"Missing signed entry in resource" for only some users

Hi,
I have recently updated my .jnlp file and .jar file and added some extra jar resources in the new jnlp.
Since this new version, some users receive an error saying
"Missing signed entry in resource:" for one particular resource.
While for other users it works fine.
I have signed the jar with jarsigner.
Does anyone have an idea what could be the problem here?
Thanks very much in advance,
Best regards,
Stein Aerts,
University of Leuven, Belgium

I remember hearing something like this, and had to do with :
1.) what version of jarsigner was used to sign the jar, and
2.) what version of JRE was used to validate the signed jar file on the client.
(including US only vs. International version of JRE)
For the jar that gets this error:
Does it have any empty directories in it., or does it have entries with non-english characters in the resource names ?
What version of the JDK was used to run jarsigner to sign this jar, and what jre is the application running on ?

Similar Messages

  • Missing signed entry in resource : urgent

    Hi
    While trying to acces my apllication on Tomcat 4.0 Servber I get this error
    Missing signed entry in resource: http://localhost:8080/Graf/GZ.jar
    exception is
    JNLPException[category: Download Error : Exception: null : LaunchDesc: null ]
    at com.sun.javaws.security.SigningInfo.checkSigning(Unknown Source)
    at com.sun.javaws.cache.DownloadProtocol$RetrieveAction.actionDownload Unknown Source)
    at com.sun.javaws.cache.DownloadProtocol.doDownload(Unknown Source)
    at com.sun.javaws.cache.DownloadProtocol.getResource(Unknown Source)
    at com.sun.javaws.LaunchDownload.downloadJarFiles(Unknown Source)
    at com.sun.javaws.LaunchDownload.downloadEagerorAll(Unknown Source)
    at com.sun.javaws.Launcher.downloadResources(Unknown Source)
    at com.sun.javaws.Launcher.handleApplicationDesc(Unknown Source)
    at com.sun.javaws.Launcher.handleLaunchFile(Unknown Source)
    at com.sun.javaws.Launcher.run(Unknown Source)
    at java.lang.Thread.run(Unknown Source)
    My jnlp file looks like
    <?xml version="1.0" encoding="UTF-8"?>
    <jnlp codebase="http://localhost:8080/Graf/" href="GrafZeppelin.jnlp">
    <information>
    <title>Graf Zeppelin</title>
    <vendor>P&G</vendor>
    <homepage href="GrafZeppeling.html"/>
    <description>Graf Zeppelin</description>
    <description kind="short">Grap Zeppelin Application to display Graf Zeppelin</description>
    <description kind="one-line">Graf Zeppelin System</description>
    <description kind="tooltip">P&G</description>
    <icon href="images/gpblogo.jpg"/>
    <offline-allowed/>
    </information>
    <security>
    <all-permissions/>
    </security>
    <resources>
    <j2se version="1.3+" initial-heap-size="24m" max-heap-size="256m" />
    <jar href="y.jar"/>
    <jar href="GZ.jar"/>
    </resources>
    <application-desc main-class="pathways.GZBase">
    </application-desc>
    </jnlp>
    I have already done sigining of jar thru these commands
    keytool -genkey -keystore myKeystore -alias myself
    keytool -list -keystore myKeystore
    jarsigner -keystore myKeystore test.jar myself
    Can anypone tell me if something elase also needs to be done for this to make it work.I mean some other settings or something which I might be missing while deploying it.
    Thanks
    Sidh

    I just got done spending some "quality time" (about 2 days worth) with jarsigner and Java Web Start to figure out a certificate problem, and I thought I'd share my findings to save others a bunch of time.
    I have a JWS application that has two custom built jars and several third party jars. I'm looking to run it in "unrestricted" mode which means that all of the jars need to be signed. The building and signing went fine but I ran into the problems often mentioned in this forum of exceptions being thrown from the bowels of JWS while it was trying to launch my application.
    I ran into a few different problems at different times. One was getting this exception during launch:
    JNLPException[category: Download Error : Exception: null : LaunchDesc: null ]
         at com.sun.javaws.security.SigningInfo.checkSigning(Unknown Source)
         at com.sun.javaws.cache.DownloadProtocol$RetrieveAction.actionDownload(Unknown Source)
         at com.sun.javaws.cache.DownloadProtocol.doDownload(Unknown Source)
         at com.sun.javaws.cache.DownloadProtocol.getResource(Unknown Source)
         at com.sun.javaws.LaunchDownload.downloadJarFiles(Unknown Source)
         at com.sun.javaws.LaunchDownload.downloadEagerorAll(Unknown Source)
         at com.sun.javaws.Launcher.downloadResources(Unknown Source)
         at com.sun.javaws.Launcher.handleApplicationDesc(Unknown Source)
         at com.sun.javaws.Launcher.handleLaunchFile(Unknown Source)
         at com.sun.javaws.Launcher.run(Unknown Source)
         at java.lang.Thread.run(Thread.java:536)
    Another was an exception that included the message "Missing signed entry in resource".
    The source of all of these problems was an incorrectly created/signed jar file. My problems occured with jakarta-ojb-0.9.7.jar (Jakarta's OJB package), but I believe that it can happen with any jar file.
    First let me review what I found out about how the jar building and signing is done. When you sign a jar file with jarsigner, it creates signature files which it puts in the META-INF directory of the jar file. For example if you sign a jar file with the alias "foo", it will add files FOO.SF and FOO.DSA to the META-INF directory (your extensions may be slightly different depending on what kind of keys you have).
    jarsigner also creates a new manifest file META-INF/MANIFEST.MF. For my jar file, before I signed it the MANIFEST.MF contained only this:
    Manifest-Version: 1.0
    Created-By: Apache Ant 1.5
    Name: ojb
    Class-Path:
    After I signed it, the file had 675 entries in it like this:
    Manifest-Version: 1.0
    Created-By: Apache Ant 1.5
    Name: org/apache/ojb/broker/metadata/RepositoryTags.class
    SHA1-Digest: bX/beup+4fwyuMQIF9sz55wz3Zk=
    Name: org/apache/ojb/odmg/states/ModificationState.class
    SHA1-Digest: xl0iS4ojhVh8pHwzabKK9T2ouLg=
    Name: org/apache/ojb/jdo/JDOTransaction.class
    SHA1-Digest: Z/EV2WgDPVbHkY3D78mOIjLyLI0=
    Name: org/apache/ojb/broker/util/pooling/WrappedConnection.class
    SHA1-Digest: B3r6HwsWePdNkMYh8jIeBmfjrUc=
    Here is where the problems begin. Here is one known bug that I did not have but you should be aware of, which has to do with paths that have 133 or 134 characters:
    http://developer.java.sun.com/developer/bugParade/bugs/4357504.html
    Another problem is as follows. When JWS reads the manifest file from each jar file, it iterates through all of the manifest entries and for each one, verifies that there is an entry in the jar file for it. Here is the code decompiled from javaws version 1.2 to give you an idea:
    Manifest manifest = jarfile.getManifest();
    Set set = manifest.getEntries().entrySet();
    for(Iterator iterator = set.iterator(); iterator.hasNext();)
    java.util.Map.Entry entry = (java.util.Map.Entry)iterator.next();
    String s1 = (String)entry.getKey();
    if(jarfile.getEntry(s1) == null)
    throw new JARSigningException(url, s, 4);
    The problem is that the manifest can sometimes contain entries that are intended as headers like this:
    Name: ojb
    Class-Path:
    This fragment was created by the application that created the original jar file (ant), and was included in the new manifest file created by jarsigner. Inexplicably, this fragment was about one third the way down the 2228 line file, rather than at the top where you would expect it.
    When JWS iterates through the manifest entries, it finds this one named "ojb", and then it tries to find an entry in the jar file with this key, and fails, which throws the JARSigningException, which causes the application launch to fail. Unfortunately JWS doesn't give you any of this detail in the error message, I had to discover this through a lot of sleuthing (and so will yoU!).
    JWS just uses the java.util.jar classes to read the jar and manifest files, so it is simple to write a small utility that reads jar and manifest files and reports on them to help you identify problems like this. Note that using the -verify flag to jarsigner doesn't find many problems. Below is a utility I wrote called GrokJar:
    import java.io.*;
    import java.util.*;
    import java.util.jar.*;
    public class GrokJar {
    public static void main(String s[]) {    
    String action = s[0];
    if(!action.equals("-j") && !action.equals("-m")) {
    System.err.println("Usage: GrokJar [-j | -m] file");
    System.err.println("\t-j grok a jar file");
    System.err.println("\t-m grok a manifest file");
    System.exit(0);
    String pathname = s[1];
    if(action.equals("-j")) {                             
    try {                                                
    File jarFile = new File(pathname);
    JarFile jar = new JarFile(jarFile);
    Manifest manifest = jar.getManifest();
    Set set = manifest.getEntries().entrySet();
    System.out.println("Manifest has " + set.size() + " items");
    for(Iterator iterator = set.iterator(); iterator.hasNext();) {
    java.util.Map.Entry entry = (java.util.Map.Entry)iterator.next();
    String key = (String)entry.getKey();
    if(jar.getEntry(key) == null) {
    System.out.println("Can't get entry from jar for key \""+key+"\"");
    } catch(Throwable t) {
    t.printStackTrace();
    else if(action.equals("-m")) {                     
    try {              
    Manifest manifest = new Manifest(new FileInputStream(pathname));
    Set set = manifest.getEntries().entrySet();
    System.out.println("Manifest has " + set.size() + " items");
    } catch(Throwable t) {
    t.printStackTrace();
    This utility reported the following for my jar:
    Manifest has 675 items
    Can't get entry from jar for key "ojb"
    The solution to my problem was as follows:
    1) First, make a copy of the unmolested jar file before you mess around with it (by default jarsigner modifies a jar file in place)
    2) Sign the jar file with jarsigner
    3) Run the GrokJar utility to discover any errant keys
    4) If there are errant keys, un-jar the jar file into a temporary directory
    5) Edit the file META-INF/MANIFEST.MF to remove the errant keys
    6) Create a new jar file. Note that simply "jar cf" won't work. By default, the jar utility creates a new manifest file, which will overwrite the one you just edited. you need to either include the "m" parameter and specify your manifest file, or the "M" file so it won't create its own manifest file and it will use the one you edited.
    7) Sign the jar file again with jarsigner. The reason is that jarsigner creates a signature for every entry in the manifest. If you sign it and then edit the manifest, the signature and manifest won't match. So you need to sign it again.
    8) Run GrokJar against it again, and you should see a different number of manifest entrieS (not zero), and no errant keys.
    That is what did it for me. Your mileage may vary. Here are some other links to good information that I found:
    http://www.vamphq.com/download/jwsfaq.pdf
    http://developer.java.sun.com/developer/bugParade/bugs/4625532.html
    http://developer.java.sun.com/developer/bugParade/bugs/4357504.html
    http://forum.java.sun.com/thread.jsp?thread=206075&forum=38&message=697559
    Best of luck!
    Randy

  • Birthday calendar for only some of my contacts are showing up twice in my iPhone. They are not showing up twice tho on my iMac. No, I do not have duplicate names in my address book either. Any idea how to fix that?

    my birthday events for only some of my contacts are showing up twice in my iPhone. They are not showing up twice tho on my iMac. No, I do not have duplicate names in my address book either. Any idea how to fix that?

    I have uploaded the InDesign file so that you can take a closer look at:
    http://www.hsdesign.comuf.com/downloads/
    The file is called "Template_File.indd"
    So, as discussed the main issues are:
    1) The TOC doesn't generate all the listings (only those with the applied paragraph style "Heading 1 - Appendix")
    2) When I try to create a new pargraph style and apply it to existing or new text, it reads the pargraph style in the Paragraph Style menu, but the style doesn't actually apply.
    Hopefully you can figure something out from this. I really appreciate your help.
    Thanks!

  • Download link for only some rows

    Hi,
    I have 2 tables. One contains records for products, and the other contains images for only some of the products. The images have been uploaded through the application and therefore are in a 'upload_data' table.
    The tables are linked by product_id.
    I would like to display a report that shows all the column from the products table and a download link for only those products that have an image.
    So far the query only returns those rows that have an image.
    Thanks
    Edited by: user12970007 on 20-Apr-2010 17:59

    What does this query look like?

  • Why do I get "Missing signed entry" error?

    I am distributing jar files that have been signed (by thawte). Sometimes, a certain build will throw up a "Missing signed entry" error when I try to launch the jnlp file.
    Why does this happen?
    I used add/remove programs (on Windows) to delete the cache.
    I am really puzzled by this.
    Anyone knows why?
    thanks,
    Anil

    when I did a jar tvf on the obfuscated jar and compared output with a jar tvf on the unobfuscated jar, I found my mistake!
    Anil

  • Program installed for only one user

    Have a program that is installed for only one user, how can I get another user access to the software? don't have install disk.
    Thanks

    Select the application's icon then Press COMMAND-I to open the Get Info window. In the Ownership and Sharing section check the owner and group assignments. If they have owner=you and group=you or staff, then you must change those. Open the Terminal application in the Utilities folder and enter the following command line at the prompt:
    sudo chown -R root:admin
    Put a space after "admin' then drag the application's icon into the Terminal window and press RETURN. You will be prompted for your admin password which will not be echoed.
    This should enable other users to access the application provided you have given the user access via their managed account preferences in Accounts preferences.

  • Filter base on CallerID to VM for only 1 User

    Hi
    CM4.0.2sr2a - Can I Filter base on CallerID to VM for only 1 User.
    Reason: This user gets constant sales calls from certain vendor that they recognize the callerID and don't want to answer their calls but rather have it go to VM

    perhaps you can setup a phone template that has an "idivert" button where if the user sees an incoming number they don't want to answer, they can just press the 'idivert' button and the call goes straight to voice mail.
    see the following link for more info:
    http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_administration_guide_chapter09186a00801ed115.html

  • Firefox crashes for only one user on startup, even after reset; safe mode OK.

    Current crashes do not even produce crash reports, but two crashes from earlier today did yield:
    bp-7013aded-0644-47d8-9967-b48a12141013
    bp-cb495f8f-7ae2-4b48-86ff-63b6f2141013
    Starting in safe mode shows the same installed plugins and two extensions that are enabled in profiles for other users on this system. It is only this user's Firefox that crashes on startup, even after a reset.
    Have also uninstalled and re-installed Firefox. Again, it crashes on startup only for this user.
    Windows event viewer does have several entries for an Application Error:
    Faulting application name: plugin-container.exe, version: 32.0.3.5379, time stamp: 0x54224e6b
    Faulting module name: mozalloc.dll, version: 32.0.3.5379, time stamp: 0x54221b67
    Exception code: 0x80000003
    but it's not clear that these entries sync up with the crashes.
    This crashing on startup began this morning; no new software or any other system modifications (that I'm aware of) for several weeks now.

    The hardware acceleration setting appears to be the culprit. After unchecking the Tools > Options > Advanced > General > Browsing: "Use hardware acceleration when available" setting, Firefox no longer crashes on startup.
    Initially I'd glossed over this setting since it isn't an issue for any of the other users on this system. I'm still puzzled as to why this would be an issue only for this user, and what had changed as of this morning that set it off, but obviously there's something about their configuration which triggers this situation, even for the default plain vanilla Firefox profile!
    Thanks, cor-el!

  • Why cant i change user password or pwdlastset after delegation for only certain users in an ou?

    I remembered a while ago I used delegate control to assign the ability to reset pwd and reset change on next logon.  It seems to work for some users but not others in same ou.  effective permissions shows I have write access to the attribute for
    the user; see imgur link below.  the box for change pwd at next logon is gray.  attribute editor tab doesn't allow me to edit it either.  domain admins can change it.  I'm wondering what else I should check out cus everything I know says
    I have the right to change it.
    forest / domain level 2003
    http://imgur.com/1VHuh7h
    mydomain\Allow Reset Win Pwd   was used for delegation and the user trying to change the password is a part of that group. they are also a member of account operators
    Owner: mydomain\Domain Admins
    Group: mydomain\Domain Admins
    Access list:
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS
                                          READ PERMISSONS
                                          LIST CONTENTS
                                          READ PROPERTY
                                          LIST OBJECT
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS
                                          READ PERMISSONS
                                          LIST CONTENTS
                                          READ PROPERTY
                                          LIST OBJECT
    Allow mydomain\Domain Admins          SPECIAL ACCESS
                                          READ PERMISSONS
                                          WRITE PERMISSIONS
                                          CHANGE OWNERSHIP
                                          CREATE CHILD
                                          DELETE CHILD
                                          LIST CONTENTS
                                          WRITE SELF
                                          WRITE PROPERTY
                                          READ PROPERTY
                                          LIST OBJECT
                                          CONTROL ACCESS
    Allow mydomain\Enterprise Admins      SPECIAL ACCESS
                                          READ PERMISSONS
                                          WRITE PERMISSIONS
                                          CHANGE OWNERSHIP
                                          CREATE CHILD
                                          DELETE CHILD
                                          LIST CONTENTS
                                          WRITE SELF
                                          WRITE PROPERTY
                                          READ PROPERTY
                                          LIST OBJECT
                                          CONTROL ACCESS
    Allow BUILTIN\Administrators          SPECIAL ACCESS
                                          DELETE
                                          READ PERMISSONS
                                          WRITE PERMISSIONS
                                          CHANGE OWNERSHIP
                                          CREATE CHILD
                                          DELETE CHILD
                                          LIST CONTENTS
                                          WRITE SELF
                                          WRITE PROPERTY
                                          READ PROPERTY
                                          LIST OBJECT
                                          CONTROL ACCESS
    Allow NT AUTHORITY\Authenticated Users
                                          SPECIAL ACCESS
                                          READ PERMISSONS
                                          LIST CONTENTS
                                          READ PROPERTY
                                          LIST OBJECT
    Allow NT AUTHORITY\SYSTEM             FULL CONTROL
    Allow mydomain\Allow Reset Win Pwd    SPECIAL ACCESS   <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS   <Inherited
    from parent>
                                          READ PERMISSONS
                                          LIST CONTENTS
                                          READ PROPERTY
                                          LIST OBJECT
    Allow BUILTIN\Terminal Server License Servers
                                          SPECIAL ACCESS   <Inherited
    from parent>
                                          READ PERMISSONS
                                          LIST CONTENTS
                                          WRITE SELF
                                          WRITE PROPERTY
                                          READ PROPERTY
    Allow mydomain\Enterprise Admins      FULL CONTROL   <Inherited from parent>
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS   <Inherited
    from parent>
                                          LIST CONTENTS
    Allow BUILTIN\Administrators          SPECIAL ACCESS   <Inherited from parent>
                                          DELETE
                                          READ PERMISSONS
                                          WRITE PERMISSIONS
                                          CHANGE OWNERSHIP
                                          CREATE CHILD
                                          LIST CONTENTS
                                          WRITE SELF
                                          WRITE PROPERTY
                                          READ PROPERTY
                                          LIST OBJECT
                                          CONTROL ACCESS
    Allow mydomain\Delegate-Join-Domain-Rights
                                          SPECIAL ACCESS for computer  
    <Inherited from parent>
                                          CREATE CHILD
    Allow Everyone                        SPECIAL ACCESS for computer   <Inherited from parent>
                                          CREATE CHILD
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Account Restrictions
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Account Restrictions
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Logon Information
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Logon Information
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Group Membership
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for General Information
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for General Information
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Remote Access Information
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Remote Access Information
                                          READ PROPERTY
    Allow mydomain\Cert Publishers        SPECIAL ACCESS for userCertificate
                                          WRITE PROPERTY
                                          READ PROPERTY
    Allow BUILTIN\Windows Authorization Access Group
                                          SPECIAL ACCESS for tokenGroupsGlobalAndUniversal
                                          READ PROPERTY
    Allow BUILTIN\Terminal Server License Servers
                                          SPECIAL ACCESS for terminalServer
                                          WRITE PROPERTY
                                          READ PROPERTY
    Allow mydomain\Allow Reset Win Pwd    SPECIAL ACCESS for pwdLastSet   <Inherited from parent>
                                          WRITE PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Account Restrictions  
    <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Logon Information  
    <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Group Membership  
    <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for General Information  
    <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Remote Access Information  
    <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Terminal Server License Servers
                                          SPECIAL ACCESS for accountExpires  
    <Inherited from parent>
                                          WRITE PROPERTY
    Allow BUILTIN\Terminal Server License Servers
                                          SPECIAL ACCESS for Terminal Server
    License Server   <Inherited from parent>
                                          WRITE PROPERTY
                                          READ PROPERTY
    Allow NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
                                          SPECIAL ACCESS for tokenGroups  
    <Inherited from parent>
                                          READ PROPERTY
    Allow NT AUTHORITY\SELF               SPECIAL ACCESS for Private Information   <Inherited from parent>
                                          WRITE PROPERTY
                                          READ PROPERTY
                                          CONTROL ACCESS
    Allow Everyone                        Change Password
    Allow NT AUTHORITY\SELF               Change Password
    Allow mydomain\Allow Reset Win Pwd    Reset Password   <Inherited from parent>
    Permissions inherited to subobjects are:
    Inherited to all subobjects
    Allow mydomain\Enterprise Admins      FULL CONTROL   <Inherited from parent>
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS   <Inherited
    from parent>
                                          LIST CONTENTS
    Allow BUILTIN\Administrators          SPECIAL ACCESS   <Inherited from parent>
                                          DELETE
                                          READ PERMISSONS
                                          WRITE PERMISSIONS
                                          CHANGE OWNERSHIP
                                          CREATE CHILD
                                          LIST CONTENTS
                                          WRITE SELF
                                          WRITE PROPERTY
                                          READ PROPERTY
                                          LIST OBJECT
                                          CONTROL ACCESS
    Allow mydomain\Delegate-Join-Domain-Rights
                                          SPECIAL ACCESS for computer  
    <Inherited from parent>
                                          CREATE CHILD
    Allow Everyone                        SPECIAL ACCESS for computer   <Inherited from parent>
                                          CREATE CHILD
    Allow NT AUTHORITY\SELF               SPECIAL ACCESS for Private Information   <Inherited from parent>
                                          WRITE PROPERTY
                                          READ PROPERTY
                                          CONTROL ACCESS
    Inherited to group
    Allow NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
                                          SPECIAL ACCESS for tokenGroups  
    <Inherited from parent>
                                          READ PROPERTY
    Inherited to computer
    Allow NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
                                          SPECIAL ACCESS for tokenGroups  
    <Inherited from parent>
                                          READ PROPERTY
    Inherited to group
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS   <Inherited
    from parent>
                                          READ PERMISSONS
                                          LIST CONTENTS
                                          READ PROPERTY
                                          LIST OBJECT
    Inherited to inetOrgPerson
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS   <Inherited
    from parent>
                                          READ PERMISSONS
                                          LIST CONTENTS
                                          READ PROPERTY
                                          LIST OBJECT
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Remote Access Information  
    <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for General Information  
    <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Group Membership  
    <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Logon Information  
    <Inherited from parent>
                                          READ PROPERTY
    Allow BUILTIN\Pre-Windows 2000 Compatible Access
                                          SPECIAL ACCESS for Account Restrictions  
    <Inherited from parent>
                                          READ PROPERTY
    The command completed successfully

    I think this is a problem with the user object rather than the ou.  Reasoning is that I can reset a password for a user in the same OU but not for another user in the same OU.  Two users, same ou.  I can reset one but not the other.  
    Effective Permissions shows I am granted permisiion to do so.
    I believe the error was access denied when we tried to change the password via vbscript.
    @seansobey - I applied the delegation at a ou higher in the tree.  I forget how I had it apply down the tree but I confirmed that the acl is correct
    and applied to the user
    @Travis Vogel - It looks like the user with this problem is a part of Domain Users.  I think the ACL is applied to the user because it shows in
    the security window and effective permissions shows I have permission to reset the password.  However, I see this other user is a part iof the builtin user group and the problematic user account is not.  I may try adding the problematic user account
    to that group and testing.  It'll have to wait until tomorrow though.

  • Burn a CD or DVD for only one user!

    Hi,
    How can I burn a CD or DVD that only my user can read?
    I go to backup my personal informations and want to sure that no other people have access to this CD.
    I use the Toast Titanium 7.1.2, but if other software can do this, I can buy it!
    Thanks to all!
    G4 Quicksilver, Cube and G5   Mac OS X (10.4.8)  

    Hi,
    Thanks to all. But now, I see some thing that make this idea of a disk image, not good. Lets say, that I burn a DVD with a disk image inside the DVD. If I get, just a little risk on de DVD, I lost all the informations. If I dont use a disk image, I lost only the information, in that little risk. And because I go use this as a backup, this problem with security is a problem.
    So, if somebody know another way, to burn a DVD, that only my user have access, please, let me know.
    Thanks
    Paulo
    G4 Quicksilver, Cube and G5   Mac OS X (10.4.8)  

  • Authorization Policy for only search users

    Hi all,
    I need create a custom authorization policy for only search all users in create request. The users can't see any profile information of others users.
    Anyone can help me ?
    Regards,
    Joel

    ViewUser Admin Role can search and view users by default. Since the OES policies for this admin role has action as ViewSearch Entity. In your case, you can write EL's to hide Admin tab which will hide Admin ltab links based on current logged-in user profile.
    http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/uicust.htm#BABHBFGH

  • Exportto excel in tcode MCAF results in program termination for only 1 user

    Hi,
    The user is trying to export data from MCAF into a local file. This action results in program termination, its only for his user id. It works for all the user ids the basis guys had a look at it and they said everthing is ok on the authorization side. Im confused, please let me know...
    Thanks,
    Sukumar.

    Thanks for the quick reply!!!
    Error analysis                                                                               
    The system tried to access field "OE_OBJEKTTEXT" with type "C" and length         
    60 in the current program "RMCY9110 " using offset 71.                            
    Partial field access is not allowed with an offset specification that is          
    larger than actual field length.                                                                               
    How to correct the error                                                                               
    Make the offset smaller with which you want to access the field.                                                                               
    If the error occurred in an ABAP program of your own or an SAP program            
    that you modified, try to correct it.                                                                               
    If the error occurred in a non-modified SAP program, you may be                   
    able to find a solution in the SAP note system.                                   
    If you have access to the note system yourself, use the following                 
    search criteria:                                                                               
    "DATA_OFFSET_TOO_LARGE"                                                          
    "RMCY9110 " bzw. "RMCS0F0O "                                                     
    "OBJEKTTEXT_ERMITTELN"                                                           
    Thanks,
    Sukumar.

  • Saved search not navigating for only one user

    Hi Everyone,
    I have a saved search that navigates for all users except one. Furthermore, on that same search screen if I use a different object type, do a search and save it, the saved search works for that user. So it seems like it is related to the object type I'm searching for.
    since it is working for some users, I don't think it is related to some IP or OP settings.
    any idea what could cause this issue?
    Thanks in advance,
    Ralph

    It seems someone has set the user policy at webapplication level for that user.Check the similar thread below
    http://social.msdn.microsoft.com/Forums/es-ES/18b4f019-093d-45f6-92b7-8350d13bd663/let-us-know-why-you-need-access-to-this-site-why-do-i-see-this-error-and-who-will-give-access?forum=sharepointgeneral
    My Blog- http://www.sharepoint-journey.com|
    If a post answers your question, please click Mark As Answer on that post and Vote as Helpful

  • Import only some user tables

    Hi all,
    we have every day full export backup in eacly morning. but some tables's data has been delete unforutnaltely
    & structure of these tables intact. please anyone can suggest me how do i import only some tables of a user from
    daily full export backup? . this has to be done immdediately. quick response will be highly appreciated.
    Best Regards

    user11153253 wrote:
    Hi all,
    we have every day full export backup in eacly morning. but some tables's data has been delete unforutnaltely
    & structure of these tables intact. please anyone can suggest me how do i import only some tables of a user from
    daily full export backup? . this has to be done immdediately. quick response will be highly appreciated.
    Best RegardsYou can use this command; I suppose here you have the traditional exp/imp not datapump;
    imp SYSTEM/password FROMUSER=scott TABLES=(emp,dept)
    imp SYSTEM/password PARFILE=params.datThe params.dat file contains the following information:
    FILE=scott.dmp
    IGNORE=n
    GRANTS=y
    ROWS=y
    FROMUSER=scott
    TABLES=(%d%,b%s)http://download.oracle.com/docs/cd/B10500_01/server.920/a96652/ch02.htm#1012936
    http://download.oracle.com/docs/cd/B10500_01/server.920/a96652/ch02.htm

  • 500 internal server error for only single user

    Hi Experts,
    Pls help me that
    I am getting the problem of 500 Internal server error for a single user .
    Except that user remaining users are not getting this error, They are working fine
    i.e it is ESS & MSS  Package all other application working fine , this iview came from  Webdynpro .
    Regards
    Krishna

    Hi Arun,
    where can i check with that whether in DEV/PROD system...?
    I don't have access to PROD system and SU01 system too.
    Can you please guide me with the steps to get it done.
    Please check the below log which is getting displayed for the User, when he is logging in.
    Error summary
    While processing the current request, an exception occurred which could not be handled by the application or the framework.
    If the information contained on this page doesnu2019t help you to find and correct the cause of the problem, please contact your system administrator. To facilitate analysis of the problem, keep a copy of this
    Root Cause
    The initial exception that caused the request to fail, was:
    com.sap.tc.webdynpro.services.exceptions.WDRuntimeException: ComponentUsage(FPMConfigurationUsage): Active component must exist when getting  interface controller
    at com.sap.tc.webdynpro.progmodel.components.ComponentUsage.ensureActiveComponent(ComponentUsage.java:773)
    at com.sap.tc.webdynpro.progmodel.components.ComponentUsage.getInterfaceControllerInternal(ComponentUSage.java:348)
    at com.sap.tc.webdynpro.progmodel.components.ComponentUsage.getInterfaceController(ComponentUsage.java:335)
    at com.sap.pcuigp.xssfpm.wd.wdp.InternalFPMComponent.wdGetFPMConfigurationUsageInterface(InternalFPMComponent.java.245)
    at com.sap.pcuigp.xssfpm.wd.FPMComponent$FPM.changeToExceptionPerspective(FPMComponent.java:862)
    u2026 59 more
    Please provide me any help.
    Thanks in advance.
    Regards,
    Ponneswari A.

Maybe you are looking for