Issue with LDAP sign in

Hello experts,
We have hooked up our BO application with LDAP in our company. In BOE configuration evry thing went fine. But, when the user from LDAP side tries to login into BO it is not accepting their USER ID's indeed they are able to login with their full CN and DN names.
Details..
> users cannot login with their original id's.
> but they are able to login with cn and dn names.
I tried to change the settings of BO searching criteria in ldap groups. but i am not able to do that.
anyone faced these kind of issue.. please help me guys.
Points will be assigned for every small clue.
Thanks
Prashanth

The user search name is the value you should be looking at in the LDAP attributes, that's the one that it will send to LDAP on a logon attempt. If you changed this value after mapping a group, I'm not sure but you may have to remap the group to get the change.
So on the LDAP side verify the user search attribute = the username you expect to login with (i.e. cn, samaccountname, uid, etc)
Regards,
Tim

Similar Messages

Issue with LDAP login authentication in CMC console

We have a existing issues with Business Objects BOE XIR2 SP2 and LDAP authentication with the BOE CMC Console.
We use websphere as the application server and it is installed on the same machine (Solaris) as BOE.
We have this issue on both our production and our recently rebuilt development environment to duplicate the issue.
Both environment have configured LDAP over SSL and we can login to BOE Infoview Reports with LDAP and we can map groups and users if we login to CMC but we can not login to CMC with secLDAP.
The specific error still being shown is "Security plugin error: Failed to set parameters on plugin".
Both environments (DEV and PROD) are fresh installs of BOE XIR2 SP2.
Any ideas are much appreciated
Thankyou

The CMC in XIR2 used com components for the SSL (rather than java like infoview) and I'm betting the WAS deployment is not finding them. Is WAS on a seperate server or is BOE installed there as well?
I'm not familiar with any regular fixes for an issue like this. If no other replies I'd recommend opening a case with either deployment(WAS on "nix") or authentication(WAS on windows) to see if they can trace down the problem.
Regards,
Tim

Issue with "at sign" - @

I have tried to create a databaselink to a SQL SERVER but I'm facing issues with the username.
When I use the following command the dblink is created but I am unable to connect to the dblink:
CREATE DATABASE LINK mydblink
CONNECT TO *"[email protected]"* IDENTIFIED BY "password"
USING 'tripoint';
When I test the dblink I receive the errors *ORA-01017: invalid username/password; logon denied. [Microsoft][ODBC SQL Server Driver][SQL Server]Login failed for user *'thiagobarnabe'*. {28000,NativeErr = 18456}* and ORA-02063.
If I use the following command I do not receive any error, it works perfectly:
CREATE DATABASE LINK mydblink
CONNECT TO "ThiagoBarnabe" IDENTIFIED BY "password"
USING 'tripoint';
It is important to notice that in both cases I'm using username and password enclosed by double quotes (") and both usernames and passwords are correct and exists in my SQLServer. In addition, in the error message we can see that the unrecognized user is what precedes the "at sign". I read Oracle documentation, tried to find any solution but so far I didn't find anything able to help me.
Is it possible to use users with at sign or not?
I would apreciate your valuable comments.
Edited by: user12833006 on 14/01/2013 04:33

There's a bug (bug 16168452 - USERNAME WITH "@" SIGN CAN'T LOG INTO SQL SERVER USING THE GATEWAY) logged for 11.2.0.3 DG4MSQL gateways that the at sign can't be used in a username. The bug is still open and under investigation. It was already confirmed that the issue happens also with DG4ODBC 11.2.0.3 and we have to wait for a fix.
Edited by: kgronau on Jan 15, 2013 7:55 AM
In an earlier release for 11.1 a fix was rejected (Bug 7356433: DG4ODBC REMOTE DB USERNAME AS EMAIL ADDRESS FAILS TO CONNECT) as it interferes with the @ handler using internally in OCI. But now as MS started with windows 8 to use the email like naming method it might change and the issue might be fixed.

Anyone having issues with Self-Signed SSL-certs on mail servers?

Can't get it to allow connecting via SSL to outgoing mail servers with self-signed certificates. Problem did not exist in earlier versions of OSX as far as I know.

YES. I have a cert from lunarpages, where my accounts are hosted. I'm seeing two issues, and they are different for the different servers at lunarpages:
1. Multiple logins from different machines --> problem
2. Multiple accounts accessing same server --> problem
So, with 1 account on one of lunarpages machines, I can have several machines running Mail with ssl on at the same time and get no problem (that is, once I've saved the certificate and marked it trusted). But as soon as another account (my wife's email on the same domain, for example) tries to access the same server, it gives me an ssl error, a choice to save that cert. and if I do then my account will generate the ssl error. Seems like only one account can have the certificate.
On another account on a different lunarpages machine, I can't have several machines running Mail at the same time, only the first will get through and the rest will give an SSL error.
Lunarpages says they can't find a problem, though my last email with them told me to use TLS rather than SSL. Of course, there's no way to specify that in Mail anyway, but I'd thought Mail automatically used TLS anyway, and I'm running the right ports (587 for smtp, 993 for incoming).
Feels like it's an issue with Mail or the OS's handling of certificates. Any clues on a fix will be most appreciated as this is getting annoying. I've had to turn off SSL on my wife's and daughter's accounts just so that I can use it. And I have to quit Mail so that on the other account I can get my mail on my iPhone. Having to quit Mail on my main work machine is frustrating -- if I forget to do it I can't get mail.

Issue with self-signed Extensions

I am packaging my extension with self signed cert that is created with the ZXPSignCmd executable.
It functions correctly and the -verify command confirms the ZXP is good to go.
When a user install the extension, however, it only functions once the first time they open Illustrator after installing it. Every time after that, when Illustrator is opened, the panel is completely blank.
This issue can be resolved by enabling PlayerDebugMode on the end-user's .plist file (as outlined for developers in the blog) but obviously this is something I do not want the end user doing. Does anyone have insight as to why the extension panel only loads once, and then breaks? Enabling PlayerDebugMode addresses the issue, but I can't figure out why. I assume is has something to do with the the way it is signed, but I would like confirmation/clarification if anyone knows what is going on.

Ok, I've validated my html and I'm getting a few errors related to Angular. They're all one of two types of errors
Error 1:
<div ng-controller="ExampleController">
Gets the following error:
Attribute ng-controller not allowed on element div at this point.
Error 2:
<my-directive></my-directive>
Gets the following error:
Element my-directive not allowed as child of element div in this context. (Suppressing further errors from this subtree.)
Error 1 is for any Angular related thing...ng-click, ng-controller, ng-show, etc.
Error 2 appears where all my custom directives are.
I did a comparison between the not-working extension and a working one that also uses Angular (without any custom elements). When I validated the working extension, it returned a bunch of Error 1's but no Error 2's (this is expected, seeing as there are no custom elements).
To your question about dynamic HTML - there is none. All of the files are static after they're installed. I double checked this by running a diff-merge between the extension before and after it has been run once. They are exactly the same, so no files are changing.
There are known issues with custom directives in older browsers like IE8 - http://www.befundoo.com/blog/angularjs-directives-in-ie8/
Out of curiosity, I tried adding elements in the head, as described in the above blog, inside my extension. This did not have any effect, and the extension still fails.
I'm considering rewriting my directives as attributes instead of elements, and seeing if that does it. That would take some time though, so if the above info helps narrow down the problem or raises other questions of yours, I'm all ears! Thanks again for all the replies!

Issue with self signed certificates on jetdirect J7949E

I'm having a baffling issue with certificates generated internally for use with some HP printers. I can create certificates and install them on J8003E model jetdirect cards and they work fine. When I try to install certs on any of the J7949E cards they fail with an invalid file message. This applies to the root cert as well.
I'm using the Microsoft cert. authority to generate the files.
The printers with the problematic jet direct cards are 4700 Color laserjets and the working models are 4015x monochrome laser printers. Has anyone had this problem and what was done to resolve it? I'm running the latest version of the firmware on the jetdirect cards but the problem existed with older versions as well.

Ok, I've validated my html and I'm getting a few errors related to Angular. They're all one of two types of errors
Error 1:
<div ng-controller="ExampleController">
Gets the following error:
Attribute ng-controller not allowed on element div at this point.
Error 2:
<my-directive></my-directive>
Gets the following error:
Element my-directive not allowed as child of element div in this context. (Suppressing further errors from this subtree.)
Error 1 is for any Angular related thing...ng-click, ng-controller, ng-show, etc.
Error 2 appears where all my custom directives are.
I did a comparison between the not-working extension and a working one that also uses Angular (without any custom elements). When I validated the working extension, it returned a bunch of Error 1's but no Error 2's (this is expected, seeing as there are no custom elements).
To your question about dynamic HTML - there is none. All of the files are static after they're installed. I double checked this by running a diff-merge between the extension before and after it has been run once. They are exactly the same, so no files are changing.
There are known issues with custom directives in older browsers like IE8 - http://www.befundoo.com/blog/angularjs-directives-in-ie8/
Out of curiosity, I tried adding elements in the head, as described in the above blog, inside my extension. This did not have any effect, and the extension still fails.
I'm considering rewriting my directives as attributes instead of elements, and seeing if that does it. That would take some time though, so if the above info helps narrow down the problem or raises other questions of yours, I'm all ears! Thanks again for all the replies!

Issue with LDAP Connection becuase of Network issue

Hello All,
We have some network issues going on which is causing the NIC (Network interface card) to failover to another NIC. Due to this failover SUN access manager's LDAP connection pool fills up and we see errors in logs "Directory is down". We have to restart the Access manager to resolve this issue which refresh the connection pool of LDAP.
Now we have set the setting as recommended in admin guide/tuning guide. Like
1. Set event connection idle timeout to less that firewall or loadbalancer idle timeout value.
2. event connection retry count and interval on perticular error code.
Despite of above settings its not working out. Is there other way to get all the stale connections back to the LDAP pool without restarting the server?
Or something which handles the network failover or failback?
Regards
Chetan Kulshrestha

The user search name is the value you should be looking at in the LDAP attributes, that's the one that it will send to LDAP on a logon attempt. If you changed this value after mapping a group, I'm not sure but you may have to remap the group to get the change.
So on the LDAP side verify the user search attribute = the username you expect to login with (i.e. cn, samaccountname, uid, etc)
Regards,
Tim

Issue with Minus sign in ALV

Hi,
I have a report program where the prices will be getting displayed. In the out put the last four fields of ALV is having values -235.52; -145.25; -457.25; -417.25. In the foreground execution, the output is proper. But in the background(spool), the same output is getting displayed as 235.52;145.25;-457.25;-417.25.
The first two values 235.52 and 145.25 are getting displayed with out minus sign.
Note: All the above fields are of same data type.
What could be the possible issue here? Please provide your valuable inputs.
Thanks,
Viswanath A

Hi, Below is the fieldcatalog code and is common for all 4 fields.
WHEN 'CPP_FKBTR'.
        wa_fieldcat-col_pos              = 40.
        wa_fieldcat-seltext_l            = 'Commitment for past period'.
        wa_fieldcat-seltext_m            = 'Com past per'.
        wa_fieldcat-reptext_ddic         = 'Commitment past period'.
        wa_fieldcat-ddictxt   = 'L'.
        wa_fieldcat-no_out   = 'X'.
        MODIFY lv_fieldcat FROM wa_fieldcat.
Thanks

Issues with LDAP Server | Solaris 8

Hi All,
In my project we are using Solaris 8 as LDAP server for authentication. Some folders owner and group is assigned to LDAP user by default. I think it should be root and others.
Please find the below example:
*8 drwxr-xr-x 42 gip_admin set_investors_author 3584 Jan 24 00:01 .
*8 drwxr-xr-x 42 gip_admin set_investors_author 3584 Jan 24 00:01 ..
6 -rw-rw-r-- 1 gip_admin ampm_retail_english_author 2062 Jan 22 14:03 archive
2 drwxr-xr-x 2 root nobody 512 Aug 6 2003 cdrom
2 drwx--l--- 3 gip_admin set_investors_author 512 Dec 9 07:33 data
2 drwxr-x--- 2 root other 512 Nov 12 16:20 data1
Can you please help me to solve this issue.....
Thanks in Advance
Manju

Hi,
Its is not mounted on NFS. It is local disk only.
Its is Solaris 8 server.
# ls -lan
drwxr-xr-x 18 0 0 1536 Dec 11 05:00 .
drwxr-xr-x 46 91550 94293 2560 Jan 11 10:37 ..
-rw-rw-rw- 1 0 1 524204 Aug 2 2006 110951-06.jar
drwxr-xr-x 2 0 1 512 Dec 11 05:01 Backup_files
-rw------- 1 0 1 17 Apr 22 2005 DBVERSION
drwxrwxr-x 2 101 2000 512 Oct 18 2004 DD
drwxr-xr-x 2 0 1 512 Sep 19 2006 J2SEPatch-13092006
#cat /etc/passwd
root:x:0:1:Super-User:/:/usr/bin/bash
daemon:x:1:1::/:
bin:x:2:2::/usr/bin:
sys:x:3:3::/:
adm:x:4:4:Admin:/var/adm:
lp:x:71:8:Line Printer Admin:/usr/spool/lp:
uucp:x:5:5:uucp Admin:/usr/lib/uucp:
nuucp:x:9:9:uucp Admin:/var/spool/uucppublic:/usr/lib/uucp/uucico
listen:x:37:4:Network Admin:/usr/net/nls:
nobody:x:60001:60001:Nobody:/:
noaccess:x:60002:60002:No Access User:/:
nobody4:x:65534:65534:SunOS 4.x Nobody:/:
basant:x:1001:10::/apps/basant:/bin/sh
tis:x:1003:1::/apps/tis/:/usr/bin/bash
ldap:x:1004:100::/home/ldap:/bin/sh
iwui:x:100001:60001:Interwoven TeamSite UI Daemons User:/apps/iw-home:/bin/sh
oracle:x:1002:101: Oracle user:/apps/oracle:/bin/sh
vadmin:x:100002:1::/apps/vadmin/:/bin/sh
sshd:x:100003:2003:sshd privsep:/var/empty:/bin/false
temp:x:111112:1::/home/temp:/bin/sh
verity:x:111113:1::/apps/verity/:/usr/bin/bash
test1:x:12312311:1::/home/test1:/bin/sh
hai:x:12312312:1::/home/hai:/bin/sh
#cat /etc/group
[root@sun5-/opt]# cat /etc/group
root::0:root,tomcat
other::1:bpeditor,lpg_admin,lpg_author,lpg_publisher
bin::2:root,bin,daemon
sys::3:root,bin,sys,adm
adm::4:root,adm,daemon
uucp::5:root,uucp
mail::6:root
tty::7:root,tty,adm
lp::8:root,lp,adm
nuucp::9:root,nuucp
staff::10:
daemon::12:root,daemon
sysadmin::14:
nobody::60001:
noaccess::60002:
nogroup::65534:
iplanet::100:
dba::101:
sshd::2003:
apps::94356:
testa::12312323:
oat_users_test::12312325:
Thanks

Issue with Self Signed Certificate Web Sites

I tried searching, but wasn't really getting the answer or help I needed so I figured I would just start a new topic. At my work we have a test server that we use for development and we have a couple of Web Services on there that use Self Signed Certificates. At work, I have a PC (Windows 7) and a Mac Mini (OS X) both of which can connect to the Web Services just fine. But at home, I can't access any of the Web Services at all, my browsers and Xcode keep timing out. I know the Web Service is public, I've accessed it before from other machines outside of work it's just at home I can't. I have an iMac at home, with a linksys router and I don't know if it's a setting on my home computer or network that could be causing it but I don't even get the message in Safari, Chrome or Firefox that the site has a self signed or bad certificate so I know something isn't letting me communicate. Any help would be great (all of the answers I have found suggested to purchase a certificate, which in this case isn't appropriate since they are used for Development until we feel they are ready for production in which case we purchase the certificate). Thanks.

new information:
I tried an other lumia800, the https page worked.
The difference of the two phone was only the language
My phone language was english (US), the other was hungarian.
After that, I switched my phone language settings to hungarian, and tada... the self signed https page worked.
I switched back to english(US) and stopped working.
than I tried english(GB) and worked again.
I did not try other languages, but it looks, if I use english-US language, I cannot see any invalid certificated page
In other language settings, there is no problem.

Sign in issue with email

i am still getting a issue wtih my email sign in i have click twice on the sign in box . i am using the new bt home page both on w8 and the desktop and it does it on both email accounts my primary acc/ and sub acc. my sub acc email address i use to sign into my microsoft account. i have run bt desktop help pc heath check and it come back with cache size/clear history/ auto detect settings. so i clicked on the box to clear them and still got a issue with email sign in.

I have a large number of apps that show me what happens when accessing web-sites and when accessing BT yahoo I have had up to ---14--yes that's right--14 adverts blocked. Also in every case Yahoo is tracking you. These cause problems with the site. Since blocking them things have got better. I say this because I post on a popular US website which has multiple adverts including pop ups and video ads which badly effected the stability of that web-site-many complaints. Now its toned them down complaints have stopped. Try telling Yahoo to stop its ads and see where it gets you.

Any issues with using LDAP on LINUX for GRC 5.2 UME?

Our company is converting our LDAP servers from AIX to LINUX. The DNS name used in our UME connection should not change. Are there any issues with using LDAP on LINUX? We are currently on GRC 5.2 SP9 (in the middle of upgrading to SP12).
Also, I have been trying to connect our test UME system to a test LDAP box that has already been converted to LINUX but keep getting a 'connection failed' error when I try to test it.
Do you have to reboot the server to test changing the LDAP connections? I've been trying it by going into UME, pulling up the LDAP tab, hitting the Modify button, entering the new userid and password for test LDAP, and hitting the Test Connection button. I've verified that this userid and password is correct for test LDAP.
Is there a way to get more information about why the connection failed?
Thanks.

I've been told by our LDAP Support group that none of the other configuration settings should have to be changed. I should only have to change the id and password to connect to a test version of LDAP instead of our regular connection to the production LDAP.
Can you test a connection for a different userid/password without having to reboot/restart the server? Do I need to change these two settings, save then, reboot/restart, and then do the Test Connection button?
Thanks.

I'm having a billing issue with my apple id. I got my first iPhone today and I've signe din etc however before i can download any apps etc i need to resolve an old payment apparently. The problem is i cant enter my new card details because no longer in US

I'm having a billing issue with my apple id. I got my first iPhone today and I've signe din etc however before i can download any apps etc i need to resolve an old payment apparently. The problem is i cant enter my new card details because the issue is registered to when i was in America and i require to pay the funds from an American source. Any ideas how i can resolve this? It wont accept my new card detail as im back in the UK. I think i have posted this in the wrong area but anyone got any ideas?
I have managed to change the rest of my accoutn being registered to the UK i think except this

Hi..
You can email Apple for help but the link is for the iTunes store not the Mac App Store. You've inadvertently poasted in the Using Mac App Store forum but that's ok. Billing issues are the same for the iTunes Store.
Click here > Apple - Support - iTunes Store - Contact Us
It wont accept my new card detail as im back in the UK
Your credit or debit card credentials must be associated with the same country where you reside.
"Although you can browse the iTunes Store in any country without being signed in, you can only purchase content from the iTunes Store for your own country. This is enforced via the billing address associated with your credit card or other payment method that you use with the iTunes Store, rather than your actual geographic location."
From here > The Complete Guide to Using the iTunes Store | iLounge Article

I have an older version of Firefox 3.6.6 I believe I am having an issue with one of the websites I sign into. Is there any way to update to the newest version

I have an older version of Firefox 3.6.6 I believe I am having an issue with one of the websites I sign into. Is there any way to update to the newest version. Without losing all my bookmarks and saved pass words?

Hello johngervais, the latest firefox version is 26.0 (today 4 Jan 2014).
note that [https://support.mozilla.org/en-US/kb/firefox-no-longer-works-some-versions-windows-xp Firefox no longer works with some versions of Windows XP], if you have '''xp with sp2 and above''' you can update to latest version, see : [http://www.mozilla.org/en-US/firefox/26.0/system-requirements/ Firefox 26 System Requirements]
if you are able to update to latest version then see : [https://support.mozilla.org/en-US/kb/common-questions-after-upgrading-firefox-36 Common questions after upgrading from Firefox 3.6]
see also : [https://support.mozilla.org/en-US/kb/firefox-just-updated-why-it-asking-me-update-again Firefox just updated - why is it asking me to update again?]
Don't worry you won't losing bookmarks and passwords after update firefox.
thank you

Encoding issue with " " Less than sign

Hello Experts,
I am working on Receiver Webservice scenario where I am facing issue with "<" less than sign. SAP XI system automatically replace it with "<" sign. I can see the changed value in Audit log of communication channel.
Web service is not able to accept the data and I can see error message in audit log
SOAP: response message contains an error XIAdapter/PARSING/ADAPTER.SOAPEXCEPTION - soap fault: Server was unable to read request. ---> There is an error in XML document (1, 573). ---> The specified node cannot be inserted as the valid child of this node, because the specified node is the wrong type._
When I check the payload in audit log I can see the XML structure properly but as I open it in Notepad I can see character code "<" instead of u201Cless than <u201D symbol.
Audit log XML file is as given below
<?xml version="1.0" encoding="utf-8" ?>
- <ns1:TurnaroundDetail xmlns:ns1="http://isotrak.com/webservices">
<ns1:sessionid>3f2f2592-39d5-456e-8cf2-5d7ee81402c8</ns1:sessionid>
<ns1:data><Request xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><TurnaroundDetail><PlannedJobDepartureDatesFrom="2011-03-01T12:01:23.00" To="2011-03-01T12:07:10.00"/><DepotReference DepotReference="EASTLEIGH"/><DepotReference DepotReference="CHANDLERS"/></TurnaroundDetail></Request></ns1:data>
</ns1:TurnaroundDetail>
When I open it in notepad I can see converted value
<?xml version='1.0' encoding='utf-8'?>
<TurnaroundDetail xmlns='http://isotrak.com/webservices'><sessionid>dcc4adcd-ce8f-403d-a1cf-01fcc5aab066</sessionid><data><Request xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><TurnaroundDetail><PlannedJobDepartureDatesFrom="2011-03-02T08:28:29.00" To="2011-03-02T08:38:09.00"/><DepotReference DepotReference="EASTLEIGH"/><DepotReference DepotReference="CHANDLERS"/></TurnaroundDetail></Request></data></TurnaroundDetail>
I hope this is not caused due to AnonymizerBean configured in receiver SOAP comm channel.
anonymizer.acceptNamespaces http://isotrak.com/webservices ''
anonymizer.encoding ISO-8859-1 (also tried utf-8)
anonymizer.quote ''
Could you please suggest if I can get rid of "<" character and get < less than sign? Or it is obvious behaviour by SAP XI system w.r.t Encoding and Receiver end needs to decode this character?
Note: As per Web service requirement whole XML data to be processed by webservice is populated in single Data field. As here we are populating whole XML data file in one field named data
Thanks in advance.
Vinit.

Simply typing "Test <test> test" into a frame and exporting that yields
<ParaStyle:Body>Test \<test\> test
and reading it back into ID gives the expected result.

Issue with LDAP sign in

Similar Messages

Maybe you are looking for