Jco Function issue : The initial password has expired (request a new one)
Hi Friends,
Could you please help me to resolve this issue. I am able to start my session using SAP Jco Start Action block. But while invoking the BAPI using
SAP JCo Function action block I am getting the below error. I am 100% sure that my credentials are correct. I am able to logon to ECC using SAP Front GUI.
I am using MII 14.0 patch SP4
Any help on this very much appreciated.
<Rowsets DateCreated="2014-07-22T12:33:49" EndDate="2014-07-22T12:33:49" StartDate="2014-07-22T12:33:49" Version="14.0 SP4 Patch 0 (Nov 22, 2013)">
<FatalError>JCOProxy error: Problem retrieving JCO.Function object: The initial password has expired (request a new one)</FatalError>
</Rowsets>]]
Thanks in advance
Shaji
Hi Friends,
This issue got resolved when I cleared the BAPI list cache at MII using below URL.
http://hostname:port/XMII/JCOProxy?Mode=Reset
Similar Messages
-
New iphone 4 indicates that temporary voicemail password has expired, select a new one. In trying to do so, the first step is to enter current password. I either did not have one, or I don't remember it. Could the prompt mean just to enter a new password?
Thanks, JK. I called my carrier, and now I'm on to the next learning curve. Great to have the help.
Sheila87 -
Hi there,
I am considering up grading to lightroom 5. But first I need to be sure I can retrieve my original library, which has been replaced by images from iphoto I hadn't slected. I currently use a lightroom 3 and have spent countless hours as a professional photographer improving my original photographs. Can I speak to someone regarding this matter?
I would really appreciate your help in resolving this matter asap.
Kind reagards
PabloMorning Geoff,
Hope you slept well. I have been busy looking into many of the things you
have told me.
Where should I start so much info.
There are 7 Ircat folders. Some empty some contain approx 7000 images. Some
of the images /altered on lightroom are here few maybe 50. Although they
are missing or offline and now in the CR2 format ( photoshop elements),
which is very strange. I think this an issue as to why it may have all
gone, changed? In another Ircat folder many images are in the condition I
left them although not all of them, the latest 2013 are missing. Also in
another extension Ircat folder many of the images are there I imagine the
same 7000 but cant be seen?
On my hard drive there is a folder I cannot open, it reads in progress and
says no App to open document, search App store for Application. Perhaps
this is the key, I also have little storage space on my hard drive.
Many images under 2012 on hard drive have the tiff image, with altered
version created on lightroom some now show as CR2 version to view the photo
photoshop elements opens up automatically, which I never use. I do feel
this is a major reason/ issue?
Also under certain folders with dates my images appear pixelated or blurry.
Under another heading the jpg version is great approx 73 some are missing
the latest and most important, unfortunately I want in Tiff.
Under another folder on hard drive I have many of the images I am chasing
approx 60 but the size is a concern 2-2.5mb, should be around 40mb?
In another folder all are in CR2 photoshop elements.
Time Machine, which I'm sure was inactive tells me it could not back up
disk?
Under thumbnails it looked promising all in DNG many missing and in CR2
format.
I thought I would let you know in case I haven't already that the memory on
the imac is very low, hence why I began trashing/ deleting images yesterday
thet are saved on my hard drive this is when all this mess occured.
Are there short cuts I can use to remove images that are duplicates without
lightroom becoming tempermental?
Were too next? I am hoping the originals can be found and installed in
their original form.
I really appreciate all of your help and time, please help me
Cheers mate
Pablo
On Mon, Dec 29, 2014 at 8:06 PM, Pablo Hughes <[email protected]> -
Password has expired + port change
Dear friends, i have managed to install NW04 SP15, and can login using the admin/admin combination. when i create another user or try to login using the Administrator loginid it gives me an error "Password has expired". Can some one help me solve this issue.
Also i want to change the 50000 port to the default port of 80. is this possible if yes where is the option to get this done...any help will be appreciatedHi Glenn,
When you have created the users then you must have given some roles to them. If any of the user you have created has User Administration role, then you can change the password of the "ADMIN" user.
Apart from that you can also set the initial values of admin user from the visual Administration. You can change the setting of the Administrator UID/Pass to defualt which changes it back to admin/admin. I hope these would help you.
Also, I dont know why do you want to change the port to 80. Actually when you install Portal 50000 is the defualt port for it. It is not the 80 port which we generally wants. This is SAP specific port. The port number depends on the J2ee Instance installed at the installation of the Poratl. So I would say that there is no need for changing this port.
Regards
Pravesh
PS: Please consider rewarding points if helpful. -
"Password has expired" for user created via UME API
Hi,
I have written a service that processes new user accounts and uses the UME API to create them. The code works fine on my local Sneak Preview installation of EP6 SP16, allowing the created users to logon and forcing them to change their password on first login.
When I try and run this code on EP6 SP14 it completes without generating any exceptions but when I try and login I get the message "Password has expired" and cannot login or change the users password.
Does anyone know why?
I have the following UME settings for both servers:
ume.logon.security_policy.password_change_allowed = TRUE
ume.logon.security_policy.password_change_required = TRUE
ume.logon.security_policy.password_expire_days = 99999
The SP14 server also uses LDAP to authenticate users primarily and has the following setting:
ume.persistence.data_source_configuration = dataSourceConfiguration_ads_deep_readonly_db.xml
There are some other UME configuration differences but none that seem relevant to this problem.
Can anyone suggest what the problem might be?
Cheers,
Steve ArcherThe Xp machine is fine acessing the mb
its the macbook that is having a problem accessing the xp machine coz it says that the password has expired
but there is no password for the user on the xp machine that i am trying to access from my mb
so that would be:
xp to mb = fine all working
mb to xp = password expired even though no password required for the xp user -
SBS 2008 RWW displays "Your password has expired. Change it on the Change Password page."
I have one User Account that when logging into RWW , a dialog (as attached) comes up? From my experience, when a password needs to be changed you are simply taken to the change password screen to enter old password and new. This AD account even has Password
does not expire set.
Even after changing password in AD this comes up - there are some other worrying things happening with this account as when the User opened their mailbox all of their Unread Items were marked as Read. Not sure if this is related.
When I login with another Test User Account, I cannot force the same dialog to come up and a google does not show me much.
Could RWW of been compromised or is there something in User AD Account? I ended up resetting Users' password via AD just to be safe, but dialog still comes up.Hi,
Did this encounter for all the user accounts or just for a specific one?
In general,if it is determined that the user must change the password upon logging on to the site (for example, the password has expired or set to User must change password at next logon), the logon page will present that error message to the user.
Please check the prperties of that user account to see if you have selected "User must change password at next logon"check box.
In addition, please check the default domain policy via the path below: Computer Configuration/Windows Settings/Security Settings/Account Policies/Password Policy
Pleae check the value you have configured for “Maximum password age”.
Best regards,
Susie
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected] -
It is beginning to shutdown with no warning more frequently. What can I do to locate the exact issue? My warranty has expired so I would like to get to the bottom of it without taking it in to an apple store.
I am currently learning how to do diagnostics on mac hardware but I am not a native mac user. It is unlikely that this is a software issue. Please, any input will be helpful.Try these in order testing your system after each to see if it's back to normal:
1. a. Resetting your Mac's PRAM and NVRAM
b. Intel-based Macs: Resetting the System Management Controller (SMC)
2. Restart the computer in Safe Mode, then restart again, normally. If this doesn't help, then:
Boot to the Recovery HD: Restart the computer and after the chime press and hold down the
COMMAND and R keys until the Utilities menu screen appears. Alternatively, restart the computer and
after the chime press and hold down the OPTION key until the boot manager screen appears.
Select the Recovery HD and click on the downward pointing arrow button.
3. Repair the Hard Drive and Permissions: Upon startup select Disk Utility from the Utilities menu. Repair the Hard Drive and Permissions as follows.
When the recovery menu appears select Disk Utility. After DU loads select your hard drive entry (mfgr.'s ID and drive size) from the the left side list. In the DU status area you will see an entry for the S.M.A.R.T. status of the hard drive. If it does not say "Verified" then the hard drive is failing or failed. (SMART status is not reported on external Firewire or USB drives.) If the drive is "Verified" then select your OS X volume from the list on the left (sub-entry below the drive entry,) click on the First Aid tab, then click on the Repair Disk button. If DU reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported click on the Repair Permissions button. Wait until the operation completes, then quit DU and return to the main menu. Select Restart from the Apple menu.
Reinstall the 10.9.2 update: OS X Mavericks 10.9.2 Update (Combo).
4. Reinstall Lion/Mountain Lion, Mavericks: Reboot from the Recovery HD. Select Reinstall Lion/Mountain Lion, Mavericks from the Utilities menu, and click on the Continue button.
Note: You will need an active Internet connection. I suggest using Ethernet if possible because it is three times faster than wireless.
Reinstall the 10.9.2 update: OS X Mavericks 10.9.2 Update (Combo). -
Not able to connect to database: ORA-28001: the password has expired
I started getting the 'password has expired' error in my SOA server log today (six months after installing my SOA Suite 11.1.1.4 development environment). I found a tip in an old forum thread:
Failed to connect to database instance: ORA-28001: the password has expired
and changed the password expiration time as suggested, and bounced my SOA server hoping for the best. But I'm still getting the password has expired error. Is there a way to clear that out so that I don't have to go back and figure out which user(s) are being affected and what their passwords should be reset back to so that my SOA environment will work again? Thanks!Hi,
Better to check the password_life_time unlimited for all your schemas, suppose your prefix is DEV you may have:
DEV_MDS
DEV_ORABAM
DEV_ORASDPM
DEV_SOAINFRA
Cheers,
Vlad -
DNS is waiting for AD to signal the initial replication has completed
Hello,
First off, thank you for your help in advanced. Any help you can offer would be appreciated, and let me know if there's more information you need
me to provide, or utilities to run.
I have just joined a Server 2012 R2 DC to my Server 2008 R2 domain. Topology is it only had one DC previously, the 2008 R2, running AD/DNS/DHCP.
I ran the forest prep & domain prep on the 2008 R2 domain controller, then ran a dcpromo on the 2012 R2. From there, I migrated the FSMO roles over to the 2012 R2 server using ntdsutil.exe. The ultimate goal is to retire the 2008 R2 DC and
bring on line a 2nd 2012 R2 DC for this domain.
My Issues
Windows 7 client PC's do not always resolve/pass traffic to the Server 2012 R2 server, sometimes I need to ping
the server by IP before it will resolve, other times if I just repeatedly double click on the shared folder mapped to the Server 2012 R2 DC it will work eventually. This is intermittent/random,
and not always repeatable with any specific procedures. Sometimes the user will be working, then all of the sudden they can't resolve DNS to the internet, nor internally.
I am getting the following errors in the event log on my 2012 R2 DC
Log Name: DNS Server
Source: Microsoft-Windows-DNS-Server-Service
Date: 3/16/2014 8:02:34 PM
Event ID: 4013
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: HSSserver.carman.local
Description:
The DNS server is waiting for Active Directory Domain Services (AD DS) to signal that the initial synchronization of the directory has been completed. The DNS server service cannot start
until the initial synchronization is complete because critical DNS data might not yet be replicated onto this domain controller. If events in the AD DS event log indicate that there
is a problem with DNS name resolution, consider adding the IP address of another DNS server for this domain to the DNS server list in the Internet Protocol properties of this computer. This event will
be logged every two minutes until AD DS has signaled that the initial synchronization has successfully completed.
Log Name: Directory Service
Source: Microsoft-Windows-ActiveDirectory_DomainService
Date: 3/16/2014 8:56:17 PM
Event ID: 2092
Task Category: Replication
Level: Warning
Keywords: Classic
User: ANONYMOUS LOGON
Computer: HSSserver.carman.local
Description:
This server is the owner of the following FSMO role, but does not consider it valid. For the partition which contains the FSMO, this server has
not replicated successfully with any of its partners since this server has been restarted. Replication errors are preventing validation of this role.
Operations which require contacting a FSMO operation master will fail until this condition is corrected.
FSMO Role: CN=Partitions,CN=Configuration,DC=carman,DC=local
User Action:
1. Initial synchronization is the first early replications done by a system as it is starting. A failure to initially synchronize may explain why a FSMO role cannot be validated. This process is explained in KB article 305476.
2. This server has one or more replication partners, and replication is failing for all of these partners. Use the command repadmin /showrepl to display the replication errors. Correct the error in question. For example there maybe problems with IP connectivity,
DNS name resolution, or security authentication that are preventing successful replication.
3. In the rare event that all replication partners are expected to be offline (for example, because of maintenance or disaster recovery), you can force the role to be validated. This can be done by using NTDSUTIL.EXE to seize the role to the same server. This
may be done using the steps provided in KB articles 255504 and 324801 on.
The following operations may be impacted:
Schema: You will no longer be able to modify the schema for this forest.
Domain Naming: You will no longer be able to add or remove domains from this forest.
PDC: You will no longer be able to perform primary domain controller operations, such as Group Policy updates and password resets for non-Active Directory Domain Services accounts.
RID: You will not be able to allocation new security identifiers for new user accounts, computer accounts or security groups.
Infrastructure: Cross-domain name references, such as universal group memberships, will not be updated properly if their target object is moved or renamed.
Log Name: Directory Service
Source: Microsoft-Windows-ActiveDirectory_DomainService
Date: 3/16/2014 8:56:17 PM
Event ID: 2092
Task Category: Replication
Level: Warning
Keywords: Classic
User: ANONYMOUS LOGON
Computer: HSSserver.carman.local
Description:
This server is the owner of the following FSMO role, but does not consider it valid. For the partition which contains the FSMO, this server has
not replicated successfully with any of its partners since this server has been restarted. Replication errors are preventing validation of this role.
Operations which require contacting a FSMO operation master will fail until this condition is corrected.
FSMO Role: CN=Schema,CN=Configuration,DC=carman,DC=local
User Action:
1. Initial synchronization is the first early replications done by a system as it is starting. A failure to initially synchronize may explain why a FSMO role cannot be validated. This process is explained in KB article 305476.
2. This server has one or more replication partners, and replication is failing for all of these partners. Use the command repadmin /showrepl to display the replication errors. Correct the error in question. For example there maybe problems with IP connectivity,
DNS name resolution, or security authentication that are preventing successful replication.
3. In the rare event that all replication partners are expected to be offline (for example, because of maintenance or disaster recovery), you can force the role to be validated. This can be done by using NTDSUTIL.EXE to seize the role to the same server. This
may be done using the steps provided in KB articles 255504 and 324801 on
The following operations may be impacted:
Schema: You will no longer be able to modify the schema for this forest.
Domain Naming: You will no longer be able to add or remove domains from this forest.
PDC: You will no longer be able to perform primary domain controller operations, such as Group Policy updates and password resets for non-Active Directory Domain Services accounts.
RID: You will not be able to allocation new security identifiers for new user accounts, computer accounts or security groups.
Infrastructure: Cross-domain name references, such as universal group memberships, will not be updated properly if their target object is moved or renamed.
Log Name: DFS Replication
Source: DFSR
Date: 3/16/2014 11:21:43 PM
Event ID: 5014
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: HSSserver.carman.local
Description:
The DFS Replication service is stopping communication with partner CARMANSERVER for replication group Domain System Volume due to an error. The service will retry the connection periodically.
Additional Information:
Error: 1726 (The remote procedure call failed.)
Connection ID: 020D5B10-4876-4888-9214-45E3D8B3206D
Replication Group ID: 8A8ADB84-CB25-495E-8C28-AE9FD1761E85
From the Server 2008 R2 DC, I get the following errors/warnings in my event log:
Log Name: Directory Service
Source: Microsoft-Windows-ActiveDirectory_DomainService
Date: 3/16/2014 8:02:45 PM
Event ID: 2088
Task Category: DS RPC Client
Level: Warning
Keywords: Classic
User: ANONYMOUS LOGON
Computer: CARMANSERVER.carman.local
Description:
Active Directory Domain Services could not use DNS to resolve the IP address of the source domain controller listed below. To maintain the consistency of Security groups, group policy,
users and computers and their passwords, Active Directory Domain Services successfully replicated using the NetBIOS or fully qualified computer name of the source domain controller.
Invalid DNS configuration may be affecting other essential operations on member computers, domain controllers or application servers in this Active Directory Domain Services forest,
including logon authentication or access to network resources.
You should immediately resolve this DNS configuration error so that this domain controller can resolve the IP address of the source domain controller using DNS.
Alternate server name:
HSSserver.carman.local
Failing DNS host name:
25346b74-2fc2-4311-a54d-d500669d4026._msdcs.carman.local
NOTE: By default, only up to 10 DNS failures are shown for any given 12 hour period, even if more than 10 failures occur. To log all individual failure events, set the following
diagnostics registry value to 1:
Registry Path:
HKLM\System\CurrentControlSet\Services\NTDS\Diagnostics\22 DS RPC Client
User Action:
1) If the source domain controller is no longer functioning or its operating system has been reinstalled with a different computer name or NTDSDSA object GUID, remove the source
domain controller's metadata with ntdsutil.exe, using the steps outlined in MSKB article 216498.
2) Confirm that the source domain controller is running Active Directory Domain Services and is accessible on the network by typing "net view <DC
name>" or "ping <source DC name>".
3) Verify that the source domain controller is using a valid DNS server for DNS services, and that the source domain controller's host record and CNAME record are correctly registered,
using the DNS Enhanced version of DCDIAG.EXE available on
dcdiag /test:dns
4) Verify that this destination domain controller is using a valid DNS server for DNS services, by running the DNS Enhanced version of DCDIAG.EXE command on the console of the
destination domain controller, as follows:
dcdiag /test:dns
5) For further analysis of DNS error failures see KB 824449:
Additional Data
Error value:
11004 The requested name is valid, but no data of the requested type was found.
Log Name: DNS Server
Source: Microsoft-Windows-DNS-Server-Service
Date: 3/16/2014 8:02:19 PM
Event ID: 4013
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: CARMANSERVER.carman.local
Description:
The DNS server is waiting for Active Directory Domain Services (AD DS) to signal that the initial synchronization of the directory has been completed. The DNS server service cannot start
until the initial synchronization is complete because critical DNS data might not yet be replicated onto this domain controller. If events in the AD DS event log indicate that there
is a problem with DNS name resolution, consider adding the IP address of another DNS server for this domain to the DNS server list in the Internet Protocol properties of this computer. This event will be
logged every two minutes until AD DS has signaled that the initial synchronization has successfully completed.
Log Name: System
Source: Microsoft-Windows-DNS-Client
Date: 3/16/2014 8:01:55 PM
Event ID: 1014
Task Category: None
Level: Warning
Keywords:
User: NETWORK SERVICE
Computer: CARMANSERVER.carman.local
Description:
Name resolution for the name _ldap._tcp.dc._msdcs.carman.local timed out after none of the configured DNS servers responded.
Log Name: System
Source: NETLOGON
Date: 3/16/2014 8:02:07 PM
Event ID: 3096
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: CARMANSERVER.carman.local
Description:
The primary Domain Controller for this domain could not be located.
Log Name: System
Source: Microsoft-Windows-WinRM
Date: 3/16/2014 8:05:08 PM
Event ID: 10154
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: CARMANSERVER.carman.local
Description:
The WinRM service failed to create the following SPNs: WSMAN/CARMANSERVER.carman.local; WSMAN/CARMANSERVER.
Additional Data
The error received was 8344: %%8344.
User Action
The SPNs can be created by an administrator using setspn.exe utility.
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 3/16/2014 10:50:55 PM
Event ID: 10009
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: CARMANSERVER.carman.local
Description:
DCOM was unable to communicate with the computer 208.67.222.222 using any of the configured protocolsSorry, the forum limited me to only 60000 characters per post, so here is some more detailed information:
Here's some initial diags/info from my server 2012 DC:
c:\windows\system32\dcdiag /test:DNS /v /e
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
* Verifying that the local machine HSSserver, is a Directory Server.
Home Server = HSSserver
* Connecting to directory service on server HSSserver.
* Identified AD Forest.
Collecting AD specific global data
* Collecting site info.
Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=carman,DC=local,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
The previous call succeeded
Iterating through the sites
Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=carman,DC=local
Getting ISTG and options for the site
* Identifying all servers.
Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=carman,DC=local,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
The previous call succeeded....
The previous call succeeded
Iterating through the list of servers
Getting information for the server CN=NTDS Settings,CN=CARMANSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=carman,DC=local
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
Getting information for the server CN=NTDS Settings,CN=HSSSERVER,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=carman,DC=local
objectGuid obtained
InvocationID obtained
dnsHostname obtained
site info obtained
All the info for the server collected
* Identifying all NC cross-refs.
* Found 2 DC(s). Testing 2 of them.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\CARMANSERVER
Starting test: Connectivity
* Active Directory LDAP Services Check
Determining IP4 connectivity
* Active Directory RPC Services Check
The clock difference between the home server HSSSERVER and target
server CARMANSERVER is greater than one minute. This may cause
Kerberos authentication failures. Please check that the time service
is working properly. You may need to resynchonize the time between
these servers.
......................... CARMANSERVER passed test Connectivity
Testing server: Default-First-Site-Name\HSSSERVER
Starting test: Connectivity
* Active Directory LDAP Services Check
Determining IP4 connectivity
* Active Directory RPC Services Check
......................... HSSSERVER passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\CARMANSERVER
Test omitted by user request: Advertising
Test omitted by user request: CheckSecurityError
Test omitted by user request: CutoffServers
Test omitted by user request: FrsEvent
Test omitted by user request: DFSREvent
Test omitted by user request: SysVolCheck
Test omitted by user request: KccEvent
Test omitted by user request: KnowsOfRoleHolders
Test omitted by user request: MachineAccount
Test omitted by user request: NCSecDesc
Test omitted by user request: NetLogons
Test omitted by user request: ObjectsReplicated
Test omitted by user request: OutboundSecureChannels
Test omitted by user request: Replications
Test omitted by user request: RidManager
Test omitted by user request: Services
Test omitted by user request: SystemLog
Test omitted by user request: Topology
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: VerifyReferences
Test omitted by user request: VerifyReplicas
Testing server: Default-First-Site-Name\HSSSERVER
Test omitted by user request: Advertising
Test omitted by user request: CheckSecurityError
Test omitted by user request: CutoffServers
Test omitted by user request: FrsEvent
Test omitted by user request: DFSREvent
Test omitted by user request: SysVolCheck
Test omitted by user request: KccEvent
Test omitted by user request: KnowsOfRoleHolders
Test omitted by user request: MachineAccount
Test omitted by user request: NCSecDesc
Test omitted by user request: NetLogons
Test omitted by user request: ObjectsReplicated
Test omitted by user request: OutboundSecureChannels
Test omitted by user request: Replications
Test omitted by user request: RidManager
Test omitted by user request: Services
Test omitted by user request: SystemLog
Test omitted by user request: Topology
Test omitted by user request: VerifyEnterpriseReferences
Test omitted by user request: VerifyReferences
Test omitted by user request: VerifyReplicas
Starting test: DNS
DNS Tests are running and not hung. Please wait a few minutes...
Starting test: DNS
See DNS test in enterprise tests section
for results
......................... HSSSERVER passed test DNS
See DNS test in enterprise tests section for results
......................... CARMANSERVER passed test DNS
Running partition tests on : ForestDnsZones
Test omitted by user request: CheckSDRefDom
Test omitted by user request: CrossRefValidation
Running partition tests on : DomainDnsZones
Test omitted by user request: CheckSDRefDom
Test omitted by user request: CrossRefValidation
Running partition tests on : Schema
Test omitted by user request: CheckSDRefDom
Test omitted by user request: CrossRefValidation
Running partition tests on : Configuration
Test omitted by user request: CheckSDRefDom
Test omitted by user request: CrossRefValidation
Running partition tests on : carman
Test omitted by user request: CheckSDRefDom
Test omitted by user request: CrossRefValidation
Running enterprise tests on : carman.local
Starting test: DNS
Test results for domain controllers:
DC: HSSserver.carman.local
Domain: carman.local
TEST: Authentication (Auth)
Authentication test: Successfully completed
TEST: Basic (Basc)
The OS
Microsoft Windows Server 2012 R2 Standard
(Service Pack level: 0.0)
is supported.
NETLOGON service is running
kdc service is running
DNSCACHE service is running
DNS service is running
DC is a DNS server
Network adapters information:
Adapter [00000010] Broadcom NetXtreme Gigabit
Ethernet:
MAC address is F0:1F:AF:E1:D1:C4
IP Address is static
IP address: 192.168.17.7, fe80::35d3:8713:ce0a:3680
DNS servers:
192.168.17.7
(HSSSERVER) [Valid]
192.168.17.5 (carmanserver.carman.local.) [Valid]
The A host record(s) for this DC was found
The SOA record for the Active Directory zone was found
The Active Directory zone on this DC/DNS server was found primary
Root zone on this DC/DNS server was not found
TEST: Forwarders/Root hints (Forw)
Recursion is enabled
Forwarders Information:
208.67.220.220 (<name unavailable>) [Valid]
208.67.222.222 (<name unavailable>) [Valid]
TEST: Delegations (Del)
Delegation information for the zone: carman.local.
Delegated domain name: _msdcs.carman.local.
DNS server: carmanserver.carman.local. IP:192.168.17.5 [Valid]
TEST: Dynamic update (Dyn)
Test record dcdiag-test-record added successfully in zone carman.local
Test record dcdiag-test-record deleted successfully in zone carman.local
TEST: Records registration (RReg)
Network Adapter
[00000010] Broadcom NetXtreme Gigabit Ethernet:
Matching CNAME record
found at DNS server 192.168.17.7:
25346b74-2fc2-4311-a54d-d500669d4026._msdcs.carman.local
Matching A record found
at DNS server 192.168.17.7:
HSSserver.carman.local
Matching SRV record
found at DNS server 192.168.17.7:
_ldap._tcp.carman.local
Matching SRV record
found at DNS server 192.168.17.7:
_ldap._tcp.e6c304e4-c161-4258-8d51-5a2f20a61c7a.domains._msdcs.carman.local
Matching SRV record
found at DNS server 192.168.17.7:
_kerberos._tcp.dc._msdcs.carman.local
Matching SRV record
found at DNS server 192.168.17.7:
_ldap._tcp.dc._msdcs.carman.local
Matching SRV record
found at DNS server 192.168.17.7:
_kerberos._tcp.carman.local
Matching SRV record
found at DNS server 192.168.17.7:
_kerberos._udp.carman.local
Matching SRV record
found at DNS server 192.168.17.7:
_kpasswd._tcp.carman.local
Matching SRV record
found at DNS server 192.168.17.7:
_ldap._tcp.Default-First-Site-Name._sites.carman.local
Matching SRV record
found at DNS server 192.168.17.7:
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.carman.local
Matching SRV record
found at DNS server 192.168.17.7:
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.carman.local
Matching SRV record
found at DNS server 192.168.17.7:
_kerberos._tcp.Default-First-Site-Name._sites.carman.local
Matching SRV record
found at DNS server 192.168.17.7:
_ldap._tcp.gc._msdcs.carman.local
Matching A record found
at DNS server 192.168.17.7:
gc._msdcs.carman.local
Matching SRV record
found at DNS server 192.168.17.7:
_gc._tcp.Default-First-Site-Name._sites.carman.local
Matching SRV record
found at DNS server 192.168.17.7:
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.carman.local
Matching SRV record
found at DNS server 192.168.17.7:
_ldap._tcp.pdc._msdcs.carman.local
Matching CNAME record
found at DNS server 192.168.17.5:
25346b74-2fc2-4311-a54d-d500669d4026._msdcs.carman.local
Matching A record found
at DNS server 192.168.17.5:
HSSserver.carman.local
Matching SRV record
found at DNS server 192.168.17.5:
_ldap._tcp.carman.local
Matching SRV record
found at DNS server 192.168.17.5:
_ldap._tcp.e6c304e4-c161-4258-8d51-5a2f20a61c7a.domains._msdcs.carman.local
Matching SRV record
found at DNS server 192.168.17.5:
_kerberos._tcp.dc._msdcs.carman.local
Matching SRV record
found at DNS server 192.168.17.5:
_ldap._tcp.dc._msdcs.carman.local
Matching SRV record
found at DNS server 192.168.17.5:
_kerberos._tcp.carman.local
Matching SRV record
found at DNS server 192.168.17.5:
_kerberos._udp.carman.local
Matching SRV record
found at DNS server 192.168.17.5:
_kpasswd._tcp.carman.local
Matching SRV record
found at DNS server 192.168.17.5:
_ldap._tcp.Default-First-Site-Name._sites.carman.local
Matching SRV record
found at DNS server 192.168.17.5:
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.carman.local
Matching SRV record
found at DNS server 192.168.17.5:
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.carman.local
Matching SRV record
found at DNS server 192.168.17.5:
_kerberos._tcp.Default-First-Site-Name._sites.carman.local
Matching SRV record
found at DNS server 192.168.17.5:
_ldap._tcp.gc._msdcs.carman.local
Matching A record found
at DNS server 192.168.17.5:
gc._msdcs.carman.local
Matching SRV record
found at DNS server 192.168.17.5:
_gc._tcp.Default-First-Site-Name._sites.carman.local
Matching SRV record
found at DNS server 192.168.17.5:
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.carman.local
Matching SRV record
found at DNS server 192.168.17.5:
_ldap._tcp.pdc._msdcs.carman.local
DC: CARMANSERVER.carman.local
Domain: carman.local
TEST: Authentication (Auth)
Authentication test: Successfully completed
TEST: Basic (Basc)
The OS
Microsoft Windows Server 2008 R2 Standard
(Service Pack level: 1.0)
is supported.
NETLOGON service is running
kdc service is running
DNSCACHE service is running
DNS service is running
DC is a DNS server
Network adapters information:
Adapter
[00000007] Broadcom BCM5716C NetXtreme II
GigE (NDIS VBD Client):
MAC address is A4:BA:DB:12:D1:77
IP Address is static
IP address: 192.168.17.5
DNS servers:
127.0.0.1
(carmanserver.carman.local.) [Valid]
192.168.17.7 (HSSSERVER) [Valid]
The A host record(s) for this DC was found
The SOA record for the Active Directory zone was found
The Active Directory zone on this DC/DNS server was found primary
Root zone on this DC/DNS server was not found
TEST: Forwarders/Root hints (Forw)
Recursion is enabled
Forwarders Information:
208.67.220.220 (<name unavailable>) [Valid]
208.67.222.222 (<name unavailable>) [Valid]
TEST: Delegations (Del)
Delegation information for the zone: carman.local.
Delegated domain name: _msdcs.carman.local.
DNS server: carmanserver.carman.local. IP:192.168.17.5 [Valid]
TEST: Dynamic update (Dyn)
Test record dcdiag-test-record added successfully in zone carman.local
Test record dcdiag-test-record deleted successfully in zone carman.local
TEST: Records registration (RReg)
Network Adapter
[00000007] Broadcom BCM5716C NetXtreme II
GigE (NDIS VBD Client): -
Dears,
I am facing a strange issue from a long time.I am using ECC5 having ABAP+JAVA Stack.When ever I reset password of any user by SU01 and then login on Portal first time with this new password,A window open to change my first password but on its top it is also showing error:
"Password has expired"
While after entering old and new password it takes new password and work perfectly but not getting while at first logon it shows this error message.
Please suggest.
ShivamHi,
Pls refer Portal Security policy.
[http://help.sap.com/saphelp_nw04s/helpdata/en/b5/16c43bdd3da244a1d3372a77b5f83f/frameset.htm]
[http://help.sap.com/saphelp_nw70/helpdata/EN/52/4c6c3e58d0d064e10000000a114084/frameset.htm]
Also chk the link
[Stopping Initial Password Change;
Regards
Baby -
Scheduled Report Fails To Run If User Password Has Expired
Why can't a report, that has been scheduled for a user whose password has expired, continue to run and go to its predefined destinations?
A user doesn't know until he/she attempts to log in that there is a password expiration issue. They may have scheduled the report to go to a multitude of inboxes, but if their password has expired, the report doesn't run.
I can understand "some" issues with the necessity to stop the report until credentials are updated correctly. However, Business Objects doesn't notify a user until it has expired, thus making it too late for those expecting something in their inbox.
Is there any method of notifying users that their password is going to be expiring soon, in advance? In other words, is there any "proactive" feature within Business Objects for notifying the user of an upcoming need to change their password?
HepMeThere is nothing built in to BusinessObjects for this, but there may be third-party tools available or you can write code that would do this.
In Query Builder, run this query:
Select SI_ID, SI_Name, SI_LAST_PASSWORD_CHANGE_TIME, SI_UPDATE_TS, SI_LASTLOGONTIME
from CI_SYSTEMOBJECTS where SI_Kind = 'User' and SI_NAME != 'Administrator' and SI_NAME != 'Guest' and SI_PASSWORDEXPIRE = 1
order by SI_LAST_PASSWORD_CHANGE_TIME desc, SI_UPDATE_TS desc
Users who are new and haven't yet changed their password will not have a value for SI_LAST_PASSWORD_CHANGE_TIME, so you can use SI_UPDATE_TS to determine when they were created.
You could build an application that uses this query to determine who is getting close to password expiration and send out an email reminding those users to change their passwords.
-Dell -
CUA environment - changing the initial password of a user.
Hi Gurus,
I've encounter a perculiar issue when I assign an initial password to a user.
My system setup is based on CUA where my Central admin is client 100, with child client 200.
- I create an ID in client 100, set it to system 200, set initial password as "passW0rd". Save
- The ID was created in 200
- Logged in Client 100 using ID and "passW0rd", prompted for new password (i canceled the login)
- When back to client 100 CUA, in SU01 I select ID and click "EDIT", under the logon data I retype the initial password to "P4ssword"
- checked SCUL, it's green and user change
- Logged in Client 100 using ID and "P4ssword", error in password
- tried the old "passW0rd", prompted for new password.
I puzzled why the CUA did not redistribute the changed initial password to client 200, another can any ideas?
I also tried SU01 and click "reset password" button instead of "edit", the changed password was able to distributed to client 200.
By password change is ok this way or not ok if change within edit mode?
Thanks,
JansenHi Sergo,
Yes I realise the "change password" works but for my case I cannot use that function. Any other suggestions. Cos by right even if I were to change in the logon data it should work right?
Hi Juan,
Yes I've checked, the IDOCs are in and successful. -
Sneak Preview SP15: Password has expired
Hi,
today I installed the Netweaver 04 SP15 Sneak preview. The first thing I did was creating a new portal user, and I assigned the end user role, which worked fine.
When I try to log in as the new user, I always get a "Password has expired" message (not the usual initial password change, I just cannot log in). I also reset the password as admin, but it doesn't help.
The user view shows today as last password change, expiration time is 99999 days. There are no special characters in the password.
System is Windows Server 2003, JDK 1.4.2_08.
Thanks in advance,
Markus
Message was edited by: Markus Wagner
Found a solution. In J2EE Administration -> Security Provider, I checked the "No password change required" option. That doesn't really solve the problem, but I can login, which is fine for me.You have to log in locally on the machine, on which the portal is running (or at least, that's the easiest way). Start the Visual Administrator tool with the go.bat (or the go script for *X systems) in C:\usr\sap\J2E\JC00\j2ee\admin.
Select the default connection and log in as admin. Then navigate in the tree to Server/Services/Security Provider. Change to tab User Management. Then look for the user and select it. Click on the edit button above the tabs (I had a bit trouble finding that) and select the "No passwort change required" checkbox, a bit below the middle of the window. Do that for each user and then switch back to read only mode.
Markus -
I bought the pack for students adobe creative cloud, already made the payment three days ago but when opening programs like photosop and illustrator puts the trial period has expired, how I can make them work?
Hello Ibonedm,
Sol 1. Please try sign out from Creative cloud Desktop App and quit it.
1. Launch Creative Cloud application manager.
2. Click the gear icon in the upper-right corner and select Preferences.
3. In the Preferences menu, under General, click the Account tab.
4. Click Sign Out from Creative Cloud.
Then re-sign in and launch Photoshop CC 2014 and check.
Sol 2. Check your Hosts file.
Windows
1. Choose Start > Run, type %systemroot% \system32\drivers\etc, and then press Enter.
2. Locate Hosts file and move it to Desktop
3. Right-click the hosts file and select Open. Select Notepad for the application to open the hosts file.
4. Back up the hosts file: Choose File > Save As, save the file as hosts.backup, and then click OK.
5. Search the hosts file for entries that reference activate.adobe.com (for example, 127.0.0.1 activate.adobe.com) and delete these entries.
6. Save and close the file and move it back to Etc folder.
Mac OS
1. Log in as an administrator to edit the hosts file in Mac OS.
2. In a Finder window, choose Go > Go To Folder.
3. Type /etc.
4. Select the hosts file and move it on Desktop open it.
5. Back up the hosts file: Choose File > Save As, save the file as hosts.backup, and then click OK.
6. Search the hosts file for entries that reference activate.adobe.com (for example, 127.0.0.1 activate.adobe.com) and delete these entries.
7. Move Hosts file back to etc folder
8. Save and close the file.
Then try launching Photoshop CC 2014 or Illustrator CC 2014
If prompt for License this software, please click on it and sign in with the Adobe ID and Password which you have used to purchase the subscription and check if you can activate and use the products.
Please respond , if any issue.
All the best
Loveneesh. -
Why do I get "The form data has expired." every time with Flash formatted CFFORM moved to CF 9.1?
We are moving a ColdFusion site from CF8 to CF9.1 and have discovered that any CFForm that was uses Flash as it's format keeps giving us the "The form data has expired." error almost every time we visit the page containing the form. We have fiddled with the timeout settings and even tried to add the various "cfheader" workarounds that some people have mentioned when getting this error, but to no avail. To be clear this works perfectly on CF8 *and* it works on our CF 9.1 QA server, but for some reason fails on the Live Server. Supposedly the Live server completely matches the QA server, but the behavior is sure different in this instance.
What could be the issues? What Apache or CF settings might I look into? Could there be some weird permissions error on the generated swf form file or some other obscure reason? I am totally in the dark and can't figure out why ColdFusion keeps thinking the form data has expired.
Please, any ideas would be welcome.
Thanks!Make sure the web server settings between the QA and the Production servers are also compatible.
I suspect your suspecion about permissions is the closest to the answer. But this is a little out of my depth of expertise.
Realize that ColdFusion default behavior is to NOT generate and actual swf FILE. Rather what it does is generate the swf content in memory and directly deliver it to the client. But if the web server is configured to look for an actual file system file you may have a clash going on
Maybe you are looking for
-
Report showing Total Stock of individual materials and not specific to Sloc
Our requirement is to display the current Stock of every individual material with its description and not Storage location specific.. We dont want the Stock specific to Storage Locations.We need the overall Stock of individual materials. Pls dont sug
-
Some emails in Mail 5 are brown / gold colour
Hey guys Installed OS X Lion and migrated my emails into Mail 5, and i've noticed that some messages are like a gold / brown colour. I thought this might have something to do with being Junk, or marked as junk, but I have selected 'Not junk' but no c
-
Database Configuration Assistant fails during instalation of Oracle EE 8.1.7
My machine runs RH 6.2 and I have tried to install it Oracle. After executing all pre-instalation steps, I run ./runInstall and instalation process goes on. I select Typical Instalation and instalation proceeds until 100%, when OUI tries to configure
-
10.8 Server Website Realm Block Movies
With Realms enabled, a website can serve webpages, jpg, and similar files. If the file is a .mov, the server returns a 401 error in the logs. I can turn off Realms for the website and the .mov loads correctly. I have seen hints that the web server c
-
Open file with extension is .Z
I need open file xxxx.Z for read its content. I looker for in java.uitl.zip and classes Zip and GZIP aren't useful.