Comm Suite auto disable users

Hi,
We are running Communications Suite 5: Messaging 6.3, Cal 6.3, UWC 6.3
We are trying to figure out a way to auto disable a user through our provisioning system. We understand that you can disable users using attributes like inetuserstatus and mailuserstatus, however would like to tell comms suite to disable a user on some specific day in the future.
Does anyone have any way of doing this? Can a particular LDAP attribute be changed?
-Matt

Hi,
mattrobert wrote:
We are running Communications Suite 5: Messaging 6.3, Cal 6.3, UWC 6.3
We are trying to figure out a way to auto disable a user through our provisioning system. We understand that you can disable users using attributes like inetuserstatus and mailuserstatus, however would like to tell comms suite to disable a user on some specific day in the future.
Does anyone have any way of doing this? Can a particular LDAP attribute be changed?There is no in-built mechanism to auto-expire accounts at a give time/date. If you wanted to achieve this you would need to use your provisioning system; something like IDM (http://www.sun.com/software/products/identity_mgr/index.jsp) is able to schedule such expiration as part of the provisioning/de-provisioning process.
If all you wanted to achieve was to stop users from accessing their account, the other option may be to expire the users password using the passwordexpirationtime: user attribute. This would not stop other users from accessing the account (e.g. shared folders, shared calendar etc.), or new emails from being received by the account.
Regards,
Shane,

Similar Messages

Help , how to auto create user account

Hi, guys,
i wanna to know how to auto create user account after use the suppliers' api to create supplier.
i didn't find out how to auto create user account by use ap_vendor_pub_pkg.create_vendor_contact procedure.
how to auto create the user account ?
if you know ,tell me ,pls
best Regards !
Edited by: wanjin on 2013-4-15 下午11:50

Hi Gareth，
I wanna create an Oracle E-business Suite use account ,but how to use fnd_user_pkg.createuser procedure to relation the AP suppliers , not employee suppliers.
the result like N:Purchasing Super User -->supplier-->Contact Directory --> create user
then use "Create User Account for this Contact" to create user account
Regards,
Wanjin

Migrating to Comm suite 5

Hi Shane and ALL,
we are running Sun Java messaging 2005Q4 on Solaris 9 (Without calender Server)
Sun Java(tm) System Messaging Server 6.2-3.04 (built Jul 15 2005)
libimta.so 6.2-3.04 (built 01:43:03, Jul 15 2005)
Need to move to Communicate suite 5 on Solaris 10 so planned like below
1. Setup separate standalone box with same hostname with fresh build of comm suite 5 (With calender server). - DONE and Succeeded.
ALL working good incl. commadmin and UWC is simply superb.
2. export the user accounts from existing server - exported the "ou=people,o=xyz.com,dc=xyz,dc=com" using startconsole GUI (of DS) - Succeeded
3. Import the user accounts (Directory Server objects) into the new server - Tried using the below but failed:
a. dsconf import - working only if i import Base DN (dc=xyz,dc=com) not working for ou=people
b. also it is initializing (extra accounts like calmaster would be removed..) and overwriting the existing entries.
I'm not sure if ldapmodify does the trick, if yes, please help how to run that with the exported LDIF file.
Please suggest me how to export user accounts (ou=people,o=xyz.com,dc=xyz,dc=com) into new server
If it is through, i will RSYNC the mailboxes as the final step.
Please advise.
Prvn

sun_prvnrk wrote:
3. Import the user accounts (Directory Server objects) into the new server - Tried using the below but failed:
a. dsconf import - working only if i import Base DN (dc=xyz,dc=com) not working for ou=people
b. also it is initializing (extra accounts like calmaster would be removed..) and overwriting the existing entries.
I'm not sure if ldapmodify does the trick, if yes, please help how to run that with the exported LDIF file.
Please suggest me how to export user accounts (ou=people,o=xyz.com,dc=xyz,dc=com) into new serverThis question is best asked on the Directory Server forum as they are the experts at exporting/importing LDAP data.
http://forum.java.sun.com/forum.jspa?forumID=761
If it is through, i will RSYNC the mailboxes as the final step.Make sure you also rsync the store mboxlist database under /opt/SUNWmsgsr/data/store/mboxlist/
Regards,
Shane.

Background job for auto lock user

Dear Friends,
Which background job i have to be schedule for auto locking user after every 30 days if then are not logged for last 30 days.
Thanks,
Regards,
Sachin

Hi, Sachin.
Please check this thread.
Locking users if they did not login for 15 days
Best Regards.
Sejoon

Getting error "1013009 Administrator Has Temporarily Disabled User Commands

Hi All,
I am getting the error"1013009 Administrator Has Temporarily Disabled User Commands" while executing a report script in Essbase 11.1.1.3
Appreciate any help..
Thanks
Mahesh

Mahesh wrote:
Hi All,
I am getting the error"1013009 Administrator Has Temporarily Disabled User Commands" while executing a report script in Essbase 11.1.1.3
Appreciate any help..
Thanks
Mahesh
Possible Cause
When a database is being restructured or any application/database on the server is being copied, you can get this message.
or
When a cube is being restructured, commands are restricted because the integrity of the cube has to be stable and no one is allowed to access it.
or
Copying an application requires that the Essbase security file be in read/write mode and therefore other applications are not accessible until the process is completed.
Possible Solution
In Application Settings, verify that the Allow Commands or Allow Updates options are not selected.
If not selected select those..and try
Regards,
Prabhas
Edited by: P on Apr 7, 2011 3:36 PM
Edited by: P on Apr 7, 2011 3:38 PM

Outlook Contact Card - Organization Tab disabled users

In Outlook there is a Contact Card showing detailed information about that person. the Organization tab shows the contact's "Manager", "Shares Same Manager" (other contacts with the same manager), and "Direct Reports" (people
that report to that contact).
The problem i am seeing is that Users disabled in Active Directory (people that have left the company) are showing up in the Organization Tab.
How can i filter out disabled users from this list for anyone using Outlook?
I cannot permanently delete users from Active Directory until after a disabled account reaches a certain age. Also i would prefer not modifying the disabled Active Directory user accounts.
We mostly run Outlook 2010 with a few people running Outlook 2013

Hi,
Outlook has no control over this, it just displays what it got from the server end. And to my knowledge, there is no such a feature to filter out those users from that list, at least on Outlook client.
Regards,
Ethan Hua
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.

How to do Archiving of deleted & disabled users in OIM11g

Hi All,
As per the requirement we have to do archive of deleted & disabled users in OIM11g(11.1.1.2) after 75days. Can i know how can i achieve this?
Regards,
user7609

Just to recap:
Your client requirement is to archive users out of OIM after 75 days. This means in addition to actually disabling and/or deleting them, fully removing any traces of them from the system.
As Kevin & GP said, OIM is just not built to do this. API alone is not going to accomplish this task... you'll also need to include SQL to actually drop data out of tables.
All that being said, your post said the reason for this was because of a "license for limited users". Oracle Identity Manager is licensed on an active user basis. You really should talk with your Oracle rep to confirm, but I've never had licensing contracts include deleted/disabled users.

Disabling User in Solaris

Is there anyway to change the way the resource adapter for Solaris and Linux disables users so that it uses the native lock provided through passwd rather than setting a random password?
Scott

Is there anyway to change the way the resource
adapter for Solaris and Linux disables users so that
it uses the native lock provided through passwd
rather than setting a random password?No there is no way to do that.
The usage of passwd -d and or -l is limited to certain installations. If you read the man page for passwd you will see that it only works for files as the repository not for any of the other possibilities (NIS or NIS+ or ldap). It also depends on PAM modules to implement this and they do not have to be configured on the system.
WilfredS

Disabled User Password should not be changed

Hi,
We have a requirement that only if the user's status is active, then only administartor must be able to change the user password. Admin should not be able to change the password if the user is in disabled state/locked state.How can we achieve this?please sugest...
Regards
Vinoth

Hi,
We have made an entity adapter which is taking usr login value from User[in Data object manager] and calling our java method which is making connection to OIM database and getting us the status of user.
Now if the status of user is disabled method is returning true and on true we have associated our error code to it.
We are executing our entity adapter in pre-update execution.
Now when we are changing password of any disabled user we are able to see our error code. But what ever update [either first name update, enable] we are running on that user same error code is appearing.
Plesae suggest/reply.
thanks

Disable User on updating an User attribute in OIM

Hi,
I have OIM 11g R2 with LDAP SYNC enabled with OID through OVD.
I want to trigger Disable user on modifying an UDF attribute of user.
Like if attribute1 of user is set to true then disabke user operation should be triggered for the user.
So first in my adapter i will check whether attribute is true and then trigger disable user.
In 11g R2 as mapping adapters attached to Users form in dataobject manager is not supported i am not able to map to the userdefinition and hence not able to check if attribute1 is true or false.
Please help and let me know if this can be achieved in any other way.
Edited by: 988070 on Mar 20, 2013 3:55 AM

You can write a post process event handler:
It will update the user status to disable when UDF attrtibute is set to true.
For this, you need to set the condition as:
Get the value of user defined attribute and store it in a variable "flag".
disable UserManagerResult disable(java.lang.String attributeName, java.lang.Object attributeValue) //attributeName will be user defined fieldm value will be "true"
throws ValidationFailedException,
oracle.iam.platform.authz.exception.AccessDeniedException,
UserDisableException,
NoSuchUserException,
SearchKeyNotUniqueException
Disables the user account matching the search criteria.
Parameters:
attributeName - - The attribute name for the search criteria.
attributeValue - - The attribute value for the search criteria.
Returns:
UserManagerResult containing the entity id of the disabled user.
Cheers,
Vamsi.

Does the Tech Comm Suite work differently/better then adding separate components?

I use CS4 everyday which includes Illustrator, Photoshop extended, InDesign, Dreamwearver and Flash. I now have a need to convert FrameMaker files into HTML and to create Help files using RoboHelp and Captivate. Do I need to get the Tech Comm Suite 2 or can I just add the RoboHelp and Captivate components and upgrade my FrameMaker to version 9? What works better and what is more cost efffective?

Thanks Jeff for the information about importing not linking outside of the suite. I do want to link to the FrameMaker source file.
I will have to check with Sales at Abode to see about the intregration with or upgrade price available for adding Tech Comm suite.

OIM-DBAT ...ERROR during Disabling user

Hi,
I am using database app tables connector with OIM, wherein the user is being provisioned to a database table. When user is Disabled, the assosciated database resource does not gets Disabled, Disable User is rejected and It gives following error:
GCPROV.ProvTransportProvider.DBProvisioningTransport.DB_STATUS_FIELD_LOOKUP_ERROR" does not correspond to a known Response Code. Using "UNKNOWN
The table has some attributes viz. Username, user id, fname, lname, Status(can be 0 or 1), email.
The requirement is: when user id terminated in OIM, the respective database resource should get Disabled, that is the status should be updated to 0.

Hi Sunny,
When I disable OIM user , Disable User process of the database account is invoked but it gets rejected giving the above stated error. And the status field in process form is not updated. In the GTC configuration, I have mentioned the table column name(ENABLED,which can take values 0 or 1) that will be acting as status ,and also provided the Lookup code name that contains the status mappings as follows:
Code Decode
Active 0
Disabled 1

Remove GrantSendOnBehalfTo disabled user accounts - A novice at scripting

Hello. Can anyone help please
In our exchange 2010 environment we have users who are granted send on behalf to access. Obviously some users leave and I m finding that there are ghosts left behind which are causing issues with our team who add users into the grantsendonbehalfto
option using the EMC. Using the log view we coy out the command and then remove the disabled user from the command and then paste this into an Exchange Powershell command line. This wrks because it is doing what Exchange EMC does which is rewrites
the -GrantSendOnBehalfTo option in it new entirety.
The problem occurs because I need to remove these en-mass from approx 700 plus accounts.
I have tried to modify one user in order to get the script to work but it doesn't.
This is the error message that happens when I run the script below against a known account with at least 2 disabled users in:-
Couldn't find object "xxxxxxxx.xx.xxxxxxx.xxx.xx/DisabledUsers/2013-08/Gaynor Collins-Punter". Please make sure that i
was spelled correctly or specify a different object. Reason: The recipient xxxxxxxx.xx.xxxxxxx.xxx.xx/DisabledUsers/2
13-08/Gaynor Collins-Punter isn't the expected type.
+ CategoryInfo : NotSpecified: (:) [], ManagementObjectNotFoundException
+ FullyQualifiedErrorId : F6498844
+ PSComputerName : ex02-0029.xx.xxxxxxx.xxx.xx
Am running the script from my local PC
This is the script I have used.
# Gather info use get-mailbox -resultsize unlimited$mailboxes = Get-Mailbox zplew1
Foreach($mailbox in $mailboxes)
for($i = ($mailbox.GrantSendOnBehalfTo.count)-1; $i -ge 0; $i--)
$address=$mailbox.GrantSendOnBehalfTo[$i]
$addressString=$address.addressString
If($addressString -like "*disabled*")
$mailbox.GrantSendOnBehalfTo.removeat($i)
$info >> "C:\Scripts\grantsendonbehalfto.csv"
$mailbox |set-mailbox -GrantSendOnBehalfTo $mailbox.grantsendonbehalfto
}If you requiere any more info please let me know.

#1 - I recommend posting in xchange forum fo rhow to do this
#2 - Wen an account is disabled most on the information in the object is hidden. YOu would need to undelete to use the object.
#3 - Get list as text and validaye al values are not deleted accounts. Remove deleted and save back.
¯\_(ツ)_/¯

How to catch rollback in Disable user process task in Xellerat User Process

hi ...
I want to send an email to manager group of the user, once the user is disabled from the OIM (when end date is reached). I created an adapter and attached it to the ‘Changed User Disabled’ process task in the ‘xellerate user provisioning’ process and add a new row in the “Lookup.USR_PROCESS_TRIGGERS” Lookup definition. (code key: USR_DISABLED and Decode: Change User Disabled ). This adapter executes only when the user status is equal to “disabled”.
This works correctly when the OIM user disabling process execute without any errors. But sometimes while disabling the user it gives an error (“resource is not configured properly”) and rolls back everything and make the user active. But at the same time my adapter runs and sends the mail informing user is disabled but yet user is active.
My problem is how can I find or catch rolls back transaction in the “Disable User” process task (which is in “Xellerate User” process”) ??? If I can get to know that a roll back is occurred then I can send a mail to OIM administrator, informing that user disable process is failed.
Can someone please help me to find this..
Thanks in advance :)
Regards,
i.k.

Hi Rajiv,
Error occurs while disabling the user due to resource configuration problems. ( error message is : DOBJ.RESOURCE_NOTCONFIGURED_PROPERLY -- One or more provisioned resource is not configured properly) In this case i know the problem and how to solve it. But what I want to know is in any case if disable process get fail and if things get roll back again, then how can I track that situation and send a mail to OIM Admin(informing the failure) instead of sending a mail to user managers saying that user account has been disabled.
I think now my problem is clear…. Can u please help me to find this.
Regards,
i.k.

Upgrading: RH7 separate product or Tech Comms Suite

Hi Everybody,
I'm at a point now where I'm looking to upgrade to RH7. I
also need a copy of Captivate due to some deadlines that have been
set against me. These are the main two products I'm looking at.
What I really want to know is who, on this forum, have upgraded to
RH7 as a separate product and who has delved in to the Tech Comms
Suite? Are there any gotchas?
I already have RH X5, which was an upgrade of an upgrade, and
Framemaker 6.0, which I haven't actually had a reason to use since
I joined the company. However, I was wondering if it's worth
upgrading to the Tech Comms Suite based on the Framemaker 6.0
product. What I can't find on the website is how does this upgrade
work? Would I receive a brand new version of RH7, CP3 and Acrobat3D
and an upgrade version of Framemaker 8?
The offer of all these products in one suite seems too good
to be true. What happens when just one product is upgraded? What
happens if I then decide that I have no use whatsoever for
Framemaker? Are all the products in the Tech Comms Suite full and
proper versions? So many questions... I searched for answers but
couldn't find any other posts relating to this, so if there is a
discussion going on elsewhere then please do point me in that
direction.
Can anyone help me make my mind up? Thanks!
Liz

quote:
Originally posted by:
lillibetUK
Hi Everybody,
I'm at a point now where I'm looking to upgrade to RH7. I
also need a copy of Captivate due to some deadlines that have been
set against me.
Unless you have some pre-existing experience with Captivate,
you may find it hard to get all the way up to speed on that product
quickly. You may want to look at subscribing to Lynda.com for a
month and taking their on-line course. It's Captivate 2, but I'm
still finding it useful (as a total Captivate newbie).
quote:
These are the main two products I'm looking at. What I really
want to know is who, on this forum, have upgraded to RH7 as a
separate product and who has delved in to the Tech Comms Suite? Are
there any gotchas?
I already have RH X5, which was an upgrade of an upgrade, and
Framemaker 6.0, which I haven't actually had a reason to use since
I joined the company. However, I was wondering if it's worth
upgrading to the Tech Comms Suite based on the Framemaker 6.0
product.
As with RandiWrite, I upgraded from RoboHelp X5 (alone; I
didn't have any of the other products in the suite though I have
CS3 including Acrobat Pro) to TCS. I called Adobe Support for
confirmation that I was eligible before buying the product, and
they advised that I was. I had no trouble at all installing the
suite.
quote:
What I can't find on the website is how does this upgrade
work? Would I receive a brand new version of RH7, CP3 and Acrobat3D
and an upgrade version of Framemaker 8?
Essentially you just get a full install package with the
whole TC suite on it. I opted for the download from the Adobe store
rather than the boxed version since it was slightly cheaper and I
was impatient to get it. (Also, they don't deliver to PO Boxes
which is the only way I could get delivery since I'm seldom in one
place long enough for a courier to find me.) I think that the
install procedure checks that you have the existing programs on
there, then away it goes and puts the new ones on as well. It
didn't remove X5 on my computer; I could do that myself without,
I'm pretty sure, any untoward effect on version 7; I just haven't
bothered yet.
I seem to recall that when I upgraded to PhotoShop CS3 I had
CS2 on one of my two computers but not the other. (I think it was
on my notebook but not my desktop.) I was able to install CS3 on
the desktop without having to install CS2 first; as I recall, it
asked me for some kind of identifying code first to verify that I
was already a licenced owner of CS2. (Sorry to be so vague, it was
a while ago now.) My point is that Adobe has its act together (in
my experience) at letting you do upgrades from older packages.
HOWEVER, RoboHelp X5wasn't an Adobe product at the time and doing
the upgrade without having the X5 package installed may be more
problematic. This is academic in your case since it IS installed.
quote:
The offer of all these products in one suite seems too good
to be true.
It's true; this isn't Microsoft we're talking about here.
8^>
quote:
What happens when just one product is upgraded?
You pay less, but you get less. But that's ONLY if it's ONE
product. Indeed, I found that it would have been more expensive (in
Australia at least, I don't know about the UK) for me to upgrade to
RH7 and buy Captivate than it was to upgrade to TCS. It's not dumb
marketing on Adobe's part, it's actually rather smart. By giving
you that value, it gets you to use more of their products (and lets
face it, while no software is perfect Adobe's is pretty good), and
consequently hooks you in for future versions. I know that RH has
imperfections, but I do love it. Same with Acrobat Pro.
quote:
What happens if I then decide that I have no use whatsoever
for Framemaker?
I don't, but I don't care. I may play with it at some point,
but the short version is that I still got the products that I DID
want (RH7 and Captivate) cheaper than buying them separately and if
anything else wants to come along for the ride I'll find it a room
on my hard disk.
quote:
Are all the products in the Tech Comms Suite full and proper
versions?
They are indeed. You can take them out in public or to a nice
restaurant and have no fear that they'll cause you embarrassment.
quote:
So many questions... I searched for answers but couldn't find
any other posts relating to this, so if there is a discussion going
on elsewhere then please do point me in that direction.
Can anyone help me make my mind up? Thanks!
Liz
Go for it. You'll love it. 8^>
Mal.

Comm Suite auto disable users

Similar Messages

Maybe you are looking for