How can I provision users to SAP CUA with their passwords Disabled?

I need to provision users to SAP CUA with their passwords disabled. How can I configure this if at all?
Thanks!

Thanks for the quick response. I am confirming with SAP team if its permission issue.
Following is the snippet from JBOSS log:
2009-04-14 11:06:26,659 INFO [STDOUT] Running SAP CUA Create User
2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] createUser(): Create User Request
2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] createUser(): userId :00000209, userGroup:,lastName:Employee 209,firstName:Last Name - 209,userTitle:0003,langComm:,department:,langLogIn:,timeZone:,telephone:,extension:,Fax:,email:,dateFormat:,decimalNotation:,function:,roomNo:,floor:,building:,code:,commType:,alias:,startMenu:,userType:,RoleProfile:,RoleProfileOption:Role
2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] SAP CUA Create Connection Request
2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] createCUAConnection(): START SAP Connection creation.
2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] createCUAConnection(): SAP Connection creation successfull.
2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] getStatus() :returnStructure:User 00000209 does not exist
2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] getStatus() :Type:I
2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:124
2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] findUser(): User not exist in SAP CUA
2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] createUser(): Create User Start
2009-04-14 11:06:29,487 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :User 00000209 created
2009-04-14 11:06:29,487 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2009-04-14 11:06:29,487 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:102
2009-04-14 11:06:29,487 INFO [XL_INTG.SAPCUA] addRoleToUser():Add Role to User
2009-04-14 11:06:29,753 INFO [XL_INTG.SAPCUA] getChildData() :getUserRoles method is Started
2009-04-14 11:06:29,800 INFO [XL_INTG.SAPCUA] getUserRoles() :getUserRoles method End
2009-04-14 11:06:30,128 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] Running RemoverTask
2009-04-14 11:06:30,128 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, PassivatedCount=0
2009-04-14 11:06:30,128 DEBUG [org.jboss.ejb.plugins.AbstractInstanceCache] removePassivated, now=1239725190128, maxLifeAfterPassivation=1200000
2009-04-14 11:06:30,128 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, done
2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Role assignment to user 00000209 changed
2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:048
2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] Role added successfully to the user.
2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] changePassword(): Change Password Start
2009-04-14 11:06:31,284 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Password Not Allowed
2009-04-14 11:06:31,284 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:E
2009-04-14 11:06:31,284 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:001
2009-04-14 11:06:31,284 DEBUG [XL_INTG.SAPCUA] changePassword(): chanegPassword eventPassword Not Allowed
2009-04-14 11:06:31,284 ERROR [XL_INTG.SAPCUA] changePassword():Change Password Error:Password Not Allowed
2009-04-14 11:06:31,284 ERROR [XL_INTG.SAPCUA] createUser():ChangePassword error after user creation:SAP.PASSWORD_CHANGE_ERROR
2009-04-14 11:06:31,284 ERROR [XL_INTG.SAPCUA] createUser():Deleting the User
2009-04-14 11:06:31,284 INFO [XL_INTG.SAPCUA] deleteUser(): Delete User Start
2009-04-14 11:06:32,222 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] Running RemoverTask
2009-04-14 11:06:32,222 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, PassivatedCount=0
2009-04-14 11:06:32,222 DEBUG [org.jboss.ejb.plugins.AbstractInstanceCache] removePassivated, now=1239725192222, maxLifeAfterPassivation=1200000
2009-04-14 11:06:32,222 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, done
2009-04-14 11:06:34,769 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] Running RemoverTask
2009-04-14 11:06:34,769 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, PassivatedCount=0
2009-04-14 11:06:34,769 DEBUG [org.jboss.ejb.plugins.AbstractInstanceCache] removePassivated, now=1239725194769, maxLifeAfterPassivation=1200000
2009-04-14 11:06:34,769 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, done
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Role assignment to user 00000209 deleted
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:090
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Role assignment to user 00000209 deleted
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:090
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Role assignment to user 00000209 deleted
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:090
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] deleteUser(): User deleted SUCCESSFUL
2009-04-14 11:06:43,863 DEBUG [XL_INTG.SAPCUA] createUser(): 00000209:SAP.USER_CREATION_FAILED
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] closeCUAConnection(): START SAP Connection Close.
2009-04-14 11:06:43,878 INFO [XL_INTG.SAPCUA] closeCUAConnection(): SAP Connection Close successfull.
2009-04-14 11:06:43,925 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] Running RemoverTask
2009-04-14 11:06:43,925 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, PassivatedCount=0
2009-04-14 11:06:43,925 DEBUG [org.jboss.ejb.plugins.AbstractInstanceCache] removePassivated, now=1239725203925, maxLifeAfterPassivation=1200000
2009-04-14 11:06:43,925 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, done
2009-04-14 11:06:44,878 INFO [STDOUT] Running SAP CUA ADD ROLE
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] addRoleToUser() :Add Role
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] SAP CUA Create Connection Request
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] createCUAConnection(): START SAP Connection creation.
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] createCUAConnection(): SAP Connection creation successfull.
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] getStatus() :returnStructure:User 00000209 does not exist
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] getStatus() :Type:I
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:124
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] findUser(): User not exist in SAP CUA
2009-04-14 11:06:44,878 ERROR [XL_INTG.SAPCUA] addRoleToUser() :User Id :00000209 not exist in target SAP system.
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] closeCUAConnection(): START SAP Connection Close.
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] closeCUAConnection(): SAP Connection Close successfull.

Similar Messages

How can I install attachments for SAP notes with zip-files ???

How can I install attachments for SAP notes with zip-files ???

Can you elaborate on your question? How exactly is your question related to SAP NetWeaver Portal: Application Integration? If you are really asking how to install attachments contained in SAP notes, there is no automatic/general way and you should ask your question in the Software Support and Maintenance space to begin with. What SAP note(s) are you looking at installing?

HT201303 how can i make my photo be entered with a password

how can i make my photo be entered with a password

Photo? You cannot separately password protect a photo.
You can password protect your iPhone at Settings > General > Touch ID & Passcode

How can OIM provision users with same Display Name in AD?

I can create users with same First Name, Middle Name and Last Name (same Display Name) in OIM if they have different UserId.
But I can not provision two users with same Display Name to one Organization Unit in AD, the resource provisioning shows
Status: Rejected
Response: AD user already exists
Can AD be configured to create users with same Display Name (different UserId) in one OU, or would I have to create logic in OIM to modify the display name so it gets accepted by AD?
Thanks!

Thanks Nitesh. Also, I can create the user with same DN in different OU's, not in same OU.
I agree once we determine that same cn exists in one OU , I can modify the display name by appending a number at the end or something. I understand the logic but I need more details on how to specify this logic in the pre-pop adapter, can you please share more details.
Thanks a lot!

They did not get my itune gift card in email. It is not very user friendly to get to a place where I can resend to them. How can I get a new email sent with their gift? It was for Christmas

I bought an itune gift card but my sister never received her email. I can not easily find where to resend. I did send an email for help but this is just not very 'slick' or user friendly. How can I get her itune CHRISTMAS gift card re-sent?

Having the same issue. My bank account has already been charged, but I can't find the purchase anywhere in my Apple account history to retrieve a code, and my son still has not received an email. This is not cool. I'm beginning to understand why so many people dislike the company.

And why is it suddenly in english ? I startet from a german installation. How can i protect one E-Mail account with a password may be the office part and give

may be in the office with a password, and give the other free for the rest of the users without password, the master password didn't help here I mean, or the handling for this is not clear to see for me

There is no full or partial password protection that is really more than an inconvenience.
You could however use the operating system permissions, but again whole application would be the result.
I have heard of updates occasionally reverting to English, an install will set it back. http://www.mozilla.org/en-US/thunderbird/all.html as data and program are separate reinstalling will not be an issue.

How can l block users from backing dating transactions

1. How can l block users from back dating transactions in SAP B1. It was discovered that, in production dept there is this allowance given to them to keep producing for the previous month in the new month; this according to line staff is to enable them meet up their monthly target, after a meeting with the management it was resolved to block that right of backdation of enteries. how can l correct this.
2. How can l change the decimal places backward in the general settings of administration of SAP B1( iniatially it was set to be 5 under Quantity now want to correct it to 3 how do l go about this).
Joel

Joel,
By forum rule, one question for one thread. I will answer you the second: If you are using 2007 version, the option to decrease decimal place is not available. Check this thread to know more:
Re: REDUCE NUMBER OF DECIMAL PLACES
Also note: this forum is just for B1 system administration. Please post it on the main forum.
Thanks,
Gordon

How to delete a user in SAP-CPS Version 7.0

Hello,
I created my users via UME ( User Management Engine of Java Application server). Unfortunately I used the wrong name convention, so I had to recreate all the users in UME. Afterwards I delete all wrong users in UME.
Than I tried to login with my new user in SAP-CPS (users are normally created in SAP-CPS during first login) but I get the error message that I reached the maximum number of 10 users allowed in the basic version. No problem I thougt, I simply delete the wrong ones in SAP-CPS. But I do not know how to delete a user! I could not find any menu item or any describtion in the manualls how to delete an user in SAP-CPS.
I remove the users from any Isolation group, I disabled all the users but still I could not find any way to delete them.
Has any body a hint for mor.
Kind regards
Frank Morleo

Hello Anton,
deactivating the unused users made it possible to login with the new ones.
Thanks for your help.
Now I have to find out how to clear the deactivated users from the list.
Regards
Frank

How can you use iMessage between 3 iPads with 3 different users but only one Apple ID?

how can you use iMessage between 3 iPads with 3 different users but only one Apple ID?

No you do not need separate Apple ID's in order to use 3 devices with one Apple ID. I use 4 devices to Message and FaceTime and all use the same Apple ID. You do need to add additional email addresses for the other devices.
Look at this very informative video for the instructions.
http://macmost.com/setting-up-multiple-ios-devices-for-messages-and-facetime.htm l

How can i restrict user to access database object (procedure) or JSP

Hi
I have 9ias infrastructure 902, on win2k box with 9i DB.
and I have one PL/SQL web application and another J2EE application both are hosted by 9ias 902.
Now we are looking forward to couple both with SSO.
I have deloyed samples of both and works fine.
Each application have different set of users, i mean there is no common user.
How can i restrict user not to view the web page which is not authorised to them.
as far as i understand from the Grocery demo is pick the role (which is a string only) from OID and programaticall apply security via if else endif construct.
can any one through light upto my concern.
regards
[email protected]

Hey Mary
No i haven't try to do that via pl/sql....
as the our application is j2ee app... deployed in oc4j.. with sso and ldap....
still finding to do so....
what i have realized that LDAP is just to store user information in inverted tree... and one have to build separated access security mechnisum that will be applicable to j2ee system....
thanx...
samir....

Can't Provision user from OIM to AD (manaul provis

can't Provision user from OIM to AD (manual provisioning ) failed with Error
the following is connector server log
==========================================
DateTime=2012-07-18T08:39:32.8713100Z
ConnectorServer.exe Error: 0 : System.ArgumentNullException: Value cannot be null.
Parameter name: Parameter 'uid' must not be null.
at Org.IdentityConnectors.Common.Assertions.NullCheck(Object o, String param)
at Org.IdentityConnectors.Framework.Impl.Api.Local.Operations.UpdateImpl.ValidateInput(ObjectClass objclass, Uid uid, ICollection`1 attrs, Boolean isDelta) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\ApiLocalOperations.cs:line 1568
at Org.IdentityConnectors.Framework.Impl.Api.Local.Operations.UpdateImpl.Update(ObjectClass objclass, Uid uid, ICollection`1 replaceAttributes, OperationOptions options) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\ApiLocalOperations.cs:line 1365
at Org.IdentityConnectors.Framework.Impl.Api.Local.Operations.ConnectorAPIOperationRunnerProxy.Invoke(Object proxy, MethodInfo method, Object[] args) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\ApiLocalOperations.cs:line 244
at ___proxy1.Update(ObjectClass , Uid , ICollection`1 , OperationOptions )
at Org.IdentityConnectors.Framework.Impl.Server.ConnectionProcessor.ProcessOperationRequest(OperationRequest request) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\Server.cs:line 609
DateTime=2012-07-18T08:39:37.8558126Z
1- iam using OIM 11.1.1.5 / applied patch p13704894_111150
2- this the target system LDAP on Windows Server 2008 R2 Entrprise version 6.1(7601) , Service Pack 1
3- and the connector server and connector version , activedirectory-11.1.1.5.0 , Connector_Server_111150
i noticed that for any user i create on OIM objectGUID is 0 , i can read groups and organizations from LDAP with no errors
please support

This issue is coming because your object guid is not getting synchronized properly. Login to design console and open AD User form. Go to pre-populate tab. Open prepop adapter for User Principal name. Here bydefault IT resource name passed is Active Directory whereas you should have your IT server name which I think bydefault is AD Server. In the Mapto section select Process data and qualifier field will have AD server. Click on save button. Save your form.
Retry your test case now. This will resolve your problem.
regards,
GP

How can I use User-Defined Aggregate Functions in Timesten 11? such as ODCI

Hi
we are using Timesten 11 version and as per the documentation, it doesn't support User-Defined Aggregate Functions.
So we are looking for alternatives to do it. Could you please provide your expert voice on this.
Thanks a lot.
As the following:
create or replace type strcat_type as object (
cat_string varchar2(32767),
static function ODCIAggregateInitialize(cs_ctx In Out strcat_type) return number,
member function ODCIAggregateIterate(self In Out strcat_type,value in varchar2) return number,
member function ODCIAggregateMerge(self In Out strcat_type,ctx2 In Out strcat_type) return number,
member function ODCIAggregateTerminate(self In Out strcat_type,returnValue Out varchar2,flags in number) return
number
How can I use User-Defined Aggregate Functions in Timesten 11? such as ODCIAggregateInitialize ?

Dear user6258915,
You absolutely right, TimesTen doesnt support object types (http://docs.oracle.com/cd/E13085_01/doc/timesten.1121/e13076/plsqldiffs.htm) and User-Defined Aggregate Functions.
Is it crucial for your application? Could you rewrite this functionality by using standart SQL or PL/SQL?
Best regards,
Gennady

How can all the users in my computer (my kids) have access to all the photos I have in I Photo?

How can all the users in my computer (my kids) have access to all the photos I have in I Photo? My photos only appear when I (the administrator) log into the computer. I want my kids to be able to access them also.

For iPhoto 09 (version 8.0.2) and later:
What you mean by 'share'.
If you want the other user to be able to see the pics, but not add to, change or alter your library, then enable Sharing in your iPhoto (Preferences -> Sharing), leave iPhoto running and use Fast User Switching to open the other account. In that account, enable 'Look For Shared Libraries'. Your Library will appear in the other source pane.
Any user can drag a pic from the Shared Library to their own in the iPhoto Window.
Remember iPhoto must be running in both accounts for this to work.
If you want the other user to have the same access to the library as you: to be able to add, edit, organise, keyword etc.
Quit iPhoto in both accounts. Move the Library to the Users / Shared Folder
(You can also use an external HD set to ignore permissions, a Disk Image or even partition your Hard Disk.)
In each account in turn: Double click on the Library to open it. (You may be asked to repair the Library Permissions.) From that point on, this will be the default library location. Both accounts will have full access to the library, in fact, both accounts will 'own' it.
However, there is a catch with this system and it is a significant one. iPhoto is not a multi-user app., it does not have the code to negotiate two users simultaneously writing to the database, and trying will cause db corruption. So only one user at a time, and back up, back up back up.

How can I deny user input file name (JFileChooser )

in a common JFileChooser.
when user open it, how can it deny user to input in filename field?

just try this
JFileChooser chooser = new JFileChooser();
int option = chooser.showOpenDialog(this);
if( option == JFileChooser.APPROVE_OPTION) { }
change the if little bit to suit yr purpose
or if not try
getAccessibleContext() this method may deal the situation
although i have not tried it......
i m also trying .........
the onw who gets it earlier notifies other...
is it fine
rgds

How can i get ical invitations to work with outlook users?

how can i get ical invitations to work with outlook users?
I can send ical meeting invitations but outlook users are having problems having the meeting show up in their calendar….

My Epson is able to do scans using Image Capture without any problems at all.
Allan

How can I provision users to SAP CUA with their passwords Disabled?

Similar Messages

Maybe you are looking for