Cannot Add user to CMC Group when they are a member of LDAP group

On PreProduction Server CMC
Softerra LDAP browser used to verify user is a member of LDAP group
User does not show as a member of that group in the CMC
Cannot add user to LDAP group showing in CMC, the same group shows the member in LDAP browser
On Production Server CMC
For kicks I logged into the CMC on Production and I found the user is correctly showing as a member of the Group
Why doesn't the groups in CMC show what is actually showing in the LDAP browser?

Hi,
Check if you have also mapped in both servers the same groups. It might be that there are some groups missing in the Pre-prod.
Also, try restarting the CMS. I have seen similar issues that are solved after forcing the recreation of the graph.
If after the restart you still can't see the groups, check the mapping on the LDAP server. It might be that both servers do not use the same attribute mappings.
Regards,
Julian

Similar Messages

Shared & user-defined variable behavior when they are passed an error?

If a [TRUE] error condition is preset at its input terminal:
What is the expected behavior for a shared variable which is being read?             My guess: To return the default value for the datatype being read.
What is the expected behavior for a user-defined variable which is being read?     My guess: To return the default value for the datatype being read.
What is the expected behavior for a shared variable which is being written?         My guess: To not update the value of the variable.
What is the expected behavior for a user-defined variable which is being written? My guess: To not update the value of the variable.
Are my guesses at the behavior correct? If not, what is the real behavior? This is for LabVIEW version 11 and newer.
Thanks!
Solved!
Go to Solution.

Thank you Arham!   I'm sorry you had to go to the trouble of creating a test VI to get the answer. I thought that this might have been documented somewhere and I was just missing it. It still may be documented somewhere but sometimes creating a test VI is the quicker path to an answer than is a search for where the documentation is stored and the test VI is probably the more conclusive answer anyway.
In any case, thanks to your answer, it is now documented in a manner that should not be too hard for others to find, should they have the same question.
Thanks again.

Cannot add webjob, says no webjobs yet they are actually running!!

Hi,
I have a website, which has/had two webjobs.
Today I published new content, and now my webjobs have disappeared - except that one (continuous) is actually still running!!.
I know because I can see its output in my storage account - files being generated every 5 minutes.
The portal tells me that I have no webjobs - yet refuses to allow me to upload one - probably because it is lying and it really has that job already. It tells me that it cannot upload the zip file - but I watch it go from 0 to 100%.
Tried (first) to upload the webjob from Visual Studio - but that failed - hence trying through the portal.
Now - I 'suspect' its a billing issue - as my portal shows me an Orange tab saying I have no credit. That too is lying because if I click for details it tells me that its unlimited - as I gave a it credit card a week or more back :-O
Raised a billing ticket and still waiting for a response :-((.
Anyone got an idea ????.
Many Thanks
BR
Graham

There was one issue discussed
here, for which the fix is to simply restart the site. If you try this and still have the same problem, then at least we'll know it is a separate issue from that one.

Cannot add users to mapped third party group

when i try to add a user to a group i get the following message
"cannot add users to mapped third party group"

If a group was mapped in via AD/LDAP/SAP then the users must be added in the 3rd party (AD/LDAP/SAP) you cannot create members inthe CMC. This is by product design. If you want to add members to groups in the CMC they must be enterprise groups only (groups created in the CMC not mapped in from 3rd parties).
Regards,
Tim

Cannot add users to a mapped third party group

Hi Experts,
When i try to add my sap groups(SB1~100@xxxx) to my ad users iam getting error as "cannot add users to a mapped thirdparty group.Pls advice how can i add these groups

You cannot add a user to a SAP group, create an enterprise user group and add both SAP group and AD user to that.

Cannot add user to group eventhough i have full access

i cannot add users to groups in subsite even i am in the owners group of the subsite

Check the settings of the group itself. By default the only person who can add users to a group is the person who created the group. I normally change the group settings so the group is owned by the Site collection root site owners group. That
way any of those users can modify the membership of the group.
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.

How to allow user refer back to lecture when they are taking a quiz?

Hi everyone,
I'm new to Captivate and now I am kinda in a dilemma. Thanks for your
time watching my post!
I created a CBL in Captivate 3, the first 10 slides is a lecture and it
is followed by a 10 slides quiz set as SCORM standard.
I want the learner to be able to refer back to the lecture when they
are taking the quiz, I tried to in 2 approaches and they both have
issues in different ways.
Approach 1: "allow backward movement", and "infinite attempts". The
problem with this approach is, when the learner click "review the
quiz" and when they click "back" on the first quiz slide, the whole
quiz will be start all over, the score is flipped back to zero.
Because the quiz seeing this as a new attempt, and the learner is
allowed to make "infinite attempts" as it was configured.
Approach 2: Set "allow backward movement" and allow only "1 attempt".
The problem with this approach is, when the learner is in the middle
of the quiz and refers back to the lecture, the quiz will be
automatically shown as completed. And the learner will not get a
chance to answer those unanswered questions.
So it looks like whenever I let the learner refer back to the lecture
in the middle of a quiz, the quiz will be seen as completed!!! What am
I doing wrong? Is there a better approach that I can "allow backward
movement" and still allow user resume their quiz from where they left
off?
Sorry for the long post, I was not able to express it in a more
concise way.
Any help is really appreciated!!
-David

What you are seeing is the behaviour as-designed in Captivate for quizzing.
Each Captivate movie has a "quiz scope" which begins with the very first scorable object, and ends at the Quiz Results slide. If you enter the quiz scope by starting a quiz slide, then jump back outside the quiz scope, by going back to the main content, Captivate's default behaviour is to freeze the quiz at that point. So when Captivate refers to Allow Backward Movement, it's only talking about backward movement within the quiz scope.
For example, if you get to question 1 but don't answer it and go to question 2, then answer that one, and go back to question 1, you'll still be able to answer question 1. The quiz won't be frozen. However, if you had jumped back to any slide before question 1, your quiz would have been frozen with whatever score you had accumulated at that point.
There may be a workaround you can use to get closer to what you want. Since any scorable object is classified as being part of the quiz, you can add a button on one of the very first slides that the user needs to click in order to advance. Set the properties of this button (or click box) to report a score to the quiz. This makes it part of the quiz scope. Now any content slides that fall after this button slide are also within quiz scope and moving back to them will not have the same effect of freezing the quiz.
Please bear in mind one more aspect of quiz questions: If you answer a quiz question, and then move off the slide (forward or back) that quiz question answer is frozen and cannot be changed unless you Retake the Quiz or relaunch the entire module.
Hope this helps clear up the way things work.

Cannot add users to Calendar Server

Cannot add users to Calendar Server

You may get the following error when you try to add users to a new
installation of Calendar Server 3.0:

Could not bind as [nsCalXItemId=10000:00001, o=Ace Industry,c=US]. 
Create ObjectClass for user [cn=John Doe, o=Ace Industry, c=US]... failed.

This is an inconsistent problem that we are trying to duplicate on a
regular basis. There are a few solutions:

1) Create another node. This seems to work every time. 
2) Deinstall the Calendar Server completely and reinstall. Be VERY
careful of the Directory Server URL definition.

What printer model is it? I ask, because often manufacturers provide USB-only drivers for USB-only printers - for Macs, that is. In other words, if you know about CUPS from using Macs and linux, the manufacturers actually provide drivers with the comm protocol built-in, rather than make use of the USB "backend" available from CUPS. These are called "monolithic" drivers - they don't follow the unix/linux/CUPS concept of making use of already-provided modules.

Error: "LDAP Synch status is enabled. Cannot add users through BAT."

In 10.x it looks like Cisco has disallowed user imports (via BAT) into LDAP-integrated systems. Has anyone else run into this? Below is the error I'm receiving in the Job Status log file. The error implies that "it's a feature, not a bug". How are large companies supposed to import new phones/users when they open new branches or do a phone refresh? Breaking LDAP to do the import isn't a option because you have to blow away your LDAP directory config to do so - not to mention people wouldn't be able to log into Jabber or their user pages while it was broken. I'm hoping someone has a workaround or has already spoken with TAC about this.
Failure Details :
Device Name/User ID Error Code Error Description
LDAP Synch status is enabled. Cannot add users through BAT.
Result Summary :
INSERT for 0 PHONES passed.
INSERT for 5 PHONES failed.
INSERT for 0 USERS passed.
INSERT for 5 USERS failed.

So if a company has a large CUCM deployment and adds another branch (let's say 100 phones/users), I would have to go user by user and do the phone associations, profile associations, primary extensions, etc 100 times?
Is there a better way that I'm missing? That just doesn't seem logical. In previous versions (I'm not sure about 6.x in the link. I started with 7.x) I could have sworn that I could import from BAT even if LDAP was integrated. I would get an error and only the non-LDAP fields would get changed, but the changes, associations, etc. would still go through.

When I repair disk permissions I get the following:Repairing permissions for "MacIntosh HD" Determining correct file permissions. Permissions differ on ./Library/Widgets, should be drwxr-xr-x , they are drwxrwxr-x Owner and group corrected on ./Library/W

Repairing permissions for “MacIntosh HD”
Determining correct file permissions.
Permissions differ on ./Library/Widgets, should be drwxr-xr-x , they are drwxrwxr-x
Owner and group corrected on ./Library/Widgets
Permissions corrected on ./Library/Widgets
Permissions differ on ./System/Library/User Template, should be drwx------ , they are drwxr-xr-x
Owner and group corrected on ./System/Library/User Template
Permissions corrected on ./System/Library/User Template
Group differs on ./usr/bin/fetchmail, should be 0, group is 6
Permissions differ on ./usr/bin/fetchmail, should be -rwxr-xr-x , they are -rwxr-sr-x
Owner and group corrected on ./usr/bin/fetchmail
Permissions corrected on ./usr/bin/fetchmail
Permissions differ on ./usr/lib/php/build/Makefile.global, should be -r--r--r-- , they are -r-xr-xr-x
Owner and group corrected on ./usr/lib/php/build/Makefile.global
Permissions corrected on ./usr/lib/php/build/Makefile.global
Permissions differ on ./usr/lib/php/build/acinclude.m4, should be -r--r--r-- , they are -r-xr-xr-x
Owner and group corrected on ./usr/lib/php/build/acinclude.m4
Permissions corrected on ./usr/lib/php/build/acinclude.m4
Permissions differ on ./usr/lib/php/build/mkdep.awk, should be -r--r--r-- , they are -r-xr-xr-x
Owner and group corrected on ./usr/lib/php/build/mkdep.awk
Permissions corrected on ./usr/lib/php/build/mkdep.awk
Permissions differ on ./usr/lib/php/build/phpize.m4, should be -r--r--r-- , they are -r-xr-xr-x
Owner and group corrected on ./usr/lib/php/build/phpize.m4
Permissions corrected on ./usr/lib/php/build/phpize.m4
Permissions differ on ./usr/lib/php/build/scan_makefile_in.awk, should be -r--r--r-- , they are -r-xr-xr-x
Owner and group corrected on ./usr/lib/php/build/scan_makefile_in.awk
Permissions corrected on ./usr/lib/php/build/scan_makefile_in.awk
Permissions differ on ./usr/lib/system/libmathCommon.A.dylib, should be -r-xr-xr-x , they are -rwxr-xr-x
Owner and group corrected on ./usr/lib/system/libmathCommon.A.dylib
Permissions corrected on ./usr/lib/system/libmathCommon.A.dylib
Permissions differ on ./usr/libexec/dumpemacs, should be -r-sr-xr-x , they are -r-xr-xr-x
Owner and group corrected on ./usr/libexec/dumpemacs
Permissions corrected on ./usr/libexec/dumpemacs
Permissions repair complete
The privileges have been verified or repaired on the selected volume
Then I sometimes get the brown screen that states,You must re-start your computer.
I have already zeroed out the hard drive and re-installed Panther and the upgrade Tiger disc.
I repair permissions using the Tiger disc upgrade.
Can anyone help me with this??

> I repair permissions using the Tiger disc upgrade.
One thing to note... When running Repair Disk Permissions, it is best to run it while started up normally, from your normal startup disk, not from a Mac OS X installation disc. The only time you should run it while started up from an installation disc is if some problem is preventing you from starting up normally. OTOH, Repair Disk can only be used when starting up from a different disk (such as an installation disc).
So, I would start up normally, run Disk Utility, and use Repair Disk Permissions on your normal startup disk.
NOTE: Repair Disk Permissions often gives alerts messages that can be ignored. They are more "informational," not serious errors.
http://support.apple.com/kb/TS1448
You should still run it periodically. When you run it, what needs to be repaired has been repaired; consider the rest of it an FYI. I've never experience a problem, where a Repair Disk Permissions message actually caused a problem. But, if you ever get an error while running Repair Disk (or Verify Disk), that is usually a serious problem.

Script to logout users from a specific group, when queries are long

Hi,
I have a requirement that users from a specific group need to be logged out, when they are running queries for more than say 20 mins.
I could get the list of users from that group and could get the list of active sessions on the application, but I get too many info there like connection IP request state etc. and if I spool it to a file, output is not very easy to format to select what's required, rather I have to write lot of shell scripting to format the file.
So my question here is to know if there's a MAXL script or any other method through which I can just get only couple of columns from the "display session on application <app name>" that I require for my work like username, session ID, DB connect time, and request time.
Thanks!!

There are a number of ways to accomplish this, but AFAIK none of them is straightforward like writing a script to accomplish the task.
This could be accomplished quite readily with the Essbase API.
Unfortunately, when Maxl outputs tabular data such as what comes out after DISPLAY SESSION ALL; - it comes out as all one big string with lots of spaces.
So to parse that output you would need to use a language that can tokenize the text into a collection and parse that for the users.
Then you need to do the same sort of thing after running DISPLAY USER IN GROUP ALL; (or instead of all, use a specific group name);
Then run ALTER SYSTEM LOGOUT SESSION BY USER <parsed_username>;
What would be ideal (hello Oracle... <wink> ) is a MAXL command ALTER SYSTEM LOGOUT SESSION BY GROUP <GroupName>;
The way I would approach this would be to write a little utility that does exaclty what you seek:
- Scan the current session periodically (say, once every 5 mins)
- for each user that belongs to group(s) <group>(<group>...)
- if user has an open query running longer than n minutes, kill the user request.
This way you're not kicking people, your just taking back resources. Of course you can be more aggressive and code it to kick the user by forcefully ending (invalidating) his session too.
I can give you a hand with this offline if you want.
Robb

I have dragged 2 files to the trash bin but I cannot delete them from the trash bin. It keeps telling me these files are in use when they are not. How do I delete these files? One is a txt file and the other is an xls file

I have dragged 2 files to the trash bin but I cannot delete them from the trash bin. It keeps telling me these files are in use when they are not. How do I delete these files? One is a txt file and the other is an xls file

From the Finder menu select 'Secure Empty Trash'. If this or the suggestion above doesn't resolve the problem take a look at the various suggestions in this link:
http://www.thexlab.com/faqs/trash.html

I recently had to get a new computer, my list of audible books is there but can't open because original file cannot be found. how do I find them or redownload them when they are not in my purchased list anymore?

I recently had to purchase a new computer, after doing so I no longer can open my audible books. the list is there, but I get an error message telling me that the original file cannot be found. How can I redownload them when they are not in my purchased list anymore when I go to the Apple Store??

Downloading past purchases from the App Store, iBookstore, and iTunes Store - http://support.apple.com/kb/ht2519 - enabled with iTunes 10.3 and newer; not available in all countries; apps, books (not audiobooks), music, t.v. shows, and movies (some - not all studios have permitted this). Movies currently available in the USA only. Downloading previously purchased movies and TV shows requires iTunes 10.6 or later. Discontinued items not available. For items not included in the iCloud list, or locations or computer systems where iCloud is not (yet?) available, you only get one download per fee paid. Apple notes it is your responsibility to back up your purchases.
Select the store on the left side of iTunes.
Click on Purchased on the right side under Quick Links.
You can re-download your available previous purchases.

I imported 635 images into an iPhoto album so that I can share them via a photo-stream. However, iPhoto says there are only 600. When I try to add the missing images it says they are already there. Why can i not see these images in iPhoto?

I imported 635 images into an iPhoto album so that I can share them via a photo-stream. However, iPhoto says there are only 600. When I try to add the missing images it says they are already there. Why can i not see these images in iPhoto?

Generally I would not use Facebook for sharing any photos, it compresses the photos substantially, and when you have shadows and dark colours you get visible "bands" where there should be subtle gradients, ie at sunsets and sunrises.
It sounds like you are using two methods to upload to Facebook:
1. Sharing from within Aperture, which basically syncs Facebook with your Aperture album, so any changes made at either end gets synced, hence the deletions from Albums, although the original file should still be in your library, just removed rom the album. It is like a playlist in iTunes.
2. Exporting pics and uploading to Facebook from the browser.
I am not sure how method 1 gets compressed, but I know that uploading hi-res jpegs to Facebook using method 2 results in poor quality images.
I wouldn't even bother comparing option 1 or 2, and they will both be poor images once you view them on Facebook, as opposed to viewing uploaded images on proper image sharing / hosting sites.
Your problem is not with Aperture, it is using Facebook for showing your work.
If you export pics form Aperture at high res jpegs or TIFFs your images will be fine.
If you insist to use Facebook as your way to share your work, then your workflow should be this:
1. Right click images you want to share.
2. Select Export version.
3. Export as 100% size and ensure the export settings are set at 100% quality.
4. Upload this pic into Facebook.
This will get you the best image size and resolution on Facebook.
See how you go.

Chat App: how to store the user IP in database when they login.

hello,
i am working on chat application. first i made a login GUI form. after login when we run the Chat program, it ask the ip address of the server to whom it want to connect. and if u enter the ip address, it will connect to the server and chat will begin, thats working perfect.
but i want to show the list of users who r logged on and when i simply click on the user name, chat should begin.
i have the logic that when any user log in, then its IP address will be stored in the database. this ip address will shown to the online users.
but i dont know how to store the user information in database when they log in. can any body suggest me wht lines of code i should use.
thanks.

palakk wrote:
i have the logic that when any user log in, then its IP address will be stored in the database. Bad approach. That will only work if this chat is only intended for use on a LAN. If it's used on the internet, then your users' IP addresses will almost always be either a) those of their routers, or b) private IP addresses, and in both cases, multiple users can have the same IP address.
this ip address will shown to the online users. Why would you want to do that? I want to chat with "Bill", not with "1.2.3.4".
but i dont know how to store the user information in database when they log in.Do the same thing that you're currently doing to store the IP address, but with the other information you want to store.
can any body suggest me wht lines of code i should use. This is not a code writing service.

Cannot Add user to CMC Group when they are a member of LDAP group

Similar Messages

Maybe you are looking for