Is it possible dynamcially mapping AD groups ?

boxi31 sp2 > 2003 sql server > tomcat 5.5
Is it possible to map AD accts as only an authentication point and not manually map the winAD groups manually withi the CMC.
I have only done the typical config;
Mapped AD Member Groups
Add AD Group (Domain\Group): "manually add group"
secWinAD:CN=XXX OU=XXX,OU=XXX,DC=XXX,DC=XXX
etc...
I was told cognos can do this, so I'm assuming BO can also, but I have no idea how?
Thoughts?

Hi Michael,
I moved to the correct forum: Admin and Auth.
I don't know if I understand correctly the question. I assume that you want to add AD user accounts directly. The answer is we can only map AD groups. You can decide when the account is added:
- When you update the AD plugin: all the account in that group are created
- When the users log in: only users that log in to BOE will create their account.
Regards,
Julian

Similar Messages

Is it possible to map a Sponsor Group in Cisco ISE to a user group in Active Directory, through a RADIUS server?

Hi!!
We are working on a mapping between a Sponsor Group in Cisco ISE and a user group in Active Directory....but the client wants the mapping to be through a RADIUS SERVER, for avoiding ISE querying directly the Active Directory.
I know it is possible to use a RADIUS SERVER as an external identity source for ISE.....but, is it possible to use this RADIUS SERVER for this sponsor group handling?
Thanks and regards!!

Yes It is possible to map Sponser group to user group in AD and if you want to know how to do please open the below link and go to Mapping Active Directory Groups to Sponsor Groups heading.
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_guest_pol.html#wp1096365

Mapping LDAP Groups to SAP Roles

Hi there,
i am trying to build up a synchron usermanagement with a LDAP-Server between EP, Web AS Java and Web AS ABAP.
My thought is to administrate the users in the LDAP-Directory. The users will be assigned to groups.
In EP and Web AS Java its no problem to assign these groups to roles and then just change the Users in the LDAP-Group and reach a synchron usermanagement.
In Web AS ABAP it seems impossible to assign roles to groups.
<b>The question is, is it possible to map ldap groups with the ldap connector of the web AS ABAP to Roles in an ABAP System?</b>
Or is there another way to administrate users in different systems?
Thanks alot for your answers,
stefan

Hi
in this case u have to use the concept of central user administration. use the following links
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/events/asug-biti-03/cua with sap webas, ldap and third party software
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/events/sap-teched-04/user management and authorizations overview.pdf
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/nw/dotnet/integration of sap central user administration into microsoft active directory.pdf
hope this helps u to get fair bit of idea
don,t forget to give points
With regards
subrato kundu

Mapping EUS groups to shared schema

Hi, everybody
Has anybody done such thing ? I tried to map "cn=test_group,cn=groups,dc=test,dc=com" to schema GLOBAL_SCHEMA by ESM on target database but it silently skip my action. Moreover, I haven't found in documentation any mention about mapping groups to shared schema.
I'm using OID version 10.1.4.0.3 running on RHEL4/x86 and Database 10.2.0.4 running on Solaris 10/SPARC.

Hi, everybody one more time
I've just comprehend the idea. There is no sense in mapping directory groups to shared schema. I've made the following experiment:
1. created mapping of arbitrary user to GLOBAL_USER by esm
2. modified attribute 'orcldbdistinguishedname' of entry which corresponds mapping I had made at point 1. In my case it was 'cn=mapping0,cn=OracleDefaultDomain,cn=OracleDBSecurity,cn=Products,cn=OracleContext,dc=test,dc=com'
to value 'cn=test_group,cn=groups,dc=test,dc=com' by ldapmodify
3. added someone to group 'test_group'
4. tried to login to target database as user who had been added to group 'test_group' at point 3
5. got ORA-01017: invalid username/password; logon denied
The point is: There were no changes in DIT when you change membership of users in any group. LDAP server doesn't create new user's entry down below 'cn=test_group,cn=groups,dc=test,dc=com', instead it add attribute 'uniquemember' to corresponding group entry. This attribute contains dn of user's entry who is member of this group. So, there is no possibility of mapping directory groups to shared schema. The only way to emulate such behavior is to create something like cn=group1,cn=users,dc=test,dc=com ... cn=groupN,cn=users,dc=test,dc=com and sort out users to those entries manually. However, drawback of such solution is one to one relationship among users and "groups", but anyway it's better than nothing.

Is it Possible to Map the Transformations with already mapped ones

Hi,
I have a scenario :
In my source DSO I have a infoobject 0BILL_NUM,which is mapped with ZB1_PRC in the destination datatarget.Here a routine has written on the destination infoobject ZB1_PRC for the follwing fields in the source system ZBILL_ITM,0COMP_CODE,0BILL_NUM.
In the destination system 0BILL_NUM is mapped with 0REFER_ITM .
In the target system a routine has wriiten for 0BILL_NUM
for the fields 0COMP_CODE,0REFER_DOC,0REFER_ITM and 0BILL_NUM
What is the solution to push my data into the target system,after mapping.
Now Is tht possible to map two infoobjects 0BILL_NUM from the source to the target system infoobject 0BILL_NUM.If not possible, what is the alternative solution
Regards
Lucky

hi,
while creating the transformation u can find the option as rule group ok,
first you can map as per the first requirement then in the rule group option u have new rule group there u can assign the second mapping along with other infoobject mappings.
chk out the options in transformation -> rule group
Ramesh

Is it possible to rank with group condition?

Is it possible to rank with group condition? for example I have following dataset.
RANK() OVER (partition BY PC.POLICY_NUMBER, PC.TRANSACTION_TYPE, COV_CHG_EFF_DATE order by PC.POLICY_NUMBER, COV_CHG_EFF_DATE, PC.TIMESTAMP_ENTERED) AS RNK,
POLICY_NUMBER    TRANSACTION_TYPE COV_CHG_EFF_DATE TIMESTAMP_ENTERED                        Rank
10531075PQ                           01           01/FEB/2009              15/SEP/2009 01:16:09.356663 AM       1
10531075PQ                           01           01/FEB/2009              15/SEP/2009 01:16:09.387784 AM       2
10531075PQ                           02           15/OCT/2009             16/OCT/2009 04:40:24.564928 PM       1
10531075PQ                           02           15/OCT/2009             16/OCT/2009 04:40:24.678118 PM       2
10531075PQ                           10           15/OCT/2009             16/OCT/2009 04:45:20.290117 PM       1
10531075PQ                           10           15/OCT/2009             16/OCT/2009 04:40:29.088737 PM       2
10531075PQ                           09           15/OCT/2009             16/OCT/2009 04:40:29.088737 PM       1 (expected 3)
10531075PQ                           06           17/OCT/2009             17/OCT/2009 04:45:20.290117 PM       1
10531075PQ                           07           17/OCT/2009             17/OCT/2009 04:40:29.088737 PM       1 (expected 2) I want to group rank based by transaction IDs. For ex, '09' and '10' as one set and '06' an '07' as another set. Instead of rank from start, I want rank continue for any occurance of '09' or '10'. In the above example, for the following row, I am expecting rank 3 as there are 2 transaction '10' already exist for same COV_CHG_EFF_DATE.
10531075PQ 09 15/OCT/2009 16/OCT/2009 04:40:29.088737 PM 1 (expected 3)
I wonder if it possible with Rank or another other analytical function. I am not looking for exact working code, but will appreciate if someone give me idea/tips. Sample table, and test data if anyone want experiment
drop table PC_COVKEY_PD;
create table PC_COVKEY_PD (
POLICY_NUMBER varchar(30),
TERM_IDENT varchar(3),
COVERAGE_NUMBER varchar(3),
TRANSACTION_TYPE varchar(3),
COV_CHG_EFF_DATE date,
TIMESTAMP_ENTERED timestamp
delete from PC_COVKEY_PD;
commit;
insert into PC_COVKEY_PD values ('10531075PQ', '021', '002', '01', to_date('01/FEB/2009','DD/MM/YYYY'), cast('15/SEP/2009 01:16:09.356663 AM' as timestamp));
insert into PC_COVKEY_PD values ('10531075PQ', '021', '001', '01', to_date('01/FEB/2009','DD/MM/YYYY'), cast('15/SEP/2009 01:16:09.387784 AM' as timestamp));
insert into PC_COVKEY_PD values ('10531075PQ', '021', '004', '02', to_date('15/OCT/2009','DD/MM/YYYY'), cast('16/OCT/2009 04:40:24.164928 PM' as timestamp));
insert into PC_COVKEY_PD values ('10531075PQ', '021', '004', '02', to_date('15/OCT/2009','DD/MM/YYYY'), cast('16/OCT/2009 04:40:24.264928 PM' as timestamp));
insert into PC_COVKEY_PD values ( '10531075PQ', '021', '005', '10', to_date('15/OCT/2009','DD/MM/YYYY'), cast('16/OCT/2009 04:40:24.364928 PM' as timestamp));
insert into PC_COVKEY_PD values ('10531075PQ', '021', '002', '10', to_date('15/OCT/2009','DD/MM/YYYY'), cast('16/OCT/2009 04:40:24.464928 PM' as timestamp));
insert into PC_COVKEY_PD values ( '10531075PQ', '021', '004', '09', to_date('15/OCT/2009','DD/MM/YYYY'), cast('16/OCT/2009 04:40:24.564928 PM' as timestamp));
insert into PC_COVKEY_PD values ('10531075PQ', '021', '004', '06', to_date('22/NOV/2011','DD/MM/YYYY'), cast('17/OCT/2009 04:40:24.564928 PM' as timestamp));
insert into PC_COVKEY_PD values ('10531075PQ', '021', '004', '07', to_date('22/NOV/2011','DD/MM/YYYY'), cast('17/OCT/2009 04:40:24.664928 PM' as timestamp));
commit;
SELECT POLICY_NUMBER,
       TERM_IDENT,
       COVERAGE_NUMBER,
       TRANSACTION_TYPE,
       COV_CHG_EFF_DATE,
       TIMESTAMP_ENTERED,
        RANK() OVER (partition BY PC.POLICY_NUMBER, PC.TERM_IDENT, PC.TRANSACTION_TYPE, PC.COV_CHG_EFF_DATE
                order by PC.POLICY_NUMBER, PC.TERM_IDENT, PC.COV_CHG_EFF_DATE, PC.TIMESTAMP_ENTERED) AS RNK
FROM PC_COVKEY_PD PC
ORDER BY PC.POLICY_NUMBER, PC.TERM_IDENT, PC.COV_CHG_EFF_DATE, PC.TIMESTAMP_ENTERED ;Edited by: 966820 on 30-Oct-2012 19:26

Hi,
966820 wrote:
I want to group rank based by transaction IDs. For ex, '09' and '10' as one set and '06' an '07' as another set. So, whenever you see '09', you want to treat it as '10', and whenever you see '06', you want to act as if it were '07'.
You can use CASE to map '09' to '10', and '06' to '07'. like this:
,       RANK () OVER ( PARTITION BY policy_number
                              ,             term_ident
                ,            CASE transaction_type
                                WHEN '06' THEN '07'
                                WHEN '09' THEN '10'
                                        ELSE transaction_type
                           END
                ,            cov_chg_eff_date
                ORDER BY      timestamp_entered
                 )     AS rnkWhen you "PARTITION BY x", there's no point in saying "ORDER BY x" in the same analytic clause.
Thanks for posting the CREATE TABLE and INSERT statements.
Thanks, too, for posting your query, though, as mentioned already, it's unreadable. When posting any formatted text (and code should always be formatted), type these 6 characters:
\(small letters only, inside curly brackets) before and after each section of formatted text, to preserve spacing.
See the forum FAQ {message:id=9360002}

Is it possible to map the cmp fields of the entity bean with out dictionary

Dear sirs,
I have created the EJB project module and WEB Module. Now i have to map the CMP fields of the entity bean to the underlying table. Is it possible to map the cmp fields of the entity bean with out java dictionary? If yes how can we do that.
I have got some error while mapping an EJB's CMP fields to the table through dictionary. I was actually intended to map 79 fields but it gives an error that more than 64 fields are not allowed while building the dictionary.
1. Can you tell me what could be the possible reason?
2. Is it possible to map the cmp fields of the entity bean with out java dictionary? If yes how can we do that.
Kindly helo me,
Sudheesh K S

Hi,
Sudheesh please check up if the below link helps,there are other ways of writing the persistent.xml for container managed entity bean.
http://help.sap.com/saphelp_nw04s/helpdata/en/9b/f695f0c84acf46a4e0b31f69d8a9b7/frameset.htm, probably in the studio you cannot browse through tables not in the java dictionary,but manually editing it may still solve the problem.
Also here is another link that specifies the databases supported by J2EE Engine.
http://help.sap.com/saphelp_nw04s/helpdata/en/66/a5283eeb47b40be10000000a114084/frameset.htm
The below link shows how to specify the database vendor and datasource
http://help.sap.com/saphelp_nw04s/helpdata/en/e1/67fc3ee241ba28e10000000a114084/frameset.htm
Hope you are able to solve the problem.
Do let us know if you come up with the solution.
Regards,
Harish
Message was edited by: HARISH SUBRAMANIAN

Is it possible to order a group by a different field

I have a report that groups everything perfectly by Type. The issue I am having is trying to order the values returned in each grouping by a different field in the returned data, it is a number.
Is it possible to sort a group based on a field in the returned data, without having to create another group?

Never mind, just made the the second field a sub group

Mapping AD groups to built in user groups

Hi.
I'm in the process of configuring AD authentication for OBIEE 11g. I've managed to connect to AD and pull users and groups. However, i don't understand how i can map AD groups to built-in access groups such as "BIAuthors" and "BIConsumers". When i open "Membership" tab in the list of available groups i can only see built-in groups.

Hi,
You can use dsquery and dsget commands to get all users from the groups from a specific OU in your AD as shown below,
dsquery group "ou=testou,dc=domain,dc=com" | dsget group -members
To export the above user information to a CSV file use the below command,
dsquery group "ou=testou,dc=domain,dc=com" | dsget group -members > c:\Grpmem_testou.csv
Regards,
Gopi
JiJi
Technologies

Is it possible to run a group solve from the batch manager?

I'd like to know if it is possible to run a group solve defined in OFA 11i that contains solve and copy data from the batch manager.
Thank you
Luigi Polverini
Synesis s.r.l.
null

Problem: I have a Perl script in my AIR App's install directory that needs executable permissions on a Mac.
Solution: Chmod the file in my AIR App.
My code looks something like the following:
if (Capabilities.os.indexOf("Mac OS") > -1) {
                    var dlFile:File = File.userDirectory;
                    var _chmod:File = new File("/bin/bash");
                    dlFile = new File(file);
                    var nativeProcess:NativeProcess = new NativeProcess();
                    var chmodStartupInfo:NativeProcessStartupInfo = new NativeProcessStartupInfo();
                    chmodStartupInfo.executable = _chmod;
                    var args:Vector.<String> = new Vector.<String>();
                    args.push("-c");
                     // Trace so I can make sure the command and path are correct in the debugger
                    trace ("\"chmod ugo+x '"+dlFile.nativePath+"'\"");
                    args.push("chmod ugo+x '"+dlFile.nativePath+"'");
                    chmodStartupInfo.arguments = args;
                    nativeProcess.addEventListener(NativeProcessExitEvent.EXIT, onExitError );
                    chmodStartupInfo.executable = new File(file);
                    var process:NativeProcess = new NativeProcess();
                    process.start(chmodStartupInfo);
I really hope this helps someone else.

Is it possible to prevent a group of users be added into other groups?

We have a admin group named "app admin" which has full privileges to a target OU "ou=apps,ou=services,dc=xxx,dc=com".
And we are looking for solution to prevent members in the admin group putting their own account or group members into the target OU.
Tried the aci with "deny self write", but it only prevents admin user put their own DN into the target OU.
And they still can add their group members into the target OU.
Just wondering is it possible to prevent a group of users be added into the target OU while they still can add/delete/modify normal users into the target OU?
The version of our Directory Server is 6.3.1.
Thanks

goog,
For each data member, you will need a unique URL. There is not a way to bundle them into one URL.
Randy Hoskin
Applications Engineer
National Instruments
http://www.ni.com/ask

Is it possible to access a group of (sequential) registers with a single URL?

I'm testing out datasockets to an A-B RSLinx OPC server. At the moment, it appears as though each register in the PLC has to be accessed with an individual URL. Is it possible to access a group of (sequential) registers with a single URL? I suspect i may have to cluster a bunch of individuals together

goog,
For each data member, you will need a unique URL. There is not a way to bundle them into one URL.
Randy Hoskin
Applications Engineer
National Instruments
http://www.ni.com/ask

Is it possible to lock account Groups of customers

Hi,
ist it possible to lock account Groups of customers? I don't want to delete some groups, because
there some customers with this groups i want to lock, but i will avoid that there are new customers with
this groups.
Regards, Dieter

Hi,
Yes Basis Consultant will ristrict the authorization of creating certain Customer Groups as satish said.
So Provide the List of Customer grps to Basis Consultant and ask him to ristrict to all the users.
Regards,
Padma

Is it possible to set purchase group in PR is optional

Dear Guru,
Is it possible to set purchase group in PR is optional field?
Please advice. Thank you very much.

Hi,
It is very much possible:
Follow this path:
SPRO-Materials Management-Purchasing-Purchase Requisition-Define Screen Layout at Document Level-Double click on ME51N..
Now double click on Basic Data, Item----
Now in front of Purchasing group field...check the check box for Optional..and save it...
Also you have to check
SPRO-Materials Management-Purchasing-Purchase Requisition-Define Screen Layout at Document Level-Double click on NBB ( If you are using NBB as default Document type in PR)
Now double click on Basic Data, Item----
Now in front of Purchasing group field...check the check box for Optional..and save it...
Now try..
Cheers!!!
Utsav

JPA2 Question: Is it possible to map a Map(enum, List String ) in JPA2?

Is it possible to map a Map(enum, List<String>) in JPA2? Or do I have to create a separate Entity class that maps each List<String> collections for each possible value in the enum?
Edited by: user7976113 on Jan 22, 2010 7:51 PM
Edited by: user7976113 on Jan 22, 2010 7:51 PM

No, JPA does not support this or any nested collection type of mappings directly.
The best solution is to create an Entity or Embeddable to contain the collection data.
See,
http://en.wikibooks.org/wiki/Java_Persistence/Relationships#Nested_Collections.2C_Maps_and_Matrices
James : http://www.eclipselink.org

Is it possible dynamcially mapping AD groups ?

Similar Messages

Maybe you are looking for