Disabled User Operations

For a regular DVD with a Main Menu and a Scene Selection menu which options should I have disabled?
ThANKS!
Ham

Really depends on what you want the user to be able to do. Buttons and navigation should not be disabled so people can move around and go to selections.
Resume usually also the same thing, people expect to usually resume off a menu
On the Main Menu you may want to disable the Title/Menu commands so a user can not break out of the menu and "get lost" and on the scene selection menu set the menu command to the main menu and disable Title call.
You may be fine with the default settings for the menu. Play with the DVD a bit when you make it and try various remote keys to see what you like, do not like for the project also.

Similar Messages

"Disabled User Operations" - - DVDSP default settings??

In Menu > Advanced there is a section titled "Disable User Operations", and by default DVDSP has selected a number of Playback Controls to be DISABLED:
Still Off
Pause On/Off
Forward Scan
Next Program
Previous Program
Should I leave these default DVDSP settings? Wouldn't it be better to let the user have full control? ie: I should not disable anything?

It is up to you and what you want the user experience to be. But for menus those make sense to disable

Is there any way to change user operations on multiple tracks at once?

I have a complex project (99 tracks, dozens of menus and scripts). I need to make one version of this DVD for the end client (teenagers at health clinics) who will be forced to view it in a specified way, and another version for educators (staff at the clinics) who will be allowed to fast-forward and have access to a menu from which they can jump to different points in the DVD.
I have different menus to serve as "first play" for these different versions so that I can easily switch between versions when burning disc images, and I have set up GPRMs to make navigation different for the two versions automatically. My problem now is that I want to disable forward scan, next program, root menu, and title menu for the client version. As far as I can tell, I have to do that independently for every single track and menu. Bleah. This is especially annoying since the DVD is still in development, so I am continuing to change small things and will need to keep both versions up to date as I do.
Is there any way to select multiple tracks/menus and change user operations on all of them? Or any other work-around or script that could do it? I thought this would be a perfect task for the automator, but I'm not very familiar with that application and don't know how (or if it's possible) to create new actions other than the ones that are available.
Any ideas?
thanks!
Julie

Thanks. But the disc inspector only appears to let me change things like where the title menu button takes you, not detailed user operations. I have pretty much given up on this being anything other than a giant hassle, but if anybody knows whether a script could do this, I would be eternally grateful.

Disable User on updating an User attribute in OIM

Hi,
I have OIM 11g R2 with LDAP SYNC enabled with OID through OVD.
I want to trigger Disable user on modifying an UDF attribute of user.
Like if attribute1 of user is set to true then disabke user operation should be triggered for the user.
So first in my adapter i will check whether attribute is true and then trigger disable user.
In 11g R2 as mapping adapters attached to Users form in dataobject manager is not supported i am not able to map to the userdefinition and hence not able to check if attribute1 is true or false.
Please help and let me know if this can be achieved in any other way.
Edited by: 988070 on Mar 20, 2013 3:55 AM

You can write a post process event handler:
It will update the user status to disable when UDF attrtibute is set to true.
For this, you need to set the condition as:
Get the value of user defined attribute and store it in a variable "flag".
disable UserManagerResult disable(java.lang.String attributeName, java.lang.Object attributeValue) //attributeName will be user defined fieldm value will be "true"
throws ValidationFailedException,
oracle.iam.platform.authz.exception.AccessDeniedException,
UserDisableException,
NoSuchUserException,
SearchKeyNotUniqueException
Disables the user account matching the search criteria.
Parameters:
attributeName - - The attribute name for the search criteria.
attributeValue - - The attribute value for the search criteria.
Returns:
UserManagerResult containing the entity id of the disabled user.
Cheers,
Vamsi.

Invalid Credential/Disabled User

Hi,
I have a requirment of capturing the message "Invalid Username/Password" or Disabled User on the OAM Login (Enterprise Login Page). For example -
I have 2 applications which are protected by the same authentication scheme and they are SSO enabled. If a user tries to access those applications will be challanged by the Login Page. If the user puts the wrong password or user name over to the Login Page, I should be able to caputre that message and show a message to the User saying that "The username or password provided are wrong". Similar is the case for the Disabled users, so if the userid is disabled and the user tries to get in to the application he should get a message "Your User ID is disabled" on the Log in Page. Is there any way I can achive this. Is it a Out of Box functionality of OAM or I have to write any custom scheme for this. Please help me on this.
Thanks&Regards
Debi

Originally Posted by DParkes
Can you try this from the standalone GWCheck, Tommy and I think the server
side is broken for this specific operation
Cheers Dave
Dave Parkes [NSCS]
Occasionally resident at http://support-forums.novell.com/
Awesome. Local GWCheck works when you specify a user that is on the same post office as the library. The server task does not work even though the user is on the same po. Is this a confirmed bug?

Disabled user commands

Hi All, I have a strange situation here. We are running Essbase 6.5.1 on Win2K. Whenever a user tries to COPY a db from App Manager. It halts all operations on the essbase server. It doesn't allow any new connection, and any user trying to connect either get a hanging screen or a msg saying "Administrator has temporarily disable user commands" Any leads on this message will be helpful. Thanks in advance Maneesh Hari

We also run Essbase 6.5.1 on Win2K platform.Essbase is set up to freeze any activity (access to essabse.sec file, calc runs...) during a database copy to avoid any db/file corruption. Thus, it is not a bug but standard "behaviour".To avoid that, Hyperion advised us to upgrade to 7.0.1 in order to setup several Essbase agents. When db copy is performed, only activities related to concerned essbase agent would be frozen. I have not tested this theory but I would be interested in getting confirmation of this 7.0.1 feature.

AD Identity Service: Delete or Disable users that aren't found?

We currently set users to be "disabled" but then we have to periodically remember to go in there and delete them manually. It also creates issues with duplicate login names. Do you delete your users automatically? I've always been concerned that if something goes wrong with a sync then all my users would be deleted.

We had the same issue here, so I wrote an external operation that piggybacks on the user sync job and deletes any disabled users older than X amount of days. For instance, in our case users are deleted after 180 days of being disabled (this is a bit extreme). This way you can give yourself a few days before the users are actually deleted, but keep the process automated. There are a couple of options built in, which should be discernible from the source code. Here is the source:
package com.oracle.services.jobs;
import com.oracle.services.utility.SessionManager;
import com.plumtree.openfoundation.util.XPCalendar;
import com.plumtree.openfoundation.util.XPDateTime;
import com.plumtree.portaluiinfrastructure.resultwrapper.ASQueryResultWrapper;
import com.plumtree.server.IPTObjectManager;
import com.plumtree.server.IPTQueryResult;
import com.plumtree.server.IPTSession;
import com.plumtree.server.IPTUser;
import com.plumtree.server.IPTUserManager;
import com.plumtree.server.PT_LOCKSTATES;
import com.plumtree.server.PT_PROPIDS;
* This class takes care of the automation server job for deleting user accounts
* which have been disabled for some number of days.
* @author hross
public class DeleteDisabledAccountsJob {
     // filter for only deleting agent disabled accounts
     private static String FILTER_AGENT = "This user has been locked by a User Synchronization Job.";
     // filter for deleting all disabled accounts (including those disabled by an
     // admin)
     private static String FILTER_ALL = "";
     public static void main(String[] args) {
          // check arguments
          if ((args.length < 2) || (args.length > 4)) {
               System.err.println("usage: ");
               System.err
                         .println("DeleteDisabledAccountsJob <security_token> <num_days>");
               System.err
                         .println("DeleteDisabledAccountsJob <security_token> <num_days> all");
               return;
          // get a session from the login token
          IPTSession session = SessionManager.createSession(args[0]);
          // get a number of days
          int numDays = 0;
          try {
               numDays = Integer.parseInt(args[1]);
          } catch (Exception ex) {
               System.err.println("Number of days not a valid integer.");
               return;
          // filter all or just the agent?
          boolean filterAll = ((args.length > 2) && (args[2].equals("all")))
                    || ((args.length > 3) && (args[3].equals("all")));
          boolean test = ((args.length > 2) && (args[2].equals("test")))
                    || ((args.length > 3) && (args[3].equals("test")));
          if (test) {
               System.err.println("This is a just a test. Nothing will be deleted.");
          if (filterAll) {
               System.err
                         .println("This job will delete all disabled accounts (even those disabled by an admin).");
          } else {
               System.err
                         .println("This job will delete only users disabled by an authentication source.");
          // calculate 180 days in the past based on today's date
          XPDateTime cutOff = new XPDateTime();
          XPCalendar xpCalendar = XPCalendar.GetInstance();
          xpCalendar.Add(XPCalendar.HOUR, -(24 * numDays));
          cutOff = xpCalendar.GetTime(); // subtract 180 days from current time
          System.err
                    .println("This job will delete any user accounts disabled before: "
                              + cutOff.toString());
          // query for disabled user accounts
          IPTUserManager userManager = (IPTUserManager) session.GetUsers();
          IPTQueryResult result = userManager.GetLockedAccounts(filterAll ? FILTER_ALL
                    : FILTER_AGENT, 0, -1);
          //ASQueryResultWrapper ptqrUserLock = new ASQueryResultWrapper(result);
          for (int i = 0; i < result.RowCount(); i++) {
               // get some basic user info
               int userId = result.ItemAsInt(i, PT_PROPIDS.PT_PROPID_OBJECTID);
               String name = result.ItemAsString(i, PT_PROPIDS.PT_PROPID_NAME);
               String login = result.ItemAsString(i, PT_PROPIDS.PT_PROPID_USER_LOGINNAME);
               XPDateTime dt = result.ItemAsXPDateTime(i, PT_PROPIDS.PT_PROPID_CREATED);
//               System.err.println("Found account: (" + userId + ") " + login
//                         + ", " + name);
               // check to see if we need to delete the user
               if (dt.Before(cutOff)) {
                    if (!test) { // if test, we just want to see who we would have delted
                         // we have to try to unlock the user b/c of a bug in
                         // automation
                         // server
                         IPTUser user = (IPTUser) ((IPTObjectManager) userManager)
                                   .Open(userId, false);
                         try {
                              user.SetLockedStatus(false);
                              user.Store();
                         } catch (Exception ex) {
                              // we expect this will fail b/c of a bug
                         // make sure the account gets unlocked
                         if (user.GetLockState() == PT_LOCKSTATES.PT_LOCKED)
                              user.UnlockObject();
                         // okay, now we can delete the user
                         ((IPTObjectManager) userManager).Delete(userId);
                    System.err.println("Removed user account: " + userId + " - " + login + " - " + name);
}

OIM - Understanding the scheduled-task User Operations

Hi,
Could anybody here explain what that task means?
The manual says:
This scheduled task performs the operation specified by the UserOperation attribute on the user account specified by the UserLogin attribute
Does anybody here have an example of a scenario that this task could be useful?
Regards
HH

Pretty simple. That scheduler is used to perform some actions on the OIM user account on a pre-defined schedule. That means you can perform ENABLE, DISABLE, or DELETE actions on any OIM user. And the attribute values could be:
UserLogin - OIM User Login
UserOperation - ENABLE
The above scheduler run will enable the user if its disabled. Now the utility part. Consider the following use cases:
*1)* You terminated any user, say User001 and you want to Disable this user and all its provisioned resources at 18:00 hours once he finishes all the office works, and if you directly Disable the user from Disable User button the User and all his resources would be gone immediately. So you can set this scheduler to run at 18:00 hours with the values User001 and DISABLE
*2)* You are an OIM help-desk guy and OIM administrator doesn't want you to have access to menu item Users because he doesn't want you to have a look at the OIM user personal details but he still want that you can actually perform enable-disable actions on OIM. In such case he will give you access to Manage Schedule Task menu-item so that you can perform the daily operations activity. This will be a solution to the use-case.
Thanks
Sunny

ADAM disable user setADAMAttributesInLDAP(): null=testadamuser001

Hi All,
I get the following problem when running disable user
ADAM disable user setADAMAttributesInLDAP(): null=testadamuser001
instead of CN = testadamuser001
I am faced with null=testadamuser001
Any Ideas/Comments why this happens.
Thanks in advance.
Find the full stack trace available
Regards,
Vinod
Running Disable ADAM User
tcUtilADTasks::disableADAMUser() Enter
tcUtilADTasks::getObjectByObjectGUID() Enter
tcADUtilLDAPController::search() Enter
tcADUtilLDAPController::getPath() Enter
tcADUtilLDAPController::getPath() Exit
tcADUtilLDAPController::connectToAvailableAD() Enter
tcADUtilLDAPController::hashTableEnvForDirContext() Enter
tcADUtilLDAPController::hashTableEnvForDirContext() Exit
tcADUtilLDAPController::hashTableEnvForLDAPContext() Enter
tcADUtilLDAPController::hashTableEnvForLDAPContext() Exit
tcADUtilLDAPController::validateCertificates() Enter
tcADUtilLDAPController::validateCertificates() Exit
Critical Extensions Supported
tcADUtilLDAPController::invalidateSSLSession() Enter
tcADUtilLDAPController::invalidateSSLSession() Exit
tcADUtilLDAPController::connectToAvailableAD() Exit
tcADUtilLDAPController::disconnect() Enter
tcADUtilLDAPController::disconnect() Exit
tcADUtilLDAPController::search() Exit
tcUtilADTasks::getObjectByObjectGUID() Exit
tcADUtilLDAPController::getCanonicalName() Enter
tcADUtilLDAPController::removeOrgFromRootContext() Enter
tcADUtilLDAPController::removeOrgFromRootContext() Exit
tcADUtilLDAPController::getCanonicalName() Exit
tcUtilADTasks::checkHierarchy() Enter
tcUtilADTasks::checkHierarchy() Exit
tcADUtilLDAPController::getAttributeValues() Enter
tcADUtilLDAPController::getPath() Enter
tcADUtilLDAPController::getPath() Exit
tcADUtilLDAPController::connectToAvailableAD() Enter
tcADUtilLDAPController::hashTableEnvForDirContext() Enter
tcADUtilLDAPController::hashTableEnvForDirContext() Exit
tcADUtilLDAPController::hashTableEnvForLDAPContext() Enter
tcADUtilLDAPController::hashTableEnvForLDAPContext() Exit
tcADUtilLDAPController::validateCertificates() Enter
tcADUtilLDAPController::validateCertificates() Exit
Critical Extensions Supported
tcADUtilLDAPController::invalidateSSLSession() Enter
tcADUtilLDAPController::invalidateSSLSession() Exit
tcADUtilLDAPController::connectToAvailableAD() Exit
tcADUtilLDAPController::getAttributeValues() Exit
tcADUtilLDAPController::setADAMAttributesInLDAP() Enter
tcADUtilLDAPController::getPath() Enter
tcADUtilLDAPController::getPath() Exit
tcADUtilLDAPController::connectToAvailableAD() Enter
tcADUtilLDAPController::hashTableEnvForDirContext() Enter
tcADUtilLDAPController::hashTableEnvForDirContext() Exit
tcADUtilLDAPController::hashTableEnvForLDAPContext() Enter
tcADUtilLDAPController::hashTableEnvForLDAPContext() Exit
tcADUtilLDAPController::validateCertificates() Enter
tcADUtilLDAPController::validateCertificates() Exit
Critical Extensions Supported
tcADUtilLDAPController::invalidateSSLSession() Enter
tcADUtilLDAPController::invalidateSSLSession() Exit
tcADUtilLDAPController::connectToAvailableAD() Exit
tcADUtilLDAPController::modifyAttributes() Enter
The error occured in tcADUtilLDAPController::modifyAttributes():[LDAP: error code 32 - 0000208D: NameErr: DSID-031001E4, problem 2001 (NO_OBJECT), data 0, best match of:
    'OU=OU-XXXXX,OU=YY,DC=XXXXXXX,DC=PP,DC=MM'
ERROR,27 aug 2009 07:43:15,231,[OIMCP.ADCS],The error occured in tcADUtilLDAPController::setADAMAttributesInLDAP():
null=testadamuser001
doesn't exists:[LDAP: error code 32 - 0000208D: NameErr: DSID-031001E4, problem 2001 (NO_OBJECT), data 0, best match of:
    'OU=OU-XXXXX,OU=YY,DC=XXXXXXX,DC=PP,DC=MM'
tcADUtilLDAPController::disconnect() Enter
tcADUtilLDAPController::disconnect() Exit
AD User disable operation failed:Connection Error
tcUtilADTasks::disableADAMUser() Exit

Hi Saggu,
I checked all the look ups and they seem to be fine.
I am using 9101 connector of AD.
Lookup definition for AD.Parameter is as follows
MultiValueAttributes     memberOf
MultiValueAttributesConfiguration     ,
UserObjectConfiguration     |
LdapUserObjectClass     user
LdapGroupMember     member
LdapUserDNPrefix     cn
Pagesize     100
I am clueless as to why or where from null comes in. Create Delete and other operations are working fine.
Ive even checked AtMAP.ADAM and it looks ok.
Regards,
Vinod

Disable User in Postprocess Handler?

Hi,
we try to disable an user account by using a postprocess handler (entity-type="User" operation="CREATE"), because every created user should be disabled by default. (OIM 11.1.1.5)
I use the following code snippet:
UserManager um = this.getUserManager();
// 1. create an empty User object
User userObj = new User(null);
//2. set attribute to identify uniquely the user to modify
userObj.setAttribute("User Login", usr_login);
//3. set attribute to be modified (in this case Display Name).
//userObj.setAttribute("Display Name", userDisplayName);
userObj.setUserDisabled("1");
//4. update the user
//userOperationsService.updateUser(arg0, arg1, arg2);
System.out.println("Disabling user...");
um.modify("User Login", usr_login, userObj);
which gives us the following exception:
<Aug 19, 2012 2:36:15 PM CEST> <Error> <oracle.iam.identity.usermgmt.impl.handlers.modify> <IAM-3050119> <Modify User API cannot change user status.>
<Aug 19, 2012 2:36:15 PM CEST> <Warning> <oracle.iam.platform.kernel.impl> <IAM-0080002> <Orchestration validation failed on the event handler - IAM-3050119:Modify User API cannot change user status.:>
<Aug 19, 2012 2:36:15 PM CEST> <Error> <oracle.iam.identity.usermgmt.impl> <IAM-3050029> <The user cannot be created due to validation errors.
oracle.iam.platform.kernel.ValidationFailedException: IAM-3050119:Modify User API cannot change user status.:
at oracle.iam.identity.usermgmt.utils.UserManagerUtils.createValidationFailedException(UserManagerUtils.java:721)
at oracle.iam.identity.usermgmt.utils.UserManagerUtils.createValidationFailedException(UserManagerUtils.java:751)
at oracle.iam.identity.usermgmt.impl.handlers.modify.ModifyUserValidationHandler.validate(ModifyUserValidationHandler.java:373)
at oracle.iam.identity.usermgmt.impl.handlers.modify.ModifyUserValidationHandler.validate(ModifyUserValidationHandler.java:187)
at oracle.iam.identity.usermgmt.impl.handlers.modify.ModifyUserValidationHandler.validate(ModifyUserValidationHandler.java:174)
at oracle.iam.platform.kernel.impl.OrchProcessData.validate(OrchProcessData.java:217)
at oracle.iam.platform.kernel.impl.OrchProcessData.runValidationEvents(OrchProcessData.java:180)
at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.validate(OrchestrationEngineImpl.java:644)
at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.process(OrchestrationEngineImpl.java:497)
at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.orchestrate(OrchestrationEngineImpl.java:444)
at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.orchestrate(OrchestrationEngineImpl.java:378)
at oracle.iam.identity.usermgmt.impl.UserManagerImpl.modify(UserManagerImpl.java:899)
at oracle.iam.identity.usermgmt.impl.UserManagerImpl.modify(UserManagerImpl.java:974)
at oracle.iam.identity.usermgmt.api.UserManagerEJB.modifyx(Unknown Source)
I have also tried other API calls (e.g. UserManager.disable()), but that also resulted in Exceptions.
Is it possible to disable users that way?
How can this be achived?
Thanks in advance,
Florian

Some additional information:
OIM / LDAP Sync seems to accomplish an LDAP search operation and then decides user is already there ... No modify operation on LDAP.
[2012-08-23T09:19:48+02:00] [OID] [TRACE:16] [] [OIDLDAPD] [host: idmhost] [pid: 3157] [tid: 8] [ecid: 004lyajFIOqDkZWFLzYROA0000lL0000ds,0] ServerWorker (REG):[[
BEGIN
ConnID:7285 mesgID:105 OpID:104 OpName:search ConnIP:192.168.2.111 ConnDN:cn=oimldap,cn=systemids,dc=secaron,dc=com
orclinmemFilter:
Orig Filter(numAVAFilters=2):(&(cn=wwwww eeeee)(objectclass=inetorgperson))
Removed Filter: (objectclass=inetorgperson)
New Filter(numAVAFilters=1):(cn=wwwww eeeee)
2012-08-23T09:19:48 * INFO :gslfseADoSearch BASE = cn=Users,dc=secaron,dc=com FILTER = (cn=wwwww eeeee) #REQDATTR = 4 SCOPE = 1 REQDATTRS = cn orclguid cn objectclass
TIMELIMIT = 3600 SIZELIMIT = 0 DEREF = 3
2012-08-23T09:19:48 * gslfbpsParsePagingCtrlValue: exit with status = 0 pagesize = 1
2012-08-23T09:19:48 * INFO:gsleswrASndResult OPtime=1570 micro sec RESULT=0 tag=101 nentries=1
END
]]

Getting error "1013009 Administrator Has Temporarily Disabled User Commands

Hi All,
I am getting the error"1013009 Administrator Has Temporarily Disabled User Commands" while executing a report script in Essbase 11.1.1.3
Appreciate any help..
Thanks
Mahesh

Mahesh wrote:
Hi All,
I am getting the error"1013009 Administrator Has Temporarily Disabled User Commands" while executing a report script in Essbase 11.1.1.3
Appreciate any help..
Thanks
Mahesh
Possible Cause
When a database is being restructured or any application/database on the server is being copied, you can get this message.
or
When a cube is being restructured, commands are restricted because the integrity of the cube has to be stable and no one is allowed to access it.
or
Copying an application requires that the Essbase security file be in read/write mode and therefore other applications are not accessible until the process is completed.
Possible Solution
In Application Settings, verify that the Allow Commands or Allow Updates options are not selected.
If not selected select those..and try
Regards,
Prabhas
Edited by: P on Apr 7, 2011 3:36 PM
Edited by: P on Apr 7, 2011 3:38 PM

Outlook Contact Card - Organization Tab disabled users

In Outlook there is a Contact Card showing detailed information about that person. the Organization tab shows the contact's "Manager", "Shares Same Manager" (other contacts with the same manager), and "Direct Reports" (people
that report to that contact).
The problem i am seeing is that Users disabled in Active Directory (people that have left the company) are showing up in the Organization Tab.
How can i filter out disabled users from this list for anyone using Outlook?
I cannot permanently delete users from Active Directory until after a disabled account reaches a certain age. Also i would prefer not modifying the disabled Active Directory user accounts.
We mostly run Outlook 2010 with a few people running Outlook 2013

Hi,
Outlook has no control over this, it just displays what it got from the server end. And to my knowledge, there is no such a feature to filter out those users from that list, at least on Outlook client.
Regards,
Ethan Hua
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.

How to do Archiving of deleted & disabled users in OIM11g

Hi All,
As per the requirement we have to do archive of deleted & disabled users in OIM11g(11.1.1.2) after 75days. Can i know how can i achieve this?
Regards,
user7609

Just to recap:
Your client requirement is to archive users out of OIM after 75 days. This means in addition to actually disabling and/or deleting them, fully removing any traces of them from the system.
As Kevin & GP said, OIM is just not built to do this. API alone is not going to accomplish this task... you'll also need to include SQL to actually drop data out of tables.
All that being said, your post said the reason for this was because of a "license for limited users". Oracle Identity Manager is licensed on an active user basis. You really should talk with your Oracle rep to confirm, but I've never had licensing contracts include deleted/disabled users.

Disabling User in Solaris

Is there anyway to change the way the resource adapter for Solaris and Linux disables users so that it uses the native lock provided through passwd rather than setting a random password?
Scott

Is there anyway to change the way the resource
adapter for Solaris and Linux disables users so that
it uses the native lock provided through passwd
rather than setting a random password?No there is no way to do that.
The usage of passwd -d and or -l is limited to certain installations. If you read the man page for passwd you will see that it only works for files as the repository not for any of the other possibilities (NIS or NIS+ or ldap). It also depends on PAM modules to implement this and they do not have to be configured on the system.
WilfredS

Disabled User Password should not be changed

Hi,
We have a requirement that only if the user's status is active, then only administartor must be able to change the user password. Admin should not be able to change the password if the user is in disabled state/locked state.How can we achieve this?please sugest...
Regards
Vinoth

Hi,
We have made an entity adapter which is taking usr login value from User[in Data object manager] and calling our java method which is making connection to OIM database and getting us the status of user.
Now if the status of user is disabled method is returning true and on true we have associated our error code to it.
We are executing our entity adapter in pre-update execution.
Now when we are changing password of any disabled user we are able to see our error code. But what ever update [either first name update, enable] we are running on that user same error code is appearing.
Plesae suggest/reply.
thanks

Disabled User Operations

Similar Messages

Maybe you are looking for