Forced reauthentication following user change on 802.1x

We have a test 802.1x setup for wired network using IAS and Cat3550. We are using PEAP and assign different VLAN for machine account and user account via radius server and we are having issues with VLAN switching between the two accounts. The correct VLAN is assigned depending on machine is authenticated and when users are authenticated, the problem is the timing from one account to the other.
Let's say a Windows XP machine boots up and authenticates as machine and is assigned VLAN 100. Once a user logs on to the machine with his/her account based on radius policy he/she should be moved to VLAN 200. However, this does not happen right away. It waits for reauthentication timeout and then assigns the correct VLAN. Happens the same when user logs out. It waits for reauthentication timeout and then logs in as machine account and assigns VLAN 100 back to the port.
I have applied MS KB826942 patch and the host seems to renew the IP as soon as it detects VLAN change. But it seems to wait around for reauthentication from the switch. Anyone know how to force reauthentication once user changes?

802.1x is out of the way for you once 802.1x has authorized a switch port. Hence, 802.1x doesn't do anything else (until re-auth kicks is if you have it configured, as you seem to).
Hence, when a user logs into a machine after machine-auth has been successfully completed, 802.1x on the switch isn't going to do anything, b/c as far as it knows, it's already authorized the port, and has no visibility into what's actually happening on the machine.
Now, if you want to 802.1x-authenticate the user as well, then you need to make sure you have enabled the wired supplicant to send EAPOL-Starts. See here:
<http://www.microsoft.com/WindowsServer2003/techinfo/overview/wififaq.mspx#EAAAA>
p.s. The reason it seems to work after re-auth is b/c the switch is doing initializing the auth conversation on it's own, and the supplicant replies back with cached credentials (also a default of this supplicant).
Hope this helps,

Similar Messages

  • How to Enforce User Change Password First Time User in Release 2?

    Hi...
    We discovered in Oracle Directory Manager(in unix is oidadmin), there actualy
    column to expiry date.(the default is 60).
    We follow this notes in metalink..
    Note:176470.1 Subject: How To Pre-Expire Portal Passwords
    Even though the note is for Portal30(release1), we just wangt to try it in our Release 2...
    Extract from the note
    "3. Set the value of the column LAST_PASSWD_CHANGE_TIME in the table WWSEC_PERSON$ in SSO schema to a value older than the password expiration period (default is 90 days) before the current time (e.g. sysdate - 100) for the appropriate user(s)
    4. For example, if you have created a user called TEST
    you would issue a command such as:
    update wwsec_person$
    set LAST_PASSWD_CHANGE_TIME =sysdate-70
    where USER_NAME='TEST';
    commit; "
    But, when we try to login again in the portal, we can still login...
    So, is the function still exist in Release 2?..
    If not, why Oracle Portal throw that function away?
    Why there still columns in WWSEC_PERSON$ that maybe linked to the password problem?
    can anybody help/explain?
    Thanks....

    Rather than rehash what has already been thoroughly discussed, check this thread. This should answer your question.
    Can a user change his own password after admin has set it
    The english version of Jose Troya's blog: http://obiee101.blogspot.com/2008/08/obiee-change-password.html
    Edited by: LC143 on Aug 27, 2008 1:36 PM

  • How to generate a notification when a user changes his password?

    Hi all,
    I have OIM 11.1.1.5.0 BP02 installed. When an administrator resets a user's password, the following email is sent to the user:
    Password has been reset for user <Firstname> <Lastname> . You will be required to change your password on next login.
    First Name: <Firstname>
    Last Name: <Lastname>
    Password: passW0rd
    +For any issues, please contact [admin email or phone]+
    My requirement is to generate a similar email when a user changes his/her own password. How would I go about doing this?
    Thanks in advance.

    You can use an event handler for this.
    Write your own code as a plugin for the event handler (refer to the developers guide for details on event handlers) then you can reference this from your custom event handler XML configuration with operation "CHANGE_PASSWORD"
    e.g.
    <action-handler class="<CLASS NAME>" entity-type="User" operation="CHANGE_PASSWORD" name="<EVENT HANDLER NAME>" stage="postprocess" sync="TRUE" order="2000" />
    The action "RESET_PASSWORD" is also available for administrator change.

  • RE: (forte-users) Changing replication options in Fscript? -Tric k

    There was one attribute of a service object you couldn't change in fscript..
    I think it was whether the service was replicated at all or not (not the
    same as setting rep count to 1!).
    As Clint would say, "improvise.."
    We exported the project containing the service object and snipped out the
    part pertaining to the service object in to a little export file.
    Then in an fscript script you can branch/checkout the service object and
    import the snipped out export file to change the replicated yes/no flag.
    Then do whatever other fscript commands make sense.. We tended to leave the
    system baseline with the "true" replication flags and let developers run
    this little script (only branching the services) to de-replicate all the
    replicated services prior to trying to run from their workspace, etc.
    Worked like a charm.
    -Greg
    -----Original Message-----
    From: Taras Katkov
    To: [email protected]
    Sent: 12/1/99 2:57 PM
    Subject: Re: (forte-users) Changing replication options in Fscript?
    "setappcompcompiled", "setPARTrepcount" can be used in fscript during
    application build.
    I mean PERIOD!
    Taras Katkov
    f.e.
    FindAppComp AppNAme_PartXX
    SetAppCompCompiled MyNode 1
    SetPartRepCount MyNode YY
    SetPartArgs MyNode \"Whatever\"
    SetPartThreadPkg MyNode DCE
    commit
    [email protected] wrote:
    >
    Yes through escript one can achieve changing the properties but onecannot
    do it when one is partitioning the app where the router gets createdand
    assigned ( which is fscript) and the single threadedness of thepartition
    takes effect ( for loadbalancing ) except from the partitioningworkshop
    (GUI) itself.
    -----Original Message-----
    From: [email protected] [mailto:[email protected]]
    Sent: Wednesday, December 01, 1999 3:39 PM
    To: [email protected]; [email protected];
    [email protected]
    Subject: RE: (forte-users) Changing replication options in Fscript?
    Yes you can do it, but you actually do it in EScript not FScript lookfor
    the following types of command "assignappcomp", "unassignappcomp",
    "setappcompcompiled", "setrepcount", "findagent", "findsubagent",
    "findparent" etc.. So start with your EScript manual.
    Happy scripting.
    -----Original Message-----
    From: [email protected] [mailto:[email protected]]
    Sent: Wednesday, December 01, 1999 1:36 PM
    To: [email protected]; [email protected]
    Subject: RE: (forte-users) Changing replication options in Fscript?
    no it is not. One can compiling properties but not replicationproperties
    through Fscript.
    -----Original Message-----
    From: [email protected] [mailto:[email protected]]
    Sent: Wednesday, December 01, 1999 3:24 PM
    To: [email protected]
    Subject: (forte-users) Changing replication options in Fscript?
    Before making a distribution, we modify replication options on some ofour
    service objects from within the Partition Workshop (to get rid of the
    router partition on some of our applications). Does anyone know ifit is
    possible to do this in Fscript? Thanks for your help.
    For the archives, go to: http://lists.sageit.com/forte-users and use
    the login: forte and the password: archive. To unsubscribe, send in anew
    email the word: 'Unsubscribe' to: [email protected]
    For the archives, go to: http://lists.sageit.com/forte-users and use
    the login: forte and the password: archive. To unsubscribe, send in anew
    email the word: 'Unsubscribe' to: [email protected]
    For the archives, go to: http://lists.sageit.com/forte-users and use
    the login: forte and the password: archive. To unsubscribe, send in anew
    email the word: 'Unsubscribe' to: [email protected]
    For the archives, go to: http://lists.sageit.com/forte-users and use
    the login: forte and the password: archive. To unsubscribe, send in a
    new
    email the word: 'Unsubscribe' to: [email protected]

    You can set the the number of replicas through fscript BUT the service
    object in that partition has to be marked for LOADBALANCE. I didn't find a
    fscript command to do that (that was what mnasser was trying to tell you).
    But you can get around it by exporting the plan that has the service object
    and look for the string LoadBalance = FALSE, then change it to LoadBalance =
    TRUE. Import back the plan and you should be fine.
    Norocel Popa
    -----Original Message-----
    From: [email protected] [mailto:[email protected]]
    Sent: Wednesday, December 01, 1999 8:28 PM
    To: [email protected]; [email protected]
    Subject: RE: (forte-users) Changing replication options in Fscript? -
    Tric k
    There was one attribute of a service object you couldn't change in fscript..
    I think it was whether the service was replicated at all or not (not the
    same as setting rep count to 1!).
    As Clint would say, "improvise.."
    We exported the project containing the service object and snipped out the
    part pertaining to the service object in to a little export file.
    Then in an fscript script you can branch/checkout the service object and
    import the snipped out export file to change the replicated yes/no flag.
    Then do whatever other fscript commands make sense.. We tended to leave the
    system baseline with the "true" replication flags and let developers run
    this little script (only branching the services) to de-replicate all the
    replicated services prior to trying to run from their workspace, etc.
    Worked like a charm.
    -Greg
    -----Original Message-----
    From: Taras Katkov
    To: [email protected]
    Sent: 12/1/99 2:57 PM
    Subject: Re: (forte-users) Changing replication options in Fscript?
    "setappcompcompiled", "setPARTrepcount" can be used in fscript during
    application build.
    I mean PERIOD!
    Taras Katkov
    f.e.
    FindAppComp AppNAme_PartXX
    SetAppCompCompiled MyNode 1
    SetPartRepCount MyNode YY
    SetPartArgs MyNode \"Whatever\"
    SetPartThreadPkg MyNode DCE
    commit
    [email protected] wrote:
    >
    Yes through escript one can achieve changing the properties but onecannot
    do it when one is partitioning the app where the router gets createdand
    assigned ( which is fscript) and the single threadedness of thepartition
    takes effect ( for loadbalancing ) except from the partitioningworkshop
    (GUI) itself.
    -----Original Message-----
    From: [email protected] [mailto:[email protected]]
    Sent: Wednesday, December 01, 1999 3:39 PM
    To: [email protected]; [email protected];
    [email protected]
    Subject: RE: (forte-users) Changing replication options in Fscript?
    Yes you can do it, but you actually do it in EScript not FScript lookfor
    the following types of command "assignappcomp", "unassignappcomp",
    "setappcompcompiled", "setrepcount", "findagent", "findsubagent",
    "findparent" etc.. So start with your EScript manual.
    Happy scripting.
    -----Original Message-----
    From: [email protected] [mailto:[email protected]]
    Sent: Wednesday, December 01, 1999 1:36 PM
    To: [email protected]; [email protected]
    Subject: RE: (forte-users) Changing replication options in Fscript?
    no it is not. One can compiling properties but not replicationproperties
    through Fscript.
    -----Original Message-----
    From: [email protected] [mailto:[email protected]]
    Sent: Wednesday, December 01, 1999 3:24 PM
    To: [email protected]
    Subject: (forte-users) Changing replication options in Fscript?
    Before making a distribution, we modify replication options on some ofour
    service objects from within the Partition Workshop (to get rid of the
    router partition on some of our applications). Does anyone know ifit is
    possible to do this in Fscript? Thanks for your help.
    For the archives, go to: http://lists.sageit.com/forte-users and use
    the login: forte and the password: archive. To unsubscribe, send in anew
    email the word: 'Unsubscribe' to: [email protected]
    For the archives, go to: http://lists.sageit.com/forte-users and use
    the login: forte and the password: archive. To unsubscribe, send in anew
    email the word: 'Unsubscribe' to: [email protected]
    For the archives, go to: http://lists.sageit.com/forte-users and use
    the login: forte and the password: archive. To unsubscribe, send in anew
    email the word: 'Unsubscribe' to: [email protected]
    For the archives, go to: http://lists.sageit.com/forte-users and use
    the login: forte and the password: archive. To unsubscribe, send in a
    new
    email the word: 'Unsubscribe' to: [email protected]
    For the archives, go to: http://lists.sageit.com/forte-users and use
    the login: forte and the password: archive. To unsubscribe, send in a new
    email the word: 'Unsubscribe' to: [email protected]

  • Interactive Gantt chart - how to receive updated XML after user changes

    Hello,
    I failed to receive changed XML after user updates.
    I've constructed following example:
    Created context attribute of type XSTRING, binded it to the "dataSource" property of the Gantt chart control.
    I pass following XML to the control:
    <?xml version="1.0" encoding="iso-8859-5" ?>
    <SAPJNetData version="1.0">
    <Application type="GANTT" version="1.0" />
    <TypeRepository version="1.0" href="/SAP/BC/WebDynpro/SAP/ZT_INV_WDR_TEST_GANTT/gantPR02P00086_3_tr.xml" />
    <UserInterface version="1.0" href="/SAP/BC/WebDynpro/SAP/ZT_INV_WDR_TEST_GANTT/gantPR02P00086_3_ui.xml" />
    <Graph type="Gantt.Graph" version="1.0">
    <rows>
      <row id="001" />
      <row id="002" />
      <row id="003" />
      </rows>
    <dates timeZone="GEurope/Berlin" locale="de_DE" format="dd.MM.yyyy" dateEnd="20.01.2010">
      <section date="01.01.2010" unit="DAY" unitSize="20" />
    <calendarItem id="Cal.1stDayInMonth">
      <repetition unit="MONTH" />
      </calendarItem>
    <calendarItem id="Cal.1stDayInWeek">
      <repetition unit="WEEK" />
      </calendarItem>
      </dates>
    <view>
      <viewpos date="01.01.2010" />
      </view>
    <chart id="Dummy">
    <timeScale>
    <section index="0">
      <ribbon type="Gantt.CProjects.Ribbon.Month" />
      <ribbon type="Gantt.CProjects.Ribbon.3Days" />
      </section>
      </timeScale>
      <grid type="Grid.CProjects.Gantt.TimeLine" calendarIDs="Cal.1stDayInWeek" />
    <table type="Gantt.Table" id="CProj-Table">
      <defaults typeCell="L.Table" typeHeader="L.Table" />
      <tree showRootIcons="TRUE" />
    <cols showInitially="4">
      <ids>TREE,ID2,ID3</ids>
      </cols>
    <header>
      <header width="30" />
      <label colid="TREE" width="250">Этап</label>
      <label colid="ID2">Дата с</label>
      <label colid="ID3">Дата по</label>
      </header>
    <rows>
      <ids>001,002,003</ids>
      </rows>
    <row>
      <header>1</header>
      <tree>Top Item</tree>
      <label>01.01.2010</label>
      <label>20.01.2010</label>
      </row>
    <row>
      <header>2</header>
      <tree parentRow="001">Subitem 1</tree>
      <label>01.01.2010</label>
      <label>10.01.2010</label>
      </row>
    <row>
      <header>3</header>
      <tree parentRow="001">Subitem 2</tree>
      <label>11.01.2010</label>
      <label>20.01.2010</label>
      </row>
      </table>
    <graph>
    <view>
      <backColor type="White" />
      </view>
    <node id="001" type="Gantt.CProjects.SummaryNode" rowID="001">
    <dates>
      <date>01.01.2010</date>
      <date>20.01.2010</date>
      </dates>
      </node>
    <node id="002" type="Gantt.CProjects.Node" rowID="002">
    <dates>
      <date>01.01.2010</date>
      <date>10.01.2010</date>
      </dates>
      </node>
    <node id="003" type="Gantt.CProjects.Node" rowID="003">
    <dates>
      <date>11.01.2010</date>
      <date>20.01.2010</date>
      </dates>
      </node>
      </graph>
      </chart>
      </Graph>
      </SAPJNetData>
    Then I run my example application, press standard "Save" button in Gantt chart control.
    After that my XML in context changes, but it's incorrect. There is no <graph> tag at all - this tag should contain all significant parameters of the chart.
    The resulting XML below:
    <?xml version="1.0" encoding="UTF-8" standalone="no"?>
    <SAPJNetData build="9295" date="04-Aug-2010 10:19:13" host="localhost" version="1.1247">
    <Application type="GANTT" version="1.0"/>
    <TypeRepository href="/SAP/BC/WebDynpro/SAP/ZT_INV_WDR_TEST_GANTT/gantPR02P00086_3_tr.xml" version="1.0"/>
    <UserInterface href="/SAP/BC/WebDynpro/SAP/ZT_INV_WDR_TEST_GANTT/gantPR02P00086_3_ui.xml" version="1.0"/>
    <GraphGantt version="1.1247"/>
    </SAPJNetData>
    All the chart in fact has completely disappeared. There is nothing left but file header.
    The question: How to get XML with all user changes back from the Gantt chart control?

    Long time, hah..
    Anyways thanks to behave like a responsible person on SCN and taking care of your threads..
    Liked.

  • User Change Password

    User Password changes:
    Ex. Custom Oracle FORM Button Trigger to force DB change Password.
    -- Force an alter user statement to the database.
    -- sys.verify_password function will verify.
    Cmd_Line := 'Alter user "'||:CHANGE_PWD.USER_NAME||
    '" identified by "'||:CHANGE_PWD.VERIFY_PWD||'"';
    FORMS_DDL(cmd_line);
    IF NOT Form_Success THEN
    NOTE(DBMS_ERROR_TEXT); -- display Ora error message
    raise Form_Trigger_Failure;
    END IF;
    Ex. Customize SYS.Verify_Password function sample to return an Error MSG.
    Set for user in Profile, enforces password change syntax rules.
    -- Check for a no space
    isspace:=FALSE;
    FOR j IN 1..m LOOP
    IF substr(PASSWORD_VAR,j,1) = ' ' THEN
    isspace := TRUE;
    GOTO endsearch4;
    END IF;
    END LOOP;
    <<endsearch4>>
    IF (isspace = TRUE) THEN
    raise_application_error(-20003, 'Password cannot contain spaces');
    END IF;

    ...So what is the question???

  • Can user change charge account on a PR/PO if the destination type is 'Inventory'?

    Hi all,
    Can user change the charge account on a PR or PO if the destination type is 'Inventory'? Thanks a lot.
    Regards
    Leo

    Hi Leo,
    Creating Expense Items as Inventory Items should not be ideally recommended to the Customer. If you want to establish tracking of material following process does well
    a) Create an Expense Sub Inventory with Tracking Enabled for Storage of Expense Items
    b) Define all Item Codes for Expense Items
    c) Receive these items in the Expense Tracked Sub Inventory
    d) Use Misc. Issue / Account Alias issue to map material consumption.
    If you follow above steps, you would be able to utilize flexibility of Expense A/C rules for creating a Charge A/C based on Item Category which suits your need.
    To answer your question, you can't update the material a/c both in PR and PO for an Inventory Item, as its defaulted from Org Definition.

  • Address of the user changed updated into sap but still not reflecting at

    address of the user changed updated into sap but still srm shopping has the old
    address .
    what could be the possible reasons of this bug?

    Hi
    Which SRM version are you using ? <b>We encountered the Same Issue long time back -></b>
    Are you updating the Addresses in Web Transaction or using SAP GUI (SU01 transaction) ?
    <b><u>Please go through the following SAP OSS Notes below, which will definitely help -></u></b>
    Note 930371 - SRM 5.0: BBPUM01 Check Data
    <u>Related Notes</u>
    Note 931556 - SRM 5.0: Hiding the BBPUM01/BBPUM02 button
    Note 923461 - SRM 5.0: BBPUM01 description for position
    Note 885954 - SRM-UME: User synchronization with wrong address data
    Note 884067 - BPartner w/o an private address can't change their settings
    <u>Do let me know.</u>
    Regards
    - Atul

  • Error saving user changes with amclientsdk 6.3

    We have an application that was originally developed for the JES2 stack that handles creation and maintenance of users for our portal environment. We are running Access Manager 7.1 in Legacy Mode and per suggestions from people on this forum we are using the AMClientSDK 6.3 code.
    The main change that we had to make to the code to get it running was to replace the createSSOToken(userID, password) method of getting our connections with the AuthContext methodology. This has been completed without any problems. However, we are now having the following problem when trying to create users.
    As a bit of background, the application first creates the user entry with just the userID and name information that is required by the directory. Once that is complete it goes back in and does an update on that user with the rest of their registration information.
    public boolean save() throws EGatewayException {
    try {
    logger.debug("User entry has changed is: " + dirty);
    if (dirty) {
         logger.debug("We need to store the updates for the user...preparing to call store()...");
                             _amUser.store();
                             logger.debug("Back from storing user changes...set dirty flag to false.");
                             dirty = false;
                             if (logger.isDebugEnabled()) {
                                  logger.debug("User " + _amUser.getDN() + " saved.");
                             return true;
                        } else {
                             logger.debug("Dirty flag is " + dirty + "but we'll store anyways...");
                             _amUser.store();
                             // Not sufficient time to test removing this line!
                             logger.debug("No values actually changed. Saving anyway.");
                             return false;
                   } catch (Exception e) {
                        if (e instanceof AMException) {
                             String code = ((AMException) e).getErrorCode();
                             logger.debug("AMException error code is: " + ((AMException) e).getErrorCode());
                             if (code.equals("452")) {
                                  logger.debug("Error 452. Must be a password problem");
                                  throw new EGatewayPasswordException(
                                       logger,
                                       "Error 452. Must be a password problem",
                                       e);
                        throw new EGatewayException(
                             logger,
                             "Error saving user " + getDn(),
                             e);
    When the update occurs we see the following error in the logs.
    [6/28/07 12:13:13:001 EDT] 00000041 SystemOut O 2007-06-28 12:13:13,001 com.bcbsm.common.egateway.DirectoryConnection AMException error code is: 1000
    [6/28/07 12:13:13:041 EDT] 00000041 SystemOut O 2007-06-28 12:13:13,032 com.bcbsm.common.egateway.DirectoryConnection Error saving user uid=joanof2,ou=People,o=Members,dc=bcbsm,dc=com: New Generic Exception
    com.iplanet.am.sdk.AMException: New Generic Exception
    at com.iplanet.am.sdk.remote.DirectoryManager.setAttributes(DirectoryManager.java:1063)
    at com.iplanet.am.sdk.AMDirectoryManager.setAttributes(AMDirectoryManager.java:601)
    at com.iplanet.am.sdk.AMCacheManager.setAttributes(AMCacheManager.java:868)
    at com.iplanet.am.sdk.AMObjectImpl.store(AMObjectImpl.java:1737)
    at com.iplanet.am.sdk.AMObjectImpl.store(AMObjectImpl.java:1677)
    at com.bcbsm.common.egateway.DirectoryConnection$User.save(DirectoryConnection.java:1481)
    at com.bcbsm.egateway.data.MemberConnection.updateMember(MemberConnection.java:267)
    at com.bcbsm.egateway.data.MemberConnection.createMember(MemberConnection.java:99)
    at com.bcbsm.egateway.data.ActualDirectory.createMember(ActualDirectory.java:108)
    at com.bcbsm.egateway.struts.AccountCreationAction.createAccount(AccountCreationAction.java:168)
    at com.bcbsm.egateway.struts.AccountCreationAction.doExecute(AccountCreationAction.java:85)
    at com.bcbsm.egateway.struts.BaseAction.execute(BaseAction.java:112)
    Any insight or assistance is appreciated.
    Thank you.

    Is the agent app user id in the AMConfig.properties amadmin or a user who belongs to the top level admin role?

  • Et_validate doesn't fire if user changes value and presses update button

    I am maintaining a flag for "dirty" records in a potentially large number of rows in a matrix. To set this flag I check for the et_Validate event and ItemChanged = true. This works fine if the user changes a value and then presses tab to leave the field.
    My problem is that et_Validate does not fire if the user changes a field's value and then presses the update button.
    It's like the screenpainter where if you change a field's value and then select a different field before pressing tab your change isn't saved.
    I suppose I could always send a tab keypress or automatically update the current row but I'm wondering how others handle this.
    I am currently using SBO2005A SP1 PL11.

    Additional info:
    If I change a matrix cell and click on the update/ok button then the ItemEvent.row = -1 and the active item is still the matrix. If I force a "click" in a field on the first row then the et_validate fires otherwise it does not.
    Does anyone have any other ideas on forcing et_Validate to fire when the user clicks on a button?

  • Found out when user change something

    Hi - Regarding our UI pattern button "Save" initially is disabled - and is activated only when user changes something in form view (change something in InputField or TextEdit UI)
    Is it possible in WD to find out this event?
    In InputField there is event OnEnter - but this not enough - user may pass the fields with TAB sequence and event is not triggered.

    Well, I guess it's impossible. You need some action to force propagating data from client to server. And in your case there is nothing -- focus traverse events are not supported.
    The only way is to enable "Save" action and skip unecessary updates in action handler.
    VS

  • User Change Log - "Defaults" Tab

    I know that via SU01 you can run RSUSR100 to see the user changes logs.  The issue we're having is that a user has changed their printer (Output Device) and we're trying to determine who changed it and when.  Is there a change log for this information?  We'd also like to have change log information for the User Parameters data as well.
    Does any know if this information is contained in any table, change log, report, etc.?

    Hello Bernard,
    The following has been extracted from help.sap.com which has explained the objects for archiving change documents.
    User master records and authorizations are stored in the USR* tables. You can reduce the amount of space that these take up in the database by using the archiving function. Change documents are stored in the USH* tables. The archiving function deletes change documents that are no longer required from the USR* tables.
    You can archive the following change documents relating to user master records and authorizations from the USH* tables:
    ●      Changes to authorizations (archiving object US_AUTH)
    ●      Changes to authorization profiles (archiving object US_PROF)
    ●      Changes to the authorizations assigned to a user (archiving object US_USER)
    ●      Changes to a useru2019s password or to defaults stored in the user master record (archiving object US_PASS)
    The last point also mentions changes to "defaults" stored in the user master record which makes me think that they may be getting stored in one of the tables.

  • How to capture the user change in an input field on a selection screen?

    I am coding a selection screen in which there are two input fields. The first field takes a Unix directory from the user input. Based on the input value, the second field will be populated with a the name of a file under the corresponding directory.
    My question is how I can make the program capture the user input without having to make the user press ENTER after they enter the value in the first field?
    Any help will be greatly appreciated.

    Venkat,
    Actually you led me to the real solution! It's the function module DYNP_VALUES_READ that does the trick for me. This function enables the program to capture dynamic user changes without recourse to PAI. Please refer to the code below:
    REPORT   zreiabsintf MESSAGE-ID zreiabsintfmc.
    *<HGDC------------------------------------------------------------------
    *  Selection screen for the conversion program
    *HGDC>------------------------------------------------------------------
    SELECTION-SCREEN BEGIN OF BLOCK input WITH FRAME TITLE text-001.
    PARAMETERS: p_indir   LIKE epsf-epsdirnam OBLIGATORY,                   " Inbound file directory
                p_infile  LIKE epsf-epsfilnam DEFAULT gc_infile OBLIGATORY, " Inbound file name
    SELECTION-SCREEN END OF BLOCK input.
    *<HGDC------------------------------------------------------------------
    *   Displays a file-open dialog when the user clicks the search
    *   help button next to the inbound file text field. The user
    *   can select the inbound file visually.
    *HGDC>------------------------------------------------------------------
    AT SELECTION-SCREEN ON VALUE-REQUEST FOR p_infile.
    * Capture any user change to the directory.
      PERFORM check_dir_change.
    * Display the file open dialog
      PERFORM file_open_dialog CHANGING p_infile.
    *<HGDC------------------------------------------------------------------
    * Global constants
    *HGDC>------------------------------------------------------------------
    CONSTANTS:
        gc_indir  LIKE epsf-epsdirnam
                  VALUE '/interfaces/<SID>/inbound/',      " Default inbound directory template
        gc_infile LIKE epsf-epsfilnam VALUE 'input'.       " Default inbound file name
    *<HGDC------------------------------------------------------------------
    * Global data
    *HGDC>------------------------------------------------------------------
    DATA:
        gs_dynpfields   TYPE dynpread,                        " Fields of the current screen
         gt_dynpfields   LIKE STANDARD TABLE OF gs_dynpfields. " Table of the screen fields
    *&      Form  file_open_dialog
    *       Opens a dialog window for the user to choose a file in
    *       the specified Unix directory.
    *      <--P_FILE is the file to be selected.
    FORM file_open_dialog  CHANGING p_file.
    * Validate the directory.
      OPEN DATASET p_indir FOR INPUT IN BINARY MODE.
      IF sy-subrc NE 0.
        MESSAGE i001(zreiabsintfmc) WITH p_indir.    " Unable to open the given directory
        EXIT.
      ENDIF.
      CLOSE DATASET p_indir.
    * Call the dialog window to open a file in the directory.
      CALL FUNCTION '/SAPDMC/LSM_F4_SERVER_FILE'
        EXPORTING
          directory        = p_indir
        IMPORTING
          serverfile       = p_file
        EXCEPTIONS
          canceled_by_user = 1
          OTHERS           = 2.
      IF sy-subrc NE 0.
        MESSAGE i002(zreiabsintfmc).                 " Failed to open the file.
        EXIT.
      ENDIF.
    ENDFORM.                    " file_open_dialog
    *&      Form  check_dir_change
    *       text
    *  -->  p1        text
    *  <--  p2        text
    FORM check_dir_change .
      CLEAR gs_dynpfields.
      CLEAR gt_dynpfields.
      gs_dynpfields-fieldname = 'P_INDIR'.
      gs_dynpfields-fieldvalue = p_indir.
      APPEND gs_dynpfields TO gt_dynpfields.
      CALL FUNCTION 'DYNP_VALUES_READ'
        EXPORTING
          dyname               = sy-repid
          dynumb               = sy-dynnr
        TABLES
          dynpfields           = gt_dynpfields
        EXCEPTIONS
          invalid_abapworkarea = 1
          invalid_dynprofield  = 2
          invalid_dynproname   = 3
          invalid_dynpronummer = 4
          invalid_request      = 5
          no_fielddescription  = 6
          invalid_parameter    = 7
          undefind_error       = 8
          double_conversion    = 9
          stepl_not_found      = 10
          OTHERS               = 11.
      IF sy-subrc  NE 0.
    * MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
    *         WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
      ENDIF.
      READ TABLE gt_dynpfields INTO gs_dynpfields INDEX 1.
      p_indir = gs_dynpfields-fieldvalue.
    ENDFORM.                    " check_dir_change
    Thanks for all your answers! The problem is now solved.
    Edited by: Ning Hu on Apr 9, 2008 11:32 AM
    Edited by: Ning Hu on Apr 9, 2008 11:34 AM

  • In base component when user change the serial number we need to set date time in Extra attribute filed

    HI Team,
    In ibase component when user change the serial number we need to set date time in Extra attribute filed..if we click edit ,User change serial number after save we need to set date time in  Extra Attribute 4 field .
    Component - PRDGENSET
    In this component there is no attributes,so where we need to implement and how to implement please help.
    Thanks
    kalpana

    Hi Abi,
    Thanks for your reply..see i debugged..i have put break point in method SET_S_STRUCT method if press enter in serial number ,debuggeris triggered..in SET_S_STRUCT method value getting serial number..so how to write the logic here...
    In GET_S_STRUCT method iam getting all attributes  but serial number is not filled..So could you please help here what to do..
    in set_S_STRCUT method value iam gettin serial number...in collection wrapper iam geting zrealtions if i open attributes_ref -if i pass Attribute value in run time its getting displayed.so how to write the logic based on serial  number please help some coding.
    Thanks
    kalpana

  • Errors occured during syncrhonization: Cannot delete the following users...

    Hi
    We are trying to do an Security groups import using LCM, but getting the following errors and the accessing permissions are not updating.
    Errors occured during syncrhonization: [com.hyperion.planning.HspRuntimeException: Cannot delete the following users: [username]., com.hyperion.planning.HspRuntimeException: Cannot delete the following users: [username].
    These users have left the organisation. We've tried removing them manually from the SQL repository, but still the error persists. Can anybody help?
    Cheers

    user964802 wrote:
    Hi
    We are trying to do an Security groups import using LCM, but getting the following errors and the accessing permissions are not updating.
    Errors occured during syncrhonization: [com.hyperion.planning.HspRuntimeException: Cannot delete the following users: [username]., com.hyperion.planning.HspRuntimeException: Cannot delete the following users: [username].
    These users have left the organisation. We've tried removing them manually from the SQL repository, but still the error persists. Can anybody help?
    CheersWhen you say you manually tried to remove the user from the repository what did you do.
    Cheers
    John
    http://john-goodwin.blogspot.com/

Maybe you are looking for