Howto create nested groups???
Hello Mac fans,
I'm trying to place groups <domain>\schema admins, admins and admin under one group name poweradmins on the mac. I also want to manually map some users to additional groups.
I don't have a Mac network, just a shared PowerMac and a windows AD domain.
I'm familiar with how to do this on any unix distribution. Edit the /etc/groups file and create user mappings to a specific group, in this case poweradmins.
Since I got my mac, I've learned the hard way a few lessons about mac's. First and foremost, the /etc/passwd and /etc/group files are there purely for the end-users's entertainment and are not even consulted during operation. I understand they are used when in runlevel 1, but that would have been a nice tidbit of information to have 4 hours ago....
So I'm learning apple's netinfo database. I prefer CLI, but I'm trying the GUI just to cover all bases.
The long and short is that I can't figure out how to assign users to groups manually. Once I create a group, what do I need to edit to assign a user to that group?
Beyond that, I'm trying to nest a group under a group. I think once I learn how to manually assign users to additional groups, this functionality will become obvious.
Yes I've read the docs. I know how to add attributes to groups and do high-level things with the netinfo db. But I'm unclear about how netinfo is parsed and what elements are mandatory. Perhaps someone reading this list has learned the in's and out's and can share?
Thanks!!
With respect to "NetInfo", I get the impression that things are in a bit of a state of flux - I hear rumours that things are changing in 10.5. For the moment (Tiger), as near as I can tell, users can be added to a group record by including its 'name' in the 'users' property or by 'generateduid' in the 'groupmembers' property. Nested groups can be created by adding a group's 'generateduid' to the enclosing group's 'nestedgroups' property. A command for creating nested groups is discussed here:
http://www.afp548.com/article.php?story=20050810102912104
"Legacy" groups (pre-Tiger, I guess, and lacking a 'generateduid' and who knows what else) can't be added to a nested group.
I find the situation at the moment all very confusing...
Similar Messages
-
How to create Nested Group membership in OAM?
Hello,
I am facing a problem now about creating nested group membership in OAM. Although all documents mention that nested group membership is available in OAM and the "uniquemember" attribute's target object class covers both "inetorgperson" and "groupofUniqueNames", I still cannot find the option in Selector to add "group" members.
Please kindly suggest.
Thank you.
Liu PengLiu,
You've been very helpful, so I thought that I'd try to "return the favor" :)...
If you want to change the background color of that bar that contains the "Users Groups" to something other than dark blue, you can do it by editting the following file (this path is on Windows):
C:\Program Files\NetPoint\identity\oblix\lang\shared\sltr_navbar.xsl
I changed the line:
<table width="100%" border="0" bgcolor="#006699" cellpadding="0" cellspacing="0">
TO:
<table width="100%" border="0" bgcolor="#CCCCCC" cellpadding="0" cellspacing="0">
which, on my system, changes the bar background color from dark blue to gray.
Obviously, you can change the color to whatever you feel is appropriate, but the gray background definitely makes the links more visible :)!!
Here's a website that'll let you experiment with the color codes:
http://colorcombos.com/combotester.html
or choose a color visually:
http://www.liu.edu/cwis/CWP/library/colors.htm
You'll need to restart the OAM servers after making the change for it to become effective.
Thanks for your help!
Jim -
I see how to create nested groups in OAM. However, when looking at the resultant DIT in LDAP, it appears that this creates only a “logical nesting” as the nested group is merely a member of the parent. They are both at the same level in LDAP, under Groups. Is it possible to create truly (physically) nested groups in OAM? The goal is to have groups with the same names as children to parent groups (which have unique names).
Regards,
Tom GreshamHi Farbod!
First of all there are a couple of things to mention:
a) Using JAAS you will end up with the jazn XML file. There is no LDAP structure in there
b) The way you describe group 2 is not completely correct. Please check the uniquemember structure of LDAP.
If you have a group 1 where Ann is a member and a group 2 that has Mary and group 1 as a member your assumption is wrong. Mary and all members of group 1 can see group 2 pages. Group 1 pages can only be seen by Group1 members.
What you want is the following:
Group 1: Ann is a member
Group 2: Mary is a member, Group 1 is a member
Page for Group 1 can only be seen by Group1 members (meaning Ann).
Page for Group 2 can be seen by Mary and Group 1 members. Therefore Mary and Ann can see this page.
cu
Andreas -
Howto create a nested group in osx
Hello Mac fans,
I'm trying to place groups <domain>\schema admins, admins and admin under one group name poweradmins on the mac. I also want to manually map some users to additional groups.
I don't have a Mac network, just a shared PowerMac and a windows AD domain.
I'm familiar with how to do this on any unix distribution. Edit the /etc/groups file and create user mappings to a specific group, in this case poweradmins.
Since I got my mac, I've learned the hard way a few lessons about mac's. First and foremost, the /etc/passwd and /etc/group files are there purely for the end-users's entertainment and are not even consulted during operation. I understand they are used when in runlevel 1, but that would have been a nice tidbit of information to have 4 hours ago....
So I'm learning apple's netinfo database. I prefer CLI, but I'm trying the GUI just to cover all bases.
The long and short is that I can't figure out how to assign users to groups manually. Once I create a group, what do I need to edit to assign a user to that group?
Beyond that, I'm trying to nest a group under a group. I think once I learn how to manually assign users to additional groups, this functionality will become obvious.
Yes I've read the docs. I know how to add attributes to groups and do high-level things with the netinfo db. But I'm unclear about how netinfo is parsed and what elements are mandatory. Perhaps someone reading this list has learned the in's and out's and can share?
Thanks!!I have posted under OSX q's, btw.
Thanks for the reply. I never thought about doing this via AD. That is a very interesting Idea. I would have done it that way w/o even thinking twice if this was a windows PC. But my mindset is unix since it's a mac.
I'm trying to create a typical scenario of shared folders/directories acessable from multiple users/groups with restrictions. Marketing folks need to see marketing, but the problem is there are 4 or 5 groups relating to this organizational group. Same with other groups. I could make a new super group in AD and apply it to the folder. If Mac is like linux, it will recurse through group membership and allow access if permitted.
But I still need to learn the mac netinfo database. I'm sure it's not rocket science.. But probably a necessity to know if one is going to be administering Mac's as well as PC's.
Thanks!!! -
Nested group function without group xmlagg
I am getting nested group function without group by xmlagg when using the xmlagg function inside another xmlagg function. Find the table structure and sample data here,
CREATE TABLE "TEST_TABLE"
("KEY" NUMBER(20,0),
"NAME" VARCHAR2(50 ),
"DESCRIPTION" VARCHAR2(100 )
Insert into TEST_TABLE (KEY,NAME,DESCRIPTION) values (1,'sam','desc1');
Insert into TEST_TABLE (KEY,NAME,DESCRIPTION) values (2,'max','desc2');
Insert into TEST_TABLE (KEY,NAME,DESCRIPTION) values (3,'peter',null);
Insert into TEST_TABLE (KEY,NAME,DESCRIPTION) values (4,'andrew',null);
select
XMLSerialize(document
xmlelement("root",
xmlagg(
xmlelement("emp"
, xmlforest(Key as "ID")
, xmlforest(name as "ename")
, xmlelement("Descriptions",
xmlagg(
xmlforest(description as "Desc")
) as clob indent
) as t
from test_table;Then i removed the xmlagg function from the above select query and used xmlelement instead
select
XMLSerialize(document
xmlelement("root",
xmlagg(
xmlelement("emp"
, xmlforest(Key as "ID")
, xmlforest(name as "ename")
, xmlelement("Descriptions",
xmlforest(description as "Desc")
) as clob indent
) as t
from test_table;This is working fine, but xml created with empty elements for Descriptions element for key 3 and 4 which has null values. I need don't need Descriptions element in the xml when it has null value. Please help me to resolve this.You can do it with a correlated subquery :
SQL> select xmlserialize(document
2 xmlelement("root",
3 xmlagg(
4 xmlelement("emp"
5 , xmlforest(
6 t.key as "ID"
7 , t.name as "ename"
8 , (
9 select xmlagg(
10 xmlelement("Desc", d.description)
11 order by d.description -- if necessary
12 )
13 from test_desc d
14 where d.key = t.key
15 ) as "Descriptions"
16 )
17 )
18 )
19 ) as clob indent
20 )
21 from test_table t;
XMLSERIALIZE(DOCUMENTXMLELEMEN
<root>
<emp>
<ID>1</ID>
<ename>sam</ename>
<Descriptions>
<Desc>desc1_1</Desc>
<Desc>desc1_2</Desc>
<Desc>desc1_3</Desc>
</Descriptions>
</emp>
<emp>
<ID>2</ID>
<ename>max</ename>
<Descriptions>
<Desc>desc2_1</Desc>
<Desc>desc2_2</Desc>
<Desc>desc2_3</Desc>
</Descriptions>
</emp>
<emp>
<ID>3</ID>
<ename>peter</ename>
</emp>
<emp>
<ID>4</ID>
<ename>andrew</ename>
</emp>
</root>
Or an OUTER JOIN + GROUP-BY :
select xmlserialize(document
xmlelement("root",
xmlagg(
xmlelement("emp"
, xmlforest(
t.key as "ID"
, t.name as "ename"
, xmlagg(
xmlforest(d.description as "Desc")
order by d.description -- if necessary
) as "Descriptions"
) as clob indent
from test_table t
left outer join test_desc d on d.key = t.key
group by t.key
, t.name
;Edited by: odie_63 on 11 juil. 2012 14:54 - added 2nd option -
Photoshop CS5 - Compatibility issue with nested groups
I'm using Photoshop CS5 to create a multi-layered, group-heavy PSD. The final file is intended for public consumption, so, ideally, I'd like it to be accessible to as many users - and therefore compatible with as many versions of Photoshop - as possible.
However, I just tried to save the file, and was prompted with this message:
This document contains nested layer groups that may change in apprearance if opened in applications older than Photoshop CS5.
Opening the file in CS4 after the save confirmed that a few of the layer groups were indeed corrupt.
Can anyone shed any light on this?It looks like you're the only person so far who's posted that particular message on the web anywhere!
Out of curiosity, do you have the Maximize PSD and PSB File Compatibility option set to Always in Edit - Preferences - File Handling?
I have no experience with nested groups, myself, but that setting comes to mind as being involved with the kind of compatibility you're hoping to accomplish.
I do know that nested group capabilities have been around since at least Photoshop CS2.
-Noel -
i build a local repository
this repository includes the packages
mudkip-3.0.1
treecko-6.1.0
torchic-4.2.2
i want to create a group 'pokemons' such that pacman -S pokemons installs the 3 packages
link to a howto / short explanation ?
can a group be included within another group ? (so that you can -S all of the internal group but not the external one alone)All you have to do is add the name of the group to the groups array in the PKGBUILD. You can include groups that exist already (e.g. base, xorg).
-
Nested groups with Active Directory AWS
Hi... am trying to target only specific groups from our AD, but I'd rather not have to use the partial users & groups sync as this would mean re-configuring the auth source for any new group that we want to bring in to the portal (v.5.0.2).
I am able to target a specific part of AD in the following way:
User Query Base : OU=Portal Users,DC=Domain1, DC=DOmain2
User Query Filter: (&(objectclass=user)(memberOf=*))
Group Query Base : OU=Portal Users,DC=Domain1, DC=DOmain2
Group Query Filter: (objectclass=Group)
This works fine, it brings in the groups in the "Portal Users" OU and any users in the OU who have group memberships. However, not all groups and users will exist in a single OU, so we decided to create a global group called "Portal Groups" and tried a similar query as above but with the query base replaced as follows:
VN=Portal Groups,OU=Applications,DC=Domain1, DC=DOmain2
This time... the group is brought in but no nested groups and no users! Has anyone else managed to accomplish an AWS setup of this sort or similar? I'm told that it is possible to sync in nested groups but being unfamiliar with AD I'm not sure if I've gone about it the right way.
thanks in advance
Simon DragicevichHi Simon,
So let me make sure I've got your usecase. You want to only create particular groups in the portal - you don't want all your AD groups in the portal. You DO want all your users imported and to have them in the appropriate groups?
If that's correct - you either want to play with your query bases, or you want to switch to a partial GROUP sync. The former will allow you to automatically bring in new groups as they are added to AD, the later will not.
One thing I was confused about in your original post - did you change both the user query base and the group query base to:
VN=Portal Groups,OU=Applications,DC=Domain1, DC=DOmain2
or just the group query base? Assuming you did the former, that would explain why your users weren't imported. If you did the later - that seems odd. Regardless you don't want to create a global group, you want to create a new OU:
OU=Portal Groups, OU=Applications, DC=Domain1, DC=Domain2
Then set that as your group query base. Assuming you have a bunch of groups scattered around your tree that you want in here, create shadow groups that essentially contain your other groups, e.g.:
CN=GroupA, DC=Plumtree
CN=GroupB, OU=Eng, DC=Plumtree
I want both of those groups to be in my portal groups OU, so I create two new groups in my portal groups OU as follows:
CN=GroupA, OU=Portal Groups, OU=Applications, DC=Domain1, DC=Domain2
CN=GroupB, OU=Portal Groups, OU=Applications, DC=Domain1, DC=Domain2
Both of these groups simply contain one member - the groups I am shadowing. You can also more effectively deal with name clashing if you use this strategy.
Make sense?
-Aki -
Nested Group Function without Group By Problem
Hey everyone,
I have 3 tables as below:
TABLES
ITEM (Item_no, Item_price, desc)
DeliveryItem (delivery_no, item_no, quantity)
Delivery (delivery_no, delivery_date)
SELECT desc, MAX(SUM(quantity)) FROM DeliveryItem, Item, Delivery WHERE Item.item_no = DeliveryItem.item_no AND Delivery.delivery_no = deliveryitem.delivery_no;
And I'm trying to output description of most delivered item but I got an error like SQL Error: ORA-00978: nested group function without GROUP BY. Could you help me to fix my code?
ThanxHi,
DESC is not a good column name; you could get errors if the parser thinks it means DESCending. I used DESCRIPTION instead, below.
I think the best way is to do the SUM in a sub-query, lkike this:
WITH got_r_num AS
SELECT item_no
, SUM (quantity) AS total_quantity
, RANK () OVER (ORDER BY SUM (quantity) DESC) AS r_num
FROM deliveryitem
GROUP BY item_no
SELECT i.description
, r.total_quantity
FROM got_r_num r
JOIN item i ON r.item_no = i.item_no
WHERE r.r_num = 1
;If you want to do it without a sub-query:
SELECT MIN (i.description) KEEP (DENSE_RANK LAST ORDER BY SUM (di.quantity)
AS description
, MAX (SUM (quantity)) AS total_quantity
FROM deliveryitem di
JOIN item i ON d1.item_no = i.tiem_no
GROUP BY i.description
;If you do nested aggegate functions, then every column in the SELECT clause must be an aggregate applied to either
(a) another aggregate, or
(b) one of the GROUP BY expressions.
That's why you got the ORA-00937 error.
This second approach will only display one row of output, so If there is a tie for the item with the greatest total_quantity, only one description will be shown. The RANK method will show all items that had the highest total_quantity.
It looks like the delivery table plays no role in this problem, but it there's some reason for including it, you can join it tpo either query above.
Of course, unless you post test copies of your tables (CREATE TABLE and INSERT statements) I cn't test anything.
Edited by: Frank Kulash on Nov 6, 2010 10:57 AM -
Unwanted nested groups and clipping paths
Can anyone tell me why when I embed one Illustrator file inside another Illustrator file it creates repeating nested groups with clipping paths? The original file did not have clipping paths or nested groups.
An Illustrator file has two parts and when placing you just access the wrong part for your purpose. What you want to do is open the other file and then copy/paste.
See about Illustrator files:
http://vimeo.com/117691712 -
Does 9iAS support nested groups?
For examples, our company is a large company which has more than 20 braches, and each branch has subbraches and departments, so when implement the previous intranet, we map all the organization stucture to a nested group system. We enjoy this design, because managing the privileges is a easy task: only grant/revoke permission to/from the group that mirror to a physical organization unit.
We intend move our next generation intranet to Oracle 9iAS, especially the Poral, but does it support nested groups structure?
Thanks,
HunteWork Around:
On your mac:
1. Open a new email
2. Insert name of an existing group into one of the "To" fields as usual.
3. Highlight all the resulting names in the "To" entry
[Highlight first name, and while holding shift, highlight last name and all will highlight[]
4. Copy (Command C) the highlighted emails
5. Paste (Command V) nto a pages document
6. Remove the name and anything else preceeding the first < and also the first < of only the first entry whixh will look like this:
[email protected]>,
7. Remove the > of the last email which will look like this:
, Jane Doe <[email protected]
8. Copy the entire altered list from the pages document
9, Go to Contact Book and click + to add a new entry
10.. Name the entry (XXX Group for iPad) or whatever you wish to call it
11. Paste all the copied altered list into any one of the email entry spaces
12. Click on "Done"
13. Create new email On iPad and click on + in any one of the "To" lines and search for "XXX Group for iPad" You cannot just key in XXX Group for iPad!!!!!!!, you must use + contact search.
14. Enter the selected iPad contact group into the "To" line.
15. All the entries will now appear in the "To" line and you are good to go.
Adding or deleting email addresses from the iPad group:
Easiest: Alter the original mac group in the usual way and repeat steps 1-14 above. It seems impossible to edit within the emai line of the iPad contact entry.
Rediculously simple once figured out.
Happy emailling, but please send Bcc so that you don't spread your groups' email addresses all over the internet for spam, viruses, and other unwanted emails. Be considerate and ask your recipients to notifiy you if they wish to be deleted from the lists you compose. -
How do you do nested groups? Does the inner group have to be in a separate table within a row of the outer group? I am developing an XML Publisher version of the packing slip report where there can be multiple lots per item, and multiple items per packing slip.
Yes you are corrrect, need to create new tables with required columns inside the main table and use for-each inside the new table with in the same row.
Regards
Balaji. -
How do I add a contact / recipient to an SMS on iPhone 5s? It's easy on Android, but I've not sussed it on the iPhone - can't create a group etc. Tried to create a group on Mac, but it either doesn't exist or won't sync to the phone with usb, nor will other contact details created on Mac. I'd rather not use the cloud. I'm sure contacts used to sync to my old iPod touch in Snow Leopard.
Is it not more logical to have the phone as the main source of this sort of data? We're more likely to update on a device we carry all the time surely?
Please advise. Thank youHey Cornish wrinkly,
It sounds like you want to create a group message. You can read about group messaging on the iPhone here:
iOS: Understanding group messaging
http://support.apple.com/kb/HT5760
Welcome to Apple Support Communities!
Regards,
Delgadoh -
How to create a group calendar?
Hello,
i am sorry but this is one more question on wiki-group-calendars.
*In short:*
I am not able to create a group calendar with the wiki frontend. the calendar that is created with a wiki is owned by the admin of the wiki. So it is always a personal calendar that cannot be shared in iCal.
LONG:
I want to create a group calendar that is viewed and edited through iCal.app and the web service. Apple´s "wiki deployment" guide says on page 57:
+"The web calendar allows you to easily schedule events for yourself or your group. ...+
+There are *two types of web calendars: personal and group*. You can send and receive event invitations through the personal calendar but not through the group calendar. Also, *while anyone in a group can create or edit events in a group calendar*, you can edit only events in your own personal calendar or event invitations you send to other people.+
+The web calendar uses iCal Server to store events and invitations. ..."+
But there is not mentioned how to create a group calendar. The calendar created with the wiki web-frontend belongs to the admin of that particular wiki. This is why the calendar data ist stored in folder named with the UUID of the wiki admin. Also the alias "http://server.fqdn:8008/principals/groups/mygroupname/" which i provided in iCal turns into ..._uids_UUID-of-the-wiki-admin and only the wiki-admin can access this calendar in iCal.app.
My research on this topic reveals that there were in issue that should be resolved in 10.6.4 (that is running on our Server). So, again, how to create a group calendar?
Thanks, Philipp.
10.6.4 OSX Server
10.6.x Clientsfarmer tan wrote:
you need to go to the wiki page and add the wiki's there and then in the setting of the wiki is where you set permissions and services such as calendar, blog, and podcast you can also set all permissions for the wiki in the settings tab
fyi none of my groups were available unless i logged into the wiki as the Directory Admin not Server Admin
migrated from 10.5.7 to 10.6
Message was edited by: farmer tan
Could you be more specific farmer tan, please?
You said "you need to go to the wiki page and add the wiki's there...." What is the "wiki page" you mention? Is that some place I go to via the browser or the Server Admin tool?
I went to http://ical.mysite.com/ical/ and logged in as the Directory Administrator but didn't see anything resembling what you described.
Thanks in advance for any help you can provide. -
Error while creating product group
hi,
i am getting error while creating Product group.
Required parameters missing when calling up module
Message no. M3749
Please suggest me.. how to cop this
Regards,
amitDear Brahmankar,
I am using product groups in SOP as well as in the normal plannning scenario.In the normal planning scenario I am giving my PIR's in MD61 for the entire group.Then I am running MRP in MD02 for my product group.System is generating all the requirements normally for the entire group .
Please suggest me , this process is correct or it will create any problem in any module .
Thanks & Regards
Prabhakar
Maybe you are looking for
-
How to play audio in an application?? (HELP ME PLEASE!!)
Hi! I'm studying computer science and I'm programming in Java for my last project of this period. I've been trying to play sound in an application but I haven't been able to. My teacher gave me a piece of code that looked like this: try{ URL url=new
-
For a week or so, my "media" folder has been missing from my Bookmarks list. It's a long folder, so I did not want to reenter all the URLs. I followed the troubleshooting info and checked all the bookmark backup files. No joy. I also ran a word searc
-
Importing Parameter (/1BCDWB/FORMOUTPUT) Not filled - Inside the RFC
Dear All, I am Calling the Adobe form Inside the RFC Function Module, problem i am facing this Importing Parameter /1BCDWB/FORMOUTPUT not filled. Based on the Importing I need the XSTRING Data CALL FUNCTION <Function Module name> EXPORTING
-
**URGENT : signed applet still doesn't get full permissions**
I've bought a Microsoft Authenticode certificate with which I signed a CAB file containing my class files... On a client machine, the browser detects security stuff but even when one acknowledges, the applet still doesn't get the permission, for inst
-
Toshiba 32RL938F: MP4 playback stopps after 2h 6min
Hi everyone, first time here and I subscribed to this forum just to report that I have a problem reading my MP4's files with an external hard drive. One video file just stopped after 2 hours and 6 minutes (and it lasted for more than 2 hours and 50 m