Cisco ISE Process Flow with Active Directory

Hi guys,
Today I did a lab and see this note at Authentication Policy Interface. This note is:
Note: For authentications using PEAP, LEAP, EAP-FAST or RADIUS MSCHAP it is not possible to continue processing when authentication fails or user is not found. If continue option is selected in these cases, requests will be rejected.
Then I thought that the best way to configure authetication policy for Flex Auth: Dot1x (with Active Directory) > MAB (Internal Endpoint) > CWA (Guest and other user) will be using EAP-TLS authentication protocol.
Is this possible using another protocol instead of EAP-TLS (which is required client certificate has already been installed)? Would you mind helping me to reslove the problem? And the network authentication method at end user side will be?
Any help will be much appreciated.

Please refer the Supported Authentication Protocols ( including PEAP )  , database and authentication types from below
http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_auth_pol.html#pgfId-1266680

Similar Messages

  • Cisco Call Manager intergration with Active Directory

    We have Cisco Voip which is currently not intergrated with AD. The data (users) in Call Manager have not been updated, (ie if someone left the organisation the ICT department were never told and the new starter took over) I have been asked to intergrate this with active directory and then look in ad and resolve any discrepancies. Has anyone ever completed something similar. Any advise or imput would be gratefully appreicated. Thank You

    Just make sure all the users you want to keep in CUCM are in AD and use the exact same userID or whatever field you'll use for the integration. Those users will just be updated with the AD info and any dependencies they have in CUCM will be there.
    Users that do not have a matching ID in AD will be deleted.
    HTH
    java
    If this helps, please rate
    www.cisco.com/go/pdihelpdesk

  • Autheticating useing Cisco ACS 4.2 integrated with Active Directory 2003

    How do i check that users are Autheticated useing Cisco ACS 4.2 integrated with Active Directory 2003, any one help me in this thanks

    You can't actually see the user's membership from ACS. All you can do, create group-mapping under external database >> group mapping section. This would give you an option to map external (AD) group with an Internal group.The group memberrship need to be modified under Active Directory.
    Once user is succussfully authenticated and learned as a dynamic user in ACS user setup database, it would be mapped with an ACS internal group based on group mapping we did.
    Let me know if you have any doubts.
    Regards,
    Jatin

  • Cisco ACS 4.2 integration with Active Directory

    Hello,
    I´m new in the administration of ACS, we have recently implemented on server ACS version 4.2
    for manager all users authorization for our Network.
    We are in one environement which have an Active Directory, group and users.
    Now, i´m just able to creat a new user in ACS and work with on the Client SWITCH, what i need to do, is to integrate my ACS 4.2 with Active Directory.
    for work with the user and Group that a register in my AD.
    Someon can help me please?

    You can't actually see the user's membership from ACS. All you can do, create group-mapping under external database >> group mapping section. This would give you an option to map external (AD) group with an Internal group.The group memberrship need to be modified under Active Directory.
    Once user is succussfully authenticated and learned as a dynamic user in ACS user setup database, it would be mapped with an ACS internal group based on group mapping we did.
    Let me know if you have any doubts.
    Regards,
    Jatin

  • Issue with Active Directory User Target Recon

    Hi ,
    I am facing an issue with Active Directory User Target Recon
    My environment is OIM 11g R2 with BP03 patch applied
    AD Connector is activedirectory-11.1.1.5 with bundle patch 14190610 applied
    In my Target there are around 28000 users out of which 14000 have AD account (includes Provisioned,Revoked,Disabled accounts)
    When i am running Active Directory User Target Recon i am not putting any filter cleared the batch start and batch size parameters and ran the recon job .Job ran successfully but it stopped after processing around 3000 users only.
    Retried the job two three times but every time it is stopping after processing some users but not processing all the users.
    Checked the log file oimdiagnostic logs and Connector server logs cannot see any errors in it.
    Checked the user profile of users processed can see AD account provisioned for users
    My query is why this job is not processing allthe users.Please point if i am missing some thing .
    thanks in advance

    Check the connector server load when you are running the recon. Last time I checked the connector, the way it was written is that it loads all the users from AD into the connector server memory and then sends them to OIM. So if the number was huge, then the connector server errored out and did not send data to OIM. We then did recon based on OUs to load/link all the users into OIM. Check the connector server system logs and check for memory usage etc.
    -Bikash

  • Tighter Integration with Active Directory User Groups

    I just wrapped up a Jabber deployment with IM&P 9.1(1) and J4W clients 9.1(3).
    The customer asked me if it is on Cisco's roadmap to allow groups in Active Directory to be pulled into the Jabber client.  The primary business case is to allow those in IT to send out IM blasts to the corporation or certain departments.
    Obviously, this would require a significant amount of development and a much tighter integration with Active Directory, but I need to ask anyway.
    Has something like this been identified and placed on any roadmap?
    Thanks,
    Matthew Berry

    Unfortunately this kind of questions cannot be addressed here, roadmap questions need to go thru official channels for an answer.
    You need to reach your SE/AM for this question.
    HTH
    java
    if this helps, please rate
    www.cisco.com/go/pdihelpdesk

  • OIM Integration with Active Directory Federation Services (ADFS)

    Hello friends
    I have a question about the integration of Oracle Identity Manager with Active Directory which is federated with another external directory for ADFS. My question is:
    What considerations should be to contemplate if I have an active directory federated environment when carrying out the integration with Identity Manager?
    I use version 9.1.0.2 of Oracle Identity Manager with Microsoft Active Directory Connector User Management 9.1.1.7
    Thanks for the support.

    First consideration is that the OIM's target ADFS - in the federated scenario, will that participate as a Service provider or identity provider. I would think identity provider.
    Next consideration: What all attributes are required to be played in the SAML assertion to the other end-point? All these attributes must be present and should be provisioned to the AD in this case.
    So, OIM should be set up (UDF etc) to provision all those attributes needed in the SAML.
    Next consideration: What all scenario to support? IdP initiated or SP initiated? If SP initiated, then process will hv to be defined if a user id does not exist in the AD of the OIM target. Will the request be failed or a in-time provisioning should happen.
    Hope this helps.

  • Beginners guide to integration with Active Directory?

    Hi (complete beginner to this, but a quick learner)
    I don't know where to start with regards to getting the Macs on our network connecting like the PCs. Currently we have about 100 Macs on 10.4.x that are bound to the AD using Directory Access - users can log in, but that's about as far as integration goes. Their home folders do not "map" to the corresponding folders on the Macs, and we (as administrators) have no control over the Mac network users like we would have the local Mac users.
    I've been asked to look into this issue, and along with creating new modular 10.5.x system builds for all our Macs (different hardware, different software needs, different physical locations), I need to know what the next steps are. I have no experience of using Mac OS X Server or Active Directory. Besides telling me to ask the IT department to hire a Mac professional, what should I be looking into next?
    So far, this is how I think the process goes:
    1) Ensure I have solid modular system builds ready to go for the different macs/different classrooms.
    2) Get an Xserve for IT.
    3) Have Open Directory integrate with Active Directory, so that the same access controls/permissions are applied to the Mac users as they are the Windows users (including Finder access controls, Application controls, folder mapping etc) - *this is where I need guidance*.
    4) Push out the system builds to the Macs on the network
    5) Connect the Macs using Open Directory...
    6) ...
    As you can see, my knowledge kind of peters out towards the end there; is this a realistic undertaking for me (a classroom technician who happens to use Macs - NOT trained in any of this) and the Mac-phobic IT department (who would prefer switching all of our workstations to PC)? Are we going to have to bite the bullet and get some expensive consultants in?

    pisto_grih wrote:
    Hi (complete beginner to this, but a quick learner)
    I don't know where to start with regards to getting the Macs on our network connecting like the PCs. Currently we have about 100 Macs on 10.4.x that are bound to the AD using Directory Access - users can log in, but that's about as far as integration goes. Their home folders do not "map" to the corresponding folders on the Macs, and we (as administrators) have no control over the Mac network users like we would have the local Mac users.
    And that is about as far as the Apple plugin will take you. In order to do more you need to either extend schema (very scary), look at third party products like Centrify (very expensive), or look at getting an OS X Server and implementing the "magic triangle" in which OS X attributes are managed in OD while users, groups, and password are managed by AD.
    I've been asked to look into this issue, and along with creating new modular 10.5.x system builds for all our Macs (different hardware, different software needs, different physical locations), I need to know what the next steps are. I have no experience of using Mac OS X Server or Active Directory. Besides telling me to ask the IT department to hire a Mac professional, what should I be looking into next?
    If you go the route of OS X Server and MCX settings, make life easy on yourself and build one common build. Then limit app access based on your groups. That way you can simplify the number of images you maintain down to one (provided you have appropriate licensing).
    So far, this is how I think the process goes:
    1) Ensure I have solid modular system builds ready to go for the different macs/different classrooms.
    See above. But if you need to, look at InstaDMG
    2) Get an Xserve for IT.
    Yep. But if you are only doing MCX you might want to look for a cheeper alternative. The Xserve can offer some nice additions, including software update server and Netinstall server among others.
    3) Have Open Directory integrate with Active Directory, so that the same access controls/permissions are applied to the Mac users as they are the Windows users (including Finder access controls, Application controls, folder mapping etc) - *this is where I need guidance*.
    Yep. You are on the money.
    4) Push out the system builds to the Macs on the network
    Push huh. Look at Radmind. Then take a summer off to learn it. Then become god.
    5) Connect the Macs using Open Directory...
    Actually, connect the macs to both AD and OD. This will allow authentication and instantiating through AD and management through OD. Works very well.
    6) ...
    As you can see, my knowledge kind of peters out towards the end there; is this a realistic undertaking for me (a classroom technician who happens to use Macs - NOT trained in any of this) and the Mac-phobic IT department (who would prefer switching all of our workstations to PC)? Are we going to have to bite the bullet and get some expensive consultants in?
    It is learnable especially with the summer and available hardware. However, supporting the consulting industry is always nice http://consultants.apple.com
    Hope this helps

  • Integrate NAC Appliance with Active Directory

    We try to implement on our customer, NAC appliance integrating with Active Directory Single sign on.
    The NAC configured with L2 OOB. User first connect to switch and got the authentice Vlan, then the user will be authenticate using their domain account login, if success the user will be mapping to the Vlan assign to them.
    The agent SSO installed on Active Directory is running well, and at the CAS also the service SSO started.
    Let say i've this situation:
    1. User A has been assign to Vlan 15 Employee
    2. User A plug to switch and got dummy vlan and will authenticate using Domain account on AD, If succeded than, the port will be bounce, the user running an cisco agent on background
    3. Now user A has their on Vlan ID 15
    I've created the Authentication server on CAM for the Active Directory, but i've find it's so difficult to config mapping rules between user roles to Active directory. The guidance pdf how to implement NAC i've downloaded from cisco, not mention it how to mapping user roles to Active Directory...
    Has any one has been configured mapping rules user roles to Active directory?

    So you would create a mapping rule against your lookup server like so.
    Say the AD group membership is "Finance"
    for ADSSO you would apply the mapping rule to your LOOKUP Server
    where the expression is
    memberOf contains CN=Finance and apply it to role employee if VLAN 15 is your employee vlan then you would designate vlan 15 in your Employee role under user role configuration
    Now you cant test this with ADSSO with the test auth function so what I like to do is create an AD authentication server and test against that as long as you have some form of mapping configured the auth results will return all memberships for the userename you login with so you can get the syntax exactly right.

  • SQL Server 2000\2005 compatibility with Active Directory 2012

    Hi All,
    We are currently using Active Directory 2003 and will be upgrading to AD 2012.  I'm trying to determine if there is any known compatibility issues when running older versions of SQL Server (2000 and 2005) when upgrading to AD 2012.   I've
    read forums from when others went from AD 2003 to AD 2008 and didn't experience any issues.  We have the newer versions of SQL but I'm not too concerned about these.  Any advice would be greatly appreciated?   Has anyone been through
    this process. 
    Thanks,

    Hi CraftsmanRobert,
    Based on my understanding, you used Active Directory 2003, then it would be upgraded to Active Directory 2012. You wanted to run older versions of SQL Server (2000 and 2005) with Active Directory 2012.
    Firstly, there can be a compatibility problem when run older version with Active Directory 2012. SQL Server 2005 (the release version and service packs) and earlier versions of SQL Server are not supported on Windows Server 2012 R2, Windows Server 2012,
    Windows 8.1, or Windows 8. For more information, please refer to this article: How to use SQL Server in Windows and Windows Server environments (http://support.microsoft.com/kb/2681562/en-us).
    Besides, Microsoft doesn’t provide assisted support for SQL Server 2000 and SQL Server 2005 already. Please upgrade the existing instance of SQL Server 2000 and SQL Server 2005 to a new version like SQL Server 2012. You can download SQL Server 2012 Express
    from this link:
    http://www.microsoft.com/en-us/download/details.aspx?id=29062.
    Best regards,
    Qiuyun Yu

  • Process Flow with Status Busy

    Hello
    In Warehouse Builder Browser I have one Process Flow with Status Busy. I have restarded the whole server and status is still Busy.
    Through Oracle Workflow I try to Find Active Processes and there just is no one.
    Why is my Process Flow still Busy and how do I stop it? (Maybe the there is an error in Warehouse Builder Browser, it is not busy?)
    Best regards,
    Tina

    Just logout and login into Warehouse Builder Browser again. It is not busy any more ;-).
    /Tina

  • OWB Client: 10.2.0.1.31, Server  10.2.0.1.0 Process Flow Route activity err

    Hi,
    I have a simple process flow calling other process flows with the ROUTE activity. My PF validates fine with 3 out transitions (complex expressions) and 1 Transition to End Activity. I'm trying to add new out Transition based on complex expression I'm getting the validation warning.
    PF_START     WarMsgKey     VLD-10007: Activity ROUTE has outgoing transitions with duplicate conditions defined, thus making the process flow ambiguous.
    VLD-10007: Activity ROUTE has outgoing transitions with duplicate conditions defined, thus making the process flow ambiguous. The only allowed conditions are "SUCCESS", "WARNING", "ERROR", "UNCONDITIONAL", and the transitions on any activity are always evaluated in this order , thus having duplicate transition conditions will make the flow invalidate the process flow.
    I verified route transitions and all the 4 conditions are different. Does anyone has had the same problem.
    Thanks
    -DvvB

    Hi Nawneet ,
    Thx for ur suggestion. I can't use fork since I need to conditionally execute PFs based on my input.
    I did the following to achieve the result.
    Start -> Route
    variable = 1 Transition to PF 1 -- End Success/Failure
    Variable = 2 Transition EXECUTE pf 2 -- End Success/Failure
    Variable=3 Transition execute PF 3 -- End Success/Failure
    Default Transition to End Success
    Default Transition to ROUTE 2
    variable = 4 Transition Execute PF4 -- End Success/Failure
    Default Transition from ROUTE 2 -- End Success/Failure
    Thanks
    -DvvB

  • Guided Business Process modelling with Activity Guide

    HI everybody ,
    Please suggest where the bmp-services-client.jar will be available?
    I am getting the following error upon deployment of human task forms which are using the ADF data controls for workflow :-
    Caused By: java.lang.ClassNotFoundException: oracle.bpel.services.datacontrol.types.Number
    The human task forms are taskflow components of a soa composite containing a bpmn process which stitches these taskflows into an Activity Guide.
    Any help will be appreciated.
    Regards,
    Shailendra Nema.

    Another roadblock when trying "Guided Business Process modelling with Activity Guide"
    I get the following error when trying to access the AG instance from the AG ADF client --
    Runtime error in AG Query Service. Failure in queryAGDisplayInfos.
         at oracle.bpel.services.workflow.activityguide.query.impl.AGQueryServiceWSIF.queryAGDisplayInfos(AGQueryServiceWSIF.java:136)
         at oracle.bpel.services.workflow.activityguide.query.soap.AGQueryServiceSOAP.queryAGDisplayInfos(AGQueryServiceSOAP.java:57)
         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    Caused By: javax.ejb.EJBException: EJB Exception: : java.lang.NullPointerException
         at oracle.bpm.services.activityguide.impl.BpmAGQueryService.constructTaskDisplayInfo(BpmAGQueryService.java:1160)
         at oracle.bpm.services.activityguide.impl.BpmAGQueryService.constructMilestoneDisplayInfo(BpmAGQueryService.java:1060)
         at oracle.bpm.services.activityguide.impl.BpmAGQueryService.constructMilestoneDisplayInfoList(BpmAGQueryService.java:869)
         at oracle.bpm.services.activityguide.impl.BpmAGQueryService.constructAGDisplayInfo(BpmAGQueryService.java:730)
         at oracle.bpm.services.activityguide.impl.BpmAGQueryService.queryAGDisplayInfos(BpmAGQueryService.java:268)
         at oracle.bpm.services.activityguide.impl.CombinedAGQueryService.queryAGDisplayInfos(CombinedAGQueryService.java:58)
         at oracle.bpm.services.activityguide.impl.CombinedAGQueryService.queryAGDisplayInfos(CombinedAGQueryService.java:76)
         at oracle.bpm.services.activityguide.impl.BaseAGQueryService.queryAGDisplayInfos(BaseAGQueryService.java:144)
    Caused By: java.lang.NullPointerException
         at oracle.bpm.services.activityguide.impl.BpmAGQueryService.constructTaskDisplayInfo(BpmAGQueryService.java:1160)
         at oracle.bpm.services.activityguide.impl.BpmAGQueryService.constructMilestoneDisplayInfo(BpmAGQueryService.java:1060)
         at oracle.bpm.services.activityguide.impl.BpmAGQueryService.constructMilestoneDisplayInfoList(BpmAGQueryService.java:869)
         at oracle.bpm.services.activityguide.impl.BpmAGQueryService.constructAGDisplayInfo(BpmAGQueryService.java:730)
         at oracle.bpm.services.activityguide.impl.BpmAGQueryService.queryAGDisplayInfos(BpmAGQueryService.java:268)
         at oracle.bpm.services.activityguide.impl.CombinedAGQueryService.queryAGDisplayInfos(CombinedAGQueryService.java:58)
         at oracle.bpm.services.activityguide.impl.CombinedAGQueryService.queryAGDisplayInfos(CombinedAGQueryService.java:76)
    I am able to access the workitem in worklistapp and the composite instance process flow shows that the first activity in the bpm process is in Running state.
    Please suggest.

  • Issue in ldap-sync with active directory - OIM11gR2

    Hi Expert,
    I have enabled the ldap-sync with Active Directory in OIM11gR2. I followed the below document to enable the ldap-sync.
    Enabling LDAP Synchronization in Oracle Identity Manager - 11g Release 2 (11.1.2)
    For testing if ldap sync is working on not . I run the LDAPSync Post Enable Provision Users to LDAP schedule job. While running the job i encounter below exception in log. Please provide me some pointer to solve my issue. How we can sure ldap sync is configure properly? Please provide me some steps to test it out?
    <Jul 31, 2013 9:51:25 AM PDT> <Warning> <JMS> <BEA-040442> <While attempting to bind JNDI name jms/b2b/B2BEventQueue for destination SOAJMSModule!dist_B2BEventQueue_auto_1_auto in module null a JNDI name conflict was found. This destination has not been bound into JNDI.>
    <Jul 31, 2013 9:51:25 AM PDT> <Error> <oracle.iam.platform.entitymgr.provider.ldap> <BEA-000000> <An error occurred while searching the entity in LDAP, and the corresponding error is - {0}
    javax.naming.NameNotFoundException: Error: NO_SUCH_OBJECT
    LDAP Error 32 : No Such Object [Root exception is oracle.ods.virtualization.service.VirtualizationException: oracle.ods.virtualization.engine.util.DirectoryException: LDAP Error 32 : No Such Object]
      at oracle.ods.virtualization.jndi.OVDUtil.mapErrorCode(OVDUtil.java:151)
      at oracle.ods.virtualization.jndi.OVDContext.search(OVDContext.java:439)
      at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:257)
      at oracle.iam.platform.entitymgr.provider.ldap.LDAPUtil.search(LDAPUtil.java:1073)
      at oracle.iam.platform.entitymgr.provider.ldap.LDAPDataProvider.search(LDAPDataProvider.java:1218)
      at oracle.iam.ldapsync.impl.util.CommonNamePolicyUtil.isUserExists(CommonNamePolicyUtil.java:84)
      at oracle.iam.ldapsync.impl.util.CommonNameGenerationUtil.isCommonNameExistingOrReserved(CommonNameGenerationUtil.java:192)
      at oracle.iam.ldapsync.impl.plugins.FirstNameLastNamePolicy.getCommonNameFromPolicy(FirstNameLastNamePolicy.java:157)
      at oracle.iam.ldapsync.impl.util.CommonNameGenerationUtil.generateCommonName(CommonNameGenerationUtil.java:116)
      at oracle.iam.ldapsync.impl.util.CommonNameGenerationUtil.generateCommonName(CommonNameGenerationUtil.java:82)
      at oracle.iam.oimtoldap.impl.SeedOIMDataInLDAPImpl.createUserInLDAP(SeedOIMDataInLDAPImpl.java:182)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
      at java.lang.reflect.Method.invoke(Method.java:597)
      at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
      at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
      at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
      at oracle.iam.platform.utils.DMSMethodInterceptor.invoke(DMSMethodInterceptor.java:25)
      at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
      at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
      at $Proxy710.createUserInLDAP(Unknown Source)
      at oracle.iam.oimtoldap.api.SeedOIMDataInLDAPEJB.createUserInLDAPx(Unknown Source)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
      at java.lang.reflect.Method.invoke(Method.java:597)
      at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
      at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
      at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
      at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
      at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
      at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
      at com.oracle.pitchfork.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:34)
      at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
      at com.oracle.pitchfork.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:42)
      at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
      at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
      at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
      at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
      at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
      at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
      at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
      at $Proxy709.createUserInLDAPx(Unknown Source)
      at oracle.iam.oimtoldap.api.SeedOIMDataInLDAP_8d8qil_SeedOIMDataInLDAPRemoteImpl.__WL_invoke(Unknown Source)
      at weblogic.ejb.container.internal.SessionRemoteMethodInvoker.invoke(SessionRemoteMethodInvoker.java:40)
      at oracle.iam.oimtoldap.api.SeedOIMDataInLDAP_8d8qil_SeedOIMDataInLDAPRemoteImpl.createUserInLDAPx(Unknown Source)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
      at java.lang.reflect.Method.invoke(Method.java:597)
      at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:85)
      at $Proxy163.createUserInLDAPx(Unknown Source)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
      at java.lang.reflect.Method.invoke(Method.java:597)
      at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
      at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:198)
      at $Proxy707.createUserInLDAPx(Unknown Source)
      at oracle.iam.oimtoldap.api.SeedOIMDataInLDAPDelegate.createUserInLDAP(Unknown Source)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
      at java.lang.reflect.Method.invoke(Method.java:597)
      at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
      at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
      at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
      at oracle.iam.platform.utils.DMSMethodInterceptor.invoke(DMSMethodInterceptor.java:25)
      at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
      at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
      at $Proxy708.createUserInLDAP(Unknown Source)
      at oracle.iam.oimtoldap.scheduletasks.user.SeedOIMUsersInLDAP.execute(SeedOIMUsersInLDAP.java:59)
      at oracle.iam.scheduler.vo.TaskSupport$1.processWithoutResult(TaskSupport.java:135)
      at oracle.iam.platform.tx.OIMTransactionCallbackWithoutResult.process(OIMTransactionCallbackWithoutResult.java:9)
      at oracle.iam.platform.tx.OIMTransactionCallback.doInTransaction(OIMTransactionCallback.java:13)
      at oracle.iam.platform.tx.OIMTransactionCallback.doInTransaction(OIMTransactionCallback.java:6)
      at org.springframework.transaction.support.TransactionTemplate.execute(TransactionTemplate.java:128)
      at oracle.iam.platform.tx.OIMTransactionManager.execute(OIMTransactionManager.java:22)
      at oracle.iam.scheduler.vo.TaskSupport.executeJob(TaskSupport.java:116)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
      at java.lang.reflect.Method.invoke(Method.java:597)
      at oracle.iam.scheduler.impl.quartz.QuartzJob$TaskExecutionAction.run(QuartzJob.java:266)
      at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
      at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
      at weblogic.security.Security.runAs(Security.java:41)
      at Thor.API.Security.LoginHandler.weblogicLoginSession.runAs(weblogicLoginSession.java:52)
      at oracle.iam.scheduler.impl.quartz.QuartzJob.execute(QuartzJob.java:75)
      at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
      at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:529)
    Caused By: oracle.ods.virtualization.service.VirtualizationException: oracle.ods.virtualization.engine.util.DirectoryException: LDAP Error 32 : No Such Object
      at oracle.ods.virtualization.operation.SearchOperation.process(SearchOperation.java:209)
      at oracle.ods.virtualization.operation.SearchOperation.process(SearchOperation.java:47)

    I have checked the OIM vs AD attribute mapping. now I am getting  below error. I have also attached the LDAPUsers.xml file . I don't know what went wrong .. How to test ldap-sync is configure properly? I created the user in OIM but in AD user is not getting created. I am not able to see any thing log file liek (dignostic and nohup log)  .. Any idea where I can see the log to identify the issue??
    g 1, 2013 8:15:15 AM PDT> <Warning> <JMS> <BEA-040442> <While attempting to bind JNDI name jms/b2b/B2BEventQueue for destination SOAJMSModule!dist_B2BEventQueue_auto_1_auto in module null a JNDI name conflict was found. This destination has not been bound into JNDI.>
    <Aug 1, 2013 8:15:15 AM PDT> <Warning> <oracle.ods.virtualization.engine.backend.jndi.LDAP1.ConnectionHandle> <OVD-40082> <Could not modify entry.
    javax.naming.OperationNotSupportedException: [LDAP: error code 53 - 0000001F: SvcErr: DSID-031A120C, problem 5003 (WILL_NOT_PERFORM), data 0
    <?xml version='1.0' encoding='UTF-8'?>
    <tns:entity-definition xmlns:tns="http://www.oracle.com/schema/oim/entity" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.oracle.com/schema/oim/entity ../entity.xsd ">
    <entity-type child-entity="false">LDAPUser</entity-type>
    <provider-instance>
    <repository-instance>Directory Server</repository-instance>
    <provider-type>LDAPDataProvider</provider-type>
    <parameters>
    <parameter name="base">
    <value>dc=cgtest,dc=adtest,dc=com</value>
    </parameter>
    <parameter name="rdnattribute">
    <value>cn</value>
    </parameter>
    <parameter name="objectclass">
    <value>orclIDXPerson</value>
    </parameter>
    <parameter name="idattribute">
    <value>objectGUID</value>
    </parameter>
    <parameter name="entityIdentifierObjectclass">
    <value>inetorgperson</value>
    </parameter>
    <parameter name="excludeObjectclass">
    <value>orclappiduser</value>
    </parameter>
    </parameters>
    </provider-instance>
    <container-capability>
    <enabled>false</enabled>
    </container-capability>
    <entity-attributes>
    <attribute name="User Login">
    <type>string</type>
    <required>true</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="First Name">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    <MLS>false</MLS>
    </attribute>
    <attribute name="Last Name">
    <type>string</type>
    <required>true</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    <MLS>false</MLS>
    </attribute>
    <attribute name="Middle Name">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    <MLS>false</MLS>
    </attribute>
    <attribute name="Display Name">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    <MLS>false</MLS>
    <multi-represented>true</multi-represented>
    </attribute>
    <attribute name="usr_password">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>false</searchable>
    </attribute>
    <attribute name="LDAP GUID">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="LDAP DN">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Role">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Email">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Start Date">
    <type>date</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="End Date">
    <type>date</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="usr_timezone">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="usr_manager_key">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Country">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Department Number">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Description">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Common Name">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    <MLS>false</MLS>
    </attribute>
    <attribute name="Employee Number">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Fax">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Generation Qualifier">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    <MLS>false</MLS>
    </attribute>
    <attribute name="Hire Date">
    <type>date</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Home Phone">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Home Postal Address">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Locality Name">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Mobile">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Pager">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Postal Address">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    <MLS>false</MLS>
    </attribute>
    <attribute name="Postal Code">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="PO Box">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="usr_locale">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="State">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    <MLS>false</MLS>
    </attribute>
    <attribute name="Street">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Telephone Number">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Title">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    <MLS>false</MLS>
    </attribute>
    <attribute name="Initials">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="LDAP Organization">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    <MLS>false</MLS>
    </attribute>
    <attribute name="LDAP Organization Unit">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    <MLS>false</MLS>
    </attribute>
    <attribute name="User Status">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Lock Status">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Accessibility Mode">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Color Contrast">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Font Size">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Number Format">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Currency">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Date Format">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Time Format">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="Embedded Help">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="FA Language">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="FA Territory">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    <attribute name="User Name Preferred Language">
    <type>string</type>
    <required>false</required>
    <attribute-group>Basic</attribute-group>
    <searchable>true</searchable>
    </attribute>
    </entity-attributes>
    <target-fields>
    <field name="uid">
    <type>string</type>
    <required>true</required>
    </field>
    <field name="givenname">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="sn">
    <type>string</type>
    <required>true</required>
    </field>
    <field name="middleName">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="cn">
    <type>string</type>
    <required>true</required>
    </field>
    <field name="userPassword">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="objectGUID">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="dn">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="employeeType">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="mail">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="orclActiveStartDate">
    <type>date</type>
    <required>false</required>
    </field>
    <field name="orclActiveEndDate">
    <type>date</type>
    <required>false</required>
    </field>
    <field name="orclTimeZone">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="manager">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="c">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="departmentNumber">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="description">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="employeeNumber">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="facsimileTelephoneNumber">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="orclGenerationQualifier">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="orclHireDate">
    <type>date</type>
    <required>false</required>
    </field>
    <field name="homePhone">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="homePostalAddress">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="l">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="mobile">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="pager">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="postalAddress">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="postalCode">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="postOfficeBox">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="preferredLanguage">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="st">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="street">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="telephoneNumber">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="title">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="initials">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="o">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="ou">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="displayName">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="orclAccountEnabled">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="orclAccountLocked">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="orclAccessibilityMode">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="orclColorContrast">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="orclFontSize">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="orclNumberFormat">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="orclCurrency">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="orclDateFormat">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="orclTimeFormat">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="orclEmbeddedHelp">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="orclFALanguage">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="orclFATerritory">
    <type>string</type>
    <required>false</required>
    </field>
    <field name="orclDisplayNameLanguagePreference">
    <type>string</type>
    <required>false</required>
    </field>
    </target-fields>
    <attribute-maps>
    <attribute-map>
    <entity-attribute>User Login</entity-attribute>
    <target-field>uid</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>First Name</entity-attribute>
    <target-field>givenname</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Last Name</entity-attribute>
    <target-field>sn</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Middle Name</entity-attribute>
    <target-field>middleName</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Common Name</entity-attribute>
    <target-field>cn</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>usr_password</entity-attribute>
    <target-field>userPassword</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>LDAP GUID</entity-attribute>
    <target-field>objectGUID</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>LDAP DN</entity-attribute>
    <target-field>dn</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Role</entity-attribute>
    <target-field>employeeType</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Email</entity-attribute>
    <target-field>mail</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Start Date</entity-attribute>
    <target-field>orclActiveStartDate</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>End Date</entity-attribute>
    <target-field>orclActiveEndDate</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>usr_timezone</entity-attribute>
    <target-field>orclTimeZone</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>usr_manager_key</entity-attribute>
    <target-field>manager</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Country</entity-attribute>
    <target-field>c</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Department Number</entity-attribute>
    <target-field>departmentNumber</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Description</entity-attribute>
    <target-field>description</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Employee Number</entity-attribute>
    <target-field>employeeNumber</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Fax</entity-attribute>
    <target-field>facsimileTelephoneNumber</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Generation Qualifier</entity-attribute>
    <target-field>orclGenerationQualifier</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Hire Date</entity-attribute>
    <target-field>orclHireDate</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Home Phone</entity-attribute>
    <target-field>homePhone</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Home Postal Address</entity-attribute>
    <target-field>homePostalAddress</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Locality Name</entity-attribute>
    <target-field>l</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Mobile</entity-attribute>
    <target-field>mobile</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Pager</entity-attribute>
    <target-field>pager</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Postal Address</entity-attribute>
    <target-field>postalAddress</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Postal Code</entity-attribute>
    <target-field>postalCode</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>PO Box</entity-attribute>
    <target-field>postOfficeBox</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>State</entity-attribute>
    <target-field>st</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Street</entity-attribute>
    <target-field>street</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Telephone Number</entity-attribute>
    <target-field>telephoneNumber</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Title</entity-attribute>
    <target-field>title</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Initials</entity-attribute>
    <target-field>initials</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>LDAP Organization</entity-attribute>
    <target-field>o</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>LDAP Organization Unit</entity-attribute>
    <target-field>ou</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Display Name</entity-attribute>
    <target-field>displayName</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>User Status</entity-attribute>
    <target-field>orclAccountEnabled</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Lock Status</entity-attribute>
    <target-field>orclAccountLocked</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Accessibility Mode</entity-attribute>
    <target-field>orclAccessibilityMode</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Color Contrast</entity-attribute>
    <target-field>orclColorContrast</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Font Size</entity-attribute>
    <target-field>orclFontSize</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Number Format</entity-attribute>
    <target-field>orclNumberFormat</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Currency</entity-attribute>
    <target-field>orclCurrency</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Date Format</entity-attribute>
    <target-field>orclDateFormat</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Time Format</entity-attribute>
    <target-field>orclTimeFormat</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>Embedded Help</entity-attribute>
    <target-field>orclEmbeddedHelp</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>FA Language</entity-attribute>
    <target-field>orclFALanguage</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>FA Territory</entity-attribute>
    <target-field>orclFATerritory</target-field>
    </attribute-map>
    <attribute-map>
    <entity-attribute>User Name Preferred Language</entity-attribute>
    <target-field>orclDisplayNameLanguagePreference</target-field>
    </attribute-map>
    </attribute-maps>
    <control-attributes>
    <attribute name="container">
    <type>LDAPContainer</type>
    <required>false</required>
    </attribute>
    </control-attributes>
    </tns:entity-definition>

  • How to ACS 5.0.0.21 Expresss integrate with Active Directory Standar 2003 and authenticate PEAP MSCHAPV2

    Hi:
    My name is Ivan, I have a trouble
    I have a ACS 5.0.0.21 express, and i have to integrate with Active Directory (AD)  2003 Standar. I should authenticate the users of the Domain in the LAN with PEAP MSCHPAV2, using the follow:
    Cisco WLC 4402 + Cisco ACS 5.0.0.21 + Active Directory
    I need to know if i should to install a certificate in the ACS 5.0.0.21 or some agent remote install  in the AD.
    I put in the ACS a external database with the AD, and i already select the users on the domain in the ACS Express.
    Please could you tell me all the steps to autenticate the users on the Domain using the ACS Express and the Active Directory,
    I would like to know wich are the configuration that i have to do in my ACS express to authenticate using PEAP MSCHAPV2
    Regards
    Ivan

    See the below URL - multiple config guides on what you want to do:-
    http://www.cisco.com/en/US/products/ps6366/prod_configuration_examples_list.html
    HTH>

Maybe you are looking for