LDAP Operational Attribute Names

Hey,
I have been searching extensively for certain LDAP operational attributes.
I need to know the uniqueId , modifiyTimeStamp and an attribute to signify if a user is active or for the following servers
1. Netscape
2. Novell
3. IBM Tivoli.
For Netscape if it has the same as attributes as its free version Fedora then I hope the attributes are nsuniqueid , modifyTimeStamp , nsaccountlock respectively.
For Novell it seemed more on the line for Active Directory for uniqueid and modifytimestamp still looking for active users.
For IBM I obtained that the unique id is ibm-entryUuid.
Help on this would be greatly appreciated.

Hi,
Actually I was also looking for deleting the operation attributes.
As in case of user Account Lock, pwdAccountLockedTime & pwdFailureTime will be set. But, Again to unlock the account I need to delete these entries. Now the problem is, these operational attributes are being maintained by server itself. and not visible to client program until and unless specified explictly. I was usinf modificationItem with REMOVE_ATTRIBUTE, but it doesn't work as its not be able to identify the attribute in the directory.
I am using IBM Tivoli directory server. I can unlock the user account(delete these entry thru the command line) but I need to delete it thru Java program.
Please help !
Any suggestion will be welcome.
Archit

Similar Messages

LDAP Operational Attributes

Hi,
I want to know that what is the difference between User defined attributes and Operational Attributes.
I want to display the Operational Attributes only, then
How do I sort the operational attribute from the list when I fire a query for search?

Please read RFC 4512 - LDAP Information Model for the complete details about Operational Attributes.
But in a nutshell, Operational Attributes are attributes which values are affecting the Directory Server behavior.
Operational attributes are not returned in a search unless specifically requested.
To request only operational attributes, just list the ones you're interested in and no other (and do not use the *). For example:
ldapsearch -b "dc=com" '(objectclass=*)' modifiersname modifytimestamp numsubordinates
If you want to identify the operational attributes handled by the server, you will need to read the schema (cn=schema , attributetypes) and parse it to select the ones with "USAGE directoryOperation".
Regards,
Ludovic.

Using OID in place of attribute name in an update operation

Hi,
I use Iplanet DS 5.0 on Solaris 8.0
An application that I use needed a custom defined schema.
This application tries to update entries using the OID of the attribute instead of the attribute name.
ie. It uses
Add: 2.5.4.58;binary
instead of the name of the attribute -- attributeCertificateAttribute that has been defined in the directory.
This operation fails with an objectClass violation.
The developer pointed out that this was allowed by the RFC and that it worked with other directories.
Later I tried replacing attribute names by their OIDs in corect LDIF files and these operations failed too.
I have included an ethereal trace of the request and of the response.
Question:
Does this work on Iplanet DS? How can I get it to work ?
Thanks,
sriad
Request
=========================================
Message Id: 2
Message Type: Modify Request (0x06)
Message Length: 437
Distinguished Name: CN=User0,O=PERMIS,C=GB
Add: 2.5.4.58;binary
Response
======================================
Message Id: 2
Message Type: Modify Result (0x07)
Message Length: 7
Result Code: Objectclass violation (0x41)
Matched DN: (null)
Error Message: (null)

Thank you ReubenC, the business has decided to not proceed with the LDAP configuration of web.config at this time and would rather stay with using the TNS entry for the time being; this is because we just mirgated their instance to an 11g environment and they want to ensure they have no issues with the migration before they take on web.config changes too.
I will however try your recommendation when they choose to proceed and let you know how it turns out.
Thank you,
Charlie

ERROR[WSDL Parser] Attribute 'name' not found at: wsdl:documentation

Hello,
I'm currently having a problem generating the Java source code from a WSDL, because the WSDL2Service ant class bundled with the WLS install (in the /server/lib/webservices.jar library) does not comply with the WSDL XSD.
Check http://schemas.xmlsoap.org/wsdl/
Especially if you add a <wsdl:documentation> in your <wsdl:portType> you end up with a WSDLParser error, while the file perfectly validates through Eclipse:
     <wsdl:portType name="ImportPortType">
          <wsdl:documentation>
               Definitions of available operations through the webservice
          </wsdl:documentation>
          <wsdl:operation name="importData">
               <wsdl:input message="tns:ImportInput" />
               <wsdl:output message="tns:ImportOutput" />
          </wsdl:operation>
     </wsdl:portType> The error is:
[wsdl2Service] Generating web service from wsdl C:\Java\Workspaces\MyWorkspace/WebServices/wsdl/Import.wsdl
[wsdl2Service] weblogic.webservice.wsdl.WSDLParseException: ERROR[WSDL Parser] Attribute 'name' not found at:<wsdl:documentation>Definitions of available operations through the webservice
[wsdl2Service]           </wsdl:documentation>
[wsdl2Service]      at weblogic.webservice.wsdl.WSDLParser.getMustAttribute(WSDLParser.java:263)
[wsdl2Service]      at weblogic.webservice.wsdl.WsdlPortType.parsePortType(WsdlPortType.java:29)
[wsdl2Service]      at weblogic.webservice.wsdl.WsdlBinding.parseBinding(WsdlBinding.java:45)
[wsdl2Service]      at weblogic.webservice.wsdl.WsdlPort.parsePort(WsdlPort.java:46)
[wsdl2Service]      at weblogic.webservice.wsdl.WsdlService.parseService(WsdlService.java:37)
[wsdl2Service]      at weblogic.webservice.wsdl.WsdlDefinitions.parseDefinition(WsdlDefinitions.java:38)
[wsdl2Service]      at weblogic.webservice.wsdl.WSDLParser.visit(WSDLParser.java:71)
[wsdl2Service]      at weblogic.webservice.WebServiceFactory.createFromWSDL(WebServiceFactory.java:111)
[wsdl2Service]      at weblogic.webservice.tools.build.internal.WSDL2JavaServiceImpl.runClassgen(WSDL2JavaServiceImpl.java:210)
[wsdl2Service]      at weblogic.webservice.tools.build.internal.WSDL2JavaServiceImpl.run(WSDL2JavaServiceImpl.java:147)
[wsdl2Service]      at weblogic.ant.taskdefs.webservices.wsdl2service.WSDL2Service.doWSDL2JavaService(WSDL2Service.java:211)
[wsdl2Service]      at weblogic.ant.taskdefs.webservices.wsdl2service.WSDL2Service.execute(WSDL2Service.java:131)
[wsdl2Service]      at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:288)
[wsdl2Service]      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
[wsdl2Service]      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
[wsdl2Service]      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
[wsdl2Service]      at java.lang.reflect.Method.invoke(Method.java:585)
[wsdl2Service]      at org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:105)
[wsdl2Service]      at org.apache.tools.ant.Task.perform(Task.java:348)
[wsdl2Service]      at org.apache.tools.ant.Target.execute(Target.java:357)
[wsdl2Service]      at org.apache.tools.ant.Target.performTasks(Target.java:385)
[wsdl2Service]      at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1329)
[wsdl2Service]      at org.apache.tools.ant.helper.SingleCheckExecutor.executeTargets(SingleCheckExecutor.java:38)
[wsdl2Service]      at org.eclipse.ant.internal.ui.antsupport.EclipseSingleCheckExecutor.executeTargets(EclipseSingleCheckExecutor.java:30)
[wsdl2Service]      at org.apache.tools.ant.Project.executeTargets(Project.java:1181)
[wsdl2Service]      at org.apache.tools.ant.taskdefs.Ant.execute(Ant.java:416)
[wsdl2Service]      at org.apache.tools.ant.taskdefs.CallTarget.execute(CallTarget.java:105)
[wsdl2Service]      at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:288)
[wsdl2Service]      at sun.reflect.GeneratedMethodAccessor1.invoke(Unknown Source)
[wsdl2Service]      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
[wsdl2Service]      at java.lang.reflect.Method.invoke(Method.java:585)
[wsdl2Service]      at org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:105)
[wsdl2Service]      at org.apache.tools.ant.Task.perform(Task.java:348)
[wsdl2Service]      at org.apache.tools.ant.Target.execute(Target.java:357)
[wsdl2Service]      at org.apache.tools.ant.Target.performTasks(Target.java:385)
[wsdl2Service]      at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1329)
[wsdl2Service]      at org.apache.tools.ant.helper.SingleCheckExecutor.executeTargets(SingleCheckExecutor.java:38)
[wsdl2Service]      at org.eclipse.ant.internal.ui.antsupport.EclipseSingleCheckExecutor.executeTargets(EclipseSingleCheckExecutor.java:30)
[wsdl2Service]      at org.apache.tools.ant.Project.executeTargets(Project.java:1181)
[wsdl2Service]      at org.apache.tools.ant.taskdefs.Ant.execute(Ant.java:416)
[wsdl2Service]      at org.apache.tools.ant.taskdefs.CallTarget.execute(CallTarget.java:105)
[wsdl2Service]      at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:288)
[wsdl2Service]      at sun.reflect.GeneratedMethodAccessor1.invoke(Unknown Source)
[wsdl2Service]      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
[wsdl2Service]      at java.lang.reflect.Method.invoke(Method.java:585)
[wsdl2Service]      at org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:105)
[wsdl2Service]      at org.apache.tools.ant.Task.perform(Task.java:348)
[wsdl2Service]      at org.apache.tools.ant.Target.execute(Target.java:357)
[wsdl2Service]      at org.apache.tools.ant.Target.performTasks(Target.java:385)
[wsdl2Service]      at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1329)
[wsdl2Service]      at org.apache.tools.ant.Project.executeTarget(Project.java:1298)
[wsdl2Service]      at org.apache.tools.ant.helper.DefaultExecutor.executeTargets(DefaultExecutor.java:41)
[wsdl2Service]      at org.eclipse.ant.internal.ui.antsupport.EclipseDefaultExecutor.executeTargets(EclipseDefaultExecutor.java:32)
[wsdl2Service]      at org.apache.tools.ant.Project.executeTargets(Project.java:1181)
[wsdl2Service]      at org.eclipse.ant.internal.ui.antsupport.InternalAntRunner.run(InternalAntRunner.java:423)
[wsdl2Service]      at org.eclipse.ant.internal.ui.antsupport.InternalAntRunner.main(InternalAntRunner.java:137)
BUILD FAILED
C:\Java\Workspaces\MyWorkspace\EAR\ant\build.xml:22: The following error occurred while executing this line:
C:\Java\Workspaces\MyWorkspace\EAR\ant\build.xml:26: The following error occurred while executing this line:
C:\Java\Workspaces\MyWorkspace\EAR\ant\build_config.xml:65: weblogic.webservice.tools.build.WSBuildException: weblogic.webservice.wsdl.WSDLParseException: ERROR[WSDL Parser] Attribute 'name' not found at:<wsdl:documentation>Definitions of available operations through the webservice
          </wsdl:documentation> Digging through the WSDLPortType class (package weblogic.webservice.wsdl ) decompiled code, I clearly saw this kind of parsing does not respect the WSDL XSD:
public class WsdlPortType {
    public WsdlPortType() {
        operations = new ArrayList();
    void parsePortType(WSDLParser wsdlparser, XMLNode xmlnode, Port port) throws WSDLParseException {
        Iterator iterator = xmlnode.getChildren();
        do {
            if(!iterator.hasNext())
                break;
            XMLNode xmlnode1 = (XMLNode)iterator.next(); // THE NEXT XML NODE IS NOT COMPULSORILY THE <wsdl:operation> ONE!!!
            String s = wsdlparser.getMustAttribute("name", xmlnode1);
            if(wsdlparser.canHandleMethod(xmlnode1)) {
                weblogic.webservice.Operation operation = port.addOperation(s);
                WsdlOperation wsdloperation = new WsdlOperation();
                wsdloperation.parseOperation(wsdlparser, operation, xmlnode1);
                operations.add(wsdloperation);
        } while(true);
    private ArrayList operations;
} X-(
Edited by maxxyme at 03/13/2008 10:34 AM

I created a new project and tried to repeat the steps to import. Still getting the same error.
This is my Message type definition if that helps
<message name="Composite_Weather_ServiceRequestMessage">
          <part name="payload" type="tns1:NDFDgenRequest"/>
     </message>
     <message name="Composite_Weather_ServiceResponseMessage">
          <part name="payload" type="tns1:NDFDgenResponse"/>
     </message>

Attribute name images in table headers

Hi all,
it is quite easy to use attribute images for the text values in Publisher. But how can I use the attribute image for the attribute name in Publisher? I would like to have one column with an image in the header and text values to be shown for the attribute values. Is that possible and if not, what for do we have attribute images?
Thanks in advance.
Best regards
Christian

A LOB variable is actually a pointer - or as the documentation calls it, a locator variable. (why they did not call it by its real name, a pointer, needs to be questioned).
The preferred API to use for LOB operations in PL/SQL is DBMS_LOB.
As a LOB variable is a pointer, you do not need to create a copy of the LOB, change the copy, and overwrite the original with the copy. You can directly write to a locked row's LOB when you have a pointer to that LOB (bypassing the SQL UPDATE statement for example).
SQL> create table tab1( id number, document clob );
Table created.
SQL> -- a row is created with a lob
SQL> insert into tab1 values( 1, 'test123.' );
1 row created.
SQL>SQL> -- updating the lob without an UPDATE statement
SQL> declare
2          doc     clob;
3          line    varchar2(32767);
4 begin
5          -- create a pointer to the lob
6          select document into doc from tab1 where id = 1 for update;
7
8          -- write to lob in row via pointer
9          line := ' What do you want, universe? (Klingon translation for "Hello world.")';
10          DBMS_LOB.WriteAppend( doc, length(line), line );
11          commit;
12 end;
13 /
PL/SQL procedure successfully completed.
SQL>SQL> select * from tab1;
        ID DOCUMENT
         1 test123. What do you want, universe? (Klingon translation for "Hello world.")
SQL>

Re: Retrieve operational attributes

Dear all,
Do you have any concrete Java program example using standard Java API provided by JDK1.3.1 to retrieve the operational attributes of a entry stored in Sun One Directory Server?
Thanks!
Calvin

There is no "+" pseudo attribute name that will retrieve all operational attributes in an entry, like OpenLDAP has. You must specify all of the operational attributes you want to get back in your search attribute list. If you need to get a list of all possible operational attributes, you have to query the schema - the attribute definition will tell you if the attributeType is operational.

Resource account attribute names during reconciliation

Hi,
I need to set some attributes when creating the IDM user during initial reconcilation from an LDAP resource. I understand only the waseset and LDAP user attributes are available during the reconciliation. Does anyone know how to refer to the resource account attributes?
I tried to put this in my proxyuser form:
<Field name='accounts[Lighthouse].uvaDepartment'>
<Derivation>
<invoke name='listToString' class='com.waveset.util.Util'>
<ref>accounts[LDAP].ou</ref>
<s>; </s>
</invoke>
</Derivation>
</Field>
uvaDepartment is a extended attribute in the IDM schema, and ou a multivalued LDAP atribute. But uvaDepartment remains empty.
Greetings,
Marijke

thanks,
I found out the problem was caused by not setting thel user password in the resource parameters page.
I set up a temporay form and debugged the attributes from the Active Directory. Somehow, the password has already been populated with a (random) value. To be sure, I'll use your suggestion to generate a temporary password to ensure it conforms to my own Password Policy :
        <invoke name='generatePassword'>
          <new class='com.waveset.provision.PasswordGenerator'>
            <ref>:display.session</ref>
          </new>
          <invoke name='getObject' class='com.waveset.ui.FormUtil'>
            <rule name='UWS-RLB-Utils:GetLightHouseContext'/>
            <s>Policy</s>
            <ref>My-Password-Policy</ref>
          </invoke>
          <new class='com.waveset.object.WSUser'/>
        </invoke>

DBMS_LDAP Seems to Change Attribute Name Case

When we use DBMS_LDAP.populate_mod_array with DBMS_LDAP.mod_replace and then DBMS_LDAP.modify_s our attribute names (not values) stored in LDAP change to all lower case from mixed case. For example, if we have Attribute Name "telephoneNumber" with an Attribute Value of "555-1212". When we change the value to "111-1111" the name changes to "telephonenumber."
Any ideas?
We are passing a mod_type of "telephoneNumber."

it would help us analyze if you can post the codes. thanks.

I want to rename standart attribute names: 'name, display name, ...'. How?

I had renamed custom attribute names, but I can't do this operation with standart attributes. Help me, please!

Alexander,
take a look at table : PORTAL.WWNLS_STRINGS$
SUB_DOMAIN='pro' NAME='webnode_adm_dispname'
You'll see the strings. (if no, connect under SYS schema because VPD, perhaps)
It's up to you to modify it. Not certified at all.
Patrick.

How to change the attribute name for a relation

When the Data Modeler engineers a logical model into a relational model it create table columns for the relations. The names of the generated columns are listed in the attributes list in the properties dialog of the relation. The actual name of the attribute gets calculated by the attribute name of the entity which is part of the relation. This is okay, if there is only one relation between two entities. But when there are two relations between two entities the second attribute gets a stupid number suffix. This makes it impossible to give the attribute a useful semantic meaning.
When I engineer the model into a relational model I can change the column name in the relational model. Changing the column name in the relational model is not perfect but it would be okay for me, if it would not be overwritten during the next engineering run.
So I have two questions:
How can I change the attribute name in the attributes section of the properties dialog of a relation? See here for screen shot:
http://public.ceving.de/2012050300/relationattribute.png
And if it is not possible:
How can I preserve any changes on column names in the relational model during a re-engineering run?
Edited by: 931739 on 03.05.2012 08:07

Hi,
I've logged an Enhancement request on this.
I don't believe it's possible to change it from the Entity or Relationship dialog, as it's not updatable in these dialogs.
What you can do is change it in the Relational Model, and then reverse engineer the change back to the Logical Model.
David

Get the attributes NAME and VALUE from an XML

I really love this forum :)
I load an XML an populate a Tree, from which I start to drag
items.
the xml looks like this:
<myTag attrName="attrValue"
otherAttrName="otherAttrValue"/>
var ds:DragSource = event.dragSource;
var var1:String =(event.dragInitiator as
Tree).value.@attrName;
-> the var1 variable has now: "attrValue"
my question is.. how can I get all the attributes' names? in
this example: attrName and otherAttrName (suppose I don't know the
structure of that xml node)
what about attributes values?
thank you!

The snippet below takes an xml node(nodeCur), loops over the
attributes list and builds an array that contains the attribute
name and value for each attribute. It comes from a sample app that
allows you to edit an xml file.
Sorry that the forum will remove the formatting
var aDPAttributes:Array = new Array();
var xlAttributes:XMLList = nodeCur.@*;
var attribute:Attribute;
for ( var i:int = 0; i < xlAttributes.length(); i++) {
aDPAttributes.push({name:xlAttributes [ i ]
.name(),value:xlAttributes [ i ] });
dgAttributes.dataProvider = aDPAttributes; //set the property
sheet dataProvider
Tracy

Cannot create or replace : The specified extended attribute name was invalid.

New problem arrived today. Trying to copy a file from 10.6 server with an XP (SP3) client. I get this error:
Cannot create or replace (file name here): The specified extended attribute name was invalid.
The contents of the file can be copied, but not the folder. Other files can be copied. There are no funny characters. The name is not too long. I propogated the permissions on the share and that had no affect. The problem exists on three different XP systems. Can't find extended properties that could be causeing a problem. Any ideas?

Nikon just released a Firmware update today for the D750

Automatic Generation of classes with required attribute names

Hi ,
I am new to XML technologies ...I am having a problem in deciding whether I
should use JAXB or Castor for data binding.
The problem is the attributes I am to use are named differently as that found in
the DTD.I have creted my own classes using the required attribute names and the
n mapped them using the Castor mapping with the attributes.
I was wondering how should I achieve --"automatic generation of classes" with th
e specified attribute names?
I understand that JAXB can be used to automatically generate classes ,but this
uses the same default names as that of the XML file ..is there a way of forcing
JAXB to generate classes that use my name attributes rather than that of the XM
L dtd
If I use Castor ..is there a way to do the same.Generate Classes with the specif
id attributes

Hi ,
I am new to XML technologies ...I am having a problem in deciding whether I
should use JAXB or Castor for data binding.
The problem is the attributes I am to use are named differently as that found in
the DTD.I have creted my own classes using the required attribute names and the
n mapped them using the Castor mapping with the attributes.
I was wondering how should I achieve --"automatic generation of classes" with th
e specified attribute names?
I understand that JAXB can be used to automatically generate classes ,but this
uses the same default names as that of the XML file ..is there a way of forcing
JAXB to generate classes that use my name attributes rather than that of the XM
L dtd
If I use Castor ..is there a way to do the same.Generate Classes with the specif
id attributes

Text variable replacementpath with key, attribute, name then what

text variable replacementpath with key, attribute, name then what are the changes in my report in quary designer

The XML 1.0 spec does not allow elements or attribute names to include spaces in the names.
See: http://www.xml.com/axml/axml.html
for a nice annotated version of the spec.
[Definition:] A Name is a token beginning with a letter or one of a few punctuation characters, and continuing with letters, digits, hyphens, underscores, colons, or full stops, together known as name characters. Names beginning with the string "xml", or any string which would match (('X'|'x') ('M'|'m') ('L'|'l')), are reserved for standardization in this or future versions of this specification.

ERROR ITMS-9000: "index_split_000.html(257): attribute "name" not allowed here; expected attribute "accesskey", "charset", "class", "coords", "dir", "href", "hreflang", "id", "rel", "rev", "shape", "style", "tabindex", "target", "title", "type" or "xml:la

I have all these errors, can anyone help with this all means? trying to get my book published in iBooks. Nedd your help. Thanks, Jo
ERROR ITMS-9000: "index_split_000.html(257): attribute "name" not allowed here; expected attribute "accesskey", "charset", "class", "coords", "dir", "href", "hreflang", "id", "rel", "rev", "shape", "style", "tabindex", "target", "title", "type" or "xml:lang"" at Book (MZItmspBookPackage)
Use of the block quote element can cause ePubecheck to give the error "text not allowed here". Text must not be alone inside of a body tag and if it is not enclosed in some other block level tag, this may lead to the error you are receiving.

I have all these errors, can anyone help with this all means? trying to get my book published in iBooks. Nedd your help. Thanks, Jo
ERROR ITMS-9000: "index_split_000.html(257): attribute "name" not allowed here; expected attribute "accesskey", "charset", "class", "coords", "dir", "href", "hreflang", "id", "rel", "rev", "shape", "style", "tabindex", "target", "title", "type" or "xml:lang"" at Book (MZItmspBookPackage)
Use of the block quote element can cause ePubecheck to give the error "text not allowed here". Text must not be alone inside of a body tag and if it is not enclosed in some other block level tag, this may lead to the error you are receiving.

LDAP Operational Attribute Names

Similar Messages

Maybe you are looking for