How java will identifies LDAP user groups to admin/normal users -BOXIi3.1

Hi all,
We have successfully implemented Java interface with BOXI3.1.Now our client wants to move to LDAP Configuration in CMC.
If we use LDAP configuration, is java login page will identify the user role(wether user is admin group/normal group).
we have used below API for enterprise authentication:
IEnterpriseSession enterpriseSession;
ISessionMgr sessionMgr = CrystalEnterprise.getSessionMgr();
enterpriseSession = sessionMgr.logon(userID, password, CMS, auth);
auth=<secEnterprise> is it enough to use auth=<secLDAP>
or do we need to add any code/API for this requirement.
Thanks,
Subash

Use secLDAP as the authentication type, and ensure both the CMS and your Java Web App Server machines can connect to the LDAP server.
Sincerely,
Ted Ueda

Similar Messages

How Java connect to LDAP?

Hi guys
Does anybody know how Java connect to LDAP server. Thanks in advance.
Regards,
Mark.

http://www.java-pro.com/code/2000/JP0012.zip is the source code for the December 2000 issue of Java Pro magazine, which had an article about this. Inside you will find JP0012JB.zip which is the source code for working with LDAP. You don't get a copy of the articles in this zip file, only the code.

How to get List of SharePoint Groups to which Current Users belongs using Javascript ?

How to get List of SharePoint Groups to which Current Users belongs using JavaScript? Not JSOM

Here is the code that worked for me:
var userid= _spPageContextInfo.userId;
var requestUri = _spPageContextInfo.webAbsoluteUrl + '/_api/web/CurrentUser/Groups?$select=Id,Title';
alert(requestUri);
var requestHeaders = { "accept" : "application/json;odata=verbose" };
$.ajax({
url : requestUri,
contentType : "application/json;odata=verbose",
headers : requestHeaders,
success : onSuccess,
error : onError
function onSuccess(data, request){
var s='';
for (var i = 0; i < data.d.results.length; i++)
s +=data.d.results[i].Title+'\n';
alert(s);
function onError(error) {
alert("error");

How to get the list of Group set in each Users in MS Active Directory

Hi. I would like to know if you know how to get the set group of each user in Active Directory?
We have this sample code
String INITCTX ="com.sun.jndi.ldap.LdapCtxFactory";
//String MY_HOST = "ldap://myserver/ou=dev,dc=test,dc=com,dc=ph";
String MY_HOST ="ldap://myserver.dev.test.com.ph:389/dc=dev,dc=test,dc=com,dc=ph";
String strUsername,strPassword;
try
     strUsername = Request.getParameter("username").toLowerCase().trim();
     strPassword = Request.getParameter("password").toLowerCase().trim();
     Hashtable env = new Hashtable();
     env.put(Context.INITIAL_CONTEXT_FACTORY, INITCTX);
     env.put(Context.PROVIDER_URL, MY_HOST);
     env.put(Context.SECURITY_AUTHENTICATION, "simple");
     env.put(Context.SECURITY_PRINCIPAL,strUsername+"@dev.lst.com.ph");
     env.put(Context.SECURITY_CREDENTIALS, strPassword);
After validating the User Name and Password the next task is to Retrieve the group list of the User.

Nope I want the log-in user to retrieve its Group where he is belong. I have this following code
strUsername = Request.getParameter("username").toLowerCase().trim()+"@dev.test.com.ph";
strPassword = Request.getParameter("password").toLowerCase().trim();
Hashtable env = new Hashtable();
env.put(Context.INITIAL_CONTEXT_FACTORY, INITCTX);
env.put(Context.PROVIDER_URL, MY_HOST);
env.put(Context.SECURITY_AUTHENTICATION, "simple");
env.put(Context.SECURITY_PRINCIPAL,strUsername);
env.put(Context.SECURITY_CREDENTIALS, strPassword);
// enable tracing
env.put("com.sun.naming.ldap.trace.ber", System.err);
// Create the initial context
DirContext initCtx = new InitialDirContext(env);
// Get the target context
DirContext targetCtx = (DirContext)initCtx.lookup("");
SearchControls constraints = new SearchControls();
constraints.setSearchScope(SearchControls.SUBTREE_SCOPE);
// Perform the search on the target context
NamingEnumeration enum = targetCtx.search("","(userPrincipalName="+strUsername+")",constraints);
javax.naming.directory.Attributes attrs;
NameClassPair item;
String[] attrIds = new String[]{"MemberOf"};
// For each answer found, get its "Groups" attribute
// If relative, resolve it relative to the target context
// If not relative, resolve it relative to the initial context
while (enum.hasMore()) {
item = (NameClassPair)enum.next();
Out.println(item);
attrs = targetCtx.getAttributes(item.getName(), attrIds);
Out.println(attrs + "<br>");
     initCtx.close();
It returns all this string :
{memberof=memberOf: CN=CMCanadaRD,OU=Groups / Teams,DC=dev,DC=test,DC=com,DC=ph, CN=iMngrCanadaRW,OU=Groups / Teams,DC=dev,DC=test,DC=com,DC=ph, CN=Domain Users,CN=Users,DC=dev,DC=test,DC=com,DC=ph, CN=Backup Operators,CN=Builtin,DC=dev,DC=test,DC=com,DC=ph, CN=Administrators,CN=Builtin,DC=dev,DC=test,DC=com,DC=ph}
How can i retrieve the Group named CMCanadaRW and CMCanadaRD on the Attribute?
Thanks

How to check the Sharepoint User group of the current user in infopath

hi,
i have a published infopath form in which there a field ( people and groups). so i am storing the user account name using the GetUserProfilebyName.
below is how i am setting the values of the field EmployeeName(People & Group).
set fields value : DisplayName = Value[Name="PreferredName"]
set fields value : AccountId = Value[Name="AccountName"]
for getting the groups details i created new connection http://servername/_vti_bin/UserGroup.asmx?WSDL and selected GetGroupCollectionFromUser.
i also updated the xsd file.
so how to get the SharePoint Group of the user which i saved to the EmployeeName field ?
Thanks
sal

Hi,
You can set up the User group in the column Groups. But before that you need to create a group using T-code SUGR and assign that group to the user in SU01.
Rgds,
Suman

User Groups and non Developers users

Hi,
two questions.
1) How do I create users groups.
I want to divide specific users to specific groups.
2) I created users not as developer and not as a administrator.
When I logged on with that users I didnt see any of the applications, why?
Thanx.

1. You asked "how do I assign users to that group and later attach the group..." I think your question is not about how to assign users to a group but rather how to attach the group... Use the function wwv_flow_fnd_user_api.user_in_group in an authorization scheme (desc wwv_flow_fnd_user_api). Attach the scheme to a region, button, etc. to control access. Please read about authorization schemes in the user guide and search this forum for "authorization" and "groups" for useful threads.
2. A user account without development privilege will be useful for authenticating to an application you create. It will not be useful for developing any applications in the Application Builder.
Scott

Maximum Number of users in a "User Group" (SU01/Logon data/User Group)

All,
My security person recently approached me with a problem she has regarding user groups. She wants to assign user groups so that way division leaders/designees can handle password resets within their own area. To do this she has started using the "User Group" field in SU01/Logon data.
She's told me the maximum number of users she can add to a "User Group" is 30. Can anyone else confirm this? Is there a setting (profile or otherwise) to increase this limit? Any DSN or outside reading that anyone can refer me to on this matter?
Many thanks....

> There is a little green clip board icon on the bottom right corner...
I only get that after hitting the Authorization data button in SU10 and the the Multiple selection button next to the user. Ow, and it's not green, the upload from textfile button is
By the way, hitting F4 on a user input field in SU10 will also provide you with the possibility to select more than 30 users in one go.
Edited by: Jurjen Heeck on Dec 29, 2009 12:08 PM

Giving an OD Network User/Group local admin rights.

Is there a way to manage workstation admin rights from the server?
I ran into a problem with Lightroom that requires admin privileges to change the program preferences. We have alot of graphic art students with roaming profiles, spread out across 5 labs, that need to make this change. I would like to be able to add a group or all network users to the local admin group, for a few days, so the students can make the changes.

This works on 10.5, not sure about 10.6.
As root on the client.
Upgrading legacy group for local admin group - this is from 10.4 days, not sure if you still need to do it.
dseditgroup -o edit -f n -t group -n /Local/Default admin
Nest OD group in local admin group
dseditgroup -o edit -a DirectoryAdminGroup -t group -n /Local/Default admin
Gen

Copy SQ01 User Group Assignments During New User Creation

When creating a new user (copy-from method), can the SQ03 user group assignments also be copied at this time or must this be maintianed separately?

Hi, As far as I am aware it is separate.

CS6 Suite activation: Admin/normal user + offline use etc.?

Hi All,
I am new to the CS6 suite but heard about all kinds of trouble people can have with activation, so in order to prevent problems I would like to ask in advance:
1) Can I install(+activate?) CS6 under an administrative account and then use CS6 under a standard user account (which does not have administrative rights) ?
2) If I go on vacation and bring my laptop with CS6 with me for about 6 weeks, will I need to be connected to the internet for CS6 to continue to work or will it work if the computer is offline the whole time ?
3) If my laptop gets stolen what happens with my activated software - can I deactive it ?
4) Can I install the CS6 suite on both my workstation and my laptop ?
Thanks,
Morten

Yes. Obviously during your scan of my message you missed "Yes I did have CS5 error 16 and yes adding the normal user to the two folders resolved it. Does not resolve CS6 error 16."
Yes it is a configuration error.
I've read both of of the feeds referred to (and several others) and they were not helpful to resolving the CS6 config error 16, though they did fix CS5 config error 16.
However, applying that logic to the whole, I have verified that it is definitely is fixable with changes to permissions. I can invoke the error condition and relieve it at will simply by adding my user (r/w) to the adobe folder in application support and cascading it down to the enclosed items. Clearly there is/are folder(s) beyond the already identified "Adobe PCD" and "Adobe Store" that need the r/w privileges for the particular user of the CS6 version of the software.
To restate: I've temporarily provided relief by adding my normal user account read and write to the whole of the adobe folder in /Library/application support and clicking "apply to enclosed items".
I would label this a permissions hack and feel that I have a security vulnerability now.
Knowing which folders exactly need that permission would be the ideal situation.
Please advise.

Checking the User is from Admin or User interface

Hi All,
A workflow (say create user wf), which can be accessed from both Admin and User interface.
My requiremnt is, I need to develop a workflow, when this create user workflow will trigger, I need to determine whether this process has started from the Admin or User interface and also need to determine the User who has started this workflow.
Hope you guys understand my question.
has anybody done this before.
Any ideas please.
Thanks

Here is a field in the Tabbed User Form that checks that login app is in the Admin interface.
<Field name='_FM_VIEW_SECURITY'>
<Display class='EditForm'>
<Property name='help' value='_FM_VIEW_SECURITY_DESCRIPTION'/>
</Display>
<Disable>
<neq>
<ref>loginApp</ref>
<s>Administrator Interface</s>
</neq>
</Disable>
<FieldRef name='ViewSecurityContent'>
<Property name='noHeader' value='true'/>
</FieldRef>
</Field>

How java will support the doc files

I am doing a project where the back up word files are to be displayed on the browser . If it is a text file we can give it as a input stream and if it is a image , it will take it as a .jpg . Then how the .doc can be inputed(I want the MS-word files to be inputed) .I have to do it in jsp.
If u have a solution please mail it to
E-mail ID : [email protected]

That's right ! Don't bother fiddling with the constantly changing MS formats, use RTF instead. MS changes the file format with every new version of Office, so that all users get compelled to buy the new version in order to be able to read what the others have written.

Local User Group pointing to Domain users group

Is there a specific terminology in the active directory area for having local groups that contains domain groups? want to find more information on this technique so i can understand/learn more about it.

> Is there a specific terminology in the active directory area for having
> local groups that contains domain groups? want to find more information
Maybe you are thinking of AGDLP (or AGGUDLP)?
http://en.wikipedia.org/wiki/AGDLP
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

How to create user in specific user group in Microsoft Active Directory ?

Hi,
I am using Nestcape LDAP, and want to create user in the user defined group. I have created a new user group "TestUsers" in the "Users" container of Active Directory, I want to add the new user to Test Users group But my problem is that whenever I create a new user
it get added to Domain Users group.
Following is the code I am using which adds user to default group Domain Users.
public LDAPResult createUserID(
String userId,
String pwd,
String pId,
boolean resetonLogOn,
LDAPConnection ldCon) {
boolean flag = false;
int code=0;
try {
String pwdLastSetVal;
String desName;
String desc;
/* Specify the DN of the new entry. */
String dn =
"CN=" + userId + ",CN=" + this.container + "," + this.baseDN; // container = "Users"
/* Create and add attributes to the attribute set. */
String objectclass_values[] =
{ "top", "person", "organizationalPerson", "user" };
// LDAPEntry findEntry=null;
/* Create a new attribute set for the entry. */
LDAPAttributeSet attrs = new LDAPAttributeSet();
/* Attribute sAMAccountName */
LDAPAttribute attr = new LDAPAttribute(LDAP_SAM_KEY, userId);
attrs.add(attr);
/* Attribute unicodePwd */ // LDAP_PASSWORD_KEY = "unicodePwd"
attr =
new LDAPAttribute(
LDAP_PASSWORD_KEY,
(byte[]) this.encodePassword(pwd));
attrs.add(attr);
/* Attribute Display Name */
desName = userId + ":" + pId;
//desName = userId ;
attr = new LDAPAttribute(LDAP_DIS_NAME_KEY, desName);
attrs.add(attr);
/** Attribute userAccountControl to enable the userid.
attr = new LDAPAttribute(LDAP_ACCOUNT_KEY, LDAP_ACCOUNT_EN_VAL); // LDAP_ACCOUNT_EN_VAL= "548"
attrs.add(attr);
/* Attribute pwdLastSet to reset the password on first logon*/
if (resetonLogOn == true) {
pwdLastSetVal = "0";
} else {
pwdLastSetVal = "-1";
attr = new LDAPAttribute(LDAP_RESET_KEY, pwdLastSetVal);
attrs.add(attr);
/* Attribute Description */
desc = " Account Created by HelpNow App";
attr = new LDAPAttribute(LDAP_DESC_KEY, desc);
attrs.add(attr);
/* Attribute objectclass */
attr = new LDAPAttribute("objectclass", objectclass_values);
attrs.add(attr);
/* Create an entry with this DN and these attributes . */
LDAPEntry myEntry = new LDAPEntry(dn, attrs);
/* Add the entry to the directory. */
ldCon.add(myEntry);
flag = true;
}catch (LDAPException e) {
flag = false;
code=e.getLDAPResultCode();
}catch (Exception e) {
flag = false;
code=LDAPException.OTHER;
}finally {
ldaprs.flag=flag;
ldaprs.code=code;
return ldaprs;
}

Refer to the post titled "JNDI, Active Directory and Group Memberships" available at http://forum.java.sun.com/thread.jspa?threadID=581444&tstart=150

Controlling visibility of an iView based on User groups...how ?

Hi SDNs,
I am trying to achive a functionality like:
There is Page with 3 iViews A,B & C and that Page is assigned to some role R.
And there are 2 user groups X & Y and i will assign that Role R to both the user groups.
But the User group X should be able to see only iViews A & B, where as user group should Y should be able to all A,B & C iViews.
I thought of proceeding like controlling Permissions at the iView level for the groups X & Y, but i couldn't do that because i don't know how to do
Can any one suggest a best solution for achieving this kind of functionality ?
Thanks,
Trikanth

Hi All,
I just told example as A,B & C, actually i have more than 100 iViews and pages where i need to get this kind of functionality.
So i can't go with creating different pages for each group.
Thanks,
Trikanth

How java will identifies LDAP user groups to admin/normal users -BOXIi3.1

Similar Messages

Maybe you are looking for