Issue with userID in CUP

Hi There,
I have configured LDAP as my data source as well as authentication system
when I search for users the User ID's , and they are a bit longer to the user ID in the SAP backend
Since LDAP ID is Network ID what users use to login intially into the system , it is a herendous job to change network ID's , neither we can change the SAP ID's to map it LDAP
is their way to over come this , is their something like user mapping in CUP ( I would expect does field mapping for LDAP to take care of this ?)
Example : LDAP user ID : khammersmith .(NT login)
SAP Login : KHAMMERS
If I create request for KHAMMERSMITH in CUP will it provsion in back end for KHAMMERS ?
Any thoughts guru's?
Regards
KH

Hi Kevin,
This issue is very common with lots of customers ad that is why there is a resolution available in CUP.
It is available in LDAP mapping. Go to LDAP mapping and look at the bottom grid titled 'additional fields'. Click '+' icon, which will add new line in the grid. Now, select SAP User ID from the dropdown list which is populated in the added line. After you have selected SAP user id, you can map it to a particular field in LDAP. You will have to make sure that this particular field corresponding to SAP user ID exists in LDAP for each user.
I hope this helps.
Regards,
Alpesh

Similar Messages

Issue with hide ReqBy if ReqBy = ReqFor

issue with hide ReqBy if ReqBy = ReqFor
So a new requirement on my project is to hide ReqBy if ReqBy=RegFor.
Easy I thought:
if ( ReqInitiatorID == ReqCustomerID )
//code simplified
serviceForm.RC_REQUESTEDBY.setVisible(false);
Well during the service auth moment for some reason the following code is added by nS:

<script type="text/javascript">
    var Moment = 'stauthorizations';
    var EditRequisitionBeforeOrdering = false;
    var Context = 'MyServices';
    var UserID = '4';
    var ReqCustomerID = '0';
    var ReqInitiatorID = '0';
    var ReqID = '404';
    var ReqEntryID = '375';
    var TaskID = '0';
    var TaskName = '';
    var ServiceID = '170';
    var ServiceName = 'One Catalog Service';
    var whichButton = "";
//Why would they reset the vars to 0 is way beyound my understanding
Code above suggests 0=0 and By will always be hidden.
Did anyone else figure this out? I thought I'd ask before spending a lot of time?

This is a "feature" that was fixed in subsequent releases. (Previously ReqCustomerID and ReqInitiatorID were only populated in the ordering moment.) Workaround is to check the (previously stored) values of the PersonId in the ReqBy and ReqFor dictionaries.

Directory Caching issue with Cisco Jabber client for Windows

Hi ,
I am facing cache issue with Cisco Jabber client for Windows. If I do any change related to modification or deletion of contacts in Active Directory/ Callmanager, it does not reflect in the Jabber. Because jabber takes the contacts from the locally stored cache file in the Windows system.
Every time I have to remove the cache file to overcome this issue, practically it's not possible to do the same with all the Widows users. As, if any employee leaves the company and still I can see his contact appears in the "Cisco Jabber client". I have not seen this issue with Android/Apple iOS.
Is there any automated way to remove the cache file?
Here is the detail of CUCM,Presence and Jabber.
CUCM version: 9.1.x
Presence : 9.1.X
Jabber : 10.5 and 10.6

Hello
On our environment we had to install a dedicated Microsoft Certificate Authority "just for Cisco Jabber usage" to house the
Network Device Enrollment Service.
Our certificate for the CUPS were generated on this Certification Authority too.
I discussed this certificate matter with my colleagues this afternoon and nobody seems to remember how these certificates were deployed into the
Enterprise Trust store for the users.
But I think they asked all 400 users to accept the 3 certificates by answering "yes" to the popup instead of using a script deployed by GPO...
I wish you success with that deployment and really hope you have a technical partner that *Knows* this subject.
Our partner left us alone with that unfortunately.
Florent
EDIT: If the "Certutil script method" works, please let me know. This could be useful in our own deployment.

Issues with iTunes Media Folder resetting to default location

This is my 1st post to the Apple Support Community (the problem I have is with iTunes, but I believe it also has to do with the way OS X Lion is setup and the way Networked Drives are mounted in it) ...so I hope I've posted this to the correct place. Thank you in advance for any help I'm going to get here. I have no expirience with Mac OS X's (coming from a Windows background) so please bear with me, but I am a S/W Tester by trade so I'd like to think I'm resonably IT literate.
ISSUE:
I have a problem with iTunes and my Media Folder resetting constantly - my Setup is a MacBook Air, with an Apple Time Capsule 2TB which is providing my Wifi Network.
I want to setup iTunes so that it will permenatly point to my Data Folder on the Apple Time Capsule, so that when I download purchases, synch iPhones, or rip Music it will end up on the Apple Time Capsule and not on the MacBook Air's SDD Drive
I though I had managed to do this, but after I shut down the MacBook Air, and then logged back in to rip some music, iTunes had repointed to the MacBook Air's SDD, and all the CD's i ripped were saved there instead of the Apple Time Capsule. So far I have done the following;
STEPS CARRIED OUT SO FAR:
1) Connected the MacBook Air to the Wifi Network provided by the Apple Time Capsule - I can see the Time Capsule in the Finder app.
2) Gone to GO MENU > LOCATE SERVERS and selected the top level DATA FOLDER on the Apple Time Capsule....I believe that I've managed to create an ALIAS (Shortcut?) that points to this, and it's on my Desktop.
3) Next I went to SETTINGS > USERS > and made sure that ALIAS (Shorcut?) to the DATA FOLDER on the Apple Time Capsule is always loaded up on startup for my UserID
4) Next, I found my iTunes folder, and MOVED it from the MacBook Air SDD to the Apple Time Capsule's HDD over the Wifi Network.
5) I then went to ITUNES PREFERENCES and changed the MEDIA FOLDER it pointed to, from the MacBook Air's SDD to the one on the Apple Time Capsule.
6) Then I logged out and shut down the MacBook Air.
7) I powered on the Macbook Air, and logged in, then ripped some music - I then found that iTunes had created a new iTunes Folder for my User on the MacBooks SDD and all the CD's I ripped had been saved there. Also under the ITUNES PREFERENCES menu, it looks like iTunes had reset the location of the MEDIA FOLDER...
I don't know if this is an issue with iTunes or not - I'm assuming it's a setup issue on my part, and that maybe I haven't created a permenant link to the Apple Time Capsule as I thought I had. If it helps I was attempting to do something similar to whats described in this YouTube video; http://www.youtube.com/watch?v=mA399lEXRTE
Thanks again for any help
Regards
Codename21

Codename21 wrote:
4) Next, I found my iTunes folder, and MOVED it from the MacBook Air SDD to the Apple Time Capsule's HDD over the Wifi Network.
if you really moved your entire iTunes folder, the next step needs to be launching iTunes while holding the option (⌥) key, clicking on choose library at the prompt, and selecting the iTunes folder you moved to the TC.
as for auto-mounting the TC's disk on startup, you might find this discussion interesting.

Any issues with using LDAP on LINUX for GRC 5.2 UME?

Our company is converting our LDAP servers from AIX to LINUX. The DNS name used in our UME connection should not change. Are there any issues with using LDAP on LINUX? We are currently on GRC 5.2 SP9 (in the middle of upgrading to SP12).
Also, I have been trying to connect our test UME system to a test LDAP box that has already been converted to LINUX but keep getting a 'connection failed' error when I try to test it.
Do you have to reboot the server to test changing the LDAP connections? I've been trying it by going into UME, pulling up the LDAP tab, hitting the Modify button, entering the new userid and password for test LDAP, and hitting the Test Connection button. I've verified that this userid and password is correct for test LDAP.
Is there a way to get more information about why the connection failed?
Thanks.

I've been told by our LDAP Support group that none of the other configuration settings should have to be changed. I should only have to change the id and password to connect to a test version of LDAP instead of our regular connection to the production LDAP.
Can you test a connection for a different userid/password without having to reboot/restart the server? Do I need to change these two settings, save then, reboot/restart, and then do the Test Connection button?
Thanks.

Arabic PDF Report generate issue with Arabic Letters

Hi
I have an issue with Arabic PDF report,its display Junk characters,
where as English PDF report is working fine and Arabic Text report is working fine.
I need help to fix the above issue.

970649 wrote:
Hi
I have an issue with Arabic PDF report,its display Junk characters,
where as English PDF report is working fine and Arabic Text report is working fine.
I need help to fix the above issue.Please post the details of the application release, database version and OS along with the database characterset.
Please see these docs/links.
Fonts Displayed As Junk Characters In PDF Report Output [ID 1218354.1]
How To Print XML Publisher PDF Reports From The Concurrent Manager [ID 338990.1]
How To Generate And Print Reports In PDF Format From EBS With The UTF8 Character Set [ID 443778.1]
How to Generate PDF Output With UTF8 in R12? [ID 778970.1]
Arabic Data Appears As Junk , Currently using Forms Patchset 16 & XML [ID 755786.1]
Why Printer Print Junk characters when printing rtf Bi Publisher Report Out Put? [ID 1497767.1]
https://forums.oracle.com/forums/search.jspa?threadID=&q=PDF+AND+Junk&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
Thanks,
Hussein

Issue with retrieveing the Manager of a System User in a Custom workflow - CRM 2013

Issues with custom workflow activity in CRM 2013 On-prem
I'm trying to pass the Manager of the System
here is the code that I'm running, it gets to setting the MANAGER and stops
I put the ran the FetchXML seperatly and it does return a value so I know what bit works
public class CaseAccountManagerManagersLookup : CodeActivity
// Inputs
[Input("Enter Case")]
[ReferenceTarget("incident")]
public InArgument<EntityReference> CA { get; set; }
// Outputs
[Output("Manager Output")]
[ReferenceTarget("systemuser")]
public OutArgument<EntityReference> AMOUT { get; set; }
protected override void Execute(CodeActivityContext executionContext)
// Context
IWorkflowContext context = executionContext.GetExtension<IWorkflowContext>();
IOrganizationServiceFactory serviceFactory = executionContext.GetExtension<IOrganizationServiceFactory>();
IOrganizationService service = serviceFactory.CreateOrganizationService(context.UserId);
//Create the tracing service
ITracingService tracingService = executionContext.GetExtension<ITracingService>();
// get the account and renewals manager ID's
var CASE = CA.Get<EntityReference>(executionContext);
tracingService.Trace("Case ID = " + CASE.Id);
try
// FETCH
string fetchXml = string.Format(@"
<fetch version='1.0' output-format='xml-platform' mapping='logical' distinct='false'>
<entity name='incident'>
<attribute name='title' />
<attribute name='incidentid' />
<order attribute='title' descending='false' />
<filter type='and'>
<condition attribute='incidentid' operator='eq' value='{0}' />
</filter>
<link-entity name='contact' from='contactid' to='customerid' alias='ak'>
<link-entity name='account' from='accountid' to='parentcustomerid' alias='al'>
<link-entity name='systemuser' from='systemuserid' to='bc_dssalesperson' alias='am'>
<attribute name='parentsystemuserid' />
</link-entity>
</link-entity>
</link-entity>
</entity>
</fetch>", CASE.Id);
EntityCollection case_results = service.RetrieveMultiple(new FetchExpression(fetchXml));
//tracingService.Trace("fetch has run");
if (case_results.Entities.Count != 0)
foreach (var a in case_results.Entities)
//if (a.Attributes.Contains("ai_parentsystemuserid"))
tracingService.Trace("set manager id next");
var MANAGERID = (EntityReference)a.Attributes["parentsystemuserid"];
tracingService.Trace("manager id set");
AMOUT.Set(executionContext, MANAGERID);
throw new InvalidOperationException("Want to see trace");
tracingService.Trace("end ");
catch (Exception e)
throw new InvalidPluginExecutionException("Plugin - CaseAccountManagerManagerLookup - " + e.Message);
finally
throw new InvalidOperationException("Want to see trace");
Pete

Hello,
Try to use am.parentsystemuserid instead of just parentsystemuserid.
Dynamics CRM MVP/ Technical Evangelist at
SlickData LLC
My blog

Issue with HTML tags visible in Outlook emails

Hi everyone, I'm having an issue with a website I'm working on.
On our site, we have a page that generates emails after certain events occur. These are sent to a forwarding address on our mail server, which is then sent to several users on our mail server. These users have their accounts set up in Outlook (one in 2007,
one in Mac 2011).
We're are having an issue where these emails are displaying in Outlook with all of the HTML tags in the email visible. One of the users spoke to Microsoft support, and they remoted in and went through their Outlook settings and were not able to find any issues
there.
This issue is not global exactly. When one of the users added their email to their iPhone, the email displayed correctly. We added a Gmail account and my work account (which I also access through Outlook) to the forwarding list, and it displayed correctly in
both. When we view these emails in the server's webmail client, the emails display fine. The issue seems to be with some discrepancy between Outlook and our email server.
I spoke to our webhost about the issue, and they swore up and down the issue had nothing to do with them, and that it had to be an Outlook issue. I've had several professional web developers analyze the code that creates these emails, and they found nothing
wrong with it. Something that several of my colleagues and our webhost suggested is that the issue could be with the email headers. This is the header for the email, as viewed through Outlook:
Return-Path: <[email protected]>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on clubcrown.com
X-Spam-Level: *
X-Spam-Status: No, score=1.5 required=7.0 tests=HTML_MESSAGE,MIME_HTML_ONLY,
NO_DNS_FOR_FROM,NO_RELAYS autolearn=no version=3.3.1
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: by x.com (Postfix, from userid 30)
id 50F7123D9E; Tue, 11 Feb 2014 14:20:00 -0500 (EST)
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: by x.com (Postfix, from userid 10000)
id EC28323DA2; Tue, 11 Feb 2014 14:19:58 -0500 (EST)
To: [email protected]
Subject: A wholesale order has been placed
X-PHP-Originating-Script: 10000:thanks.php
MIME-Version: 1.0
Any help would be greatly appreciated. Let me know if more information is needed. Thank you.

Glad to hear that you have found the solution. And thank you for sharing the solution here, it will be helpful to other community members who have same questions.
Cheers,
Steve Fan
TechNet Community Support

Oracle 10g - issue with "DELETE from TABLE WHERE ID in (1,2,3)" (cfqueryparam used)

Hello, everyone.
I am having issues with running a DELETE statement on an Oracle 10g database.
DELETE
FROM tableA
WHERE ID in (1,2,3)
If there is only one ID for the IN clause, it works. But if more than one ID is supplied, I get an "SQL command not properly ended" error message. Here is the query as CF:
DELETE
FROM TRAINING
WHERE userID = <cfqueryparam cfsqltype="CF_SQL_VARCHAR" value="#trim(form.userID)#">
AND TRAINING_ID in <cfqueryparam value="#form.trainingIDs#" cfsqltype="CF_SQL_INTEGER" list="yes">
Anyone work with Oracle that can help me with this? I'm an experienced MS-SQL developer; Oracle is new to me.
Thanks,
^_^

Nevermind.. a co-worker just told me that I still have to use parenthesis around the values for the IN clause.

Issue with Lockout Duration in Password Policy in OAM

Hi,
We are facing an issue with the lockout duration configuration in the password policies in the identity manager interface for our OAM setup.
Oracle Access Manager 10g version 10.1.4
User/Policy Store: ADAM Ldap [Microsoft ADAM 2003]
After we lock out a user in our LDAP after 5 wrong attempts, the two attribute values in ADAM get updated to 5:
oblogintrycount
badPwdCount
Also I see that "oblockouttime" gets updated with an unix timestamp.
Now, we have set the "Lockout Duration" in the password policy as 1 hour. So, after 1 hour, the user should be unlocked in ADAM.
However, after 1 hour when the user tries to login, he/she gets the error that a wrong password has been entered for the userID.
When we check in ADAM, we see that the value of "oblogintrycount" was indeed reset. However the value of "badPwdCount" did not get reset and is still stuck at 5.
If we reset both these attribute values to 0, the user can login again.
Now, is OAM expected to reset both these attribute values to 0, or does it only reset the oblix attributes?
If it is the latter, is there a way around to resolve this issue? Or are we doing something wrong here?
Please let us know your feedback.
Thanks!
Abhishek.

OAM only works with the ob* attributes, and not with badPwdCount attribute of the AD (ADAM). I think for some reason the password and account policies of the AD is being triggerred. Disable the AD password policy and it will be Ok.
Hope this helps. Let us know.

Has anyone had issues with Planning security refreshing in Essbase

I am on Planning version 9.3.0.1 and we are having issues with planning users being able to use an essbase connection to pull data from smartview. They are able to see data in web forms in planning but they get #no access when they try to connect to the same data in smartview.
Has anyone else experieced this issue.

If user works when you provision individually its because they were set in the environment in EAS.
group has to have all the access needed (bug in orig). css file open a ticket for the file name. example user needs calc access you setup calc but bug in system is not also giving user read and write access. Thus you can individually add this to the group in provisioning area in shared services. in EAS goto File open- editors create/run script with
alter user 'userID' Add application_access_type Planning;
alter user 'userID' add application_access_type Essbase; to add user to the environment if error you need to refresh eas first then run maxl script for planning you also need to go to workspace and select any of your dimensions all your groups ...edit .. migrate identities.. to get group/Users in planning wether adding or removing users. when you do planning changes you need to do database and security filters refresh.

OIM integration with OpenDJ : Issue with OU Reconciliation

Hi All,
I am trying to integrate OIM and OpenDJ for provisioning of users.I am facing issues with OU reconciliation. I had performed the following steps.
1. Copied OID 11.1.1.5 connector binaries under OIM_HOME\server\ConnectorDefaultDirectory.
2. Installed connector by choosing DSEE server from the list.
3. Create IT Rsource and Application instance.
4. Modified Lookup.LDAP.Configuration based on OpenDJ schema.
5. Modified "LDAP Connector OU Lookup Reconciliation" scheduled task parameters for IT resource name and executed it. it executes successfully without any errors but the OU from OpenDJ are not populated into the organization lookup( Lookup.LDAP.Organization - this is the Lookup name value specified in the scheduled task ).
6. I had enabled the connector logs for debugging, as per logs when the scheduled job is ran I can see the organizationunits from OpenDj in the logs. Even the logs states that scheduled task was executes successfully.
Please suggest why the lookup name is not being populated by the organizations. Please provide any suggestions or steps to debug this furthur.
For example, below lines from the logs shows the organization(ou=Internal) from OpenDJ.
[2013-01-13T01:55:16.040-08:00] [oim_server1] [TRACE] [] [ORG.IDENTITYCONNECTORS.LDAP.CONNECTOROBJECTUTIL] [tid: Thread-322] [userId: oiminternal] [ecid: 0000JkmuRveFg4Uay5R_6G1GwaZX000001,1:28786] [SRC_CLASS: com.thortech.util.logging.Logger] [APP: oim#11.1.2.0.0] [SRC_METHOD: debug] org.identityconnectors.ldap.ConnectorObjectUtil : createConnectorObject : ENTRY createConnectorObject(ldapGroups=org.identityconnectors.ldap.LdapConnection@1773f6bb,posixRefAttrs=ObjectClass: OU,posixGroups=org.identityconnectors.ldap.GroupHelper@22244683,roles=org.identityconnectors.ldap.EDIRRolesHelper@7b9153f7,parentDN=o=sca,rdnAttributes=ou=Internal,ou=External,ou=spe: null:null:{entryuuid=entryUUID: 873193ec-b60d-35fb-b7e2-f8da3c50aa8e, ou=ou: Internal, objectclass=objectClass: organizationalUnit, top},rdnAttributeType=[__NAME__, __UID__, objectClass, Organisation Unit Name, ou],value=true)
[2013-01-13T01:55:16.041-08:00] [oim_server1] [TRACE] [] [ORG.IDENTITYCONNECTORS.LDAP.LDAPENTRY] [tid: Thread-322] [userId: oiminternal] [ecid: 0000JkmuRveFg4Uay5R_6G1GwaZX000001,1:28786] [SRC_CLASS: com.thortech.util.logging.Logger] [APP: oim#11.1.2.0.0] [SRC_METHOD: debug] org.identityconnectors.ldap.LdapEntry : create : ENTRY create(baseDN=o=sca,*result=ou=Internal,ou=External,ou=spe*: null:null:{entryuuid=entryUUID: 873193ec-b60d-35fb-b7e2-f8da3c50aa8e, ou=ou: Internal, objectclass=objectClass: organizationalUnit, top})
[2013-01-13T01:55:16.041-08:00] [oim_server1] [TRACE] [] [ORG.IDENTITYCONNECTORS.LDAP.LDAPENTRY] [tid: Thread-322] [userId: oiminternal] [ecid: 0000JkmuRveFg4Uay5R_6G1GwaZX000001,1:28786] [SRC_CLASS: com.thortech.util.logging.Logger] [APP: oim#11.1.2.0.0] [SRC_METHOD: debug] org.identityconnectors.ldap.LdapEntry : create : RETURN create(baseDN=o=sca,result=ou=Internal,ou=External,ou=spe: null:null:{entryuuid=entryUUID: 873193ec-b60d-35fb-b7e2-f8da3c50aa8e, ou=ou: Internal, objectclass=objectClass: organizationalUnit, top}) returns: org.identityconnectors.ldap.LdapEntry$SearchResultBased@73366019
Thanks,
Anumolu.
Edited by: Anumolu111 on Jan 13, 2013 4:14 AM

Hi All,
I am trying to integrate OIM and OpenDJ for provisioning of users.I am facing issues with OU reconciliation. I had performed the following steps.
1. Copied OID 11.1.1.5 connector binaries under OIM_HOME\server\ConnectorDefaultDirectory.
2. Installed connector by choosing DSEE server from the list.
3. Create IT Rsource and Application instance.
4. Modified Lookup.LDAP.Configuration based on OpenDJ schema.
5. Modified "LDAP Connector OU Lookup Reconciliation" scheduled task parameters for IT resource name and executed it. it executes successfully without any errors but the OU from OpenDJ are not populated into the organization lookup( Lookup.LDAP.Organization - this is the Lookup name value specified in the scheduled task ).
6. I had enabled the connector logs for debugging, as per logs when the scheduled job is ran I can see the organizationunits from OpenDj in the logs. Even the logs states that scheduled task was executes successfully.
Please suggest why the lookup name is not being populated by the organizations. Please provide any suggestions or steps to debug this furthur.
For example, below lines from the logs shows the organization(ou=Internal) from OpenDJ.
[2013-01-13T01:55:16.040-08:00] [oim_server1] [TRACE] [] [ORG.IDENTITYCONNECTORS.LDAP.CONNECTOROBJECTUTIL] [tid: Thread-322] [userId: oiminternal] [ecid: 0000JkmuRveFg4Uay5R_6G1GwaZX000001,1:28786] [SRC_CLASS: com.thortech.util.logging.Logger] [APP: oim#11.1.2.0.0] [SRC_METHOD: debug] org.identityconnectors.ldap.ConnectorObjectUtil : createConnectorObject : ENTRY createConnectorObject(ldapGroups=org.identityconnectors.ldap.LdapConnection@1773f6bb,posixRefAttrs=ObjectClass: OU,posixGroups=org.identityconnectors.ldap.GroupHelper@22244683,roles=org.identityconnectors.ldap.EDIRRolesHelper@7b9153f7,parentDN=o=sca,rdnAttributes=ou=Internal,ou=External,ou=spe: null:null:{entryuuid=entryUUID: 873193ec-b60d-35fb-b7e2-f8da3c50aa8e, ou=ou: Internal, objectclass=objectClass: organizationalUnit, top},rdnAttributeType=[__NAME__, __UID__, objectClass, Organisation Unit Name, ou],value=true)
[2013-01-13T01:55:16.041-08:00] [oim_server1] [TRACE] [] [ORG.IDENTITYCONNECTORS.LDAP.LDAPENTRY] [tid: Thread-322] [userId: oiminternal] [ecid: 0000JkmuRveFg4Uay5R_6G1GwaZX000001,1:28786] [SRC_CLASS: com.thortech.util.logging.Logger] [APP: oim#11.1.2.0.0] [SRC_METHOD: debug] org.identityconnectors.ldap.LdapEntry : create : ENTRY create(baseDN=o=sca,*result=ou=Internal,ou=External,ou=spe*: null:null:{entryuuid=entryUUID: 873193ec-b60d-35fb-b7e2-f8da3c50aa8e, ou=ou: Internal, objectclass=objectClass: organizationalUnit, top})
[2013-01-13T01:55:16.041-08:00] [oim_server1] [TRACE] [] [ORG.IDENTITYCONNECTORS.LDAP.LDAPENTRY] [tid: Thread-322] [userId: oiminternal] [ecid: 0000JkmuRveFg4Uay5R_6G1GwaZX000001,1:28786] [SRC_CLASS: com.thortech.util.logging.Logger] [APP: oim#11.1.2.0.0] [SRC_METHOD: debug] org.identityconnectors.ldap.LdapEntry : create : RETURN create(baseDN=o=sca,result=ou=Internal,ou=External,ou=spe: null:null:{entryuuid=entryUUID: 873193ec-b60d-35fb-b7e2-f8da3c50aa8e, ou=ou: Internal, objectclass=objectClass: organizationalUnit, top}) returns: org.identityconnectors.ldap.LdapEntry$SearchResultBased@73366019
Thanks,
Anumolu.
Edited by: Anumolu111 on Jan 13, 2013 4:14 AM

Issues with our SSL connection to the Web dispatcher

HI Alle,
I having issues with our SSL connection to the Web dispatcher with SAP Web AS. Below is the error in the log files form dev_webdisp:
Started service 80 for protocol HTTP on host "wdpeht1"(on all adapters) (processing timeout=120, keep_alive_timeout=30)
[Thr 368] =================================================
[Thr 368] = SSL Initialization on PC with Windows NT
[Thr 368] =   (701_REL,Jan 28 2010,mt,ascii-uc,SAP_UC/size_t/void* = 16/64/64)
[Thr 368]   profile param "ssl/ssl_lib" = "E:\usr\sap\WDP\W00\sec\sapcrypto.dll"
           resulting Filename = "E:\usr\sap\WDP\W00\sec\sapcrypto.dll"
[Thr 368]   profile param "ssl/server_pse" = "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
           resulting Filename = "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
[Thr 368] =   found SAPCRYPTOLIB 5.5.5C pl29 (Jan 30 2010) MT-safe
[Thr 368] =   current UserID: WDPEHT1\SAPServiceWDP
[Thr 368] =   found SECUDIR environment variable
[Thr 368] =   using SECUDIR=E:\usr\sap\WDP\W00\sec
[Thr 368] * ERROR =>   secudessl_Create_SSL_CTX(): PSE "E:\usr\sap\WDP\W00\sec\SAPSSL.pse" not found! [ssslsecu.c   1354]
[Thr 368] secudessl_Create_SSL_CTX: SSL_CTX_set_default_pse_by_name() failed --
secude_error 4129 (0x00001021) = "The PSE does not exist"*
[Thr 368] >> -
Begin of Secude-SSL Errorstack -
>>
[Thr 368] ERROR in SSL_CTX_set_default_pse_by_name: (4129/0x1021) The PSE does not exist : "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
ERROR in ssl_set_pse: (4129/0x1021) The PSE does not exist : "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
ERROR in af_open: (4129/0x1021) The PSE does not exist : "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
ERROR in secsw_open: (4129/0x1021) The PSE does not exist : "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
ERROR in secsw_open_pse_or_extension: (4129/0x1021) The PSE does not exist : "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
ERROR in sec_get_PSEtype: (4129/0x1021) The PSE does not exist : "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
[Thr 368] << -
End of Secude-SSL Errorstack -
[Thr 368] * ERROR => SapISSLAddCredential(): Error SSSLERR_PSE_ERROR trying to create SERVER Credential
        for "E:\usr\sap\WDP\W00\sec\SAPSSL.pse" [ssslxxi.c    2278]*
[Thr 368]* ERROR => Initialization of SSL library failed -- NO SSL available!
[Thr 368] =================================================
[Thr 368] <<- ERROR: SapSSLInit(read_profile=1)==SSSLERR_PSE_ERROR*
[Thr 368] *** ERROR => IcmAddService: SapSSLInit (rc=-40): SSSLERR_PSE_ERROR [icxxserv.c   319]
[Thr 2128] IcmCreateWorkerThreads: created worker thread 0
Regards

Hi Olivier,
Thanks for replay,
The PSE does exist in my SEC "E:\usr\sap\WDP\W00\sec\SAPSSL.pse" .
I did tried Again I get this error. I think I missing som parameter
= SSL Initialization on PC with Windows NT
[Thr 2292] =   (701_REL,Jan 28 2010,mt,ascii-uc,SAP_UC/size_t/void* = 16/64/64)
[Thr 2292]   profile param "ssl/ssl_lib" = "E:\usr\sap\WDP\W00\sec\sapcrypto.dll"
           resulting Filename = "E:\usr\sap\WDP\W00\sec\sapcrypto.dll"
[Thr 2292]   profile param "ssl/server_pse" = "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
           resulting Filename = "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"
[Thr 2292] =   found SAPCRYPTOLIB 5.5.5C pl29 (Jan 30 2010) MT-safe
[Thr 2292] =   current UserID: WDPEHT1\SAPServiceWDP
[Thr 2292] =   found SECUDIR environment variable
[Thr 2292] =   using SECUDIR=E:\usr\sap\WDP\W00\sec
[Thr 2292] -*ERROR =>   secudessl_Create_SSL_CTX(): PSE "E:\usr\sap\WDP\W00\sec\SAPSSL.pse" not found! [ssslsecu.c   1354]
[Thr 2292] secudessl_Create_SSL_CTX: SSL_CTX_set_default_pse_by_name() failed --
secude_error 1281 (0x00000501) = "open("E:\usr\sap\WDP\W00\sec\SAPSSL.pse") returned"*-
[Thr 2292] >> -
Begin of Secude-SSL Errorstack -
>>
[Thr 2292] -*ERROR in SSL_CTX_set_default_pse_by_name: (1281/0x0501) open("E:\usr\sap\WDP\W00\sec\SAPSSL.pse") returned : "Permission denied"*-
-*ERROR in ssl_set_pse: (1281/0x0501) open("E:\usr\sap\WDP\W00\sec\SAPSSL.pse") returned : "Permission denied"
ERROR in af_open: (1281/0x0501) open("E:\usr\sap\WDP\W00\sec\SAPSSL.pse") returned : "Permission denied"*-
ERROR in secsw_open: (1281/0x0501) open("E:\usr\sap\WDP\W00\sec\SAPSSL.pse") returned : "Permission denied"
ERROR in secsw_open_pse_or_extension: (1281/0x0501) open("E:\usr\sap\WDP\W00\sec\SAPSSL.pse") returned : "Permission denied"
ERROR in sec_get_PSEtype: (1281/0x0501) open("E:\usr\sap\WDP\W00\sec\SAPSSL.pse") returned : "Permission denied"
ERROR in aux_read_PSEFile: (1281/0x0501) open("E:\usr\sap\WDP\W00\sec\SAPSSL.pse") returned : "Permission denied"
ERROR in aux_file2OctetString: (1281/0x0501) open("E:\usr\sap\WDP\W00\sec\SAPSSL.pse") returned : "Permission denied"
[Thr 2292] << -
End of Secude-SSL Errorstack -
[Thr 2292] *** ERROR => SapISSLAddCredential(): Error SSSLERR_PSE_ERROR trying to create SERVER Credential
        for "E:\usr\sap\WDP\W00\sec\SAPSSL.pse" [ssslxxi.c    2278]
[Thr 2292] *** ERROR => Initialization of SSL library failed -- NO SSL available!
[Thr 2292] =================================================
[Thr 2292] <<- ERROR: SapSSLInit(read_profile=1)==SSSLERR_PSE_ERROR
[Thr 2292] *** ERROR => IcmAddService: SapSSLInit (rc=-40): SSSLERR_PSE_ERROR [icxxserv.c   319]
Her is my profile parameter for https.
h6*#Https parameters for Web dispatcher E:\usr\sap\WDP\W00\sec
#icm/server_port_0 = PROT=HTTPS,PORT=443$$
DIR_INSTANCE = E:\usr\sap\WDP\W00\sec
ssl/ssl_lib = E:\usr\sap\WDP\W00\sec\sapcrypto.dll
ssl/server_pse = E:\usr\sap\WDP\W00\sec\SAPSSL.pse
wdisp/ssl_cred = E:\usr\sap\WDP\W00\sec\SAPSSL.pse
ssf/ssfapi_lib = E:\usr\sap\WDP\W00\sec\sapcrypto.dll
sec/libsapsecu = E:\usr\sap\WDP\W00\sec\sapcrypto.dll
ssf/name = SAPSECULIB
wdisp/ssl_encrypt = 0
icm/server_port_1=PROT=HTTPS, PORT=8400, TIMEOUT=120
###icm/server_port_1=PROT=HTTPS, PORT=44302, TIMEOUT=900 (old)
########icm/server_port_0 = PROT=HTTP,PORT=80, TIMEOUT=120
icm/HTTPS/verify_client=0
wdisp/add_client_protocol_header = true
wdisp/auto_refresh = 120
wdisp/max_servers = 100
wdisp/ssl_auth= 0
ms/https_port = 8400
wdisp/HTTP/use_pool_for_new_conn=1
wdisp/HTTPS/dest_logon_group = HTTPS
#wdisp/server_info_protocol = https
#wdisp/group_info_protocol = https
#wdisp/url_map_protocol = https
wdisp/ssl_ignore_host_mismatch = fals
icm/HTTPS/forward_ccert_as_header = true
icm/HTTPS/trust_client_with_issuer = CN = SAP CA,*
icm/HTTPS/trust_client_with_subject = CN = sapwebdisp,*h6
Regards

Issues with Mac OS X Server 10.4.8 and Windows File sharing

We are having lots of issues with our SMB share on Mac OS X Server 10.4.8. The main issues are the following:
- Group ACLs seem to not work properly, and I have had to add dozens of manual permissions on a per-user basis
- Often, users open a file in read-only mode, without any reason, and can't modify it
- Often, users open a file with full write access, but then cannot save it and have to use a "save as function".
After having looked all over the Internet and on the Apple's discussions forum, it seems like this issue has been around for quite some time now:
http://discussions.apple.com/search.jspa?forumID=702&threadID=&q=smbANDpermissions&objID=f702&dateRange=thisyear&userID=&numResults=15&rankBy=10001
http://discussions.apple.com/thread.jspa?messageID=1546867&#1546867
http://discussions.apple.com/thread.jspa?messageID=647251
And no real answer/solution has been provided by Apple yet.
I also looked on Samba related pages, and it seems like these issues were Samba related (both ACL/OpenLDAP and Microsoft Office file handling issues), and the current version of Samba (3.0.23c) seem to have solved lots of issues in these areas:
http://us1.samba.org/samba/history/samba-3.0.23c.html
Apple ships Samba 3.0.10 (16 Dec 2004) with 10.4.8, which makes the shipping version at list 15 versions (and 18 months) behind the current Samba release (30 Aug 2006).
People within the company are obviously quite unhappy with the situation and beyond me looking like a fool for migrating from Windows Server to OS X, I now need to find a solution to the issues.
I would like to know what is the official and Apple recommended way to solve this issue.
Kind regards,
Pejvan
It seems like Apple is totally ignoring the issues, users are facing with SMB shares, while their emphasize as a selling point how OS X Server is a great "windows file" server.

Hiya
Thanks for the reply.
>Is there a UPS involved?
I wish there had been. I might not be having to deal with it now! :-)
>If you boot from the Install Disc & use System Profiler there, does the Same RAM situation? Did you physically >check those slots? Thinking maybe the OS is kicking them out on bootup?
I've had the following suggested to me on another forum - "My guess on the RAM error is this. You have a processor that wants the RAM to be dual channeled and since it reads both A slot are populated it wants both B slots to be populated. Remove A2 and put it in B1"
But unless it is degrading performance I'll probably just leave it.
> Still can't get it to boot from the Clone holding the Option/alt key at bootup?
I can get it to boot from the Clone using the option key but it's a pretty random event. I can try for ages and then suddenly it'll work. Or it may work first time. It does seems to work more easily after a PRAM zap. The funny thing is that once it is booted up it will re-start in any way I want it to (the boot volume, the clone, a disk, single user mode etc). It is just hard to boot from a full shutdown.
I'm thinking that if I ca get the start-up issue fixed then I can fix the RAID issue at my leisure and even add the hard-drive that the clone is currently on to the RAID array.
Thanks again.

Is anyone having issues with printing to network printers with 10.8.4?

I have upgraded our schools to Mountain Lion. Ever since the beginning of the year we have had issues with network printers. They are all HP printers, when they go to sleep a user has to turn off the printer and turn it back on then resend the print job. Now users are being asked to put a password itno the Print Operator group. This never happened before. Cups is changing the queue names to MCX_1 or 2 etc. Not keeping the queue name. All these people are in WGM and have printers set for their group. So I have reset the printer settings on the machines, then restart relog in and get the list of printers they can print too and within 1 day they are unable to print. I am trying my very best to get this issue fixed and all solutions have been exausted. So without having to go to every computer and going into the Ldadmin group thru a terminal, is there anything that anyone has done to fix this issue with out visiting every computer. Thank you.

The printers failing to wake from sleep is an issue. A print request should be waking them.
You have not mentioned what printer server is involved. I could assume it is OS X Server since you mentoned WGM, but it would be nice to have you confirm this. Then I can start to suggest some actions.

Issue with userID in CUP

Similar Messages

Maybe you are looking for