Automating account creation

i've read the command line admin guide and have tried dscl and dsimport to handle LDAP account creation, but i was wondering about how others perform these tasks.
are there "best practices" to follow in mass account creation? do you have any recommended techniques i should follow?
thanks for your help.

i just wanted to second passenger. I use it to create mass amounts of accounts and it really helps out. Plus you will be able to open up the document that it creates before you import it if you really want to see what an import document looks like with the headers and all.

Similar Messages

  • Automating Account Creation/Deletion

    Hi All,
    I'm trying to find an easy way to manage (create/delete) user accounts in a lab full of computers using Apple Remote Desktop (ARD). I was thinking that sending shell commands might work, but I can't seem to find a command or script that creates/destroys user accounts. Is there such a command? Or is there a better way to do it?

    Check email templates for all the other emails.
    rgds,
    Suren

  • Automating the creation of telephone accounts in call manager

    Hi, I have recently been asked to explore the possibility of automating telephone account creation in Cisco Call Manager, using scripting.  Now although my scripting knowledge isn't great, one idea that was suggested was the use of .csv files?  Any advice or tips about how to proceed would be very much appreciated. Thanks.

    Hi Jaime, thanks for your reply.  I have already discussed the possibility of using CUCM 10 although unfortunately this was ruled out straight away as the cost of implementing the latest version would be too expensive for our department.  I am also looking into the Cisco BAT and have an account for the CBT Nuggets to get some training on BAT.  Additionally, I am looking into writing up a simple script that could be used to change the formatting of a .csv file containing staff details that could then be uploaded to CUCM.

  • Automating iTunes U Account Creation

    I'm currently looking for a way to automate iTunes U account creation so that upon request, a professor or another university entity can create an account on demand.
    Something that intergrates with Blackboard well would be nice, but right now I'm trying to learn more about how this is done with iTunes U.
    Please respond with links to documentation or any information that may be helpful in my development efforts.

    Apple does not manage accounts for iTunes U. There is no way, through script or otherwise, to request that Apple make or enable an account. Every site is different and handles its users differently.
    Although it can seem really confusing, the really beautiful thing about the way iTunes U is setup is that it relies upon us, as admins, to verify our users using our own methods for doing so. All we do, at our respective sites, is tell Apple that we've verified a user request and that we'd like to associate a certain level of access with that request. Apple assumes we've vetted the user if we pass along a valid time stamp/shared secret (after all, only an admin and Apple know the shared secret).
    I think what you're looking for is a way to take a faculty request for access to iTunes U, verify that the request does indeed come a faculty member, and give that faculty member access to iTunes U as an editor of content. This is normally the role of what Apple calls a "transfer CGI script" that you compose. The admin guide shows a typical transfer CGI, written in Java, that issues an "admin" credential for iTunes U. That script can be modified to give other kinds of access. If Java is not your forte, Apple provides other code sample (C, Python, Perl, shell script) that work similarly. Alternatively, there are a handful of Blackboard plugins that associate Blackboard access with a specific iTunes U credential. I am not a Blackboard guy, so I'll have to defer to others on that.

  • Windows 8 Sysprep - Can't skip local account creation and autologon fails, wrong admin password.

    Using Windows 8 x64 Enterprise, Sysprep pauses to ask me to create a local user, which I don't want.
    If I enable SkipSystemOOBE and SkipUserOOBE in OOBE under Microsoft-Windows-Shell-Setup sysprep (in oobe mode) will skip user creation and autologon works.  But it only works correctly once.  If I run sysprep again, when it tries to autologon
    it will say that I have the wrong password for the local account.  After I type in the password manually it works.  If I use the same password for the local administrator account as for the autologon account, it looks to have the encrypted password
    twice with an equal sign after it.
    What I need to know:
    How to skip local user account creation (we run on a domain but I have it connect through scripts later)
    How to fix the autologon issue
    Do I need the local administrator account enabled for this to work?
    I have my unattend.xml file attached.
    <?xml version="1.0" encoding="utf-8"?>
    <unattend xmlns="urn:schemas-microsoft-com:unattend">
    <settings pass="oobeSystem">
    <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <AutoLogon>
    <Password>
    <Value>[removed]</Value>
    <PlainText>false</PlainText>
    </Password>
    <Username>[removed]</Username>
    <LogonCount>2</LogonCount>
    <Enabled>true</Enabled>
    </AutoLogon>
    <FirstLogonCommands>
    <SynchronousCommand wcm:action="add">
    <Order>1</Order>
    <CommandLine>c:\folder\abatchfile.bat</CommandLine>
    <RequiresUserInput>false</RequiresUserInput>
    </SynchronousCommand>
    </FirstLogonCommands>
    <OOBE>
    <HideEULAPage>true</HideEULAPage>
    <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
    <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
    <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
    <NetworkLocation>Work</NetworkLocation>
    <HideLocalAccountScreen>true</HideLocalAccountScreen>
    <ProtectYourPC>3</ProtectYourPC>
    </OOBE>
    <TimeZone>Eastern Standard Time</TimeZone>
    <DisableAutoDaylightTimeSet>false</DisableAutoDaylightTimeSet>
    <RegisteredOrganization>Company Name</RegisteredOrganization>
    <RegisteredOwner>CompanyName</RegisteredOwner>
    </component>
    <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <UserLocale>en-US</UserLocale>
    <UILanguage>en-US</UILanguage>
    <SystemLocale>en-US</SystemLocale>
    <InputLocale>en-US</InputLocale>
    </component>
    </settings>
    <settings pass="specialize">
    <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <ComputerName>*</ComputerName>
    </component>
    </settings>
    <cpi:offlineImage cpi:source="wim:[removed]/sources/install.wim#Windows 8 Enterprise" xmlns:cpi="urn:schemas-microsoft-com:cpi" />
    </unattend>

    The user accounts-creation page in Windows Welcome is suppressed if a user or a group is added to a local security group. Add a user or a group to a local security group by doing one of the following:
    Create a local user.
    Add a domain user to a local security group with the Microsoft-Windows-Shell-Setup | UserAccounts unattended installation setting.
    To suppress the user accounts-creation page in Windows Welcome, without creating a local user, use one of the following workarounds:
    Workaround 1
    If the computer is already joined to a domain, use the following XML example to add the Domain Users security group to the Local Users security group.
    <DomainAccounts>
     <DomainAccountList wcm:action="add">
      <DomainAccount wcm:action="add">
      <Group>Users</Group>
      <Name>Domain Users</Name>
      </DomainAccount>
      <Domain>FabrikamDomain</Domain>
      </DomainAccountList>
    </DomainAccounts>
    Because joining a domain automatically adds the Domain Users security group to the Local Users security group, the DomainAccounts command does not affect the membership of the Local Users group. However, using this XML example to join a domain will also suppress
    the user accounts-creation page in Windows Welcome.
    Workaround 2
    Use the Sysprep/Quit command to set the following registry value to 1:
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\OOBE\UnattendCreatedUser
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ”

  • Mobile Account Creation and old topic

    http://discussions.apple.com/thread.jspa?threadID=1786733&tstart=1 -- This was never successfully answered and has been archived and marked as so?
    The problem it turns out, is that Leopard doesn't seemingly like the AD user's home folder location. I've verified this still as an issue today, on 10.5.7. I tried to create a mobile account for a user on a new laptop i got -- it would prompt me for the password three times, saying it's incorrect each time before the account creation is canceled.
    If in Server 03 AD tools you first switch that user's "Home Directory" to local (or a mac server), this issue will not persist. On the AD Binding/Directory utility un-check "Require Confirmation" before creating a mobile account.
    Then you should be able to log out and login as the user (may have to first delete the user's local directory if one has been created under "Users"), so long as the Home folder is set in AD to a location that is seemingly 'agreeable' with the mac os.
    Message was edited by: Oh4Sh0

    The usual approach with Open Directory is to either use Workgroup Manager to define a managed login preference for a computer group to define that those member computers should cause the use of mobile accounts on those computers, or to do the same thing via Profile Manager.
    Note: If you are using Mavericks you must use Profile Manager as it does not support this via Workgroup Manager managed preferences.
    This will not require users to need admin authorisation.

  • Flat File Active Sync doesn't work for account creation without unique id

    Hi,
    I'm trying to set up a FlatFileActiveSync for creation and update of accounts in IDM 7.0. I've followed the below steps for this purpose :-
    1) Create a correlation rule (confirmation rule not reqd in my case).
    2) Create a proxy admin and assign him a empty form. Also give him control over Top organisation.
    3) Create a Flat-File Resource Adapter.
    4) Create ActiveSync input form using the (Active Sync) wizard.
    5) Start Active Sync...
    My feed file contains only 3 fields firstname, lastname, email Id.
    My correlation rule has the logic of matching up with IDM accounts(Lighthouse accountId) by taking first letter of firstname and concat with lastname from the data coming from feed file.
    Now everything works fine for account updates i.e. if I change somebody's email Id who already exists in IDM I can actually see the changed email Id in Configurator's console.
    But if I put in a record that doesn't exist, and which I expect to be created, it gives me an error.
    Although, if I introduce a unique identifier in my feed file and link it with Lighthouse.accountId the account creation works fine.
    Is this a limitation or I'm not doing something right ?
    Exception I saw in resource log with log level 4 :
    2007-04-30T10:02:12.291-0400: Error Processing Line: {lastname=Pogu, firstname=Gogu, [email protected]}
    com.waveset.adapter.iapi.IAPIException: There was a conflict with the record [{lastname=Pogu, firstname=Gogu, [email protected]}]
    and no resolution process has been specified on the adapter.
    It is recommended that you define the process for handling unmatched accounts
    on this load process.
    2007-04-30T10:02:12.292-0400: Poll complete.
    2007-04-30T10:02:12.292-0400: SARunner: loop 1076
    2007-04-30T10:02:12.314-0400: Started, paused until Mon Apr 30 10:07:12 EDT 2007
    2007-04-30T10:07:12.024-0400: Pause completed
    2007-04-30T10:07:12.038-0400: Polling
    2007-04-30T10:07:12.056-0400: Error Processing Line: {lastname=Poker, firstname=Hoker, [email protected]}
    com.waveset.adapter.iapi.IAPIException: There was a conflict with the record [{lastname=Poker, firstname=Hoker, [email protected]}]
    and no resolution process has been specified on the adapter.
    It is recommended that you define the process for handling unmatched accounts
    on this load process.

    That logic is in my correlation rule as I specified in my initial post and here's the XPRESS code for it :-
    <?xml version='1.0' encoding='UTF-8'?>
    <!DOCTYPE Rule PUBLIC 'waveset.dtd' 'waveset.dtd'>
    <!-- MemberObjectGroups="#ID#Top" description="Find out if a resource account is correlated to an IDM account" id="#ID#D23CC16ECF6E5D42:-4527465C:11224925657:-769F" lastMod="61" lastModifier="Configurator" name="HR_DB_CORR" subtype="SUBTYPE_ACCOUNT_CORRELATION_RULE"-->
    <Rule subtype='SUBTYPE_ACCOUNT_CORRELATION_RULE' id='#ID#D23CC16ECF6E5D42:-4527465C:11224925657:-769F' name='HR_DB_CORR' creator='Configurator' createDate='1177449448746' lastModifier='Configurator' lastModDate='1177686884156' lastMod='61'>
    <Description>Find out if a resource account is correlated to an IDM account</Description>
    <cond>
    <and>
    <notnull>
    <ref>firstname</ref>
    </notnull>
    <notnull>
    <ref>lastname</ref>
    </notnull>
    </and>
    <block>
    <concat>
    <substr>
    <ref>firstname</ref>
    <i>0</i>
    <i>1</i>
    </substr>
    <ref>lastname</ref>
    </concat>
    </block>
    <s>false</s>
    </cond>
    <MemberObjectGroups>
    <ObjectRef type='ObjectGroup' id='#ID#Top' name='Top'/>
    </MemberObjectGroups>
    </Rule>
    Although this is not specified in Active Sync input form but in the correlation rule attribute of Active Sync config (using the wizard). Do I need to specify it there using the Field function.
    Also, I figured out today that I needed to restart IDM instance after changing the value of "Create Unmatched Accounts" flag and now the error is as below :-
    <WavesetResult>
    <ResultItem type='error' status='error'>
    <ResultError throwable='com.waveset.util.WavesetException'>
    <Message id='SES_VIEW_CHECKIN_ERROR'>
    </Message>
    <StackTrace>com.waveset.util.WavesetException: Unable to checkin view. No account ID specified.&#xA;&#x9;at com.waveset.view.UserViewer.checkinView(UserViewer.java:1165)&#xA;&#x9;at com.waveset.object.ViewMaster.checkinView(ViewMaster.java:727)&#xA;&#x9;at com.waveset.sync.IAPIUserImpl.processCommand(IAPIUserImpl.java:526)&#xA;&#x9;at com.waveset.sync.IAPIUserImpl.submitCreate(IAPIUserImpl.java:195)&#xA;&#x9;at com.waveset.sync.IAPIUserImpl.submit(IAPIUserImpl.java:749)&#xA;&#x9;at com.waveset.adapter.FlatFileActiveSyncAdapter.processLine(FlatFileActiveSyncAdapter.java:404)&#xA;&#x9;at com.waveset.adapter.FlatFileActiveSyncAdapter.processFlatFile(FlatFileActiveSyncAdapter.java:350)&#xA;&#x9;at com.waveset.adapter.FlatFileActiveSyncAdapter.poll(FlatFileActiveSyncAdapter.java:307)&#xA;&#x9;at com.waveset.task.SARunner.doRealWork(SARunner.java:288)&#xA;&#x9;at com.waveset.task.Executor.execute(Executor.java:154)&#xA;&#x9;at com.waveset.task.TaskThread.run(TaskThread.java:132)&#xA;</StackTrace>
    </ResultError>
    </ResultItem>
    </WavesetResult>

  • Default values in Account creation page

    Hello.
    I'm new to CRM and this forum too.
    I need some guidance. I have to set default values in account creation page. For this, I thought to use DO_INIT_CONTEXT method. And, when I searched this forum, I see a lot of threads about BADI CRM_BP_UIU_DEFAULTS.
    Can someone explain if there is any difference if we implement that using DO_INIT_CONTEXT method?
    Thanks to all!

    Hello,
    Actually, some BADI are WebUI specific.
    BADI CRM_BP_UIU_DEFAULTS only gets trigerred in WebUI BP screens.
    DO_INIT_CONTEXT method will be triggered every time you open a window wich contains the view considered. So not only during BP creation.
    Chris Evans, This is the way to go to initialize some fields during BP creation : use of BADI CRM_BP_UIU_DEFAULTS.
    Hope this helps.
    Best regards,
    Sylvain AGUETTAZ

  • Automatic AD account creation when user gets created in OIM

    Dear All,
    Currently in my OIM version 9.1.0.2, AD account creation is request based. Manager has to raise a request to create an AD account for the user.
    Now we want to leave this process for AD account creation. Requirement is to create the AD account without any approval process.
    Or I can say create an AD account for the user as soon as user gets created in OIM.
    Please suggest.
    Manohar

    Hi GP,
    I am able to follow the steps mentioned for creating membership rule and access policy.
    Account get created whenever used is added to new group 'createadaccountautomatically'.
    However a small trouble here.
    Initially resource status goes to ready. I need to select Misallocation attribute in the request form manually. This might be happening because in present request based approval Manager provides the is_location.
    How should I overcome this limitation? I mean what change to make so that is_location gets changed automatically.
    Please suggest on this.
    Manohar

  • Send Email on User Account Creation in OIM 11g

    Hi All,
    We are working on email notifications for the user account creation. we followed the following procedure:
    1) Creation of email template
    2) Creation of resource object
    3) Creation of notification process
    4) Create Customer Rule
    5) Create Customers Role and Assign Rule
    6) Create Access Policy.
    After assigning AD account to the user we are getting following errors..
    1> Class/Method: tcEmailNotificationUtil/parseEmail encounter some problems: Data Access Error
    Supplemental Detail com.thortech.xl.dataaccess.tcDataSetException: Data Access Error
    at com.thortech.xl.dataaccess.tcDataSet.executeQuery(tcDataSet.java:952)
    at com.thortech.xl.dataobj.tcDataSet.executeQuery(tcDataSet.java:1523)
    at com.thortech.xl.dataaccess.tcDataSet.executeQuery(tcDataSet.java:903)
    at com.thortech.xl.dataobj.tcDataSet.executeQuery(tcDataSet.java:1490)
    at com.thortech.xl.dataobj.util.tcEmailNotificationUtil.parseEmail(tcEmailNotificationUtil.java:1213)
    at com.thortech.xl.dataobj.util.tcEmailNotificationUtil.constructEmail(tcEmailNotificationUtil.java:235)
    at com.thortech.xl.dataobj.util.tcEmailNotificationUtil.constructEmail(tcEmailNotificationUtil.java:269)
    at com.thortech.xl.dataobj.tcScheduleItem.checkForEmailNotification(tcScheduleItem.java:3765)
    2> *Class/Method: tcEmailNotificationUtil/sendEmail encounter some problems: [EOF]*
    Supplemental Detail javax.mail.MessagingException: [EOF]
    at com.sun.mail.smtp.SMTPTransport.issueCommand(SMTPTransport.java:1481)
    at com.sun.mail.smtp.SMTPTransport.issueSendCommand(SMTPTransport.java:1512)
    at com.sun.mail.smtp.SMTPTransport.mailFrom(SMTPTransport.java:1054)
    at com.sun.mail.smtp.SMTPTransport.sendMessage(SMTPTransport.java:634)
    at javax.mail.Transport.send0(Transport.java:189)
    at javax.mail.Transport.send(Transport.java:118)
    at com.thortech.xl.dataobj.util.tcEmailNotificationUtil.sendEmail(tcEmailNotificationUtil.java:850)
    at com.thortech.xl.dataobj.tcScheduleItem.checkForEmailNotification(tcScheduleItem.java:3782)
    at com.thortech.xl.dataobj.tcScheduleItem.eventPostUpdate(tcScheduleItem.java:741)
    3) And I am also getting error related to FAX like..
    select Fax from orc orc, usr usr where usr.usr_key=orc.usr_key and orc.orc_key =293
    Supplemental Detail java.sql.SQLSyntaxErrorException: ORA-00904: "FAX": invalid identifier
    at oracle.jdbc.driver.SQLStateMapping.newSQLException(SQLStateMapping.java:95)
    at oracle.jdbc.driver.DatabaseError.newSQLException(DatabaseError.java:135)
    at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:210)
    at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:473)
    at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:423)
    at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:1095)
    at oracle.jdbc.driver.T4CStatement.doOall8(T4CStatement.java:193)
    at oracle.jdbc.driver.T4CStatement.executeForDescribe(T4CStatement.java:856)
    4) Class/Method: tcDataBase/readPartialStatement encounter some problems: ORA-00904: "FAX": invalid identifier
    Supplemental Detail java.sql.SQLSyntaxErrorException: ORA-00904: "FAX": invalid identifier
    at oracle.jdbc.driver.SQLStateMapping.newSQLException(SQLStateMapping.java:95)
    at oracle.jdbc.driver.DatabaseError.newSQLException(DatabaseError.java:135)
    at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:210)
    at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:473)
    at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:423)
    at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:1095)
    at oracle.jdbc.driver.T4CStatement.doOall8(T4CStatement.java:193)
    Plaese provide quick resolution to our issue..
    It will be very helpful to us.
    Thanks

    Thanks alot.I have configured this requirement.
    Regards
    A Abhinay

  • Macbook bound to AD won't allow network login or new local account creation

    As the title states I am having an issue related to a macbook pro that is bound to active directory. The only option we tweak when binding the macs to AD is that we opt to "create mobile account" option under directory utility.
    It also seems that while we can login through the local admin account, new local accounts cannot be created (the account creation window hangs when you create account).
    Any help would be appreciated

    Hi
    To successfully bind a mac workstation to Active Directory certain things need to be in place:
    DNS has to be fully resolving on both pointers. This is done on the PDC or whatever server is the designated DNS Server.
    Date and Time settings need to be adjusted to reflect whatever is designated as the NTP Server in the AD environment. Adjust the Date & Time Preferences Pane and find out from the Windows Network Administrator what the NTP Server IP address is.
    You must use account credentials that has authority for the AD Domain. If you're trying to use your own account it may be restricted in what it can do? A domain account has special privileges not usually accorded to ordinary user accounts.
    This assumes you're (a) not the Active Directory Network Administrator and (b) you're using the Active Directory plug-in the login options section of the Accounts Preferences Pane. It's a good idea to click the "Open Directory Utility" button when binding to Active Directory. It's also a good idea to access the Advanced Section once the Utility has opened.
    If this is failing at the bind stage then perhaps you should review the details you've been given when binding to AD? It may be worthwhile to clear the workstation from the Computer OU before you try again?
    The above is not an exhaustive list but should help?
    Tony

  • Defaulting Language in Address of Account Creation Page by Configuration

    Hi,
    We have a requirement where in we need to Default the Language field to EN in the Address Details of the BP in the Account Creation Page.
    Technically, this can be achieved either by implementing the BADI or SET method of the attributes.
    Can anyone please let us know, if this can be achieved by any Configuration step rather than drilling down till the technical level.
    Thanks in Advance!
    Regards
    Veena Nadipalli

    Veena,
    This is not a standard possibility in configuration.
    What you could do is indeed enhance the view to[ retrieve the default values and set them|http://blog.acorel.nl/2010/09/adding-default-values-to-search-screen.html].
    If you want to differ the value for instance based on the business role, you can use the [parameters |http://blog.acorel.nl/2011/06/usage-of-custom-businessrole-parameters.html] that can be added to the businessrole.
    Hope this helps.
    Regards,
    Pieter Rijlaarsdam

  • Delegated Administrator Force UID to Email local Part on account creation

    I would like to force the login id on account creation to be the same as the email local part.
    So essentially mail local_part = uid.
    I think I can make the field non editable by editing the JSP and xml templates or Security.properties however I don't see a way to change the default value that is presented to the user for the login_id.
    If I could grab the previously entered email value from the session (using JSP) I could hack it in with JS. However the DAprinciple won't let me dump the session so I can see the attribute names.
    Am I going about this the wrong way?
    Edited by: sigilik on Feb 20, 2009 4:54 PM

    sigilik wrote:
    For the most part the system is going to be email only, I could go through and set all the appropriate settings on all the comms components to use the mail attribute as the auth lookup, but from a management perspective I think it would make much more sense to have user@domain actually be [email protected] a user to log in with their mail: attribute value is much more flexible. Restricting the uid to be the same as the mail: attribute prevents you from easily changing the mail address (e.g. the user changes their name when they get married) without also having to change the uid (which is a long-tedious process to be avoided if possible).
    If uid = local_part I don't have to deal with any of that.This is true. That being said I couldn't see any easy way to enforce this requirement using Delegated Administrator.
    I mean considering that traditionally a uid on a unix system has always mapped that user to that system's domain wouldn't this make sense? Or am I missing something....Mapping the uid <=> email address made sense when the user logged into the mail-server to access their email. It was easy to remember (and route) the email address login-uid@unix-host.
    Given that this is no requirement for the uid to be related to the mail address, nor the mail-server hostname to the domain of the user for that matter, why continue to enforce it?
    Regards,
    Shane.

  • Guest account creation in ISE

    Hello All,
    I am encountering an issue in which I find only when guest accounts are created by sponsor through the sponsor portal, guess access is granted. If I manually add guest account in the same guest role via the administrative UI, instead of guest access authz profile is hit, ISE goes through supplicant provisioning flow. I know that I do have enable self provisioning flow but why would it kick in for guest user created by admin? I see many bugs dealing with guest portal flows but failed in finding one exactly matching to my senario. Any insight is greatly appreciated. version 1.2.
    Fadi

    You can create and manage guest user accounts  to provide temporary network access for guests. If you have numerous  guest user accounts whose account information is stored in an external  database, you can import this information to expedite the account  creation process.
    Please Check the below guide for user’s creations:
    http://www.cisco.com/en/US/docs/security/ise/1.1/sponsor_guide/ise_sponsor_chp2.html

  • Automated Glossary Creation

    Currently re-designing our publishing workflow from custom legacy FrameMaker system to InDesign.
    Trying to work out best method of handling automated glossary creation. Currently using mark-up tags in Frame to create a numerical tag for reference to a Glossary term which can then be searched within Frame through a script and each term selected in a book/document to be defined. These terms are defined within a database and then can be searched within the data-base with reference to a specific document while also keeping the data-base current with all such defined terms.
    Any similar type of tagging available in InDesign where a custom tag can be created with a numerical reference (or something similar)?
    Have a load of other questions and would appreciate an Adobe publishing workflow consultant contact if such is available.
    Thanks.
    Jason

    Here is a (horrible!) Javascript to add a tag to any selected text and automatically prompt for an attribute value. You need to add a basic XML framework around your text first, else it will Not Run. (Select a text frame, call up the Tags panel, and then select "Autotag" from the dropdown menu for a basic structure.)
    In this script you might want to adjust the name of the XML tag (the first "tag" in the double 'add' line) and the attribute name ("id" in the second part of the 'add' line).
    In this form, the script does not allow you to re-define a previously tagged item (use the Structure panel for that) or to remove a tag (use Untag in the Tags panel). Running it twice on a selected text will add a new nested tag! (But as always, anything is possible with a longer/smarter/less horrible script.)
    if (app.selection.length==1 && app.selection[0].hasOwnProperty("baseline") && app.selection[0].length)
    tagId = prompt ("Tag with ID:", '');
    if (tagId)
      app.selection[0].associatedXMLElements[0].xmlElements.add("tag", app.selection[0]).xmlAttributes.add("id", tagId);

Maybe you are looking for

  • Whats the best ssd drive to get for a macbook pro mid 2012 model

    Hi i am thinking of upgrading my 500 GB HDD drive on my macbook pro to either a 256 GB SSD or a 500 GB SSD i really need some advice on which SSD should i buy . would anyone be able to advice which one is the best i was looking at a samsung 840 serie

  • Flash video players on separate webpages

    I tried desperately to upload multiple videos with quicktime player,  then I decided to return to the tried and true flv. format and purchased a flv. an xml video player component.  Everything works fine and I uploaded it to my webpage index.3  It wo

  • Multiple source file for applet??

    When I first started writing my applet I only had one scourecode file so I wouldn't get any file finding problems... but now my file is gething to lagre ~1700 lines so I now I wanto stripe it down to sevral file and so I did... I have the files in a

  • Change default document

    Is there a way to change the template that opens when you open logic? I've created my own template but I hate having to open logic and then opening my template rather then just having the default be the template I've created. does that make sense?

  • Patch set for oracle-8.1.5

    Hi, Does anyone know where can i get patches for bug:883333 ==> import error where schema contains synonym. FYI, I'm currently using Oracle8.1.5 on AIX4.3.3. I'm already report this problem to Metalink but they still not upload the patches. TQ