LDAPX509IdentityAsserter, usage of User Filter Attributes

Hi
I have WLS up and running with X.509 Identity Asserter, see also this Thread "LDAPX509IdentityAsserter, AD and userCertificate issue".
Now we discovered that the subject on some SmartCards are different, so I'd like to incorporate that in the User Filter Attributes configuration of the X.509 Identity Asserter.
I tried a standard LDAP Filter, but that doesn't seem to work.
Subjects on the SmartCard (SC) look like this
SC 1: [email protected] (=userPrincipalName in AD)
SC 2: username (= CN in AD)
So currently with SC 1 one I got everything working by setting User Filter Attributes to userPrincipalName=$subj.cn
Now with SC1 and SC2 in place I need something like this
(|(userPrincipalName=$subj.cn)(cn=$subj.cn))
But that somehow doesn't work.
How would a correct User Attribute Filter look like to get this working?
Thanks.
Matthias

Hi,
I'm also looking for the solution, can you please share if you get to know how it is to be done.
Thanks & Regards,
Jagadeesh

Similar Messages

User defined attributes - usages

Hi,
I would like to hear how other OA developers have used user defined attributes for an item, if they have used it. I would appreciate if you could share that information.
As for me, I used it for items (messagetextinput, choice etc) in my custom search region to assign attribute names to these items to know what the values given by the user should be associated with and searched for. I had to create a custom search region since query region from oaf didn't allow to associate more than on VO to it.
I just want to see what other purposes others have used the user defined attributes to get a better understanding of it.
Thank you,
Arun

Hello Antilles.
The user defined attributes that you refer to it´s used to specify additional attributes.
You can find more useful information about this topic in this link: http://download.oracle.com/docs/cd/E14373_01/appdev.32/e11838/nav.htm
Regards Pedro

LDAP search cannot find entry by user "defined attribute" or "sounds like

Hi, I have an JSP program that searches an LDAP Sun One Directory Server.
All of my search filters ( by givenname,sn,mail and phone #) work fine with the search base set at the very top (root ) of my DIT tree.
However with the same search base, searching by an "User Defined Attribute" fails to return anything (and note that my search filter includes the objectclass that goes with this user defined attribute)?
Yet, if I change the search base so it points all the way down the DIT tree (maybe near RDN?), the "User Defined Attribute" search works fine ?
Additionally, "sounds like" search filter (givenname~=) fails to find anything at
the upper root search base of DIT. If I change the search base to point down in the DIT tree as I did above, the "sounds like" filter will work?
I've tried everything I know?

Hi Dora9,
Thanks for your reply.
I am glad that you have solved the problem and thanks for your share us the solution
here, so it would be helpful for other members who get the same issue
and we will close this case.
In addition, I suggest you could try to get
the issue confirmed and diagnose by product team. Would you please create connect report for it? You will get email notification for update from the product team experts:
http://connect.microsoft.com/VisualStudio/feedback/CreateFeedback.aspx,
if you submit it, you could share us the link here, so we could know the latest information from the Product team expert. And I will help you to vote it.
Thanks for your understanding.
Best Regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Passing filter attributes from endeca to OAF

Hi,
We have the following scenario.
The user searches for an object in endeca. In order to refine the results list, he/she selects some of the filter attributes from the guided navigation. Assuming that there are links for the items in the results list, is it possible to pass the attribute values which are selected in the filters
apart from passing the attributes which are specific to the record selected in the result list?
Pl. suggest.
Thanks
Chandra

The usual way is to set those values as bean properties and let the JSF access them.
Something like:
mainPage.jsf<h:form>
    <h:inputText value="#{myBean.value}" />
    <h:commandButton value="submit" action="#{myBean.action}" />
</h:form>MyBean.javaprivate String value; // + getter + setter
public String action() {
    System.out.println(value); // Do something with value? Persisting in DB?
    return "anotherPage"; // Navigation case (do not redirect if bean is request scoped!)
}anotherPage.jsf<h:outputText value="#{myBean.value}" />

Limitations of User Defined attributes in USR.

11.1.1.3
I added a notes field to the user defined fields of a user, customer wanted a textarea to makes notes in reagarding the user in question.
Can someone tell me where the limitations of these fields are listed?
I added a large textfield and the system happily accepted the size and made a clob in the db.
I have added the permissions in the policy to make it visible in create as well as in view and modify, all that works fine.
However, when I modify the field by simply writing a small note in it....
I save the change, no exceptions, no error whatsoever
the correct data gets into the clob field in the USR table
but the text area in the user view show the entity object name and reference/instance instead...
i.e.
i add the text "test" into the text area, press save
the fields then shows me...
weblogic.jdbc.wrapper.Clob_oracle_sql_CLOB@65e1
So, I am looking for where this limitation is mentioned in the manuals or trying to find out if its a bug.
Reason I am wondering is because there is a field (USR.USR_NOTE) in the DB which is a CLOB but I cant
find any reference to that in the User Configuration, i.e. what does the system use it for?
So, if there is a limitation on the size of fields in the User Configuration, where can I see them?
I looked in the System and developer manuals and I see nothing on that there.
What is the maximum and where can I see that defined?

Hello Antilles.
The user defined attributes that you refer to it´s used to specify additional attributes.
You can find more useful information about this topic in this link: http://download.oracle.com/docs/cd/E14373_01/appdev.32/e11838/nav.htm
Regards Pedro

Help needed in creating user defined attribute

Hi all,
I want to create user defined attributes and make it available for all users in sun LDAP5.2,I have followed the below mentioned steps,
1.Under configuration-schema i have created attribute named "ldapproducts"
2.I have created new object class "userproducts" and made the parent to be "inetorgperson" and added my "ldapproducts" attribute in required attribute.
Now,in directory tab,Iam trying to add the "ldapproduct" attribute for each user but my defined attribute i.e,"ldapproducts"is not available in the "Add Attribute"list
please let me know do i need to do some steps or do i need to do any changes in DS files..
waiting for ur replies...
thanks in advance.

Hi,
I dont know the solution for this, but heres a work arround
//create new label some where else in the excel sheet as shown below
Label lblcmbdata;
for(int i=0; i<1000; i++)
             lblcmbdata = new Label(75, i, (i+1)+" satish", format);
             sheet1.addCell(lblcmbdata);
}//set the validation range as shown below
writableCellFeature.setDataValidationRange(75,0,75,1000);
Label cmb = null;
cmb = new Label(0, 1, "Select",format);
cmb.setCellFeatures(writableCellFeature);
sheet.addCell(cmb);this will create a combo list with 1000 values
also you can keep the data to be populated in the different sheet in same workbook by creating a named range as below
workbook.addNameArea("cmbdata", sheet1, 0, 0, 0, 1000);
// then fill the data in sheet1
Label lblcmbdata;
for(int i=0; i<1000; i++)
                lblcmbdata = new Label(0, i, (i+1)+" satish", format);
                sheet1.addCell(lblcmbdata);
//set the validation named range as below
writableCellFeature.setDataValidationRange("cmbdata");
Label cmb = null;
cmb = new Label(0, 1, "Select",format);
cmb.setCellFeatures(writableCellFeature);
sheet.addCell(cmb);Thanks and Regards
Satish

I don't find User Extended attributes in IDM 8

Hi all,
I have installed idm8 and I need to extend the user attributes, but I can't find the User Extended Attributes object (or Extended User Attributes). Can anyone help me?

From the release notes :
Identity Manager 8.0 consolidates the locations where an administrator specifies extended,
queryable, and summary attributes for user objects into the new
IDM Schema Configuration object. (ID-17784) In prior versions of Identity Manager, an administrator
edited the User Extended Attributes configuration object to add extended attributes for
user objects and the UserUIConfig configuration object to specify additional queryable or
summary attributes for user objects. An administrator now edits the IDM Schema Configuration
object for these purposes.

Couldn't find user by attribute krb5principalname=host/.....

Hi,
Can anyone help ?
I try to configure SPNEGO on our EP.
but I am always get the following error:
when I am using krb5principalname :
Couldn't find user by attribute krb5principalname=host/.....
when i change to kpnprefix :
Couldn't find user by attribute kpnprefix = host/.....
what is the cause of the error ?
your help appreciated.
Best regards,
Dedi

Hi all,
The error has been solved after I am changing some configuration. But when I try to access the portal, it just hanging waiting for something.
When I check on the defaultTrace.trc it prompt for password. (it is like asking password to access keytab file)
password:
Is anyone know, what is the problem ?
Appreciate your help.
Thanks in advanced,
Dedi

Resource Attributes not saving in Queriable User Extended Attributes

Howdy,
I added a few queriable user extended attributes to IDM. I originally added them in through the configure user attributes interface. I then edited the UserUIConfig to specify that they were queryable. I then edited the User Search Defaults form's getSearchableAttrs function to include these attributes. My added attributes now show up in the search user form, etc., just like I expected them to. Next I configured a new resource adapter for a database table that contained some values I wanted to use to populate these queriable attributes. I wrote a correlation rule, and ran reconciliation on the new resource. It matched up the account entries and automatically matched and linked the account information. So far so good. However, the user extended attributes I defined are not getting populated with the data from the new resource. The mapped resource attributes are treated as part of the user view, but only under the given resource, not as a queriable attribute. I really want to be able to use the find user interface with these datafields. Does anyone know why my data is ot making it into the queriable fields? Do I need to write another rule or workflow? Any advice would be most helpful.
Thanks!
Jim

Queryable attributes refer to attributes stored in the IDM user object, and so need to be referenced as such.
If you want attribute 'foo' in resource 'bar' to be stored as a Queryable attribute, you need to define it like so in your User Form :
<Field name='accounts[Lighthouse].foo'>
    <Expansion>
          <ref>accounts[bar].foo</ref>
    </Expansion>
</Field>This should pull the value from the resource attribute and put it in the IDM attribute. If you refer to it as a global.foo everywhere, that might work (but I find globals to be problematic).
Let me know if it works...
Jason

Oracle9iR2/Solaris8 -- DRG-11207: user filter command exited with status 137

The ctx_ddl.sync_index() procedure hangs when I use it to synchronize the index. It is obvious that the INSO filter is not responding.The LD_LIBRARY_PATH and PATH variables are correctly pointing to $ORACLE_HOME/ctx/lib, $ORACLE_HOME/lib and $ORACLE_HOME/bin,$ORACLE_HOME/ctx/bin respectively. The error in CTX_USER_INDEX_ERRORS is the all too famous:'DRG-11207: user filter command exited with status 137'. The platform is 9iR2/Solaris 8.
Any ideas as to how to get INSO to start working with the various documents ON SOLARIS 8???
Thanks

The ctx_ddl.sync_index() procedure hangs when I use it to synchronize the index. It is obvious that the INSO filter is not responding.The LD_LIBRARY_PATH and PATH variables are correctly pointing to $ORACLE_HOME/ctx/lib, $ORACLE_HOME/lib and $ORACLE_HOME/bin,$ORACLE_HOME/ctx/bin respectively. The error in CTX_USER_INDEX_ERRORS is the all too famous:'DRG-11207: user filter command exited with status 137'. The platform is 9iR2/Solaris 8.
Any ideas as to how to get INSO to start working with the various documents ON SOLARIS 8???
Thanks

How to retrieve user defined attributes in Prepopulating a request dataset

Hi,
I have created couple of user defined attributes in user profile.
And I am tryting to develop a prepopulate adapter in a request dataset for a resource. I need to prepopulate request dataset based on the values of above said user defined attributes.
I tried to use tcResultSet result=UserOppsIntf.getSelfProfile(); in my pre-populate adapter but it is giving me only the following attributes and it is not giving any of my user defined attributes.
Users.Manager Key
Users.Manager Login
Users.Manager First Name
Users.Manager Last Name
Users.Password Warning Date
usr_locale
Users.Key
Users.Password Expired
Users.Middle Name
Users.User ID
Users.Password Expiration Date
Users.Status
Users.Password Warned
Users.Email
Telephone Number
Users.Display Name
usr_timezone
Users.Lock User
Users.Last Name
Users.First Name
MEMBERTYPE
If I use the code userData = usrService.getDetails("User Login", RequesterID, null); then I am getting only the following.
Display Name:
act_key:
Full Name:
usr_key:
User Login:
Last Name:
First Name:
Please let me know how to retrieve all of user defined attribute values in prepopulate adapter for a request dataset.

Use below code to get all attributes in user profile including UDF.
OIMInternalClient objOimInternalClient = null;
User user = null;
          UserManager usrService = null;
objOimInternalClient = new OIMInternalClient();
          if (objOimInternalClient != null) {
                    try {
                         objOimInternalClient.loginAsAdmin();
                         usrService = objOimInternalClient
                                   .getService(UserManager.class);
                         user = usrService.getDetails("usr_key", strUserKey, null);
                         endDate = (Date) user.getAttribute("End Date");
                    } catch (Exception e) {
                         e.printStackTrace();
                    } finally {
                         if (objOimInternalClient != null)
                              objOimInternalClient.logout();
                         if (user != null)
                              user = null;
                         if (usrService != null)
                              usrService = null;
In order to see all UDF's in User profile, please create Authorization Policy.

User Defined Attributes

Hi All,
I wanted few information on User defined attributes in Projects. It would be of great help if I get few suggestions.
I wanted to add few fields to the Update task progress screen. How can I add these field as there is no specific page layout exist for this page. Do I need to use OA Framework to achieve the same? If Yes, how can we modify these seeded pages?
Please guide me.
Thanks in Advance,
Srini.

UDA can be added to project/task/classification. We can not modify the Update Task Progress form using UDA. If the changes are minimal then you can go for personalization or modify the sources as per OAF standards.

User Defined Attributes in Tree List

Does anyone know what the User Defined Attributes is used for in the tree list (when in Create / Edit List Entry screen)?
I'm trying to put a title tag on my list entries so I get a tooltip when hovering the mouse over each entry and thought this might be the way to do it.
If not then User Defined Attributes sounds like it could be useful anyway but I can't find any documentation on what it does.

Hello Antilles.
The user defined attributes that you refer to it´s used to specify additional attributes.
You can find more useful information about this topic in this link: http://download.oracle.com/docs/cd/E14373_01/appdev.32/e11838/nav.htm
Regards Pedro

User-defined Attributes in CRM WebUI

Hi there,
I am using the Attribute 1 (defined in IMG->CRM->Master Data->BP->Define Attributes->Define User-Defined Attributes) to determine if a customer may or may not be given credit, just a simple yes or no attribute. My question is how to make this attribute be available when I'm creating a new BP in the WebUI under General Data?
Thanks in advance.

Hi CharlieF,
I have a trouble with the same attributes in the "Account overview", in the view "BP_HEAD/AccountDetails", when i select a value in this fields and i try to save, the system display the error message: " Field group Attribute 1 is hidden; do not enter data in corresponding fields"
Have you solved this issue?
Can you explain me how?
Thanks in advance.

BP User Defined Attributes -- Error

Hi experts!!
The customer i am working on needed some extra fields on the Accounts screen page, so i defined all User Defiened Attributes from 1 to 10 and added them from the Node MARKETING of the component BP_HEAD.
When i try to save the Account (after filling one of the attributes) I get the following error msg: Classification data is already maintained for business partner.
The Account can be saved and replicated to the ERP if the attributes remain empty.
What am i missing here???
Is there a connection between the attributes and account classification ??
Thank you in advance

The error was fixed with Note 1271004.
BUT .. now when i Save the Account with User Defined Attributes filled the replication to ERP does not happen..
If the attributes are empty it gets replicated.
Any ideas???
Please help!!

LDAPX509IdentityAsserter, usage of User Filter Attributes

Similar Messages

Maybe you are looking for