Manage Privileges Question

Hello friends,
Is possible to view personal folders of other users?? I have administrator of my obiee and when I go to Manage Catalog and then My Folders and I click on users I can see all users but I can't click in their folders, is possible to have access there?
And a second question, is possible to do privileges one user to view dashboards but this user not see shared folders? (Reports of these dashboards are in shared folders).
Thank you!
Edited by: Alex1 on 25-feb-2009 2:01

Alex,
This is something you should experiment with, however, I thought that you should be able to do both. OK, I just tried fulfilling your first request and failed. For some reason, I could only view 1 user's "My Folder". For the second, I think it won't work - since user should have access to the reports - on the Dashboard - he'd get a message like "Permission denied" - it's by design.
Alex, if you post a summary of your security requirements, I think there could be workarounds. Anyone, please feel free to comment, but I think it's "not possible to both".

Similar Messages

Manage privileges

Hello.
I have a question for BI Answers.
In Settings -> Administration -> Manage Privileges I changed the "Access to Dashboards" and "Access to Answers" (removed the user Everyone). Of course, now I can not log iunder Administrator in Bi Answers. Such is the failed experiment. How to return Everyone Access to Dashboards and Access to Answers (if I can't log in under Administrator)?
Thanks.

hi,
The work around I found:
1.     Open NQSConfig.INI file
2.     Go to Security part and find AUTHENTICATION_TYPE = BYPASS_NQS;
3.     Uncomment (remove #) this part.
4.     Stop the BI Server service
5.     Close Administration Tool, if opened. (Then only the changes are affecting to the Administration Tool)
6.     Open Administration Tool, then rpd which needs password reset, in offline mode
7.     Give any password, it accepts.
8.     Now go to Manage > Security.
9.     From here it’s the normal process how you change password.
10.     Save the changes to rpd
11.     Revert back the changes in NQSConfig.INI
12.     Start BI Server and open rpd with new password.
cheers
Ankit

Organization Management Interview Questions and Answers Extremely Urgent

Hi,
Please let me know Organization Management Interview Questions and Answers. MOST MOST URGENT
Please do not post Link or website name and detail response will be highly appreciated.
Very Respectfully,
Sameer.
SAP HR .

Hi there,
Pl. find herewith the answers of the questions posted on the forum.
1. What are plan versions used for?
Ans : Plan versions are scenarios in which you can create organizational plans.
     In the plan version which you have flagged as the active plan version, you create your current valid organizational plan. This is also the integration plan version which will be used if integration with Personnel Administration is active.
     You use additional plan versions to create additional organizational plans as planning scenarios.
As a rule, a plan version contains one organizational structure, that is, one root organizational unit. It is, however, possible to create more than one root organizational unit, that is more than one organizational structure in a plan version.
For more information on creating plan versions, see the Implementation Guide (IMG), under Personnel Management  Global Settings in Personnel Management  Plan Version Maintenance.
2. What are the basic object types?
Ans. An organization object type has an attribute that refers to an object of the organization management (position, job, user, and so on). The organization object type is linked to a business object type.
Example
The business object type BUS1001 (material) has the organization object type T024L (laboratory) as the attribute that on the other hand has an object of the organization management as the attribute. Thus, a specific material is linked with particular employees using an assigned laboratory.
3. What is the difference between a job and a position?
Ans. Job is not a concrete, it is General holding various task to perform which is generic.(Eg: Manager, General Manager, Executive).
Positions are related to persons and Position is concrete and specific which are occupied by Persons. (Eg: Manager - HR, GM HR, Executive - HR).
4. What is the difference between an organizational unit and a work centre?
Ans. Work Centre : A work center is an organizational unit that represents a suitably-equipped zone where assigned operations can be performed. A zone is a physical location in a site dedicated to a specific function.
Organization Unit : Organizational object (object key O) used to form the basis of an organizational plan. Organizational units are functional units in an enterprise. According to how tasks are divided up within an enterprise, these can be departments, groups or project teams, for example.
Organizational units differ from other units in an enterprise such as personnel areas, company codes, business areas etc. These are used to depict structures (administration or accounting) in the corresponding components.
5. Where can you maintain relationships between objects?
Ans. Infotype 1001 that defines the Relationships between different objects.
There are many types of possible relationships between different objects. Each individual relationship is actually a subtype or category of the Relationships infotype.
Certain relationships can only be assigned to certain objects. That means that when you create relationship infotype records, you must select a relationship that is suitable for the two objects involved. For example, a relationship between two organizational units might not make any sense for a work center and a job.
6. What are the main areas of the Organization and Staffing user interfaces?
Ans. You use the user interface in the Organization and Staffing or Organization and Staffing (Workflow) view to create, display and edit organizational plans.
The user interface is divided into various areas, each of it which fulfills specific functions.
Search Area
Selection Area
Overview Area
Details Area
Together, the search area and the selection area make up the Object Manager.
7. What is Expert Mode used for?
Ans. interface is used to create Org structure. Using Infotypes we can create Objects in Expert mode and we have to use different transactions to create various types of objects. If the company needs to create a huge structure, we will use Simple maintenance, because it is user friendly that is it is easy to create a structure, the system automatically relationship between the objects.
8. Can you create cost centers in Expert Mode?
Ans. Probably not. You create cost center assignments to assign a cost center to an organizational unit, or position.
When you create a cost center assignment, the system creates a relationship record between the organizational unit or position and the cost center. (This is relationship A/B 011.) No assignment percentage record can be entered.
9. Can you assign people to jobs in Expert Mode?
10. Can you use the organizational structure to create a matrix organization?
Ans. By depicting your organizational units and the hierarchical or matrix relationships between them, you model the organizational structure of your enterprise.
This organizational structure is the basis for the creation of an organizational plan, as every position in your enterprise is assigned to an organizational unit. This defines the reporting structure.
11. In general structure maintenance, is it possible to represent the legal entity of organizational units?
12. What is the Object Infotype (1000) used for?
Ans. Infotype that determines the existence of an organizational object.
As soon as you have created an object using this infotype, you can determine additional object characteristics and relationships to other objects using other infotypes.
To create new objects you must:
     Define a validity period for the object
     Provide an abbreviation to represent the object
     Provide a brief description of the object
The validity period you apply to the object automatically limits the validity of any infotype records you append to the object. The validity periods for appended infotype records cannot exceed that of the Object infotype.
The abbreviation assigned to an object in the system renders it easily identifiable. It is helpful to use easily recognizable abbreviations.
You can change abbreviations and descriptions at a later time by editing object infotype records. However, you cannot change an objects validity period in this manner. This must be done using the Delimit function.
You can also delete the objects you create. However, if you delete an object the system erases all record of the object from the database. You should only delete objects if they are not valid at all (for example, if you create an object accidentally)
13. What is the Relationships Infotype (1001) used for?
Ans. Infotype that defines the Relationships between different objects.
You indicate that a employee or user holds a position by creating a relationship infotype record between the position and the employee or user. Relationships between various organizational units form the organizational structure in your enterprise. You identify the tasks that the holder of a position must perform by creating relationship infotype records between individual tasks and a position.
Creating and editing relationship infotype records is an essential part of setting up information in the Organizational Management component. Without relationships, all you have are isolated pieces of information.
You must decide the types of relationship record you require for your organizational structure.
If you work in Infotype Maintenance, you must create relationship records manually. However, if you work in Simple Maintenance and Structural Graphics, the system creates certain relationships automatically.
14. Which status can Infotypes in the Organizational Management component have?
Ans. Once you have created the basic framework of your organizational plan in Simple Maintenance, you can create and maintain all infotypes allowed for individual objects in your organizational plan. These can be the basic object types of Organizational Management organizational unit, position, work center and task. You can also maintain object types, which do not belong to Organizational Management.
15. What is an evaluation path?
Ans. An evaluation path describes a chain of relationships that exists between individual organizational objects in the organizational plan.
Evaluation paths are used in connection with the definition of roles and views.
The evaluation path O-S-P describes the relationship chain Organizational unit > Position > Employee.
Evaluation paths are used to select other objects from one particular organizational object. The system evaluates the organizational plan along the evaluation path.
Starting from an organizational unit, evaluation path O-S-P is used to establish all persons who belong to this organizational unit or subordinate organizational units via their positions.
16. What is Managers Desktop used for?
Ans. Manager's Desktop assists in the performance of administrative and organizational management tasks. In addition to functions in Personnel Management, Manager's Desktop also covers other application components like Controlling, where it supports manual planning or the information system for cost centers.
17. Is it possible to set up new evaluation paths in Customizing?
Ans. You can use the evaluation paths available or define your own. Before creating new evaluation paths, check the evaluation paths available as standard.
18. Which situations require new evaluation paths?
Ans. When using an evaluation path in a view, you should consider the following:
Define the evaluation path in such a manner that the relationship chain always starts from a user (object type US in Organizational Management) and ends at an organizational unit, a position or a user.
When defining the evaluation path, use the Skip indicator in order not to overload the result of the evaluation.
19. How do you set up integration between Personnel Administration and Organizational Management?
Ans. Integration between the Organizational Management and Personnel Administration components enables you to,
Use data from one component in the other
Keep data in the two components consistent
Basically its relationship between person and position.
Objects in the integration plan version in the Organizational Management component must also be contained in the following Personnel Administration tables:
Tables                    Objects
T528B and T528T     Positions
T513S and T513     Jobs
T527X                    Organizational units
If integration is active and you create or delete these objects in Organizational Management transactions, the system also creates or deletes the corresponding entries automatically in the tables mentioned above. Entries that were created automatically are indicated by a "P". You cannot change or delete them manually. Entries you create manually cannot have the "P" indicator (the entry cannot be maintained manually).
You can transfer either the long or the short texts of Organizational Management objects to the Personnel Administration tables. You do this in the Implementation Guide under Organizational Management -> Integration -> Integration with Personnel Administration -> Set Up Integration with Personnel Administration. If you change these control entries at a later date, you must also change the relevant table texts. To do that you use the report RHINTE10 (Prepare Integration (OM with PA)).
When you activate integration for the first time, you must ensure that the Personnel Administration and the Organizational Management databases are consistent. To do this, you use the reports:
        RHINTE00 (Adopt organizational assignment (PA to PD))
        RHINTE10 (Prepare Integration (PD to PA))
        RHINTE20 (Check Program Integration PA - PD)
        RHINTE30 (Create Batch Input Folder for Infotype 0001)
The following table entries are also required:
        PLOGI PRELI in Customizing for Organizational Management (under Set Up Integration with Personnel Administration). This entry defines the standard position number.
        INTE in table T77FC
        INTE_PS, INTE_OSP, INTEBACK, INTECHEK and INTEGRAT in Customizing under Global Settings ® Maintain Evaluation Paths.
These table entries are included in the SAP standard system. You must not change them.
Since integration enables you to create relationships between persons and positions (A/B 008), you may be required to include appropriate entries to control the validation of these relationships. You make the necessary settings for this check in Customizing under Global Settings ® Maintain Relationships.
Sincerely,
Devang Nandha
"Together, Transform Business Process by leveraging Information Technology to Grow and Excel in Business".

How to Import/Export Manage Privileges Setting

Hi Everyone,
I had implemented Security for Analytic object using "Administration>Manage Privileges",
Now i want to move the settings to production environment , Is there any way through which i can do tht ?

If it is 11g try the below for 10g do it manually.
http://www.rittmanmead.com/2012/03/obiee-11g-security-week-managing-application-roles-and-policies-and-managing-security-migrations-and-deployments/
If helps mark

Managing privileges in BI Administration.

Friends,
I created some application roles, now i need to assign them all the privileges which "BI Consumer role" and "BI Author role" have through "Administration" -> "Manage Privileges". so my concern is do i need to assign all the privileges one by one or is there any way like we have "create Like" in application roles.
Thanks

OBI Privileges are stored in the web catalog and not within EM, so "no, you can't". It dates back to where the different parts of the architecture came from and who programmed then in what language. OBI in C++ and BIP in java and hence you can manage BIP privileges through application policies. Not sure if they move that any time soon.

All subject areas missing in Manage Privileges section - disappeared.

When I go to Settings -> Administration -> Manage Privileges, I unable to see any of my Subject Areas in the list. I see other options to manage access to Answers, Dashboards, etc - but no option to disable access to any specific Subject Areas. It suddenly disappeared when i was changing permissions within presentation Catalogs in the PS. Has anyone seen this happen before? Dont know how to get them back?

Go into Answers first, then go to Manage - Privileges. I have seen when you just go into Privleges through the Dashboard page you won't see the Subject Area. My only assumption is they are loaded when you go to Answers.

Not able to see Add Manager Privileges

Hello ,
We have installed the NW IDM 7.1 on HP Unix - Oracle combination. The design time is installed on my desktop and I am able to connect to the database.
I started doing the intial config steps but the first thing I noticed is I am not able to see the checkbox for Add Manager Privileges when I click on Add User tab on Identity Store.
I am also missing some more tabs on some of the screens. My desktop has a Windows XP ( 32 bit). Can this be a possible issues or is there something else ?
I also tried downloading and installing theDesign Time again but in vain..
Any inputs will be highly apprciated.
Regards,
Shailesh

Yes Ian,
I have insatlled the Design Time from the latest download of the NW IDM 7.1 pack from SAP marketplace. I am able to connect to databse , create dispatcher , jobs , etc. But in those steps also I am missing some tabs on some of the screens.
I was suspecting that it might be because of the 32 bit windows , bit looks like it's not the issues as the same config is working in your case..
Anyways thanks for your inputs.
Cheers,
Shailesh

Can OIM manage privileges of our application?

we are developping xbrl application, now we need access control integration, can OIM manage privileges of our application?
eg, we have 2 privileges:
1. delete the xbrl resource
2. create the xbrl resource
can I use OIM to add these privileges to OID and assigned to Groups and Users?

A complicating factor is that the application is sold to the iTunes account, not the specific device. So the application would work on any phone on the account (or on an upgraded or replacement phone from Apple). So locking out phones with a different device ID would deny service to some users who have paid for it.

Unknown Account in Manage Privileges

Hi everybody,
I don't manage to change Presentation Services Privilege Administration.
I log in as Administrator and go in Manage Privileges, but when I click on to modifying Access's rights, the displayed error is:
Account not found.
Error Details
Error Codes: WMZSCCGV
I investigated the saw0.log file and the error is the following:
Type: Error
Severity: 42
Time: Tue Mar 11 16:26:45 2008
File: project/websecurity/securitymanager.cpp Line: 84
Properties: ThreadID-652;HttpCommand-SetPrivilege;RemoteIP-10.96.29.77;User-Administrator
Location:
     saw.httpserver.request
     saw.rpc.server.responder
     saw.rpc.server
     saw.rpc.server.handleConnection
     saw.rpc.server.dispatch
     saw.threadPool
     saw.threads
Account not found.
I have no idea e no documentation about it.
May someone help me please?
Thanks in advance
Kind regards
Cosimo
http://caimino.wordpress.com/

WMZSCCGV -- Error when trying to access a folder's permissions (Doc ID 557595.1)
Applies to:
Business Intelligence Suite Enterprise Edition - Version: 10.1.3.2.1 - Release: 10g
Information in this document applies to any platform.
Symptoms
When clicking the permission button for a folder under the manage catalog section in Administration it opens in a new window with the message:
Account not found.
Error Details
Error Codes: WMZSCCGV
Cause
After opening the web catalog with the OBI Catalog Manager and Navigating to the problem shared folder and Right-click on Supply Chain and select Permissions it was found that there's an incorrect value called <Deleted_Account> under "Users and groups (Explicit permissions)"
Solution
Open the Catalog using OBI Catalog Manager and move Delete this <Deleted Account> for the folder by moving this to the right and re-started the services.

Manage privileges in 11g

Hi
Could you pls explain how can i move manage privileges role from 11g dev BOXA into prod BOXB.
Thanks
Gram

Hi,
Unfortunately, you will have to manually redo the steps of assigning the roles in "Manage Privileges".
Thanks,
Vineeth
Edited by: Vineeth. K.M on Jan 22, 2013 3:30 AM

System and Object privileges question

hello everyone.
I was really making it a priority to really understand both system and object privileges for users. I have setup a couple of 'sandboxes' at home and have done lots of testing. So far, it has gone very well in helping me understand all the security involved with Oralce (which, IMHO, is flat out awesome!).
Anyway, a couple of quick questions.
As a normal user, what view can I use to see what permissions I have in general? what about permissions on other schemas?
I know I can do a:
select * from session_privs
which lists my session privileges.
What other views (are they views/data dictionary?) that I can use to see what I have? Since this is a normal user, they don't have access to any of the DBA_ views.
I'll start here for now, but being able to see everything this user has, would be fantastic.
Cheers,
TCG

Sorry. should have elaborated more.
In SQLPLUS, (logged in while logged into my Linux OS), I am working to try and get sqlplus to display the results of my query so it is easy to read. Right now, it just displays using the first 1/4 or 1/3 of the monitor screen to the left. Make sense? So it does not stretch the results out to utilize the full screen. it is hard to break down and read the results because they are "stacked" on top of each other.
Would be nice if I could adjust sqlplus so the results are easier to read.
HTH.
Jason

Load Balancing Directory Servers with Access Manager - Simple questions

Hi.
We are in the process of configuring 2 Access Manager instances (servers) accessing the same logical LDAP repository (comprising physically of two Directory Servers working together with Multi-Master Replication configured and tested) For doing this, we are following guide number 819-6258.
The guide uses BigIP load balancer for load balancing the directory servers. However, we intend to use Directory Proxy Server. Since we faced some (unresolved) issues last time that we used DPS, there are some simple questions that I would be very grateful to have answers to:
1. The guide, in section 3.2.10 (To configure Access Manager 1 with the Directory Server load balancer), talks about making changes at 4 places, and replacing the existing entry (hostname and port) with the load balancer's hostname and port (assuming that the load balancer has already been configured). It says that changes need not be made on Access Manager 2 since the LDAPs are in replication, and hence changes will be replicated at all places. However, the guide also states that changes have to be made in two files, namely AMConfig.properties, and the serverconfig.xml file. But these changes will not be reflected on Access Manager 2, since these files are local on each machine.
Question 1. Do changes have to be made in AMConfig.properties and serverconfig.xml files on the other machine hosting Access Manager 2?
Question 2: What is the purpose of putting these values here? Specifically, what is achieved by specifying the Directory server host and port in AMConfig.properties, as well as in serverconfig.xml?
Question 3. In the HTTP console, there is the option of specifying multiple primary LDAP servers, as well as multiple secondary LDAP servers. What is the purpose of these? Are secondary servers attempted when none of the list in the primary list are accessible? Also, if there are multiple entries in the primary server list, are they accessed in a round robin fashion (hereby providing rudimentary load balancing), or are other servers accessed only when the one mentioned first is not reachable etc.?
2. Since I do not have a load balancer setup yet, I tried the following deviation to the above, which, according to me, should have worked. If viewed in the HTTP console, LDAP / Membership / MSISDN and Policy configuration all pointed to the DS on host 1. When I changed all these to point to the directory server on host 2 (and made AMConfig.properties and serverconfig.xml on host 1 point to DS of host 2 as well), things should have worked fine, but apparently Access manager 1 could not be started. Error from Webserver:
[14/Aug/2006:04:30:36] info (13937): WEB0100: Loading web module in virtual server [https-machine_1_FQDN] at [search]
[14/Aug/2006:04:31:48] warning (13937): CORE3283: stderr: Exception in thread "EventService" java.lang.ExceptionInInitializerError
[14/Aug/2006:04:31:48] warning (13937): CORE3283: stderr: at com.iplanet.services.ldap.event.EventServicePolling.run(EventServicePolling.java:132)
[14/Aug/2006:04:31:48] warning (13937): CORE3283: stderr: at java.lang.Thread.run(Thread.java:595)
[14/Aug/2006:04:31:48] warning (13937): CORE3283: stderr: Caused by: java.lang.InterruptedException
[14/Aug/2006:04:31:48] warning (13937): CORE3283: stderr: at com.sun.identity.sm.ServiceManager.<clinit>(ServiceManager.java:74)
[14/Aug/2006:04:31:48] warning (13937): CORE3283: stderr: ... 2 more
In effect, AM on 1 did not start. On rolling back the changes, things again worked like previously.
Will be really grateful for any help / insight / experience on dealing with the above.
Thanks!

Update to the above, incase anyone is reading:
We setup a similar setup in Windows, and it worked. Here is a detailed account of what was done:
1. Host 1: Start installer, install automatically, chose Directory server, Directory Administration server, Directory Proxy server, Web server, Access Manager.
All installed, and worked fine. (AMConfig.properties, serverconfig.xml, and the info in LDAP service, all pointed to HOST1:389)
2. Host 2: Start installer, install automatically, chose Directory server, Directory Administration server, Directory Proxy server, Web server, Access Manager.
All installed, and worked fine. (AMConfig.properties, serverconfig.xml, and the info in LDAP service, all pointed to HOST2:389)
3. Host 1: Started replication. Set to Master
4. Host 2: Started replication. Set to Master
5. Host 1: Setup replication agreement to Host 2
6. Host 2: Setup replication agreement to Host 1
7. Initiated the remote replica from Host 1 ----> Host 2
Note that since default installation uses abc.....xyz as the encryption key, setting this to same was not an issue.
9. Started webserver for Host 1 and logged into AM as amadmin.
10. Added Host 2 FQDN in DNS Aliases / Realms
11. Added http://HOST2_FQDN:80 in the Platform server (instance) list.
12. Started Host 2 webserver. Logged in AM on Host 2, things worked fine.
At this stage, note the following:
a) Host 1:
AMConfig.properties file has
com.iplanet.am.directory.host=host1_FQDN
and
com.iplanet.am.directory.port=389
serverconfig.xml has:
<Server name="Server1" host="host1_FQDN" port="389" type="SIMPLE" />
b) Host 2:
AMConfig.properties file has
com.iplanet.am.directory.host=host2_FQDN
and
com.iplanet.am.directory.port=389
serverconfig.xml has:
<Server name="Server1" host="host2_FQDN" port="389" type="SIMPLE" />
c) If one logs into AM, and checks LDAP servers for LDAP / Policy Configuration / Membership etc services, they all contain Host2_FQDN:389 (which makes sense, since replica 2 was initialized from 1)
Returning back to the configuations:
13. On Host 1, login into the Admin server console of the Directory server. Navigate to the DPS, and confgure the following:
a) Network Group
b) LDAP servers
c) Load Balancing
d) Change Group
e) Action on-bind
f) Allow all actions (permit modification / deletion etc.).
g) any other configuations required - Am willing to give detailed steps if someone needs them to help me / themselves! :)
So now, we have DPS configured and running on Host1:489, and distributing load to DS1 and DS2 on a 50:50 basis.
14. Now, log into AM on Host 1, and instead of Host1_fqdn:389 (for DS) in the following places, specify Host1_fqdn:489 (for the DPS)--
LDAP Authentication
MSISDN server
Membership Service
Policy configuation.
Verified that this propagated to the Policy Configuration service and the LDAP authentication service that are already registered with the default organization.
15. Log out of AM. Following the documentation, modify directory.host and directory.port in AMConfig.properties to point to Host 1_FQDN and 489 respectively. Make this change in AMConfig.properties of both Host 1 as well as 2.
16. Edit serverconfig.xml on both hosts, and instead of they pointing to their local directory servers, point both to host1_FQDN:489
17. When you start the webserver, it will refuse to start. Will spew errors such as:
[https-host1_FQDN]: Sun ONE Web Server 6.1SP5 B06/23/2005 17:36
[https-host1_FQDN]: info: CORE3016: daemon is running as super-user
[https-host1_FQDN]: info: CORE5076: Using [Java HotSpot(TM) Server VM, Version 1.5.0_04] from [Sun Microsystems Inc.]
[https-host1_FQDN]: info: WEB0100: Loading web module in virtual server [https-host1_FQDN] at [amserver]
[https-host1_FQDN]: warning: WEB6100: locale-charset-info is deprecated, please use parameter-encoding
[https-host1_FQDN]: info: WEB0100: Loading web module in virtual server [https-host1_FQDN] at [ampassword]
[https-host1_FQDN]: warning: WEB6100: locale-charset-info is deprecated, please use parameter-encoding
[https-host1_FQDN]: info: WEB0100: Loading web module in virtual server [https-host1_FQDN] at [amcommon]
[https-host1_FQDN]: info: WEB0100: Loading web module in virtual server [https-host1_FQDN] at [amconsole]
[https-host1_FQDN]: warning: WEB6100: locale-charset-info is deprecated, please use parameter-encoding
[https-host1_FQDN]: info: WEB0100: Loading web module in virtual server [https-host1_FQDN] at [search]
[https-host1_FQDN]: warning: CORE3283: stderr: netscape.ldap.LDAPException: error result (32); matchedDN = dc=sun,dc=com; No such object (DN changed)
[https-host1_FQDN]: warning: CORE3283: stderr: Got LDAPServiceException code=-1
[https-host1_FQDN]: warning: CORE3283: stderr: at com.iplanet.services.ldap.DSConfigMgr.getConnection(DSConfigMgr.java:357)
[https-host1_FQDN]: warning: CORE3283: stderr: at com.iplanet.services.ldap.DSConfigMgr.getNewFailoverConnection(DSConfigMgr.java:314)
[https-host1_FQDN]: warning: CORE3283: stderr: at com.iplanet.services.ldap.DSConfigMgr.getNewConnection(DSConfigMgr.java:253)
[https-host1_FQDN]: warning: CORE3283: stderr: at com.iplanet.services.ldap.DSConfigMgr.getNewProxyConnection(DSConfigMgr.java:184)
[https-host1_FQDN]: warning: CORE3283: stderr: at com.iplanet.services.ldap.DSConfigMgr.getNewProxyConnection(DSConfigMgr.java:194)
[https-host1_FQDN]: warning: CORE3283: stderr: at com.iplanet.ums.DataLayer.initLdapPool(DataLayer.java:1248)
[https-host1_FQDN]: warning: CORE3283: stderr: at com.iplanet.ums.DataLayer.(DataLayer.java:190)
[https-host1_FQDN]: warning: CORE3283: stderr: at com.iplanet.ums.DataLayer.getInstance(DataLayer.java:215)
[https-host1_FQDN]: warning: CORE3283: stderr: at com.iplanet.ums.DataLayer.getInstance(DataLayer.java:246)
[https-host1_FQDN]: warning: CORE3283: stderr: at com.sun.identity.sm.ldap.SMSLdapObject.initialize(SMSLdapObject.java:156)
[https-host1_FQDN]: warning: CORE3283: stderr: at com.sun.identity.sm.ldap.SMSLdapObject.(SMSLdapObject.java:124)
[https-host1_FQDN]: warning: CORE3283: stderr: at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
[https-host1_FQDN]: warning: CORE3283: stderr: at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
[https-host1_FQDN]: warning: CORE3283: stderr: at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
[https-host1_FQDN]: warning: CORE3283: stderr: at java.lang.reflect.Constructor.newInstance(Constructor.java:494)
[https-host1_FQDN]: warning: CORE3283: stderr: at java.lang.Class.newInstance0(Class.java:350)
[https-host1_FQDN]: warning: CORE3283: stderr: at java.lang.Class.newInstance(Class.java:303)
[https-host1_FQDN]: warning: CORE3283: stderr: at com.sun.identity.sm.SMSEntry.(SMSEntry.java:216)
[https-host1_FQDN]: warning: CORE3283: stderr: at com.sun.identity.sm.ServiceSchemaManager.(ServiceSchemaManager.java:67)
[https-host1_FQDN]: warning: CORE3283: stderr: at com.iplanet.am.util.AMClientDetector.getServiceSchemaManager(AMClientDetector.java:219)
[https-host1_FQDN]: warning: CORE3283: stderr: at com.iplanet.am.util.AMClientDetector.(AMClientDetector.java:94)
[https-host1_FQDN]: warning: CORE3283: stderr: at com.sun.mobile.filter.AMLController.init(AMLController.java:85)
[https-host1_FQDN]: warning: CORE3283: stderr: at org.apache.catalina.core.ApplicationFilterConfig.getFilter(ApplicationFilterConfig.java:262)
[https-host1_FQDN]: warning: CORE3283: stderr: at org.apache.catalina.core.ApplicationFilterConfig.setFilterDef(ApplicationFilterConfig.java:322)
[https-host1_FQDN]: warning: CORE3283: stderr: at org.apache.catalina.core.ApplicationFilterConfig.(ApplicationFilterConfig.java:120)
[https-host1_FQDN]: warning: CORE3283: stderr: at org.apache.catalina.core.StandardContext.filterStart(StandardContext.java:3271)
[https-host1_FQDN]: warning: CORE3283: stderr: at org.apache.catalina.core.StandardContext.start(StandardContext.java:3747)
[https-host1_FQDN]: warning: CORE3283: stderr: at com.iplanet.ias.web.WebModule.start(WebModule.java:251)
[https-host1_FQDN]: warning: CORE3283: stderr: at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
[https-host1_FQDN]: warning: CORE3283: stderr: at org.apache.catalina.core.StandardHost.start(StandardHost.java:652)
[https-host1_FQDN]: warning: CORE3283: stderr: at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
[https-host1_FQDN]: warning: CORE3283: stderr: at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:355)
[https-host1_FQDN]: warning: CORE3283: stderr: at org.apache.catalina.startup.Embedded.start(Embedded.java:995)
[https-host1_FQDN]: warning: CORE3283: stderr: at com.iplanet.ias.web.WebContainer.start(WebContainer.java:431)
[https-host1_FQDN]: warning: CORE3283: stderr: at com.iplanet.ias.web.WebContainer.startInstance(WebContainer.java:500)
[https-host1_FQDN]: warning: CORE3283: stderr: at com.iplanet.ias.server.J2EERunner.confPostInit(J2EERunner.java:161)
[https-host1_FQDN]: failure: WebModule[amserver]: WEB2783: Servlet /amserver threw load() exception
[https-host1_FQDN]: javax.servlet.ServletException: WEB2778: Servlet.init() for servlet LoginLogoutMapping threw exception
[https-host1_FQDN]: at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:949)
[https-host1_FQDN]: at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:813)
[https-host1_FQDN]: at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3478)
[https-host1_FQDN]: at org.apache.catalina.core.StandardContext.start(StandardContext.java:3760)
[https-host1_FQDN]: at com.iplanet.ias.web.WebModule.start(WebModule.java:251)
[https-host1_FQDN]: at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
[https-host1_FQDN]: at org.apache.catalina.core.StandardHost.start(StandardHost.java:652)
[https-host1_FQDN]: at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
[https-host1_FQDN]: at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:355)
[https-host1_FQDN]: at org.apache.catalina.startup.Embedded.start(Embedded.java:995)
[https-host1_FQDN]: at com.iplanet.ias.web.WebContainer.start(WebContainer.java:431)
[https-host1_FQDN]: at com.iplanet.ias.web.WebContainer.startInstance(WebContainer.java:500)
[https-host1_FQDN]: at com.iplanet.ias.server.J2EERunner.confPostInit(J2EERunner.java:161)
[https-host1_FQDN]: ----- Root Cause -----
[https-host1_FQDN]: java.lang.NullPointerException
[https-host1_FQDN]: at com.sun.identity.authentication.UI.LoginLogoutMapping.init(LoginLogoutMapping.java:71)
[https-host1_FQDN]: at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:921)
[https-host1_FQDN]: at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:813)
[https-host1_FQDN]: at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3478)
[https-host1_FQDN]: at org.apache.catalina.core.StandardContext.start(StandardContext.java:3760)
[https-host1_FQDN]: at com.iplanet.ias.web.WebModule.start(WebModule.java:251)
[https-host1_FQDN]: at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
[https-host1_FQDN]: at org.apache.catalina.core.StandardHost.start(StandardHost.java:652)
[https-host1_FQDN]: at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
[https-host1_FQDN]: at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:355)
[https-host1_FQDN]: at org.apache.catalina.startup.Embedded.start(Embedded.java:995)
[https-host1_FQDN]: at com.iplanet.ias.web.WebContainer.start(WebContainer.java:431)
[https-host1_FQDN]: at com.iplanet.ias.web.WebContainer.startInstance(WebContainer.java:500)
[https-host1_FQDN]: at com.iplanet.ias.server.J2EERunner.confPostInit(J2EERunner.java:161)
[https-host1_FQDN]:
[https-host1_FQDN]: info: HTTP3072: [LS ls1] http://host1_FQDN:58080 [i]ready to accept requests
[https-host1_FQDN]: startup: server started successfully
Success!
The server https-host1_FQDN has started up.
The server infact, didn't start up (nothing even listening on 58080).
However, if AMConfig.properties is left as it originally was, and only serverconfig.xml files were changed as mentioned above, web servers started fine, and things worked all okay. (Alright, except for some glitches when viewed in /amconsole. If /amserver/console is accessed, all is good. Can this mean that all is still not well? I am not sure).
So far so good. Now comes the sad part. When the same is done on Solaris 9, things dont work. You continue to get the above error, OR the following error, and the web server will refuse to start:
Differences in Solaris and Windows are as follows:
1. Windows hosts have 1 IP and hostname. Solaris hosts have 3 IPs and hostnames (for DS, DPS, and webserver).
No other difference from an architectural perspective.
Any help / insight on why the above is not working (and why the hell does the documentation seem so sketchy / insecure / incorrect).
Thanks a bunch!

QUERY MANAGER RELATED QUESTION

mY QUESTIONIS I WANT TO ADD CALANDER AS INPUT PARAMETER IN QUERY MANAGER IS THIS POSSIBLE AND IF THAN HOW?
PLEASE HELP ME OUT
THANKS IN ADVANCE
TARUN CHAUHAN

Hi nagarajan,
Let me elaborate my question one again.
1)i had taken two date parameter in my query in query manager.on manul filling up those date parameter my query give the result which i am fetching from my data base.
But instead of manual entry of date in above two parameter i want that i should give calendar button so that user can opt the date from that calendar, as in the same manner as we are doing in inventory posting list report .for your reference i am attaching the screen shot.
Please help.
Thanks
Tarun Chauhan

HR-PDC , Time Management Interface Question

Hi,
I am involved in a project that links Kronos Time Management system with SAP 4.6C . Since Kronos is certified for standard interface HR-PDC, we can use it for integration without patch-work.
For more information, go to <a href="https://www.sdn.sap.comhttp://www.sdn.sap.comhttp://www.sdn.sap.com/irj/sdn/developerareas/sdnservices/icc">this link</a> and on the right hand side, select Human Resources from Integration Scenarios -> Business Application Integration. Select HR-PDC from the list of interfaces available for HR.
There are a few concerns though, the most important being related to transfer of HR mini-master data. It is mentioned in the interface documentation that SAP always sends complete master data for all employees and that deltas are not supported.
Now, the customer has around 50,000 employees and sending data for each one of them every night doesn't seem to be a workable solution, especially when only 30-50 records change in a day. I understand that sending deltas can be accomplished through some tweaking, I am wondering why the standard interface won't support them, knowing the fact that all historical (delta) information is available from cluster PCL4.
Although I understand that SAP themselves are in a better position to answer the question of why the interface is like that, I am asking if anyone experienced any short-comings with sending delta information. For example, perhaps the number of scenarios for which delta was to be transferred were too many and sending complete information was more suitable. So if anyone has had previous experience of working on HR-PDC, please shed some light on their experience.
Secondly, is there a standard interface to record and send changes in Organization and Staffing (create, modifiy, delete) to a sub-system? I am talking in relation to t. code PPOME. Is HR-OCI the right interface for that???
Thanks and regards
Message was edited by: Shehryar Khan

Hi,
Thanks for the reply. It was quite helpful.
It is fine to download time balances but downloading whole employee (mini)master data each day is a bit difficult to explain to stakeholders. Perhaps I may need to create my own driver program that populates data for modified employees only. Thoughts??? Is this the correct approach???
As far as the second one is concerned, I am interested in downloading new/modified OM records like departments, jobs, positions, etc. It seems the same can be catered for by using HR-PDC through business object RCVPEVTREC, method receivePObject. I perhaps overlooked the interface specs.
Thanks again and I may get back with more questions.
Regards

Unable to see Subject Areas in the Manage Privileges

Unable to see Subject Areas when tried to set permissions for the Subject Areas using Manage Priviliges option under Administration.

Hi,
This is the Data Mining forum.
If your question is about OLAP, then try the OLAP forum.
OLAP
Thanks, Mark

Manage Privileges Question

Similar Messages

Maybe you are looking for