Modifying Multivalued Attribute - Error?

Hi All,
Im able to update the LDAP Attributes by using modifyAttributes method, But i want to update a multivalued Attribute in the Active Directory.
I tried using array its not working help me out...
Jagan Thanks.....

Just iterate through the array members and add them to the attribute. Something like:String phoneNumbers[] = {"123 456 7890","456 789 0123", "789012 3456"};
ModificationItem[] mods = new ModificationItem[phoneNumbers.length];
for (int i = 0;i<phoneNumbers.length;i++) {
  mods[i] = new ModificationItem(DirContext.ADD_ATTRIBUTE, new BasicAttribute("otherTelephone",phoneNumbers));
Just be aware of the different operations that can be performed against a multi-valued attribute, clearing all of the values, replacing or deleting a single value and  appending values.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               

Similar Messages

  • FIM multivalue attribute export to SQL - error 0x80230808

    Hi,
    Running FIM Synchronization Service v 4.0.3531.2 - Update1.
    This instance is a simple setup, import from AD, export to SQL. I'm trying to export two multivalue attributes, one is a normal multivalue string, second is a reference attribute (member). My anchor is the GUID from AD in string format, perfectly fitting
    into uniqueidentifier sql datatype.
    Since I wanted to have the member values in the multivalue table also stored in a uniqueidentifier column (for further linking) I had to create two columns, one as "uniqueidentifier" and second as "text". FIM configuration went smoothly,
    I defined a member multivalue reference attribute and selected the uniqueidentifier column as "String attribute column", and the other multivalue string attribute had to be linked as "Large string attribute column" and I pointed it to the
    text datatype column.
    Synchronization completed without errors, export step properly exported all multivalue string attributes to the text column, BUT when it came to exporting the GUID reference attribute to the uniqueidentifier column it exported only the first value showing
    a "dn-attribute-failure" error. From the FIM GUI it was only showing the error number = 0x80230808.
    I did a SQL trace to see what's going on. I re-run the export and saw FIM trying to delete all the values for this attribute multiple times with:
    DELETE from [tblAD_Multivalue]  WHERE [objectGUID] = N'{B011B424-5B2F-43A9-84C5-8605A570487B}' AND [attributeName] = N'member'
    followed by doing cursor magic with the first value that was already added:
    exec sp_cursor 180150007,4,0,N'tblAD_Multivalue',@objectGUID='B011B424-5B2F-43A9-84C5-8605A570487B',@attributeName='member',@guidValue='2E52A484-C7F6-49C0-AAC8-0A30C732A385'
    After repeating the above for over 10 times it added a export_error_detail:
    update [mms_connectorspace] set [export_error_detail] = N'<export-status>
    <cd-error>
    <error-code>0x80230808</error-code><error-literal>[Modify] Failed operation</error-literal>
    </cd-error>
    </export-status>
    ',[count_export_error_retries] = 0,[is_export_error] = 1,[initial_export_error_date] = '2011-02-12 21:36:08.995',[last_export_error_date] = '2011-02-12 21:36:08.995',[export_error_code] = -2145189885,[unapplied_export_batch_number] = 1,[unapplied_export_sequencer_number] = 2162572,[original_export_batch_number] = 1,[original_export_sequencer_number] = 2162572,[current_export_batch_number] = 4,[current_export_sequence_number] = 2216213 where ([object_id] = '6F5C98E3-38FF-4F32-95F6-B5A315B71D7A')
    I tried manually adding one of the following values directly to SQL and it worked, so I'm not really sure what's wrong here.
    Any ideas?
    Piotr

    Hi Markus,
    yes, I know all about the architecture to allow multi-value attributes to be exported to SQL.
    Everything works when I have just one string value column in my tblAD_Multivalue. The problem is that my anchor in the primary table is a GUID in a uniqueidentifier SQL column type (in FIM MV it's a string), so when I'm exporting multivalue reference attributes
    to SQL I would like the GUID values also to go to a uniqueidentifier type column. That's why I set up the secondary column in the multi-value table with text datatype, so FIM recognizes it as a "large string column". I think I did everything within
    the guidelines, so I was puzzled when I saw that error.
    Consider this simple example, you're exporting users and groups from AD, you're anchor data type is uniqueidentifier, and you need to export the member attribute and the proxyAddresses attribute. What would you do to allow future SQL joins to calculate membership?
    hope this explains a bit more this scenario, would appreciate any suggestions.
    Piotr

  • How to define a  multivalued attribute in spml2.xml(spml2PersonForm)?

    I need to define a multivalued attribute in spml2.xml for modifying security answers and adding resources during add request. I tried by giving multivalued="true" during the attribute definition.
    <spmldsml:attributeDefinition name="questions" description="Secret questions" multivalued ="true"/>
    but still the lookup response shows the value as a single attribute
    <dsml:attr xmlns:dsml='urn:oasis:names:tc:DSML:2:0:core' name='questions'>
    <dsml:value>[What is your mother's maiden name?, asrfasdhfgjk, adsggfjhgkjhl]</dsml:value>
    </dsml:attr>
    Kindly suggest if i missed out anything during the configuration.

    Hi!
    I was unable to post any message. It was displaying that "Message blocked".
    Please help me in this issue.
    Regards
    Mourya

  • Reading multivalued attribute

    Hi,
    I have a multivalued attribute defined in LDAP and was synchronized to plumtree. After synchroinzation, the attribute with multiple values came in to plumtree and I am able to see the values of the attribute by clicking on user profile. But when I try to read the attribute using the following query only the last value is coming up.
    Here is the query I am using.
    IPortletContext portletContext = PortletContextFactory.createPortletContext(request, response);IPortletRequest portletRequest = portletContext.getRequest(); out.write("locationString = " + portletRequest.getSettingValue(SettingType.UserInfo,"ttcmytlocation"));
    In the profile of the user ttcmytlocation attribute has multiple values, but reading returns only the last value. Is there any other way to query the values? Please help!!
    Thanks.

    Use LDAP is ticked but no server specified
    Tried Selecting the server but no effect
    Every where I look in POA, Domain setting its set to the SERVER's IP address
    not DNS name!!
    Copied NAMED.NLM (just the NLM) from SP5 server - error gone but still get
    the LDAP error 81 when a
    user tries to login to GW.
    I also POA > Security - I tried setting security to LOW (which unticks LDAP)
    but still can't login
    "Anders Gustafsson" <[email protected]> wrote in message
    news:[email protected]..
    > Eric,
    >> "Starting eDirectory integrated Novell DNS Server...
    >> error:NWDSRead Failed while reading a multivalued attribute: -603
    >> Loading the configuration and zone data completed .
    >> DNS Server running "
    >>
    > OK. I assume that you have configured your POA to use the same server for
    > LDAP. If so, did you use the DNS name or IP address? If DNS name, I
    > suggest you try IP address as this takes DNS out of the picture.
    >
    > The error you are seeing indicates that you are not current on servicer
    > packs:
    > http://www.novell.com/support/search...200%2043955231
    >
    > I suggest you apply SP6 plus the post SP6 fixes after resolving your POA
    > issue and reading this:
    > http://wiki.novell.com/index.php/Nw65sp6
    >
    > - Anders Gustafsson, Engineer, CNE6, ASE
    > NSC Volunteer Sysop
    > Pedago, The Aaland Islands (N60 E20)
    >
    > Novell does not monitor these forums officially.
    > Enhancement requests for all Novell products may be made at
    > http://support.novell.com/enhancement
    >
    > Using VA 5.51 build 315 on Windows 2000 build 2600
    >

  • Unable to modify "passwordretrycount" attribute

    Greetings,
    I'm looking for some ways to manipulate things like account lockouts so that I can 1) check to see if accounts are locked out, and if so 2) unlock them from the command line.
    So, what I did was look for uid's that had certain attributes present in them and reset their values to unlock them. Here's an example:
    $ ldapmodify -h ldap01 -D "cn=directory manager"
    dn: uid=beckhelm,ou=people,dc=domain,dc=com
    changetype: modify
    replace: passwordretrycount
    passwordretrycount: 0
    modifying entry uid=beckhelm,ou=people,dc=domain,dc=com
    ...you see that I'm trying to change the value to "0" for the passwordretrycount attribute. No errors reported.
    However, when I look at that entry via ldapsearch, here's what it shows:
    $ /bin/ldapsearch -L -D "cn=directory manager" -b "ou=people,dc=domain,dc=com" u
    id=beckhelm nsrole accountunlocktime passwordretrycount retrycountresettime
    dn: uid=beckhelm,ou=people,dc=domain,dc=com
    accountunlocktime: 20050714013453Z
    passwordretrycount: 2
    retrycountresettime: 20050726002441Z
    ...still at 2! I don't get it!
    I've noticed that I cannot delete these attributes either from the command line or from the console. What's up with that?
    Patrick

    If I understand correctly, only system operattion or admin console could modify "operational attributes" like this.
    I am curious to know what if you bind as the "admin" (find out its full DN) user? could it work?
    Gary

  • Empty "KEY" attribute Error

    We have upgraded to BI Platform 4.1 Support Pack 3. We are seeing the following error when opening reports containing drill filters.
    Empty "KEY" attribute (Error: INF)
    Can anyone help with the solution?
    We get the following error message when we try to modify the report, which has error, in applet mode.
    com.businessobjects.rebean.internal.xml.XmlValidationException: Empty
    "KEY" attribute.
                      at
    com.businessobjects.rebean.wi.impl.xml.parser.DrillInfosParser.parseDrillObject(DrillInfosParser.java:148)
                      at
    com.businessobjects.rebean.wi.impl.xml.parser.DrillInfosParser.parseDrillHiers(DrillInfosParser.java:111)
                     at
    com.businessobjects.rebean.wi.impl.xml.parser.DrillInfosParser.parse(DrillInfosParser.java:54)
                      at
    com.businessobjects.rebean.wi.impl.services.ReportEngineDrillServiceImpl.getDrillDataFromServerCaller(ReportEngineDrillServiceImpl.java:780)
                      at
    com.businessobjects.rebean.wi.impl.services.ReportEngineDrillServiceImpl.getInternalDrillHierarchies(ReportEngineDrillServiceImpl.java:639)
                      at com.businessobjects.rebean.wi.impl.services.ReportEngineDrillServiceImpl.getDrillHierarchies(ReportEngineDrillServiceImpl.java:613)
                      at
    com.businessobjects.rebean.wi.impl.services.ReportEngineDrillServiceImpl.searchDrillFilterRSFromGetDrillInfo(ReportEngineDrillServiceImpl.java:246)
                      at
    com.businessobjects.rebean.wi.impl.services.ReportEngineDrillServiceImpl.getDrillFilters(ReportEngineDrillServiceImpl.java:199)
                      at
    com.sap.webi.ui.drill.DrillBar.BuildDrillBar(DrillBar.java:432)
                      at
    com.sap.webi.ui.drill.DrillBar.UpdateComponents(DrillBar.java:617)
                      at
    com.sap.webi.ui.drill.DrillBar.updateAll(DrillBar.java:341)
                     at
    com.sap.webi.ui.drill.DrillBar.eventBusProcessNewMessage(DrillBar.java:305)
                      at
    com.sap.webi.toolkit.ui.eventbus.EventBus.dispatchEvent(EventBus.java:324)
                      at
    com.sap.webi.toolkit.ui.eventbus.EventBus.sendMessage(EventBus.java:61)
                      at
    com.sap.webi.toolkit.ui.eventbus.EventBus.sendDefaultMessage(EventBus.java:87)
                      at
    com.sap.webi.ui.tasks.NavigOnDocumentTask.doneProcess(NavigOnDocumentTask.java:142)
                      at com.sap.webi.toolkit.ui.tasks.WebITask$PrivateWorker.done(WebITask.java:378)
                      at
    javax.swing.SwingWorker$5.run(Unknown Source)
                      at
    javax.swing.SwingWorker$DoSubmitAccumulativeRunnable.run(Unknown Source)
                      at
    sun.swing.AccumulativeRunnable.run(Unknown Source)
                      at javax.swing.SwingWorker$DoSubmitAccumulativeRunnable.actionPerformed(Unknown
    Source)
                      at
    javax.swing.Timer.fireActionPerformed(Unknown Source)
                      at
    javax.swing.Timer$DoPostEvent.run(Unknown Source)
                      at
    java.awt.event.InvocationEvent.dispatch(Unknown Source)
                      at
    java.awt.EventQueue.dispatchEventImpl(Unknown Source)
                      at
    java.awt.EventQueue.access$000(Unknown Source)
                      at
    java.awt.EventQueue$1.run(Unknown Source)
                      at
    java.awt.EventQueue$1.run(Unknown Source)
                      at
    java.security.AccessController.doPrivileged(Native Method)
                      at
    java.security.AccessControlContext$1.doIntersectionPrivilege(Unknown Source)
                      at
    java.awt.EventQueue.dispatchEvent(Unknown Source)
                      at
    java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown Source)
                      at
    java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)
                      at
    java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)
                      at
    java.awt.Dialog$1.run(Unknown Source)
                      at
    java.awt.Dialog$3.run(Unknown Source)
                      at
    java.security.AccessController.doPrivileged(Native Method)
                      at java.awt.Dialog.show(Unknown
    Source)
                      at
    com.jidesoft.dialog.StandardDialog.show(Unknown Source)
                      at
    java.awt.Component.show(Unknown Source)
                      at
    java.awt.Component.setVisible(Unknown Source)
                      at
    java.awt.Window.setVisible(Unknown Source)
                      at
    java.awt.Dialog.setVisible(Unknown Source)
                      at
    com.sap.webi.toolkit.ui.dialog.MessageDialog.setVisible(MessageDialog.java:186)
                      at
    com.sap.webi.ui.SwingClientHelper.showError(SwingClientHelper.java:347)
                      at
    com.sap.webi.ui.SwingClientHelper.showError(SwingClientHelper.java:198)
                      at
    com.sap.webi.ui.SwingClientHelper.showError(SwingClientHelper.java:205)
                      at
    com.sap.webi.ui.SwingClientHelper.showError(SwingClientHelper.java:188)
                      at
    com.sap.webi.ui.drill.DrillBar.BuildDrillBar(DrillBar.java:435)
                      at
    com.sap.webi.ui.drill.DrillBar.UpdateComponents(DrillBar.java:617)
                      at
    com.sap.webi.ui.drill.DrillBar.updateAll(DrillBar.java:341)
                      at
    com.sap.webi.ui.drill.DrillBar.eventBusProcessNewMessage(DrillBar.java:321)
                      at
    com.sap.webi.toolkit.ui.eventbus.EventBus.dispatchEvent(EventBus.java:324)
                      at
    com.sap.webi.toolkit.ui.eventbus.EventBus.sendMessage(EventBus.java:61)
                      at
    com.sap.webi.toolkit.ui.eventbus.EventBus.sendDefaultMessage(EventBus.java:87)
                      at
    com.sap.webi.toolkit.ui.eventbus.ContextEventBus.sendDefaultMessageOnEventBus(ContextEventBus.java:23)
                      at
    com.sap.webi.ui.tasks.workflows.RefreshWorkspaceWorkflow.onFinish(RefreshWorkspaceWorkflow.java:131)
                      at
    com.sap.webi.toolkit.ui.tasks.TaskWorkflow.startNextTask(TaskWorkflow.java:71)
                      at
    com.sap.webi.toolkit.ui.tasks.TaskWorkflow.propertyChange(TaskWorkflow.java:90)
                      at
    java.beans.PropertyChangeSupport.firePropertyChange(Unknown Source)
                      at
    com.sap.webi.toolkit.ui.tasks.WebITask.firePropertyChange(WebITask.java:66)
                      at
    com.sap.webi.toolkit.ui.tasks.WebITaskManager$TaskPCL.propertyChange(WebITaskManager.java:275)
                      at
    java.beans.PropertyChangeSupport.firePropertyChange(Unknown Source)
                      at
    javax.swing.SwingWorker$SwingWorkerPropertyChangeSupport.firePropertyChange(Unknown
    Source)
                      at
    javax.swing.SwingWorker$SwingWorkerPropertyChangeSupport$1.run(Unknown Source)
                      at
    javax.swing.SwingWorker$DoSubmitAccumulativeRunnable.run(Unknown Source)
                     at
    sun.swing.AccumulativeRunnable.run(Unknown Source)
                      at javax.swing.SwingWorker$DoSubmitAccumulativeRunnable.actionPerformed(Unknown
    Source)
                      at
    javax.swing.Timer.fireActionPerformed(Unknown Source)
                      at
    javax.swing.Timer$DoPostEvent.run(Unknown Source)
                      at
    java.awt.event.InvocationEvent.dispatch(Unknown Source)
                      at java.awt.EventQueue.dispatchEventImpl(Unknown
    Source)
                      at
    java.awt.EventQueue.access$000(Unknown Source)
                      at
    java.awt.EventQueue$1.run(Unknown Source)
                      at
    java.awt.EventQueue$1.run(Unknown Source)
                      at
    java.security.AccessController.doPrivileged(Native Method)
                      at
    java.security.AccessControlContext$1.doIntersectionPrivilege(Unknown Source)
                      at
    java.awt.EventQueue.dispatchEvent(Unknown Source)
                      at
    java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown Source)
                      at
    java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)
                      at
    java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)
                      at
    java.awt.EventDispatchThread.pumpEvents(Unknown Source)
                      at
    java.awt.EventDispatchThread.pumpEvents(Unknown Source)
                      at
    java.awt.EventDispatchThread.run(Unknown Source)

    I had the same problem. I saved my batch and it gave me that same error: "You must enter a name for this batch submission. This is the name that identifies this submission in the Batch Monitor and the History window."
    What I did was to create a second batch (another tab in the batch window) I left this one "untitled" (did not save it) then submitted it -and it worked. I named the job and it is happily chewing away.
    Not pretty, but it worked.

  • Provision a multivalued attribute from OIM to OID

    Hi,
    I have a requirement to provision a new multivalued attribute from OIM to OID.
    Steps followed:
    Created a child form
    Attached child form to the OID Parent form
    Created a process task adapter.
    Created a task in process definition and the attached the adapter
    Adapter code.
    public String addChildData(tcDataProvider ioDatabase, long procInstKey, long childDefKey){
              try{
                   tcFormInstanceOperationsIntf formInstOper = (tcFormInstanceOperationsIntf)tcUtilityFactory.getUtility(ioDatabase, "Thor.API.Operations.tcFormInstanceOperationsIntf");
                   HashMap testval = new HashMap();
                   testval.put("UD_TESTCHIL_TESTGROUP","abcd2134");
                   System.out.println("testval..."+testval);
                   long formreturn = formInstOper.addProcessFormChildData(childDefKey,procInstKey,testval);
                   System.out.println("formreturn" +formreturn);
              catch(Exception e){
                   System.out.println("exce" +e);
              return "Success";
    After attaching while provisioning I am seeing both parent and child forms. I have provided the values and its successfully provisioning.
    But how I can provision the new OID multivalued attribute. We have to do any setting in the lookup?
    Regards,
    KK

    Just create your new adapter for add and delete from this new child table just like the other triggered tasks. If it's a multi value on the user profile, use the adapter for Add Multi Value Attribute that comes with the connector. In the property name, put in your multi value attribute name, and map the value from the child table.
    -Kevin

  • When I check my boot SSD drive using Disk Utility under Mavericks, I often get "Incorrect number of extended attributes" errors.  But if I boot off an external drive and check the same SSD, no errors are reported.  Is this a bug in Mavericks?

    When I check my boot SSD drive using Disk Utility under Mavericks, I often get "Incorrect number of extended attributes" errors.  But if I boot off an external drive and check the same SSD, no errors are reported. 
    This happens not just with the SSD in my Mac Mini, but with another SSD in my MacBook (both now running Mavericks).  So far as I know, all of the kit I am using is in good order (despite the file corruption reports).  So I am beginning to wonder if it could be due to a bug in Mavericks?  Both SSD drives have been formatted to MacOS Extended (journaled) format.  Should I have used a different format, I wonder?
    Has anyone else encountered this issue?
    Does anyone have a solution?
    Or an explanation that might help my investigation of the issue?
    Thanks guys,

    I understand that the Corsair Force 3 is not one of the SSD drives that are supported on Apple Macs. 
    I did try downloading and using Trim Enabler, but the error message came up both when it was off and when it was on.
    I understand that not everyone thinks Trim Enabler is a good program, though there is a new version out now, so I may give it another try.

  • Multivalue Attributes

    We are implementing Portal, and one of the requirements we have is to load multiple values into a single attribute. For example, a document might have an attribute for Manufacturer. We want to be able to assign GM, FORD, or both values. I know we can use a multivalue attribute, but there doesn't appear to be a way to validate the contents or select values from a predefined list. What is the best way to address this problem?
    Any help is greatly appreciated.
    Kevin

    hi kevin,
    you could use the perspectives attribute to implement this. the perspective is our only multi-value attribute that we have in portal.
    regards,
    christian

  • Field Attribute Error

    Hi All,
    i am working on a upgrade project from 46c to ECC 6.
    we are facing field attribute error "No write access to reference CONTROL takes place".
    the error is been pointed in data declaration ' DATA: CONTROL  TYPE REF TO I_OI_OLE_CONTAINER_CONTROL."
    can anyone suggest solution for this?

    Hi,
    I am using table element, I would like to explain my problem with an example.
    now suppose there are 5 rows and 3 columns in my table element with all the fields mandatory, and at runtime i fill up the table columns while keeping any fields empty. Now my requirement is to highlight those perticular cells which are empty.
    I have written my validation code in one of the component controller method.
    Pls suggest.
    I am pasting teh code snippet.
    * get all declared attributes
      node_t_bknvi->get_static_attributes_table(
        IMPORTING
          table = tabl_t_bknvi ).
      LOOP AT tabl_t_bknvi INTO stru_t_bknvi.
        IF stru_t_bknvi-taxkd IS INITIAL.
    *     report message
          CALL METHOD l_message_manager->report_attribute_error_message
            EXPORTING
              message_text   = 'Input Required Fields'
              element        = elem_t_bknvi
              attribute_name = 'TAXKD'
    *        PARAMS         =
    *        MSG_USER_DATA  =
        ENDIF.
      ENDLOOP.

  • AD group in multivalue attribute in OIA

    Hi,
    I am trying to load AD groups into OIA via csv feed using schema files. I have created a multivalue attribute adgroup in OIA, but when i am entering multiple AD groups in the csv feed file for one user as "ou=abc,dc=abc ; ou=def,dc=ab", so instead of getting separated into two groups it is getting split into 4 different values at commas, is there any way to handle this type of values in the feed file or OIA cannot handle this kind of multiple values.
    Any pointers would be really helpful.

    Hi there abhishek,
    By default the seperator char is a comma, that's why OIA splits it up into the "wrong pieces".
    If you would like to use a different separator, you'll have to make a config adjustment in the database.
    Find the NAMESPACES table and look for the AD resource you created (resource has to be created first). One of the other fields is the 'multivalue_separator' field, if you change this to a semicolon (;) it should work alright. You might want to restart the application for it to work and re-import the accounts.
    I'm still looking for a more gentle way to commit the change instead of restarting OIA.
    Hope this helps you!
    Best regards,
    Jeff

  • User Attribute Error

    Dear All,
    A user was facing attiribute error while trying to approve shopping cart.
    The user had approved shopping carts earlier, but this problem has cropped in suddenly.
    I checked user consistency and repaired the user, all things seems to be fine.
    So I triggered org replication for that particular user position and then the problem got resolved,
    But however the user was not able to approve the shopping cart which was created prior to the user correction.
    the same attribute error happens again.
    Pls let me know how do i correct this.
    Regards
    harish

    Hi,
    Check If this happening with newly created SCs as well with same user after correction? If not then you might have to restart the WF of that particluar SC and retry with approval.
    Regards
    ~ Vipin

  • How to modify user attributes in Microsoft IAS or Active Directory??

    Anyone have an idea?? What I'm trying to do is to authenticate management access to an ACE 4710 against a Microsoft IAS server.
    According to the document below:
    http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA1_7_/configuration/security/guide/aaa.html#wp1519045
    it sounds like I need to be able to modify user attributes similar to what I know is doable in ACS. I base my assumption on this because of the following statement in the link above:
    "Step 3 Go to the User Setup section of the Cisco Secure ACS HTML interface and double-click the name of an existing user that you want to define a user profile attribute for virtualization. The User Setup page appears.
    Step 4 Under the TACACS+ Settings section of the page, configure the following settings:
    •Click the Shell (exec) check box.
    •Click the Custom attributes check box.
    •In the text box under the Custom attributes, enter the user role and associated domain for a specific context in the following format:
    shell:<contextname>=<role> <domain1> <domain2>...<domainN>"
    Is something like this possible in IAS??
    I have the authentication piece working for the ACE however when I login, I'm assigned an ACE defined default role of 'network-monitor' which gives me only read-only access. The way I'm interpreting what needs to be done to resolve this is to have the authentication server send an attribute value that states that the user is in the role 'Admin' in which case I'll have unlimited access to my ACE.
    Make sense?? Any thoughts??
    Thanks in advance.
    -Lloyd

    Lloyd,
    It is possible via Radius and not TACACS. On the same link if you scroll down, you will see option of doing it via Radius.
    "Defining Private Attributes for Virtualization Support in a RADIUS Serve"
    Find attached the doc that explains about setting up user attributes on IAS.
    Regards,
    ~JG
    Do rate helpful posts

  • Can we modify the attributes(structure-fields) of NUMKR structure

    can we modify the attributes(structure-fields) of NUMKR structure?

    NUMKRS Infotype 0000
    Country grouping
    comapny code
    Personal area
    personla subarea
    employee group
    employee subgroup
    so did u assigned number ranges for employee subgroups
    Internal number ranges will be given by the system
    and external by the consultants
    check and let me know if there is any issues
    have u done in this manner

  • Exchange Connector 9.1.1.1.0 -Support for multivalued attribute

    Hi,
    I am currently on OIM 9.1 BP07 + weblogic 10.3 + RHEL5.
    Currently I have a mutlvalued attribute that needs to be reconciled, when I use OOTB reconciliation task i get column not found exception on child table which is configured to hold multivalued attribute.
    1. Is OOTB exchange connector supports Multivalued attribute reconciliation?
    2. If no, how can i populate the child form during custom reconciliation process?
    Thanks

    Hello,
    This is the Berkeley DB forum. As such you can try your question in the General Database forum at:
    General Database Discussions
    Thanks,
    Sandra

Maybe you are looking for

  • Copy Functionality of Table Control like System's

    Hi all,   I have a situation in table control...   The scenario is like this ... I have a table control in which i am able to display the data about the sales persons. Now whenever i select a row from that table control it should copy that row and sh

  • Songs to blank cd to put in another users iTunes

    i put a couple of songs onto a blank cd to put it on another users itunes but it isnt working, any idead, thanks!!!!!

  • Describe requirement

    Hi,    I am in SRM 5.0 Extended Classic scenario.When i create a PO with describe requirement.I am not able to change region in the PO,only storage location is changeable .But in limit order I can change the region. Is it standard?

  • What size for Time Machine

    Hi, I am backing up my iMac to a WD Mybook with 500 Go space. The iMac hard drive has 235 Go on it right now. I have been backing up with TM since June and the Mybook is now full. Is this normal? I seem to remember before, TM did not take up so much

  • Linking to Open a file in java

    Hello, I wanted to create a link in my program that opens an excel spread sheet, seperately from the program. (i.e opens in excel). Is it possible to do this? Thanks Stu Message was edited by: studomonly