Change to active directory based security

Hi,
I have installed and configured Essbase with shared services based security and not in standalone mode.
The client is now wanting to use active directory based security.
I have seen John Goodwin's (I'm not worthy!) excellent blog on active directory with standalone ( More to life than this...: Standalone Essbase using external authentication ), but as stated I am not on standalone.
Can anyone advise me how the config differs from what you need to do in standalone mode and also how to reinvoke the configuration tool post install / configuration?
Many thanks,
Robert.

You can add the external directory in Shared Services at any point.
Just follow the documentation - Oracle Enterprise Performance Management System Security Configuration Guide
Cheers
John
http://john-goodwin.blogspot.com/

Similar Messages

How to setup Wireless Clients MAC+Active Directory based acess

Dear Gents,
I want to setup Wireless Clients MAC+Active Directory based acess on AP 1242 standalone Wireless series .
Steps i have configured :
1) SSID manger under Open authentication : Selected with EAP.
2) under advacned Radius : s
MAC Address Authentication
MAC Addresses Authenticated by:
Authentication Server Only
3) Server Manger : Current server list
added the radius ip address 10.1.200.x
EAP Authentication
MAC Authentication
Accounting
Priority 1: < NONE >10.113.253.1010.1.200.23410.8.200.1510.15.200.15
Priority 1: < NONE >10.113.253.1010.1.200.23410.8.200.1510.15.200.15
Priority 1: < NONE >10.113.253.1010.1.200.23410.8.200.1510.15.200.15
Priority 2: < NONE >10.113.253.1010.1.200.23410.8.200.1510.15.200.15
Priority 2: < NONE >10.113.253.1010.1.200.23410.8.200.1510.15.200.15
Priority 2: < NONE >10.113.253.1010.1.200.23410.8.200.1510.15.200.15
Priority 3: < NONE >10.113.253.1010.1.200.23410.8.200.1510.15.200.15
Priority 3: < NONE >10.113.253.1010.1.200.23410.8.200.1510.15.200.15
Priority 3: < NONE >10.113.253.1010.1.200.23410.8.200.1510.15.200.15
From ACS - Radius we have choose a Group x( named as Mac-address group )
All the wireless Client ( laptops ) mac-address are added as add username option and enter username
as mac-address & enter the mac-address as pwd second option of password TAB.

Hi Akber,
I think you didnt understood what i was trying to say here :-( No problem..I will explain my theory again.Your requirment is to autheticate user from ACS internal database (you have already added the MAC address as the username on your ACS internal database) as well as from ACS external database (in your case this is AD).
What i was saying is when when authetication request comes to raidus server it checks its internal database and if it find a valid username and password (here it will the MAC address and password which you have entered to the ACS database) the ACS will not query the external database (in your case the AD) for authetication.
You can not have ACS to look in to both MAC and AD database at the same time.
Hope this clears your doubt.
Regards
Najaf

I have a task, that is i want to retrive the details from active directory based on name and i want show that details into grid view.

Hi All,
I have a task, that is i want to retrive the details from active directory based on name and i want show that details into grid view.
Can any one help how to start.
Thanks in advance!

Hi AnilKarthik,
You can get user details by name using DirectoryService namespace. Then you can create a DataTable to restore the information and then bind to the SharePoint GridView.
Here are some deatiled code demos for your reference:
how to get userdetails from Active Directory based on username using asp.net:
http://www.aspdotnet-suresh.com/2011/03/how-to-get-userdetails-from-active.html
How to get User Data from the Active Directory:
http://www.codeproject.com/Articles/6778/How-to-get-User-Data-from-the-Active-Directory
Using SPGridView to bound to list data in SharePoint:
http://nishantrana.me/2009/03/23/using-spgridview-to-bound-to-list-data-in-sharepoint/
Best Regards
Zhengyu Guo
TechNet Community Support

Changes in Active Directory not reflected in SharePoint user info

I have change the manager & name in Active directory but it's not reflecting in sharepoint. I found one command
stsadm -o migrateuser
   -oldlogin <domain\name>
   -newlogin <domain\name>
   [-ignoresidhistory]
But i don't want to do one by one i have many users is there any command for migrate all updated user information

The migrateuser command is really only when a user's ID changes. Making changes such as name and manager should still be reflected under the original ID. If the changes doesn't propagate, ensure that your User Profile Service Sync completed successfully.
Check for errors and address any you find. A successful sync will propagate the changes properly.
Start here:
http://technet.microsoft.com/en-us/library/ff382639(v=office.15).aspx
I trust that answers your question...
Thanks
C
|
RSS |
http://crayveon.com/blog |
SharePoint Scripts | Twitter |
Google+ | LinkedIn |
Facebook | Quix Utilities for SharePoint

Using Active Directory - either Secure or Distribution Groups

Reviewing the security documentation for UCM 10g R3, it appears that we should only map to Active Directory Secure Groups and not Distribution Groups, perhaps even if they are marked "secure"? Does anyone know if this is a technical limitation or a best practice? Our organization has processes in place to prevent ad-hoc updates to Distribution lists and I'd like to map UCM using this group type in AD because SQL statements can keep the membership list current in a Distribution Group.

dll is not a good candidate for the Agent, this has to be an application(exe), and the server onces it identifies the PCs should push this Agent to those PCs and the Application should have the logic to Phone home etc...

Change in Active Directory Domain where a SAP landscape is installed

Dear fellow forum members,
the IT team of one of our customers is planning a change in their Microsoft Active Domain forest in their LAN: as their SAP ERP systems are all domain installations, they have asked me, as their BASIS consultant, if this activity could harm in any way their SAP landscape.
The SAP ERP Systems are domain installations on two Windows Server 2008 R2 64 bit hosts.
This is the activity they plan to do is to replace an old Windows Server 2003 domain controller with a Windows Server 2012 domain controller. These are the steps they will do:
1) Add the new Windows Server 2012 domain controller to the forest;
2) Move the main roles from the old Windows Server 2003 domain controller to the new 2012 one, following the procedure recommended by Microsoft;
3) Remove the old Windows 2003 R2 domain controller from the forest.
During all the procedure, their current Windows Server 2008 domain controller will remain active and functional. At the end of the procedure, the domain will then be updated to a Windows Server 2008 structure, from the actual 2003.
I can't see any problem in this procedure: at least one domain controller will always remain active so the SAP users <sid>adm and SAPService<SID> will be able to authenticate on the domain with no interruptions. Also the SAP hosts won't change name, FQDN, IP address or configuration.
But I'm not a Microsoft AD expert and this procedure can't be tested beforehand, because all the SAP systems belong to the same domain obviously.
I've searched through the SAP knowledge base and I can't find any note or document that is relevant to this activity.
I've also opened a ticket to SAP, but they basically replied that the Active Directory is a matter for the Microsoft consultants, not SAP. They also recommended I post my question on the forum so here I am.
So I'd like to ask you if you foresee any problems with this procedure, and if you can recommend preparation activities or any other kind of precautions.
Thanks, kind regards.
M

Hi Marcello,
I can tell you that the Network Operations group at my organization have upgraded the domain controllers a few times (Windows 2000 -> Windows 2003, then Windows 2003 -> Windows 2012), and other than some warning about potential disruptions during the maintenance window, they didn't otherwise even include the SAP Basis group in the discussion! So, it happened, we did nothing special for SAP to prepare (nor afterwards), and basically we didn't even notice. It made no difference to SAP. Other aspects of network/domain functionality, especially our Exchange email server, experienced more disruption than SAP did.
So, in conclusion, I think that your IT team can proceed, and other than keeping an eye on things and testing basic things, like network communication, afterwards, there isn't much you need to do. Your main concern is that there always be a functioning domain controller (and DNS server). Do they have a rollback plan if things go south for them?
Regards,
Matt

OSX 10.8.2 Change expired Active Directory password at logon screen doesnt work

Hello
My system:
MacBook Pro 2012
OSX 10.8.2
I have a problem with changing e expired Active Directory password at the logon screen.
If i type in the old and the new passwort, it appears a message with following text:
"The password does not meet the requirements of the server"
Even if i type in a password like Tes0t!*2013, the message appears and i can not
change the password.
I have already disabled the "password must meet the password complexity requierements" policy in our default domain policy.
Does anyone know how to solve this problem?
Thanks.
Dani

Safe Boot , (holding Shift key down at bootup), use Disk Utility from there to Repair Permissions, test if things work OK in Safe Mode.
Then move these files to the Desktop...
/Users/YourUserName/Library/Preferences/com.apple.finder.plist
/Users/YourUserName/Library/Preferences/com.apple.systempreferences.plist
/Users/YourUserName/Library/Preferences/com.apple.sidebarlists.plist
/Users/YourUserName/Library/Preferences/com.apple.desktop.plist
/Users/YourUserName/Library/Preferences/com.apple.recentitems.plist
Reboot & test.
PS. Safe boot may stay on the gray radian for a long time, let it go, it's trying to repair the Hard Drive.

Active Directory-based VM connection. (Jail 1 user to same VM everytime without IP/HostName)

Greetings, fellow techies!!
I come to you with what may seem as an odd request.
My firm is considering building a thin-client solution for certain clients. We (I) normally operate with ESXi and other VMWare-related solutions. However, we have decided to go via Hyper-V Server 2012 (Core, not Windows Server with a Role) for
this particular scenario. So, enough chatter.
Can anyone please inform me how or even if this can be done?: I would like to use the Hyper-V server as a "pointer" to VMs depending on what username is given. For example: On my thin-client, I would only specify the Hyper-V server. At that
point, I want to enter Windows Domain credentials. Depending on what I enter as username, I want it to go to a certain VM.
Let's say I have 5 VMs in Hyper-V (Hyper-V IP is 192.168.1.200). One of their HostName is Tommy-PC, and its IP is 192.168.1.201. Now when the user boots their thin client, which is pointing to the Hyper-V at 192.168.1.200, he would type his username and
password and it will automatically send him to HostPC "Tommy-PC(192.168.1.201)" without ever typing in or storing the IP or HostName. In a sense it would be ActiveDirectory/User-based connection, where the destination is pre-defined somewhere. Where
is that somewhere?! :)
Thanks in advance for your replies.
Really, anything that will help me make Hyper-V as a HUB of sorts, rather than using RDP with direct IP's/hostnames to the hosts. We want as little user-error-margin as possible; so doing this as a pre-defined rule seems the best route.
*Update*Theory. Just remembered the Personal Virtual Desktop... Or rather I saw it in the AD and remembered haha. So I think if I make the DC into an RDS host or the Hyper-V, via the Remote Desktop Connection Manager, I should be able to point. Let's see!

Back in the day I had thin clients that had hard coded RDP connections to a terminal server host.
Each thin client could logon by itself, in which case there was one common session per client, or I could force each user to logon individually.
Again, it all depends on what you are looking for.
I got the impression from your question that you are simply using the Virtual Center client to authenticate users and the VM that they get access to, then delivering a console.
Unless there is a different objective.
I don't think we really understand what you are looking for.
Brian Ehlert
http://ITProctology.blogspot.com
Learn. Apply. Repeat.
Disclaimer: Attempting change is of your own free will.

How to delegate the users creation permission on OU in active directory using security tab

hi expert,
I trying to give user creation permission to a security group on OU using security tab. I have given the following permission :-
1. Object tab ---> Applies to = this object and all descedent objects ---> permission = User creation object
but this is not working. User from this security group are not able to create users. getting permisson related error.
Please suggest.
Thanks

I trying to give user creation permission to a security group on OU using security tab. I have given the following permission :-
1. Object tab ---> Applies to = this object and all descedent objects ---> permission = User creation object
but this is not working. User from this security group are not able to create users. getting permisson related error.
this isn't really related to GP at all, it's a question for a DS forum:
https://social.technet.microsoft.com/Forums/en-US/home?forum=winserverDS
You need to grant additional permissions - user creation is not enough, on it's own...
Why not use the Delegation of Control Wizard?
http://technet.microsoft.com/en-au/library/cc732524.aspx
http://www.howtogeek.com/50166/using-the-delegation-of-control-wizard-to-assign-permissions-in-server-2008/
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

ISE Authentcation via Active Directory based on SSID and AD Group

Hi,
I am deploying ISE with WLC 7.4. I have two SSID(s) running in my network 1. Corporate & 2. Services. I have a domain setup lets say "AD.com" with 4 groups 1. Corporate, 2. Services, 3. Employees, 4. Contractors.
Here is an example of the scenario that I want:
AD.com Group : Corporate's User : 1. C_USER1
                                                    2. C_USER2
                                                    3. C_USER3
                                                    4. C_USER4
                                                    5. C_USER5
AD.com Group : Services's User :   1. S_USER1
                                                    2. S_USER2
                                                    3. S_USER3
                                                    4. S_USER4
                                                    5. S_USER5
Now what I want to do is have 802.1x authentication on my Corporate SSID that will check in AD.com, ONLY AND in ONLY corporate group for authentication. That is only C_USER1 to C_USER5 are allowed to connect to it. Users from any other AD group shouldnt be authenticated on this SSID.
The same for the services group & SSID.
Thanks.
Usama

Kindly   review:
https://www.cisco.com/en/US/docs/solutions/Enterprise/Security/TrustSec_2.0/trustsec_2.0_dig.pdf

Changing Your Active Directory Domain Name

Our organization is going to need to rename our current AD domain. We're currently at Server 2012 R2 AD level. We're at the very beginning planning level and are looking for some planning guidance. I realize that one can rename a domain but that sounds a
bit too tricky in theory to us. Setting up a new domain would be the best for us in the long run we think.
Are there any planning guides out there for such a change to AD?
Orange County District Attorney

In terms of a rename, the technet from Ed it perfect. A migration is another option -
http://technet.microsoft.com/en-us/library/cc974332(v=WS.10).aspx
This means setting the new domain up clean and then migrating the objects. Really depends upon how big the existing domain is. If it's large, then migrating the objects in an automated way is easier than recreating them in a new domain by
hand. Food for thought.

Active Directory users unable to change passwords

I have about 10 Macs running 10.4.11 that are bound to Active Directory (Windows 2000 Server).
Users see the warning that their password is about to expire. However, for users who have a local account on the machine, when they attempt to change their password via System Prefs, only the local password is changed - the Active Directory password remains unchanged.
For users who do not have a local account on the machine, this error occurs:
"You cannot change your password to the password you entered. Your system administrator may not allow you to change your password or there was some other problem with your password."
We have the following password requirements in place via Group Policy: complexity, length, min age (2 days), max age (90 days), history (last 4 remembered).
Has anyone else encountered this?
Thanks.

Sign me up as well. I dont remember this being an issue before 10.5.5. I notice that it makes directory services crash and makes a crash report. I'll paste below.
Note: the time appears to be synced properly with the domain controller-BUT i can an error in the console saying:
com.apple.service_helper[6492]: launchctl: Error unloading: org.ntp.ntpd
com.apple.launchd[1] (org.ntp.ntpd): Unknown key: SHAuthorizationRight
I am able to communicate with time server via ntpq -inp
Directory Service Crash Report:
Process: DirectoryService [34]
Path: /usr/sbin/DirectoryService
Identifier: DirectoryService
Version: ??? (???)
Code Type: X86 (Native)
Parent Process: launchd [1]
Date/Time: 2008-12-05 16:38:09.091 -0800
OS Version: Mac OS X 10.5.5 (9F33)
Report Version: 6
Exception Type: EXCBADACCESS (SIGSEGV)
Exception Codes: KERNINVALIDADDRESS at 0x00000000c018096b
Crashed Thread: 2
Thread 0:
0 libSystem.B.dylib 0x94a734a6 machmsgtrap + 10
1 libSystem.B.dylib 0x94a7ac9c mach_msg + 72
2 com.apple.CoreFoundation 0x948ef0ce CFRunLoopRunSpecific + 1790
3 com.apple.CoreFoundation 0x948efd54 CFRunLoopRun + 84
4 DirectoryService 0x000173ff main + 2767
5 DirectoryService 0x00016912 start + 54
Thread 1:
0 libSystem.B.dylib 0x94a734a6 machmsgtrap + 10
1 libSystem.B.dylib 0x94a7ac9c mach_msg + 72
2 com.apple.CoreFoundation 0x948ef0ce CFRunLoopRunSpecific + 1790
3 com.apple.CoreFoundation 0x948efd54 CFRunLoopRun + 84
4 DirectoryService 0x000235bc CPluginRunLoopThread::ThreadMain() + 222
5 ...ectoryServiceCore.Framework 0x00167f83 DSCThread::Run() + 39
6 ...ectoryServiceCore.Framework 0x0016818e DSLThread::_RunWrapper(void*) + 84
7 libSystem.B.dylib 0x94aa46f5 pthreadstart + 321
8 libSystem.B.dylib 0x94aa45b2 thread_start + 34
Thread 2 Crashed:
0 libobjc.A.dylib 0x94de1688 objc_msgSend + 24
1 ...oryService.Active Directory 0x00305eaf -[ADSPluginNode changePassword:recordName:oldPassword:newPassword:] + 767
2 ...oryService.Active Directory 0x003415ee BaseDirectoryPlugin::DoSimplePasswordChange(sBDPINodeContext*, __CFString const*, tDataBuffer*) + 682
3 ...oryService.Active Directory 0x00340b76 BaseDirectoryPlugin::DoAuthentication(sDoDirNodeAuth*, char const*, CDSAuthParams&) + 718
4 ...oryService.Active Directory 0x00346aca BaseDirectoryPlugin::ProcessRequest(void*) + 1376
5 ...oryService.Active Directory 0x0030ebae ADSPlugin::ProcessRequest(void*) + 66
6 ...oryService.Active Directory 0x0033fc5c _ProcessRequest(void*, void*) + 92
7 DirectoryService 0x00002d8d CRequestHandler::HandlePluginCall(sComData**) + 775
8 DirectoryService 0x00003b48 CRequestHandler::HandleRequest(sComData**) + 82
9 DirectoryService 0x0002ec71 dsmigdo_apicall + 543
10 DirectoryService 0x00060df4 Xapicall + 407
11 DirectoryService 0x00060aa0 DirectoryServiceMIG_server + 109
12 DirectoryService 0x00026d08 dsmigdemux_notify(mach_msg_headert*, machmsg_headert*) + 86
13 libSystem.B.dylib 0x94ae8ed3 machmsgserver + 343
14 DirectoryService 0x000237f5 CMigHandlerThread::ThreadMain() + 303
15 ...ectoryServiceCore.Framework 0x00167f83 DSCThread::Run() + 39
16 ...ectoryServiceCore.Framework 0x0016818e DSLThread::_RunWrapper(void*) + 84
17 libSystem.B.dylib 0x94aa46f5 pthreadstart + 321
18 libSystem.B.dylib 0x94aa45b2 thread_start + 34
Thread 3:
0 libSystem.B.dylib 0x94a7a68e _semwaitsignal + 10
1 libSystem.B.dylib 0x94acb8e0 pthreadcondtimedwait$UNIX2003 + 72
2 ...ectoryServiceCore.Framework 0x00168409 DSEventSemaphore::WaitForEvent(long) + 191
3 DirectoryService 0x00043200 CSearchPlugin::CheckNodes(tDirPatternMatch, int*, DSEventSemaphore*) + 1120
4 DirectoryService 0x000432f9 CSearchPluginHandlerThread::ThreadMain() + 101
5 ...ectoryServiceCore.Framework 0x00167f83 DSCThread::Run() + 39
6 ...ectoryServiceCore.Framework 0x0016818e DSLThread::_RunWrapper(void*) + 84
7 libSystem.B.dylib 0x94aa46f5 pthreadstart + 321
8 libSystem.B.dylib 0x94aa45b2 thread_start + 34
Thread 4:
0 libSystem.B.dylib 0x94a7a68e _semwaitsignal + 10
1 libSystem.B.dylib 0x94acb8e0 pthreadcondtimedwait$UNIX2003 + 72
2 ...ectoryServiceCore.Framework 0x00168409 DSEventSemaphore::WaitForEvent(long) + 191
3 DirectoryService 0x00043200 CSearchPlugin::CheckNodes(tDirPatternMatch, int*, DSEventSemaphore*) + 1120
4 DirectoryService 0x000432f9 CSearchPluginHandlerThread::ThreadMain() + 101
5 ...ectoryServiceCore.Framework 0x00167f83 DSCThread::Run() + 39
6 ...ectoryServiceCore.Framework 0x0016818e DSLThread::_RunWrapper(void*) + 84
7 libSystem.B.dylib 0x94aa46f5 pthreadstart + 321
8 libSystem.B.dylib 0x94aa45b2 thread_start + 34
Thread 5:
0 libSystem.B.dylib 0x94aa3f66 kevent + 10
1 libSystem.B.dylib 0x94aa46f5 pthreadstart + 321
2 libSystem.B.dylib 0x94aa45b2 thread_start + 34
Thread 6:
0 libSystem.B.dylib 0x94ac35e2 select$DARWIN_EXTSN + 10
1 libSystem.B.dylib 0x94aa46f5 pthreadstart + 321
2 libSystem.B.dylib 0x94aa45b2 thread_start + 34
Thread 7:
0 libSystem.B.dylib 0x94ab61d5 syscall + 5
1 ...ectoryServiceCore.Framework 0x00167f83 DSCThread::Run() + 39
2 ...ectoryServiceCore.Framework 0x0016818e DSLThread::_RunWrapper(void*) + 84
3 libSystem.B.dylib 0x94aa46f5 pthreadstart + 321
4 libSystem.B.dylib 0x94aa45b2 thread_start + 34
Thread 8:
0 libSystem.B.dylib 0x94a734a6 machmsgtrap + 10
1 libSystem.B.dylib 0x94a7ac9c mach_msg + 72
2 libSystem.B.dylib 0x94ad0dc1 machmsg_serveronce + 318
3 DirectoryService 0x00023768 CMigHandlerThread::ThreadMain() + 162
4 ...ectoryServiceCore.Framework 0x00167f83 DSCThread::Run() + 39
5 ...ectoryServiceCore.Framework 0x0016818e DSLThread::_RunWrapper(void*) + 84
6 libSystem.B.dylib 0x94aa46f5 pthreadstart + 321
7 libSystem.B.dylib 0x94aa45b2 thread_start + 34
Thread 2 crashed with X86 Thread State (32-bit):
eax: 0x0028c030 ebx: 0x94fa606b ecx: 0x94e7d334 edx: 0xc018094b
edi: 0x00000001 esi: 0x00600fe0 ebp: 0xb01027e8 esp: 0xb0102678
ss: 0x0000001f efl: 0x00010206 eip: 0x94de1688 cs: 0x00000017
ds: 0x0000001f es: 0x0000001f fs: 0x0000001f gs: 0x00000037
cr2: 0xc018096b
Binary Images:
0x1000 - 0x10ffff +DirectoryService ??? (???) <4c56e8e1e57b70096f86b84a52d49c0a> /usr/sbin/DirectoryService
0x160000 - 0x16eff3 com.apple.DirectoryServiceCore.Framework 3.5.5 (3.5.5) <29a684df6d0a0fafe87aeabaa5ca72c9> /System/Library/PrivateFrameworks/DirectoryServiceCore.framework/Versions/A/Dir ectoryServiceCore
0x19b000 - 0x19dffc apop.so ??? (???) <af168e2e8b86c66628d8b1d44b646cb7> /usr/lib/sasl2/apop.so
0x1a1000 - 0x1a9fff digestmd5WebDAV.so ??? (???) <192fc897aeea8b4c8fe66dcef8137a95> /usr/lib/sasl2/digestmd5WebDAV.so
0x1ca000 - 0x1ccfff libanonymous.2.so ??? (???) <161902c9ed78dce78b61125c7c155f0f> /usr/lib/sasl2/libanonymous.2.so
0x1e3000 - 0x1e5ffc libcrammd5.2.so ??? (???) <c917c89eefddcfcacf48c939c3af12aa> /usr/lib/sasl2/libcrammd5.2.so
0x1e9000 - 0x1f2ffb libdigestmd5.2.so ??? (???) <c8595204acd0e7cb362b33d008693019> /usr/lib/sasl2/libdigestmd5.2.so
0x1f6000 - 0x1fafff libgssapiv2.2.so ??? (???) <a47ee23249e7c36aee418a6e7fd3a502> /usr/lib/sasl2/libgssapiv2.2.so
0x300000 - 0x358ffc com.apple.DirectoryService.Active Directory 1.6.3 (1.6.3) <aeaf0f5bed2b48a776a4567154f3fa66> /System/Library/Frameworks/DirectoryService.framework/Resources/Plugins/Active Directory.dsplug/Contents/MacOS/Active Directory
0x377000 - 0x38ffe2 dhx.so ??? (???) <8144ab11b8201f120dc87f3ec57d0714> /usr/lib/sasl2/dhx.so
0x39e000 - 0x3a0ffc login.so ??? (???) <03d28ec908a6ed9abee1b25fe87716ef> /usr/lib/sasl2/login.so
0x3a4000 - 0x3abffc libotp.2.so ??? (???) <0b7c8cd165835331c586e49465ef1186> /usr/lib/sasl2/libotp.2.so
0x3b5000 - 0x3b7ffc libplain.2.so ??? (???) <5992f1149ff6cc7fadafa2bfd4ecc00a> /usr/lib/sasl2/libplain.2.so
0x3bb000 - 0x3c0ffc libpps.so ??? (???) <31fe03649320e2f8b5404b179684d23a> /usr/lib/sasl2/libpps.so
0x3c6000 - 0x3c9fff mschapv2.so ??? (???) <5c0fc0400a600f7c2d29ecbf95bc6017> /usr/lib/sasl2/mschapv2.so
0x3cd000 - 0x3cfffc shadow_auxprop.so ??? (???) <b90c297da0fdf1bf0252ea496fbe83f2> /usr/lib/sasl2/shadow_auxprop.so
0x3d5000 - 0x3d7ffd smb_lm.so ??? (???) <b0e54904b8dcecaa7d98c39841d03528> /usr/lib/sasl2/smb_lm.so
0x3db000 - 0x3ddffc smb_nt.so ??? (???) <f927d77c27a795c0e7bb8478a47b83ed> /usr/lib/sasl2/smb_nt.so
0x3e1000 - 0x3e4ff0 smb_ntlmv2.so ??? (???) <a31a5d3a2184c97ecb945c6cbd308da9> /usr/lib/sasl2/smb_ntlmv2.so
0x3f8000 - 0x3f9fff com.apple.odlocate 1.1 (1.1) <58ace87ddfcba42df58856cabf3b6633> /System/Library/KerberosPlugins/KerberosFrameworkPlugins/ODLocate.bundle/Conten ts/MacOS/ODLocate
0x436000 - 0x437ffc com.apple.KerberosHelper.LKDCLocate 1.1 (1.0) <cec0029c7e0345fee6e22aac185376c7> /System/Library/KerberosPlugins/KerberosFrameworkPlugins/LKDCLocate.bundle/Cont ents/MacOS/LKDCLocate
0x8fe00000 - 0x8fe2da53 dyld 96.2 (???) <14ac3b684fa5a31932fa89c4bba7a29b> /usr/lib/dyld
0x90315000 - 0x9039cff7 libsqlite3.0.dylib ??? (???) <6978bbcca4277d6ae9f042beff643f7d> /usr/lib/libsqlite3.0.dylib
0x91d29000 - 0x91d54fe7 libauto.dylib ??? (???) <42d8422dc23a18071869fdf7b5d8fab5> /usr/lib/libauto.dylib
0x91d55000 - 0x9202fff3 com.apple.CoreServices.CarbonCore 786.6 (786.6) <5682aae1e2cf5ae750d5a4dea98c084c> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonC ore.framework/Versions/A/CarbonCore
0x922cf000 - 0x92313feb com.apple.DirectoryService.PasswordServerFramework 3.0.3 (3.0.3) <8135bb4f34a3bf02b8c2ca869fe33a42> /System/Library/PrivateFrameworks/PasswordServer.framework/Versions/A/PasswordS erver
0x92793000 - 0x92812ff5 com.apple.SearchKit 1.2.1 (1.2.1) <3140a605db2abf56b237fa156a08b28b> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchK it.framework/Versions/A/SearchKit
0x92891000 - 0x928a7fff com.apple.DictionaryServices 1.0.0 (1.0.0) <ad0aa0252e3323d182e17f50defe56fc> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Diction aryServices.framework/Versions/A/DictionaryServices
0x928a8000 - 0x928dffff com.apple.SystemConfiguration 1.9.2 (1.9.2) <8b26ebf26a009a098484f1ed01ec499c> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfi guration
0x92964000 - 0x929adfef com.apple.Metadata 10.5.2 (398.22) <a6b676925dd832780daf991e79adfebd> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadat a.framework/Versions/A/Metadata
0x929ae000 - 0x929bcffd libz.1.dylib ??? (???) <5ddd8539ae2ebfd8e7cc1c57525385c7> /usr/lib/libz.1.dylib
0x92a17000 - 0x92aa3ff7 com.apple.LaunchServices 290 (290) <61af37aac50984d220dd176f777e3b72> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchS ervices.framework/Versions/A/LaunchServices
0x92aa4000 - 0x92bdcff7 libicucore.A.dylib ??? (???) <3d8fdaf51c2664ab620f1688203caf26> /usr/lib/libicucore.A.dylib
0x939bf000 - 0x939c3fff com.apple.OpenDirectory 10.5 (10.5) <e7e4507f5ecd8c8cdcdb2fc0675da0b4> /System/Library/PrivateFrameworks/OpenDirectory.framework/Versions/A/OpenDirect ory
0x93ecd000 - 0x93ed1fff libmathCommon.A.dylib ??? (???) /usr/lib/system/libmathCommon.A.dylib
0x93f4d000 - 0x93f4dffa com.apple.CoreServices 32 (32) <2fcc8f3bd5bbfc000b476cad8e6a3dd2> /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x94105000 - 0x94123fff libresolv.9.dylib ??? (???) <a8018c42930596593ddf27f7c20fe7af> /usr/lib/libresolv.9.dylib
0x94124000 - 0x941a8fe3 com.apple.CFNetwork 339.5 (339.5) <c6565c13b0356e1d4bb99a68398d558b> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwo rk.framework/Versions/A/CFNetwork
0x94569000 - 0x94619fff edu.mit.Kerberos 6.0.12 (6.0.12) <da7253e3fb7e47e46cb46d47ed320ffc> /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
0x9485e000 - 0x9487cff3 com.apple.DirectoryService.Framework 3.5.5 (3.5.5) <4b81063df189bc462f012a169474fcbc> /System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryServi ce
0x9487d000 - 0x949affff com.apple.CoreFoundation 6.5.4 (476.15) <e2869ad6dc1dd289f21b305b0bea9158> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x94a0c000 - 0x94a13fe9 libgcc_s.1.dylib ??? (???) <f53c808e87d1184c0f9df63aef53ce0b> /usr/lib/libgcc_s.1.dylib
0x94a14000 - 0x94a71ffb libstdc++.6.dylib ??? (???) <04b812dcec670daa8b7d2852ab14be60> /usr/lib/libstdc++.6.dylib
0x94a72000 - 0x94bd2ff3 libSystem.B.dylib ??? (???) <98fc91f31f185411ddc46d3225e9af55> /usr/lib/libSystem.B.dylib
0x94dcc000 - 0x94eacfff libobjc.A.dylib ??? (???) <7b92613fdf804fd9a0a3733a0674c30b> /usr/lib/libobjc.A.dylib
0x94ead000 - 0x94ebcfff libsasl2.2.dylib ??? (???) <b9e1ca0b6612e280b6cbea6df0eec5f6> /usr/lib/libsasl2.2.dylib
0x94f87000 - 0x94f8effe libbsm.dylib ??? (???) <d25c63378a5029648ffd4b4669be31bf> /usr/lib/libbsm.dylib
0x94fa0000 - 0x9521bfe7 com.apple.Foundation 6.5.6 (677.21) <5cfa0aa8b9b43193955d601ba6c2591a> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x952ea000 - 0x9539cffb libcrypto.0.9.7.dylib ??? (???) <69bc2457aa23f12fa7d052601d48fa29> /usr/lib/libcrypto.0.9.7.dylib
0x953fd000 - 0x95421feb libssl.0.9.7.dylib ??? (???) <c7359b7ab32b5f8574520746e10a41cc> /usr/lib/libssl.0.9.7.dylib
0x95422000 - 0x954dcfe3 com.apple.CoreServices.OSServices 226.5 (226.5) <2a135d4fb16f4954290f7b72b4111aa3> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServi ces.framework/Versions/A/OSServices
0x95ca1000 - 0x95e6ffff com.apple.security 5.0.4 (34102) <f01d6cbd6a0f24f6c13952ed448e77d6> /System/Library/Frameworks/Security.framework/Versions/A/Security
0x966ac000 - 0x966bdffe com.apple.CFOpenDirectory 10.5 (10.5) <6a7f55108d77db7384d0e2219d07e9f8> /System/Library/PrivateFrameworks/OpenDirectory.framework/Versions/A/Frameworks /CFOpenDirectory.framework/Versions/A/CFOpenDirectory
0x96d5e000 - 0x96e3fff7 libxml2.2.dylib ??? (???) <1baef3d4972ee789d8fa6c1fa44da45c> /usr/lib/libxml2.2.dylib
0x96e40000 - 0x96e6ffe3 com.apple.AE 402.2 (402.2) <e01596187e91af5d48653920017b8c8e> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.fram ework/Versions/A/AE
0x96e70000 - 0x96e94fff libxslt.1.dylib ??? (???) <4933ddc7f6618743197aadc85b33b5ab> /usr/lib/libxslt.1.dylib
0x96e95000 - 0x96e9dfff com.apple.DiskArbitration 2.2.1 (2.2.1) <75b0c8d8940a8a27816961dddcac8e0f> /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x96f06000 - 0x96f91fff com.apple.framework.IOKit 1.5.1 (???) <324526f69e1443f2f9fb722cc88a23ec> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x96f93000 - 0x96fc5fff com.apple.LDAPFramework 1.4.5 (110) <cc04500cf7b6edccc75bb3fe2973f72c> /System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
0xfffe8000 - 0xfffebfff libobjc.A.dylib ??? (???) /usr/lib/libobjc.A.dylib

Changes in Microsoft Active Directory Services into a file

I am in need of sample code to capture changes in Active Directory services into a flat file.
Here is my requirement:
I would like to capture user information changes from the Active directory server into a flat file.
For an example, When a user is newly created in Actives Directory Server, I need to Capture that user info and write into a flat file. Similarly for update and delete user in Activer Directory server, i need to capture the changes and write into a file.
Would appreciate, if any could help me on this
Thanks in advance
Thanks
Kumar

Refer to:
JNDI, Active Directory & Persistent Searches (part 1) http://forum.java.sun.com/thread.jspa?threadID=578338&tstart=200
There was another topic that I posted called JNDI, Active Directory and Persistent Searches (part 2) in which I described teh LDAPNotification Control.
It had the following URL http://forum.java.sun.com/thread.jspa?threadID=578342&tstart=200 however it seems as though I have suffered another case of the forum losing my posts.

Active Directory password change error

I have about 10 Macs running 10.4.11 that are bound to Active Directory (Windows 2000 Server).
Users see the warning that their password is about to expire. However, for users who have a local account on the machine, when they attempt to change their password via System Prefs, only the local password is changed - the Active Directory password remains unchanged.
For users who do not have a local account on the machine, this error occurs:
"You cannot change your password to the password you entered. Your system administrator may not allow you to change your password or there was some other problem with your password."
We have the following password requirements in place via Group Policy: complexity, length, min age (2 days), max age (90 days), history (last 4 remembered).
Oddly, I myself am able to change my Active Directory password just fine via System Prefs. Thinking it was a permissions issue, I created an account with the same AD permissions as mine, but no dice. Oddly, I logged into a different Mac and attempted to change my password there, but received the above error. So not only am I the only one able to change their password, but I can only do this on one of the computers.
Can anyone explain what exactly happens after you click the "change password" button, in terms of what kind of request is sent to our domain controller, and how the domain controller handles that? I'm hoping maybe that will help me to understand what is going wrong.
Thanks.

count me in on the issue as well. this has not always been the case for us. the console shows the directory services crashing and making a crash report. i'd really appreciate a fix for this.
Below is the activity from the console log upon attempting to change the pass.
12/8/08 12:19:17 PM ReportCrash[1045] Formulating crash report for process DirectoryService[857]
12/8/08 12:19:17 PM com.apple.launchd[1] (com.apple.DirectoryServices[857]) Exited abnormally: Segmentation fault
12/8/08 12:19:17 PM DirectoryService[1046] Launched version 5.5 (v514.23)
12/8/08 12:19:17 PM DirectoryService[1046] Improper shutdown detected
12/8/08 12:19:17 PM ReportCrash[1045] Saved crashreport to /Library/Logs/CrashReporter/DirectoryService2008-12-08-121916localhost.crash using uid: 0 gid: 0, euid: 0 egid: 0
12/8/08 12:19:21 PM com.apple.DirectoryServices[1046] Enter machine password:
12/8/08 12:19:22 PM com.apple.DirectoryServices[1046] Enter machine password:
12/8/08 12:19:24 PM com.apple.DirectoryServices[1046] DNS update failed!
12/8/08 12:19:39 PM com.apple.DirectoryServices[1046] DirectoryService(1046,0xb031c000) malloc: * error for object 0x94de1a40: Non-aligned pointer being freed (2)
12/8/08 12:19:39 PM DirectoryService[1046] DirectoryService(1046,0xb031c000) malloc: * error for object 0x94de1a40: Non-aligned pointer being freed (2)
* set a breakpoint in mallocerrorbreak to debug
12/8/08 12:19:39 PM com.apple.DirectoryServices[1046] * set a breakpoint in mallocerrorbreak to debug
12/8/08 12:19:39 PM DirectoryService[1046] Failed to changed computer password in Active Directory domain calacademy.org
12/8/08 12:19:39 PM com.apple.DirectoryServices[1046] Enter machine password:
12/8/08 12:19:40 PM com.apple.DirectoryServices[1046] Successfully registered hostname with DNS

Lync trial and Active Directory changes

Hi,
I want to install a trial of Lync server and when I install it says I need to prepare Active Directory
I only want to test Lync but I do not want to make unnecessary permanant changes to Active Directory.
Should I proceed with preparing Active Directory? What happens to active directory if I later uninstall the Lync server?
Thank you.
http://peteroy.blogspot.com/

If you don't have a test environment and have to make the changes to production then they will be permanent.
You cannot remove changes applied to an Active Directory Schema. The only option there would be to perform an Active Directory Restore to a backup saved prior top the Schema extension. Very messy!
If you decide not to proceed with Lync there will be no harm to the system other than unused schema extensions.

Change to active directory based security

Similar Messages

Maybe you are looking for