Country field in the subject name using mmc enrollment

Hello.
I'm running windows 2008 ADCS and i have the following issue:
i can't get the C=country in the certificate [some other fields (o, ou) do not appear also]
The setup is the following:
* certificate template is configured to use active directory FQDN for subject name
* the user has the country (and OU, and O) defined in AD user proprieties
* i don't want to use web enrollment but MMC
What i need to happen: when enrolling via MMC, with simple request certificate on behalf of, not only cn=userX,cn=Users,dc=XYZ,dc=local must appear in the certificate but also C=, O=, OU=
any ideas how this is can be done?

AFAIK this cannot be done using the default Windows policy module which only supports either the name from AD DN components or an entirely custom DN (if the template is configured to submit the name in the request) - but not a combination of name elements.
It's also not possible to include other AD attributes that are not part of the DN (such as O).
However, OU should appear if it is in the DN - but from your sample it seems the user is in the default Users container and not in an OU?
A custom policy module could do that and combine DN components from different sources - e.g. the policy module included with Forefront Indentity Manager.
Elke
Edit: In
this article an example is given of how to configure such a custom name in the FIM policy module, by combining data from AD (as your O and OU not in the DN), fixed strings, and additional input to the FIM portal:
cn={User!GivenName} {User!SurName}, cn={Clm!CostCenter},o=Contoso,c=US.

Similar Messages

  • A cmr-field and a cmp-field on the bean are using the same name. The names

    Hi:
    I am using weblogic 8.1 and MyEclipse 5.1.1. I am deploying my ear application through MyEclipse 5.1.1 as an ear file.
    When I ran the following EJB QL:
    SELECT OBJECT(p) FROM Product p.category = ?1
    I get the following error:
    n relation Category-Product, a cmr-field and a cmp-field on the bean are using the same name. The names of cmr and cmp fields must be unique.
    It is basically complaining that I have a field
    <cmr-field>
                             <cmr-field-name>category</cmr-field-name>
                        </cmr-field>
    in my ejb-jar.xml and also the same category in the
    <cmp-field><field-name>category</field-name></cmp-field>
    field. The problem is that if I changed the value of the cmr-field, I have to add a get and set in my productLocal.java and when you do that you have to do the same in the ejb-jar.xml.
    Here is my ejb-jar.xml:
    <?xml version="1.0"?>
    <!DOCTYPE ejb-jar PUBLIC
    "-//Sun Microsystems, Inc.//DTD Enterprise JavaBeans 2.0//EN"
    "http://java.sun.com/dtd/ejb-jar_2_0.dtd">
    <ejb-jar>
    <enterprise-beans>
    <entity>
    <ejb-name>CategoryEJB</ejb-name>
    <local-home>com.CategoryHomeLocal</local-home>
    <local>com.CategoryLocal</local>
    <ejb-class>com.CategoryBean</ejb-class>
    <persistence-type>Container</persistence-type>
    <prim-key-class>java.lang.Integer</prim-key-class>
    <reentrant>False</reentrant>
    <cmp-version>2.x</cmp-version>
    <abstract-schema-name>Category</abstract-schema-name>
         <cmp-field><field-name>categoryId</field-name></cmp-field>
    <cmp-field><field-name>categoryName</field-name></cmp-field>
    <cmp-field><field-name>picture</field-name></cmp-field>
    <cmp-field><field-name>pictureWidth</field-name></cmp-field>
    <cmp-field><field-name>pictureHeight</field-name></cmp-field>
    <cmp-field><field-name>labelOn</field-name></cmp-field>
         <cmp-field><field-name>labelOff</field-name></cmp-field>
         <cmp-field><field-name>button</field-name></cmp-field>
    <primkey-field>categoryId</primkey-field>
    <security-identity><use-caller-identity/></security-identity>
              <query>
                   <query-method>
                        <method-name>findCategory</method-name>
                        <method-params></method-params>
                   </query-method>
                   <ejb-ql>
                        SELECT OBJECT(c) FROM Category c
                   </ejb-ql>
              </query>
         </entity>
         <entity>
    <ejb-name>ProductEJB</ejb-name>
    <local-home>com.ProductHomeLocal</local-home>
    <local>com.ProductLocal</local>
    <ejb-class>com.ProductBean</ejb-class>
    <persistence-type>Container</persistence-type>
    <prim-key-class>java.lang.Integer</prim-key-class>
    <reentrant>False</reentrant>
    <cmp-version>2.x</cmp-version>
    <abstract-schema-name>Product</abstract-schema-name>
         <cmp-field><field-name>productId</field-name></cmp-field>
    <cmp-field><field-name>brandName</field-name></cmp-field>
    <cmp-field><field-name>productDescription</field-name></cmp-field>
    <cmp-field><field-name>purchasePrice</field-name></cmp-field>
    <cmp-field><field-name>category</field-name></cmp-field>
    <primkey-field>productId</primkey-field>
    <security-identity><use-caller-identity/></security-identity>
              <query>
                   <query-method>
                        <method-name>findProduct</method-name>
                        <method-params>
                        <method-param>com.CategoryLocal</method-param>
                        </method-params>
                   </query-method>
                   <ejb-ql>
                        SELECT OBJECT(p) FROM Product p.category = ?1
                   </ejb-ql>
              </query>
         </entity>
    </enterprise-beans>
    <relationships>
                   <ejb-relation>
                   <ejb-relation-name>Category-Product</ejb-relation-name>
                   <ejb-relationship-role>
                        <ejb-relationship-role-name>
                             Category-has-many-Product-numbers
                        </ejb-relationship-role-name>
                        <multiplicity>one</multiplicity>
                        <relationship-role-source>
                             <ejb-name>CategoryEJB</ejb-name>
                        </relationship-role-source>
                        <cmr-field>
                             <cmr-field-name>productNumbers</cmr-field-name>
                             <cmr-field-type>java.util.Collection</cmr-field-type>
                        </cmr-field>
                   </ejb-relationship-role>
                   <ejb-relationship-role>
                        <ejb-relationship-role-name>
                             Product-belongs-to-Category
                        </ejb-relationship-role-name>
                        <multiplicity>many</multiplicity>
                        <cascade-delete/>
                        <relationship-role-source>
                             <ejb-name>ProductEJB</ejb-name>
                        </relationship-role-source>
                        <cmr-field>
                             <cmr-field-name>category</cmr-field-name>
                        </cmr-field>
                   </ejb-relationship-role>
              </ejb-relation>
    </relationships>
    <assembly-descriptor>
    <security-role>
    <role-name>Employees</role-name>
    </security-role>
    <method-permission>
    <role-name>Employees</role-name>
    <method>
    <ejb-name>CategoryEJB</ejb-name>
    <method-name>*</method-name>
    </method>
    </method-permission>
    <container-transaction>
    <method>
    <ejb-name>CategoryEJB</ejb-name>
    <method-name>*</method-name>
    </method>
    <method>
    <ejb-name>ProductEJB</ejb-name>
    <method-name>*</method-name>
    </method>
    <trans-attribute>Required</trans-attribute>
    </container-transaction>
    </assembly-descriptor>
    </ejb-jar>     
    Here is my weblogic-cmp-rdbms-jar.xml:
    <!DOCTYPE weblogic-rdbms-jar PUBLIC
    '-//BEA Systems, Inc.//DTD WebLogic 8.1.0 EJB RDBMS Persistence//EN'
    'http://www.bea.com/servers/wls810/dtd/weblogic-rdbms20-persistence-810.dtd'>
    <weblogic-rdbms-jar>
    <weblogic-rdbms-bean>
         <ejb-name>CategoryEJB</ejb-name>
    <data-source-name>ShoeStore</data-source-name>
         <table-map>
              <table-name>category</table-name>
              <field-map>
              <cmp-field>categoryId</cmp-field>
              <dbms-column>categoryID</dbms-column>
              </field-map>
              <field-map>
              <cmp-field>categoryName</cmp-field>
              <dbms-column>categoryName</dbms-column>
              </field-map>
              <field-map>
              <cmp-field>picture</cmp-field>
              <dbms-column>Picture</dbms-column>
              </field-map>
              <field-map>
              <cmp-field>pictureWidth</cmp-field>
              <dbms-column>PictureWidth</dbms-column>
              </field-map>
              <field-map>
              <cmp-field>pictureHeight</cmp-field>
              <dbms-column>PictureHeight</dbms-column>
              </field-map>
              <field-map>
              <cmp-field>labelOn</cmp-field>
              <dbms-column>LabelOn</dbms-column>
              </field-map>
              <field-map>
              <cmp-field>labelOff</cmp-field>
              <dbms-column>LabelOff</dbms-column>
              </field-map>
              <field-map>
              <cmp-field>button</cmp-field>
              <dbms-column>Button</dbms-column>
              </field-map>
    </table-map>
    <automatic-key-generation>
    <generator-type>SQL_SERVER</generator-type>
    </automatic-key-generation>
    </weblogic-rdbms-bean>
    <weblogic-rdbms-bean>
         <ejb-name>ProductEJB</ejb-name>
    <data-source-name>ShoeStore</data-source-name>
         <table-map>
              <table-name>PRODUCT</table-name>
              <field-map>
              <cmp-field>productId</cmp-field>
              <dbms-column>productId</dbms-column>
              </field-map>
              <field-map>
              <cmp-field>brandName</cmp-field>
              <dbms-column>brandName</dbms-column>
              </field-map>
              <field-map>
              <cmp-field>productDescription</cmp-field>
              <dbms-column>productDescription</dbms-column>
              </field-map>
              <field-map>
              <cmp-field>purchasePrice</cmp-field>
              <dbms-column>purchasePrice</dbms-column>
              </field-map>
              <field-map>
              <cmp-field>category</cmp-field>
              <dbms-column>categoryId</dbms-column>
              </field-map>
    </table-map>
         <!-- Automatically generate the value of ID in the database on inserts using sequence table -->
    <automatic-key-generation>
    <generator-type>SQL_SERVER</generator-type>
    </automatic-key-generation>
    </weblogic-rdbms-bean>
    <weblogic-rdbms-relation>
         <relation-name>Category-Product</relation-name>
    <weblogic-relationship-role>
    <relationship-role-name>Product-belongs-to-Category</relationship-role-name>
              <relationship-role-map>
    <column-map>
    <foreign-key-column>categoryId</foreign-key-column>
    <key-column>categoryID</key-column>
    </column-map>
              </relationship-role-map>
    </weblogic-relationship-role>
    </weblogic-rdbms-relation>
    </weblogic-rdbms-jar>
    Here is my productLocal.java:
    package com;
    import javax.ejb.CreateException;
    import javax.naming.NamingException;
    import java.util.Date;
    import java.util.Vector;
    import java.util.Collection;
    public interface ProductLocal extends javax.ejb.EJBLocalObject
         public Integer getProductId();
         public void setProductId(Integer productId);
         public String getBrandName();
         public void setBrandName(String brandName);
         public String getProductDescription();
         public void setProductDescription(String productDescription);
         public Double getPurchasePrice();
         public void setPurchasePrice(Double purchasePrice);
    public CategoryLocal getCategory();
         public void setCategory(CategoryLocal category);
    Here is my ProductBean.java:
    package com;
    import javax.naming.InitialContext;
    import javax.ejb.EntityContext;
    import javax.ejb.CreateException;
    import javax.naming.NamingException;
    import java.util.Date;
    import java.util.Collection;
    import java.util.Iterator;
    import java.util.Vector;
    import java.lang.Integer;
    public abstract class ProductBean implements javax.ejb.EntityBean
         public Integer ejbCreate(Integer id)
              this.setProductId(id);
              return null;
         public void ejbPostCreate(Integer id)
         //public abstract Integer getCategoryId();
    //     public abstract void setCategoryId(Integer categoryId);
         public abstract CategoryLocal getCategory();
         public abstract void setCategory(CategoryLocal category);
         public abstract Integer getProductId();
         public abstract void setProductId(Integer productId);
         public abstract String getBrandName();
         public abstract void setBrandName(String brandName);
         public abstract String getProductDescription();
         public abstract void setProductDescription(String productDescription);
         public abstract Double getPurchasePrice();
         public abstract void setPurchasePrice(Double purchasePrice);
         public void setEntityContext(EntityContext ec)
              System.out.println("ProductBean setEntityContext");
         public void unsetEntityContext()
              System.out.println("ProductBean unsetEntityContext");
         public void ejbLoad()
              System.out.println("ProductBean ejbLoad");
         public void ejbStore()
              System.out.println("ProductBean ejbStore");
         public void ejbActivate()
              System.out.println("ProductBean ejbActivate");
         public void ejbPassivate()
              System.out.println("ProductBean ejbPassivate");
         public void ejbRemove()
              System.out.println("ProductBean ejbRemove");
    What do I needed to do to fix this problem.
    Any hint or help would be greatly appreciated!!!
    Yours,
    Frustrated

    cmr field which is "category" in ur mapping , u can't use as cmp field in abstract schema mapping. just remove category from cmp field . and every thing is fine

  • Lsmw error - no fields with the same name

    Dear Experts,
    I am trying to upload master data through LSMW through Standard Batch/Direct Input but when i am executing the step READ DATA it is throwing me error as
    File 'C:\Documents and Settings\Guest\Desktop\DMS.TXT' and source structure 'ZEQUI_STRUTURE' have no fields with the same name.
    Even though i cheked my flat file in notepad i used the following field for it
    AEDAT
    EQTYP
    SHTXT
    EQART
    GROES
    ERDAT
    ANSDT
    ANSWT
    WAERS
    HERST
    HERLD
    TYPBZ
    BAUJJ
    BAUMM
    SERGE
    SWERK
    STORT
    BEBER
    GEWRK
    ABCKZ
    EQFNR
    BUKRS
    ANLNR
    KOSTL
    IWERK
    INGRP
    TPLNR
    HEQUI
    Regards,
    Rip.
    Edited by: Julius Bussche on Jan 20, 2009 11:04 AM
    Please use meaningfull subject titles

    Hi Ripel,
    When you are assinging a file if it has field names in first row then select "Field names at Start of file", if not names then uncheck the box at "File Structure".
    If fields are using, then check the tabulator in file and Uncheck the "Field order matches Source structure Definition."
    Regards,
    Sunil
    Edited by: Sunil Reddy Sibbala on Jan 20, 2009 11:10 AM

  • How to fetch the data & display the data if fields got the same name in alv

    hi frnds, i need ur help.
    how to fetch the data & display the data if fields got the same name in alv grid format.
    thanks in advance,
    Regards,
    mahesh
    9321043028

    Refer the url :
    http://abapexpert.blogspot.com/2007/07/sap-list-viewer-alv.html
    Go thru the guide for OOPs based ALV.
    Use SET_TABLE_FOR_FIRST_DISPLAY to display the table:
    CALL METHOD grid->set_table_for_first_display
     EXPORTING
    I_STRUCTURE_NAME = 'SFLIGHT'     “Structure data
    CHANGING
    IT_OUTTAB = gt_sflight.          “ Output table
    You can also implement
    Full Screen ALV, its quite easy. Just pass the output table to FM REUSE_ALV_GRID_DISPLAY. 
    For controlling and implementing the FS-ALV we have to concentrate on few of the components as follows :
    1. Selection of data.
    2. Prepare Layout of display list.
    3. Event handling.
    4. Export all the prepared data to REUSE_ALV_GRID_DISPLAY.
    Regd,
    Vishal

  • How do I copy/paste full numerical-only account strings into the Projects WebADI template when the account segment fields in the template require use of the dropdown because they're formatted as alpha-numeric values?

    How do I copy/paste full numerical-only account strings into the Projects WebADI template when the account segment fields in the template require use of the dropdown because they're formatted as alpha-numeric values? I'm using the Integrator named "Projects - Transaction Import" and a custom Layout created based on the seeded Layout named "Transaction Import - Accounted". Do I need to somehow change my Layout to make the Document accept numerical values instead of requiring alpha-numeric values? I need to be able to populate the Document with a large amount of transactions and cannot feasibly go through every transaction to add the alpha-valued name of the account segment to every segment that requires it. The segments in particular causing the problem are "Expnd Type" and "Organization Name" which are both alpha-numeric and as such contain the segment number and name; I need to be able to only have to enter the Natural Account Number (6-digit number only) and the Organization Number (5-digit number only).

    How do I copy/paste full numerical-only account strings into the Projects WebADI template when the account segment fields in the template require use of the dropdown because they're formatted as alpha-numeric values? I'm using the Integrator named "Projects - Transaction Import" and a custom Layout created based on the seeded Layout named "Transaction Import - Accounted". Do I need to somehow change my Layout to make the Document accept numerical values instead of requiring alpha-numeric values? I need to be able to populate the Document with a large amount of transactions and cannot feasibly go through every transaction to add the alpha-valued name of the account segment to every segment that requires it. The segments in particular causing the problem are "Expnd Type" and "Organization Name" which are both alpha-numeric and as such contain the segment number and name; I need to be able to only have to enter the Natural Account Number (6-digit number only) and the Organization Number (5-digit number only).

  • Can I use the Registry to change the Login Name used in Note Tool?

    If adding notes in browser-based review, you cannot edit the Author name used in the note tool. Its uses the fixed Windows login name shown in Edit > Preferences > Identity.
    If you turn off the "Always use Log-in name for Author name" setting, the Author can be changed when adding notes in Acrobat itself, but the Author is fixed to the Windows login name in browser-based review.
    Therefore, I was wondering if anyone knows if this can be changed in the Registry? I've found the login field name here (HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\9.0\Annots\cAnnots\cAnnot\tauthor) but it unfortunately does not update the Author field.

    Good afternoon!
    You can replicate this in Acrobat 8 as follows:
    - In Acrobat / Edit Preferences / Commenting, turn off "Always use Log-in Name for Author Name"
    - Open a PDF in Acrobat > Add a Note > Right-click Properties > General tab > Rename the Author to "TESTING" > Click "Make Properties Default" > Click OK
    - Set up a Network Folder Online Comments Repository as follows: In Acrobat / Edit Preferences / Reviewing, set Server Type to "Network Folder" and browse for a folder to save comments to.
    - Open Registry and go to HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\8.0\Annots\cAnnots\cAnnot\tauthor
    - tauthor should be showing "TESTING" that we entered earlier
    - Open a browser window and drag a PDF into it
    - Add a Note, the Author name is fixed to be the Windows Login name.

  • Add the country field in the main details tab of the CRMD_BUS2000126

    Hi Experts,
      I have the following business scenario : Need to display the country field in the Details tab of the PCUI activity application which normally appears under the Location tab of the application.
    This is what I have done uptil now:
      1) Added the country field in the screenstructure CRMT_BSP_ACT_DETAILS
      2) Added the field in the field group ACT_OVERVIEW
      3) Regenerated the field group
    Problem is that the field still does not show under the details tab.
    For your information :
       1) All the tabs including the Location tab ( only excluding the Details tab ) have been hidden from display.
       2) In the debug mode , I could see that the READ method of the class CL_CRM_BSP_IL gets the screenstructure CRMT_BSP_ACT_DETAILS with the country field added correctly , so I guess this is not a interaction layer / application issue. But after that the field gets lost in the framework layer.
    Any expert suggesion for the steps as well as the likely solution is appreciated.
    Thanks,
    Sudipta

    Hi Sudipa,
           As you said that in Devbug you can see that filed is added to your structure perfectly bit its not visible on your screen !!!  Correct !!!!
            For this 1st check for standard screen varint is set for that screen or not.
        and try to tick ur new filed as visible in STD screen varints for that screen..
      i am sure that it will get done after using varint.
    Regards,
    Amol Tambe
    SAP CRM Technical Consultant.

  • The field "GLTPC" is unknown, but there is a field with the similar name*

    Hi all
    When i am running the report painter reports in SAP
    i am getting this error .
    Syntax error in program    SAPFGRWG
    in include                  FGRWGE60
    in line                      19
    Last changed by            SAP
    Author                     SAP
    The field "GLTPC" is unknown, but there is a field with the similar name
    "GLTPC".*
    Please help me whenever
    Regards,
    suchithra
    Edited by: Rob Burbank on May 22, 2009 9:00 AM

    Hi All
    All 8A group Report painter reports i.e GLPCt table Reports are not executed properly
    Can you please help me out
    Regards,
    suchithra

  • How to find the File name using the FTP Adapter

    hi all,
    how to find the File name using the FTP Adapter with BPEL.
    Regards

    Found the solution for this.
    First In the mediator's routing rule use assign property $in.property.jca.file.FileName to $out.property.jca.file.FileName
    In the BPEL's receive activity go to the properties tab and get the property to a BPEL variable. That should do it.
    Thanks for the posts

  • How to find the query name using infoset name

    Hi Experts
           Iam new to the sap queries(SQ01,SQ02), some queries already created.
          now i want to do some modification, my problem is i am not able to find the query name.
          I know the infoset name, can you tell me how to find the query name using the infoset name, is ther any table for this.
    i tried in sq01 also, but its confusion, pls advice me on this.
    thanks in advance.
    regards
    rajaram

    Hi
    try like this..
    SQ02 --> go to --> Query Directory..
    from there you can get all the queries belong to a Infoset.

  • Mapping the CMP Fields with the Database Table using Websphere???

    Hi,
    How to Map the CMP Fields with the Database Table using Websphere
    thru ejb.jar.xml???
    Thanks,
    JavaCrazyLover

    Hi,
    How to Map the CMP Fields with the Database Table using Websphere
    thru ejb.jar.xml???
    Thanks,
    JavaCrazyLover

  • How to get the computer name using C#?

    Hi all,
    Does anyone know how to get the computer name using c#?
    Thanks

    Try this, string computer_name = System.Environment.GetEnvironmentVariable("COMPUTERNAME");
    Naren.

  • How to find the package  name  using  request number

    I want to check the   package name  using the request  no   ,
    Plz help me

    Hi
    You can use SE03  for the same. In that
    Object Directory Node --> Change Object Directory Entries of Objects in a Request.
    Dbclick on that and provide chield request and press F8 you will get the object with the package.
    Hope this will Help.
    Regards,
    Hiren Patel

  • Can I script an email button to put one of the form fields in the subject line and to name the form?

    This is a fillable form on a website.  We want people to complete the form, then click on the email button to send it to us.  Prefer to have the "name" field populate in the "subject line" of the email, and also rename the form that same field name.  Is that possible?

    In the sample I used the below syntax to send an email..
    event.target.submitForm({cURL:"mailto:"+ strToAddress + "?cc=" + strCCAddress + "&subject=" + strSubject + "&body=" + strMessage,cSubmitAs:"PDF"});
    The highlighted ones are local variables which will hold the value from the form fields.
    If you want to get the Subject from Name field in the form, use some thing like this.
         var strSubject = name.rawValue;
         //and then pass the value to the code.
         event.target.submitForm({cURL:"mailto:"+ strToAddress + "?cc=" + strCCAddress + "&subject=" + strSubject + "&body=" + strMessage,cSubmitAs:"PDF"});
    Hope this helps..
    Thanks
    Srini

  • To find the table name using field name

    Hi,
    Do we have any transaction code using field name to find out the table name
    Regards,
    P.Arunkumar.

    Hi Arun,
    The best way to find out table from field is,
    Use SE15 Transaction->dictionary fields ->table fields->goto table field columns
    Enter ur fields..
    or you can use ST05
    Reward points if it is useful
    Regards,
    R.Brahmankar

Maybe you are looking for

  • I can't boot from the windows cd with boot camp

    I got Vista up and running via boot camp but now I have a problem that could cause some issues. How the **** do you boot from a windows cd with boot camp!?!? When I stick in the windows based CD (could be the vista install CD -after vista's been inst

  • Mounting data partition + Finder issue

    Hello, I have now 2 disks in my MBP (SSD + HDD in Optibay). I want to use the HDD for data only storage and I would like to mount the disk in the folder ~/Data So I created the dir and mounted the partition manually to test it : sudo mount_hfs /dev/d

  • IXOS 9.6.1 migration with change in DBMS(Oracle - MS SQL)

    Hi All We have requirement to migrate IXOS 9.6.1 archive server(DBMS:Oracle) from one server to another with change in DBMS to sql server Current : OpenText Archive server 9.6.1 with Oracle  Target : OpenText Archive server 9.6.1 with MS SQL Can anyo

  • Install Workbook Precalculation Service

    Hello, I am trying to install the workbook precalculation service locally on my PC, but did not succeed up to now. I have installed the following on my PC: - Microsoft .Net Framework 1.1 - SAP Gui 6.40 (with extra patches) - BW Workbook Precalculatio

  • ITunes re-copies music library to iPod on every sync

    I recently migrated my music collection (well, my MP3s, anyway) to an NAS drive. Then I cleared out my library in iTunes and added the new folder. Now, every time I sync my iPod, it re-copies the entire MP3 library. Why? Any help greatly appreciated.