Create ADS User Link

Hi, 
is there a way to create a ADS User Link in another Organization Unit? We have a lot of users and a lot of OUs, but now we have to have some users in more than one OU. We don't want to copy the user, we only want to have one user object. 
Can this be done by LDAP?
VB.NET & C#.NET

As Paul mentioned, the answer is no.
I have faced similar needs where a user can have multiple status (Example: A user belong to two departments). What I have done is that I created a custom attribute in AD which is multi-valued. Once done, I linked the attribute to the user class and I populated
it with the required values. With that, I was able to create custom filters that allowed me to achieve my goals.
To create a custom attribute in AD, you can refer to that: http://social.technet.microsoft.com/wiki/contents/articles/20319.how-to-create-a-custom-attribute-in-active-directory.aspx
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Get Active Directory User Last Logon
Create an Active Directory test domain similar to the production one
Management of test accounts in an Active Directory production domain - Part I
Management of test accounts in an Active Directory production domain - Part II
Management of test accounts in an Active Directory production domain - Part III
Reset Active Directory user password

Similar Messages

  • Error while creating ADS User

    Hi,
    I'm in the process of installing NW 2004's, but i got error while Creating ADS user. Below are the logs, which i'm getting--
    WARNING 2008-02-12 07:02:15
    Execution of the command "/usr/sap/ND2/DVEBMGS00/exe/jlaunch UserCheck.jlaunch com.sap.security.tools.UserCheck /tmp/install/sapinst_instdir/NW04S/SYSTEM/DB6/CENTRAL/AS/install/lib:/tmp/install/sapinst_instdir/NW04S/SYSTEM/DB6/CENTRAL/AS/install/sharedlib:/tmp/install/sapinst_instdir/NW04S/SYSTEM/DB6/CENTRAL/AS/install -c sysnr=00 -c ashost=gnwux04 -c client=001 -c user=DDIC -c XXXXXX -a checkCreate -u ADSUSER -p XXXXXX -message_file UserCheck.message" finished with return code 255. Output: Exception in thread "main" java.lang.NoClassDefFoundError: com/sap/engine/offline/OfflineToolStart
    ERROR 2008-02-12 07:02:15
    CJS-30197  . For more details see output of logfile:
    ERROR 2008-02-12 07:02:15
    FCO-00011  The step createADSUser with step key |NW_Onehost|ind|ind|ind|ind|0|0|SAP_Software_Features_Configuration|ind|ind|ind|ind|5|0|NW_Usage_Types_Configuration_AS|ind|ind|ind|ind|0|0|NW_CONFIG_ADS|ind|ind|ind|ind|2|0|createADSUser was executed with status ERROR .
    Please help me out this is urgent, as my installation is halted.
    THanks,
    Anand.

    Hello,
    this is not really an ADS problem. It might be better if try to ask this in the WebAS forum. The problem is here with the UME.
    Best regards,
    Dezso

  • Solman 4.0 SR1 issue - create ADS user

    Has anyone seen a problem with creating the ADS user while installing SOLMAN 4.0 SR1?  I appreciate any thoughts you might have.  Thank you much.
    ~TJ
    createADSUser was executed with status ERROR .
    Previous to that message, I see:
    WARNING 2006-11-19 03:09:01
    CJSlibModule::writeWarning_impl()
    Execution of the command "\usr\sap\SM1\SYS\exe\run\jlaunch
    UserCheck.jlaunch com.sap.security.tools.UserCheck
    \usr\sap\SAPinst\SOLMAN\SYSTEM\DB4\CENTRAL\AS\install\lib:\usr\sap\SAPinst\SOLMAN\SYSTEM\DB4\CENTRAL\AS\install\sharedlib:\usr\sap\SAPinst\SOLMAN\SYSTEM\DB4\CENTRAL\AS\install
    -c sysnr=40 -c ashost=USALSAPT -c client=001 -c user=DDIC -c XXXXXX -a
    checkCreate -u ADSUSER -p XXXXXX -message_file UserCheck.message"
    finished with return code 255. Output:
    Could not open the ICU common library.
    The following files must be in the path described by
    the environment variable "LIBPATH":
    libicuuc30.a, libicudata30.a, libicui18n30.a [nlsui0_mt.c 1620] pid =39728

    Hi TJ,
    useful input for analysis, also if via customer message might be the environment of the regarding job. In order to get it do the following:
    Signon as <SID>ADM
    call qp2term
    ps -ef | grep <SID>
        (gives you an overview of active processes, grep the PID <pid> of your process)
    ps eew <pid>
    HTH,
       Thomas

  • Unable to create new user thru Portal

    Hi,
    I am unable to create user from the oracle portal web page under the Administer tab.
    I have logged in as user PORTAL30 which has DBA rights.
    When I click the Create new user link, it generates an error page WWC-00000.
    Would appreciate if any can help me out urgently.
    OS: NT4 SP5
    9iAS 1.0.2.1
    Vipul
    null

    Cindy,
    Thanks for the solution. It worked fine after changing servername to lowercase.
    The servername was set in in httpd.conf by the 9iAS installer itself. I would like to express that Oracle should have checked before launching or should have listed it in the release notes.
    Once again thanks for the inputs, Cindy.
    Regards,
    Vipul
    <BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by cindy:
    I too was having the same problem. I found this in another post:
    "this is reported as
    BUG:1534919
    the solution is to use lower case server name in httpd.conf. It must be in lower case."
    I made the change and am now able to create users.<HR></BLOCKQUOTE>
    null

  • Creating a Database link for a user

    Hello All,
    I am trying to create a database link for one of my users.
    When I create it as sysdba the link gets created in the SYS schema which tells me that my syntax is working/fine.
    But when I ALTER my SESSION and set my CURRENT_SCHEMA = <USER_NAME> I get ORA-00990: missing or invalid privilege
    So I tried granting the user CREATE DATABASE LINK, CREATE PUBLIC DATABASE LINK, and DROP PUBLIC DATABASE LINK.
    Same error.
    Any ideas what I am missing?
    Thanks,
    Craig

    CraigBoyd wrote:
    Hello All,
    I am trying to create a database link for one of my users.
    When I create it as sysdba the link gets created in the SYS schema which tells me that my syntax is working/fine.
    But when I ALTER my SESSION and set my CURRENT_SCHEMA = <USER_NAME> I get ORA-00990: missing or invalid privilege
    So I tried granting the user CREATE DATABASE LINK, CREATE PUBLIC DATABASE LINK, and DROP PUBLIC DATABASE LINK.
    Same error.
    Any ideas what I am missing?
    Thanks,
    Craigyou need to create a new session after the GRANT was issued.

  • Create PD Infotype link to Object USER

    Dear Experts,
    I have created a custom PD Infotype P9032, under Object "User'. But when i go to Expert Mode to create the infotype record, it screen brings me to "Su01" screen ie. create SAP user instead.
    If i change the Object to "Organizational Unit" and create the infotype record, it shows me the correct custom infotype screen.
    How do i link my custom PD infotype to Object User? ... i have done the necessary updating of table T777I.
    Thanks so much,
    Zul

    Hi Dusan,
    perhaps the following steps will help you.
    1. calls se11
    2. mark radiobutton in front of Data type
    3. fill data type with HRI9003
    4. goto menu [Utilities] and select [Environment Analysis]
    This will display all objects i hope also the 3 missed. From there
    you could mark it and delete it.
    Hope this helps.
    Regards
    Bernd

  • ESS - Create Expense Report Link is missing for few users

    Hi,
    We are on ECC 6.0 Ehp 3 with EP 7.0.
    We are using the ESS and in that Standard SAP provided Travel and Expenses Module.
    For few of the users, the Create Expense Report  link is missing eventhough the user is assigned with the  Traveller Role
    SAP_FI_TV_TRAVELER
    Request you to let me know if any setting needs to be done in the back end/infotype to make the Create Expense Report link visible in the portal.
    Appreciate your help.
    Thanks and Regards,
    Sekar

    Hello, 
    Same happened on our side.  User is already set with the proper roles, with the correct info types but when logging in the Portal- she, too, could not view the link for Create Expense Report (which is supposed to Create an expense report for a trip without a travel plan).
    When i use my userid, and just switch personnel number to her number, I could create an expense report on her behalf. 
    That made me conclude that her traveller roles are fine.
    Pls help.

  • I have a main fillable form.  From this main form the user may need additional forms.  I want to create checkboxes that link to these additional forms.  This part I believe I know how to do (Properties/Actions/Open a File).  What I want to add is a javasc

    I have a main fillable form.  From this main form the user may need additional forms.  I want to create checkboxes that link to these additional forms.  This part I believe I know how to do (Properties/Actions/Open a File).  What I want to add is a javascript to the checkbox that when the new file (or form) opens some of the data (the repetitive data like name, date, etc.) from the main form is placed into the form opened where the same form fields exist.  Is this possible?

    Yes, but then it all has to be done using a script. You can't use the built-in Open A File command.

  • ERROR WHILE CREATING A DATABASE LINK USING HETEROGENEOUS SERVICES

    I'm creating a database link with the Oracle Dataware Builder, and i get the following error:
    Probando...
    Fallo.
    SQL Exception
    Error del repositorio: Excepción SQL.
    Nombre de la Clase: CacheMediator.
    Nombre del Método: getDDEntryFromDB.
    Mensaje de Error del Repositorio: ORA-28500: connection from ORACLE to a non-Oracle system returned this message:
    [Generic Connectivity Using ODBC][Informix][Informix ODBC Driver][Informix]Incorrect password or user [email protected] is not known on the database server. (SQL State: 28000; SQL Code: -951)
    ORA-02063: preceding 2 lines from PRUEBA_SEH
    As you can see i'm using heterogeneus services to connect to a informix database. ALTIADM is a valid user for that database, i don't send my ip address 192.168.0.62, but the error says "[email protected] is not known in the database server". how can i solve it?????

    Right places to ask this question are
    Heterogeneous Connectivity
    Warehouse Builder

  • ERROR WHILE CREATING A DATABASE LINK TO INFORMIX

    I'm creating a database link with the Oracle Dataware Builder, and i get the following error:
    Probando...
    Fallo.
    SQL Exception
    Error del repositorio: Excepción SQL.
    Nombre de la Clase: CacheMediator.
    Nombre del Método: getDDEntryFromDB.
    Mensaje de Error del Repositorio: ORA-28500: connection from ORACLE to a non-Oracle system returned this message:
    [Generic Connectivity Using ODBC][Informix][Informix ODBC Driver][Informix]Incorrect password or user [email protected] is not known on the database server. (SQL State: 28000; SQL Code: -951)
    ORA-02063: preceding 2 lines from PRUEBA_SEH
    As you can see i'm using heterogeneus services to connect to a informix database. ALTIADM is a valid user for that database, i don't send my ip address 192.168.0.62, but the error says "[email protected] is not known in the database server". how can i solve it?????

    Right places to ask this question are
    Heterogeneous Connectivity
    Warehouse Builder

  • After 10.1.2 upgrade, Create/Modify User/Group requires re-authentication

    I have 3 systems - 2 were 9.x (AS10g R1) upgraded to 10.x (AS10g R2), 1 was installed as 10.x. On the two upgraded systems, after a Portal user logs in (with administration privileges), navigates to the "Administration" tab and clicks either the "Create New User", "Modify User", "Create New Group" or "Modify Group" links, they are prompted for a username and password again. On the system installed with 10.x, this does not happen. Submitted iTar was unresolved. Has anyone seen this before?
    Thanks in advance.

    Please read this whole message before doing anything.
    This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
    The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.
    Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem. You must hold down the shift key twice: once when you boot, and again when you log in.
    Note: If FileVault is enabled, or if a firmware password is set, or if the boot volume is a Fusion Drive or a software RAID, you can’t do this. Ask for further instructions.
    Safe mode is much slower to boot and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal boot may also be somewhat slow.
    The login screen appears even if you usually login automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
    Test while in safe mode. Same problem?
    After testing, reboot as usual (not in safe mode) and verify that you still have the problem. Post the results of the test.

  • Can I Create A Symbolic Link to folders stored on an SMB Share folder?

    Hello,
    I am very new to Unix and was hoping that someone could point me in the right direction with regards to Symbolic links and an SMB share folder ....
    Have purchased an ext. LAN Drive enclosure (http://www.macpower.com.tw/products/hdd3/pleiades/pd_usblan) which connects to my wireless router via ethernet like my G5 (main Mac) - our iBook connects via Airport. I have copied all my general documents/files to the SMB share folder on the ext. drive so that I can access them from the G5 and also the iBook.
    However I'd also like to be able to store my actual Mail folder (/Users/Mark/Library/Mail/), , Safari folder (/Users/Mark/Library/Safari) + my Address Book and other folders sitting in the Application Support folder on my SMB share so all important docs/folders are in the one place. I've tried storing these folders on the SMB share and putting an Alias to these back in Users/Mark/Library/Mail etc but of course an Alias doesn't work.
    Question 1: Can I create a symbolic link to these files if these are stored on an SMB share folder? If so, could you please tell me exactly what I'd need to type into Terminal? My SMB Share path is smb://STORAGE-XXXX/MARK
    I have copied my iPhoto library and iTunes library to the SMB share and are working fine.
    Question 2: Is it possible/worth attempting to move my whole home folder to the SMB share folder? Ideally, I'd like to be able to access my Mail from the iBook as well. If I could log into either the G5 or the iBook and access my latest Mail, Address Book and other Application Settings, that would be perfect. Would this be possible?
    Thanks
    Mark.
    Dual 1.8GHz G5 (Rev.B), 2Gig RAM, 9600XT   Mac OS X (10.4)  

    Dear Mark,
    Yes you can. The command to create a link will look something like this:
    $ ln -s thisFolder /Users/mark/thatFolder
    I did this while I was hosting a microsoft based game. This put all of the players into a common directory.
    SMB just resolved the link and everything worked fine.
    However, as I understand it, some other applications do NOT work very well with links. As I have NOT tried it with other applications, I fear I can be of NO help to you in this matter.
    The only way to find out which applications work with links is to try them and see what happens.
    Best of luck,
    Kurt

  • How do I create a downloadable link from an Interactive PDF file created out of InDesign CS6?

    Hello,
    I created an Interactive PDF file out of InDesign and would like to make the large file a downloadable link and share it with the user in an email. I do not want to use DropBox or GoogleDrive.
    The company I contract for has their own site - do I insert the file into the site or can I create a separate link for it?
    I will be recreating these presentation PDF's constantly, so I would like to know if there is a simple way to create this link for files in the size of 7-12MB.
    Any ideas on downloadable links? I do have flash - but rarely use, perhaps load the file out of flash?
    Thank you so much for your help,
    Megan

    Hi Willie,
    Thanks for your help. Most likely contact the company who maintains the
    site then to share the file with them I'm assuming?

  • Old user account not accessible - Had to create new user account

    Why was I forced to create a new user account in order to access Apple discussions? The last time I had posted to Apple discussions was 11/06. From the emails notifying me of replies to my post, I can still go to the link where my question and the replies are. Last week I wanted to post another question. Instead I encountered a circular problem. Every time I tried to log in to discussions with my Apple ID and password (the same as my .Mac name and password, which were working fine for accessing .Mac), I was told that there was an error in my password. When I tried again, I was repeatedly re-directed to a "create new user account" web page that listed my .Mac email address as my Apple ID, as it should have. I tried to re-create my old user account with my own [real] name (as before) and was told that name was in use! Of course, it was me! (I had always used by real first name and surname as my name on Apple discussions.) So finally, very frustrated, I created a new name, a nickname, for discussions, and it worked. Now, all my previous posts are gone. It's as if I didn't exist in the Apple world until today, 9/16/07, but I originally had established my user account in 2004. I tried asking about this in a phone call to Apple support, but I was re-directed to the .Mac web site. Then I posted a question at .Mac feedback to no avail. I had a feeling that as soon as I "obeyed" and created a new user account that wouldn't be recognized as myself, my past posts would be sent into oblivion. I don't like losing all my previous posts that were attached to my user account. I have found this problem very frustrating and would really like an explanation.

    Hi decemberbaby,
    Try this procedure.
    Delete all the Apple Cookies in your browser, and empty the Cache.
    Go here Discussions Sign In, and try logging in with your original Apple ID again.
    If that still doesn't work, delete the Cookies again, and go to My Info, and log in with the original Apple ID.
    If you get the error message "Your Apple ID or password was entered incorrectly.", click on "Did you forget your password? Click here for assistance".
    On the page that opens, you can also click on "Forget your Apple ID
    ali b

  • How to create a user in Opensso Identity Service Webservices api?

    Hi All,
    I am getting struck with the creation of user in OpenSSO through the webservices api they are providing.
    I used the following wsdl link to create the API's. http://localhost:8080/opensso/identityservices?WSDL
    Now my requirement is, i have to create a user profile through the program which has the api create(identity,admin) created by the WSDL link.
    Here identity is the com.sun.idsvcs.IdentityDetails and admin is the com.sun.idsvcs.Token. I want to append givenName,cn,sn,userPassword in that. But dont have any idea how to given these details in IdentityDetails. If anyone give any sample solution i can follow.
    Any Help Greatly Appreciated.
    Thanks in Advance.
    With Regards,
    Nithya.

    Hey, I've managed to implement OpenSSO user registration through SOAP.
    My code is:
    package ru.vostrets.service.implementation.helper.opensso;
    import ru.vostrets.model.person.Person;
    import org.springframework.beans.factory.annotation.Autowired;
    import org.springframework.stereotype.Service;
    import ru.vostrets.dao.PropertiesDao;
    import ru.vostrets.exception.FatalError;
    import com.sun.identity.idsvcs.opensso.*;
    import java.util.HashMap;
    import java.util.Map;
    import org.slf4j.LoggerFactory;
    import org.slf4j.Logger;
    import ru.vostrets.exception.ConfigurationError;
    * @author Kuchumov Nikolay
    * email: [email protected]
    @Service
    public class OpenSsoPersonServiceHelper
         private enum AttributeName
              USER_NAME("uid"),
              PASS_WORD("userpassword"),
              GIVEN_NAME("givenname"),
              FAMILY_NAME("sn"),
              FULL_NAME("cn"),
              EMAIL("mail");
              private final String name;
              AttributeName(String name)
                   this.name = name;
              public String getName()
                   return name;
         private static final Logger LOG = LoggerFactory.getLogger(OpenSsoPersonServiceHelper.class);
         private PropertiesDao propertiesDao;
         public void create(Person person)
              try
                   IdentityServicesImplService service = new IdentityServicesImplService();
                   IdentityServicesImpl servicePort = service.getIdentityServicesImplPort();
                   java.util.List<java.lang.String> attributeNames = null;
                   Token subject = new Token();
                   subject.setId(request.getParameter("token"));
                   UserDetails results = servicePort.attributes(attributeNames, subject);
                   for (Attribute attribute : results.getAttributes())
                        LOG.info("************ Attribute: Name = " + attribute.getName() + ", Values = " + attribute.getValues());
                   LOG.info("Roles = " + results.getRoles());
                   IdentityDetails identity = newIdentity
                             person.getCredentials().getUserName(),
                             getAttributes(person)
                    * Creates an identity object with the specified attributes.
                    * @param admin Token identifying the administrator to be used to authorize
                    * the request.
                    * @param identity object containing the attributes of the object
                    * to be created.
                    * @throws NeedMoreCredentials when more credentials are required for
                    * authorization.
                    * @throws DuplicateObject if an object matching the name, type and
                    * realm already exists.
                    * @throws TokenExpired when subject's token has expired.
                    * @throws GeneralFailure on other errors.
                   servicePort.create
                             identity,
                             authenticateAdministrator()
              catch (DuplicateObject_Exception exception)
                   throw new UserAlreadyExistsError();
              catch (Exception exception)
                   //GeneralFailure_Exception
                   //NeedMoreCredentials_Exception
                   //TokenExpired_Exception
                   throw new FatalError(exception);
         private Token authenticateAdministrator()
              try
                   IdentityServicesImplService service = new IdentityServicesImplService();
                   IdentityServicesImpl servicePort = service.getIdentityServicesImplPort();
                   if (propertiesDao.get().getAuthentication().getOpenSso().getAdministrator().getUserName() == null
                             || propertiesDao.get().getAuthentication().getOpenSso().getAdministrator().getPassWord() == null)
                        throw new ConfigurationError("OpenSSO administration properties not initialized");
                    * Attempt to authenticate using simple user/password credentials.
                    * @param username Subject's user name.
                    * @param password Subject's password
                    * @param uri Subject's context such as module, organization, etc.
                    * @return Subject's token if authenticated.
                    * @throws UserNotFound if user not found.
                    * @throws InvalidPassword if password is invalid.
                    * @throws NeedMoreCredentials if additional credentials are needed for
                    * authentication.
                    * @throws InvalidCredentials if credentials are invalid.
                    * @throws GeneralFailure on other errors.
                   Token token = servicePort.authenticate
                             propertiesDao.get().getAuthentication().getOpenSso().getAdministrator().getUserName(),
                             propertiesDao.get().getAuthentication().getOpenSso().getAdministrator().getPassWord(),
                   LOG.info("******************************** Admin token: " + token.getId());
                   return token;
              catch (Exception exception)
                   throw new FatalError(exception);
              com.sun.identity.idsvcs.opensso.IdentityServicesImplService service = new com.sun.identity.idsvcs.opensso.IdentityServicesImplService();
              QName portQName = new QName("http://opensso.idsvcs.identity.sun.com/" , "IdentityServicesImplPort");
              String request = "<authenticate  xmlns=\"http://opensso.idsvcs.identity.sun.com/\"><username>ENTER VALUE</username><password>ENTER VALUE</password><uri>ENTER VALUE</uri></authenticate>";
              try
                   // Call Web Service Operation
                   Dispatch<Source> sourceDispatch = null;
                   sourceDispatch = service.createDispatch(portQName, Source.class, Service.Mode.PAYLOAD);
                   Source result = sourceDispatch.invoke(new StreamSource(new StringReader(request)));
              catch (Exception exception)
                   // TODO handle custom exceptions here
         private Attribute newAttribute(AttributeName name, Object value)
              Attribute attribute = new Attribute();
              attribute.setName(name.getName());
              attribute.getValues().add(value.toString());
              return attribute;
         private Map<AttributeName, Object> fillAttributes(Map<AttributeName, Object> attributes, Person person)
              attributes.put(AttributeName.USER_NAME, person.getCredentials().getUserName());
              attributes.put(AttributeName.PASS_WORD, person.getCredentials().getPassWord());
              attributes.put(AttributeName.GIVEN_NAME, person.getPersonal().getGivenName());
              attributes.put(AttributeName.FAMILY_NAME, person.getPersonal().getFamilyName());
              attributes.put(AttributeName.FULL_NAME, person);
              attributes.put(AttributeName.EMAIL, person.getContacts().getEmail());
              return attributes;
         private Map<AttributeName, Object> getAttributes(Person person)
              return fillAttributes(new HashMap<AttributeName, Object>(), person);
         private IdentityDetails newIdentity(Object name, Map<AttributeName, Object> attributes)
              IdentityDetails identity = new IdentityDetails();
              identity.setName(name.toString());
              return fillAttributes(identity, attributes);
         private IdentityDetails fillAttributes(IdentityDetails identity, Map<AttributeName, Object> rawAttributes)
              for (Map.Entry<AttributeName, Object> rawAttribute : rawAttributes.entrySet())
                   identity.getAttributes().add(
                             newAttribute(rawAttribute.getKey(), rawAttribute.getValue()));
              return identity;
         @Autowired
         public void setPropertiesDao(PropertiesDao propertiesDao)
              this.propertiesDao = propertiesDao;
    }

Maybe you are looking for