Logged in workstations - attribute in user object

When we go into a user object, and find the ZENWorks tab, there's a
"Logged in Workstations" sub-section of that tab.
Why is that blank, but when your right-click on the user to remote
control, it shows the workstation IP?
It seems that the ZEN 7 agent is not updating eDirectory correctly.
And this is happening on thousands of users "randomly"
And the user has been logged in and the workstation registered for hours
today.

m_jonis,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://support.novell.com/forums)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://support.novell.com/forums/faq_general.html
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Similar Messages

Size limitation for all attributes in user objects in Active Directory????

hi geeks , i wanna know maximum size limit of an user objects attribute in   active directory ... like max amount of character first name attribute can hold ... Thank in advance..

You can use ADSI Edit to view the properties of the attributes in the Schema container of your AD. In the Schema container you can select an attribute, like Company, right click, select properties, and find the rangeUpper property of the attribute. This
is the maximum length in characters (or bytes). You can also use dsquery to retrieve rangeUpper for an attribute. For example:
dsquery * "cn=Schema,cn=Configuration,dc=MyDomain,dc=com" -filter "(LDAPDisplayName=streetAddress)" -attr rangeUpper
where your domain is MyDomain.com. This finds the maximum length for the "street address" attribute. A few values in my test domain (the values can be modified, so these are the defaults):
company                      64
streetAddress              1024
physicalDeliveryOfficeName  128
initials                      6
st                          128
postOfficeBox                40
name                        255
cn                           64
You can use the first two spreadsheets on this page to help identify attributes in AD (with no Exchange):
http://www.rlmueller.net/UserAttributes.htm
The first spreadsheet documents the attributes corresponding to the fields on most of the tabs of ADUC. For example, "st" is the attribute for state, "physicalDeliveryOfficeName" for the field labeled "office". You need the
LDAPDisplayName's of the attributes, like I used in the dsquery command above. The second spreadsheet documents all attributes in AD with more information, like the syntax and which class each applies to.
Richard Mueller - MVP Directory Services

Custom attributes added to user objects not visible in OWA address book

Hi,
I am using Exchange 2013 and recently added a new custom attribute in the user object properties using the details template editor to be visible in the GAL The new attribute is correctly getting displayed in the GAL from outlook clients but not visible
in OWA address book. Is there a way to update the display of user objects in OWA address book to include the new custom attribute?
Thanks!

Hi Abu,
Please see following link:
Customize Details Templates
http://technet.microsoft.com/en-us/library/ms.exch.toolbox.detailstemplate(v=exchg.150).aspx
It says, Use the Details Templates Editor to customize the client-side graphical user interface (GUI) presentation of object properties that are accessed by using address lists in Microsoft Outlook.
My understanding is this setting only visible in Outlook.
Please correct me if there is any misunderstanding.
Thanks
Mavis
Mavis Huang
TechNet Community Support

How to create a user using XML and specifying addional attributes that are objects

I'm trying to create a user using XML and specifying some attributes that are objects and not sure how to do it. How would I set the DirectoryUserAcl to Public?
Here's the xml file:
<?xml version = '1.0' standalone = 'yes'?>
<SimpleUser>
<UserName>mike2</UserName>
<Password>abc123</Password>
<AdminEnabled>false</AdminEnabled>
<HomeFolderRoot>/home</HomeFolderRoot>
<HasContentQuota>false</HasContentQuota>
<DirectoryUserAcl> ??? </DirectoryUserAcl>
<DefaultAclBundleAcl> ??? </DefaultAclBundleAcl>
<HomeFolderPolicyBundleAcl> ??? </HomeFolderPolicyBundleAcl>
</SimpleUser>

I figured out the answer:
<?xml version = '1.0' standalone = 'yes'?>
<SimpleUser>
<UserName>mike2</UserName>
<Password>abc123</Password>
<AdminEnabled>false</AdminEnabled>
<HomeFolderRoot>/home</HomeFolderRoot>
<HasContentQuota>false</HasContentQuota>
<DirectoryUserAcl classname="SystemAccessControlList" refType="name">Public</DirectoryUserAcl>
</SimpleUser>
null

AD user object ntSecurityDescriptor changed

We have a single user object that was created with the same values under ntSecurityDescriptor as all other user objects in the same OU. Yesterday the user had
issues, no email, unable to access shared drives, unable to print etc. When we investigated we found over half of the settings under ntSecurityDescriptor
had been lost. There is nothing in the event logs/audit to show what, if anything, was done to his account.
I ran Get-ADUser
-Filter
-Properties ntSecurityDescriptor
|
select
-ExpandProperty
ntSecurityDescriptor
and found many inconsistencies despite user accounts being created to a standard format, apart from domain admins/IT
staff.
Is there a default set of values for ntSecurityDescriptor? If so, what is it?
Also, does anyone have any idea how a user object can suddenly lose some of these settings?

ntSecurityDescriptor == The Security Tab. This attribute holds the security defined on the object aka the ACL (Access Control List) and a set of ACEs (Access Control Entries) - Those can either be defined explicit on the object or inherited from parent objects
in the tree. Each objectClass (type) get a set of default ACEs from there schema definition - those are stored in defaultNtSecurityDescriptor.
ntSecurityDescriptor is changed when the security is changed on the object, or any other object above the particular object in the tree. Is the particular user a member of any built in group such as Domain Admins, Server Operators, Accounts Operators, Backup
Operators or Print Operators - If yes - AdminSDHolder is might what causing what you're experiencing:
http://technet.microsoft.com/sv-se/magazine/2009.09.sdadminholder(en-us).aspx
However changes to ntSecurityDescriptor / ACL would not result in the issues you describe such as the particular user who had it's ntSecurityDescriptor changed loosing access to resources.
Enfo Zipper
Christoffer Andersson – Principal Advisor
http://blogs.chrisse.se - Directory Services Blog

Is Active Directory's ExtensionAttributes9 a field in user object and how to retrieve it in the class type userprincipal?

Hi, I'm using VS2012.
I want to use this ExtensionAttributes9 field to store date value for each user object. I use UserPrincipal class, a collection of these objects are then bind to a gridview control. Is ExtensionAttributes9 a field in AD user object?
How can I access it and bind to the gridview?
If this field isn't available then what other field can use?
Thank you.
Thank you

UserPrincipal is basically a wrapper around DirectoryEntry:
http://msdn.microsoft.com/en-us/library/system.directoryservices.directoryentry.aspx and only provides a subset of the Active Directory, although the most common, attributes that are available for the user object. The attribute that you
seek is not one of them.
By utilizing the method that I provided you a link to, it will return the underlying DirectoryEntry that was used to build the UserPrincipal object and should allow you to access the attribute that you seek.
It would be greatly appreciated if you would mark any helpful entries as helpful and if the entry answers your question, please mark it with the Answer link.

SQL Developer and Blocking View of Other Users' Objects

I am using SQL Developer in a classroom environment. My student users can “see” Other Users objects. They cannot modify, but none the less can see the structure and data.
I only want the users to be able to see their own objects. Is there a privilege that needs to be revoked? (In using SQL Plus command line, this was not a problem.)
Thanks.
-Karen

Karen,
From sysdba account (sys/system). Run following and verify for that particular user grant is revoked. May be exit from sql developer and log back in or refresh view.
YOu can also potenially revoke all the privs from all non admin uses i.e.r even connect/resource roles and grant them back.
revoke select any table from yourschemaname;
revoke connect from schemaname;
revoke create session from schemaname;
revoke resource from schemaname;
Then just grant privs as need basis
grant connect to schemanme;
grant resource to schemaname;
grant create session to schemaname;
..Regards
Edited by: OrionNet on Jan 23, 2009 2:01 PM

Multiple users logged into one server, each users printer has a different name, application needs ONE name to print to.

Multiple users logged into one server, each users printer has a different name, application needs ONE name to print to.
I'm NOT in any way a Terminal Services expert and I need help trying to get an application program working in a multi-user environment.
The issue is that the printer changes for every user that is logged in. The application needs to print NOT to the default printer, but to a "special" printer which is selected in the application... let's call it a label printer to simplify the explanation.
You have your default regular printer, easy for the application to find that one, and then you have a special printer that labels get printed onto. The application needs to know what printer is the label printer. So we allow the user to select that in the
application and the selection is stored in a config file in
C:\ProgramData\mfgr\prog\setting files
I don't have access to the application so I can't change how this works.
In the "regular" world, selecting the label printer driver to use should be per machine, NOT per user. When a new user logs into a machine, the physical printer doesn't go "poof" and a new printer suddenly appear. Same printer for all
users.
Yet in terminal services, the physical machine is "merged" with the virtual machine on the server. And there can be many users logged in at the same time. So each users real machine (and real printer) is injected into the "fake" terminal
services machine. The name of the printers is made unique for each user. So the printers DO go "poof" and change names depending on the user logged into terminal services.
So user "A" logs in and sets up the application to print to "LabelPrinterForUserA" (or whatever the name of the printer happens to be), that setting is stored in the ProgramData subfolder, and all is well. Later, user "B" logs
in, and when they print, the application tries to print to "LabelPrinterForUserA" which doesn't exist for user B or is only accessible by user A. If user B re-configures, that breaks it for user A.
SOLUTION 1: The way that /should/ work (in my mind) is that you define one "generic" printer in Terminal Services... call it "Virtual Label printer" and when the user wants to print to it, the print job gets re-directed back to whatever
physical printer is actually connected to their local workstation. There is a map of virtual printer to actual printer depending on the current user. The application is told once to print to "Virtual Label Printer" for all users.
SOLUTION 2: Or... there should be some way to make the ProgramData sub folders separate per user. E.g. when user "A" tries to access:
C:\ProgramData\mfgr\prog\setting files
they actually get
C:\UserData\UserA\AppData\mfgr\prog\setting files
and user "B" gets
C:\UserData\UserB\AppData\mfgr\prog\setting files
So the question I have is: Does either of those solutions exist hidden somewhere in the setup of terminal server? Or is there another way around this issue that I don't know?

I don't really have a "for sure" answer to this, but because people here can't seem to deal with a question that hasn't been answered I'll provide the best answer I did receive from ServerFault.com user Nathan:
I can feel your pain with using old software on terminal servers ...the solution I've come up with definitely won't scale as it requires some manual configuration, but I've gotten this method to work with our label printers (which require to be
printed to an LPT port...yep, that old).
Share your USB-connected printers to the network on each machine. Then, have the user log in on aunique session for each of them
(a TS account cannot be shared among computers for this to work) and install a network printer pointing to the USB one they shared. Try to use a DNS name to account for possible DHCP movements.
After, it should work. Each user can do this since display names can be identical as long as the ports are different (which they are).
This was clarified by the following series of comments:
I think you are on to something here, and I originally advised the admin to do this. The problem he ran into is that it setup the printer names in the TS as "printer on usersworkstation"
and he could not rename it except to change the "printer" to whatever. E.g. the "on userworkstation" remained. I believe there is another way of installing the printer which avoids this, but I can't find it. Ages ago, one used to do NET
USE LPT2 \\computer\printer password /USER:domain\user /PERSISTENT:YES and then tell the driver to print to LPT2 –  James
Newton Mar
17 at 16:21
@JamesNewton That's actually the exact method we used. The way around the "network printer" part is to install it as local printer and map it to a TCP/IP port that way. –  Nathan
C Mar
17 at 16:28
You mean in the case where the printers are TCP/IP connected and not local USB / LPT to the users workstation? That makes sense. Wonder if this will work for USB connected printers... –  James
NewtonMar
17 at 16:35
@JamesNewton You'd share the local printer on the client's PC then on the server connect via TCP/IP to it. You'd need static addresses or use DNS names if DHCP, though. –  Nathan
C Mar
17 at 16:51
Ah. Yes. I see. Looks like the LPT thing should work even with a USB connected printer:superuser.com/questions/182655/… –  James
Newton Mar
17 at 17:09

How do I get the value of a resource property stored in the user object?

I need a way to get to the myflag property on the resources in an object
I have been trying to get to it by first getting the user object...
but how can I get to the properties them self?
If the following is the user object and I need to refer to the different myflag properties in a form?
What I want to do is to make the system NOT change password on accounts where the myflag is set to true
Anyone that could point me right here?
I use the following code to get the userObj in the form...
 <Field name='userObj'>
 <Derivation>
 <invoke name='getObject'>
 <ref>:display.session</ref>
 <s>User</s>
 <ref>resourceAccounts.id</ref>
 </invoke>
 </Derivation>
 <Disable>
 <isnull>
 <ref>resourceAccounts.id</ref>
 </isnull>
 </Disable>
 </Field>And the resulting userObj looks like this

<User id='#ID#BAF7-:882E9B73531:87D587F7-:726EA99B2E0A89CD' name='43725' creator='Nnnnn' createDate='1328101309098' lastModifier='Nnnnn' lastModDate='1352128262380' lastMod='71' repoMod='1352128262383' primaryObjectClass='User' password='xxx' lastPasswordUpdate='1352128195038'>
<Services>
 <ObjectRef type='Resource' id='#ID#DC98A0E2B99AE627:1A6684F:10F96310B9F:-7FE1' name='Xolid'/>
</Services>
<PasswordExpiration>2012-11-04T15:09:55.038Z</PasswordExpiration>
<ResourceInfoList>
 <ResourceInfo accountId='cn=S43725,ou=Xolid Users,ou=User Accounts,dc=adxx,dc=xxx,dc=net' accountGUID='<GUID=3c020b6e1c253d45808fc47889201c4a>' tempId='dc98a0e2b99ae627:-3984a159:139b34ea14f:-4c10' created='true' lastPasswordUpdate='1352128262115'>
 <ObjectRef type='Resource' id='#ID#DC98A0E2B99AE627:1A6684F:10F96310B9F:-7FE1' name='Xolid'/>
 <ResourcePropertyValues>
 <Map>
 <MapEntry key='myflag' value='false'/>
 </Map>
 </ResourcePropertyValues>
 </ResourceInfo>
 <ResourceInfo accountId='cn=S43725A,ou=Administrative Users,ou=User Accounts,dc=adxx,dc=xxx,dc=net' accountGUID='<GUID=fc4ca613bf40b644948cf216e1ec50bd>' tempId='dc98a0e2b99ae627:-4ce08fd6:13a5c68dd38:4fc4' created='true' lastPasswordUpdate='1352128262285'>
 <ObjectRef type='Resource' id='#ID#DC98A0E2B99AE627:1A6684F:10F96310B9F:-7FE1' name='Xolid'/>
 <ResourcePropertyValues>
 <Map>
 <MapEntry key='myflag' value='true'/>
 </Map>
 </ResourcePropertyValues>
 </ResourceInfo>
</ResourceInfoList>
<Attribute name='closest_manager' type='string' value='77774'/>
<Attribute name='firstname' type='string' value='Test'/>
<Attribute name='fullname' type='string' value='Testersson, Test'/>
<Attribute name='xr_attr_flag' type='string' value='N -------- MA20120201 MB20120201 MC20120201 MD20120201 ME20120201 MF20120201 MG20120201 MH20120201 MI20120201 MJ20120201 MK20120201'/>
<Attribute name='xr_date_flag' type='string' value='N 20120914 MS20120201 MT20120914'/>
<Attribute name='lastname' type='string' value='Testersson'/>
<Attribute name='local_id' type='string' value='S43725'/>
<Attribute name='position_end_date' type='string' value='2012-08-10 01:08:18.0'/>
<AdminRoles>
 <ObjectRef type='AdminRole' id='#ID#DC98A0E2B99AE627:1A6684F:10F96310B9F:-7FF7' name='XXX - Manager'/>
</AdminRoles>
<MemberObjectGroups>
 <ObjectRef type='ObjectGroup' id='#ID#Top' name='Top'/>
</MemberObjectGroups>
<Properties>
 <Property name='AD_HomeDir_Xolid_S43725' value='\\XXX5014A\UserFolders$\S43725'/>
 <Property name='AD_ProfileDir_Xolid_S43725' value='\\XXX5014A\UserProfiles$\S43725'/>
 <Property name='idm_lastLoginLocale' value='sv'/>
 <Property name='myflag' value='false'/>
</Properties>
</User>

Thanks Praveen.
I was missing the default namespace of "http://sapportals.com/xmlns/cm" - I thought I could just pass an empty string for the namespace, but it looks like I must always specifiy, even if it is default.
Tom

Any clues on how to create a resource object to push a user object into res

I am working on a situation where I have to push a user object via a resource object and not having assigned to the user (in other words not linked to the user).
any ideas?
My approach is some thing like this
IN the "user" object I do set all the attributes required per the resource definition
Here is the code snippet for resource object creation:
<Action name='create services resource object' process='Provision'>
<Argument name='op' value='createResourceObject'/>
<Argument name='object' value='$(user)'/>
<Argument name='objectType' value='user'/>
<Argument name='resourceId' value='UnixUIDServices'/>
</Action>

I by no means want to sound belittling... so don't take me that way..
You need to understand the basics of files, and networks. You can't check if a file exists on another machine if you don't have a network protocol to communicate with. The reason \\ works under windows is because you are using an invisible (to you) network protocol. You probably know it as windows sharing. If your file were not shared under it's own name, that method wouldn't work (I'm assuming your entire drive is shared without a password... a horrible security flaw...but one thing at a time)
You can use FTP protocol to check if a file exists. You can either send the raw text FTP commands through a socket connection in java, or you can use a freely available FTP java API to make it a bit more simple. You could also write a small java server on the other machine, and have it tell you what you need to know with a socket connection. In this way, you have created your very own network protocol.

The attributes for user could not be determined --

Hi,
Our is extended classic scenario:srm5.0 & ECC6.0
we are getting the following error in the org plan:
"The attributes for user could not be determined "
The error is occuring , when we log into the web browser.
we also have a error in the org plan, under the user at the check tab,"No attribute found for scenario BBP".
when we run the BBP_ATTR_CHECK & BBP_BP_OM_Integrate, we have no errors...
Thanks in advance,
RK.

Hi All,
Thanks for your support...
I check the T-code:BBP_ATTR_CHECK & BBP_BP_OM_INTEGRATE.
I also checked the attributes for the CP are ok,still i had the error appearing in the WEB.
The solution:
The CP has been deleted from the org plan.
Once again,we generated the users from USERS_GEN and assign CP to the org plan again at the same.Now the Attributes error is gone.... and the issue is resolved.
Thanks and Regards,
RK.

"managed by" attribute of computer object

Hi all,
I am working on a script to manage the computer's attribute "managed-by" through power shell. I have found the command Set-ADComputer "AAECNBJ003403L" -ManagedBy "dn_path_of_user" which does not seem to be a solution in
my ad environment.
In our environment, all the client machines are in one domain (machine.domain.com) and users from different domains (user1.domain.com ; user2.domain.com) logon to these machines ( all domains in same forest ). when I provide the DN path of the users which
is "cn=user,dc=user1,dc=domain,dc=com" in the command Set-ADComputer "AAECNBJ003403L" -ManagedBy "dn_path_of_user" I get the error as follows
Identity info provided in the extended attribute: 'ManagedBy' could not be resolved. Reason: 'Cannot find an object with identity: 'cn=user,dc=user1,dc=domain,dc=com under: 'DC=machine,DC=domain,DC=com'.
SO it is searching for the user object in machine.domain.com where the object does not exist. Please tell me if I can specify a user domain name in the command.

I need to dig into my customer's environment to know why it works for them when they add the user of a different domain. Yes, we were in the process of domain migration which has been delayed due to some incompatible applications.
We have also been using a script which is taking the input from a csv file and updating the managed by attribute of the machine. In the script we are specifying the domain "user.domain.com" and it works for us when we need to update the attribute
in bulk. But we also need the command for updating the attribute of the individual machine as per the end user request. Please see the script below if this can be taken into reference.
Import-CSV C:\Users\W9a0n3p9\Desktop\comp.csv |%{
#Specify the search criteria
$Computer = $_.Computername
$samname = $_.Username
$domain = "user.domain.com"
#Get a list of domains in the forest and grab the DN of the one matching the above parameter.
$forest = [System.DirectoryServices.ActiveDirectory.Forest]::GetCurrentForest()
$domain = $forest.Domains | ? {$_.Name -eq $domain}
$domainDN = $domain.GetDirectoryEntry().distinguishedName
Write-Output "Found the remote domain, the full LDAP distinguished name is $DomainDN"
#Create an LDAP searcher object and pass in the DN of the domain we wish to query
$Searcher = New-Object System.DirectoryServices.DirectorySearcher([ADSI]"LDAP://$domainDN")
#Pass in the ceriteria we are searching for.
#In this case we're looking for users with a particular SAM name.
$Searcher.filter = "(&(objectCategory=person)(objectClass=user)(sAMAccountName= $samname))"
$results = $Searcher.Findall()
#Loop through the results
Foreach($result in $results){
$User = $result.GetDirectoryEntry()
$userDN = $user.DistinguishedName
Write-Output "Set the Owner for Computer $computer as $userDN"
$A= Get-adcomputer $computer
$A.managedby = "$userdn"
Set-adcomputer -instance $A
Regards,
Maddy

Unable to delete User object in FIM Portal - Cannot find the object "#calculateRequestSetTransitionsAssembleStatementsPartition"

Hi,
***Problem
I encounter a problem with FIM (version 4.1.3441.0 and 4.1.3496.0) when I try to delete a User object (and only a User object) whatever if it is
manually/Expiration Workflow/Powershell.
Deleting a User object used to be perfectly functional and, without any product version modification, stopped working. I haven't neither deleted/modified or add a
"Grant" MPR or any of the corresponding Sets since last time I saw it working.
Displayed error is "Request could not be dispatched" in FIM Portal and is referencing a stored procedure in Event Viewer.
***Error details
When I try to delete a User object, here is the output :
Portal
"Processing error" on submit
with the following details
Request status is stuck at "Validating" until next restart of FIM Service (after what it becomes “Canceled”)
Request’s “Applied Policy” tab does not contain any MPR where, at least, a “Grant” MPR is expected
As SQL Timeout is relatively high and error happens quickly, I don’t think there is a Timeout problem under that.
Logs
« Application »
The Portal cannot connect to the middle tier using the web service interface. This failure prevents all portal scenarios from functioning correctly.
The cause may be due to a missing or invalid server url, a downed server, or an invalid server firewall configuration.
Ensure the portal configuration is present and points to the resource management service.
« Forefront Identity Manager »
Reraised Error 50000, Level 16, State 1, Procedure ReRaiseException, Line 37, Message: Reraised Error 1088, Level 16, State 12, Procedure CalculateRequestSetTransitionsAssembleStatements,
Line 332, Message: Cannot find the object "#calculateRequestSetTransitionsAssembleStatementsPartition" because it does not exist or you do not have permissions.
Transaction count after EXECUTE indicates a mismatching number of BEGIN and COMMIT statements. Previous count = 1, current count = 0.
Microsoft.ResourceManagement.WebServices.Exceptions.UnwillingToPerformException: Other ---> System.Data.SqlClient.SqlException: Reraised Error 50000, Level 16, State
1, Procedure ReRaiseException, Line 37, Message: Reraised Error 1088, Level 16, State 12, Procedure CalculateRequestSetTransitionsAssembleStatements, Line 332, Message: Cannot find the object "#calculateRequestSetTransitionsAssembleStatementsPartition"
because it does not exist or you do not have permissions.
Transaction count after EXECUTE indicates a mismatching number of BEGIN and COMMIT statements. Previous count = 1, current count = 0.
   at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection)
   at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj)
   at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler,
TdsParserStateObject stateObj)
   at System.Data.SqlClient.SqlCommand.FinishExecuteReader(SqlDataReader ds, RunBehavior runBehavior, String resetOptionsString)
   at System.Data.SqlClient.SqlCommand.RunExecuteReaderTds(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, Boolean async)
   at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method, DbAsyncResult
result)
   at System.Data.SqlClient.SqlCommand.InternalExecuteNonQuery(DbAsyncResult result, String methodName, Boolean sendToPipe)
   at System.Data.SqlClient.SqlCommand.ExecuteNonQuery()
   at Microsoft.ResourceManagement.Data.DataAccess.UpdateRequest(RequestType request, IEnumerable`1 updates)
   --- End of inner exception stack trace ---
Requestor: urn:uuid:7fb2b853-24f0-4498-9534-4e10589723c4
Correlation Identifier: e7209633-46d0-4f4b-a59e-807649ef71ea
Microsoft.ResourceManagement.WebServices.Exceptions.UnwillingToPerformException: Other ---> System.InvalidCastException: Specified cast is not valid.
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.CreateRequest(UniqueIdentifier requestor, UniqueIdentifier targetIdentifier, OperationType
operation, String businessJustification, List`1 requestParameters, CultureInfo locale, Boolean isChildRequest, Guid cause, Boolean doEvaluation, Nullable`1 serviceId, Nullable`1 servicePartitionId, UniqueId messageIdentifier, UniqueIdentifier requestContextIdentifier,
Boolean maintenanceMode)
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.CreateRequest(UniqueIdentifier requestor, UniqueIdentifier targetIdentifier, OperationType
operation, String businessJustification, List`1 requestParameters, CultureInfo locale, Boolean isChildRequest, Guid cause, Boolean doEvaluation, Nullable`1 serviceId, Nullable`1 servicePartitionId, UniqueId messageIdentifier)
   at Microsoft.ResourceManagement.WebServices.ResourceManagementService.Delete(Message request)
   --- End of inner exception stack trace ---
For information, a maintenance plan rebuild/reorganize indexes daily and this problem has occurred on servers with different performances.
Is any of you has already encounter this problem ?
Any help would be greatly appreciated,
Thanks in advance for your help,
Matthew

While there are several SQL Agent jobs (FIM Temporal Events, Maintain Sets, and Maintain Groups among others)created by the FIM install only one of those is enabled and scheduled and it calls all of the same stored procedures that the other
jobs do. Step 2 is Maintain sets and Step 3 is maintain groups. So the Maintain sets and groups jobs never need to get enabled and scheduled, but if you want them to be maintained more frequently then you can.
David Lundell, Get your copy of FIM Best Practices Volume 1 http://blog.ilmbestpractices.com/2010/08/book-is-here-fim-best-practices-volume.html

Attribute for user contains errors. Inform system admin

Hello,
We've got an issue with shopping carts created by a user that was deleted from system. When trying to see in Monitoring Shopping Carts header or item details of a given sc. A web error occurs:
The URL http://srp.srm.gruposalinas.com.mx:8000/sap/bc/gui/sap/its/bbpsc11/! was not called due to an error.
Note
The following error text was processed in the system SRP : Attribute for user contains errors. Inform system admin.
The error occurred on the application server srm-pro_SRP_00 and in the work process 2 .
The termination type was: TH_RES_FREE
The ABAP call stack was:
Form: OUTPUT_EXPRESS_MESSAGES of program SAPLBBP_SC_UI_ITS
Form: EXTERNAL_SCREEN_DETERMINE of program SAPLBBP_SC_UI_ITS
Module: EXTERNAL_SCREEN_DETERMINE of program SAPLBBP_SC_UI_ITS
We've cheked SAP NOTE 312058-BBPPU99: Error: Attribute for ... is missing. Inform ...
But it seems that none of the information applies to us, since this issue is only present for Shopping carts that were created by this deleted user.
So we tried to re-assing one of this sc, chaning PARTNER_NO,ADDR_NR
ADDR NP data in table CRMD_PARTNER according to a new given user, but it didn't work. So we need to know how to re-assing this sc or perhaps how to find what specific attribute is missing.
Any advice is welcome.
Thanks in advance.

Hi
Which SRM version are you using ? This is an SRM error message.
The manager role should be enough to change user attribute. The transaction is BBPATTRMAINT. Employee role should have BBPUM02 or BBPAT05 to change their own attribute.
Please check whether the User ID you are using to Log into BBP_PD (and seems to be assigned in the org structure also)is consistent and has no errors in tcode USERS_GEN. You should check the user, it's not set up properly in USERS_GEN Transaction, Else repair the user.
To maintain the user attributes you must have the Administrator role.. Your user should have role SAP_BBP-STAL_ADMINISTRATOR and be integrated in the org structure. your user must be integrated in SRM organizational structure. To see which attributes are missing, you can click on the user in PPOMA_BBP to see details, and go to last tab "Check". This will list all required attributes depending on used scenarios (so you may not require all of them). You can also use transaction BBP_ATTR_CHECK to check user's attributes for a particular scenario.
Please go through the following links as well ->
bbp_mon_sc attributes
Re: FM for attribute's value assignation in PPOMA ?
Note 751022 - Monitor Shopping Cart: Item deletion causes termination
Re: User Settings are not saved
Re: Not able to generate user users_gen
Re: SRM organization plan...
Re: User creation error
Hope this will definitely help. Do let me know.
Regards
- Atul

System Copy -- database PRR conains user object belongs to system user dbo

Hi all,
I am having an issue while performing the system copy for the sql server.
Actions taken so far.
1.Detached the database.
2.Installed central instance in the target system .
3.Attached the database using attach as option.
4.Then used STM coll for the conversion.
5.Bought sap in Up condition.
Before detaching the database made export for java addin abap in source system
Then I am trying to import the java add in abap using sapinst(system copy option)..In the half of the way i am getting the below message as ..
DATABASE QAS containus user object belongs to system user dbo.
I have performed the 551915 , 151603 but the still the same message is dispalying.
In log files. inserting
TRACE [iaxxejsexp.cpp:208]
EJS_Installer::writeTraceToLogBook()
- Database XIA contains user objects belonging to system user dbo
TRACE [iaxxbjsmod.cpp:301]
CJSlibModule::showMessageBox_impl()
<html> <head></head> <body> Problems were found after checking configuration of database server b> - Database XIA contains user objects belonging to system user dbo SOLUTION: Fix these problems to continue the installation. </body> </html>
TRACE [iaxxgenimp.cpp:845]
showDialog()
waiting for an answer from gui
TRACE [iaxxdlghnd.cpp:180]
CDialogHandler::doHandleDoc()
ACTION_OK received
ERROR 2009-01-09 12:52:31 [iaxxinscbk.cpp:289]
abortInstallation
MDB-05919 Errors were found when checking connection to or configuration of database server (listed above in the log file).
TRACE [iaxxejsbas.hpp:270]
EJS_Base::dispatchFunctionCall()
JS Callback has thrown std::ESAPinstException: ESAPinstException: error text undefined
TRACE [syxxcfsmgt.cpp:430]
CSyFileSystemMgtImpl::getFile(iastring,bool)
lib=iamodmssql module=CIaNtMssDmo
WARNING: THE FUNCTIONALITY YOU ARE USING IS DEPRECATED: getFile(const iastring & sFullName, bool bCaseSensitive) const. Use getFile(const PSyFSPath &) const instead.
TRACE [syxxcfsmgt.cpp:195]
CSyFileSystemMgtImpl::getNode(iastring,bool)
lib=iamodmssql module=CIaNtMssDmo
WARNING: THE FUNCTIONALITY YOU ARE USING IS DEPRECATED: getNode(const iastring & sFullName, bool bCaseSensitive) const. Use getNode(const PSyFSPath &) const instead.
TRACE [syxxcfsmgt.cpp:921]
CSyFileSystemMgtImpl::isExisting(iastring,bool)
lib=iamodmssql module=CIaNtMssDmo
WARNING: THE FUNCTIONALITY YOU ARE USING IS DEPRECATED: CSyFileSystemMgtImpl::isExisting(const iastring & , bool , ISyNode::eNodeType ) const. Use CSyFileSystemMgtImpl::isExisting(const CSyPath & , ISyNode::eNodeType ) const instead.
WARNING 2009-01-09 12:52:31 [iaxxccntrl.cpp:477]
CController::stepExecuted()
The step dSetActionUnattended with step key J2EE_EngineEnterprise_Addin_OneHost|ind|ind|ind|WebAS|630|0|J2EE_EngineEnterpriseDialogs|ind|ind|ind|WebAS|630|0|J2EE_Engine|ind|ind|ind|J2EE_Engine|630|0|MssJ2eeDBSetup|ind|ind|ind|ind|ind|0|MssDatabaseInfo|ind|ind|ind|ind|ind|0|dSetActionUnattended was executed with status ERROR.
TRACE [iaxxcsihlp.hpp:301]
main()
An error occurred during the installation of component SAP NetWeaver '04 SR1> SAP System Installation> Java Add-In for ABAP> MS SQL Server> Central / Distributed System> Java System Finalization. Press the log view button to get extended error information or press OK to terminate the installation. Log files are written to SAP NetWeaver '04 SR1> SAP System Installation> Java Add-In for ABAP> MS SQL Server> Central / Distributed System> Java System Finalization.
TRACE [iaxxgenimp.cpp:845]
showDialog()
waiting for an answer from gui
TRACE [iaxxdlghnd.cpp:180]
CDialogHandler::doHandleDoc()
ACTION_OK received
WARNING 2009-01-09 12:52:33 [iaxxcsihlp.hpp:250]
main()
An error occurred during the installation.
Regadrs
Vijay

Hi,
what do you get executing this statement:
use <SID>
go
select * from sys.objects where schema_id =
(select schema_id from sys.schemas where name = 'dbo')
go
Sven

Logged in workstations - attribute in user object

Similar Messages

Maybe you are looking for