COS Reclass

Hi,
When running the COS reclass report, it showed a negative amount for one of our subsidiaries. However, when we ran journal import, we did not see any journal entries for this subsidiary.
I am new to Oracle Financials and I can't find any information on the cost of sales reclass process in the manual or in metalinks. Can someone explain what the process is about or point me to where I can find additional info on this subject?
Thank you for your help.
Pat

Hi Dude,
for point one, the description of the issue could be describes with the following example
I am a user with two different managers pointed by their DN in my manager attribute
With a COS, my OU attribute has virtual values from the OU of the manager
But on my object I can see only one OU from the first listed manager, and I wish to have the two OU from the two managers
for point 2, I understand that real and virtual values cannot coexist

Similar Messages

How to Create new entry, while keeping CoS and nsRoles in tact...

Hi,
Here's the short version:
How can one create a new entry/context in DS, copy the attributes from an existing entry (using JNDI) and save them in the new entry/context WITHOUT duplicating CoS or nsRole/DN info.
Long version of the question:
We are using DS 5.2 and Portal 6 (and messenger/calendar etc). We have our employees saved in DS. What I want to do is change a user's name/uid by copying the user's attributes (in JNDI) and create a New entry with the New uid, with all the other attributes the same. Then deleting the original entry.
This is what I have done...
1. Get all the employee's attributes... (abriviated)(ctx is the DirContext)
NamingEnumeration answer = ctx.search(searchBase, filter, ctls);
SearchResult sr = (SearchResult)answer.next();
Attributes attrs = sr.getAttributes();
2. Create a new employee with the same attributes (assume I use a different uid in the dn)
ctx.createSubcontext(dn, attrs);
This works...it copies all the attributes to the new entry -BUT- when you look at the LDIF file, it ADDS several more attributes to the new entry.
Example: it adds the following...
sunPortalNetletRules
sunPortalGatewayEnableSSO
sunPortalDesktopDpDocument
sunPortalDesktopDpLastModifiedUser
iplanet-am-user-auth-modules
And about 20 others...
Now if I am not mistaken, these are the CoS and roles that the DS uses and propagates down to the entry. But when I copy the attributes over, (using JNDI) I get these attributes too but I want to copy only the attributes that are unique and have DS handle the roles and CoS like it does for the original entry.
Is there a way to tell the DS to just use the CoS or roles instead of duplicating all these attributes in this individual entry??? (and do it using JNDI)
(sorry this question is sooooo long.)
Thanks!
Eric

Hello Viji,
I am extremely thank ful for the document.
Kindly help me with below points of possible
1)     if it is standard table (LFBK) , even then shall we will need to do the generate program
step in SCDO ?
2)     does it generate Z-function module ?
3)     do we need to call this function module at appropriate places to update the CDPOS and CDHDR
for changes in the standard table ?
4)     I have already created custom business object for LFBK so that Iu2019ll be able to create entry
in SWEC (fyi)
5)     how and when are the method used in the table maintenance generator called ?
6)     Page 14 point 3 says that "Add a new entry to link the Change Document Object ZPRPS_CD and
table ZPRPS so that changes are recorded when table entries change."
Does this mean that once we create SCDO and generate program, these two steps are enough
for the SWED entry to create change log in CDPOS and CDHDR ?
7)     It is understood that it is necessary that the change object in SWEC should be logged in
CDPOS and CDHDR only then the event would be created for the SWEC entry. is this correct ?
in order to create change log for the change object in CDHDR and CDPOS, is the SCDO entry
and generate program steps enough or the methods of table maintenance generator are also
required ?
thank you very much for your time
B

I want to cancel my billing cos i didnt pay anything and it wont let me download any apps free

i try download apps free but it keep say tap continue and sign in view billing information and i didnt pay anything so how i stop it happen and cancel any payment cos i think my son accdient press any thing so pls help me

You will not be able to download anything - even free apps - until you
resolve the problem with your account.
You might want to start with these 2 links:
http://www.apple.com/support/itunes/contact/
https://getsupport.apple.com/Issues.action

Nano3rdgen Copying playlist from itunes to ipod and it says it can't copy certain songs to ipod cos of file type.These problem songs all from same album, all ACC file type and all copied fine when I copied the album itself few weeks ago-help!

When copying playlist from itunes to nano3rd message comes saying 9 of songs can't be copied to ipod cos of file type. These 9 are all from same album, all ACC and all copied fine when I copied the album itselm some weeks ago. Rest of playlist was ACC too. P.S. album is a CD-R copied version-is this an issue? HELP I AM DESPAIRING!

I never laughed in all my life. Here I was, inserting the cd Dance with Me, thinking it's not going to copy the whole thing. yeah, right.
Sure, it prompted me, Do I want to replace the songs, so of course I said "no, don't replace the songs". and guess what it did. It copied the whole cd (at least I got my two songs).
I went into the itunes library, and sure enough, all the songs were there twice. So what did my intelligent brain think of? I just unchecked the doubled songs and stuck my ipod into my computer and it synched up and I got what I wanted.
Now what did I do wrong when it prompted me. I clicked on "don't replace" and it replaced them anyway.
Am I dumb? or is itunes stupid?
thanks, Melody

Various questions on uplink profiles, CoS, native VLAN, downlink trunking

I will be using vPC End Host Mode with MAC-pinning. I see I can further configure MAC-Pinning. Is this required or will it automatically forward packets by just turning it on? Is it also best not to enable failover for the vnics in this configuration? See this text from the Cisco 1000V deployment Guide:
Fabric Fail-Over Mode
Within the Cisco UCS M71KR-E, M71KR-Q and M81KR adapter types, the Cisco Unified Computing System can
enable a fabric failover capability in which loss of connectivity on a path in use will cause remapping of traffic
through a redundant path within the Cisco Unified Computing System. It is recommended to allow the Cisco Nexus
1000V redundancy mechanism to provide the redundancy and not to enable fabric fail-over when creating the
network interfaces within the UCS Service Profiles. Figure 3 shows the dialog box. Make sure the Enable Failover
checkbox is not checked."
What is the 1000V redundancy?? I didn't know it has redundancy. Is it the MAC-Pinning set up in the 1000V? Is it Network State Tracking?
The 1000V has redundancy and we can even pin VLANs to whatever vNIC we want. See Cisco's Best Practices for Nexus 1000V and UCS.
Nexus1000V management VLAN. Can I use the same VLAN for this and for ESX-management and for Switch management? E.g VLan 3 for everything.
According to the below text (1000V Deployment Guide), I can have them all in the same vlan:
There are no best practices that specify whether the VSM
and the VMware ESX management interface should be on the same VLAN. If the management VLAN for
network devices is a different VLAN than that used for server management, the VSM management
interface should be on the management VLAN used for the network devices. Otherwise, the VSM and the
VMware ESX management interfaces should share the same VLAN.
I will also be using CoS and Qos to prioritize the traffic. The CoS can either be set in the 1000V (Host control Full) or per virtual adapter (Host control none) in UCS. Since I don't know how to configure CoS on the 1000V, I wonder if I can just set it in UCS (per adapter) as before when using the 1000V, ie. we have 2 choices.
Yes, you can still manage CoS using QoS on the vnics when using 1000V:
The recommended action in the Cisco Nexus 1000V Series is to assign a class of service (CoS) of 6 to the VMware service console and VMkernel flows and to honor these QoS markings on the data center switch to which the Cisco UCS 6100 Series Fabric Interconnect connects. Marking of QoS values can be performed on the Cisco Nexus 1000V Series Switch in all cases, or it can be performed on a per-VIF basis on the Cisco UCS M81KR or P81E within the Cisco Unified Computing System with or without the Cisco Nexus 1000V Series Switch.
Something else: Native VLANs
Is it important to have the same native VLAN on the UCS and the Cisco switch? And not to use the default native VLAN 1? I read somewhere that the native VLAN is used for communication between the switches and CDP amongst others. I know the native VLAN is for all untagged traffic. I see many people set the ESXi management VLAN as native also, and in the above article the native VLAN (default 1) is setup. Why? I have been advised to leave out the native VLAN.
Example:Will I be able to access a VM set with VLAN 0 (native) if the native VLAN is the same in UCS and the Cisco switch (Eg. VLAN 2)? Can I just configure a access port with the same VLAN ID as the native VLAN, i.e 2 and connect to it with a PC using the same IP network address?
And is it important to trunk this native VLAN? I see in a Netapp Flexpod config they state this: "This configuration also leverages the native VLAN on the trunk ports to discard untagged packets, by setting the native VLAN on the port channel, but not including this VLAN in the allowed VLANs on the port channel". But I don't understand it...
What about the downlinks from the FI to the chassis. Do you configure this as a port channel also in UCS? Or is this not possible with the setup described here with 1000V and MAC-pinning.
No, port channel should not be configured when MAC-pinning is configured.
[Robert] The VSM doesn't participate in STP so it will never send BPDU's. However, since VMs can act like bridges & routers these days, we advise to add two commands to your upstream VEM uplinks - PortFast and BPDUFilter. PortFast so the interface is FWD faster (since there's no STP on the VSM anyway) and BPDUFilter to ignore any received BPDU's from VMs. I prefer to ignore them then using BPDU Gaurd - which will shutdown the interface if BPDU's are received.
-Are you thinking of the upstream switch here (Nexus, Catalyst) or the N1kV uplink profile config?
Edit: 26 July 14:23. Found answers to many of my many questions...

Answers inline.
Atle Dale wrote:
Something else: Native VLANsIs it important to have the same native VLAN on the UCS and the Cisco switch? And not to use the default native VLAN 1? I read somewhere that the native VLAN is used for communication between the switches and CDP amongst others. I know the native VLAN is for all untagged traffic. I see many people set the ESXi management VLAN as native also, and in the above article the native VLAN (default 1) is setup. Why? I have been advised to leave out the native VLAN.[Robert] The native VLAN is assigned per hop. This means between the 1000v Uplinks port profile and your UCS vNIC definition, the native VLAN should be the same. If you're not using a native VLAN, the "default" VLAN will be used for control traffic communication. The native VLAN and default VLAN are not necessarily the same. Native refers to VLAN traffic without an 802.1q header and can be assigned or not. A default VLAN is mandatory. This happens to start as VLAN 1 in UCS but can be changed. The default VLAN will be used for control traffic communication. If you look at any switch (including the 1000v or Fabric Interconnects) and do a "show int trunk" from the NXOS CLI, you'll see there's always one VLAN allowed on every interface (by default VLAN 1) - This is your default VLAN.Example:Will I be able to access a VM set with VLAN 0 (native) if the native VLAN is the same in UCS and the Cisco switch (Eg. VLAN 2)? Can I just configure a access port with the same VLAN ID as the native VLAN, i.e 2 and connect to it with a PC using the same IP network address?[Robert] There's no VLAN 0. An access port doesn't use a native VLAN - as its assigned to only to a single VLAN. A trunk on the other hand carries multiple VLANs and can have a native vlan assigned. Remember your native vlan usage must be matched between each hop. Most network admins setup the native vlan to be the same throughout their network for simplicity. In your example, you wouldn't set your VM's port profile to be in VLAN 0 (doens't exist), but rather VLAN 2 as an access port. If VLAN 2 also happens to be your Native VLAN northbound of UCS, then you would configured VLAN 2 as the Native VLAN on your UCS ethernet uplinks. On switch northbound of the UCS Interconnects you'll want to ensure on the receiving trunk interface VLAN 2 is set as the native vlan also. Summary:1000v - VM vEthernet port profile set as access port VLAN 21000v - Ethernet Uplink Port profile set as trunk with Native VLAN 2UCS - vNIC in Service Profile allowing all required VLANs, and VLAN 2 set as NativeUCS - Uplink Interface(s) or Port Channel set as trunk with VLAN 2 as Native VLANUpstream Switch from UCS - Set as trunk interface with Native VLAN 2From this example, your VM will be reachable on VLAN 2 from any device - assuming you have L3/routing configured correctly also.And is it important to trunk this native VLAN? I see in a Netapp Flexpod config they state this: "This configuration also leverages the native VLAN on the trunk ports to discard untagged packets, by setting the native VLAN on the port channel, but not including this VLAN in the allowed VLANs on the port channel". But I don't understand it...[Robert] This statement recommends "not" to use a native VLAN. This is a practice by some people. Rather than using a native VLAN throughout their network, they tag everything. This doesn't change the operation or reachability of any VLAN or device - it's simply a design descision. The reason some people opt not to use a native VLAN is that almost all switches use VLAN 1 as the native by default. So if you're using the native VLAN 1 for management access to all your devices, and someone connects in (without your knowing) another switch and simply plug into it - they'd land on the same VLAN as your management devices and potentially do harm.What about the downlinks from the FI to the chassis. Do you configure this as a port channel also in UCS? Or is this not possible with the setup descrived here with 1000V and MAC-pinning.[Robert] On the first generation hardware (6100 FI and 2104 IOM) port channeling is not possible. With the latest HW (6200 and 2200) you can create port channels with all the IOM - FI server links. This is not configurable. You either tell the system to use Port Channel or Individual Links. The major bonus of using a Port Channel is losing a link doesn't impact any pinned interfaces - as it would with individual server interfaces. To fix a failed link when configured as "Individual" you must re-ack the Chassis to re-pinn the virtual interfaces to the remaining server uplinks. In regards to 1000v uplinks - the only supported port channeling method is "Mac Pinning". This is because you can't port channel physical interfaces going to separate Fabrics (one to A and one to B). Mac Pinning gets around this by using pinning so all uplinks can be utilized at the same time.--[Robert] The VSM doesn't participate in STP so it will never send BPDU's. However, since VMs can act like bridges & routers these days, we advise to add two commands to your upstream VEM uplinks - PortFast and BPDUFilter. PortFast so the interface is FWD faster (since there's no STP on the VSM anyway) and BPDUFilter to ignore any received BPDU's from VMs. I prefer to ignore them then using BPDU Gaurd - which will shutdown the interface if BPDU's are received.-Are you thinking of the upstream switch here (Nexus, Catalyst) or the N1kV uplink profile config?[Robert] The two STP commands would be used only when the VEM (ESX host) is directly connected to an upstream switch. For UCS these two commands to NOT apply.

How can i change my bank account cos last time i used my credit card now i want to use my debit card sgain

How can i change my bank account cos i used my credit card last time now i want to use my debit card again

iTunes Store: Accepted forms of payment
http://support.apple.com/kb/HT5552
Changing Account Information > http://support.apple.com/kb/HT1918
If necessary...
Contact iTunes Customer Service and request assistance
Use this Link > Apple Support iTunes Store Contact

I have a Macbook Model No A1181 2.4 GHz intel core 2 Duo with 4 Gb Ram. Should I be able to instal Final Cut Pro 3.0.2 cos I'm having problems?

I have a Macbook Model No A1181 2.4 GHz intel core 2 Duo with 4 Gb Ram. Should I be able to instal Final Cut Pro 3.0.2 cos I'm having problems? As I read it My machine should be able to run the software.
Thanks in advance

You are trying to use software that is over 10 years old. As I read it, FCP 3.0.2 required 10.1 or higher at the time, but as FCP is reliant on quicktime, which has been updated many, many times, I doubt that you will ever get it to work properly.

Recognition of COS/COGS Account if the process is A/P Reserve Invoice

hi there,
i am trying to post an A/R Reserve Invoice of non-inventoriable item because it's Advance payment to Supplier scenario. would you know on what transaction can i create to recognize the COS/COGS Account of it? i believe if my process is :
1. PO
2. A/P Invoice
3. Outgoing Payment
under A/P Invoice transaction i'll be able to select the COS/COGS Account of it under G/L Account field but in A/P Reserve Invoice, it's not working.

Hello,
It is system functionality because whenever you make Reserve invoice the JE passed only
1.Downpayment Receive Account And Party Account
2.Party Account And Bank Account .
So we are not able to Active this filed on that document.
And On A/P invoice there are number of GL affected Like
Non- Inventory(Default Expeces0 Item Account ,Tax Account,Party Account and this account we can change on invoice.
So you should explain system functionality to your client
Thanks
Manvendra Singh Niranjan

My iPod nano 5th generation is not recognized by iTunes. I did update, but still, it won't work. I don't want to uninstall the iTunes cos I don't want to lose my music and audio books. What to do? It started after I updated iTunes.

my iPod nano 5th generation is not recognized by iTunes. I did update, but still, it won't work. I don't want to uninstall the iTunes cos I don't want to lose my music and audio books. What to do? It started after I updated iTunes.

iPod appears in Windows but not in iTunes

Iphone is dead, gone to insurance co. for replacement. They say because "Find My iPhone" is still active, they can't replace or try to fix it. problem is can't log in to de-activate it, cos email account does not exist anymore. How can I de-activate it?

iphone is dead, gone to insurance co. for replacement. They say because "Find My iPhone" is still active, they can't replace or try to fix it. problem is can't log in to de-activate it, cos email account does not exist anymore. How can I de-activate it?

You never used your iPhone?
You never logged into iTunes?
Your AppleID & Password for iCloud& iPhone should be the same AppleID &Password you used to log in here and post a message.
-> Find your Apple ID

Salve , ho un problema con Adobe Photoshop CC su Windows 8.1. Mentre scrivo un testo su un 'immagine non riesco a visualizzare cosa stò digitando. L'immagine sfarfallia , scompare e si normalizza il tutto appena finisco di digitare. Potrebbe essere un pro

Salve , ho un problema con Adobe Photoshop CC su Windows 8.1. Mentre scrivo un testo su un 'immagine non riesco a visualizzare cosa stò digitando. L'immagine sfarfallia , scompare e si normalizza il tutto appena finisco di digitare. Potrebbe essere un problema di scheda video ? Grazie per la risposta

Withholding tax for open items posted from FI-TV-COS

When the open item is generated from FI-TV-COS it is missing the withholding tax detail opposed to the manual creation of invoice for the same vendor in FI.
What is the workaround to have withholding tax detail for such open items coming from FI-TV-COS?

Withholding tax is not supported by SAP here...

Payment type: PP, ACH, COS in SAP ?

Dear all,
I'm creating DMEE format tree for three payment types: PP (Priority Payment), ACH (Automatic Clearing House) and
COS (Cheque Outsourcing Services).
I'm wondering in SAP how can I know which payment is PP, ACH, or COS.
Or when we enter a vendor's invoice, is there any "type" or "indicator" that tell me this kind of invoice will be paid
in PP, ACH or COS.
I have no background on these types of payment so please explain for me.
Best regards.
Maxielight.

For foreign currency payment methord you need to do following in T code FBZP.
Step 1: Pmnt Methods in company code :- Check the box for "Foreign Currency Allowed" under "Foreign payments/foreign currency payments" for this check payment method.
Step 2: Bank Determination --> a) Ranking Order :- configure house bank for check payment method and currency GBP
b) Bank Accounts :- Configure Account ID for above mentioned house bank, check payment method and currency GBP
c) Available Amounts :- Make sure you have sufficient balance for a combination of above mentioned house bank, account ID, currency with days being 999.
By doing this, the F110 will pick up GBP posted documents for payment in GBP.
Thanks,
Vishal Pant

Question re. setting COS and DSCP fields

Hi folks,
I have two vidio codec devices, one at the core site and another at a remote site. I have an IP telephoney solution with QOS configured. The catalyst 3560 access switches are configured to trust the COS settings on trunk ports from IP handsets.
I need to set the COS field on the access ports from the codecs to match that set by the IP phones to give eqaul prioritised status on the uplink from the access layer switch. I also need to set the DSCP field to prioritise the traffic end to end. My questions are how do I change the COS field on ingress to the switch port? And where and how do I change the DSCP filed i.e. at the switch or the router?
Thanks in advance, Shane.

Yes you should be seeing the logo, but everyone's getting the red X instead - it's a bug introduced by the 10.1.2 update (as is the appearance of the "i" icon at the top right, where we should have the templates menu icon) but it doesn't affect the function of the dialog. What appears on the left-side panel and in the Advanced tree depends on what's in the file - some have more XMP structure than others.

Implementing password policie using Role and CoS

Hy all,
I have created a directory with the following partial structure (Sun directory 5.2 patch 2):
ou=people,o=accounts,c=an
|----- cn=user1
|----- cn=user2
|----- cn=user3
ou=services,o=accounts,c=an
|---------cn=user4
|---------cn=user5
|---------cn=user6
I want to assign different password policies based on the ou.
I read within the admin guide that there is a way to do that through CoS and Role: http://docs.sun.com/source/817-7613/useracct.html#wp19625
So I create following records:
- Customized Password Policy Container:
dn: cn=Customized Password Policy, c=an
objectClass: top
objectClass: nsContainer
cn: Customized Password Policy
- External User Customized Password Policy: (same as the global one)
dn: cn=externalUserPwdPolicy, cn=Customized Password Policy, c=an
objectClass: top
objectClass: passwordPolicy
cn: externalUserPwdPolicy
passwordInHistory: 5
passwordWarning: 432000
passwordExpireWithoutWarning: on
passwordRootdnMayBypassModsChecks: on
passwordLockout: on
passwordMaxFailure: 3
passwordMaxAge: 5184000
passwordCheckSyntax: off
passwordResetFailureCount: 1200
passwordMinLength: 8
passwordStorageScheme: SHA
passwordChange: on
passwordMinAge: 86400
passwordMustChange: off
passwordUnlock: off
passwordLockoutDuration: 3600
passwordExp: on
- Service Account Customized Password Policy: (same as the global one except that there is no expiration for password and the password minimum age is set to 2 days instead of one)
dn: cn=serviceAccountPwdPolicy, cn=Customized Password Policy, c=an
objectClass: top
objectClass: passwordPolicy
cn: serviceAccountPwdPolicy
passwordInHistory: 5
passwordWarning: 432000
passwordExpireWithoutWarning: on
passwordRootdnMayBypassModsChecks: on
passwordLockout: on
passwordMaxFailure: 3
passwordMaxAge: 5184000
passwordCheckSyntax: off
passwordResetFailureCount: 1200
passwordMinLength: 8
passwordStorageScheme: SHA
passwordChange: on
passwordMinAge: 172800
passwordMustChange: off
passwordUnlock: off
passwordLockoutDuration: 3600
passwordExp: off
- External User Role:
dn: cn=externalUserRole,c=an
objectclass: top
objectclass: LDAPsubentry
objectclass: nsRoleDefinition
objectclass: nsComplexRoleDefinition
objectclass: nsFilteredRoleDefinition
cn: externalUserRole
nsRoleFilter: (&(entrydn=*o=accounts*)(entrydn=*ou=people*))
Description: Filtered role for external users
- Service Account Role
dn: cn=serviceAccountRole,c=an
objectclass: top
objectclass: LDAPsubentry
objectclass: nsRoleDefinition
objectclass: nsComplexRoleDefinition
objectclass: nsFilteredRoleDefinition
cn: externalUserRole
nsRoleFilter: (&(entrydn=*o=accounts*)(entrydn=*ou=services*))
Description: Filtered role for external services account
- Template Container for Customized Password Policy:
dn: cn=pwdPolTemplateContainer, c=an
objectClass: top
objectClass: nscontainer
- Class of Service (CoS) Definition for password policy:
dn: cn=PwdPol_CoSDefinition, c=an
objectClass: top
objectClass: LDAPsubentry
objectClass: cosSuperDefinition
objectClass: cosClassicDefinition
cn: PwdPol_CoSDefinition
cosAttribute: passwordPolicySubentry operational
cosTemplateDn: cn=pwdPolTemplateContainer, c=an
cosSpecifier: nsRole
- Class of Service (CoS) Template for ExternalUserRole:
dn: cn="cn=externalUserRole, c=an", cn=PwdPolTemplateContainer, c=an
objectClass: top
objectClass: extensibleObject
objectClass: costemplate
objectClass: LDAPsubentry
cosPriority: 2
passwordPolicySubentry: cn=externalUserPwdPolicy, cn=Customized Password Policy, c=an
- Class of Service (CoS) Template for ServiceAccountRole:
dn: cn="cn=serviceAccountRole, c=an", cn=PwdPolTemplateContainer, c=an
objectClass: top
objectClass: extensibleObject
objectClass: costemplate
objectClass: LDAPsubentry
cosPriority: 2
passwordPolicySubentry: cn=serviceAccountPwdPolicy, cn=Customized Password Policy, c=an
- The thing is that it does not to work: if I disable the global password policy, I can set a 3 caracters password even if I specified in the sub password policy that passwordminlengnt is equal to 8 caracters.
Many thanks in advance for your help.
Gregoire

Hmm,
Pretty cool.
I just finished doing it the hard-way when I saw your post :(.
I tried it anyways, and it did all the work that I had done by hand in the previous try. Which was ...
1) Creating the filtered role (same in both approaches).
2) Creating a Container for COS Templates.
3) Creating a COS Template with a dn having a cn string of the full dn to the role in 1) above. Had to use generic entry editor to add all the additional attributes as below ...
dn: cn="cn=TempFilter,ou=people,dc=example,dc=com",
�cn=PolTempl,dc=example,dc=com
objectclass: top
objectclass: extensibleObject
objectclass: LDAPsubentry
objectclass: costemplate
cosPriority: 1
passwordPolicySubentry: cn=TempPolicy,dc=example,dc=com
(started with a new costemplate and the added all the above attributes, also involved things like changing the naming attribute - the dn - from cosPriority to the one cn as shown above)
4) Creatiing a COS with ...
4.1) passwordpolicysubenty as a generated attribute that is overriding and operation (this is picked from the matched CoS template)
4.2) Use the template container's dn from 2) above for the TemplateDN value.
4.3) Use nsrole of the target enty to narrow down to the COS template as in 3) above. I.E. "template"->"attribute name" value is set to "nsRole"
(So when a user's nsrole maps to a cn value of an entry under the TemplateDN subtree. That template applies.)

COS Reclass

Similar Messages

Maybe you are looking for