How to grant access to sharepoint for the user from different Domain
Hi All
I need to grant access to user from different domain.
Where I can able to view the users in people picker (different domain).
Thanks in Advance.
Raj
Hi
Trevor Seward
Sorry to disturb
you again.
I am trying to restrict user from search from other domain, say we have domain A and Domain B, where I am trying to restrict all the user from domain B (Search users)for a site collection. I have found couple of stsadmin command to do so. but none
of them works. Below are the commands I have tried
STSADM.exe -o setproperty -pn peoplepicker-searchadforests -pv "domain:<Name>.domain" -url "http://Site URL"
stsadm -o setproperty -pn peoplepicker-searchadcustomquery -pv “(canonicalName=<Name>.domain*)” -url "Site URL"
we have two way trust.
Can you suggest any solution.
Thanks
Raj
Similar Messages
-
TS1389 how to authorize computer in itunes for the purchased from another account
how to authorize computer in itunes for the purchased from another account ??
Use that account's Apple ID and password; the procedure is otherwise the same as authorizing it for the first account. If the iTunes library contains protected content from more than five iTunes Store accounts, you may not be able to fully sync it.
(92807) -
How can I make comments Editable for the users?
Good day,
How to give edit rights for the user to edit his comment?
If anyone can point me to a tutorial on how to do this or even give me a few tips, would be greatly appreciated!.
ThanksI think we need a bit more information. Most importantly:
#1 Edit comments where?
#2 What technologies are you using? (PHP, Cold Fusion, etc)
#3 A link to actual site would be most helpful
Brad -
KM Search: How can I define a query for the user who currently logged on?
Hello,
I want to use the KM Search iView to display all documents from the currently logged on user in a certain sort order. The result should be some kind of report for the user...
In the search option I can define a default sort order. And I can also define it for a special user with cm_modifiedby(value=username)
But how can I define the predefined property value generically for the current user?
I tried to insert following values in the parameter Predefined Properties of the search option:
Predefined Properties (csv): cm_modifiedby(value=<user.id>)
Predefined Properties (csv): cm_modifiedby(value=%user.id%) -> like in the predefined properties
Predefined Properties (csv): cm_modifiedby(value=$sap_user) -> like in the xml forms builder
But non of these 3 parameters worked. Has anybody an idea what the right variable is?
Thanks a lot.
Best regards
NicoleHi Nicole,
1. First of all you need to use "<User.UserID>" to get the currently logged on user.
2. You need to create an AppIntegrator iView (so based on com.sap.portal.appintegrator.sap.Generic) in order to be able to use this dynamical parameter. The parameter "URL template" should look like:
<Request.Protocol>://<Request.Server>/irj/servlet/prt/portal/prtroot/com.sap.km.cm.basicsearch?layoutSetMode=exclusive&ResourceListType=com.sapportals.wcm.SearchResultList&SearchType=quick&rndLayoutSet=SearchResultLayoutSet&SearchCompsName=UISearchComponents&QueryString=*&SelectedCustomProps=cm_modifiedby(value=<User.UserID>)
Best regards,
Robert -
How to construct table in jsp for the resultset from helper class
Hi Dudes!!!
Want to construct table in jsp for the resultset, but the resultset are retrieved at the helper class.I constructed Table in Helper class Using StringBuffer and return it as string from the helper class.Is their any other feasible and efficient way to construct table in Jsp for the resultset from Helper class.Solution will be highly appreciated.Thanx in Advance.no, we can't.
Certainly noone can with such vague specifications even if they had the intent to do so.
"the computer", which computer?
"attach to our current page", what is meant by that?
And noone should ever help you if you're planning to breach security anywhere. -
Grant access to users from different Domains
Hi,
Recently my company was merged with another. All users from my company are setup in our Domain (DomainA). Sharepoint is able to see the users in this domain and grant access to the users as well. When the merger happened, we created a Group (Test - Sharepoint)
in our AD to add groups from other companie's domain:DomainB, totally different Forest. There is a two way trust setup between these domains. The group Test-Sharepoint is "domain local" and it is able to see the groups/users from other domain: DomainB.
The other users are now able to access our sharepoint environment once access is granted to DomainA\Test-Sharepoint.
Problem came when we applied Audience targetting around few web parts. The users from DomainB who are added as object in DomainA\Test-Sharepoint (group in DomainA) are not able to see the web parts that have audience targeting for this group. Someone
suggested that AD groups should be Global or Universal but that is not our case. Most of the groups in our AD are domain local and SP is able to see the users within it.
Please suggest how we can resolve audience targeting issue?
Regards, Kapil ***Please mark answer as Helpful or Answered after consideration***My apologies, yes that is correct you'll have to use Domain Local in this case. http://technet.microsoft.com/en-us/library/cc755692(v=WS.10).aspx
Actually what you'll need to do is not use Groups in your domain at all, as the users are Foreign Security Principals. Instead, use a group in the trusted domain, or attributes of the users you intend to target directly.
Trevor Seward
Follow or contact me at...
  
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs. -
How to restrict access to views for some users in the app?
Hi SDN!
I have an WD application wich embedded in the portal. Appication has 2 iViews (and 2 pages respectively). These iViews consist several views connected with each other (e.g. one view provide list data, second view is add/edit form for this data). I need to restrict access for some users for view with add/edit form. I can't make separate page for this view.
What I've done:
1) create yet another UIContainer for this view in main window and embed view to this container. It was be done for create separate iView for form.
2) in the portal I create iView for this form but don't embedd in any page.
When I try to call my form from list data (that is one iView from another) I get exception:
<b>com.sap.tc.webdynpro.services.exceptions.WDRuntimeException: duplicate usage of view .MyCarRentalAddCity</b>
Is there a way to get needed functional?
Thanks,
LevHi,
do you need to remove the IView from the portal menu or do you just want to make a View container in your WD application invisible if the user doesn't have the rights to see it.
If so, you could create your own roles on the app server:
You need to create a new class that extends NamePermission like:
import com.sap.security.api.permissions.NamePermission;
public class ApplicationAccessPermission extends NamePermission {
* @param name
public ApplicationAccessPermission(String name) {
super(name);
* @param name
* @param action
public ApplicationAccessPermission(String name, String action) {
super(name, action);
Also, you have to create an Action.XML file that looks like this:
<BUSINESSSERVICE
NAME="com.vendor.administration">
<DESCRIPTION
LOCALE="en"
VALUE="actions view usage"/>
<ACTION
NAME="View Permission">
<DESCRIPTION
LOCALE="en"
VALUE="Show view"
/>
<PERMISSION
CLASS="com.vendor.utilities.ApplicationAccessPermission"
NAME="ShowView"
/>
</ACTION>
</BUSINESSSERVICE>
If you have created these to files in your packages, you can access this function like:
IUser user ;
try {
user = WDClientUser.getCurrentUser().getSAPUser();
if(user.hasPermission(new ApplicationAccessPermission("Show view"))){
wdContext.currentV_UIElement().setViewVisibility(WDVisibility.VISIBLE);
}else{
wdContext.currentV_UIElement().setViewVisibility(WDVisibility.NONE);
}catch (WDUMException e1) {
wdContext.currentV_UIElement().setViewVisibility(WDVisibility.NONE);
e1.printStacktrace();
You have to bind the ViewVisibility attribute of the context to the View Container you want to hide.
The applicationAccessPermission you defined in the XML File will be visible in the UME Manager of you J2EE engine. With this action you can create a new role and group that you can map to the users that should see you view.
But, the exception you get is because you have embedded one view twice, which is not possible.
Hope this helps.
Regards,
Dennis -
How to grant create table privilege for a user on a specific table
Hi:
I created a user, for a test scenario. I granted this user create any table, and I made the default tablespace as example.
When I connect as the user and try to create a table, I get this:
SQL> create table T1 (NAME varchar2 (500), AGE number(2));
create table T1 (NAME varchar2 (500), AGE number(2))
ERROR at line 1:
ORA-01950: no privileges on tablespace 'EXAMPLE'
How can I grant the necessary privilege to have user create/delete tables on tablespace example?
Thanks.
DAcreate user ADAM identified by radge default tablespace EXAMPLE
quota 10M on EXAMPLE;
for example 10Mbytes given to Example tablespace.... or you can write:
.....quota unlimited on EXAMPLE
and
grant connect to ADAM
grant create table to ADAM .....
or
grant connect , resource to ADAM .... although grant resource is not recommended...
....and something else....
you should define temporary tablespace in create user command... otherwise the system would be used...
Greetings...
Sim
Message was edited by:
sgalaxy -
[SOLVED]change default access creation rights for the users
Hi!
When a user creating folders or files it will allow full access to all users who are in the same group.
How can I make the changes to be default instead of using chmod always?
Last edited by Andy_Crowd (2014-06-11 14:47:29)Here is an example with some entries from my smb.conf
security = share
guest account = windowstools
[WT]
path = /home/Windows/Win-tools
public = yes
writeable = yes
create mask = 0000
guest ok = yes
browseable = yes
read only = no
Windows XP is connected to my Linux share. I want be able to create folders and have access within Linux and Windows with rwx rights for the group. For now files created from Windows getting default rights 755 (rwx,xr,xr).
windowstools:andy = is XP username/group
andy:andy = Arch Linux username/group
Windows XP is full updated (got problem once with connection to samba after update, got wait until next updates will come -.- , when new windows updates came XP could be connected to samba again, was a bug as I hoped).
I am starting/restarting samba with script like
#!/bin/bash
systemctl stop smbd
sleep 2
systemctl status smbd | head -1
systemctl status smbd | grep 'Active:' | awk -F')' '{print $1}' | sed 's/(//m'
systemctl stop nmbd
sleep 1
systemctl status nmbd | head -1
systemctl status nmbd | grep 'Active:' | awk -F')' '{print $1}' | sed 's/(//m'
systemctl start smbd
sleep 2
systemctl status smbd | head -1
systemctl status smbd | grep 'Active:' | awk -F')' '{print $1}' | sed 's/(//m'
systemctl start nmbd
sleep 1
systemctl status nmbd | head -1
systemctl status nmbd | grep 'Active:' | awk -F')' '{print $1}' | sed 's/(//m'
and not automatically on boot.
Windows XP is running in VMware Player on the same PC with Arch Linux.
Last edited by Andy_Crowd (2014-06-11 12:42:52) -
How to set up 2 agreements for the same From,To,DocType,Version in B2B11g
Hi
I am having an issue in configuring more than one agreement for the same DocType, Version, From and To partner in Oracle B2B11g.
When I click "Valid" button on the second agreement it errors out saying duplicate agreement is found for the same DocType, Version, From and TO partners.
Is there any mechanism to over ride this?
We need to have multiple agreements created for the same To Partner, From Partner, Doc Type and Version. Otherwise we will end up creating multiple partners which is a real pain.
Multiple agreements are required because we have to set up different Interchange and Group IDs for each transaction.
-Sriharish.
Edited by: 840696 on Mar 1, 2011 7:30 AMYou can not have two agreements for same From TP,To TP,DocType & DocType revision combination in B2B 11g.
Multiple agreements are required because we have to set up different Interchange and Group IDs for each transactionIs this requirement for outbound or inbound? You may send Internal Properties from back-end to override envelope parameters in Oracle B2B in case of outbound -
B2B 11G Outbound EDI Envelope Override
http://www.b2bgurus.com/2008/09/internal-properties-in-oracle-b2b.html (this blog is for 10g, so read concept only, not settings)
In case of Inbound, TP identification can be done on the basis of exchange, interchage, group. So if any of this can be same then you may have single agreement. Make sure to enable property "Functional Ack Internal Properties" on B2B console (Administration --> Configuration)-
http://download.oracle.com/docs/cd/E17904_01/integration.1111/e10229/bb_config.htm#CEGEADFJ
Regards,
Anuj -
I need a how to on Security in WLC for the users
OK, I need to actually make my unsecured wireless network secure. Where do I even begin? What I would love to happen is that it is invisible to the user but with about 1000 laptops we don't have time to do mac addresses etc. I have heard that what is wanted in our environment is WPA with at least 128 bit encrypt. To tell you the truth I've been running wireless wide open in our school buildings for a couple years now. With 4500 built in "hackers" on the wired network I cant' imagine what locking down the wireless will help with unless someone can reach it in the parking lot.
thanks for any help
GaryWe own the laptops. I would rather no one could get in at all. Is there a way to push out some kind of key with group policy? I would also like ldap authentication so they have to use our network username and password etc.
thanks
Gary (my login is william because cisco mucked up somehow my other account) -
How to get list of groups and the users from OID
Hi,
Can someone please tell me how to get the list of GROUPS and all the USERS in each group in OID using Java. Need to recursively get all the Groups and Users in each group using Java any samples.
Thanksuse examples from OTN like
http://www.oracle.com/technology/sample_code/products/jdev/readmes/samples/ldapdatacontrol/ldapapplication/src/dc/ldap/model/LDAPSearch.java
and modify it to your needs
Bernhard -
Planning for global service from different domain
Hi....
This is JEWEL from Bangladesh. I am very new in TechNet forum, so my advance apology if I have any improper language representation.
I am working in a telecommunication company which on of the operating companies of largest Asian telco. company. Under this Asian telco. group there other telecom operators around Asia region with having different-isolated domain and Microsoft services (AD,
Exchange, SharePoint, Lync, ADRMS etc.) in each. Now the group wants enrich the communication beyond the barrier of separated architecture while considering small scale change in solution. For example, we want to have global address book in each operator around
Asia and also want have the office communication among each other telco. of the group (MS Lync), want to have document/library management through SharePoint service etc.
I need help how to plan and move ahead for seamless and successful roll-out/deployment of the above requirement.
Thanks with regards,
JewelFollowing are some of the general suggestions which should give you some clues
> we want to have global address book in each operator around Asia
http://forums.msexchange.org/m_1800433276/mpage_1/key_/tm.htm
> also want have the office communication among each other telco. of the group (MS Lync)
http://social.technet.microsoft.com/Forums/lync/en-US/c2df50fa-6d96-4ef7-be29-ba259d7e301a/2domains2forests-2seperate-lync-servers-federation-and-edge-switch-question
> want to have document/library management through SharePoint service etc.
http://social.technet.microsoft.com/Forums/sharepoint/en-US/20ab9c73-ab38-47d0-a791-8f9004fbe1a4/move-sharepoint-farm-servers-to-another-ad-domain
For Exchange, Lync and Sharepoint, there are dedicated forums... please post your application specific question there
Lync 2010 and OCS - Planning and Deployment: http://social.technet.microsoft.com/Forums/lync/en-US/home?forum=ocsplanningdeployment
SharePoint 2010 - General Discussions and Questions: http://social.technet.microsoft.com/Forums/sharepoint/en-US/home?forum=sharepointgeneralprevious
Exchange 2010 Setup, Deployment, Updates, and Migration: http://social.technet.microsoft.com/Forums/exchange/en-US/home?forum=exchangesvrdeploylegacy
Regards, Santosh
I do not represent the organisation I work for, all the opinions expressed here, are my own and posted AS IS. -
How do I access Itunes radio for the first time?
It does not show up on my toolbar in itunes or the drop down music bar. I have the latest version of Itunes. I have restarted itunes and my computer but neither worked. I am using a macbook with IOS 7.
first of all ios 7 doesnt go on macbooks. on ipads it does. your ipad has to be ios 7 to have radio. check in settings- general- about - version to tell ios version
on ipad click orange music tab not itunes store. the radio is on lower left corner
if your on a computer you need lion or higher see this article
http://support.apple.com/kb/HT5848
About iTunes Radio
iTunes Radio is available for free on all devices and computers with iOS 7 or OS X Lion v10.7 or later, iTunes 11.1, or Apple TV 6.0 or later installed. iTunes Radio streams radio stations directly to your device or computer. You'll have access to more than 250 DJ-curated and genre-focused stations. iTunes Radio is U.S. only.
Peace, Clyde -
How to create a foreign key for the table from two different tables?
Hi All,
I have a three table like below. In the below table SAMPLE_CONS_CHECK and SAMPLE_CONS2_CHECK will be having the primary key for NAME column. The same SAMPLE_CONS3_CHECK table also having the primary key for NAME column and forieign key for SAMPLE_CONS_CHECK and SAMPLE_CONS2_CHECK tables. See the below code 2
code 1:
CREATE TABLE SAMPLE_CONS_CHECK
(NAME VARCHAR2(10),
SERIES VARCHAR2(5)
CREATE TABLE SAMPLE_CONS2_CHECK
(NAME VARCHAR2(5),
MODEL NUMBER
CREATE TABLE SAMPLE_CONS3_CHECK
(NAME VARCHAR2(5),
MODEL_NO NUMBER
)code 2
alter table SAMPLE_CONS_CHECK
add constraint SAMPLE_CONS_CHECK_pk primary key (NAME)
alter table SAMPLE_CONS2_CHECK
add constraint SAMPLE_CONS2_CHECK_pk primary key (NAME)
alter table SAMPLE_CONS3_CHECK
add constraint SAMPLE_CONS3_CHECK_pk primary key (NAME)
ALTER TABLE SAMPLE_CONS3_CHECK ADD
CONSTRAINT SAMPLE_CONS3_CHECK_FK1 FOREIGN KEY
NAME
) REFERENCES SAMPLE_CONS_CHECK
NAME
) ON DELETE CASCADE;
ALTER TABLE SAMPLE_CONS3_CHECK ADD
CONSTRAINT SAMPLE_CONS3_CHECK_FK2 FOREIGN KEY
NAME
) REFERENCES SAMPLE_CONS2_CHECK
NAME
) ON DELETE CASCADE;From the above schenario i am able to insert the data to SAMPLE_CONS3_CHECK table. But the parent data is already available in the parent table. The problem is here two different constarints from two different tables. While inserting, it is checking from both the tables whether the parent is exist or not.
How can i solve this problem? Can anyone halp me about this?
Thanks
Edited by: orasuriya on Aug 8, 2009 2:02 AMActually the design is completely incorrect.
What you say is
I have
'foo', 'foo series'
'foo','foo model'
'foo',666
By virtue of table3 referring to both table1 and table2.
This means you actually need to have 1 (one) table:
'foo','foo series','foo model', 666
And the 'problem' disappears.
Sybrand Bakker
Senior Oracle DBA
Maybe you are looking for
-
Creating a PDF from Autocad on a company network drive
Hi, I'm running Windows 7, Adobe X, and Autocad 2012. when I first got my machine I had no problems at all creating PDF's. Now out of no where i'm not able to create them anywhere but my computers hard drive and wont allow me to print on a network d
-
Documentation of function module
Hi All, How to create documentation of function module while creating function module Pl tell me step by step process Helpfule answer will definatly rewarded Regards Shashikant
-
E7 file transfer problem in Windows 7
Hi, I have trouble transferring files in Explorer in WIndows 7. When trying to copy a video file to the mass storage Video folder in the phone the copy fails every time. When using another machine with Windows XP it works ok. Is there a specific prob
-
How to make sure that schema name is not included with generated sqls
How to make sure that schema name is not included with generated sqls with tableadapter wizard. What should I use? Oledb, ODT.NET, where can set that I want "pure" sqls, not schemas, not ", or anything like this I want "Select a,b from t1" ,not "sele
-
I purchased the who new album and would not download and charged for it
I purchased it, it downloaded the liner notes, but not the music. I click on it again and it says I have purchased but not download then i click download and it says i tunes unavailable...i've downloaded since then successfully, today i got the bill