Cannot assign DLU policy to users
The wizard cannot continue for the following reason(s):
ErrorUnable to complete your request for the following reason: assignments.creation.failed
Thats the error I get when I attempt to assign a DLU to a NEW eDirectory 8.8.6 user. (old users work fine.)
SLES10 >>ZCM 10.3.3>>INTERNAL Sybase
Originally Posted by donasutton
The wizard cannot continue for the following reason(s):
ErrorUnable to complete your request for the following reason: assignments.creation.failed
Thats the error I get when I attempt to assign a DLU to a NEW eDirectory 8.8.6 user. (old users work fine.)
SLES10 >>ZCM 10.3.3>>INTERNAL Sybase
This ended up being an issue with the OU in which I made the user. I deleted the new OU, recreated it and it worked fine. Time to glue my hair back in.
Thank you for your response though.
Don
Similar Messages
-
Assign Password Policy to Users
We have a system where we create users Java API.
Using Directory Server console i can assign a password policy to this user. I am trying to figure out how i can do the same using API. I do see few posts on this forum asking the same question but don't see this answered.
TIA.mv, thanks for the advice. i am using web server 7. I also posted the question undet he directory server section. when i was researching this, i clicked on the add my own topic and did not pay attention to the thread. thanks again...
-
How To Disable DLU Policy For A Group Of Users
We are running Zenworks 7.x on Novell netware 6.5 sp8. I have my User package existing within the Context where the user accounts exist. Also the User Package is associated to that user Context. I have a need to deny a specific group of users access to the DLU Policy of the User Package. However I will need the users to have access to all other Policy packages withing the same User Package (ie, iprint policy, remote control policy, etc).
Is it possible to deny a group of users access to the DLU policy but not the other Policies within the Associated user package?Originally Posted by wanman
We are running Zenworks 7.x on Novell netware 6.5 sp8. I have my User package existing within the Context where the user accounts exist. Also the User Package is associated to that user Context. I have a need to deny a specific group of users access to the DLU Policy of the User Package. However I will need the users to have access to all other Policy packages withing the same User Package (ie, iprint policy, remote control policy, etc).
Is it possible to deny a group of users access to the DLU policy but not the other Policies within the Associated user package?
Take a copy of your existing User package, disable DLU in this new package and assign it to these specific users that you don't want DLU to apply.
Thomas -
ZCM DLU Policy Not Applying To Win7 Computer
I am running ZCM v10.3 and am preparing to migrate over to Active Directory. When I first setup ZCM, I created a DLU policy for my Windows 7 computers and its been working fine. However, its time to join my Windows 7 computers (running ZCM v10.3) to the AD Domain and I need to disable the DLU for the machines prior to joining the domain.
To do this I tried to exclude my test workstations from the DLU by adding the workstations to the exclusion list for the DLU Policy. My DLU policy is assigned to my Users so I used the "Excluded Workstation List" to attempt to prevent the DLU from applying to the workstation. This didn't work. I also tried the reverse by applying the DLU to the test workstation and adding users to the Exclusion list, but that didn't work either. I updated the version, ran "zac cc" and ran "zac ref bypasscache" but it didnt work.
I reassigned the DLU to all my Users and tried to use the registry to check for the existence and value of hklm\software\novell\zcm\zenlgn\domainlogin=1, but that didnt work either. I updated the version, ran "zac cc" and ran "zac ref bypasscache" but it didnt work.
Actually, the registry keys (DomainLogin and eDIRLogin) didn't exist so i had to manually add it using an AD GPO. I added DomainLogin and eDIRLogin and assign hexadecimal value of 1 to each DWORD via GPO (FYI). At this point I'm not even sure if the values of these keys are supposed to be set automatically upon login or if the admins manually control the values. Its not clear to me from the documentation on the Novell site. (http://www.novell.com/documentation/...stem_admin.pdf, pg 274)
(DLU Policy Filters not working)
I turned on debug by issuing the command: "zac log level debug", and would've attached the log here, but I don't know how. If anyone needs to see the log, please send me a link on how to attach a log and I'll do so.
I've tried so many different settings and combinations but i'm still unable to get consistent results. At some point I was able to get the DLU Policy to show up in the ZCM Agent properties with the status of "Not Applied" or "Not Effective" or something to that effect. That was the first time I was able to log in without the DLU applying. However it wasn't consistent among other machines so i kept testing. As it stands now, I have removed any filters and exclusions and now my test machine is not receiving any DLU policy and it should because I assigned the DLU Policy to my entire user base. I am totally lost.
Any help is appreciated.wanman,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/ -
Hello All
I am new to the zenworks world.
I am currently piloting ZCM 11 in a ZDM 7 environment.
I am having trouble with my DLU policies.
I want to have 2 policies that do the following:
1. One policy that adds the LDAP users (eDirectory) to the "Users" group on the workstation (but no other groups)
2. One policy that adds specific LDAP administrator users (eDirectory, IT administrators users) to the "Administrators" and "Users" group on the workstation
I don't understand how to properly assign these DLU policies so that they do not override one another?
Can someone shed some light on how to properly assign this?
Thanks!Originally Posted by JSorrenti
Hello All
I am new to the zenworks world.
I am currently piloting ZCM 11 in a ZDM 7 environment.
I am having trouble with my DLU policies.
I want to have 2 policies that do the following:
1. One policy that adds the LDAP users (eDirectory) to the "Users" group on the workstation (but no other groups)
2. One policy that adds specific LDAP administrator users (eDirectory, IT administrators users) to the "Administrators" and "Users" group on the workstation
I don't understand how to properly assign these DLU policies so that they do not override one another?
Can someone shed some light on how to properly assign this?
Thanks!
We have a Users DLU policy assigned to the base of our usersource, then we have a Administrator DLU policy which is assigned to only IT-administrators (directly on the user object). This works for us since ZENworks consider the "closeness" of the assignment.
A direct association is closer than a group association, which in turn is closer than a folder.
Thomas -
DLU Policy for terminal server
Hi all
I am trying to apply a DLU policy to allow users to remotely login to a terminal server. However, I do not want the DLU policy to allow users to have remote desktop access to other workstations.
Right now I have 3 DLU policies configured
DLU Admin - Grants IT users full admin access to all devices
DLU Users - Gives employees access only to the users and power users group on the managed devices
DLU Remote - grants remote desktop access to specific users
Is there a better way to assign a remote dlu policy to a specific device?
I want to lock down the DLU to specific devices.
thanlsJSorrenti,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/ -
DLU, Excluded/Included Users List
Hi,
we have problems using the "Excluded/Included Users Lists"-feature of DLU
policies.
This s what we are trying to do: Most of our ZCM-managed workstations should
allow all eDirectory accounts to login; so we have a DLU policy without any
"Login Restrictions" assigned to those devices. So far it works fine.
Now we have one lab where only a subset of accouts should be allowed to
login. We assigned a DLU policy with "Login Restrictions" to those devices.
We want to put "Users" (=ALL accounts) into the "Excluded Users List" and a
eDirectory group into the "Included Users List". But this does not work -
some accounts could login, some not - but without any correlation to the
eDirectory group.
So for testing we simplified the scenario: only one single account is in the
"Excluded Users List" - does not work, the account still can login. (DLU
creates a local account which did not exist before the test.)
My question: Is something wrong with how we try to do this? Should this work
or is there a flaw in the idea?
(ZCM 11 SP1, Windows 7 workstations with Novell Client and ZCM Agent, no
Windows Domain)
Thanks,
MirkoI know people use it, because Novell is looking at some specific issues
where certain loopback configurations cause it to not work.
This is why I wanted to get loopback entirely out of the picture.
On 2/16/2012 8:37 AM, Mirko Guldner wrote:
>
> Whatever I do or try - the results are totally unpredictable. Some Accounts
> can login, some not, without any correlation to accounts and groups in the
> "Included/Excluded Users List".
>
> What I really would like to know: Does somebody here use this feature, and
> it works?
>
> Thanks,
> Mirko
>
>
> Mirko Guldner wrote:
>
>>
>> I wasn't aware of the term "Loopback" in this context... but I guess you
>> are refering to what is called "Policy Conflict Resolution" in ZCC?
>>
>> I tested it again with "Device Only" for the assignment of the DLU policy
>> - no difference: the account in "Excluded Users List" still can login and
>> gets a local user created.
>>
>>
>> craig wilson wrote:
>>
>>> Check the Loop Backsettings on the Device.
>>> That can be important, even if there are not duplicate policies.
>>>
>>> On 2/13/2012 11:11 AM, Mirko Guldner wrote:
>>>>
>>>> We have a total of 6 DLU Policies in the zone, including those only for
>>>> testing - none of them is assigned by user, all are assigned by device.
>>>>
>>>> We also checked the "Assigned Policies", "Inherited"-tab for user and
>>>> device, so I don't think there's possibly a problem multiple policies
>>>> assigned.
>>>>
>>>> Thanks,
>>>> Mirko
>>>>
>>>>
>>>>
>>>> craig wilson wrote:
>>>>
>>>>> Any Chance the User/Device combo is resulting in multiple DLU policies
>>>>> being assigned/inherited and the other DLU policy is the one logging in
>>>>> the user?
>>>>>
>>>>> On 2/13/2012 8:40 AM, Mirko Guldner wrote:
>>>>>> Hi,
>>>>>>
>>>>>> we have problems using the "Excluded/Included Users Lists"-feature of
>>>>>> DLU policies.
>>>>>>
>>>>>> This s what we are trying to do: Most of our ZCM-managed workstations
>>>>>> should allow all eDirectory accounts to login; so we have a DLU policy
>>>>>> without any "Login Restrictions" assigned to those devices. So far it
>>>>>> works fine.
>>>>>>
>>>>>> Now we have one lab where only a subset of accouts should be allowed
>>>>>> to login. We assigned a DLU policy with "Login Restrictions" to those
>>>>>> devices. We want to put "Users" (=ALL accounts) into the "Excluded
>>>>>> Users List" and a eDirectory group into the "Included Users List". But
>>>>>> this does not work - some accounts could login, some not - but without
>>>>>> any correlation to the eDirectory group.
>>>>>>
>>>>>> So for testing we simplified the scenario: only one single account is
>>>>>> in the "Excluded Users List" - does not work, the account still can
>>>>>> login. (DLU creates a local account which did not exist before the
>>>>>> test.)
>>>>>>
>>>>>> My question: Is something wrong with how we try to do this? Should
>>>>>> this work or is there a flaw in the idea?
>>>>>>
>>>>>> (ZCM 11 SP1, Windows 7 workstations with Novell Client and ZCM Agent,
>>>>>> no Windows Domain)
>>>>>>
>>>>>> Thanks,
>>>>>> Mirko
>>>>>
>>>>>
>>>>
>>>
>>>
>
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human. -
GRC 5.3 - Management Report Error: Cannot assign an empty string to host..
Good day Kiran Kandepalli and Others.
I have successfully executed the background jobs -
Full User, Role, Profile Synchronization & a
Full Batch Risk Analysis
When I run the Management Reports I receive the following error -
Error while executing the Job:Cannot assign an empty string to host variable 10.
Has anybody had this error message before?
When I check table VIRSA_CC_PRMVL, variable 10 is set to No in Nullable collumn.Hi Sahad,
Thanks for your response. I have checked the usr02 table and logs and do not see any empty fields or strings. This process worked for 5.2 but fails in 5.3. Here is the excerpt from the log for the Management Report run. It seems to fail consistenly at a certain point. If I knew what the batch job was looking for in host variable 10 I might be able to resolve the problem. It seems to fail when it starts to report on users.
Thanks.
Dan.
INFO: -
Scheduling Job =>935----
Jan 23, 2009 8:04:16 AM com.virsa.cc.xsys.bg.BgJob run
INFO: --- Starting Job ID:935 (RISK_ANALYSIS_BATCH) - tst
Jan 23, 2009 8:04:16 AM com.virsa.cc.xsys.bg.BgJob setStatus
INFO: Job ID: 935 Status: Running
Jan 23, 2009 8:04:16 AM com.virsa.cc.xsys.bg.BgJob findJobHistory
FINEST: --- @@@@@@@@@@@ Find the Job History -
1
Jan 23, 2009 8:04:16 AM com.virsa.cc.xsys.bg.BgJob updateJobHistory
FINEST: --- @@@@@@@@@@@ Updating the Job History -
1@@Msg is tst started :threadid: 0
Jan 23, 2009 8:04:16 AM com.virsa.cc.xsys.bg.dao.BgJobHistoryDAO insert
INFO: -
Background Job History: job id=935, status=1, message=tst started :threadid: 0
Jan 23, 2009 8:04:16 AM com.virsa.cc.xsys.bg.BatchRiskAnalysis performBatchSyncAndAnalysis
INFO: --- Batch Sync/Analysis/Mgmt Report started ---
Jan 23, 2009 8:04:16 AM com.virsa.cc.xsys.bg.BatchRiskAnalysis runBkgMgmReport
INFO: --- Running the Background Management Report -
Jan 23, 2009 8:04:39 AM com.virsa.cc.xsys.mgmbground.dao.MgmStats execute
INFO: Start insert int cc_mgriskd all violations.... 1232726679108
Jan 23, 2009 8:04:49 AM com.virsa.cc.xsys.bg.BatchRiskAnalysis runBkgMgmReport
WARNING: Exception in Management Report Job: Cannot assign an empty string to host variable 10.
com.sap.sql.log.OpenSQLException: Cannot assign an empty string to host variable 10.
at com.sap.sql.log.Syslog.createAndLogOpenSQLException(Syslog.java:85)
at com.sap.sql.log.Syslog.createAndLogOpenSQLException(Syslog.java:124)
at com.sap.sql.types.VarcharResultColumn.setString(VarcharResultColumn.java:57)
at com.sap.sql.jdbc.common.CommonPreparedStatement.setString(CommonPreparedStatement.java:511)
at com.sap.engine.services.dbpool.wrappers.PreparedStatementWrapper.setString(PreparedStatementWrapper.java:355)
at com.virsa.cc.xsys.mgmbground.dao.MgmStats.execute(MgmStats.java:314)
at com.virsa.cc.xsys.bg.BatchRiskAnalysis.runBkgMgmReport(BatchRiskAnalysis.java:1182)
at com.virsa.cc.xsys.bg.BatchRiskAnalysis.performBatchSyncAndAnalysis(BatchRiskAnalysis.java:1430)
at com.virsa.cc.xsys.bg.BgJob.runJob(BgJob.java:402)
at com.virsa.cc.xsys.bg.BgJob.run(BgJob.java:264)
at com.virsa.cc.xsys.riskanalysis.AnalysisDaemonBgJob.scheduleJob(AnalysisDaemonBgJob.java:240)
at com.virsa.cc.xsys.riskanalysis.AnalysisDaemonBgJob.start(AnalysisDaemonBgJob.java:80)
at com.virsa.cc.comp.BgJobInvokerView.wdDoModifyView(BgJobInvokerView.java:436)
at com.virsa.cc.comp.wdp.InternalBgJobInvokerView.wdDoModifyView(InternalBgJobInvokerView.java:1225)
at com.sap.tc.webdynpro.progmodel.generation.DelegatingView.doModifyView(DelegatingView.java:78)
at com.sap.tc.webdynpro.progmodel.view.View.modifyView(View.java:337)
at com.sap.tc.webdynpro.clientserver.cal.ClientComponent.doModifyView(ClientComponent.java:481)
at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.doModifyView(WindowPhaseModel.java:551)
at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequest(WindowPhaseModel.java:148)
at com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.processRequest(WebDynproWindow.java:335)
at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:143)
at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:321)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingStandalone(ClientSession.java:713)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:666)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:250)
at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:149)
at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:62)
at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doGet(DispatcherServlet.java:46)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
at java.security.AccessController.doPrivileged(Native Method)
at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
Jan 23, 2009 8:04:49 AM com.virsa.cc.xsys.bg.BgJob run
WARNING: *** Job Exception: Cannot assign an empty string to host variable 10.
com.sap.sql.log.OpenSQLException: Cannot assign an empty string to host variable 10.
at com.sap.sql.log.Syslog.createAndLogOpenSQLException(Syslog.java:85)
at com.sap.sql.log.Syslog.createAndLogOpenSQLException(Syslog.java:124)
at com.sap.sql.types.VarcharResultColumn.setString(VarcharResultColumn.java:57)
at com.sap.sql.jdbc.common.CommonPreparedStatement.setString(CommonPreparedStatement.java:511)
at com.sap.engine.services.dbpool.wrappers.PreparedStatementWrapper.setString(PreparedStatementWrapper.java:355)
at com.virsa.cc.xsys.mgmbground.dao.MgmStats.execute(MgmStats.java:314)
at com.virsa.cc.xsys.bg.BatchRiskAnalysis.runBkgMgmReport(BatchRiskAnalysis.java:1182)
at com.virsa.cc.xsys.bg.BatchRiskAnalysis.performBatchSyncAndAnalysis(BatchRiskAnalysis.java:1430)
at com.virsa.cc.xsys.bg.BgJob.runJob(BgJob.java:402)
at com.virsa.cc.xsys.bg.BgJob.run(BgJob.java:264)
at com.virsa.cc.xsys.riskanalysis.AnalysisDaemonBgJob.scheduleJob(AnalysisDaemonBgJob.java:240)
at com.virsa.cc.xsys.riskanalysis.AnalysisDaemonBgJob.start(AnalysisDaemonBgJob.java:80)
at com.virsa.cc.comp.BgJobInvokerView.wdDoModifyView(BgJobInvokerView.java:436)
at com.virsa.cc.comp.wdp.InternalBgJobInvokerView.wdDoModifyView(InternalBgJobInvokerView.java:1225)
at com.sap.tc.webdynpro.progmodel.generation.DelegatingView.doModifyView(DelegatingView.java:78)
at com.sap.tc.webdynpro.progmodel.view.View.modifyView(View.java:337)
at com.sap.tc.webdynpro.clientserver.cal.ClientComponent.doModifyView(ClientComponent.java:481)
at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.doModifyView(WindowPhaseModel.java:551)
at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequest(WindowPhaseModel.java:148)
at com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.processRequest(WebDynproWindow.java:335)
at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:143)
at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:321)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingStandalone(ClientSession.java:713)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:666)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:250)
at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:149)
at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:62)
at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doGet(DispatcherServlet.java:46)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
at java.security.AccessController.doPrivileged(Native Method)
at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
Jan 23, 2009 8:04:49 AM com.virsa.cc.xsys.bg.BgJob setStatus
INFO: Job ID: 935 Status: Error
Jan 23, 2009 8:04:49 AM com.virsa.cc.xsys.bg.BgJob updateJobHistory
FINEST: --- @@@@@@@@@@@ Updating the Job History -
2@@Msg is Error while executing the Job:Cannot assign an empty string to host variable 10.
Jan 23, 2009 8:04:49 AM com.virsa.cc.xsys.bg.dao.BgJobHistoryDAO insert
INFO: -
Background Job History: job id=935, status=2, message=Error while executing the Job:Cannot assign an empty string to host variable 10.
Jan 23, 2009 8:04:49 AM com.virsa.cc.xsys.riskanalysis.AnalysisDaemonBgJob scheduleJob
INFO: -
Complted Job =>935---- -
Management Report - Cannot assign an empty string to host variable 10
We ran a Management Report for the first time after completing the User/Role/Profile Full Sync and the user/Role/Profile Batch Risk Analysis. The job failed with the following error:
Oct 16, 2008 12:13:29 PM com.virsa.cc.xsys.bg.BatchRiskAnalysis runBkgMgmReport
WARNING: Exception in Management Report Job: Cannot assign an empty string to host variable 10.
com.sap.sql.log.OpenSQLException: Cannot assign an empty string to host variable 10.
We are on GRC 5.3 support pack 4. Has anybody encountered this error? What does host variable 10 refer to?I checked our USOBT_C table and we have a lot of empty values. If this is allowed to be empty in SAP and this is the table that is uploaded into CC, why would all the fields in CC tables then be defined as NOT NULL? We suspect that since we had uploaded USOBT_C under 5.2 and if this had been an issue before, it may have been corrected when we upgraded to 5.3 but then the old data is still in our system. Is there an easy way to get around or correct this?
Thanks. -
Creation of auto approval process for assigning role for a user in oim11g
currently i'm doing a scenario like a user must be automatically assigned to a role by using approval policy where the user is already there in oim and then we use csv file in that we take 2 columns like userlogin and role name so by running this scheduled task user must be automatically approved to that role.But i have to use the default auto approve policy in oim without creating any bpel process for that so can any one suggest me how to proceed with this scenario.
Thanks in Advance for quick response.If I understand correctly, You have users and their respective roles in csv file. Users are present in OIM. You want to assign those roles in csv file to respective users?
If this is the scenario, you need to write a custom code for schedule task which will read data from your csv file, create roles and assign them to respective users.
to create custom schedule task in OIM 11g, you may refer to:
http://docs.oracle.com/cd/E21764_01/doc.1111/e14308/scheduler.htm
regards,
GP -
Cannot Assign Archive and Retention Policies in Outlook 2010
We are having problems figuring out how we enable Archiving and Retention tags in Outlook. We have a new Exchange 2010 server with an Enterprise license key. We have run Microsoft Office professional plus 2010 on all of our clients (licensed through
our volume license service agreement). We have configured an Archive mailbox store and assigned accounts to use that store. The archive mailbox appears in the users Outlook, but they cannot assign policies to folders or items. The ribbon does not show the
option. I can see that it is configured to be part of the ribbon (when customizing the ribbon), but the option is not available to the user to actually select. I see user tags assigned to the user in Exchange, so I am at a loss as to where else to look for
the problem.
I see lots of documentation that says this is a licensing problem, but I am running the right components and think I have the right licensing. Is there a trouble shooting document or things I can check to make sure I have everything the way I need it to
be?We found our own answer on this. Not sure why, but we had to use powershell to start the Managed Folder Assistant for the user name we had configured:
Start-ManagedFolderAssistant -identity <username>
My guess is that if we had waited long enough this would have resolved itself. -
DLU policy not applying - Console One won't OK
I've created a DLU policy that has administrator group rights. When I try
to associate it to a user I click OK and the the screen stays (doesn't
close). The button isn't greyed out and an hour glass appears but it does
nothing. I've tried the reverse - associating the policy from the user -
with the same results. Tried deleting and recreating both the user and
policy in different containers.
Dsrepair shows everything is clean and the tree is synced.
Single server tree, netware 5.2 sp7, zen 3.2, console one 3.5
I have other trees exactly the same and do not have this issue....Don't really want to apply anymore patches. We did on one install and it
messed up all our configurations. This is at a school and with the
students now back I can't afford any down time.
> Hi
> Could you try with Zen SP3 on the current 1.3.6c Consoleone if you see
> the same problem ?
>
> --
> Regards, Kai Reichert
> Novell Support Forum Sysop
>
> People who claim that computers will make life easier for us have
> obviously never used one. -
How to see system status in spro. How to assign business transaction to user status.
Hi All,
How to see system status in spro. can we change system status in spro for maintenance order.kindly share.
Also share how can we assign business transaction to user status for maintenance orderPeter,
You cannot see the system-status in SPRO.
You can view the system-statuses via BS23.
Be warned - it is NOT advisable to change the system-status setting as you may screw-up your system. Remember that many statuses are used across multiple objects and multiple modules.
PeteA -
Event ID 1085 on DC - Failed to Apply the Group Policy Local Users and Groups Settings
I have a domain with 2 DCs. The primary DC is running Server 2012 and is raising Event ID 1085 every 10 minutes and 20 seconds.
Windows failed to apply the Group Policy Local Users and Groups settings. Group Policy Local Users and Groups settings might have its own log file. Please click on the "More information" link.
System
- Provider
[ Name] Microsoft-Windows-GroupPolicy
[ Guid] {AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}
EventID 1085
Version 0
Level 3
Task 0
Opcode 1
Keywords 0x8000000000000000
- TimeCreated
[ SystemTime] 2014-10-20T20:09:03.706992400Z
EventRecordID 130087
- Correlation
[ ActivityID] {FDDFB8C5-9ECF-41B9-B2B4-3AD0B345A37A}
- Execution
[ ProcessID] 1000
[ ThreadID] 3280
Channel System
Computer SERVER.DOMAIN.NAME
- Security
[ UserID] S-1-5-18
- EventData
SupportInfo1 1
SupportInfo2 4404
ProcessingMode 0
ProcessingTimeInMilliseconds 10343
ErrorCode 183
ErrorDescription Cannot create a file when that file already exists.
DCName \\SERVER.DOMAIN.name
ExtensionName Group Policy Local Users and Groups
ExtensionId {17D89FEC-5C44-4972-B12D-241CAEF74509}
Everything I look up for Event ID 1085 seems to be about a different cause.
Any ideas?I enabled tracing on a domain gpo and I still get the error when running gpupdate /force .
I'm also still getting Event 1085. Here's the trace file. I've anonymized the site/domain and the GUIDs.
2014-10-21 11:16:54.003 [pid=0x3e8,tid=0xcd0] Entering ProcessGroupPolicyExLocUsAndGroups()
2014-10-21 11:16:54.018 [pid=0x3e8,tid=0xcd0] SOFTWARE\Policies\Microsoft\Windows\Group Policy\{GUID-1}
2014-10-21 11:16:54.018 [pid=0x3e8,tid=0xcd0] BackgroundPriorityLevel ( 0 )
2014-10-21 11:16:54.018 [pid=0x3e8,tid=0xcd0] DisableRSoP ( 0 )
2014-10-21 11:16:54.018 [pid=0x3e8,tid=0xcd0] LogLevel ( 2 )
2014-10-21 11:16:54.018 [pid=0x3e8,tid=0xcd0] Command subsystem initialized. [SUCCEEDED(S_FALSE)]
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] Background priority set to 0 (Idle).
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ----- Parameters
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] CSE GUID : {GUID-1}
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] Flags : ( X ) GPO_INFO_FLAG_MACHINE - Apply machine policy rather than user policy
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( X ) GPO_INFO_FLAG_BACKGROUND - Background refresh of policy (ok to do slow stuff)
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_SLOWLINK - Policy is being applied across a slow link
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_VERBOSE - Verbose output to the eventlog
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_NOCHANGES - No changes were detected to the Group Policy Objects
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_LINKTRANSITION - A change in link speed was detected between previous policy application and current policy application
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_LOGRSOP_TRANSITION - A change in RSoP logging was detected between the application of the previous policy and the application of the current policy.
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( X ) GPO_INFO_FLAG_FORCED_REFRESH - Forced Refresh is being applied. redo policies.
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_SAFEMODE_BOOT - windows safe mode boot flag
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_ASYNC_FOREGROUND - Asynchronous foreground refresh of policy
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Token (computer or user SID): S-1-5-18
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Abort Flag : Yes (0x313be090)
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] HKey Root : Yes (0x80000002)
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Deleted GPO List : No
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Changed GPO List : Yes
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Asynchronous Processing : Yes
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Status Callback : No (0x00000000)
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] WMI namespace : Yes (0x32273740)
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] RSoP Status : Yes (0x320cc7f4)
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Planning Mode Site : (none)
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Computer Target : No (0x00000000)
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] User Target : No (0x00000000)
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Calculated list relevance. [SUCCEEDED(S_FALSE)]
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ----- Changed - 0
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Options : ( ) GPO_FLAG_DISABLE - This GPO is disabled.
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GPO_FLAG_FORCE - Do not override the settings in this GPO with settings in a subsequent GPO.
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Options (raw) : 0x00000000
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Version : 19267878 (0x01260126)
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] GPC : LDAP://CN=Machine,CN={GUID-2},CN=Policies,CN=System,DC=SITE,DC=DOMAIN
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] GPT : \\SITE.DOMAIN\sysvol\SITE.DOMAIN\Policies\{GUID-2}\Machine
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] GPO Display Name : Default Domain Policy
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] GPO Name : {GUID-2}
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] GPO Link : ( ) GPLinkUnknown - No link information is available.
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GPLinkMachine - The GPO is linked to a computer (local or remote).
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GPLinkSite - The GPO is linked to a site.
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( X ) GPLinkDomain - The GPO is linked to a domain.
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GPLinkOrganizationalUnit - The GPO is linked to an organizational unit.
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GP Link Error
2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] lParam : 0x00000000
2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] Prev GPO : No
2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] Next GPO : Yes
2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] Extensions : [{00000000-0000-0000-0000-000000000000}{GUID-3}][{GUID-1}{GUID-3}][{GUID-4}{GUID-5}{GUID-6}{GUID-7}{GUID-8}][{GUID-9}{GUID-10}][{GUID-11}{GUID-5}{GUID-6}]
2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] lParam2 : 0x3146f978
2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] Link : LDAP://DC=SITE,DC=DOMAIN
2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] Purge GPH : C:\ProgramData\Microsoft\Group Policy\History\{GUID-2}\Machine\Preferences\Groups\Groups.xml
2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] Read GPE XML data file (592 bytes total).
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ----- Changed - 1
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Options : ( ) GPO_FLAG_DISABLE - This GPO is disabled.
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ( ) GPO_FLAG_FORCE - Do not override the settings in this GPO with settings in a subsequent GPO.
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Options (raw) : 0x00000000
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Version : 1245203 (0x00130013)
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] GPC : LDAP://CN=Machine,CN={GUID-12},CN=Policies,CN=System,DC=SITE,DC=DOMAIN
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] GPT : \\SITE.DOMAIN\sysvol\SITE.DOMAIN\Policies\{GUID-12}\Machine
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] GPO Display Name : Default Domain Controllers Policy
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] GPO Name : {GUID-12}
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] GPO Link : ( ) GPLinkUnknown - No link information is available.
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ( ) GPLinkMachine - The GPO is linked to a computer (local or remote).
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ( ) GPLinkSite - The GPO is linked to a site.
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ( ) GPLinkDomain - The GPO is linked to a domain.
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ( X ) GPLinkOrganizationalUnit - The GPO is linked to an organizational unit.
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ( ) GP Link Error
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] lParam : 0x00000000
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Prev GPO : Yes
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Next GPO : No
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Extensions : [{00000000-0000-0000-0000-000000000000}{GUID-3}][{GUID-1}{GUID-3}][{GUID-9}{GUID-10}]
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] lParam2 : 0x324e8198
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Link : LDAP://OU=Domain Controllers,DC=SITE,DC=DOMAIN
2014-10-21 11:16:54.127 [pid=0x3e8,tid=0xcd0] Purge GPH : C:\ProgramData\Microsoft\Group Policy\History\{GUID-12}\Machine\Preferences\Groups\Groups.xml
2014-10-21 11:16:54.127 [pid=0x3e8,tid=0xcd0] Read GPE XML data file (592 bytes total).
2014-10-21 11:16:54.143 [pid=0x3e8,tid=0xcd0] Completed get next GPO. [SUCCEEDED(S_FALSE)]
2014-10-21 11:16:54.143 [pid=0x3e8,tid=0xcd0] WQL : SELECT * FROM RSOP_PolmkrSetting WHERE polmkrBaseCseGuid = "{GUID-1}"
2014-10-21 11:16:54.143 [pid=0x3e8,tid=0xcd0] Purged 2 old RSoP entries.
2014-10-21 11:16:54.143 [pid=0x3e8,tid=0xcd0] Logging 2 new RSoP entries.
2014-10-21 11:16:54.159 [pid=0x3e8,tid=0xcd0] RSoP Entry 0
2014-10-21 11:16:54.174 [pid=0x3e8,tid=0xcd0] RSoP Entry 1
2014-10-21 11:16:54.174 [pid=0x3e8,tid=0xcd0] Completed get GPO list. [SUCCEEDED(S_FALSE)]
2014-10-21 11:16:54.174 [pid=0x3e8,tid=0xcd0] IsRsopPlanningMode() [SUCCEEDED(S_FALSE)]
2014-10-21 11:17:04.252 [pid=0x3e8,tid=0xcd0] Completed settings update (csePostProcess). [ hr = 0x800700b7 "Cannot create a file when that file already exists." ]
2014-10-21 11:17:04.252 [pid=0x3e8,tid=0xcd0] Completed CSE post-processing. [ hr = 0x800700b7 "Cannot create a file when that file already exists." ]
2014-10-21 11:17:04.267 [pid=0x3e8,tid=0xcd0] Leaving ProcessGroupPolicyExLocUsAndGroups() returned 0x000000b7 -
How to assign Action to multiple Users dynamically in GP
Hello Experts,
I have the following scenario in GP
I have created a Web Dynro GP Callable Object and from my Web Dynpro i need to a pass a list of Users to which a particular Action needs to be assigned.
I am able to return a single value from web dynpro to gp.
Can some one help me how to return a list of users to gp.
I have done the following: In the getDescription method I have added an attribute of multiplicity 1_N:
IGPStructureInfo outputStruct = technicalDescription.getOutputStructureInfo();
IGPAttributeInfo list1 = outputStruct.addAttribute("List1", IGPAttributeInfo.BASE_STRING);
list1.setMultiplicity(IGPAttributeInfo.MULITIPLICITY_1_N);
then in the complete method I am trying to set an Arraylist to this variable:
IGPStructure output = execContext.getOutputStructure();
output.setAttributeValue("List1", userList);
Here userList is an Arraylist which contains the list of User Id's..
However I get the following exception:
com.sap.caf.eu.gp.exception.api.GPInvocationException: Multiplicity of attribute with name List1 and namespace null does not allow single values to be set/received
at com.sap.caf.eu.gp.structure.impl.GPStructure.setAttributeValue(GPStructure.java:114)
Can someone help me in knowing how I can return a list as an output parameter to GP from Web Dynpro...
Regards
SundeepHi Srinivasan,
Of course the Role is Runtime defined...
I would brief you again the mapping that I have performed in the Design time at the processlevel.
From Web Dynpro I return a List of type String and Multiplicity 1..N.
I map this List with the leaf item User Identifier contained in the User List Input parameter of the Assign User to Process Role callable object.
However since the User Identifier parameter is of cardinality 0..1 only the first value in the returned list is getting assigned to it. Thus the task is getting assigned to only one user.
Now it is not possible in Design time to Group or consolidate parameters of different types. Thus the List which is of type String cannot be mapped to User List or the User_Item contained within it which are both of type Structure and multiple cardinality.
I even created a Structure in Web Dynpro of cardinality 1..N and withing it i included a List of type String and cardinality 1..N. Now I returned this Structure from Web Dynpro and tried to map it to the User Item Structure of the Assign User to Process Role Callable object, but doint this the task did not get assigned to any user..
One question:
Don't you think that in order for the task assignment to happen using the Assign User to Process Role Callable Object the leaf item User Identifier parameter contained in the User_List input parameter of this callable object needs to be populated with the required User Id's.
But if the cardinality of this parameter is always 0..1 , is it possible to achive the assignment of an Action to multiple Users at runtime using this Callable Object?
Can you please explain the parameter mapping you followed in order to achive this...
Regards
Sundeep
I want to ensure that you remain in the top 3 contributors in this forum
I will continue to reward points for your answers
Edited by: Sundeep Sethi on Sep 4, 2008 1:47 PM
Maybe you are looking for
-
Servlets/JDBC vs. servlets/EJB performance comparison/benchmark
I have a PHB who believes that EJB has no ___performance___ benefit against straightforward servlets/JSP/JDBC. Personally, I believe that using EJB is more scalable instead of using servlets/JDBC with connection pooling. However, I am at a lost on ho
-
Oracle 9i database server 64bit installing problem.
Hi , Can anyone provide me a suitable solution, iam installing oracle 9i database server 64 bit at Windows server 2003 64bit enterprise edition, it shows me some exception error and do not allow me to install. ERROR IS (The image file C:\oracle 9i db
-
How to format date faster than SimpleDateFormat
Hi All, Can someone tell me way to format the date faster than SimpleDateFormat. Thanks in advance. Cheers!! Puneet
-
Adobe Reader XI downloaded to my wife's laptop tonight. Windows 8.1. Open PDF, select Comments > comment dialog, then place icon on PDF and start editing. Small edits work fine. Large amounts of comment text, once you move off the icon and come b
-
Automatic approval for Self-registration with companies
Hi, I would like to automatically approve users who have self-registered themeselves. Is it possible to automatically approve users when they self-register with companies. Any help / suggestion is greatly appreciated. Rgds, Janvi.