BAPI to get password policies in ABAP environement

Hi all,
I am new to the SAP ABAP environement. (worked to some extent on JAVA stack).
I am working on the RFCSDK using C language.
I wanted to know how to see the password policies in ABAP environment.
I went through the link
http://help.sap.com/saphelp_nw04s/helpdata/en/22/41c43ac23cef2fe10000000a114084/content.htm
Now my question are as follows:
a)Which transaction should i use to see this values
b)Is there a BAPI provided to access this values. (using C language)
Best Regards
Manoj

this is not an abap question, but a basis question.
password settings are maintained with system profile parameters.
go to transaction RZ11 and search for passw parameters.
I found a FM by searching for profilepar*
in the code it uses
CALL 'C_SAPGPARAM'
     ID 'NAME' FIELD 'auth/object_disabling_active'
     ID 'VALUE' FIELD RET.
I think this one checks the parameters
regards, Rob,

Similar Messages

Function Module or BAPI to get inventory turnover in abap

Hello,
is there a possibility to get the information of inventory turnover of an material with help of a function module oder BAPI?
Like the transaction MC44. But I need it in an ABAP-Report. A simple calculation is easy, but not an exact calculation of the inventory turnover (Umschlagshäufikeit).

Hi,
http://hoopsdoc.hillyard.com/images/inventory%20management/MC44.htm
http://www.erpgenie.com/sap-technical/abap/bapi-step-by-step-example
Hope these links may help you.
Thanks.

Active directory Schema - Multiple password policies

Hi All,
I am new to AD and would need some suggestion to configure AD. I want to set up AD(2008 R2) for three categories of users: individual, dealers and organisations. Each dealer and each organisation will have further sub-categories based
on their location. I want to set up separate password policies for the above three categories using AD. I wanted to create them as separate OUs. So I would have multiple OUs for each dealer per location (e.g. individual, dealer1loc1, dealer1loc2,
dealer2loc3 and so on)
I know the concept of PSO(Password Settings Object) and that it can only be applied to OU using shadow groups and batch file (to copy users from OU to Shadow Groups). The issue is that the OUs would keep getting added as per requirement (would
be creating new OUs using C#) and then the management of PSO or shadow groups or batch file would be very complicated, not sure if it can be automated.
Also, I have budet constraints to add new servers for each domain and separate password policies.
What could be the possible solution to separate password policies and set up this user structure in Active Directory. I am using W2k8 R2.
Thanks.

Thanks Mahdi. In this case, the OUs would get created at run time, so the script needs to get updated at run time as well. I guess this will be not easy to automate.
Also, can you confirm if I can set up separate password policies by creating sub domain(e.g. example.com will be divided into sales.example.com and admin.example.com and this would further be divided as melourne.sales.example.com and sydney.sales.example.com)
and I can set separate password policies for sales.example.com and admin.example.com.
By adding child domains,it is like you are killing a mosquito with a rocket launcher, if you know what I mean. adding child domains increase the cost and administration and also adds complexity to your environment.
From technical perspective it is OK to have child domains, but if I were you I would not add that much complexity to my environment because of a script. I would spend enough time or get help form a skilled script writer to edit the script. Also I am saying
that editing your script to a fully automated script is not impossible, it just needs enough time and skills.
Mahdi Tehrani |
|
www.mahditehrani.ir
Please click on Propose As Answer or to mark this post as
and helpful for other people.
This posting is provided AS-IS with no warranties, and confers no rights.
How to query members of 'Local Administrators' group in all computers?

WebEx Connect Password reset - in SSO environment

Hi,
Anybody knows how to recover from a lost password in a SSO environment?
Either SSO not working, or having lost static admin user.
When trying the standard password recovery link, got error message:
Your password is same as your enterprise Single Sign-On password. Please contact your administrator to reset your single sign-on password.

Then I get forwarded to AOL again. On that website, it seems that I could change the password, and it seems to work. However, when I try to use that password in the WebEx Connect client after that, it still doesn't work.

Cannot update Global Password Policies, no SSL bind, etc

Hello Community--
This is day 3 of the Apple Server Hostage Crisis, and it looks like I'll started clean slate build #5.
By way of background, I had a functioning ML/2.2.2 server that had RAID problems (and still does). Attempting to rebuild array failed and I lost the boot hard drives. I have access to dumpall.psql and all the user data (on an external drive). I attempted a couple of times to build a clean Mavericks/3.0 server but I couldn't figure out how to get the service data back. So I build a clean ML/2.2.2 system, got the wiki/calendar/contacts, etc data back in place to include establishment of an OD master using an archive. Turns out the archive was from one of my Mavericks/3.0 attempts, and while it seemed to create the OD okay, every time I tried to edit the global password policy, Server.app crashed. I decided to try to move up to Mavericks/3.0. Server.app no longer crashed but still cannot change global password policies. I get the following error:
servermgrd[]: servermgr_dirserv: +[PWPolicy setGlobalPolicyFromDict] error: policy data modification failed: Object class violation: attribute 'apple-user-passwordpolicy' not allowed ()
I deleted the OD master a couple of times and recreated it from a new archive. On the second iteration, my PositiveSSL cert was deleted....
Q1: Has anyone seen this password policy error and know how to solve it?
Additionally, although I have (had) the cert from PositiveSSL for my domain, the OD with Server 3 will not use it, instead reverting to a self-signed cert. All other services seem to work with the PositiveSSL cert. I've seen discussions in the community on this but have not found a solution.
Q2: Is this related to why I cannot create a secure binding?
I have not even gotten to the point of trying to set up Profile Manager to manage users and devices. I have not read anywhere that I *need* to have Profile Manger started to get a basic system running. From a Mavericks-based client where I've logged in with a local user, I can su <OD User> and log in, but the automount of the user's home directory fails due to an authentication issue.
Q3: In Mavericks, does a device have to be enrolled/configured in Profile Manager in order to bind and be usable?
Well, I'm off to start my next rebuild, but would still appreciate comments and suggestions as I suspect this hostage crisis is not over yet.
Thanks.
Tim

Rebuilt from scratch and reloaded databases for services and the OD archive. But something was still jacked and passwords wouldn't take. I was starting to suspect it was OD again, but then I decided to completely wipe the device_management database, which I did following these steps: http://support.apple.com/kb/ht5349.
That may have gotten me on track, which is good because I was getting ready to recreate each user account. I'll continue the effort tomorrow (day 4).
I have not decided if I will try again for Mavericks/Server 3. Sigh....
Tim

Password policies in ODSEE 11.1.1.7.2

Hi,
we're running ODSEE 11.1.1.7.1 on our masters and most of our replicas, all in DS5-compatible-mode.
I've a job running on the masters to export LDIF data to be able to setup easily new environments for test purposes.
Inside our DIT we've setup special password policies for all users, ignoring the default policies completely.
I now setup a new instance on another host and try to import complete DIT via dsconf import and got for every entry with passwordPolicySubentry-Attribute an error
[11/Mar/2015:11:40:56 +0100] - INFORMATION - Config - conn=-1 op=-1 msgId=-1 - (Password Policy: get policy object from entry) Entry "<dn of policy>" not found (51). Reverting to default policy entry "cn=password policy,cn=config".
I figured out, that our internal policies are not imported due to attributes from both objectclasses (sunPwdPolicy & pwdPolicy). I deleted manually the password*-Attributers and got them imported in the correct place in the DIT.
Afterwards I tried to do dsconf import -K with all user entries with the relevant passwordPolicySubentry-Attribute and I got the same errors as written above again.
I managed to import the data with ldapadd successful with the correct passwordPolicySubentry, but why not with the dsconf import???
Thanks for your hints to find the problem!
Regards,
Roland

Hello,
You mean the password policy entries are not returned by a search ?
Password policies stored in the data are stored as ldap sub entry. To get ldap sub entries, you must explicitely ask for it in the search filter, eg. (objectclass=LDAPsubentry)
-Sylvain
Please mark this response as correct or helpful when appropriate to make it easier for others to find it

Invoking password policies within a RequestValidator

Hello gurus. I am looking for an API, or whatever, to match a user-supplied password against a password policy created via Design Console.
My goal is to implement a password-consistency check at request level, so that a user is immediately notified if the supplied password does not meet the minimum security criteria for the target resource.
This is my reference scenario:
- a user creates a self-provision request for a target resource
- the users fills the Request Dataset form in and submits the request. One of the Dataset fields contains the password for the account which will be created.
- the supplied password is checked against resource's password policies
- if the check is successful, the request is created an filed in for approval
- otherwise, the user gets a "INVALID PASSWORD" pop-up error message and can make his/her correction immediately
OIM implements password policies at process form level, i.e. after the request is submitted and approved, which is too late. What I'd love to do is to leverage that existing code by invoking OIM's password policies at request level, within a RequestValidator plugin. Is that possibile? What class/method would I have to call to verify a password against an existing policy?
Thanks in advance,
Patri

Well, good news and bad news.
Good News
I was able to implement a RequestDataValidator that performed password validation at the object/account level using the tcPasswordUtilities.checkProcessPasswordUserID method.
Bad News
Our password policies all have history rules (i.e can't be one of last x passwords). In addition to validating the object/account password, the tcPasswordUtilities.checkProcessPasswordUserID also updates the password history table (PWH) with the validated password. Since we're doing this validation as part of the request process (RequestDataValidator), the new password will already be in the history table when the actual process form update is performed. Since the process form update will also validate the password, it will always fail because the password is already in the history table because of our request validator's check!
Back to the drawing board...

Outlook 2010 users getting Password Prompt until shared mailboxes are removed

Hi,
some (around 20) of my 3000 outlook 2010 users are getting Password Promts while using outlook.
This started end of last week without any change to the environment.
The prompt goes away if we unmount and remount additional mailboxes they have mounted.
Any idea what could be causing this or where to start debugging?
Backend is Exchange 2013 and 2007 in migration.
Thanks for every idea

Hi,
How did you mount additional mailboxes? Via File > Account Settings > Account Settings > Double-click the Exchange account > More Settings > Advanced tab > Add?
Are the additional mailboxes hosted on the same version of Exchange server with thoese mailboxes with the password prompting issue? If this is the case, this issue often happens if you have a hybrid deployment of Exchange Server. To resolve the issue,
please have a look at the following KB article and follow the instructions to fix it:
https://support.microsoft.com/kb/2834139?wa=wsignin1.0
Please let me know the result.
Reagrds,
Steve Fan
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.

Please tell me a BAPI to get Closing balance of customer account based on Sales Organization?

Hi Experts,
A requirement has come up where I want to get Customer closing balance based on its sales organization as this particular customer is extented to 2 different sales organizations. I want to get the closing balance of individual sales organization vise.
Please tell me a BAPI to get Closing balance of customer account based on Sales Organization?

AFAIK there is no such BAPI, cause there is no database table with balance for customer per sales organisation. (No KNCx table for VKORG)
First ask functionals (*) how to recover sales organisation from a FI document (I suppose for SD invoice it is easy if no merging between organisation) will be a little tricker for pure FI document like payment transactions (hope thet are quickly cleared...) Then start from non cleared records of BSID (also BSAD if you use a past date of reference, in case you have to add the records of BSAD with clearing date greater than reference date) and cross it with SD information to break FI into sales organisation.
Regards,
Raymond
(*) Ask for where do they store VKORG in FI documents

Is there any FM or BAPI to get list of all sales orders

Hello all,
I have the requirement like below.
Is there any FM if i Pass Drawing document no, type,part,revision level which gives
the output list as.
1) all sales orders, where the above drawing document no is attached to the materials
and these materials are used as one of the lower level components in the Sales order BOM,
I need to show all those sales orders along with SO number,item,Material,Plant and BOM Item no,
2)all sales orders, where the above drawing document no is attached to the materials
and the same material is one of the item in sales order.
3)all sales orders, where the above drawing document no is used as one of the component in Sales order BOm's
Addition of 1,2,3 will be the o/p.
are there any FM or BAPI to get the above list.
Basically the above report is concatenation of report outputs of t-code CSD5 and CS15.
Awaiting reply.
Thanks.

Hi venkatesh,
You can use the BAPI
BAPISDORDER_GETDETAILEDLIST
to get list of all sales orders.
Here is a lik which provides you BAPI'S regarding everything.
[http://www.saptechies.com/sap-bapi-list/]
Hope this will help you.
Regards,
Pavan.

A Function or BAPI to get Material Standard Price?

Hi All,
I need a Function or BAPI to get the Material Standard Price when the following Criteria is given;
1. Material Code
2. Plant
3. Period
4. Year
5. Company Currency (Optional)
I need only the Standard Price and Price Unit. Please give me a example with sample values.
Thanks,
Kishan

Sri:
I need only the Standard Price and Price Unit
there is no specific FM for that.
you need to write small select query in FM than use this custom FM into your program.
Amit.

"Can not get password" Can't send or receive messages all of a sudden.

Out of the blue my Thunderbird client will no longer send or receive messages.
Here's the error message I get: "Sending of message failed.
An error occurred sending mail: Could not get password for [our server name]. The message was not sent."
The only thing I can come up with that may have caused it would be that I restarted my computer due to a completely unrelated issue (Illustrator kept crashing). Shortly after that, this issue began. I'd really to resolve this without uninstalling thunderbird, I use thunderbird heavily for my job and thus everything is set up, filed, and organized the way I need it.
I've tried restarting thunderbird, restarting my computer (Mac, OSX Yosemite if that matters) and none of these things are working.
Thunderbird has worked flawlessly for the past two years up until now. No updates were installed that I know of. My password is good, I'm able to type it in on our webmail client (atmail) and log in without issue.
Thanks in advance for any help!

Go to Preferences -> Security -> Passwords -> Saved Passwords... and remove the entries for the account. Restart TB. It should ask you for your new password.
If that doesn't fix it, we need to look at your settings.

Hi i want to create BAPI to get approver of the employee

hi i want to create BAPI to get approver of the employee
in this BAPI if there are two approver for that employee than i need both approver personal no.
please help me
thanks in advanced.

Hi
I doubt whether there is a direct Standard BAPI for that.
The below report will get you the employees approver org position. Even if there are two approvers are there, it will display both the approvers position.
*& Report ZGD_TEST_HR_ORG_STR
REPORT ZGD_TEST_HR_ORG_STR.
   DATA: plvar            LIKE hrsobid-plvar.
DATA: otype            LIKE hrsobid-otype.
DATA: sobid            LIKE hrsobid-sobid.
DATA: date             LIKE sy-datum.
DATA: leading_position LIKE hrobject OCCURS 1 WITH HEADER LINE.
DATA: org_agent        LIKE swhactor.
DATA: lv_sw_vapos      TYPE xflag,
        lv_subrc         TYPE sy-subrc.
DATA spfli_wa TYPE spfli.
DATA carrid_buffer TYPE spfli-carrid.
IF plvar IS INITIAL.
    CALL FUNCTION 'RH_GET_ACTIVE_WF_PLVAR'
      IMPORTING
        act_plvar       = plvar
      EXCEPTIONS
        no_active_plvar = 1.
    IF sy-subrc > 0.
      MESSAGE e300(5w) RAISING no_active_plvar.
    ENDIF.
ENDIF.
IF otype IS INITIAL OR sobid IS INITIAL.
      otype = 'US'.
      sobid = sy-uname.
ENDIF.
CALL FUNCTION 'RH_GET_LEADING_POSITION'
    EXPORTING
      plvar              = plvar
      otype              = otype
      sobid              = sobid
      date               = sy-datum
      auth               = ' '
      consider_vac_pos   = space
    TABLES
      leading_pos        = leading_position
    EXCEPTIONS
      no_lead_pos_found = 1
      OTHERS             = 2.
   IF sy-subrc > 0.
    MESSAGE e802(5w) WITH otype sobid
                     RAISING no_lead_pos_found.
ELSE.
    LOOP AT leading_position.
      write : / leading_position-otype,
                 leading_position-objid.
    ENDLOOP.
endif.
Hope it helps you

BPM Server is getting down frequently in dev environment.

Hi,
Please help me to resolve the problem that BPM Server getting down frequently in development environment. Daily 2-3 times it gets down. Generally it happens when we do any application deployment.
Thanks in advance.

What are your Memory settings? Do You Know the BPM Performance Tuning Guide?http://www.oracle.com/technetwork/middleware/bpm/learnmore/bpm11gperftuning-1912340.pdf
Danilo

BAPI To get GL Line items (Open Item Managed GL)

Hi,
I am looking for a BAPI to get GL open line items that usually I can download from FBL3N. This is required for Open Item managed GLs. The BAPI can be similar to that of BAPI_AP_ACC_GETOPENITEMS or BAPI_AR_ACC_GETOPENITEMS.
Thanks in advance for your response.
Best Regards,
Dusmanta

Hi Maple,
Try out with the following BAPI's:
BAPI_GL_ACC_GETDETAIL : G/L Account Details
BAPI_GL_ACC_GETLIST : List of G/L Account for each company code
Hope this will be helpful.
Regards,
A.Fahrudeen

BAPI to get password policies in ABAP environement

Similar Messages

Maybe you are looking for