GUEST user issue in the workflow

Some of our users want to have the GUEST user profile option enabled to check the Workflow notifications so that they
don't have to login to approve the workflow notifications but they can be able
to approve notifications from the link they receive in the workflow email
notifications.
Everything looks ok but some custom workflows are unable to retrieve the details of the persons who approve or reject the notifications. It
returns the approver as GUEST and the rejector as GUEST.
Is there anyway we can remove the link which says "Please Click here to respond" from specific
workflows in the email notifiication?
Is there anyway to retrieve the approvers or the rejectors username or email address even though the GUEST user is enabled?
Please advice.
Thank You
--Pavan K

You can change it :
1) Login to Oracle Applications
2) Select Workflow Administrator Web Application responsibility
3) Then select Workflow Manager
4) Then Notification Mailer
Now edit the Notification Mailer Component's parameters. On 4th or 5th page , you will see some template configuration.
Open Mail Template : OPEN_MAIL ( "Workflow Open Mail (Templated)" )
Bounce Workflow Mailer Service and check it.

Similar Messages

Why can I not disable the guest user in the 10.8.2 update? I have never enabled the guest user, but after the update, it was automatically enabled with a "managed" tag. It is not selectable even after entering my admin password to unlock the options.

Why can I not disable the guest user in the 10.8.2 update? I have never enabled the guest user, but after the update, it was automatically enabled with a "managed" tag. It is not selectable even after entering my admin password to unlock the options. I was able to select the account under "parental controls", but again, could not delete it. Why Apple? Why?!!????

SOLVED Ok. I actually was able to disable it. I had to actually log in as the guest user to make it accessible in the preference window. Then I disabled it and logged out. Apologies if this was obvious for some people, but I have had some sort of issue with something every update since Snow Leopard.

Remove open workitem from user inbox after the workflow starts again.

I have heard that there is a possibility to remove a open workitem from the user inbox, after the workflow starts again for the same object (data update), via a termiantion event. I have searched in the sap workflow dokumentation but i could not find out how to use this. Could somebody provide me some detailed documentation or examples how to use this for my problem?
Thanks,
Steve

Hi Sudhir,
the workitem which should terminate is a decision task with two results. The wolkflow looks as follows:
Activity: Read Data
Decision: Approval Check Decision
Activities: Approve or Reject
How should it look like in your opinion with the termination? How looks this option to terminate this workitem? The workitem should terminate automatically from the userinbox if the workflow starts again for the same object (with updated data).
Thanks,
Steve
Edited by: Steve Malack on Mar 13, 2008 10:20 AM

How do you delete a guest user account from the users&groups pane?

could anyone help with giving a tip on how to delete a guest user account from the users&groups pane in os-x 10.7 ? when I unlock account the delete or minus button is inactive. Thankyou

aha, by disabling the find my mac checkbox in icloud seems to work. tusen takk previous threaders!!!!!!!!!!

Guest users issue??

Hello,
I am expieriencing a weird behavior in the WLAN for guest users.
I can create tipical guest users and it redirects me to the sign in web page (there is no web auth server, it's done by the WLC itself) and it works normally. But I am having several domain users getting logged with their domain username and passwords eventhough they are not registered as guestusers.
How can I avoid this situation?
Thanks in advance!

Hello,
What you are seeing may be due in fact to the WLAN's usage of the Radius servers from the global list, even if not directly specified under the WLAN's configuration:
Radius Servers
Authentication................................ Global Servers
Accounting.................................... Global Servers
A very quick test to confirm this would be to uncheck the option "Network User" for all the Radius servers, under
SECURITY > RADIUS > Authentication
WLC 4.2 was not yet allowing to select which method to use to authenticate web auth users (local, Radius, or LDAP).
Starting from later versions such as 6.0 we have further features that allow us to do that (see attached screenshot).
In your case, on the Radius server, you may want to filter Radius access-requests coming from users connecting through the SSID "visitas".
In ACS 4.2 for example, this can be done through NAPs:
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/NAPs.html#wp1128143
In the Radius access-request, the WLC is including the following attributes (among others):
Called-Station-Id: this should come in the form of "WLC mac:BSSID:SSID name)
Airespace-WLAN-Id: this is the index of the WLAN through which the user is connecting
So you could build a NAP in ACS that checks whether the Radius attribute Airespace-WLAN-Id has the same index as the "visitas" SSID (or the Called-Station-Id contains the string "visitas") and, if so, fail the authentication.
Hope this helps,
Fede
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

My MBP is stuck in Guest User mode and the taskbar is unresponsive. None of the keyboard shortcuts are working either. What do I do?

After an automatic update last night that updated my recent Lion to 10.7.2 w iCloud a new guest user account appeared at the login screen. The login screen wasn't responding so I clicked on both user accounts. As luck would have it the guest account logged in and now Im stuck there at the safari window that won't load. It's just stuck at a guest login information screen. It isn't even connecting to the internet. The mouse moves but it won't click on anything. And despite restarting the comp a few times it opens up back at the same screen. I think that's Lions built in autorecovery mechanism that won't let it go back to the beginning. I've already tried rebooting holding command-r. that isnt working either.
Any suggestions?

i have a dvd stuck in my superdrive, so in an attempt to get it out, I tried clicking on the guest account listed at startup. now i have an additional problem, i can't logout of the guest account. i can only get access to my profile by safe booting (holding shift on booting). if i boot normally, it automatically goes back into the guest account, which has no accessibility. i can't even use the "shut down" or "restart" options.
HELP!
- Neal

Allowing Airwatch MDM access to the Captive-Portal guest users in pre-auth role for android and BB?

Requirement:
How to allow Airwatch MDM access to the Captive-Portal guest users in pre-authentication role for Android and Blackberry devices?
What is Airwatch MDM?
Airwatch MDM is Mobile Device Management. The Airwatch is an enterprise which helps to manage and secure data traveling through the mobile devices like Laptops, Tablets, Android, iPhones, iPads etc.
Solution:
Why we need to allow access to Airwatch MDM?
The network administrator can force the guest users to register to Airwatch MDM before they get authenticated and access the internet. So that the network administrator could manage the guest devices through Airwatch Management tool. This can be achieved by CPPM server. To download the Airwatch MDM app and register with the Airwatch MDM server certain domains should be permitted in the captive portal pre-authentication role. This KB provides the configuration steps to allow the guest users to download the Airwatch MDM app and register with the Airwatch MDM server.
Configuration:
Below is the configuration
Configuration steps:
1. Create the following netdestinations
netdestination Airwatch
name *.awagent.com
name *.awmdm.com
name air-watch.com
netdestination Google-Play
name android.clients.google.com
name .ggpht.com
name gstatic.com
name accounts.google.com
name clients1.google.com
name clients2.google.com
name clients3.google.com
name clients4.google.com
name i.ytimg.com
name google-analytics.com
name .1e100.net
name android.l.google.com
name mtalk.google.com
name clients.l.google.com
name googleapis.com
name gvt1.com
netdestination BlackBerry
name *.blackberry.com
2. Now define the rules in the session acl and map it to the pre-authentication Role of the captive portal.
ip access-list session Airwatch_Access
any   alias Airwatch svc-http permit
any   alias Airwatch svc-https permit
ip access-list session Google-Play-Store
               any   alias Google-Play any permit
ip access-list session BlackBerry-Access
               any   alias BlackBerry any permit
3. Now map the session ACLs to captive-portal pre-authentication Role as follows
user-role Guest-Pre-Auth-Role
access-list session Airwatch_Access
access-list session Google-Play-Store
access-list session BlackBerry-Access
access-list session logon-control
access-list session captiveportal
4. Now whitelist the list of domain names in the Captive Portal profle
aaa authentication captive-portal Airwatch-Captive-Portal-Profile
white-list Airwatch
white-list Google-Play                                                                                ------------>Netdestinations where you defined the Domains.
white-list BlackBerry
Verification
Now the user will be placed under the "Guest-Pre-Auth-Role" before the authentication. The user can now go the Google Play-Store or BlackBerry Appworld to download the Airwatch MDM and register to Airwatch Management Server.

Thanks so much getting these names listed out. I have been working on this very issue for a few weeks and was basing my firewall rules on IP's. It was not going well. Now access is working and testing can commence!  Thanks,Chris

Want to change the alias for guest user

Hi All,
I am creating one application in portal where i am displaying the guest user as default but for displaying guest user i have to hit the https://portal-dev.freescale.net/irj/portal/anonymou URL.
Is there any way to load the guest user by hiting the https://portal-dev.freescale.net/irj/portal url and then on click of Sign In link i want to load the default login page ?.
Thanks in Advance
Regards,
Rahul

Hi Rahul,
I thought that they explain that at the very end of that document? You want users to be able to use the /irj/portal url right?
Maybe I am not understanding you correctly.
BRgds,
Simon
p.s. if you want to change the portal url, this [wiki entry|https://wiki.sdn.sap.com/wiki/display/EP/Change%2BPortal%2BURL] is useful.

Substituting WF-BATCH user in PO creation Workflow

Experts,
Looking for a bit of guidance on an issue that has been hanging around a while, and no one seems to be able to assist.
Here is the scenario: Purchasing P Req's are created, and workflow routes them to the appropriate releaser(s) for approval. The approver releases the P Req to be converted to a PO. This is where things start going wrong. We are looking to output the PO in an email (PDF) format to SCOT. This in itself isn't a problem, except that the workflow user WF-BATCH also creates emails for IS-U customers in a RAW format with the text in the body of the email. Including a PDF format within the node then converts the IS-U emails to PDF, which is out of the question. We have tried every(?) conceivable option within the INT node to accommodate both options within the same node.
Trying a different approach I have created another node under INT called 'SMTP', with the thought of routing the PO outputs to this using a user substitution in the workflow in association with OSS Note 311633, which effectively points the users output to the appropriate node via a PID.
I guess the 2 questions I have are:
1. Have I missed anything in the standard SCOT setup that could be utilised, and;
2. If the answer to 1 is 'No', whether my proposed 'solution' is achievable.
Many thanks in advance,
Paul...
Message was edited by: Paul Brown

Hi Sudhir,
the release is done with the BAPI function
BAPI_REQUISITION_RELEASE_GEN
Some of these BAPI's do offer an import element, saying "USER", where you can overwrite the current user with another one's ID, to avoid having the background user as the last change of the object.
In this case, this option is not available, so to say, there's nothing that can be fixed.
The solution to set and overwrite the release step with another user id, is exactly to change the change documents. So you've already found what you were looking for.
Best wishes,
Florin

Wireless guest users are getting limited connectivity.

Could anyone help please, I have a wireless guest solution consist of :
WLC located internal in the network – all the AP are associated with that WLC-.
Anchor WLC located in the DMZ . the guest SSID are tunneled from the internal WLC to the Anchor WLC, the DHCP service for guest users is on the Anchor WLC.
NAC guest server to authenticate the guest users.
The solution was working properly but now we have a problem that if any one tried to connect to the guest SSID if he is authorized or not , the user will get IP address from the DHCP pool and now as you know most of people has smart phones and they try to get internet access. Now only 5 or 6 people authenticated with NAC gest server and the DHCP pool become full because too many people tried to connect even they do not authenticate.
so if any user trys to cnnect he will not get IP address from the anchor controller and getting limited connectivity.
if I add static IP address on my Laptop , I will be redirected to the authentication page and can access normally.
I am working in big environment 7,000 users so I can’t go with increasing the DHCP pool because the problem will not be solved.
I hope if anyone can help in this case.
Thanks in advance.

This is a pitfall and raising the eyebrows.. currently we do not have anyother option other than using a WPA-PSK + WEB AUTH
that is..
PSK will block the users to just grab an IP and sit!! , if the user enters a valid PSK, he will get the IP address and followed by the Web auth process!! this may help u as of now.. or just a work around.. to overcome the IP exhaustion..
Please rasie a PER with your accounts team to raise the severity on this issue if u have the contract n all with us!!
Please dont forget to rate the usefull posts!!
Regards
Surendra

Cisco WCS guest user expires after few days

1) Hardware we are using:
WCS version 6.0.196.
WLC version 6.0
2) Configuration steps we carried out:
We have created guest user using Lobby admin account having for accessing WLC which we are having in network. it works fine for some days but after that we have observed the particular guest user account status showing expired on WCS. Wanted to mention we have used Unlimited tab for life time while creating guest user account. The Account life time for guest user at the point of configuration was showing ( status -- Active, Account Lifetime -- Never Expire)
The document we followed.
http://www.cisco.com/en/US/docs/wireless/wcs/6.0/configuration/guide/6_0manag.html#wp1086189
3) Problem we are facing.
After some days(we are not sure about how many days) the guest users account shows "Expired"
4) Requirement.
Configuration of particular user with account life time as never exipre.
Regards,
Pramod.

During the point of problem from WCS logs I observed the "Guestuser Service" is giving problem, below is the error. The detailed log is attached herewith.
14:11:39.488 ERROR[general] [24] [GuestUserService] User does not belong to group 'Lobby Ambassador' or defaults are not set COMMON-11,LobbyAmbDefaults
The issue is associated with mentioned bug
CSCti79856
Symptom:
WCS deletes the Guest User Template when trying to de-provision it from a controller. Instead of deleting the guest user from the selected controllers, the user is removed from all controllers and the template deleted from WCS.
Conditions:
Using the delete functionality on the Guest User Template Page
After upgrading WCS version from 6.0.196.0 to 7.0.172.0 issue was resolved. Thanks..

Cisco Guest Server_Restrict Guest users

Hi,
Is it possible to control or put restrictions in guest server for guest users. My NAC deployment is in OOB mode. I want to restric and do posture validation.
Can some1 help me??
Nitesh

Dear Nitesh,
What is the exact issue you have with integrating NGS with the NAC Manager?
The procedure to configure this is described on the NGS Config guide:
http://www.cisco.com/en/US/docs/security/nac/guestserver/configuration_guide/20/g_nac_intg.html
You basically need to specify the NAC Manager details (address, credentials and default role) on the NGS, so that the Guest Server can add/remove the guest users from the NAC Manager DB.
You should also configure the NGS as a RADIUS accounting server on the NAC Manager, so you can collect info about the Guest user sessions on the NGS side.
I hope this helps.
Regards,
Federico
If this answers your question please mark the question as "answered" and rate it, so other users can easily find it.

Failed to load configuration file for the workflow

There are two of us who have full control on our Sharepoint 2013 site. I'm able to create workflows and publish them fine. The other user is able to create workflows, but he gets an error when trying to run them. I tried opening his workflow and got
the error "Failed to load configuration file for the workflow."
Any ideas?

Hi Carltonw1,
Based on your description, I recommend to verify the things below:
Clear the SharePoint Designer cache and then open the workflow.
Ask the user to open the workflow in SharePoint Designer and check if the workflow contains error.
Ask the user to create the same workflow and associated with another list to see how it works.
Check the ULS log for more detailed error message.
To reproduce this issue, could you please provide the detailed steps in the workflow for further research?
Thanks,
Victoria
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Victoria Xia
TechNet Community Support

With Timed Access List on, Guest users cannot access Guest network.

I have a ABS with 7.5 version. In the Timed Access window i have default set to "no access". Then, all the computers that are allowed access to the main network are on the list. Then i have the main network hidden. My guest network is broadcasting but when a user tries to connect to it, they get a "Unable to connect". If I change the default access in Timed Access to "Everyday", users are then able to connect to the Guest network again.
Obviously, this is a bug. I don't want people accessing the main network that aren't on the timed access list. However, I still want guest users to access the Guest Network.
It looks to me that the Timed Access window is controlling the restriction of the Guest and Main network, when it should only be controlling the Main only.
Hopefully, apple has noted this issue and will be fixed on the new update. If other people are experiencing this problem, Please let me know.
-Ghost

Apple just updated the airport to 7.5.1. But there is still a problem with the the guest network not allowing access. If the "Unlimited" is set to "No Access" in the access list it prevents anybody from accessing the guest network. It should only deny your Main wireless Network.
In other words, the Access List is controlling the access for both wireless networks(Guest and Main network)
Either apple needs to create two Access Lists, One for Main network, and One for guest network. Or just have to option to choose which Network you want to restrict leaving the second one open for all.
-Ghost

Guest user has become "guest1"

We use networked Macs in a lab setting so we use the userid/password login screen rather than the "click the icons" screen. It turns out that on (at least) one Mac, the short userid for the "Guest" account has become "guest1" (guest followed by the number one).
If we momentarily arrange login so that we can click on the "Guest" icon, it works fine (and creates a "guest1" home directory). To log in using the userid/password pane, though, we have to magically know to use userid "guest1" (with no password), instead of the more intuitive "guest".
I'm suspecting that somehow the "guest" userid got wedged and the Mac helpfully moved on and created a "guest1" account.
How can we restore things so that there's a "guest" account, instead of "guest1"?

Dean,
You are correct: the "Guest" account got auto-bumped into the name "Guest1" because of a pre-existing name conflict. Back when I was running Tiger, I created a homemade "Guest" account. When I upped it to Leopard and activated the built in Guest account, I also had "Guest1". During my attempts to set things right, Leopard created *yet another* account, so I had Guest (from Tiger), Guest1 (from Leopard upgrade), and Guest2! An important thing to note here is that the default UID:GID of the auto-created account should always be 201:201.
I just did this successfully but a few minutes ago, and I remembered your thread's high position during my google search.
Here's what to do:
1) Identify each node in your network which has a Guest1 account. If you don't know this already, you can test each computer with the following commands:
$ /usr/bin/dscl . list /Users | grep -i guest
$ /usr/bin/id Guest
$ /usr/bin/id Guest1
(dscl is the replacement for NetInfo util of previous OS X releases)
2) Turn off the guest user functionality in the System Preferences > Accounts panel.
3) Delete and archive the user-created Guest accounts using the System Preferences > Accounts panel. If you were truly using these as disposable guest accounts, then you really shouldn't have any data worth saving. Also, if the guest account was a member of any weird groups--which a true guest account shouldn't have to be--we'll get to that in a later step. Heaven forbid that any daemons or jobs ran off these guest accounts! Also, I moved the archived .dmg file from /Users/Deleted Users directory as an extra-paranoid step.
4) Delete ALL "Guest-anything" accounts on afflicted nodes (Guest1)
# /usr/bin/sudo /usr/bin/dscl . delete /Users/Guest1
Now your system should have no guest accounts at all, and you should get a blank result from running the above command again:
$ /usr/bin/dscl . list /Users | grep -i guest
5) Restart the computer. Perhaps this is an unnecessary habit of my days as a Windows admin, but just do it, please--I think there was some issue where OS X was still seeing the old name.
6) Enable the Guest account using System Preferences > Accounts panel. Because there are no accounts named "Guest" on the system, the new account will be built and named correctly!
7) Now for some cleanup. Here is an excellent article from the good folks at O'Reilly:
http://www.oreillynet.com/mac/blog/2006/04/deletingmac_os_x_usersremote.html
Not all of the article is applicable here since we're only killing a guest account, but it's sure good for learnin'! Anyway, here's the quick bash loop I wrote to tell me which groups have what users:
$ for xxx in $(/usr/bin/dscl . list /Groups); do echo -n "$xxx : " ; /usr/bin/dscl . read /Groups/$xxx GroupMembership; done | grep -v "No such key:"
Depending on how old your machine is, you might find some remnants of long gone accounts!
Well, that's it. I hope this completely answers your question. I'd like to know either way if I've helped you fully, or if my instructions were somehow wrong. I merely banged out the instructions from memory, this reply is my documentation! And if you already figured this out a better way since your initial posting, I'd like to know how you did it, too.
Thanks!
Foster Lee

GUEST user issue in the workflow

Similar Messages

Maybe you are looking for