Fail to create roles with users in LDAP

I installed and configured two Directory Services one for AM and one for identity. I created an LDAP Data Store for the root realm and can see the LDAP users in the Subjects->User tab in AM. I can create Subjects->Groups and add LDAP users successfully, but I cannot create Subjects->Roles with LDAP users. I get the following error:
Plug-in com.sun.identity.idm.plugins.files.FilesRepo: Unable to find entry: C:\SFU\app\ironscale\amserver\idRepo\user\awhite
Any ideas? I also found it odd that my new Group was created in the FileRepo under idRepo/group. I thought it would have been written to the AM DS.
I deleted the flat file Data Store and the Group/Roles tabs disappeared. Must I import additional LDIFS to my LDAP Identity DS to store roles and groups it that DS?

Update.
I deleted LDAPv3 Plug-in Supported Types and Operations values group, user, and role, based on Sun's Access Manager training class examples. I re-added them and deleted the File Data Store and groups now get created in the LDAP Identity repo. However when I create a role and add users the operation sucessfully completes. But I cannot find the roles using an LDAP browser. I can grep the role name from the LDAP database and the roles remain after restarting the db and AM. It appears AM is adding roles in a way other tools cannot see them.

Similar Messages

How create header with user id time date to VC-report's output as display ?

How create header with user id time date to VC-report's output as display ?
This info should come from the VC - not all the way from R3-side via FunctionModule/BABI. So only userid, date, time to output as normal text (which is not editable of course). Thanks =)

Hi ann-mari
Go through following link may it help u
Form Item disabled based on portal role
/people/community.user/blog/2007/01/17/visual-composer-explorations-using-portal-roles-to-influence-ui-element-behavior
https://www.sdn.sap.com/irj/sdn/wiki?path=/display/vc/usingrolestoinfluenceapplication&
https://www.sdn.sap.com/irj/sdn/wiki?path=/display/vc/passingvaluesvia+URL&
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/ad182ac7-0a01-0010-4fb8-8a4d217b19c1
Best Regards
````Satish````

Create Roles with acess control in SAP MDM

Hi Experts,
I am new to SAP MDM.I want to know how to create roles with access control for various users in SAP MDM.
Thanks,
Manoj

hi,
in the console; you can create roles with access control and you can assign these roles to users.
follow this path:
Console --> repository --> Admin node --> roles,
here you can create new role. for role here you can maintain
1. role detail
2. Functions --here you can restrict the particular role , none / Execute the functions.
3. Tables/fields -- here you can give access to the role Read only / Read and write, and you can apply constraints also.
and follow the links:
http://help.sap.com/saphelp_mdm550/helpdata/en/8e/9f9c427055c66ae10000000a155106/frameset.htm
http://help.sap.com/saphelp_mdm550/helpdata/en/8e/9f9c427055c66ae10000000a155106/frameset.htm
http://help.sap.com/saphelp_mdm550/helpdata/en/8e/9f9c427055c66ae10000000a155106/frameset.htm
http://help.sap.com/saphelp_mdm550/helpdata/en/8e/9f9c427055c66ae10000000a155106/frameset.htm
http://help.sap.com/saphelp_mdm550/helpdata/en/8e/9f9c427055c66ae10000000a155106/frameset.htm
hope this may help you,
Regards,
Srinivas

Transporting role with user assignments

Hi Guru's,
When we transport a role with user assignments then in the target system, the role will wipe out all the existing assignment and show the the users in the original released request.
eg. D->Q
In dev:
role-A has userA, userB
In Qas;
Role-A has UserA and userC
......after import of request:
the roleA will have userA and userB
What I have noticed is even if userB does not exist in Qas, the assignment will be reflected in AGR_USERS. A PFUD or user compare in a role does not remove the ghost entries. Is there any way to remove these inconsistencies ?
I saw note 534010, which is applicable for UST04.
Thank you
Abhishek

Hi Matt,
Yes, I do agree this is not a best practice. However, for a particular requirement, we thought this was the best way to solve the problem. Infact, this was the first time I ever did this
We have a role that needs to ONLY be assigned to every person in a particular team. With more than 30 systems present( out of the production landscape, just the testing systems), we thought this would be the only fast way out than going in each system and assigning this role. This would also ensure unassignment of this role to any other person too
Any other alternative?
Thank you
Abhishek

Moving roles with user assignment

Hi There,
Need your help...
We have roles and users created in QA for training, now we want to move roles from QA to Production with user assignment.
Users that are created in QA for training have also been created in Production, is it possible to move the roles from QA to Production with the user assignment.
Thanks and Regards,
Azher.

Table PRGN_CUST does'nt contain any entries, its an empy table in QA.
USER_REL_TRANSPORT entry with value NO locks system from TR imports with User assignment. So you have to ensure your target system-Production does not has that entry in PRGN_CUST.
TR is geting created in Local change request which cannot be moved to Production.
This TR request are created in Local Change request only when you do not specify a target system/group . All you need to do is specify the "Target" while creating the TR in PFCG (subsequent screen after you hit Create request) and release your TR via SE10. Once released, the TR would be added to the import queue of Production. You/your Basis team can import it manually via STMS_IMPORT (Extras>Other requests>Add TR and CTRL+F11 to import). If there are any errors please have Basis team to review the transport logs.
P.S: You can only transport direct user assignments of roles via PFCG transport option described in my post. In case of indirect user assignments that were created using Organizational Management (HR-Org), you will have to use transport functionality in Organizational management.
Thanks
Sandipan

Restrict Moving roles with user assignment

Hi There,
Need your help...
How to restrict to move roles from dev->QA with user assignment. (want to disable the user assignment restirction)
Thanks and Regards,
Gnanaprakasam

Unfortunately this is not the default installation setting, so you need to go into the security settings customizing and change the USER_REL_IMPORT switch to 'NO'.
This does however NOT make the checkbox disappear in the transport source system. It prevents the import in the target... so you must set it and transport it there first, then it works.
Cheers,
Julius

How to create Roles to user in WORKFLOW

How can i create a role to an user in Workflow so that i can send e-mail notification....!! and where shoul i mention that role..ie wheather in notification or message...???

Given that you have a role, you can mention that role in "Performer" (Node Tab) of the Notification. If you want to fetch the role name value dynamically, then create an attribute with the type "Role" and assign that attribute in the Perfomer field.

Failed to Create components with SAPTAO Inspection

Hi ,
I tried to create component using SAPTAO 'Inspection' but it got failed with message 'Component upload failed;screen might be empty'.
if anybody knows solution for this, please do reply.
Thanks in advance.

Connect as system and query v$version
SQL> select * from v$version;
BANNER
Oracle8 Release 8.0.5.0.0 - Production
PL/SQL Release 8.0.5.0.0 - Production
CORE Version 4.0.5.0.0 - Production
TNS for 32-bit Windows: Version 8.0.5.0.0 - Production
NLSRTL Version 3.3.2.0.0 - Production
In case of Enterprise edition you get:
SQL> select * from v$version;
BANNER
Oracle8 Enterprise Edition Release 8.0.5.1.0 - Production
PL/SQL Release 8.0.5.1.0 - Production
CORE Version 4.0.5.0.0 - Production
TNS for IBM/AIX RISC System/6000: Version 8.0.5.0.0 - Production
NLSRTL Version 3.3.2.0.0 - Production
For Oracle 8.1.5 or 8.1.6 is the same.
Bye
Gianluca

Creating form with user uploaded image (not attachment)

Is it possible to create a form with a space for user uploaded image? Not attachment.
Thank You

This is not supported by FormsCentral.
Jeff Canepa
Software Quality Engineer
Adobe Systems, Inc.
[email protected]

SIngle riole that belong to composite role with user

HI,
There is option when user are belong to single role and also belong to composite roles (that include the single role ) ?
BR
Nina

There is option when user are belong to single role and also belong to composite roles (that include the single role ) ?
SIngle role is created by pfcg where you assign the role name n safe it as single role n then after t codes been provided the user has been assigned accordingly
Composite role is same just it contains many roleson to one and similarly the user has been assigned
Thx
Mysterious

Failed to create DNS with ODBC Datadirect Driver - error missing or invalid option

Dear All,
I tried to post a first time and get my post thrown away. So please just tell me if that's not the place to post such questions. I tried this forum because I didn't find any revelant information yet on internet.
I installed Informatica and Oracle 11g, tried to create my DSN with the Driver DataDirect Oracle Wire Protocol. I keep bumping into the message " [Informatica][ODBC Oracle wire protocol driver][Oracle] ora-00922: missing or invalid option".
Can you please help to understand where the error comes from?
Here are my current status :
* My table in the Oracle database is created with every field followed by NOT NULL option, the table is successfully created.
* The connection to the Oracle database using Oracle TNSNames Connection server name and TNSNames files seem to work, I tried to connect with another driver Oracle in OraDB 11g_home1. This one succeeds.
* Listener.ora:
# listener.ora Network Configuration File: C:\app\ql186003\product\11.2.0\dbhome_1\network\admin\listener.ora
# Generated by Oracle configuration tools.
SID_LIST_LISTENER =
(SID_LIST =
    (SID_DESC =
      (SID_NAME = CLRExtProc)
      (ORACLE_HOME = C:\app\ql186003\product\11.2.0\dbhome_1)
      (PROGRAM = extproc)
      (ENVS = "EXTPROC_DLLS=ONLY:C:\app\ql186003\product\11.2.0\dbhome_1\bin\oraclr11.dll")
LISTENER =
(DESCRIPTION_LIST =
    (DESCRIPTION =
      (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1521))
      (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
ADR_BASE_LISTENER = C:\app\ql186003
* Running lsnrctl STATUS:
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1521)))
STATUS of the LISTENER
Alias                     LISTENER
Version                   TNSLSNR for 64-bit Windows: Version 11.2.0.1.0 - Production
Start Date                22-FEB-2014 21:43:22
Uptime                    0 days 1 hr. 8 min. 33 sec
Trace Level               off
Security                  ON: Local OS Authentication
SNMP                      OFF
Listener Parameter File   C:\app\ql186003\product\11.2.0\dbhome_1\network\admin\listener.ora
Listener Log File         c:\app\ql186003\diag\tnslsnr\WBEQL186003-Q4G\listener\alert\log.xml
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC1521ipc)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1521)))
Services Summary...
Service "CLRExtProc" has 1 instance(s).
Instance "CLRExtProc", status UNKNOWN, has 1 handler(s) for this service...
Service "TESTDBXDB" has 1 instance(s).
Instance "testdb", status READY, has 1 handler(s) for this service...
Service "TEST_DB" has 1 instance(s).
Instance "testdb", status READY, has 1 handler(s) for this service...
Service "orcl.TD.TERADATA.COM" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
Service "orclXDB.TD.TERADATA.COM" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
The command completed successfully
Thank you very much for any guidance.
Qiong

Hi,
Try this :
While creating TYPE remove semi colon from end of the statement and also dont use extra / as / means execute last statement so you may encounter error..
CREATE TYPE ind_tab_supplier1 IS VARRAY(6) OF VARCHAR2(30)
/

RoleMapper with an external LDAP

Dear friends,
We use an external LDAP to store information related to users, groups and roles. We have managed to configure an out of box LDAP Authenticator within our realm for authentication. We wanted some guidance on configuring or writing RoleMapper.
1) What is good practise in terms of storing and managing roles? Is it a common practise to store roles in an external LDAP or do people use Admin console to created roles within the embedded LDAP? The advantage with the Embedded LDAP is definitely that you could use out of the box RoleMapper and the disadvantage is that we could not extend LDAP schema to store hierarchical roles.
2) If we store and manage roles in an external LDAP store, the same one where we store users and groups, could we still use the out of the box role mapper? If not, could someone provide a sample role mapper that uses an external LDAP store.
3) Why WebLogic doesn't provide an out of the box Role Mapper that connects to an external LDAP?

All Users Filter: (&(&(uid=*)(objectclass=person))(!(quitdate=*)))
User From Name Filter: (&(&(uid=%u)(objectclass=person))(!(quitdate=*)))
User Name Attribute: uid
Here you're configuring that uid is the key of your users in OID. And in your case user A and B has the same uid, so the webcenter can login using user B, but when realize a search uid=jack ldap returns the first one.
Make any sense for you?
Hope that I help you

Creating a New User & Schema

This is the 1st time I've logged into the Oracle 11g database as 'sysdba' using the SQL*Plus client. I'm trying to learn how Oracle creates objects and users but I can't find any info that helps me break down / understand what I'm missing. I guess this is a warning and just let you all know that I'm a PostgreSQL guy. In PostgreSQL, we create roles, not users. So now that I'm logged into Oracle 11g, I created a regular test user:
CREATE USER carlos IDENTIFIED BY doesntknowsql;
Then I need to grant session access to this user so:
GRANT CREATE SESSION
TO carlos;
So this now gives me a user named 'carlos' with the grants to login, correct?
My next question or confusion in being new to Oracle is the way it handles a 'database' and now this word is a little confusing but generally I can't just write a SQL statement to CREATE DATABASE test OWNER carlos;
I've learned that in Oracle, you create a user and every user has it's own schema or container that is associated with that particular user or group role assigned to it. Is this accurate or close enough? If not, could someone please clarify for me to help my confusion?
So I'm trying to understand how my newly created user 'carlos' can connect to Oracle 11g using SQL*Plus and how he can then create a table of sorts to start writing data into it. I guess I'm missing something and I'm reading the documentation but there's so much information!
Thanks for any help!!!

When I connect to the database as 'carlos', am I in a specific schema or named work space? When you log in to the database as carlos, your current_schema is set to CARLOS, yes. There are rare cases where it makes sense to change your current_schema but for the moment, assume that's not changable. If you log in as CARLOS, you're working with CARLOS's schema unless you explicitly qualify the object name with a schema name. So
SELECT * FROM testis going to implicitly query the TEST table in the CARLOS schema while
SELECT * FROM bob.testis going to explicitly query the TEST table in the BOB schema.
I tried logging in and creating a table but I'm obviously missing something:Actually, we probably missed something.
In a default 11.2 install, what you posted should work and a table TEST should be created in the CARLOS schema
SQL> conn / as sysdba
Connected.
SQL> create user carlos identified by letmein;
User created.
SQL> grant create session to carlos;
Grant succeeded.
SQL> grant create table to carlos;
Grant succeeded.
SQL> conn carlos/letmein
Connected.
SQL> create table test (
2    id integer primary key,
3    name varchar2(100) not null
4 );
Table created.but when you try to insert a row, you'll get an error because you haven't been granted any quota in the tablespace you created the table in
SQL> insert into test values( 1, 'Justin' );
insert into test values( 1, 'Justin' )
ERROR at line 1:
ORA-01950: no privileges on tablespace 'USERS'In earlier versions of Oracle, or in 11.2 databases where deferred segment creation is not enabled, you would get an error creating the table. You can fix that by granting the user quota on whatever tablespace(s) you want him to use. For example
SQL> conn / as sysdba
Connected.
SQL> alter user carlos
2    quota 10M on users;
User altered.gives the CARLOS user privileges to use 10 MB of space in the USERS tablespace. Once you do that, you'll be able to insert the row
SQL> conn carlos/letmein
Connected.
SQL> insert into test values( 1, 'Justin' );
1 row created.If you don't care about how much space CARLOS uses or what tablespaces he uses, you can
GRANT unlimited tablespace TO carlosJustin

How to creat javadoc with userdefine methods

hi
how to creat javadocs with user define class && methods ....
we did like that
javadocs filename..
we are not geting my oun methods..
pls help me
regards
kedar

Hi,
javadoc creates documentation for packages, not for single files - and you have to comment out every class, method, fields in a special form using javadoc tags - an example
package MyPackage;
import java.util.Vector;
* This class is only an example, how to create javadocs for a package.
public class MyClass extends Object {
* an example for a public field holding a Vector
public Vector aVector = new Vector(3,3);
* Constructs a MyClass instance.
public MyClass() { super(); }
* Constructs a MyClass instance using the passed Vector in the {@link aVector} field.
* @param vec a Vector, that replaces the Vector in field {@link aVector}
public MyClass(Vector vec) { super(); aVector = vec; }
* gets the Vector in field {@link aVector}.
* @return a Vector, held in field {@link aVector}
public Vector getVector() { return aVector; }
}// end of classNow you can create your javadoc from the classpath with "javadoc MyPackage"
hope, this helps
greetings Marsian

Failed to create a user with Mac Mini Server, the message "Failed to process the command writesettings" in the module "servermgr_sharing"

Failed to create a user with Mac Mini Server, the message "Failed to process the command writesettings" in the module "servermgr_sharing"

I have a Mac Mini with OS X Server 10.8.5 and Server 2.2.1 and have a problem to share the public folder.
When I enter the Server application to indicate that I want to share the public folder on the network and assign user I get the following message appears
And I can not share the folder.
If I go from my i-mac get mac mini server view and access the public folder, but I can not open any of the files there.
That I can do to fix this?
thank you very much

Fail to create roles with users in LDAP

Similar Messages

Maybe you are looking for