LDAP Profile Source - "Remote Unique Name" oddity

We have an Active Directory that I've set up to use as an Authentication Source, and it also retrieves a few properties from there - not a problem.
We also have an LDAP directory which contains other attributes of users that I need to retrieve.
I set everything up as I thought it should be, however it's querying the LDAP server with the wrong parameters!
An example user I have is IUSER\803244205. ALUI is showing the Login Name as "IUSER\803244205", the Remote Unique Name as "137eb349-7579-4b15-9a68-b1bff296d933" and the Remote Authentication Name as "803244205@IUSER".
When I look at the LDAP job, the error log is showing that it's trying to sync using the Remote Unique Name -
Unable to attach to user 137eb349-7579-4b15-9a68-b1bff296d933, user not found
My LDAP directory only holds (and is keyed on) the numeric portion of the login name (known as EIN to us) - 803244205. I have got this EIN as a property of the user (a seperate Property that I have mapped to the User object), which is held as a seperate attribute on the Active Directory.
So how do I tell the sync job to use the EIN (which happens to be the "User Name Attribute" on the Authentication Source - samAccountName), rather than trying to use the "Remote Unique Name", which it appears to have generated for itself!
Cheers

Arrgh! Just found the option for myself, seconds after posting this! Cheers anyway.

Similar Messages

IDispatch error #19876 - LDAP Authentication Source - User Unique Name Attribute

Hi,
we have troubles with the User Unique Name Attribute:
As 'cn' and 'dn' may change we want to use the EmployeeID ('workforceID') as unique identifier for our user synchronisation. This attribute exists and is also imported in the profile service. But when we add 'workforceID' to the 'User Unique Name Attribute' in the LDAP Settings of the Remote Authentication Source (LDAP AWS) the job fails and throws the error at the end of this message in the history log.
When we remove 'workforceID' everything works fine. If we set the user unique name attribute to 'cn' or 'dn' everything works fine, too. If we enter not existing names the same error is thrown. It seems like 'workforceID' could not be read/found? What are we doing wrong? Thanks in advance.
1/17/06 12:37:01- (34432) CPTSyncAgent::ProcessUsers: Call to retrieve the users on this auth source failed. Please check that the authentication source server is online.
*** COM exception was: IDispatch error #19876 (0x80044fa4): [SOAP fault: faultcode='ns1:Server.userException' faultstring='java.rmi.RemoteException: Unknown error occured in internalGetUsers null
com.plumtree.remote.ServiceException: Unknown error occured in internalGetUsers nullat com.plumtree.ldap.aws.LDAPSyncProvider.internalGetUsers(LDAPSyncProvider.java:671)at com.plumtree.ldap.aws.LDAPSyncProvider.getUsers(LDAPSyncProvider.java:504)at com.plumtree.remote.auth.NativeSyncProvider.GetUsers(Unknown Source)at com.plumtree.remote.auth.xp.XPSyncProvider.GetUsers(Unknown Source)at com.plumtree.remote.auth.soap.SyncProviderSoapBindingImpl.GetUsers(Unknown Source)at com.plumtree.remote.auth.soap.SyncProviderSoapBindingSkeleton.GetUsers(Unknown Source)at sun.reflect.GeneratedMethodAccessor1024.invoke(Unknown Source)at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)at java.lang.reflect.Method.invoke(Method.java:324)at org.apache.axis.providers.java.RPCProvider.invokeMethod(RPCProvider.java:372)at org.apache.axis.providers.java.RPCProvider.processMessage(RPCProvider.java:292)at org.apache.axis.providers.java.JavaProvider.invoke(JavaProvider.java:276)at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:71)at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:156)at org.apache.axis.SimpleChain.invoke(SimpleChain.java:126)at org.apache.axis.handlers.soap.SOAPService.invoke(SOAPService.java:437)at org.apache.axis.server.AxisServer.invoke(AxisServer.java:316)at org.apache.axis.transport.http.AxisServlet.doPost(AxisServlet.java:701)at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)at org.apache.axis.transport.http.AxisServletBase.service(AxisServletBase.java:335)at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:247)at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:193)at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:256)at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:643)at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:480)at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995)at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:643)at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:480)at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995)at org.apache.catalina.core.StandardContext.invoke(StandardContext.java:2422)at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:180)at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:643)at org.apache.catalina.valves.ErrorDispatcherValve.invoke(ErrorDispatcherValve.java:171)at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:641)at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:163)at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:641)at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:480)at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995)at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:174)at org.apache.catalina.core.StandardPipeline$StandardPipelineValveContext.invokeNext(StandardPipeline.java:643)at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:480)at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:995)at org.apache.coyote.tomcat4.CoyoteAdapter.service(CoyoteAdapter.java:199)at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:833)at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:711)at org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:584)at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:687)at java.lang.Thread.run(Thread.java:536)']
1/17/06 12:37:01- (34432) *** Job Operation #1 failed: ProcessUsers failed (0x4)

That's the correct place to look for the version.
My guess at what is happening is that some of users do not have the 'workforceID' attribute and that is causing the AWS to fail when it gets to them. Unfortunately there is not great error logging around this in the 2.0 version of the LDAP AWS. In order to find out if this is indeed the case, and to see what user does not have this attribute, do a trial run with workforceID as the User Login Attribute. This case is caught and reported better.

LDAP Profile Source

Hi, I've got a problem with LDAP Profile Source.
In my LDAP I've got two OU for my user. In the first ou "ou=People" I've got : uid, Name, Society and in the second ou "ou=Society" Address, Telephone, Fax.
I don't know how to get data from multi OU with LDAP Profile Object.

Along the lines of what Mark was saying - you must have a single auth source that is bringing in multiple OUs. The trick is that you can have multiple profile sources, simply set the query base in each to your specific OU with the specific property map for that OU. Set each profile source to profile sync the everyone group for your auth source. Each user in the entire auth source will be sync'd by each profile source, but the users will only match one of the two profile sources. This way they get properly sync'd and you get the correct vars.
The other thing you can do is simply setup a single profile source, put all the properties in the property map regardless of OU. Only the properties that values exist for will get imported to the users they exist for. If you want to limit the props however (i.e. they actually exist for both OU's but you only want the ones you specify to show up), then you need to take the 2 profile source route.
Hope this helps,Akash

Regd LDAP Profile Synch web service

Hi,
I am using the plumtree provided LDAP profile sync web service. I have a query regarding the re-sync operation.
How is re-sync operation implemented? Will the re-sync occurs for all the users or it will query the LDAP change log and find out all the users that have changed since the lasp job run and then sync the profiles of only the changed users.
I think this is the way it works, but pls confirm
regards
raghu

On the LDAP Profile source you can configure a Signature Attribute. This attribute should be some sort of modify timestamp. When the job runs it will go through each user and check their current signtaure attribute vs. the one saved on the portal. If the value is the same, the rest of the profile attributes will not be retrieved and written to the Plumtree DB.

Property Mapping in remote Profile source vs. User Porfile Mgr

I am confused about Property to user info mapping. I have mapped the user properties that I need to the user info attricutes in the user profile manager. However, if I go to setup the profile source, I am prompted to setup the mapping again. It does not recoganize the mapping already done though the user profile manager. What am I missing or not doing correctly? Do I only need to setup the Profile source no the user profile manager? I'd appreciate any insight into the differences between the two.
Thanks.
Vanita
Staples

On the Profile source, the property map you define here maps Plumtree properties to the attribute names on the remote system you are synching with. An example from the LDAP PWS: on the portal their is a property called "Email Address". LDAP does not have an attribute with the exact name "Email Address", instead this information is stored in an attribute called "mail". So on the Profile Source, you have to map "Email Address" to "mail".
The map on the User Profile Manager allows you to map Plumtree properties to the name of the user info header you want sent to portlets. For most cases this is the same as the property name.

Jabber for Windows LDAP Profiles

I have been unable to find a lot of information on LDAP profiles, but I came across a blog that said that LDAP profiles are only used for Android, iphone and ipad. It stated that the only way to control the search base on Jabber for Windows is by using the jabber-config.xml file. So far this appears to be true based on my limited testing.
I have been able to integrate with OpenLDAP using the jabber-config.xml file to set the server and search base. The only problem i can see with this particular design is I would have to give all users the same LDAP profile and search settings. In our environment this will not satisify our requirements.
Does anyone know of a way where i can integrate with OpenLDAP, use the Jabber for windows client and control the LDAP search setttings on a per user basis?
Thanks

Yes but you won't like it.
Group Configuration File NamesYou specify the name of the group configuration files in the Cisco Support Field on the CSF device configuration in Cisco Unified Communications Manager.If you remove the name of the group configuration file in the CSF device configuration on Cisco Unified Communications Manager, Cisco Jabber for Windows detects the change, prompts the users to sign out, and loads the global configuration file. You can remove the name of the group configuration file in the CSF device configuration by deleting the entire configurationFile=group_configuration_file_name.xml string or by deleting the group configuration filename from the string.If users have desk phone devices only, use the following command line argument to specify unique names configuration files for different groups: TFTP_FILE_NAMESee the Install Cisco Jabber for Windows chapter for more information about the command line arguments.
Please remember to rate helpful responses and identify helpful or correct answers.

SOAP Error in Profile Source

I've written a profile service to import employee information from our HR system to populate user profiles.
When I run the Profile Source Job, I'm getting this error:
4/14/04 13:16:48- The Profile Source encountered an error (0x80004005): CPTRAPProvider::Initialize, PWS SOAP call failed.4/14/04 13:16:48- *** Job Operation #1 failed: The Profile Source encountered an error (0x80004005): CPTRAPProvider::Initialize, PWS SOAP call failed. (0x4)4/14/04 13:16:48- Done with job operations.4/14/04 13:16:48- The Profile Source encountered an error (0x80004005): CPTRAPProvider::Initialize, PWS SOAP call failed.
Does this look familiar to anyone?
Thanks,Wes [email protected]

Joseph, Akash--Let me answer your questions:
Coding is set to Doc Literal for .netSoap timeout is 30 seconds (this is an immediate error)I can access the web service from the automation serverI'm using the Remote Server Basic AuthenticationHaven't gone the TCPTrace route yet.I run Spy from the portal server 98% of the time-- I often forget to run it on the remote servers. When I ran Spy from the Automation Server, it looks like there is SOAP exception being thrown by the remote Profile Web Service when the Initialize call is made:
3342 04-15 10:37:16 Warn SOAP 6092 6084 Envelope.cpp(105) *** COM exception caught *** Error info: IDispatch error #19876 (0x80044fa4): [SOAP fault: faultcode='soap:Server' faultstring='System.Web.Services.Protocols.SoapException: Server was unable to process request. ---> System.IO.FileNotFoundException: File or assembly name openfoundation, or one of its dependencies, was not found.
File name: "openfoundation"_ at Plumtree.Remote.Profile.Soap.ProfileProviderSoapBinding.Initialize(PropertyListArray PropertyList, NamedValueHolder ProfileSourceInfo, NamedValueHolder AuthSourceInfo)
=== Pre-bind state information ===LOG: DisplayName = openfoundation, Version=2.0.9.8318, Culture=neutral, PublicKeyToken=d0e882dd51ca12c5(Fully-specified)LOG: Appbase = [url=file:///C:/Inetpub/wwwroot/Abra]file:///C:/Inetpub/wwwroot/AbraLOG: Initial PrivatePath = bin_Calling assembly : xpcommon, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null._===
LOG: Publisher policy file is not found.LOG: No redirect found in host configuration file (C:\WINNT\Microsoft.NET\Framework\v1.1.4322\aspnet.config).LOG: Using machine configuration file from C:\WINNT\Microsoft.NET\Framework\v1.1.4322\config\machine.config.LOG: Post-policy reference: openfoundation, Version=2.0.9.8318, Culture=neutral, PublicKeyToken=d0e882dd51ca12c5LOG: Attempting download of new URL file:///C:/WINNT/Microsoft.NET/Framework/v1.1.4322/TemporaryASP.NET Files/abra/16123dc4/9c23a487/openfoundation.DLL.LOG: Attempting download of new URL file:///C:/WINNT/Microsoft.NET/Framework/v1.1.4322/TemporaryASP.NET Files/abra/16123dc4/9c23a487/openfoundation/openfoundation.DLL.LOG: Attempting download of new URL file:///C:/Inetpub/wwwroot/Abra/bin/openfoundation.DLL.LOG: Attempting download of new URL file:///C:/Inetpub/wwwroot/Abra/bin/openfoundation/openfoundation.DLL.LOG: Attempting download of new URL file:///C:/WINNT/Microsoft.NET/Framework/v1.1.4322/TemporaryASP.NET Files/abra/16123dc4/9c23a487/openfoundation.EXE.LOG: Attempting download of new URL file:///C:/WINNT/Microsoft.NET/Framework/v1.1.4322/TemporaryASP.NET Files/abra/16123dc4/9c23a487/openfoundation/openfoundation.EXE.LOG: Attempting download of new URL file:///C:/Inetpub/wwwroot/Abra/bin/openfoundation.EXE.LOG: Attempting download of new URL file:///C:/Inetpub/wwwroot/Abra/bin/openfoundation/openfoundation.EXE. --- End of inner exception stack trace ---'] (105,Envelope.cpp)
Since we've identified a SOAP exception, what do I need to do next?
Thanks all--Wes

In 14 I can no longer give my downloads a unique name, even if I have the option to selection download location.

Before I upgraded to FF 14, I could give my downloads a unique name. I can no longer do that. Evne if i have selected the option "Always ask me where to save files" . Im able to set where to download them but I am not able to give them my own name. I run Win 7 Home. Its very very inconvenient becuase I have to manually go back and rename 80% of the files I download. IS there a fix??

Hi,
You can consider the [https://support.mozilla.org/en-US/kb/reset-firefox-easily-fix-most-problems Reset Firefox] feature via '''Help''' ('''Alt''' + '''H''') > '''Troubleshooting Information'''. To revert to the previous profile, you can close the new profile, start Firefox and choose the '''*.default''' profile. While the [https://support.mozilla.org/en-US/kb/profile-manager-create-and-remove-firefox-profiles Profile Manager] is open, you can also delete the newly reset profile (the one containing random numbers).
[https://support.mozilla.org/en-US/kb/Managing-profiles Managing profiles]
[https://support.mozilla.org/en-US/kb/Profiles?s=profile&r=2&e=sph&as=s Profiles Howto]

Move files and create unique name something wrong with my script

Can you see where I might be going wrong here?
Just trying to create a unique name if something exists.
In English.
Move file to the destinationFolder
Item exists in destinationFolder > Move file in the destination folder to the fake Trash > If it exists in fakeTrash too then give it a new name an ending of_a.psd then out it in the trash
Once thats done move start file to the destination folder.
Currently when the file exists in the destination folder and in the trash, I get the prompt then the error
error "System Events got an error: Can’t get disk item \"NN_FR10WW06290PK3LE.psd\"." number -1728 from disk item "NN_FR10WW06290PK3LE.psd"
set fileMatrix to {¬
          {folderName:"BHS", prefixes:{"BH", "SM", "AL"}}, ¬
          {folderName:"Bu", prefixes:{"BU"}}, ¬
          {folderName:"Da", prefixes:{"ES"}}, ¬
          {folderName:"Di", prefixes:{"DV"}}, ¬
          {folderName:"Do", prefixes:{"DJ", "RA"}}, ¬
          {folderName:"In", prefixes:{"GT", "CC"}}, ¬
          {folderName:"Fr", prefixes:{"FR"}}, ¬
          {folderName:"No", prefixes:{"NN"}}, ¬
          {folderName:"Ma", prefixes:{"MA", "MF", "FI", "MC", "MH", "MB"}}, ¬
          {folderName:"Pr", prefixes:{"PR"}}, ¬
          {folderName:"To", prefixes:{"TM15", "TM11", "TM17"}}, ¬
          {folderName:"Wa", prefixes:{"WA"}}, ¬
          {folderName:"Se", prefixes:{"SE"}}}
tell application "Finder"
          set theHotFolder to folder "Hal 9000:Users:matthew:Pictures:HotFolderDone"
          set foldericon to folder "Hal 9000:Users:matthew:Pictures:Icons:Rejected Folder Done"
          set fakeTrash to folder "Hal 9000:Users:matthew:FakeTrash"
---here
          repeat with matrixItem in fileMatrix -- look for folder
                    set destinationFolder to (folders of desktop whose name starts with folderName of matrixItem)
                    if destinationFolder is not {} then -- found one
                              set destinationFolder to first item of destinationFolder -- only one destination
                              set theFolderName to name of destinationFolder
                              repeat with aPrefix in prefixes of matrixItem -- look for files
                                        set theFiles to (files of theHotFolder whose namestarts with aPrefix) as alias list
                                        if theFiles is not {} then repeat with startFile intheFiles -- move files
                                                  try
move startFile to destinationFolder
                                                  on error
activate
                                                            display dialog "File “" & (name ofstartFile) & "” already exists in folder “" & theFolderName & "”. Do you want to replace it?"buttons {"Don't replace", "Replace"} default button 2 with icon 1
                                                            if button returned of result is "Stop"then
                                                                      if (count theLastFolder) is 0 thendelete theLastFolder
                                                                      return
                                                            else if button returned of result is"Replace" then
                                                                      set fileName to get name ofstartFile
                                                                      if exists file fileName indestinationFolder then ¬
                                                                                try
--next line moves existing file to the faketrash
move file fileName of destinationFolder to fakeTrash
move file startFile to destinationFolder
--if it already exists in fake trash give it a new name then move that file to fake trash
                                                                                on error errmess numbererrnum -- oops (should probably check for a specific error number)
                                                                                           log "Error " & errnum& " moving file: " &errmess
                                                                                           set newName to mygetUniqueName(fileName,fakeTrash)
                                                                                           set name of fileNameto "this is a unique name"-- or whatever
                                                                                           set name of fileNameto newName
--Now move the renamed file to the fake trash
move file fileName to fakeTrash
--now move the startfile to destination folder
move file startFile to destinationFolder
                                                                                end try
                                                            else -- "Don't replace"
                                                                      if not (exists folder "Hal 9000:Users:matthew:Desktop:Rejected Folder Done") then
                                                                                set theLastFolder toduplicate foldericonto desktop
                                                                      else
                                                                                set theLastFolder to folder"Hal 9000:Users:matthew:Desktop:Rejected Folder Done"
                                                                      end if
                                                                      delay 0.5
move startFile to theLastFolder with replacing
                                                            end if
                                                  end try
                                        end repeat
                              end repeat
                    end if
          end repeat
          try
                    if (count theLastFolder) is 0 then delete theLastFolder
          end try
end tell
to getUniqueName(someFile, someFolder)
     check if someFile exists in someFolder, creating a new unique file name (if needed) by adding a suffix
          parameters -          someFile [mixed]: a source file path
                              someFolder [mixed]: a folder to check
          returns [list]:          a unique file name and extension
          set {counter, suffixes, divider} to {0, "abcdefghijklmnopqrstuvwxyz", "_"}
          set someFile to someFile as text -- System Events will use both Finder and POSIX text
          tell application "System Events" to tell disk item someFile to set{theName, theExtension} to {name, name extension}
          if theExtension is not "" then set theExtension to "." & theExtension
          set theName to text 1 thru -((length of theExtension) + 1) of theName -- just the name part
          set newName to theName & theExtension
          tell application "System Events" to tell (get name of files of folder(someFolder as text))
                    repeat while it contains newName
                              set counter to counter + 1 -- hopefully there aren't more than 26 duplicates (numbers are easier)
                              set newName to theName & divider & (item counter ofsuffixes) & theExtension
                    end repeat
          end tell
          return newName
end getUniqueName

There are numerous errors in your script, and it's a large script so there might be more, but these are the standouts for me:
At line 48 you:
                                                                      set fileName to get name of startFile
which is fair enough - you then use this to see if the file already exists in the destinationFolder. However, if it does the logic about how to deal with that is flawed.
At line 56 you catch the error:
                                                                                on error errmess number errnum -- oops (should probably check for a specific error number)
                                                                                          log "Error " & errnum & " moving file: " & errmess
                                                                                          set newName to my getUniqueName(fileName, fakeTrash)
                                                                                          set name of fileName to "this is a unique name" -- or whatever
                                                                                          set name of fileName to newName
--Now move the renamed file to the fake trash
move file fileName to fakeTrash
--now move the startfile to destination folder
move file startFile to destinationFolder
                                                                                end try
so let's focus on that.
56: catch the error
57: log the error
58: generate a new unique filename
59: change the name of fileName to some other string
Hang on, wait a minute.... we already ascertained that at line 48 you defined fileName as a string object that indicates the name of the file. This is just a string. It's no longer associated with the original file... it's just a list of characters. Consequently you cannot set the 'name' of a string, hence your script is doomed to fail.
Instead, what I think you want to do is set the name of the startFile to the unique string. Files have filenames, and therefore you can set the name.
You have a similar problem on line 64 where you try to 'move file filename to fakeTrash'. fileName is just a string of characters. It isn't enough to identify a file - let's say the file name is 'some.psd'. You're asking AppleScript to move file some.psd to the trash. The question is which some.psd? The one on the desktop? in your home directory? maybe on the root of the volume? or maybe it should search your drive to find any/all files with that name? nope. None of the above. You can't just reference a file by name without identifying where that file is. So you probably want to 'move file fileName of destinationFolder...'
There may be other problems, but they're likely to be related - all issues with object classes (e.g. files vs. strings), or not being specific about which object you want.
As I said before, though, I might be way off - you don't say where the error is triggered to make it easy to narrow down the problem. Usually AppleScript will highlight the line that triggered an error. Knowing what that line is would help a lot.

Multiple LDAP data sources in EP7.0 SP14

Hello,
I am new to a site that uses portal and SSO between portal and AD LDAP. The portal version is EP7.0 SP14. The datasource is configured with 'datasourceConfiguration_ads_readonly_db_with_krb5.xml'. User path is OU=Users,OU=Finance,DC=io,DC=network and Group Path is OU=Groups,OU=Finance,DC=io,DC=network. The flag to use the Unique ID is also set to 'samaccountname'. The problem is that we also have users in OU=Admins,OU=Finance,DC=io,DC=network and OU=Managers,OU=Finance,DC=io,DC=network in the same AD LDAP that are not visible to the portal but we would like them to be?
It did appear to work if I changed the User Path to OU=Finance,DC=io,DC=network but I can not find any SAP document that supports doing this?
I have seen the document 'Configure multiple LDAP data sources for the UME' with the following link https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/e1959b90-0201-0010-849c-d2b1d574768b however this specifies EP6 so I'm not sure if it is still relevant?
Also somebody did warn me with "If you change the xml file it will remove all current user mappings to the portal, all the groups mapped to roles will be lost and you will have to set them up again". Is this true?
Am I supposed to be using the SPNego Wizard as described in SAP Note 994791?
And possibly the following links for configuring and testing the SPNego...
Configuring and troubleshooting SPNego -- Part 1
Configuring and troubleshooting SPNego -- Part 2
Any guidance towards the best approach to solve our problem would be greatly appreciated.
Thanks,
Dave

Hi Dave,
It did appear to work if I changed the User Path to OU=Finance,DC=io,DC=network but I can not find any SAP document that supports doing this?
OK, I am not an LDAP expert, but if you just want to change your entry point in the structure, I do not see how this would be a problem. I do not know what kind of statement you would expect in the SAP documentation allowing this. Maybe this will answer your question: [Organization of Users and Groups in LDAP Directory|http://help.sap.com/saphelp_nw04s/helpdata/en/09/c5ee407552742ae10000000a155106/frameset.htm]
I have seen the document 'Configure multiple LDAP data sources for the UME' with the following ... however this specifies EP6 so I'm not sure if it is still relevant?
This function has not changed much since EP6, only the administration tools.
Also somebody did warn me with "If you change the xml file it will remove all current user mappings to the portal, all the groups mapped to roles will be lost and you will have to set them up again". Is this true?
It depends on how you change the XML file, but it does not sound like you need to do this, just the configuration of the connection to the LDAP, that is, higher in the structure.
Am I supposed to be using the SPNego Wizard as described in SAP Note 994791?
Only if you want to use SPNego for SSO.
-Michael

Export as Separate PDF Pages with Unique Names

I have an InDesign document that has several pages. I want to export each page as a seperate PDF, but they have to have a unique name that I want to be able to specify.
For example, I want to export page 1 as "calendar page 2014"
Page 2 as "Diary page 2014" etc.
I found some solutions, but they aren't quite what I need:
Export as Seperate pages with image name
This apple script takes the name of the first image on the document and uses that as the name.
However, my document has no images.
Exportools
A paid tool that offers many options for exporting. However, the name has to be based on a pattern, which is no good for me.
I'm hoping that there will be a script that can take the name from a non-printing area/layer. That way, I can just put the desired name on the page and it will export with that name each time.

have you looked at the extention Autosplit PRO? This may be what you are looking for. (Although, I don't think this software is compatable with MAC...but if you find out otherwise, please advise!)
good luck..

Error message when trying to create a unique name

Why do I keep getting an Error message when trying to create a unique name for a location on your site. I am simply looking to use your free 2GB space to store some pics and vids but keep getting an error message.

How come Leopard let me use the WGM in standard mode?
While SA complains that it won't work in Standard Configuration, WGM does not. There is some fault in the logic of this for which I don't have an explanation.
If I want to get control on Dock, selection of Home folder, config of Proxy... which I think are basic things, do I really need the advanced mode?
If you wish to have complete control of all client settings, yes. There really is no disadvantage of using an Advanced configuration other than the learning curve.
So if I switch to advanced mode, there is good chance I won't get this error message anymore, right?
Yes.

Create multiple instances of same class but with unique names

Hi,
I'm creating an IM application in Java.
So far I can click on a user and create a chat session, using my chatWindow class. But this means I can only create one chatWindow class, called 'chat'. How can I get the application to dynamically make new instances of this class with unique names, for examples chatWindowUser1, chatWindowUser2.
Below is some code utlising the Openfire Smack API but hopefully the principle is the clear.
    private void chatButtonActionPerformed(java.awt.event.ActionEvent evt) {
        int selectedUserIndex = rosterList.getSelectedIndex();
        String selectedUser = rostAry[selectedUserIndex].getUser();
        System.out.println("Chat with: " + selectedUser);
        if (chatBox == null) {
            JFrame mainFrame = CommsTestApp.getApplication().getMainFrame();
            chatBox = new CommsTestChatBox(mainFrame,conn,selectedUser);
            chatBox.setLocationRelativeTo(mainFrame);
        CommsTestApp.getApplication().show(chatBox);
}

yes, an array would work fine, just realize that by using an array, you're setting an upper bound on the number of windows you can have open.
As for unique names, if you mean unique variable name, you don't need one. The array index serves to uniquely identify each instance. If you mean unique title for the window, set that however you want (username, index in array, randomly generated string, etc.). It's just a property of the window object.

Post-upgrade ToDo, PI configuration Wizard: com.sap.security.api.DuplicateKeyException Group found, but unique name "SAP_SLD_DATA_SUPPLIER" is not unique!

after PI-Upgrade to NW-PI-731-SP07, executing the PI-configuration wizard:
step 126 of 162
Assign SLD Data Supplier user to Group SAP_SLD_DATA_SUPPLIER (local SLD)
Error:
Group found, but unique name "SAP_SLD_DATA_SUPPLIER" is not unique!
Execute Java Service
Library: sap.com/tc~lm~ctc~util~core_ear
Class: com.sap.ctc.util.core.services.UserFacade
Method: void com.sap.ctc.util.core.services.UserFacade.addUserToGroup(java.lang.String, java.lang.String)
Arguments (2)
userName : SLD_DS_EXE
groupName : SAP_SLD_DATA_SUPPLIER
InvokeService- Result: ERROR
Refresh Env. Messages: false
Duration: 1.936 sec
Library Info
Default Trace
Exception Class: com.sap.security.api.DuplicateKeyException
Exception Message: Group found, but unique name "SAP_SLD_DATA_SUPPLIER" is not unique!
com.sap.security.api.DuplicateKeyException: Group found, but unique name "SAP_SLD_DATA_SUPPLIER" is not unique!
at com.sap.ctc.util.infra.rfc.BaseConfig.dispatchException(BaseConfig.java:230)
at com.sap.ctc.util.core.services.impl.ume.java.GroupJavaImpl.verify(GroupJavaImpl.java:121)
at com.sap.ctc.util.core.services.impl.ume.DualGroupImpl.verify(DualGroupImpl.java:118)
at com.sap.ctc.util.core.services.content.ume.UserService.addToGroup(UserService.java:725)
at com.sap.ctc.util.core.services.UserFacade.addUserToGroup(UserFacade.java:288)
what to do?
============
o.k.
https://service.sap.com/sap/support/notes/1016283
first run the UME consistency check => found some inconsistency => did repair UME
then run again UME consistency check => found no more inconsistency !!
the again - try to run the PI-Upgrade-Wizard => but again error on executing .....

see this sap-notes:
http://service.sap.com/sap/support/notes/1617234
http://service.sap.com/sap/support/notes/1661135
http://service.sap.com/sap/support/notes/1678815
http://service.sap.com/sap/support/notes/1626747

ISE Admin Access Authentication against multiple AD/LDAP Identity Sources

Hi all!
We would like to grant admin cccess to our ISE deplyoment to users stored in multiple Active Directories. Since there is no trust relationship between these ADs, we created an LDAP Identity Source for each AD and also an Identity Source Sequence but in the UI we can only select one Identity Source.
Any ideas how to solve this problem?
Thanks in advance!
Kind regards,
Michael Langerreiter

I did check in my lab and yes for admin access we can't select identity store sequence in authentication. We can only pick one external database. However, on the login page you may select the appropriate database before you enter the username and password.
Jatin Katyal
- Do rate helpful posts -

LDAP Profile Source - "Remote Unique Name" oddity

Similar Messages

Maybe you are looking for