Delegated Admin reports strange number of users

I recently noted that our Delegated Admin (Delegated Administrator 6.4-2.05, B2008-04-29) Organizations page
(the one which lists the hosted domains and particularly their "Number of Users") lists this number plain wrong.
For many organizations it is reported as 0 or 1, for one there's a blank line, and only one seemingly has 39 users.
When I click on organizations however, I see their full lists of users (I believe, ones which have a non-empty mail
attribute set in LDAP) and there are tens in most orgs and over a hundred accounts in the larger org.
What is wrong? Does DA's Organization-List page use some other means of counting the users than the individual
Organization's page?

JimKlimov wrote:
In fact, while importing our old server, I did initialize most domains' users via
ldapclient queries as discussed on-list in mid-2008. Nobody said that there
are other static values outside of a user's account data :)The sunnumusers: attribute is commonly overlooked -- primarily because it is for admin-interface purposes only and doesn't impact on the operation of user accounts.
Is it possible to replace this value of sunnumusers by a dynamic search (or
counter), either in the GUI code or perhaps in the LDAP attribute?No. Any such dynamic search would have an adverse performance impact on the DA interface for large environments.
What is the logically correct value, the count of users with mail attribute set?If you want the sunnumusers: to match the number of users displayed when you click on the organisation in the "Organizations" tab then you would count the users which matched the following search for the domain:
""(&(uid=*)(&(objectClass=inetuser)(|(inetUserStatus=active)(inetUserStatus=inactive))))""
Regards,
Shane.

Similar Messages

  • Report the number of users who provisioned a My-site on sharepoint online?

    I have a Office 365 SharePoint instance that we have activated a large number of user accounts on, I am trying to find a way to run a report that will show me the total count of users who have logged into SharePoint and provisioned a my-site. essentially
    a list of the total number of my-sites and the name or ID of the user they belong to. We are trying to gauge adoption across the organization, a report like this would be really valuable. Any chance someone knows an easy solution for this?
    yaddaimean

    My Sites are typically located within a common location, like http://sharepoint/my/* or http://my.sharepoint.com/*
    Assuming this is the case in your tenant, I would try the
    Get-SPOSite cmdlet to get a list of sites that match a particular filter or pipe the results through a where clause. I've never done this myself and don't have a tenant to test against but I imagine it would look something like this:
    $mysites = Get-SPOSite -Limit All | where {$_.Url -Like "http://sharepoint/my/*"}
    $mysites.Count
    I can't find any information about the SPOSite object. I'm assuming it has an Owner property like the SPSite object. If it does, you should be able to get a list of users who have created a My Site:
    foreach ($mysite in $mysites) {
    $mysite.Owner
    I honestly hope this works :)
    Jason Warren
    @jaspnwarren
    jasonwarren.ca
    habaneroconsulting.com/Insights

  • Deliver Reports  Large number of users.

    Hi Experts,
    We want to deliver set of reports to our customers (1000 customers) with data level security.
    i.e., A customer can only see their data.
    How can I achieve this using BI Publisher.? Do we require licenses for these numbers of users.?
    Can you please help.?
    Thank You.

    Hi Damodhar
    User mapping can be done in the programming level. The User Management Engine in EP 6.0 provides two interfaces to access the user mapping data namely
    1. IUserMappingService.
    2. IUserMappingData.
    You can implement these two intefaces to enable User Mapping. Please refer to the following link for further details.
    http://help.sap.com/saphelp_nw04/helpdata/en/69/3482ee0d70492fa63ffe519f5758f5/content.htm
    Hope that was helpful.
    Best Regards
    Priya

  • From schema 1 to schema 2 migration delegated admin problem

    I want migrate from schema 1 to schema 2 the messaging server 6.2 ( jes 2005q1).
    I have install access manager and delegated admin.
    With the commdirmig I migrate the domain and schema , the messaging work correctly.
    I have a problem with the delegated admin web interface.
    The delegated don't view my domain. If I add the sundelegatedorganization objectclass I can view my domain on delegated admin but I can view user and group.
    Any Idea?
    TIA
    Bye Giovanni

    There are two very different products called "deletaged admin". The old iPlanet Delegated Admin (iDA) only works with Schema 1. The current Delegated Admin, that comes with JES3 only works with Schema 2.
    If you're using the old iDA that worked with schema 1, it won't work with schema 2. You have to install the new DA for that.
    It doesn't work with groups/lists, only with users and domains.

  • Delegated Admin and Number of Users

    Recently we deleted about 3K users using: commadmin domain purge, and while
    it appears to have successfully deleted the users -- ldapsearch doesn't yield any
    output. The lower number of users is NOT reflected in the field "Number of Users"
    on the Delegated Admin page. It still shows the same number of users >11K we
    "had" prior to the deletion process.
    Any ideas to explain this discrepancy?
    -- Bob

    rkbunca wrote:
    Recently we deleted about 3K users using: commadmin domain purge, and while
    it appears to have successfully deleted the users -- ldapsearch doesn't yield any
    output. The lower number of users is NOT reflected in the field "Number of Users"
    on the Delegated Admin page. It still shows the same number of users >11K we
    "had" prior to the deletion process.
    Any ideas to explain this discrepancy?The number of users displayed in the DA GUI is recorded in the "sunNumUsers" attribute associated with the domain e.g.
    dn: o=aus.sun.com,dc=aus,dc=sun,dc=com
    sunNumUsers: 11
    This is to avoid having to do an ldapsearch across the domain to get a count. You can manually update this attribute to get the number back-in-sync.
    The commadmin domain purge should have updated this value -- I couldn't find any pre-existing bugs to explain why it didn't happen in your case. I suggest you log a support case to get this looked into further.
    You may also want to check your directory audit logs to see if an attempt was made to update this attribute but failed for some reason.
    Regards,
    Shane.

  • Delegated Admin and non-flat user/group structures

    Hello, I am trying to build a directory structure with several containers under an organization used to store different portions of userdata and group data (i.e. not only ou=people and ou=group, but also a few ou's like them). Server software is from OUCS 7u2 release. Users in "other" containers are populated into LDAP (ODSEE 11) by replication, filling in all the same attributes as a freshly DA-created account has.
    The Delegated Admin interface and other parts of the software accept this and work okay with this setup, displaying user information, allowing logins and so on - except for attempts to edit user accounts in the alternate containers in the DA (i.e. add/remove service packages, change quotas, etc.). First I've verified that this is not an LDAP problem - I can use both command-line ldapmodify and an LDAPBrowser GUI to edit the entries with no hiccups.
    I tracked that when trying to save account information for accounts in non-standard containers, the DA still tries to use a hard-coded path (i.e. uid=USERNAME,ou=people,o=DOMAINNAME,dc=DOMAIN,dc=NAME) despite the fact that the user account is (and DA displayed it from) uid=USERNAME,ou=morePeople,o=DOMAINNAME,dc=DOMAIN,dc=NAME.
    Possibly, this "hardcoding" stems from DA configuration in WEB-INF/classes/sun/comm/cli/server/servlet/serverconfig.properties which does list components of the LDAP structure:
    # Ldap configuration.
    # List of ldap hosts. Form is <ldaphost>:<portnumber>. (Default port = 389)
    # add additional hosts with ldaphost-<consecutive number>
    # Schema type is either "1" or "2".
    # Reconnect interval is in seconds
    # Group and people container is dn from organization dn (e.g ou=people)
    ldaphost-1=oucsldap01:389
    ldaphost-2=oucsldap02:389
    ldaphost-suffix=dc=DOMAIN,dc=NAME
    ldaphost-dcsuffix=dc=DOMAIN,dc=NAME
    ldaphost-maxcount=50
    ldaphost-schematype=2
    ldaphost-reconnectinterval=60
    ldaphost-peoplecontainer=ou=People
    ldaphost-groupcontainer=ou=Groups
    ldaphost-orgadminrole=cn=Organization Admin Role
    While the organization root dn is not explicit here (and shouldn't be), the default people container is... I might guess a coding error logic like this: indeed, the "ou=People" container should be used by default when creating a user via DA; as a likely error, it might also be used when editing existing users - instead of their existing full DN/parent DN.
    Questions:
    1) Does anyone have a working configuration with several user/group containers within an organization like this? Would you care to share details and workarounds, if were needed?
    2) I think that possibly the "shared domain/organization hosting" mode might help here - at least it is expected to have several LDAP trees with their delegated administrators performing as a single e-mail domain. Before I go and reconfigure everything, I'd love to hear if there are any success stories with this route? Is it a proper solution (or THE solution) for such config?
    Thanks,
    //Jim Klimov

    I wanted to follow up that reconfiguring the directory structure according to shared domain hosting, with branches for ISW-synchronized accounts as one of the sub-organizations which share the domain, and manually created OUCS-only accounts being in another sub-organization. This works for both messaging components and the DA, as long as UIDs are in ou=People in their organization. Somewhat unfortunately, ISW config seems to allow only one DSEE target branch and puts groups (CN) there as well. Well, for our needs to edit user attributes and service packages via DA, this suffices. Sometimes there are hiccups (Can not save changes), but they are intermittent and harder to trace debug; usually go away with restart of the DA web container. The DSEE LDAP instances are configured with plugins to enforce uid uniqueness across the organization and uniqueness of values of messaging email address attributes (mail, mailAlternateAddress, mailEqiuvalentAddress) to avoid mixups between user accounts in different branches.
    Also, we had a problem with Calendar server after migrating the LDAP entries: since our deployment used the nsUniqueID for calendar user identification, relocation of entries (the way we did it) generated new values for new entries and users got new empty caledar databases. On this POC this was not a major problem, and newer OUCS releases with a davUniqueID attribute should specifically be immune to this problem. However, for others trodding this path I can suggest that they export the LDAP database into LDIF including the unique IDs, recreate the suffixes as needed (the ISW target organization in DSEE should be a separate LDAP database suffix), change the LDIF entry pathnames, and import the LDIF anew. This would wipe old LDAP data and should add old nsUniqueIDs to relocated entries (unlike recreation via ldapadd or relocation via ldapmodrdn).
    We have also hit a problem with DA refusing to render the list of accounts (returning 0 or 25 empty entries in a table). The LDAP logs showed that on the LDAP side all is ok, and expected amount of replies was located. Pattern searches often produced the proper table with a subset of users in DA. Ultimately, we linked the problem to ISW binary base64-encoded attributes (dspswuserlink et al; some of those values also garbaged output of commadmin queries in a terminal) and created an LDAP ACI which forbade our DA-admin user to read,search,compare these attributes. This solved the problem for us. I wonder if a more generic solution is possible, so as to apply this ACI not to an explicitly named admin user but to any users with DA admin privileges (by group or role? which string, to cover them all in advance)? Or, perhaps, nobody except the ISW user account should see these ISW attributes?
    Hope this report helps others who would try to pioneer this path of messaging integration
    //Jim Klimov

  • Delegated Admin and User Management in WLP 9.2

    Hi,
    I've made Delegated Administrator role and a user for it. The user is Delegated Admin for our users and groups. Still that user cannot create new users, only new groups.
    The error message that shows when creating new user is "The subject does not have access to the specified group".
    What should I do to make it work ?
    Regards,
    Tanja

    Unfortunately, you've run into a bug in the product. See CR282051 in the WLP 9.2 release notes.
    http://edocs.bea.com/wlp/docs92/relnotes/relnotes.html#wp1147925
    If you have a support contract, you might be able contact BEA Support to see if a patch might be available.

  • Deleting users with Delegated Admin

    Hope anyone can help with this:
    When I delete a user with Delegated Admin (For Messaging 5.x) the user
    seems to be deleted in iDA, but it is not deleted in LDAP.
    Therefore, I cannot re-use it's attributes (like E-mail address) for
    another (new) user.
    This causes all kind of problems.
    I can go into the Console and through away the user, then everything
    works again. But I expected iDA also to delete the user if I use the
    delete button.
    Any ideas? Did I forget something?
    Thanks in advance,
    Niels de Troye

    Hi..
    the nda does not remove the user... is put it in suspend mode...
    you have to run the imsimta purge command to remove the user.. or to wait
    the server to do that
    in a day or so....
    take a look at the manual to see how you can do that...
    "N. de Troye" wrote:
    Hope anyone can help with this:
    When I delete a user with Delegated Admin (For Messaging 5.x) the user
    seems to be deleted in iDA, but it is not deleted in LDAP.
    Therefore, I cannot re-use it's attributes (like E-mail address) for
    another (new) user.
    This causes all kind of problems.
    I can go into the Console and through away the user, then everything
    works again. But I expected iDA also to delete the user if I use the
    delete button.
    Any ideas? Did I forget something?
    Thanks in advance,
    Niels de Troye--
    Over and Out
    Giorgos Kiriakidis
    Technical Department
    NetSmart S.A.
    Panepistimiou 58.
    Athens 10678
    Hellas
    Tel +3013302608
    Fax +3013302658
    Email [email protected]
    This message contains confidential information intended for a specific
    individual and purpose,
    is protective by law. If you are not the intended recipient, you should
    delete this message.
    Any disclosure, coping, distribution or taking any action based on this
    message is strictly prohibited.

  • Maximum number of users Per Conference on monthly reports

    Can anyone has SQl query to fetch the maximum number of users per conference in Lync 2010 on monthly basis .
    in monitoring report this report is not coming so please give some workaround .
    Ashwani Thapa

    Have you seen this? http://blogs.technet.com/b/rischwen/archive/2014/01/17/per-user-conference-joins-grouped-by-uritype-sql-query.aspx
    If this helped you please click "Vote As Helpful" if it answered your question please click "Mark As Answer"
    Georg Thomas | Lync MVP
    Blog www.lynced.com.au | Twitter
    @georgathomas
    Lync Edge Port Check (Beta)
    This forum post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

  • Delegated Admin- Adding user causes unhandled exceptions

    Now that I've finally settled on 05q1, Im trying to create accounts using the delegated admin GUI.
    I click on my domain, then on "New". I then fill out first, last name, role is Business OA, no postal address, assign no service package, change the loginId and two passwords. At this point, when I click "Next", I get a "Server Error" screen with this information:
    This server has encountered an internal error which prevents it from fulfilling your request. The most likely cause is a misconfiguration. Please ask the administrator to look for messages in the server's error log.
    The messages below show up in /opt/sun/webserver/https-imap.domain.com/logs/errors. I couldn't find any other error for ds, identity, admin server, etc. After this exception, I also have to log back in to DA. The messages are quite vague (from an administrative standpoint) so any help is appreciated!
    [11/Jan/2006:10:32:02] failure (18149): for host xx.xxx.xxx.xxx trying to POST /da/wizard/WizardWindow, service-j2ee reports: Ap
    plicationDispatcher[da] WEB2649: Servlet.service() for servlet jsp threw exception
    javax.servlet.ServletException
    at org.apache.jasper.runtime.PageContextImpl.handlePageException(PageContextImpl.java:536)
    at jsps.com_sun_web_ui._jsp._wizard._WizardWindow_jsp._jspService(_WizardWindow_jsp.java:559)
    at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:107)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
    at com.iplanet.ias.web.jsp.JspServlet$JspServletWrapper.service(JspServlet.java:687)
    at com.iplanet.ias.web.jsp.JspServlet.serviceJspFile(JspServlet.java:459)
    at com.iplanet.ias.web.jsp.JspServlet.service(JspServlet.java:375)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
    at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:772)
    at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:471)
    at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:382)
    at com.iplanet.jato.view.ViewBeanBase.forward(ViewBeanBase.java:340)
    at com.iplanet.jato.view.ViewBeanBase.forwardTo(ViewBeanBase.java:261)
    at com.sun.web.ui.view.wizard.CCWizard.handleNextButtonRequest(CCWizard.java:730)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:585)
    at com.iplanet.jato.view.command.DefaultRequestHandlingCommand.execute(DefaultRequestHandlingCommand.java:183)
    at com.iplanet.jato.view.RequestHandlingViewBase.handleRequest(RequestHandlingViewBase.java:308)
    at com.iplanet.jato.view.ViewBeanBase.dispatchInvocation(ViewBeanBase.java:802)
    at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:740)
    at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:760)
    at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandler(ViewBeanBase.java:571)
    at com.iplanet.jato.ApplicationServletBase.dispatchRequest(ApplicationServletBase.java:957)
    at com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.java:615)
    at com.iplanet.jato.ApplicationServletBase.doPost(ApplicationServletBase.java:473)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:807)
    at com.sun.comm.da.WizardWinServlet.service(WizardWinServlet.java:111)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:247)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
    at com.sun.comm.da.LoginFilter.doFilter(LoginFilter.java:128)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:213)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:280)
    at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:212)
    at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:209)
    at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
    at com.iplanet.ias.web.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java:161)
    at com.iplanet.ias.web.WebContainer.service(WebContainer.java:580)
    ----- Root Cause -----
    javax.servlet.jsp.JspException
    at com.sun.web.ui.taglib.wizard.CCWizardTag.getWizardPageHTML(CCWizardTag.java:1577)
    at com.sun.web.ui.taglib.wizard.CCWizardTag.appendPageletBodyContentHTML(CCWizardTag.java:668)
    at com.sun.web.ui.taglib.wizard.CCWizardTag.appendWizardBodyHTML(CCWi
    [11/Jan/2006:10:32:02] failure (18149): for host xx.xxx.xxx.xxx trying to POST /da/wizard/WizardWindow, service-j2ee reports: WE
    B2798: [da] ServletContext.log(): [ERROR] Uncaught application exception
    com.iplanet.jato.NavigationException: Exception encountered during forward
    Root cause = [javax.servlet.jsp.JspException]
    at com.iplanet.jato.view.ViewBeanBase.forward(ViewBeanBase.java:380)
    at com.iplanet.jato.view.ViewBeanBase.forwardTo(ViewBeanBase.java:261)
    at com.sun.web.ui.view.wizard.CCWizard.handleNextButtonRequest(CCWizard.java:730)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:585)
    at com.iplanet.jato.view.command.DefaultRequestHandlingCommand.execute(DefaultRequestHandlingCommand.java:183)
    at com.iplanet.jato.view.RequestHandlingViewBase.handleRequest(RequestHandlingViewBase.java:308)
    at com.iplanet.jato.view.ViewBeanBase.dispatchInvocation(ViewBeanBase.java:802)
    at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:740)
    at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:760)
    at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandler(ViewBeanBase.java:571)
    at com.iplanet.jato.ApplicationServletBase.dispatchRequest(ApplicationServletBase.java:957)
    at com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.java:615)
    at com.iplanet.jato.ApplicationServletBase.doPost(ApplicationServletBase.java:473)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:807)
    at com.sun.comm.da.WizardWinServlet.service(WizardWinServlet.java:111)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:247)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
    at com.sun.comm.da.LoginFilter.doFilter(LoginFilter.java:128)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:213)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:280)
    at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:212)
    at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:209)
    at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
    at com.iplanet.ias.web.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java:161)
    at com.iplanet.ias.web.WebContainer.service(WebContainer.java:580)
    Root cause:
    javax.servlet.jsp.JspException
    at com.sun.web.ui.taglib.wizard.CCWizardTag.getWizardPageHTML(CCWizardTag.java:1577)
    at com.sun.web.ui.taglib.wizard.CCWizardTag.appendPageletBodyContentHTML(CCWizardTag.java:668)
    at com.sun.web.ui.taglib.wizard.CCWizardTag.appendWizardBodyHTML(CCWizardTag.java:658)
    at com.sun.web.ui.taglib.wizard.CCWizardTag.getHTMLStringInternal(CCWizardTag.java:469)
    at com.sun.web.ui.taglib.common.CCTagBase.doEndTag(CCTagBase.java:114)
    at jsps.com_sun_web_ui._jsp._wizard._WizardWindow_jsp._jspService(_WizardWindow_jsp.java:260)
    at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:107)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
    at com.iplanet.ias.web.jsp.JspServlet$JspServletWrapper.service(JspServlet.java:687)
    at com.iplanet.ias.web.jsp.JspServlet.serviceJspFile(JspServlet.java:459)
    at com.iplanet.ias.web.jsp.JspServlet.service(JspServlet.java:375)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
    at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:772)
    at org.apache.catalina.cor
    [11/Jan/2006:10:32:02] failure (18149): for host xx.xxx.xxx.xxx trying to POST /da/wizard/WizardWindow, service-j2ee reports: St
    andardWrapperValve[WizardWinServlet]: WEB2792: Servlet.service() for servlet WizardWinServlet threw exception
    javax.servlet.ServletException: Uncaught exception
    at com.iplanet.jato.ApplicationServletBase.onUncaughtException(ApplicationServletBase.java:1415)
    at com.sun.comm.da.WizardWinServlet.onUncaughtException(WizardWinServlet.java:98)
    at com.iplanet.jato.ApplicationServletBase.fireUncaughtException(ApplicationServletBase.java:1164)
    at com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.java:639)
    at com.iplanet.jato.ApplicationServletBase.doPost(ApplicationServletBase.java:473)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:807)
    at com.sun.comm.da.WizardWinServlet.service(WizardWinServlet.java:111)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:247)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
    at com.sun.comm.da.LoginFilter.doFilter(LoginFilter.java:128)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:213)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:280)
    at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:212)
    at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:209)
    at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
    at com.iplanet.ias.web.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java:161)
    at com.iplanet.ias.web.WebContainer.service(WebContainer.java:580)
    ----- Root Cause -----
    com.iplanet.jato.NavigationException: Exception encountered during forward
    Root cause = [javax.servlet.jsp.JspException]
    at com.iplanet.jato.view.ViewBeanBase.forward(ViewBeanBase.java:380)
    at com.iplanet.jato.view.ViewBeanBase.forwardTo(ViewBeanBase.java:261)
    at com.sun.web.ui.view.wizard.CCWizard.handleNextButtonRequest(CCWizard.java:730)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:585)
    at com.iplanet.jato.view.command.DefaultRequestHandlingCommand.execute(DefaultRequestHandlingCommand.java:183)
    at com.iplanet.jato.view.RequestHandlingViewBase.handleRequest(RequestHandlingViewBase.java:308)
    at com.iplanet.jato.view.ViewBeanBase.dispatchInvocation(ViewBeanBase.java:802)
    at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:740)
    at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:760)
    at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandler(ViewBeanBase.java:571)
    at com.iplanet.jato.ApplicationServletBase.dispatchRequest(ApplicationServletBase.java:957)
    at com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.java:615)
    at com.iplanet.jato.ApplicationServletBase.doPost(ApplicationServletBase.java:473)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:807)
    at com.sun.comm.da.WizardWinServlet.service(WizardWinServlet.java:111)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:247)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)
    at com.sun.comm.da.LoginFilter.doFilter(LoginFilter.java:128)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.

    Might it have something to do with having not assigned service package? I read in the 05Q4 notes that in 05Q1, a service package had to be defined. I just tried to allocate some service packages to the domain and I get the same "Server Error" page when I click "Next" on the page where I choose how many service packages to allocate (i.e. the screen right before the "Summary" page)
    At least the errors are a little more informative in the webserver error log (sample below)
    I chose 3 service packages and attempted to allocate 50 each, No anonymous logins for calendar server and put in a calendar server hostname. All other fields were left to default.
    [12/Jan/2006:15:14:13] failure (18149): for host 63.241.196.147 trying to POST /da/wizard/WizardWindow, service-j2ee reports: Ap
    plicationDispatcher[da] WEB2649: Servlet.service() for servlet jsp threw exception
    javax.servlet.ServletException: String index out of range: -15
    at org.apache.jasper.runtime.PageContextImpl.handlePageException(PageContextImpl.java:536)
    at jsps.com_sun_web_ui._jsp._wizard._WizardWindow_jsp._jspService(_WizardWindow_jsp.java:559)
    at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:107)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
    at com.iplanet.ias.web.jsp.JspServlet$JspServletWrapper.service(JspServlet.java:687)
    at com.iplanet.ias.web.jsp.JspServlet.serviceJspFile(JspServlet.java:459)
    at com.iplanet.ias.web.jsp.JspServlet.service(JspServlet.java:375)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
    at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:772)
    at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:471)
    at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:382)
    at com.iplanet.jato.view.ViewBeanBase.forward(ViewBeanBase.java:340)
    at com.iplanet.jato.view.ViewBeanBase.forwardTo(ViewBeanBase.java:261)
    at com.sun.web.ui.view.wizard.CCWizard.handleNextButtonRequest(CCWizard.java:730)
    at sun.reflect.GeneratedMethodAccessor37.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:585)
    at com.iplanet.jato.view.command.DefaultRequestHandlingCommand.execute(DefaultRequestHandlingCommand.java:183)
    at com.iplanet.jato.view.RequestHandlingViewBase.handleRequest(RequestHandlingViewBase.java:308)
    at com.iplanet.jato.view.ViewBeanBase.dispatchInvocation(ViewBeanBase.java:802)
    at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:740)
    at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:760)
    at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandler(ViewBeanBase.java:571)
    at com.iplanet.jato.ApplicationServletBase.dispatchRequest(ApplicationServletBase.java:957)
    at com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.java:615)
    at com.iplanet.jato.ApplicationServletBase.doPost(ApplicationServletBase.java:473)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:807)

  • Os x is falsely reporting a logged in user on shutdown/restart

    Ever since upgrading my Mac mini from OS X 10.9 Server to 10.10 Server I have a strange error: As soon as I log in into a local user then try to reboot/shutdown, OS X will report that another user is currently logged in and I need to enter admin credentials in order to shutdown/reboot. There are only two local users and only a few network users.
    So, no matter if I log in from the one or the other local user, OS X will always report another logged in user. If I log into a local user then log out again I will get the same message. If I do NOT log into any user, there will not be any message.
    Any ideas?

    only one account can be logged in and actively using the Finder and GUI at a time. thus, you can't login and control the computer at the same time your wife is. nothing exist for Macs that allows this.

  • XI3.1 and delegated admin?

    hi,
    we have two distinct project. each project must have delegated admin (manage user and group) : each admin must see only its users and groups...
    we have apply this :
    1/create specific admin groups
    2/ create specific acces level (view object/general +add objects/content folder all rights/system user all rights/system usergroup)
    3/ on user and groups/manage top level security/all group :
    add the two admin groups and apply acces level
    4/ on each group and subgroup remove acces on the admin group that does not (because each admin group is  in inherited rigth...)
    this work, but not for for user level, delegated admin can't create user and if we apply top level security acces level , the admingroup can see ALL user. it's not that we want...
    have you ideas?
    thank's

    Hi Phil!
    I think it is designed as is - but did you try to use Windows AD Groups.
    You can enable specific windows AD groups to BO. These will be created automatically the first time they logon, or you can trigger an AD refresh. So the users are created automatically.
    You admins could then have the rights to see the users only and  to see/edit their own set of Groups, where they can put these users to. Also you can define which admin sees which objects (reports, universes, connections, ...)
    But: you will get an issue if you loose/change your AD connection to your server, then everything must be redone.
    ciao Hakan

  • Delegated Admin login fail

    I installed Solaris 9 05/9 and JES05Q4 in a Sun Fire V440 recently.
    I chose these components only:
    Directory server
    Administration server
    Web server
    Access manager
    Messaging server
    Delegated administrator
    Directory preparation tools
    I can use commadm to created users after installation and initial configuration, but I can't login to the delegated admin with any account. http://server.mydomain.com/da/DA/Login
    After I check the DA log file, it shows:
    WARNING: User &#91;admin&#93; has no valid role assigned, aborting login
    What kind of role required for da login ?
    Thanks in advance for any help.
    dx

    I recommend that you post your question to the Messaging Server forum (also listed at the bottom of the Java ES forums page):
    http://swforum.sun.com/jive/forum.jspa?forumID=15
    You might also want to search that forum for similar problem reports.

  • Delegated Admin and Class of Service

    Hi
    we have configured
    Messaging Server
    Calendar server
    Instant Messaging Server
    and Portal Server
    We would like use delegated admin for user provisioning.
    We are able to modify default Class of Service templates to suit our needs for Messaging and Calendaring.
    We would also like to provide Portal desktop and Instant messaging access thru' delegated admin.
    Help us to configure these class of services either using directory console or any other method
    Thanks
    Saba

    rkbunca wrote:
    Recently we deleted about 3K users using: commadmin domain purge, and while
    it appears to have successfully deleted the users -- ldapsearch doesn't yield any
    output. The lower number of users is NOT reflected in the field "Number of Users"
    on the Delegated Admin page. It still shows the same number of users >11K we
    "had" prior to the deletion process.
    Any ideas to explain this discrepancy?The number of users displayed in the DA GUI is recorded in the "sunNumUsers" attribute associated with the domain e.g.
    dn: o=aus.sun.com,dc=aus,dc=sun,dc=com
    sunNumUsers: 11
    This is to avoid having to do an ldapsearch across the domain to get a count. You can manually update this attribute to get the number back-in-sync.
    The commadmin domain purge should have updated this value -- I couldn't find any pre-existing bugs to explain why it didn't happen in your case. I suggest you log a support case to get this looked into further.
    You may also want to check your directory audit logs to see if an attempt was made to update this attribute but failed for some reason.
    Regards,
    Shane.

  • Exceeded the number of users allowed by license

    I'm getting this error at the bottom of every page:
    "Exceeded the number of users allowed by license"
    This is a Vibe 3.3 install, on the pre-made downloadable Vibe virtual
    machine from Novell's site. I have the 10-user license, and have 6
    local users created in the system, in addition to the default "admin"
    user. These are all local users, not LDAP users. I have made, and
    deleted, a few other local users previously while testing, but currently
    only have the 6 users.
    I have followed TID 7009041 to reindex the system, but that has not
    freed up any licenses. A license report shows the following:
    Novell Vibe 3.3.0License Report: May 13, 2013 9:28 AM
    Current License
    Product Title: Novell Vibe (3.3)
    Key uid: Vibe10UserNoGuest-001
    Key Issued: May 24, 2011
    Effective: May 24, 2011 - Jan 1, 2500
    Allowed number of registered users: 10
    Allowed number of external users: Not restricted by the software. Read
    your contract to see how many users your license allows.
    Report on Activity Between May 1, 2013 1:28 PM and May 13, 2013 1:28 PM
    Current Active User Count: 8
    Date Local Users Users Synchronized from LDAP Users Who Used
    Vibe During the Previous 365 Days Checksum
    May 2, 2013 8 0 5 0
    May 3, 2013 8 0 5 0
    May 4, 2013 8 0 5 0
    May 5, 2013 8 0 5 0
    May 6, 2013 8 0 5 0
    May 7, 2013 8 0 5 0
    May 8, 2013 9 0 6 0
    May 9, 2013 9 0 6 0
    May 10, 2013 10 0 7 0
    May 11, 2013 10 0 7 0
    May 12, 2013 10 0 7 0
    May 13, 2013 11 0 8 0
    May 13, 2013 11 0 8 0
    May 13, 2013 11 0 8 0
    May 13, 2013 11 0 8 0
    May 13, 2013 11 0 8 0
    May 13, 2013 11 0 8 0
    I'm not sure why local users is showing up as 11, because if I go in to
    delete users I only see the 6 currently in the system. Is there some
    way to look for "stuck" accounts that were deleted, but for some reason
    were not actually purged from the system?
    Thanks,
    -Greg
    former e-mail for posting:
    [email protected]

    Any news on this? I'd like to role something out into production in the
    next two weeks, but I'd like this error message to be gone. I currently
    have only 8 user accounts in the system (which includes the "admin"
    account).
    Thanks,
    -Greg
    On 5/13/2013 10:24 AM, Simon Flood wrote:
    > On 13/05/2013 14:31, Greg N. wrote:
    >
    >> I'm getting this error at the bottom of every page:
    >>
    >> "Exceeded the number of users allowed by license"
    >>
    >> This is a Vibe 3.3 install, on the pre-made downloadable Vibe virtual
    >> machine from Novell's site. I have the 10-user license, and have 6
    >> local users created in the system, in addition to the default "admin"
    >> user. These are all local users, not LDAP users. I have made, and
    >> deleted, a few other local users previously while testing, but currently
    >> only have the 6 users.
    >>
    >> I have followed TID 7009041 to reindex the system, but that has not
    >> freed up any licenses. A license report shows the following:
    >>
    >> Novell Vibe 3.3.0License Report: May 13, 2013 9:28 AM
    >>
    >> Current License
    >> Product Title: Novell Vibe (3.3)
    >> Key uid: Vibe10UserNoGuest-001
    >> Key Issued: May 24, 2011
    >> Effective: May 24, 2011 - Jan 1, 2500
    >> Allowed number of registered users: 10
    >> Allowed number of external users: Not restricted by the software.
    >> Read your contract to see how many users your license allows.
    >>
    >>
    >> Report on Activity Between May 1, 2013 1:28 PM and May 13, 2013 1:28 PM
    >> Current Active User Count: 8
    >>
    >> Date Local Users Users Synchronized from LDAP Users
    >> Who Used Vibe During the Previous 365 Days Checksum
    >> May 2, 2013 8 0 5 0
    >> May 3, 2013 8 0 5 0
    >> May 4, 2013 8 0 5 0
    >> May 5, 2013 8 0 5 0
    >> May 6, 2013 8 0 5 0
    >> May 7, 2013 8 0 5 0
    >> May 8, 2013 9 0 6 0
    >> May 9, 2013 9 0 6 0
    >> May 10, 2013 10 0 7 0
    >> May 11, 2013 10 0 7 0
    >> May 12, 2013 10 0 7 0
    >> May 13, 2013 11 0 8 0
    >> May 13, 2013 11 0 8 0
    >> May 13, 2013 11 0 8 0
    >> May 13, 2013 11 0 8 0
    >> May 13, 2013 11 0 8 0
    >> May 13, 2013 11 0 8 0
    >>
    >>
    >> I'm not sure why local users is showing up as 11, because if I go in to
    >> delete users I only see the 6 currently in the system. Is there some
    >> way to look for "stuck" accounts that were deleted, but for some reason
    >> were not actually purged from the system?
    >
    > Unfortunately the 10-user license doesn't take account of some built-in
    > system accounts. Let me ask Novell.
    >
    > HTH.
    former e-mail for posting:
    [email protected]

Maybe you are looking for

  • Sync address book with google and storm

    I got a storm and have been having issues trying to get items to sync since pocketmac doesn't seem to work with the storm. Found a forum on crackberrry that tells you how to sync the calendar and address bock between the 3. I was able to get the cale

  • Create a magnifying glass on an image.

    I am pretty new to Flex. I am trying to create a magnifying glass for an image viewer. I want to move the cursor over an image that will zoom in on a 200X200 area. I don't want to zoom in on the whole image. I can see I can probably do it with the Bi

  • Folder not appearing in My Folders in Organizer

    In Elements 11, on import, my image files DO download to my computer but that folder DOES NOT appear under My Folders in the Organizer. Any suggestions?

  • How to clear the cache from Mac Book Pro

    What is the simplest way to clear out the cache from my Mac Book Pro?

  • 'Access denied' when attempting to build/burn DVD, please help, urgent/desperate!

    Recently bought CS3, overjoyed with most of it. Encore is giving me serious trouble though at the moment! The problem is that it simply will not burn to a dual layer disc! When we try to burn it to disc it begins the process, wizzing through differen