Best way to disable a user from authing against ldap?

We have a need to be able to disable users in out ldap server (Sun-ONE-Directory/5.2_Patch_2 B2004.107.0034).
We are using msging and cal server together with Access manager and Comms express.
Setting the inetUserStatus to inactive stops users logging into the comms express etc but we are now having a few remote services that are authenticating against ldap by binding as the user. This works regardless so disabled users can login to certain things.
Whats the recommended way of temporarily disabling an account? We can't just change the password as we would need to restore it when the account it reenabled. Is there something easy to prevent the user binding? (something easy to undo again!).
Cheers,
Darren

I found that if I use JNDI to set nsaccountlock to true, it does disable the user from authorizing. However, it also makes the Custom Editor unable to re-activate that user. You can press the "Activate" button, and it will tell you the user has been activated, but if you check the nsaccountlock, it will still be set to true. However, one can still use Generic Editor to delete the nsaccount lock to re-activate the user.
In order for the Custom Editor to be able to reactivate the user, the user must be in the nsManagedDisabledRole. If you add the "cn=nsmanageddisabledrole,<larger context>" to the users nsroledn attribute, then the ldap automatically sets the nsaccountlock value to true.
And if you later delete the nsaccountlock value, the ldap will automatically remove the nsManagedDisabledRole from the user's nsRoleDn.
Tricky stuff,
Christa

Similar Messages

Best way to accept a date from a user

Hi Guys,
Whats the best way to get a date from a user and add it in an
insert record to access.
I have a form that adds a record and it works well enough as
long as the data added is in the correct format.
Untill now ive just had a text box with an explination to the
user on how to add the date and what format....
But Im fed up with having to change bad entrys and need to
place a control or something on the form but dont know whats
easiest and best?
Any ideas welcome.
Thanks

If you want today's date set the database up to insert the
date
automatically. If you want other dates than today's use a
date picker or
calendar to insert the date.
Dave
"Tag2007" <[email protected]> wrote in
message
news:epj87p$mar$[email protected]..
> Hi Guys,
>
> Whats the best way to get a date from a user and add it
in an insert
record to
> access.
>
> I have a form that adds a record and it works well
enough as long as the
data
> added is in the correct format.
>
> Untill now ive just had a text box with an explination
to the user on how
to
> add the date and what format....
>
> But Im fed up with having to change bad entrys and need
to place a
control or
> something on the form but dont know whats easiest and
best?
>
> Any ideas welcome.
> Thanks
>

Is there a way to disable the "user forward task" from workspace in ES2.

In ES2 "Assign Task" operation there is no taskACL options to uncheck the "Forward" option to disable the user from forwarding their tasks. I think this option is available in workspace start point, but my process is not invoked/triggered by workspace start point. So can any one help me with this?

At the top of the properties tab there is a toggle for basic/all. Switch to all and the "Task Access Control List (ACL)" will be available like the deprecated assign task.

Best Ways to Handle Multiple Users

First post....heres my question. Can anyone help me determine the best way to handle multiple users in itunes? Some Background:
My family shares one computer. We have on folder on the hard drive where we keep all our music files. I got an ipod and itunes and added some of the music to itunes and have pretty much used itunes for my music.
Now my girlfriend got an ipod and I am hoping to somehow keep her music away from mine so to speak. So that I can keep synching my ipod without adding a bunch of music I dont want.
Is there a way to handle this? So thankfull for any help!

There is an apple article on this here:
http://docs.info.apple.com/article.html?artnum=300432
It sounds as though method 1 would be best for you.
Also see how to keep the music files in one place to avoid duplication:
http://docs.info.apple.com/article.html?artnum=93195

What is the best way to transfer my date from my old iMac to my new iMac?

what is the best way to transfer my date from my old iMac to my new iMac? I don't have a time capsule, so I cannot use time machine.
thanks

Your best bet by far is to use Setup Assistant when the new Mac first starts up to transfer directly from the old one.
It's similar to Migration Assistant, but doing it that way will avoid having an extra user account.
Either way, you can connect them via FireWire, Thunderbolt, or your network, but avoid wireless if at all possible. You can connect both to your netwrork via Ethernet, or put a single cable between the two.
See Using Setup Assistant on Mountain Lion or Lion for details.

HT3847 How is the best way to separate copied MP3 from AIFF files in my library?

How is the best way to separate duplicate MP3 from AIFF files in my library?

Zice wrote:
I want higher resolution then afforded in the original download.
Then why are you converting iTunes purchases?
You cannot get higher resolution by converting the original. This goes for converting anything, not just iTunes purchases.
Creating an AIFF will simply make the file 10 time as large with zero increase in quality.
Don't really want to debate value of creating the new version.
Agreed.
You are simply wasting time and drive space converting iTunes purchases to AIFF.

I am moving from PC to Mac. My PC has two internal drives and I have a 3Tb external. What is best way to move the data from the internal drives to Mac and the best way to make the external drive read write without losing data

I am moving from PC to Mac. My PC has two internal drives and I have a 3Tb external. What is best way to move the data from the internal drives to Mac and the best way to make the external drive read write without losing data

Paragon even has non-destriuctive conversion utility if you do want to change drive.
Hard to imagine using 3TB that isn't NTFS. Mac uses GPT for default partition type as well as HFS+
www.paragon-software.com
Some general Apple Help www.apple.com/support/
Also,
Mac OS X Help
http://www.apple.com/support/macbasics/
Isolating Issues in Mac OS
http://support.apple.com/kb/TS1388
https://www.apple.com/support/osx/
https://www.apple.com/support/quickassist/
http://www.apple.com/support/mac101/help/
http://www.apple.com/support/mac101/tour/
Get Help with your Product
http://docs.info.apple.com/article.html?artnum=304725
Apple Mac App Store
https://discussions.apple.com/community/mac_app_store/using_mac_apple_store
How to Buy Mac OS X Mountain Lion/Lion
http://www.apple.com/osx/how-to-upgrade/
TimeMachine 101
https://support.apple.com/kb/HT1427
http://www.apple.com/support/timemachine
Mac OS X Community
https://discussions.apple.com/community/mac_os

Best Way to port the data from one DB to another DB using Biztalk

Hi,
please suggest best way to move the data from one db to another DB using biztalk.
Currently I am doing like that, for each transaction(getting from different source tables) through receive port, and do some mapping (some custom logic for data mapping), then insert to target normalized tables(multiple tables) and back to update the status
of transaction in source table in sourceDB. It is processing one by one.
How/best we we can do it using bulk transfer and update the status. Since it has more than 10000 transaction per call.
Thanks,
Vinoth

Hi Vinoth,
For SQL Bulk inserts you can always use SQL Bulk Load
adapter.
http://www.biztalkgurus.com/biztalk_server/biztalk_blogs/b/biztalksyn/archive/2005/10/23/processing-a-large-flat-file-message-with-biztalk-and-the-sqlbulkinsert-adapter.aspx
However, even though a SQL Bulk Load adapter can efficiently insert a large amount of data into SQL you are still stuck with the issues of transmitting the
MessageBox database and the memory issues of dealing with really large messages.
I would personally suggest you to use SSIS, as you have mentioned that records have to be processed in specific time of day as opposed to when the
records are available.
Please refer to this link to get more information about SSIS: http://msdn.microsoft.com/en-us/library/ms141026.aspx
If you have any more questions related to SSIS, please ask it in
SSIS
forum and you will get specific support.
Rachit

Is there a way to disable push mail from Yahoo? It's draining my battery

I'm on the prepaid plan and every 10-15 minutes my iphone turns on with a "The last transaction cost $0.00" message. I don't mind the message (although it is a bit annoying) but my problem is that this turns the LCD on for about 2 minutes at a time.
I charged my battery to 100% last night, haven't used it at all today and after just turning it on a few minutes ago I had the "Your battery life is at 10%" message followed by a 5% remaining message a few minutes later.
I've heard that it's the yahoo push mail service thats causing the phone to give the message (since it connects to the internet). My Yahoo account is my main one and I'd hate to have to login to yahoo's site each time to check it (the email functionality was a big selling point for me with the iphone). ATT/Apple don't seem to want to disable this message/"Feature", so I'm guessing I would need to step in and do something on my end.
Is there any way to disable yahoo mail from "pushing" messages to my phone? I can hit the Check Mail button if I have to.

Hi Everyone,
To give an update on the situation: I disabled the Yahoo account and it seems to make a VERY NOTICEABLE difference in battery life - prior to this my battery would drain quite rapidly but since disabling it it's only lost about 15-20% over the past 24 hours (and thats with using the video/music/internet functions for about an hour and a half).. Prior to this it would have been close to drained under the same circumstances.
Also, to confirm, the "Your last transaction cost 0.00" messages only appear when accessing the internet manually now. before they appeared every 10-15 minutes with no interaction from myself at all (while it was sitting idle, while watching videos, while charging, while in my pocket, etc..)
I do have it set to only check Manually but Yahoo would seem to check on it's own even though this setting is checked (I'm guessing it has to do with the Push setting). Aside from draining the battery, it was quite annoying having 30 or so "Your transaction cost $0.00" messages to click through whenever I turned on the phone.
I did have the screen set to shut off after 1 min, but the 'your transaction cost..' messages would first wake the iphone up, the screen would stay bright for about 30 seconds, dim for about 30 seconds, then turn on bright again for 1 minute until it shut off. I'm guessing the screen (being on for about 10-15 minutes per hour due to this) and the fact that yahoo accesses the internet on such a frequent basis are what cut the battery life down.
I really wish I could make Yahoo work more like Gmail and have it manually search for new mail

Got new macbook pro. What is the best way to transfer my itunes from my old pc to my new mac? I want to be able to plug my iphones and ipad in to new mac and have redo anything

Got new macbook pro. What is the best way to transfer my itunes from my old pc to my new mac? I want to be able to plug my iphones and ipad in to new mac and have redo anything

See Here... This should transfer everything...
Move iTunes Library from PC to MAC
http://www.macworld.com/article/146958/2010/03/move_itunes_windows_mac.html

Best way to transfer DVD videos from laptop to ipad air

Best way to transfer DVD videos from laptop to ipad air

presuming they're not copywriteed commercial dvd's, you can use a program like Handbrake to convert the dvd files to mp4's that you can then import into iTunes and sync to your device.
If they're copywritted commercial dvd's then you'd have to break the copywrite encoding to transcode the files and since that is illegal in the US no one here can help you with that.

I bought CS6 extended yesterday (yes i did). I have CS4 and lots of photo's in bridge (tagged with keywords). What is the best way to get my photos from bridge cs4 to cs6? Is there a guideline how to go about so I don't loose any of my photos/keywords? Wh

I bought CS6 extended yesterday (yes i did). I have CS4 and lots of photo's in bridge (tagged with keywords). What is the best way to get my photos from bridge cs4 to cs6? Is there a guideline how to go about: so I don't loose any of my photos/keywords? Who can help?

The Bridge General Discussion can give you the specifics of transferring your information over to Bridge CS6.

What is the best way to make a DVD from iMovie

What is the best way to make a DVD from iMovie?
I am using iMovie 06 (Naturally) with iDVD 08. I have always used;
iMovie 06, File > Share to iDVD 08. And got pretty good results.
Some say the best way is to quit iMovie 06, open iDVD and import the movie from the Media button.
I have tried both methods in the results look the same. I'm interested in getting the very best quality possible.

You likely have one of the most expensive media converter boxes on the market today.
But does it work well with most macs? (my guess is that it does). But more specifically can it "handshake" with an intel based mac? I personally haven't tried it.
But you may want to read this for yourself if you haven't already:
http://discussions.apple.com/thread.jspa?threadID=1179361&tstart=2362
Assuming it works then the best format is .dv which this unit will support apparently.

What is the best way to completely uninstall Aperture from a MacBook Pro?

What is the best way to completely uninstall Aperture from a MacBook Pro.
I just ordered a new MacBook Pro and I want to remove it from my older MacBook Pro.

Deleting the application from your /Applications folder is sufficient. There are sample projects in /Library/Application/Aperture you may want to get rid of as well, as they take up a fair bit of space.

What is the best way to filter an IP from being blocked?

What is the best way to filter an IP from being blocked by a false positive? Event Action Filter?

I'll assume you really mean "blocked" as opposed to "denied". You can either create an event action filter and subtract the blocked action, or you can add the address to the "never block" addresses.

Best way to disable a user from authing against ldap?

Similar Messages

Maybe you are looking for