Create User Select Manager shows no users

Hi All,
I am trying to create a new user via the Web Interface as xelsysadm and I can create users just fine but when I try to select a manager nothing shows up in the
search.
11G 11.11.1.3
Thanx
Fred

no I have not. this is a basic install with a bunch of users created via either the UI or a trusted recon.
Should there be a certain Role maybe that I am missing? everyone has ALL_USERS but that is probably it.
Thanx.

Similar Messages

Allow an user to manage certain users

Hello,
I am new to User Management in wlportal4.0 with wlserver6.1. I was able to set
up RDBMS Realm for user authentication. Currently access to "http://localhost:7501/wlcsAppTools/index.jsp"
is restricted to only the role "Administrator". I can see that this mapping is
defined in the web.xml.
Instead of one "Administrator" role managing the entire users, I like to set up
certain users to manage certain other users. Is it possible? Can someone guide
me through the steps? Thanks a lot.

Only as a screen grab in default iPad manner – simultaneously push two physical iPad buttons.

[JS] TSelection "class" : just a simple selection manager

TSelection is a JS object to make the "user-selection" management more easy in your scripts :
http://marcautret.free.fr/geek/indd/selection/
Just a beta-version...
Some feature:
- TSelection.getBounds() (as geometricBounds)
- TSelection.getType() (check pageItems, texts, cells, hybrid sel.)
- TSelection.show(true) (zoom on)
Regards,
P

Hi Pablo,
Very nice stuff! Thanks for sharing!
Harbs

New User Mailbox not showing up in GAL - Created wrong?

I have a strange issue that is causing me angst and making me argue with my network manager. Here's the lowdown. Please shed some light on it if you can.
Every place I have worked prior to my current company I would do the following steps to create a new user (new employee). In AD I would
copy an existing user with the same/similar permissions, distro list membership, etc... Then go into
EMC and create a new mailbox for an existing user
and link it to the new AD object I had just created. This always worked for me. Here it doesn't. When I do it that way, the new user mailbox does not get added to the GAL. If you go to
All Users they show up. I have read several articles about using cached mode and if I turn it off the user will show up. Unfortunately most of our employees are in the field for long periods of time so we need to run in cached mode.
The way the network manager wants them created (and this way works) is to create a new user mailbox for a
new user in EMC which also creates the AD object. Then I have to go back to AD and manually add the user to permissions groups, distro lists, add profile settings, etc... Very tedious and manual process.
Can someone help me understand why doing it my way, which I have done for years on other networks, is not working here? Since we are using cached mode do I have to create the user object and mailbox the way he does it?

I believe the way you are doing it and the way he is doing it is doing exactly the same thing as far as when it shows up in the GAL. The problem sounds like exactly what you said in that you are using cached mode which uses an Offline Address Book
(OAB). If you look in EMC under Organization Configuration/Mailbox/Offline Address Book, you will see the update schedule. What happens is when you create the account it shows up in the address book right away however it only shows up in the OAB
when that updater runs. Even after that is done, the outlook client needs to go out and download the OAB file, which happens 24 hours from the time it last downloaded the OAB. I'm not sure if there is a fix for your problem as it appears to be
by design. Perhaps your old company may have been running in online mode? You may want to look at
http://support.microsoft.com/kb/841273/en-us for more details.
Q1: What is cached mode?
A1: Cached mode is the new default configuration for Outlook. It provides an experience that is similar to the offline configuration in earlier versions of Outlook. When you are running in cached mode, your Exchange mailbox is synchronized to a local
file (an .ost file), and the offline address list from your Exchange computer is synchronized to a collection of files (.oab files) on your client computer. Outlook directly accesses the .ost file and the .oab files on your hard disk instead of communicating
directly with your server or servers. Therefore, network communication between Outlook and Exchange is significantly reduced.
Q2: Why does cached mode generate an offline address book?
A2: The offline address book contains a set of all the properties of a user (such as e-mail addresses and names) that Outlook requires. With an offline address book, Outlook does not have to connect to the global catalog to resolve names, nor
does it have to open a person’s details record. Instead, Outlook easily obtains this information from the local offline address book.
Q5: How frequently is the offline address book updated on the Outlook client?
A5: If left constantly running, Outlook in cached mode automatically updates the offline address book on the client every 24 hours. The 24-hour time period is measured from the time that the offline address book was last downloaded successfully. For
example, if you complete an offline address book download at 09:00 today, Outlook will start the offline address book download the next day at approximately 09:00. Therefore, different people will receive updates at different, random times.
Note The default setting on the Exchange computer is to generate an offline address book differential file every morning at 04:00. For a change that is made in Active Directory to reach the client computer, the following events must occur:
The change must be picked up by the Exchange computer that generates the offline address book files. This can take several hours. At worst, it can take 24 hours. This variable will be referred to as "x."
The Outlook clients must download the offline address book updates every 24 hours. This update can take several hours. At worst, it can take 24 hours. This variable will be referred to as "y."
The update reaches the client machines x+y hours later. It would be rare for a client to ever experience a 48-hour delay or more unless there were some Active Directory or public folder replication issues.

MapViewer: how to manage user selections in business components Java class

Hi list,
I'm a GIS developer with experience on Mapserver and Mapguide. Buit I'm totally new on Oracle Mapviewer and I'm doing a feasibility study on a project where I basically have a very simple GIS use case, but I don't know if it is possible to manage by use Oracle ADF Java API and Oracle Mapviewer.
I would like to use JDeveloper / ADF Business Components / ADF Faces.
This is the use case:
- Mapviewer should display a polygon layer from Oracle Spatial
- Mapviewer should display a polygon layer from WFS
- User should be able to select a polygon on Oracle Spatial layer and another polygon in WFS layer
- ADF Face map control should:
a) hilglight these two polygon
b) execute my buiseness component Java function passing the user selection (id?... coordinates?... or anything useful to get these two polygons in the business Java function) as parameter.
Is it possible?...
Any suggestions (or samples) for point b)?...
Thanks in advance for any help

Hi Arnd,
Thanks for answer.
Can you adreess me to some ADF project that include ADF Geographic Map control?
I've carefully studied what explained in manuls contained in JDeveloper Help. I've made something, but I have some issue I can't solve.
Here you are in details what I've made:
1) I've installed Mapviewer Quick Starter Kit
2) I've configured themes and base map by use on MapBuilder
3) I've built an ADF application with separated business and model-view-controller projects
4) I've created entities and views in ADF business project
5) I've created a JSF page in model-view-controller project
6) I've put inside page an ADF Geographic Map assigning my base map and his related toolbar.
Up to now it worked fine. My problems started at this point, on the attempt to add themes to be exposed to user interaction.
PROBLEM 1
I've seen that there are basically two options to add theme for user interaction:
a) add a predefined themes
b) add a color/point/graph bindable themes
Option b) seems not fit for my needs.
Color theme is only for regions and forces me to set a range of colors (I want to set exatctly two different color for two different table attribute value).
Lines seem not covered from any of them.
So the solution should be option a), predefined themes. But predefined theme seems not selectable and I don't know how to attach a selection listener.
Please note (about selection listener) that in JDeveloper Help, book "Web User Intercace Developer Guide", "Using ADF Geographic Component" there is a code sample, but the explaination on how to enter the backing bean method is truncated (it says "For example," and stop, nothing else).
My questions are: predefined theme can be selectable? And how can I attach the selection listener?.
PROBLEM 2
Up to now I've made no test on WFS themes, but of course, also these themes should be exposed to user interaction in the same way of predefined layers.
Is it possible?...
PROBLEM 3
Legends activated by ADF Map Toolbar seem not working for predefied themes, they display nothing.
Is it possible to fix or workaround in some way?...
PROBLEM 4
Are there any way to print maps?...
Best regards
Francesco

Can't log in as a user created in Workgroup Manager

I am a little confused about users created in Workgroup Manager.
I have created an account with all the proper permissions to log in etc. Their home directory is listed as afp://home/Users (home is the name of the server). The directory for the user I am trying to log in as doesn't exist yet.
When I try to log into the server "home" with this newly created user, I get the vibrating window that indicates the log in failed.
I am used to windows and AD where I would create a user in AD and then use something like \\domain\user to log in to the machine as that user. If i wanted to create a local user on that machine, I could do that too and then log in as \\machine\user to get the local user.
Are Workgroup Manager created users like AD users? Can I use them to log into any machine on the network hooked up to the SL server machine? In this case I want to log into the SL Server machine with this user.
Thanks for any insight
Greg

There is only one root user, so saying "a root user" doesn't make sense. What you mean is an admin user, and it looks like your account has somehow manage to lose its admin privileges.
Follow the instructions in I lost my admin user and you should get them back.
Note that in this User Tip, 'youruser' is a placeholder. You are supposed to substitute the short name of your account wherever it appears.

Error While creating users in managed system.

Dear All,
I am configuring SAP Solution Manager 7.1. I am in stage of Managed System Configuration (for JAVA).
In step 6 Create user: While creating (System) user SM_COLL_<SID> I am getting error :
An error occurred while processing the UME command READ_USER from agent <hostname> : Server returned: 401 Unauthorized. Please check SMD agent application logs.
And for ABAP System,
SMDAGENT_XXX Technical User (in Managed System <SID> Client 000)
while creating user SMDAGENT_<SID> and SAPSUPPORT
I am getting error:
No CENTRAL nor DIALOG instance known for system <SID>
But in SM51 I can see Server Status Active.
and Users are not present.(Checked it through SU01)
I am not getting why this is happening.
Please help me regarding the same.
Thanks & Regards
Ajitabh

Hi,
I am pasting the SMD agent application logs:
<!LOGHEADER[START]/>
<!HELP[Manual modification of the header may cause parsing problem!]/>
<!LOGGINGVERSION[1.5.3.7185 - 630]/>
<!NAME[SMDAgentAppLog]/>
<!PATTERN[SMDAgentApplication.log]/>
<!FORMATTER[com.sap.tc.logging.TraceFormatter(%d [%t] %10s %m)]/>
<!ENCODING[Cp1252]/>
<!FILESET[0, 10, 1000000]/>
<!PREVIOUSFILE[SMDAgentApplication.9.log]/>
<!NEXTFILE[SMDAgentApplication.1.log]/>
<!LOGHEADER[END]/>
Nov 29, 2011 2:02:09 PM [Thread[Connector,5,main]] Warning    com.sap.smd.wily.hostagent.mai.MaiAdapter - init: Introscope Host Adapter is not active, no Introscope metrics from MAI
Nov 29, 2011 2:21:01 PM [Thread[Thread-33,5,main]] Warning    com.sap.smd.wily.hostagent.mai.MaiAdapter - init: Introscope Host Adapter is not active, no Introscope metrics from MAI
Nov 29, 2011 2:38:31 PM [Thread[Thread-67,5,main]] Warning    com.sap.smd.wily.hostagent.mai.MaiAdapter - init: Introscope Host Adapter is not active, no Introscope metrics from MAI
Nov 30, 2011 1:26:19 PM [Thread[ExRun:OutsideDiscovery_1,5,OutsideDiscovery:ExecTG]] Path       Caught java.net.ConnectException: Connection refused: connect
     at java.net.PlainSocketImpl.socketConnect(Native Method)
     at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:333)
     at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:195)
     at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:182)
     at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:366)
     at java.net.Socket.connect(Socket.java:521)
     at com.sap.smd.agent.plugin.connectors.http.ConnectionExtendedImpl.openSocket(ConnectionExtendedImpl.java:2025)
     at com.sap.smd.agent.plugin.connectors.http.ConnectionExtendedImpl.open(ConnectionExtendedImpl.java:1398)
     at com.sap.smd.agent.plugin.connectors.http.ConnectionExtendedImpl.sendInternal(ConnectionExtendedImpl.java:1552)
     at com.sap.smd.agent.plugin.connectors.http.ConnectionExtendedImpl.send(ConnectionExtendedImpl.java:1483)
     at com.tssap.dtr.client.lib.protocol.requests.RequestBase.perform(RequestBase.java:570)
     at com.tssap.dtr.client.lib.protocol.requests.RequestBase.perform(RequestBase.java:693)
     at com.sap.smd.agent.plugin.connectors.http.HTTPConnectorService.performRequest(HTTPConnectorService.java:548)
     at com.sap.smd.agent.plugin.connectors.http.HTTPConnectorService.performRequest(HTTPConnectorService.java:673)
     at com.sap.smd.agent.plugin.connectors.http.HTTPConnectorService.performRequest(HTTPConnectorService.java:638)
     at com.sap.smd.agent.plugin.connectors.http.HTTPConnectorService.performRequest(HTTPConnectorService.java:624)
     at com.sap.smd.agent.plugin.connectors.webservice.SAPHostAgentTrustedConnectionConfigurator.setupTrustedConnection(SAPHostAgentTrustedConnectionConfigurator.java:81)
     at com.sap.smd.agent.plugin.connectors.webservice.WSConnectorFactory.configureLocalSAPHostAgentEndPoint(WSConnectorFactory.java:244)
     at com.sap.smd.agent.plugin.hostagent.check.HostAgentCheckService.getHostAgentVersion(HostAgentCheckService.java:105)
     at com.sap.smd.agent.plugins.dcc.util.WSProxyManager.checkSAPHostAgentVersion(WSProxyManager.java:287)
     at com.sap.smd.agent.plugins.dcc.util.WSProxyManager.initSAPHostControlWebServiceClient(WSProxyManager.java:112)
     at com.sap.smd.agent.plugins.dcc.util.WSProxyManager.getSAPHostControlProxy(WSProxyManager.java:75)
     at com.sap.smd.agent.plugins.dcc.job.PhysicalHostPushJob.run(PhysicalHostPushJob.java:195)
     at com.sap.smd.server.exec.TaskRunner.run(TaskRunner.java:46)
     at com.sap.smd.server.util.concurrent.PooledExecutor$Worker.run(PooledExecutor.java:781)
     at java.lang.Thread.run(Thread.java:679)
Nov 30, 2011 1:26:19 PM [Thread[ExRun:OutsideDiscovery_1,5,OutsideDiscovery:ExecTG]] Error      Pb:
[EXCEPTION]
java.rmi.RemoteException: Error to perform http request cause by java.io.IOException: Unable to open connection to host "FQDN:1128". The host is down or unavailable...; nested exception is:
     java.io.IOException: Unable to open connection to host "FQDN:1128". The host is down or unavailable.
Dec 2, 2011 4:56:53 PM [Thread[Thread-368,5,main]] Warning    [Setup]Step Id 1051 has no step description
Dec 2, 2011 4:56:53 PM [Thread[Thread-368,5,main]] Warning    [Setup]Step Id 1051 has no step description
Dec 2, 2011 5:02:05 PM [Thread[Thread-363,5,main]] Error      [Setup]Failed to get a soap response from http://FQDN:50000/spml/spmlservice
Dec 2, 2011 5:02:05 PM [Thread[Thread-363,5,main]] Error      [Setup]An error occured while processing the UME command READ_USER from agent HOSTNAME : Server returned: 401 Unauthorized
[EXCEPTION]
com.sap.sup.admin.xmlsoap.core.soap.NativeSOAPException: Server returned: 401 Unauthorized
Kindly help me out guys.
Thanks & Regards
Ajitabh

I changed my username and now afp doesn't show any users. I have file sharing on. And also when I select "get more info" on the shared folders they don't have my username in there. it just has "applepc(me)" it my old username before changing it.

I changed my username and now afp doesn't show any users. I have file sharing on. And also when I select "get more info" on the shared folders they don't have my username in there. it just has "applepc(me)" my old username before changing it showed the correct username? please any help would be great.

Turn Time Machine OFF temporarily in its preference pane. Leave the window open.
Navigate in the Finder to your backup disk, and then to the folder named "Backups.backupdb" at the top level of the volume. If you back up over a network, you'll first have to mount the disk image file containing your backups by double-clicking it. Descend into the folder until you see the snapshots, which are represented by folders with a name that begins with the date of the snapshot. Find the one you want to restore from. There's a link named "Latest" representing the most recent snapshot. Use that one, if possible. Otherwise, you'll have to remember the date of the snapshot you choose.
Inside the snapshot folder is a folder hierarchy like the one on the source disk. Find one of the items you can't restore and select it. Open the Info dialog for the selected item. In the Sharing & Permissions section, you may see an entry in the access list that shows "Fetching…" in the Name column. If so, click the lock icon in the lower right corner of the dialog and authenticate. Then delete the "Fetching…" item from the icon list. Click the gear icon below the list and select Apply to enclosed items from the popup menu.
Now you should be able either to copy the item in the Finder or to restore it in the time-travel view. If you use the time-travel view, be sure to select the snapshot you just modified. If successful, repeat the operation with the other items you were unable to restore. You can select multiple items in the Finder and open a single Info dialog for all of them by pressing the key combination option-command-I.
When you're done, turn TM back ON and close its preference pane.

How to create dynamic ed flash charts based on user selected fields in Orac

Hi all,
Can any of the experts please tellme "how to create dynamic ed flash charts based on user selected fields in Oracle apex".
Thanks
Manish

Hello,
Lots of different ways to do this, I blogged about one way (using a Pipelined function) here -
http://jes.blogs.shellprompt.net/2006/05/25/generic-charting-in-application-express/
Other options include using a PL/SQL function returning the string to use as the dynamic query etc.
Hope this helps,
John.
Blog: http://jes.blogs.shellprompt.net
Work: http://www.apex-evangelists.com
Author of Pro Application Express: http://tinyurl.com/3gu7cd
REWARDS: Please remember to mark helpful or correct posts on the forum, not just for my answers but for everyone!

Why my mac boots showing user selection screen?

My mac freezed on the user selection screen las time I started it so I reseted it by holding the power on button on the back of the imac.
Now when I boot it it just shows the user selection screen and freezes there. Mouse and keyboard don't respond. If I reset it or jnplug it I still have the same thing ocurrimg.
What can I do to solve it?

Try using a USB keyboard and mouse and see if they work. I'm assuming that you have the bluetooth wireless setup? If a wired keyboard and mouse work then you either should replace the batteries in both or have your Mac taken in because something is going on with the bluetooth

How create LOV(select List) with all LDAP users

Hello,
I am trying to create a selected list with all the users in my LDAP, note my LDAP is synchronized with my OID.
Any suggestions, I'm searching the the pl/sql statment?
Thanks
Hussam

Hi Hussam,
Take a look at my comments in the following two threads -
Re: LDAP
Re: Cookie And LDAP
The two different threads discuss the methods I use to do what you want to do (so you really need to 'combine' the two different threads).
Hope this helps

Task manager show process from all user

Hi All,
Need a help.
I need to enable "task manager show all show process" for all normal users(view like XP) irrespective of admin or not.
Can any one help me how to go about this through GPO. I searched a lot in net but could not found any convincing solution for this.

This is not possible. User processes are isolated from each other. Only administrators can retrieve information about processes from other users. Either make your users local admin, or tell them this is not possible.
This is because of the security design which isolates users from other processes (service processes and other users' processes)
there are many things that don't work anymore. For example, on XP it was possible to give service applications a user interface (for example for disgnostic or development purposes). From Vista onwards this is no longer possible because allowing users to
interact with service applications is a security risk.
There are many such changes, and you have to update your processes accordingly.

Possible to create a Message Box in response to end-user selecting "cancel" or "block" after clicking a link to a URL?

Hi all:
When an end-user clicks a link/button to connect to a URL, the security dialog automatically appears giving them the options of "Allow," "Block" or "Cancel". Should they select "Block" or "Cancel," can we trigger a message box informing them they blocked or cancelled the connection?
With traditional message boxes, we're causing them, ie
var rtnFromBox = xfa.host.messageBox("Information is missing.\n\n Are you sure you want to continue?", "Missing Information",1,2);
if (rtnFromBox == 4){
xfa.host.messageBox("Okay, we'll keep going.","",1,0);
But with the URL security dialog, we're not calling it from a variable - it just happens.
I guess a similar question could be applied to a "Save" button. Where if the end-user selects "cancel" on the "Save As" dialog, a warning could pop-up reminding them to save soon.
Thoughts? Thanks!
Brian

Radz,
I didn't think so but figured I'd ask. Thanks for the response though!
Best,
Brian

"Manage Users" IR report displaying incorrect user types

Home>Administration>Users
APEX 4.0.2.00.07
DB 11.2.0.2
Found a couple of question-raising things:
1) User type is showing "Workspace Administrator" for almost all users (many are only users) with a couple identified as "Developer" (who really do only have developer privs turned on). If I knew the sql for the IR report I might find the problem - checked wwv_flow_fnd_user and wwv_flow_developers and they both look OK (no recs in wwv_flow_developers for the end users and those with given admin privs are marked as admin, etc.). Did find one dup group name but removing it didn't seem to have an effect.
2) Trying to find out what is going on I found the second: It appears that if you have assigned more than one group to a user (apex group to apex user), then add the group_name column to the Manage Users IR, you get the "single row subquery returns more than one row".
Haven't found any other posts here on this. Any ideas?
Thanks,
Steve

Thanks Richard - forgot about the builder import.
After taking the IR sql and working it I found the following:
In this apex installation...
There seems to be a problem with the outer join between wwv_flow_developers and wwv_flow_fnd_user which brings non-null values for d.is_admin and d.is_developer (and for us these are 'Y' if there are no matching records in wwv_flow_developers.
Changing the decode for DEV_TYPE to use a nvl for d.userid to set all users to end user if they are not in the wwv_flow_developers table fixes the display of user type.
Now I am guessing this is a data anomaly rather than a bug. Anyone have any ideas on why the outer join to wwv_flow_developers shows a not-null value for is_admin and is_developer?
Steve
Here is a mostly-intact version of the region source (I shortened it considerably from the code below to focus on the incorrect USER TYPE display issue):
select /* APEX4350P55a */
USER_ID,
u.user_name "USER",
u.email_address "eMail",
u.first_name,
u.last_name,
replace(u.default_schema,'%'||'null%',null) df,
decode(nvl(d.is_developer,'N'),'Y', (select case
when (wwv_flow_fnd_user_api.workspace_account_days_left(
wwv_flow_user_api.get_username(user_id)) > 0)
then m.password_valid
else m.password_expired
end expiration from dual),
m.no_developer_priv) developer,
decode (nvl(d.is_developer,'N'),'Y',last_login,null) last_login,
decode (nvl(d.is_developer,'N'),'Y',last_login,null) last_login2,
decode (nvl(d.is_developer,'N'),'Y',
nvl(builder_login_count,0),null) builder_login_count,
decode(nvl(u.account_locked,'N'),'Y',m.yes,m.n)ul,
case
when (wwv_flow_fnd_user_api.end_user_account_days_left(
wwv_flow_user_api.get_username(user_id)) > 0)
then m.password_valid
else m.password_expired
end expiration,
u.DESCRIPTION,
u.PASSWORD_LIFESPAN_DAYS,
u.PASSWORD_LIFESPAN_ACCESSES,
u.PASSWORD_ACCESSES_LEFT,
u.LAST_AGENT,
u.LAST_IP,
u.ACCOUNT_EXPIRY,
u.FAILED_ACCESS_ATTEMPTS,
u.CHANGE_PASSWORD_ON_FIRST_USE,
u.FIRST_PASSWORD_USE_OCCURRED,
decode(nvl(d.is_admin,'N'),'Y',
m.admin,decode(nvl(d.is_developer,'N'),
'Y',m.dev,m.end_user)) dev_type,
(select group_id from WWV_FLOW_FND_GROUP_USERS where user_id = u.user_id) group_id,
(select GROUP_NAME from WWV_FLOW_FND_USER_GROUPS where id = (select group_id from WWV_FLOW_FND_GROUP_USERS where user_id = u.user_id)) group_name,
LAST_UPDATE_DATE,
LAST_UPDATED_BY,
CREATION_DATE,
CREATED_BY,
nvl(d.developer_type,'END_USER') developer_type,
decode(nvl(ALLOW_APP_BUILDING_YN,'Y'),'Y',m.yes,m.n) ALLOW_APP_BUILDING,
decode(nvl(ALLOW_SQL_WORKSHOP_YN,'Y'),'Y',m.yes,m.n) ALLOW_SQL_WORKSHOP,
decode(nvl(ALLOW_WEBSHEET_DEV_YN,'Y'),'Y',m.yes,m.n) ALLOW_WEBSHEET_DEV,
decode(nvl(ALLOW_TEAM_DEVELOPMENT_YN,'Y'),'Y',m.yes,m.n) ALLOW_TEAM_DEVOPMENT
from WWV_FLOW_FND_USER u,
(select USERID,
decode(instr(DEVELOPER_ROLE,'ADMIN'),0,'N','Y') is_admin,
'Y' is_developer,
case
when instr(DEVELOPER_ROLE,'BASIC_DEV') > 0 then
'BASIC_DEV'
when instr(DEVELOPER_ROLE,'ADMIN') > 0 then
'ADMIN'
when instr(DEVELOPER_ROLE,'CREATE') > 0 then
'DEVELOPER'
else
'UNKNOWN'
end developer_type
from WWV_FLOW_DEVELOPERS
where security_group_id = :flow_security_group_id) d,
(select wwv_flow_lang.system_message('F4000.NO') n,
wwv_flow_lang.system_message('F4000.YES') yes,
wwv_flow_lang.system_message('PASSWORD_VALID') password_valid,
wwv_flow_lang.system_message('PASSWORD_EXPIRED') password_expired,
wwv_flow_lang.system_message('NO_DEVELOPER_PRIV') no_developer_priv,
wwv_flow_lang.system_message('DEVELOPER') dev,
wwv_flow_lang.system_message('ADMINISTATOR') admin,
wwv_flow_lang.system_message('END_USER') end_user,
wwv_flow_lang.system_message('BASIC_DEVELOPER') basic_developer
from dual) m
where
u.user_name = d.userid(+) and
u.security_group_id = :flow_security_group_id
Edited by: stevehoward on Jul 6, 2011 11:37 AM
Edited by: stevehoward on Jul 6, 2011 11:40 AM

Show Network Users (as List) not working consistently (10.5 server/client)

I am running an Xserve with 10.5.5 Server as an Open Directory Master. When I go to the Computer Group the clients are listed in and set the preference to show network users as list on the loginwindow, the clients are not constantly displaying the list. Network Accounts are available on the client and typing the username in Other is also logging in.
What I think is strange is that my custom heading always displays, so I know I'm getting at least some of the mcx settings on the client. This was not a problem with 10.5.4 client/server combo. If only local accounts are listed, you can restart and 50% of the time the network users show up in the list. You can also log in as a local user and log out, this will sometimes refresh the list to display network users. However, whether or not the users are displayed in the list, network accounts are always available and can login via Other.
Does anybody know what I can do to fix the problem? It is an elementary school environment, so it is not feasible to have kindergarten students to type out their names every single time.
One possible solution I came up with is to replace the 10.5.5 loginwindow on the client with the 10.5.4 version, but 10.5.5 supposedly fixes a lot of problems with it. Are there any negative consequences that could occur from doing this besides the fact that I lose the security fixes to the 10.5.5 version? I know that my 10.4.11 clients do not experience this problem, so I'm guessing that the 10.5.4 loginwindow might just work, but wanted to see if anyone knew of any issues in doing this.
I have also written a program that manages our clients for automated naming, image OS version assignment with NetRestore, and generate import files that create computer and computer list records for Workgroup Manager. This information is stored in a MySQL database and the program I wrote generates files that are imported into Workgroup Manager for list assignment. The computer lists are generated by room number, and computers are assigned names with their corresponding room number and placed in the appropriate computer list. In 10.5, I see that there is a push for Computer Groups rather than Computer Lists. However my program assigns computers to lists using the computer record name rather than the generated uid of the computer record like the computer group expects. From what I understand, the only benefit to Computer Groups is that you can include other Computer Groups within Computer Groups. Does this create any issues for mcx management? I have tried both groups and lists and have the same problem with loginwindow network user lists on 10.5.5.
Another question I have is how do you change the Cache settings now in WGM? In 10.4.11, there was a "Cache" tab where you could force clients to refresh the MCX cache after x amount of time, but the tab has been removed in 10.5. Can I add that mcx flag to Open Directory and have my 10.5 clients respect the policy, or has this been outdated in 10.5?
Thanks,
Chris Bethel
Hamilton County Dept. of Education
Chattanooga, TN
[email protected]

Thanks for your reply, it gave me an idea that seems to be working so far:
This is not feasible for anything other than an elementary school with network homes. It is extremely insecure but when you need a working product, you pretty much gotta do what you gotta do. Here's what I've done:
1. I created a local administrator user with the name "@ Refresh List" with short name "refreshlist" with no password.
2. Launch Script Editor (in /Applications/AppleScript/Script Editor) and paste this code:
do shell script "rm -Rf '/Library/Managed Preferences'" password "" with administrator privileges
do shell script "killall loginwindow" password "" with administrator privileges
3. Save with file format set to Application, check "Run Only" and uncheck all other boxes to somewhere the user home folder.
4. In the Accounts pane of System Preferences, select the "@ Refresh List" user and go to the Login Items tab.
5. Drag in the application you just saved.
6. Quit System Preferences and log out.
This is EXTREMELY bad for security, but since its elementary school students and network home folders, there's not much for them to mess up. It provides a 1-click process to updating the much needed list.
Also -- I've tried swapping out loginwindow with 10.5.4 and experienced the exact same result.
My fix is quick and dirty, but gets the job done.
Does anyone else have any suggestions?
Message was edited by: WollarinTJ

Create User Select Manager shows no users

Similar Messages

Maybe you are looking for