Error in extends root organization and roles!!

Hi all,
I set up multimaster LDAP, and config merging for organizations and roles. After running about 2 moths stably, all the sub orgs and users cannot extend access list of root org, and all users cannot get the access list from role.
Logically, one user can get access list from org and role, and merge them. But now probably some configuration are changed, the root org and all role can not work correctly.
Please help!!!
Thank you very much.
Best Regards,
Peter

Hello,
Please help me.... Urgent!!!
I have set merging to ldap.
After the ldap run about one month, the root org cannot support extension, and all the roles under sub org also cannot support extension.
I add new user under sub org, it cannot extend the access list of root org. And I add new role, the user also cannot get the access list of role.
Please help!!!
Thanks!
Peter

Similar Messages

WLPI: integrating organizations and roles with existing application

Hi,
how do I integrate WLPI's organizations and roles with an existing application's
data structure? It looks like WLPI expects organizations and roles to be groups
with a particular naming convention (i.e. an org is defined by a group 'WLPIOrg@MyOrg'
and a null member). If I am integrating with an application that stores organizations
and roles in (for example) separate database tables, how do I get WLPI to recognize
these? Or do I have to maintain the organizations and roles in 2 places, one for
the application and one for WLPI in the format described above?
THanks,
Martin

Hi Martin,
We're in the middle of a prototyping exercise of getting WLS, JMS,
WLP, WLPI integrated accross one security realm. What its looking like
is this (bear in mind I think this hasn't been tried before judging by
newsgroups + BEA Docs)
1)WLP has a bug that you cannot get user details from LDAP(exception
is thrown)
2)WLPI does need a certain structure -
http://e-docs.bea.com/wlpi/wlpi121/install/cfigrun.htm#1246656
and
http://developer.bea.com/ftp_bin/Using_LDAP_with_WLPI.zip
A) To solve your problem maybe you could write a custom realm to
translate the roles + orgs back (no writing from WLPI ie read only )
to WLPI.
B) Maybe you caould have a META-DIRECTORY set up that synchronises the
RDBMSRealm with something else maybe LDAP or another RDBMSRealm
We are also looking into a unified security solution by Netegrity
called siteminder. They are about to release a version for WLS 6 but
they seem to be laggin behind. This provides a single signon over and
enterprise system.
This is a bit vague Martin, I will hopefully have more concrete info
in a week or 2. If you have any other info you can mail me on -
[email protected]
BTW this wouldn't be Martin Van Vilet from the Netherlands that worked
on the Intelligent Finance Product?
"Martin van Vliet" <[email protected]> wrote in message news:<3b17ece8$[email protected]>...
Hi,
how do I integrate WLPI's organizations and roles with an existing application's
data structure? It looks like WLPI expects organizations and roles to be groups
with a particular naming convention (i.e. an org is defined by a group 'WLPIOrg@MyOrg'
and a null member). If I am integrating with an application that stores organizations
and roles in (for example) separate database tables, how do I get WLPI to recognize
these? Or do I have to maintain the organizations and roles in 2 places, one for
the application and one for WLPI in the format described above?
THanks,
Martin

My CS2 was working great but now error that my name, org and serial number are mussing and must close

my photo shop 9 CS2 was working great but now error that my name, organization and serial number are mussing or invalid and must close>how do I fix this I was given a download file and do no have cd to reload it??

Does this apply?
Error: Activation Server Unavailable | CS2, Acrobat 7, Audition 3

How to inherit roles between root organization unit and sub units

Hi all,
I have root organization unit and sub units:
->Company
>Department 1
>Department 2
>Department 3
>Department 4
>Department 5
I would like it to work like this that all people from all departments would have access to transaction ZTEST. Most obvious way would be for me to assign appropriate role to unit Company. Unfortunately it looks like roles are not inherit between units like this. So question is how it should be done? Do I have to assign this role to all departments to make it work?
Best regards
Marcin Cholewczuk

Hi,
To activate inheritance of roles between root org and sub org units, you need to set switch HR_ORG_ACTIVE to Yes in table PRGN_CUST. Also proper evaluation path has to be used so that user comparison (via PFUD) creates the indirect role assignment to user master records.
You can modify evaluation path US_ACTGR in table T77AW/ tcode OOAW to include root org and its subunits (add entry for relationship O B002 O) and connect the role assigned to root org to the users belonging to sub org units. Then run PFUD which will use this evaluation path to create indirect role assigment.
Thanks
Sandipan

Please maintain PAN and LST details Error while extending the Vendor in Purchasing Organisation

Dear Gurus,
I have created a import vendor 200100 in finance using FK01 and mentioned LST, CST and PAN No details as "Nil", but when i am extending the Import vendor 200100 to purchasing organization level using T code XKO1, while saving i an getting error as: "Please maintain PAN and LST details" even i checked in J1ID also... Excise data is maintained for this vendor. Please help me to resolve this issue. Many thanks.
Regards,
Siddu M

Hi,
You have to maintain PAN and LST number in Vendor master. This can be done in two ways :
1. Go to transaction code J1ID. Select Vendor Excise details and click on Edit
Click on
Next Screen
OR
2. Go to Vendor Master
Click on
Next Screen
Click on Sales Tax / Service tax tab
Click on Withholding Tax tab
In case CIN tab is not visible please revert as it comes on the basis of configuration which will be guided to you.
We have said OR because in case it is updated in J1ID it reflects in CIN details or vice versa.
Hope, this solves your issue else revert.
Regards,
Tejas

Error while copying the Root Organization Unit.

Hi Experts,
Can any one help me in copying the existing Orgnaization structure root in SRM , Because I have requirement like need to create a separate root with independent node under the Old one. so when try to copy the Org structure root node and click copy system give me a message like.
" Before you select a function , select suitable entries in the structure."
Can any one help on this copying of the Organization root.
Regards
Srujank.

This is solved

Access Enforcer(error in approving the request) and import roles

Dear all,
error in approving the request at security stage(last)
manager and role owner are successfully approved.
and also importing roles into access enforcer was not successful.
imortstatus : 0 roles imported of 28 records found.
please find the system log:
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.messaging.MessageFormatter : parseDesc :   : INTO the method : desc :Please specify a file to import.paramNames :paramsMap :{FIELD_NAME=#_!FIELD_NAME#_!}
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:01:34,625 [SAPEngine_Application_Thread[impl:3]_8] DEBUG com.virsa.ae.service.cache.AECacheUtil : getResourceBundle :   : INTO the method : en
2008-09-05 13:02:28,234 [Thread-47] DEBUG

In Addition to my previous response:
I meant to include the following:
Some of the fields that need to be properly defined with attributes are:
       System: must have the know SAP system defined here
       Role Approver (i presently are using most of the roles without having need for approval; I created a user called NOAPPRV in AE)
       Functional Area: need to have all the areas defined that roles will be assigned to
       Company: I only have one company so that's an easy one
Some areas I presently do not use but found they must ne coded and coded properly:
       ResponsibilityID:   N/A (coded as is)
       CommentsMandatory: NO (coded as is)
       Parent Role Owner:   NO
       Business Process: NA (I believe I originally coded N/A and it did not like that)
       Sub Process: NA (again N/A I believe error on me)
       Reaffirm Period: presently I am using 0 (zero)
       LastReaffirm: presently using 12/31/9999
Hope this helps a bit
I wanted to include an attachment with a sample of my Role Import spreadsheet but I'm not sure exactly how to do that; if I figure that out or someone can provide me the process I will include it
Jerry Synoga
Ryerson Inc.
630-758-2021

Problem about Organization Unit and Role in BPM

Hi,
I am developing BPM project which have some roles and will be deployed for many organization. In JDev, I want to assign users to each role and organization and when the project is deployed to WorkSpace, each user in specify org can only manipulate with his task (other user can not visible). I tried configure in Jdev and WorkSpace but it is working incorrecttly
I used BPM, Jdev 11g.
Some body help ?
Thanks.

Hi
1. When you add new Roles, Users to Roles etc from JDev and Deploy it, ONLY for the first time deployment, all these information is added to the Workspace and you can see it in Admin tab of workspace. You should see them in one of the tables of soainfra like BPM_CUBE_ROLE like that. The point is, after first deployment, when you add more users to the same Role, they will not be reflected in Workspace. I guess this was Designed intentionally to avoid overwriting of users with every redeployment. The only way to add more Users or Edit Users for Each Role is from the bpm/workspace application with adminstrator Role.
This makes sense also. Beacause when we develop any BPM Application, all we consider is the Roles names called as Studio Roles (or Swimlanes etc). They are just dummy and virutal Roles. We add all Tasks for each Role. Thats it. Then you Deploy them. And only in Workpace, we map these dummy studio Roles to the real Users from the Security Providers of that SOA/BPM Domain like from default seucrity provider or any external configured AD LDAP etc.
Unless there is a very strong reason, I would not recommend to add Users/Groups etc to the Studio Roles in the JDeveloper itself. Worst case, after you deploy it, if you see any discrepencies, just delete the Roles from workspace admin. Redeploy your bpm app and it will create the new Roles.
Thanks
Ravi Jegga

When I run root.sh and I get OCR errors

Hi all,
When I run root.sh and I get following errors. There are two nodes configured on Solaris 10 for Oracle Database 10g RAC Release 10.2.0.1. I am using openfiler 2.3. and ISCSI for data storage. I have create file system OCR & VOT as Raw device and formatted these devices in Solaris skipping ocr voting disk for the first 1MB to avoid overwriting the disk VTOC. Network configuration and disk permissions are set correctly. I have installed the RAC on the same machines a few months ago for training purpose and everything was working very well. Last week, my openfiler hard disk has died. I have cleared the CRS and database on the same machines and wanted to reinstall oracle RAC on Solaris but now have following problems when I run root.sh from first node I get following errors. Please help me to fix this problem.
This is the error I get:
Oracle Database 10g CRS Release 10.2.0.1.0 Production Copyright 1996, 2005 Oracle. All rights reserved.
2009-12-26 17:03:38.158: [ OCRCONF][1]ocrconfig starts...
2009-12-26 17:03:38.158: [ OCRCONF][1]Upgrading OCR data
2009-12-26 17:03:38.173: [ OCRCONF][1]OCR already in current version.
2009-12-26 17:03:38.192: [ OCRCONF][1]Failed to call clsssinit (21)
2009-12-26 17:03:38.192: [ OCRCONF][1]Failed to make a backup copy of OCR
2009-12-26 17:03:38.192: [ OCRCONF][1]Exiting [status=failed]...
This is ifconfig –a output:
lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index 1
inet 127.0.0.1 netmask ff000000
nfo0: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2
inet 192.168.123.110 netmask ffffff00 broadcast 192.168.123.255
ether 0:22:15:19:8:d7
vfe0: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 3
inet 192.168.0.110 netmask ffffff00 broadcast 192.168.0.255
ether 0:1c:f0:c8:36:3a
this is hosts output:
127.0.0.1 localhost
# public network nfo0
192.168.123.110 solaris1
192.168.123.112 solaris2
# privarte interconnect - (vfe0)
192.168.0.110 solaris1-priv
192.168.0.112 solaris2-priv
# Public vertual ip vip on nfo0
192.168.123.120 solaris1-vip
192.168.123.122 solaris2-vip
# private sotartge network for Openfiler - eth0
192.168.0.195 openfiler1
This is the Format output:
AVAILABLE DISK SELECTIONS:
0. c0d0 <DEFAULT cyl 5098 alt 2 hd 255 sec 63>
/pci@0,0/pci-ide@8/ide@0/cmdk@0,0
1. c2t44d0 <DEFAULT cyl 156 alt 2 hd 64 sec 32>
/iscsi/[email protected]%3Atsn.61af7f03092f0001,0
2. c2t45d0 <DEFAULT cyl 60 alt 2 hd 64 sec 32>
/iscsi/[email protected]%3Atsn.61af7f03092f0001,1
3. c2t46d0 <DEFAULT cyl 157 alt 2 hd 64 sec 32>
/iscsi/[email protected]%3Atsn.61af7f03092f0001,2
4. c2t47d0 <DEFAULT cyl 1148 alt 2 hd 255 sec 63>
/iscsi/[email protected]%3Atsn.61af7f03092f0001,3
5. c2t48d0 <DEFAULT cyl 1148 alt 2 hd 255 sec 63>
/iscsi/[email protected]%3Atsn.61af7f03092f0001,4
6. c2t49d0 <DEFAULT cyl 1352 alt 2 hd 255 sec 63>
/iscsi/[email protected]%3Atsn.61af7f03092f0001,5
Specify disk (enter its number):
Thank you

I made a clean installation from scratch. I have prepared the servers step by step and used Metalink Note:367715.1. and I still get following errors. Do you have any recommendation or what to do?
Oracle Database 10g CRS Release 10.2.0.1.0 Production Copyright 1996, 2005 Oracle. All rights reserved.
2010-01-02 18:19:38.860: [ OCRCONF][1]ocrconfig starts...
2010-01-02 18:19:38.861: [ OCRCONF][1]Upgrading OCR data
2010-01-02 18:19:38.870: [ OCRRAW][1]propriogid:1: INVALID FORMAT
2010-01-02 18:19:38.871: [ OCRRAW][1]ibctx:1:ERROR: INVALID FORMAT
2010-01-02 18:19:38.871: [ OCRRAW][1]proprinit:problem reading the bootblock or superbloc 22
2010-01-02 18:19:38.872: [ default][1]a_init:7!: Backend init unsuccessful : [22]
2010-01-02 18:19:38.872: [ OCRCONF][1]Exporting OCR data to [OCRUPGRADEFILE]
2010-01-02 18:19:38.872: [ OCRAPI][1]a_init:7!: Backend init unsuccessful : [33]
2010-01-02 18:19:38.872: [ OCRCONF][1]There was no previous version of OCR. error:[PROC-33: Oracle Cluster Registry is not configured]
2010-01-02 18:19:38.878: [ OCRRAW][1]propriogid:1: INVALID FORMAT
2010-01-02 18:19:38.879: [ OCRRAW][1]ibctx:1:ERROR: INVALID FORMAT
2010-01-02 18:19:38.879: [ OCRRAW][1]proprinit:problem reading the bootblock or superbloc 22
2010-01-02 18:19:38.879: [ default][1]a_init:7!: Backend init unsuccessful : [22]
2010-01-02 18:19:38.885: [ OCRRAW][1]propriogid:1: INVALID FORMAT
2010-01-02 18:19:38.887: [ OCRRAW][1]ibctx:1:ERROR: INVALID FORMAT
2010-01-02 18:19:38.887: [ OCRRAW][1]proprinit:problem reading the bootblock or superbloc 22
2010-01-02 18:19:38.892: [ OCRRAW][1]propriogid:1: INVALID FORMAT
2010-01-02 18:19:38.902: [ OCRRAW][1]propriowv: Vote information on disk 0 [dev/rdsk/c2t1d0s2] is adjusted from [0/0] to [2/2]
2010-01-02 18:19:38.934: [ OCRRAW][1]propriniconfig:No 92 configuration
2010-01-02 18:19:38.934: [ OCRAPI][1]a_init:6a: Backend init successful
2010-01-02 18:19:39.123: [ OCRCONF][1]Initialized DATABASE keys in OCR
2010-01-02 18:19:39.163: [ OCRCONF][1]csetskgfrblock0: clsfmt returned with error [4].
2010-01-02 18:19:39.163: [ OCRCONF][1]Failure in setting block0 [-1]
2010-01-02 18:19:39.163: [ OCRCONF][1]OCR block 0 is not set !
2010-01-02 18:19:39.163: [ OCRCONF][1]Exiting [status=failed]...

Extending Image class and addChild errors

I am attempting to extend the Image class to allow us to place highlights over an image that are stored in an XML file.
I'm extending the class and adding the highlights to a sprite. I use the addChild() method to add the sprite to the Image class, but I get the error "addChild() is not available in this class. Instead, use addElement() or modify the skin, if you have one."
I try to use the addElement but that gives me compile errors..
anyone have any idea what to do? I'm trying to copy/paste the class code here, but its not working (no idea how to make it work)

Update to last posting,
Since the Primtive Class is extending Group I just added TransformGroup to it. To this TransformGroup object I add 4 TransformGroup objects and it all works fine. I was able to rotate all the 4 triangles at different rates.
This is how it looks now :-
http://www.tzi.de/~fayyaz/2.bmp
Now I just want to shift the centre of rotation of all the triangles to the center and rotate the TOP and Bottom triangles along the x-axis.
Assume I just have to add these operations to a TransformGroup above a single shape which is a single triangle. How do I do it. I know the answer is really simple but it beats me.
Thanx in advance.

Error when extending VO and via SPEL in SSHR to control rendering a tab

Hi,
I am a freshman of OA Framework personalization. Please bear with me for the long description.
After extending a VO (xxAbsenceDetailsVO), substitute for the original VO (AbsenceDetailsVO), load substitution with jpximport, and sftp all extended VO files to $JAVA_TOP, I can view the extended VO (xxAbsenceDetailsVO) and the added attribute (absenceRendering).
Path: SSHR->My Information-> 'above this page' link-> click Absence tab -> 'Business Component References Details' from 'above this page' link-> View Objects-> xxAbsence.oracle.apps.per.selfservice.mgrviews.server.xxAbsenceDetailsVO ->absenceRendering attribute with type java.lang.Boolean.
So I added SPEL to the 'rendered' properties ${oa.xxAbsenceDetailsVO.absenceRendering} to control one of the Absence tab (at Stack Layout: Absence) via personalization.
When login, absenceRendering will return TRUE based on my employment and the tab render correctly.
However, I got the following error message when trying to access it (Absence tab) which control by SPEL ${oa.xxAbsenceDetailsVO.absenceRendering}:
Message not found. Application: FND, Message Name: FND_VIEWOBJECT_NOT_FOUND. Tokens: VONAME = xxAbsenceDetailsVO; APPLICATION_MODULE = oracle.apps.per.selfservice.mgrviews.server.EmpViewsAbsAM;
Please advice how to resolve this error.
Thanks in advanced.
NC
Edited by: user512819 on Jun 17, 2009 6:25 AM

Hi,
I am a freshman of OA Framework personalization. Please bear with me for the long description.
After extending a VO (xxAbsenceDetailsVO), substitute for the original VO (AbsenceDetailsVO), load substitution with jpximport, and sftp all extended VO files to $JAVA_TOP, I can view the extended VO (xxAbsenceDetailsVO) and the added attribute (absenceRendering).
Path: SSHR->My Information-> 'above this page' link-> click Absence tab -> 'Business Component References Details' from 'above this page' link-> View Objects-> xxAbsence.oracle.apps.per.selfservice.mgrviews.server.xxAbsenceDetailsVO ->absenceRendering attribute with type java.lang.Boolean.
So I added SPEL to the 'rendered' properties ${oa.xxAbsenceDetailsVO.absenceRendering} to control one of the Absence tab (at Stack Layout: Absence) via personalization.
When login, absenceRendering will return TRUE based on my employment and the tab render correctly.
However, I got the following error message when trying to access it (Absence tab) which control by SPEL ${oa.xxAbsenceDetailsVO.absenceRendering}:
Message not found. Application: FND, Message Name: FND_VIEWOBJECT_NOT_FOUND. Tokens: VONAME = xxAbsenceDetailsVO; APPLICATION_MODULE = oracle.apps.per.selfservice.mgrviews.server.EmpViewsAbsAM;
Please advice how to resolve this error.
Thanks in advanced.
NC
Edited by: user512819 on Jun 17, 2009 6:25 AM

I just installed firefox as a broser. everytime I click on any website a pop up window named "java script application" and states "exc in ev handl:type error: oSAPLg. o root. log is not a function"

I just installed firefox as a broser. everytime I click a website the following pop up window opens. "exc in ev handl: type error: oSAPLg.o root. log is not a function. How do I correct this.

Please see solution in http://kb.mozillazine.org/Problematic_extensions
for "McAfee Site Advisor".
(Windows): For best results you should uninstall '''McAfee Site Advisor''' from Control Panel > add/change programs (Programs and Features). Reboot the system. Then Reinstall from http://www.siteadvisor.com/ and reboot the system. When installing refuse other suggested (crapware) applications.
<br><small>Please mark "Solved" one answer that will best help others with a similar problem -- hope this was it.</small>

OIM synchronization organize information and role information

How to use the OIM to synchronization organize information and role information from the Oracle database？
thanks！

Can you explain little bit about your use case ?

Error message while transporting the HR role

All
I was trying to move my HR role from Dev to QA.
I got the error message from transport and not sure about it.
Please let me know if you have any suggestions.
Invalid organizational level $ORGEH deleted from role Z_ALL_MODULES_EXCEPT_BASIS_HR
Invalid organizational level $ORGUNIT deleted from role Z_ALL_MODULES_EXCEPT_BASIS_HR
Errors occurred during post-handling
PRGN_AFTER_IMP_ACTGROUP_ACGR for ACGR L
PRGN_AFTER_IMP_ACTGROUP_ACGR belongs to package S_PROFGEN
The errors affect the following components:
BC-SEC-USR-PFC (Authorization and Role Management)
Post-import method PRGN_AFTER_IMP_ACTGROUP_ACGR completed for ACGR L, date and time: 20071011162942

Pranav,
You can see a list of all org levels in table USORG
There are standard SAP programs for adding or deleting org levels
PFCG_ORGFIELD_CREATE
PFCG_ORGFIELD_DELETE
If you want these fields to be maintained as org levels then you need to make sure that you have created them in all system.
If you don't want these fields as org levels then you can delete them using the program I listed above.

Error when extend sales view for material master

Hi Experts,
Assume my plant is 5100. When i extend the sales view for materials via upload program,I am getting the error as ' Field 5100 has been transferred inconsistently or is blank'. Attached is the screen shot of the error message. I filled the plant,sales organization and all those data related sales view. But why i am getting this error?. Anyone have any ideas related to this error?. Please advise. Thanks in advance.
Regards,
Kavi

Hi ,
Its because of the table T130W. The plant 5100 is not maintained in table T130W. Thats the reason. it shows this error.

Error in extends root organization and roles!!

Similar Messages

Maybe you are looking for