Creating users something is not in sync

Ok I am pounding my head over this. Added a new user but the user is unable to access planning.
Here is what I did
1. In Shared Services added the user to our native security groups
2. Choose Sync Native Directories
3. In Planning choose 'Manage Databases'...refreshed database for the planning app with security checked
4. User in EAS shows as access to Essbase but not planning
My steps are obviously wrong for create a new user to access planning.

I do not believe it will create essbase filters until they login once to planning before a Manage / Database.
They should be able to login to the apps after you have provisioned them in Shared Services for the app (although I've seen you may need to do a migrate identities at times too).
Just too many places to do security:
Shared Services
Planning (Migrate ID / Refresh DB)
Essbase (Sync to Shared Services)
John

Similar Messages

LF applescript to create users by dscl NOT dsimport

Good evening
I do a lot of my maintenance by applescripts that are run by mail rule. Easy applescripts
Since dsimport files seem way too complicated to be provided by mail (there have to be UNIX breaks and so on) I am asking for your help.
I would like to have an applescript that filters the inbox for a string like "Create User Account: " and uses the rest of the subject as parameters to create the respective user accounts.
A full mail subject could look like this: "Create User Account: mleuenberger,Moritz,Leuenberger,6(sRpq4"
Henceforth the applescript would run
do shell script "dscl -u admin -P MyPW /LDAPv3/127.0.0.1 -create /Users/mleuenberger"
do shell script "dscl -u admin -P MyPW /LDAPv3/127.0.0.1 -create /Users/mleuenberger"
do shell script "dscl -u admin -P MyPW /LDAPv3/127.0.0.1 -create /Users/mleuenberger UserShell /bin/bash"
do shell script "dscl -u admin -P MyPW /LDAPv3/127.0.0.1 -create /Users/mleuenberger RealName "Moritz Leuenberger""
do shell script "dscl -u admin -P MyPW /LDAPv3/127.0.0.1 -create /Users/mleuenberger UniqueID "XXXX""
do shell script "dscl -u admin -P MyPW /LDAPv3/127.0.0.1 -create /Users/mleuenberger PrimaryGroupID 80"
do shell script "dscl -u admin -P MyPW /LDAPv3/127.0.0.1 -create /Users/mleuenberger NFSHomeDirectory /Users/mleuenberger"
do shell script "dscl -u admin -P MyPW /LDAPv3/127.0.0.1 -passwd /Users/mleuenberger 6(sRpq4"
Appending the seperate responses to a variable would be luxury, so I could have it send them by mail as my other applescripts respond.
I don't know if setting a UniqueID is required (hopefully not) because it had to be randomly generated. I have no idea how to do this in applescript.
I am very thankful for any help.
Greetings from snowy switzerland

It would certainly run the "-create /Users/mleuenberger" command only once.

Why doesn't default CREATE USER form show a "Check" Page before submitting

Hi
Interesting question.
When I create a User (using my Customized Create User Form), and I press SAVE, the Form is submitted immediately. There is no "stop-and-check" page, which allows one to review the entries made BEFORE submitting the form itself.
For example : when EDITING or UPDATING a User, and you press "Save", the form is not submitted right away. Instead, a new page opens, where you can review the changes you made, to ensure that they are correct. In fact, at the bottom of this new page, there are 4 standard buttons : SAVE...........RETURN TO EDIT............CANCEL
This is a very good system, because it allows you to check your entries, and make sure they are correct, before pressing SAVE again to submit.
However, the "Create User" form does not have this same arrangement.
Is there any way to customize the Form, so that, when creating a User, and you press SAVE, a "check-page" first shows up (just like when updating/editing a user) ?
Thanks

Hi
Interesting question.
When I create a User (using my Customized Create User Form), and I press SAVE, the Form is submitted immediately. There is no "stop-and-check" page, which allows one to review the entries made BEFORE submitting the form itself.
For example : when EDITING or UPDATING a User, and you press "Save", the form is not submitted right away. Instead, a new page opens, where you can review the changes you made, to ensure that they are correct. In fact, at the bottom of this new page, there are 4 standard buttons : SAVE...........RETURN TO EDIT............CANCEL
This is a very good system, because it allows you to check your entries, and make sure they are correct, before pressing SAVE again to submit.
However, the "Create User" form does not have this same arrangement.
Is there any way to customize the Form, so that, when creating a User, and you press SAVE, a "check-page" first shows up (just like when updating/editing a user) ?
Thanks

ATG 10.1 How we can create user segment programitically

Hi,
I want to create user segment programitically, not through BCC.
Rule for the segment I will be getting from some third party. I have to create rule for my segment programitically and assign the user segment to a profile group.
I checked the user properties and got to know as for every profile user segments will be assigned as a dynamic property.
How I can create the same programitically after getting the rule from third party.
Thanks in advance
Agil

>Why (no body) help me?.
>Is my question not clear?
Yes, your question is not clear.
>
http://www.libyabuild.com/news1.htm
Is that one of the pages on your site? Do you just want to
add a feature that searches your site for relevant content? If so,
check out
http://www.wrensoft.com/zoom/support/dreamweaver.html
So I don't understand why you are asking about a database -
are you trying generate results that link to other sites?

User created but can't log into Portal. OID not in-sync with Repository.

Logged into Portal as portal
Go to Administ Tab
Created a group i.e. TestGroup
Created a user i.e. TestUser, put the user's default group as TestGroup.
I logged-out and and tried to log in as TestUser it doesn't let me log into Portal.
I do see the TestUser under TestGroup when going to Administer Tab and checking it, but some how can't log-in. I tried to use wwsec_api.user_in_groups to print the group names using SQL-Navigator but it never returns anything for the user I created above.
username := 'TestUser';
groupid := WWSEC_API.USER_IN_GROUPS(p_user_name=>username);
..........Now if if try the following and use portal it returns me all the groups the portal user is in i.e.
username := 'portal';
groupid := WWSEC_API.USER_IN_GROUPS(p_user_name=>username);
..........Looks like OID and repository are not in-sync. Can someone give some in-sight why is this happening and what can I do to fix this. I even tried adding the user under some other groups but still never returns me the groups when I run the above PL/SQL.
Thanks

Under Administer -> SSO/OID Tab I have Enable directory synchronization is checked. But still can't log in. Any ideas.
Thanks

Can not create user "OPS$domainname\SAPSERVICEC11" in oracle

Hi all,
I'm installing SAP R3E 4.7 extension set 2 SR1 on Window 2003 , orcle 9.2 (patch 9.2.0.8.0) after finish CI, DB, DI and try to strat SAP with MMC but disp+work.exe didn't run . And the error is "ORA-01017: Invalid username/password; logon denied"
After that i find out solution from SAP Note400241. I need to create user "OPS$domainname\SAPSERVICEC11" but my domain name is 17 charecters long. That make the username is too long (more than 30 characters). So I cann't create this user.
How can i solve this problem?
BR,
Prachya

> Hi Eric,
>
> With the note: 400421 I am facing the following
> problems..... Could you please help me out as where I
> am going wrong?
>
> 1. I could connect through " connect /@sid"
-> OK, then the "OPS$" exists
>
> 2. select granted_role from dba_role_privs where
> grantee='ops$_user';
> No Rows found..
>
> 3. select owner from dba_tables where
> table_name=T000
>
> gives me SAPDEV
>
> That means the owner is SAPDEV and what is SAPUSER
> ????
NO, this is telling you that the schema name is SAPDEV, only. We will need it later
>
> general checks:
>
> select owner from dba_tables where table_name=SAPUSER
>
> gives me OPS$DEVADM and OPS$SANDBOX\DEVADM
The name of your server is SANDBOX, but you mentioned before that you had a domain longer than 17 characters. This does not match.
Have you performed a DOMAIN or a LOCAL installation?
For this output it seems that it is local
>
> so if t000 has SAPDEV then should I check the above
> command for SAPDEV instead of SAPUSER???? ..
NO. The table name is SAPUSER
>
> 3. select owner, table_owner, table_name from
> dba_synonyms wghere synonym_name=SAPUSER
> give
> OPS$SANDBOX\SAPSERVICEDEV OPS$SANDBOX\DEVADM SAPUSER
>
> why here SAPUSER is present..

Do you know what is a synonym? or what have you queried?
Select owner, table_owner, table_name from
dba_synonyms wghere synonym_name=SAPUSER
It is giving you the
-> Synonym OWNER -> OPS$SANDBOX\SAPSERVICEDEV
-> Table OWNER -> OPS$SANDBOX\DEVADM
-> TABLE NAME -> SAPUSER
This data is correct.
>
> Do I need to change the T000 table( update it to
> SAPUSER)???
NOOOOO. Leave teh "normal" tables alone
>
> I you know that have copied the data files (OS level)
> from anpther DEV server to sandbox..( SID same). It
> had in DBA_USER with its hostname like
>
> OPS$HPSERVER\SAPSERVICEDEV
> OPS$HPSERVER\DEVADM
>
> So I thought it must be bcos of this so I run the
> script oradbusr.sql to create
> OPS$SANDBOX\DEVADM user and managed to create it.
> Also managed to get OPS$SANDBOX\SAPSERVICEDEV users.
> The grant to them is also okay.. But then also not
> able to connect through SAP.
>
> Please suggest where I am going wrong and what to
> change...
>
> Regards
> Prashant
So, Looking at the initial error ( ora-1017 ) and the output of the queries I wonder if you have changed the DB password.
I do think so. and I think you did it at DB level ( alter user identified by ... )
Then the problem seems to be that you do not have the password in SAPUSER table in sync with the password you changed.
In SAP ABAP systems you cannot change the password at DB level. You have to use BRCONNECT to do so, it will keep the passwords in SYNC:
brconnect -u system/<password> -f chpass -o <sapowner> -p
<password>
try it. then execute R3TRANS -x and see if it can connect

Create user at initial sync

hi
at initial sync the db get created and some tables are "copied" from backend-db.
but i want that not SYSTEM is owner of these tables, but another user.
can i make a script and "say" that these tables schould be copied to the schema of newly created user?
how can i do this? is it possible at all?
or is there another way for this?
thx
rico

the download will create a control odb file, and one or more application odb files (depends how many applications the user is linked to).
The user is always SYSTEM i am afraid, and i do not think there is any way of getting around this. Oracle lite does not have the concept of schemas as such, it is a single database file. Where there are multiple users sharing a device, there may be seperate copies of the database files in directories named for the user, but still database user name is still system.
up to 10g R1 the connect string is system/a, in 10g R2 this changes to system/<password of the user>. NOTE password is case sensitive, so you may need to use upper case

I'm having trouble updating my iphone 4 since i updated to 4.3.3 i can't update it anymore. right now when i connect it to my itunes, itunes freezes for about 5 minutes then says something like "could not load sync service" any ideas on what i shud do?

I'm having trouble updating my iphone 4 since i updated to 4.3.3 i can't update it anymore. initially itunes would let me go so far as downloadin the new software then an error poped up as soon as the download finished, and now when i connect it to my itunes, itunes freezes for about 5 minutes then says something like "could not load sync service, reconnect or try again later" any ideas on what i shud do?

Did you try to connect in recovery mode? iPhone and iPod touch: Unable to restore

OIM 9.1.0.2 patch: not able to create user.

Hi,
After the 9.1.0.2 patch installation I am not able to create users. The following exception is thrown:
DOBJ.THROWABLE_IN_SAVE
Unhandled throwable java.lang.IllegalAccessError in com.thortech.xl.dataobj.tcUSR's save.
help required..

Hi,
I am getting the same error and i have entity adapters on my USER's form.
Please help.
Thanks

COREid Federation Error: A local user session could not be created for the

Hi,
I installed two instances of COREid Federation in my machine. Also installed SiteMinder and LDAP. Source Domain of COREid (8101) uses LDAP as IdMBridge and Destination Domain (9101) uses SiteMinder as IdMBridge. I am trying to access the resource protected by the SiteMinder from the source domain using the URL which is constructed using the pattern given in the PDF:
http://mymachine.domain.com:8101/shareid/saml/ObSAMLTransferService?DOMAIN=DestinationDomain&method=POST&TARGET=http://mymachine.domain.com:8887/Source/Source.html
Assertions are generated and I can see the assertion in the Source domain and transferred to the Destination Domain.
I get the following error in the Destination Domain Shareid Log file:
ERROR - [http10113-Processor3] - RECEIVER: ERROR: A local user session could not be created for the assertion
Please help me to solve this issue?
Note: The Web agent runs on the web server instance 8887.
SiteMinder is able to protect the resource when accessed.

Typically that error occurs when the destinations access management system can't find the user based on the SAML attribute. Check to make sure that the attribute that you are matching on matches exactly.

SHAREid - A local user session could not be created for the assertion

Problem: We have a client trying to federate to our environment using POST profile but we are getting the following error, "RECEIVER: ERROR: A local user session could not be created for the assertion".
I verified that the user exist in the directory and I am able to execute a test successfully as that user.
Thanks.

There is a requirement that the client needs to send an attribute called "traveler" in the assertion. We found out that the problem occurs only when client sends a attribute in the assertion. When the assertion does not include the attribute, there is no issue. Not sure why that is the case as we have other clients sending the same attribute in the assertion.
Here is the AttributeStatement.
<saml:AttributeStatement xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><saml:Subject><saml:NameIdentifier Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">XXXXXX</saml:NameIdentifier></saml:Subject><saml:Attribute AttributeName="XXXID" AttributeNamespace="http://schemas.xmlsoap.org/claims"><saml:AttributeValue>XXXXX</saml:AttributeValue></saml:Attribute></saml:AttributeStatement>
It does not have <saml:SubjectConfirmation> and <ConfirmationMethod> element. Can that be a problem?
Thanks,
Vinay
Edited by: user504421 on Jul 9, 2009 2:17 PM

SRM: Create Contact Person Could not create user; contact your system admin

Hi All,
First, I am not sure this question should be posted here, or SRM General. From my point of view, here is more suitable.
Our Problem:
Activity "Create Contact Person With Reference" error with message:
Step to reproduce:
1. Login to SRM JAVA as super administrator
2. Open tab "SRM Administration"
3. Using the current query, search for Business-Partner no: 30000725
4. Press "Create Contact Person with Reference"
5. Fill all required fields, tick "Is contact person" checkbox
6. Put: /SAPSRM/SUPPLIER as Role
7. Save
The following Message appear:
Could not create user; contact your system administrator
SPML Service error: Error reading request status. Display Help
Contact Person 2000000214 Created Successfully for BP 30000725 Display Help
E-mail was sent
The first error is intriguing. The username & password is created successfully in ABAP System (Our UME is in ABAP).
QUESTIONS:
1. What cause this problem? How to trace the error?
2. We want the user have portal role automatically. How to achieve that?
Thank you for any responses and helps.
SRM ABAP Version:
SRM_PLUS     700     0009     SAPKIBK209     SRM_PLUS for mySAP SRM
SRM_SERVER     700     0009     SAPKIBKV09     SRM_SERVER
SAP_ABA     701     0007     SAPKA70107     Cross-Application Component
SAP_BASIS     701     0008     SAPKB70108     SAP Basis Component
PI_BASIS     701     0007     SAPK-70107INPIBASIS     Basis Plug-In
SRM JAVA Version:
SRM JAVA: Release 7 SP Level 9.0
BP SRM: Release 7 SP Level 9.0
Edited by: Nur Agus Suryoko on Mar 11, 2011 11:36 AM
Version information added

Hi Fernando,
Can you please tell me how you resolved this issue ??
Regards,
Adren

A USB thumb drive with data created in Windows is not showing up on my desktop. Do I need a different driver or something?

A USB thumb drive with data created in Windows is not showing up on my desktop. Do I need a different driver or something?

OK in order to read those files you will need MS Office for Mac or install MS Windows on your Mac. You can get MS Office for Mac from anyone that sells Apple products. I would suggest the Apple Store, Best Buy, Amazon etc...For help getting the data from the memory stick I'd recommend visiting your local Apple Store or AASP and they can help you move it. It should be as simple as plugging the USB drive into your USB port and then open a Finder Window where you will see the drive on the left pane. If you don't know what Finder is or how to open a new Finder window you need the sites I've noted below!!!
Because you are new to OS X I would strongly recommend you bookmark and frequently visit the following web sites:
Switch 101
Mac 101
Find Out How Video tutorials

Adobe form created in LiveCycle does not remember user input

Adobe form created in LiveCycle does not remember user input when the file has been re-opened after it has been saved.
Example:
"Check box" that has been selected and who have registered Action script (may be that it should be disabled), seems to be reset when the file is re-opened, although it apparently is checked.
Are there settings or script that can prevent this?

Hi there,
usually if the values are not kept in form after saving and re-opening the form, it would be because of your code... or because it is not Reader Extended PDF...
If your code has a function which is to return a value to your field without it to be working based on your Design, it will reset any data..(variables)
Which means...
e.g.: You have an array/var/JSONobject which you populate varying on the data entered in the design, as long as you are in the actual form, without closing and re-opening the form, it will keep all values inside that array / variables / JSONobject. But, once the form closed and re-opened, if you have a function that returns a value to your field, whatever the field, from any variable in the script it will return nothing because every variables are reset. To avoid such a thing, you must repopulate all variables that were assigned previously before closing the PDF Form. To do so, I recommend to have a page(hidden) which contains every important values according to that function and you must repopulate those variables according to the values in the keepVar page...
If you do not have any function that returns a value to a field based on your variables, this is not the solution you are looking for and I am not aware of the reason why it behaves like this... Maybe more information on the behaviour of your form would help locate the issue...
Hope this help

OOTB create user is not working for AD

Hi,
While creating the user am getting the following error.
[6/1/11 0:33:28:153 EDT] 00000037 SystemOut O DEBUG,01 Jun 2011 00:33:28,153,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/getRunTimeVariableMappings - Data: adv name - Value: PasswordNeverExpires
[6/1/11 0:33:28:153 EDT] 00000037 SystemOut O DEBUG,01 Jun 2011 00:33:28,153,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/getRunTimeVariableMappings left.
[6/1/11 0:33:28:153 EDT] 00000037 SystemOut O DEBUG,01 Jun 2011 00:33:28,153,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/getRunTimeValue - Data: Variable Name - Value: PasswordNeverExpires
[6/1/11 0:33:28:153 EDT] 00000037 SystemOut O DEBUG,01 Jun 2011 00:33:28,153,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/getRunTimeValue - Data: MapTo - Value: Process Data
[6/1/11 0:33:28:153 EDT] 00000037 SystemOut O DEBUG,01 Jun 2011 00:33:28,153,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/getRunTimeValue - Data: sMapQualifier - Value: Password never expires
[6/1/11 0:33:28:153 EDT] 00000037 SystemOut O DEBUG,01 Jun 2011 00:33:28,153,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/getRunTimeValue - Data: sMapValue - Value: UD_ADBURG_NEVER
[6/1/11 0:33:28:153 EDT] 00000037 SystemOut O DEBUG,01 Jun 2011 00:33:28,153,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/getRunTimeValue - Data: sVarDataType - Value: Boolean
[6/1/11 0:33:28:153 EDT] 00000037 SystemOut O DEBUG,01 Jun 2011 00:33:28,153,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/getRunTimeValue - Data: sMapOldValue - Value: 0
[6/1/11 0:33:28:153 EDT] 00000037 SystemOut O DEBUG,01 Jun 2011 00:33:28,153,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/getRunTimeValue - Data: sMapChildTableName - Value:
[6/1/11 0:33:28:153 EDT] 00000037 SystemOut O DEBUG,01 Jun 2011 00:33:28,153,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/getDataSetFieldValue entered.
[6/1/11 0:33:28:153 EDT] 00000037 SystemOut O DEBUG,01 Jun 2011 00:33:28,153,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/getDataSetFieldValue - Data: psFieldName - Value: UD_ADBURG_NEVER
[6/1/11 0:33:28:153 EDT] 00000037 SystemOut O DEBUG,01 Jun 2011 00:33:28,153,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/getDataSetFieldValue - Data: psMapSourceDataType - Value: Boolean
[6/1/11 0:33:28:153 EDT] 00000037 SystemOut O DEBUG,01 Jun 2011 00:33:28,153,[XELLERATE.ADAPTERS],tcAdpEvent/getDataSetFieldValue poDataSet is null
[6/1/11 0:33:28:157 EDT] 00000037 SystemOut O DEBUG,01 Jun 2011 00:33:28,157,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/updateSchItem entered.
[6/1/11 0:33:28:157 EDT] 00000037 SystemOut O DEBUG,01 Jun 2011 00:33:28,157,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/updateSchItem - Data: event - Value: adpADCSCREATEUSER
[6/1/11 0:33:28:157 EDT] 00000037 SystemOut O DEBUG,01 Jun 2011 00:33:28,157,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/updateSchItem - Data: New Status - Value: R
[6/1/11 0:33:28:157 EDT] 00000037 SystemOut O DEBUG,01 Jun 2011 00:33:28,157,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/updateSchItem - Data: SchData - Value: {2}
*[6/1/11 0:33:28:157 EDT] 00000037 SystemOut O DEBUG,01 Jun 2011 00:33:28,157,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/updateSchItem - Data: Reason - Value: Exception java.lang.NullPointerException was thrown in adapter "ADCS Create User". The Adapter Response was "null"*
NOTE:
Am creating user through the access policy, it throwing the above error for auto provisioning…
IF open (edit) process form of AD and click on save (w/o changing the process data) and retrying the crate user task it working .
Advance Thanks..

This is typically the result of the checkboxes on the form. You need to give a default value of 0 or 1 either using the Default option, or prepopulate. If you do not fill this in, when the form is completed through auto-save, it will have a null value.
-Kevin

Creating users something is not in sync

Similar Messages

Maybe you are looking for