux of this post is: Is it prudent to import user data from another system and expect a simple chown command will make all right with the new system? Or are we glossing over some low-level fundamental (Server File Sharing ACLs?) and creating a time-bomb that will only go off after a week of user data changes at which point any path back out will involve user data loss.
We’re going to start letting some users log on and grab their home dirs in the next day or two. Any and all comments are welcome.
Thank you,
-J

Use Migration Assistant to restore your user files. You can find this application in /Applications/Utilities, so connect the external drive with your files, open Migration Assistant and follow the steps. Migration Assistant will create a second user account with your restored files.
Migration Assistant will let you restore everything you had before (applications, pictures, music, videos...) and will let you choose which folders you want to restore. As you want to restore the iTunes library, make sure you check the Music folder.
Respecting to iPhoto, that application is not included with OS X, so you have to download it from the Mac App Store. Just open it, log in with your Apple ID, go to Purchases and download it free of charge.

Export of User Master with customer account reference

Hi,
We exported the user master record from prod and imported to QA. Users are reporting error " Your user master has not been created correctly. Contact your system administrator" while they connect from PORTAL.
While checked in SU01D (from ERP QA) the customer account is not exist after importing the User Master in QA.
Is there anyway to copy the SU01D related tables for the customer accounts while export User master?
If so, what are the tables related to SU01D?
How do we include in User Master Export? or how do we copy the tables?
Pls help.
RGC

Any idea in which table the SAP writes the user references in SQL db? writing a query is not a feasible solution to copy/export all the user references.

Associating Skype's user name with the phone number!

Hello there, I always love using Skype but I haven't been using it that much recently due to the rise of other video chat apps like FaceTime. I think one of the struggles that Skype users face is the need to know their friends exact user name or email address. In my opinion, adding the ability to associate Skype user name with a phone number (like Whatsapp & FaceTime) would make it much more convenient and will help Skype to spread to more users especially with the availability on all phones OS.

Hi jjthexer,
here, I'll throw in a frame you can use by adding the meat of the script into it:
# The path where you store your csv file that includes the user-information
$path = "C:\ExampleFolder\example.csv"
# Load the Csv file into PowerShell
$users = Import-Csv $path
# Now do for each of those
foreach ($User in $users)
# Step 1: Check whether the user exists
# Step 2: If it exists, add telephone number to AD object
You'll need to figure out how to fill out the foreach loop yourself (there are plenty of learning ressources here on technet to do so on your own), or wait until someone else cheats and tells you more ;).
Noticed that I changed the "Get-Content" into "Import-Csv"? It alters the way you receive the data. Suffice to say, Import-Csv is cooler when dealing with Csv files. Try out these two commands (after declaring the path variable to your csv file) to see the
difference:
(Get-Content $path)[1] | FL *
(Import-Csv $path)[0] | FL *
Another thing you used is the add-pssnapin command. What this does is load the Quest Commands to access the Active Directory. For it to work, you need to have these installed. There is a Microsoft native command set that is available on all computers that
have an AD Management Console. Either of those will work, if you meet the stated prerequisites. Both are best placed at the head of the script. Here are the two commands again for reference:
# Load Quest AD Cmdlets
Add-PSSnapin quest.activeroles.admanagement
# Load Microsoft AD Cmdlets
Import-Module ActiveDirectory
Hopefully, that info will be of some help to you :)
Cheers,
Fred
There's no place like 127.0.0.1

How can I get all users associated with my VSO

I see here: https://www.visualstudio.com/en-us/integrate/api/shared/profiles that I can get my profile info from the API, but can I get all users associated with an account?

Hello!
If you want to see all of that in a single mailbox, you can create a Smart Mailbox from the "file" menu in the top left corner of your screen. It's a bit of trial and error before you get the rules correct, perhaps, but that will work.

I can't link my mobile number with my account, getting invalid account msg. y?

I can't associate my mobile number with my account, getting the msg "The T-Mobile account type is invalid please enter another CTN ". I therefore cannot see my bill. How can I get round this?

Hi
Welcome to the EE Community!
Have you previously been able to access your My Account ok?
Have you tried using a different browser such as firefox?
Let me know!
Thanks.

Enter a true account assignment object with revenues while reversing FB08

Hi All
When I am reversing the document through FB08 I am getting the warning messege "Enter a true account assignment object with revenues"
Message no. KI166
Diagnosis
You made an account assignment for 31211100, a revenue element, in controlling area 1000 to a cost center or profit center.
System Response
Cost centers and profit centers can carry revenues in the SAP system as statistics only. To ensure reconciliation between FI and CO for revenue element 31211100, a CO account assignment object must record the revenues as a real value. This object type is used for updating to the reconciliation ledger.
In principle, it is possible for the SAP system to automatically derive this CO account assignment object, the reconciliation object. However, all postings made in CO for costing-based Profitability Analysis are logged in the reconciliation ledger under "reconciliation object". In this manner, the reconciliation ledger identifies the exact values flowing into the operating profit. If you post reconciliation objects during revenue postings to cost centers or profit centers, you must do so while keeping the interpretation of the reconciliation ledger reports in mind. The sums of revenue postings to profitability segments, cost centers, and profit centers cannot be broken down further.
Procedure
To avoid posting to reconciliation objects, make account assignments to a real CO account assignment object.
If you want to post to reconciliation objects, you can change this message to a warning or a note for future users, or deactivate the message entirely. Use the Implementation Guide under "Controlling: General" and choose Change message control. Enter area KI and message number 166. If you do not enter an individual user here, the change is valid for all users.
It is not allowing me to reverse the document already posted.
Please guide
Thanks in Advance
Sonal

Hi,
Do you have this cost element maintained in OKB9 with a reference to an internal order or profitability segment? If yes, please look at the note 373823.
Regards,
Eli

Enter a true account assignment object with revenues - WARNING MESSAGE

Hi All Experts,
I am configuring PCA. Where my GL balances are not getting updated with having assignment of Profit Center. I am getting this below warning message :
Enter a true account assignment object with revenues
Message no. KI166
Diagnosis
You made an account assignment for 410000, a revenue element, in controlling area 8000 to a cost center or profit center.
System Response
Cost centers and profit centers can carry revenues in the SAP system as statistics only. To ensure reconciliation between FI and CO for revenue element 410000, a CO account assignment object must record the revenues as a real value. This object type is used for updating to the reconciliation ledger.
In principle, it is possible for the SAP system to automatically derive this CO account assignment object, the reconciliation object. However, all postings made in CO for costing-based Profitability Analysis are logged in the reconciliation ledger under "reconciliation object". In this manner, the reconciliation ledger identifies the exact values flowing into the operating profit. If you post reconciliation objects during revenue postings to cost centers or profit centers, you must do so while keeping the interpretation of the reconciliation ledger reports in mind. The sums of revenue postings to profitability segments, cost centers, and profit centers cannot be broken down further.
Procedure
To avoid posting to reconciliation objects, make account assignments to a real CO account assignment object.
If you want to post to reconciliation objects, you can change this message to a warning or a note for future users, or deactivate the message entirely. Use the Implementation Guide under "Controlling: General" and choose Change message control. Enter area KI and message number 166. If you do not enter an individual user here, the change is valid for all users.
I dont understand when I am giving PC as CO Object assignment which is I think true assignment for revenue collecting over. Still system showing this warning message. I know this can be supressed by just pressing ENTER and I can save. By posting in this way document even , I am not able to draw any report based on PC, neither KE5Z or F.01. All says No data found.
What configuration piece I am missing ? Can any expert guide ?
Regards,
Revati Joshi.

Just go to OKB9 and check the Cost Element, whether any default cost center or Profitability segment have been been assigned or
not.
If not, check if the Cost element is Revenue related, assign Profitability analisys. If not, check with settings of PCA.
You shoukd never assign PC to a cost element ntil unless it is a Revenue element.
Hope it helps
Thanks

Error:Enter a true account assignment object with revenues

Hi expert,
Pl advise it is coming at the time of making entry through F-02.I have selected GL for sales.Then this error comes.
Regards,
Samar

Hi Experts,
When i do entry in F-02,following error comes:
Enter a true account assignment object with revenues
Message no. KI166
Diagnosis
You made an account assignment for 700000, a revenue element, in controlling area 1000 to a cost center or profit center.
System Response
Cost centers and profit centers can carry revenues in the R/3 System as statistics only. To ensure reconciliation between FI and CO for revenue element 700000, a CO account assignment object must record the revenues as a real value. This object type is used for updating to the reconciliation ledger.
In principle, it's possible for the R/3 System to automatically derive this CO account assignment object, the reconciliation object. However, all postings made in CO for costing-based Profitability Analysis are logged in the reconciliation ledger under "reconciliation object". In this manner, the reconcilation ledger identifies the exact values flowing into the operating profit. If you post reconciliation objects during revenue postings to cost centers or profit centers, you must do so while keeping the interpretation of the reconciliation ledger reports in mind. The sums of revenue postings to profitability segments, cost centers, and profit centers cannot be broken down further.
Procedure
To avoid posting to reconciliation objects, make account assignments to a real CO account assignment object.
If you want to post to reconciliation objects, you can change this message to a caution or a note for future users, or deactivate the message entirely. Use the Implementation Guide under "Controlling: General" and choose Change message control. Enter area KI and message number 166. If you do not enter an individual user here, the change is valid for all users.
Pl advise.
Regards,
Samar

Can't Login to SharePoint as an invited External User / Can't Remove All Traces of External User with Microsoft Account

Hi TechNet,
I have an MS SharePoint Online (SharePoint Plan 2) team site, quite simple, one document library etc.
I have successfully added all users (E3) within the organisation to groups, and permissioned correctly.
I have added myself (separate organisation, also Office 365 E3) as an External User, and have access to the website without any problems by authenticating with my Organization account e-mail address.
I have a single user (separate organisation, also Office 365 E3), who's setup is identical to mine (Also Office 365 E3).
However, when this user is added as an External User, they are unable to login, and get "Sign In is not complete":
That didn't work
We're sorry, but [email protected] can't be found in the CLIENT1.sharepoint.com directory. Please try again later, while we try to automatically fix this for you.
Correlation ID: dc1f7f9c-092b-20b8-7b35-89348ba22f71
Date and Time: 3/20/2014 7:06:55 AM
URL: https://CLIENT1.sharepoint.com/
User: [email protected]
Issue Type: Partner User Invalid.
I then remove the user using the Site Collection, and using the PRofile Manager, and using Remove-SPOUser, and using Remove-SPOExternalUser. Which is great, he's gone. However when I go to add him back to a group, as soon as I type his e-mail address, it
'Resolves' into his full name! If I have completely(?) removed him form the site, how is he being resolved? And therefore me trying to remove him to re-add him to try and solve the user/directory/auth issue is not working.
Furthermore, upon clicking on said client's username inside SharePoint (after I've 'added him back' of course), his ID, in format: i:0#.f|membership|live.com#[email protected] has an entirely different e-mail address, his Microsoft Account!
I'm assuming he must have been already signed into his Microsoft Account when he clicked on the External User e-mail invite? If so, I clearly do not want this, how can I remove lal traces of his Microsoft Account, given that I have gone to the lengths as
detailed above?
I have already completed these steps: http://community.office365.com/en-us/forums/148/p/228263/709905.aspx
Some possible further reading regarding Microsoft ID's and Organization ID's:
http://sergeluca.wordpress.com/2013/09/23/sharepoint-online-and-external-users-this-invitation-has-already-been-accepted-with-another-account-bug-or-feature/
Please let me know if you need any more information regarding this issue, and thanks in advance to anyone who can shed some light on this situation for me and anyone whom encounters it in the future.
Regards,
Evanly.

Hi Scott,
Thank you so much for taking the time to read and respond to my issue.
Certainly, it makes sense that regardless of where the invitation it sent, the user would authenticate with their Microsoft ID.
In my case, I want the user to authenticate using their Microsoft Organisation ID, that they use for their seperate Office 365 account.
This is the way I was able to log in, and worked great. With my client, they are unable to access Sharepoint because once they sign in with their Microsoft Organisation / Office 365 ID, they are told they are not in the directory, because their Microsoft
ID is in the directory and it doesn't match up.
I am simultaneously trying to 1) Remove all traces of this users Microsoft ID, which so far using the above steps, has been unsuccessful; and 2) Invite the user using his Microsoft Organisation ID, and have him authenticate with that (which is proved to
work, as my account uses this).
Looking forward to any more suggestions. Thanks in advance!

How can I associate 2 appleids with one account or use a different Appleid for imessage as described in another post?

How can I associate 2 appleids with one account or use a different Appleid for imessage as described in another post?
I have rejoined the iPhone community, not with one iPhone but with two. My wife agreed to move from the unenlightened!
I have set up both under my apple account and want to keep it that way. But I do not want iMessages going to both phones. I would like separate message queues but share all apps and other purches from the store.
I have created a separate AppleID for her but under Settings>Message>Receive At (it currently says 2 addresses) > ... will not allow me to change the current eMail address and when I add hers (her appleid) it errors out. The only thing I can do in the Apple ID field is to manage my account and not change it to hers.
How can I have 2 iPhones (and my iPad) on the same account but have separate identies?
Thanks,
LpGrumpy

1. Yes. Restart with the Option key held down as needed.
2. No, it won't be a problem.
(83373)

HT201303 how do i associate a different apple ID with my ipad? I need to do this bc my gmail account was hacked and a hoax email sent out from it. so i opened a new gmail account and want to associate this new email with my ipad

how do i associate a different apple ID with my ipad? I need to do this bc my gmail account was hacked and a hoax email sent out from it. so i opened a new gmail account and want to associate this new email with my ipad

To check if you have a virus, you can download ClamXav
also, go to Applications>Utilities>Activity Monitor and see if there's anything that you don't recognize, and check your sent email to see if you've been sending emails without your knowledge.

Associate eDir user object with GroupWise account

Similar Messages

Maybe you are looking for