Multiple account AD resource error

Hello All,
I am trying to create a new account type that will have admin privileges.
I uploaded the following xml via configure->import exchange file
<Rule subtype='IdentityRule' name='AccountId is User Name'>
<ref>attributes.accountId</ref>
</Rule>

<Rule subtype='IdentityRule' name='Administrator Identity'>
<concat>
<s>admin</s>
<ref>attributes.accountId</ref>
</concat>
</Rule>
</Waveset>when I try to assign this role to a new or existing user for my AD resource I get the following error.
com.waveset.util.WavesetException: Error opening object 'LDAP://xx.xxxx.xx/admintest1234': ADsOpenObject(): 0X80072032: , 0000208F: NameErr: DSID-031001BA, problem 2006 (BAD_NAME), data 8350, best match of: 'admintest1234' , An invalid dn syntax has been specified.
I configured the resource for multiple account types via edit identity template ->types of accounts.
Your help would be greatly appreciated.
Thanks
Clear

Yes, you got this wrong. When you provide an identity rule, the identity template isn't processed. So when you have a template in the form of
cn=$accountId$,ou=Staff,dc=example,dc=comIt is not sufficient to return a value for $accountId$ but instead you need to return a valid DN in the form of
cn=admintest,ou=Staff,dc=example,dc=com

Similar Messages

Multiple accounts on the same resource

Experts,
I am trying to create multiple accounts for the same IDM user.
I have written a workflow which calls the subprocess to create multiple accounts. In the orignal workflow I pass the IDM accountId and the target system accountid in the Iterate loop.
In the subprocess i am checking out the user view then appending the resource specific parameters (mentioned below) and then checking in the view.
<Activity id='1' name='Add resource to user object'>
<Variable name='userObject'/>
<Action id='1' name='CheckOut User View' application='com.waveset.session.WorkflowServices'>
<Argument name='op' value='checkoutView'/>
<Argument name='type' value='User'/>
<Argument name='id'>
<ref>userId</ref>
</Argument>
<Argument name='TargetResources' value='EDS'/>
<Argument name='authorized' value='true'/>
<Argument name='Form' value="Empty Form"/>
<Variable name='view'/>
<Return from='view' to='user'/>
</Action>
<Action id='2' name='Add Attribute'>
<expression>
<block>
<set name='applicationuserid'>
<invoke name='get'>
<split>
<ref>userid_applicationid</ref>
<s>#</s>
</split>
0
</invoke>
</set>
<set name='resourcename'>
<invoke name='get'>
<split>
<ref>userid_applicationid</ref>
<s>#</s>
</split>
1
</invoke>
</set>
<set name='user.waveset.resources'>
<appendAll>
<ref>user.waveset.resources</ref>
<list>
<s>RACF</s>
</list>
</appendAll>
</set>
<set>
<concat>
<s>user.accounts[</s>
<ref>resourcename</ref>
<s>].created</s>
</concat>
<s>true</s>
</set>
<set>
<s>waveset.accounts[RACF].id</s>
<get>
<invoke name='getObject'>
<invoke name='getLighthouseContext'>
<ref>WF_CONTEXT</ref>
</invoke>
<s>Resource</s>
<s>RACF</s>
<Map>
<MapEntry key='action' value='update'/>
</Map>
</invoke>
<s>id</s>
</get>
</set>
<set>
<concat>
<s>user.accounts[</s>
<s>RACF</s>
<s>].name</s>
</concat>
<s>RACF</s>
</set>
<set>
<concat>
<s>user.accounts[</s>
<ref>resourcename</ref>
<s>].gapracfid</s>
</concat>
<ref>applicationuserid</ref>
</set>
<set>
<concat>
<s>user.accounts[</s>
<ref>resourcename</ref>
<s>].identity</s>
</concat>
<concat>
<s>uid=</s>
<ref>applicationuserid</ref>
<s>,ou=racf,ou=Applications,dc=gap,dc=com</s>
</concat>
</set>
<set>
<concat>
<s>user.accounts[</s>
<ref>resourcename</ref>
<s>].firstname</s>
</concat>
<ref>user.accounts[Lighthouse].firstname</ref>
</set>
<set>
<concat>
<s>user.accounts[</s>
<ref>resourcename</ref>
<s>].lastname</s>
</concat>
<ref>user.accounts[Lighthouse].lastname</ref>
</set>
<set>
<concat>
<s>user.accounts[</s>
<ref>resourcename</ref>
<s>].fullname</s>
</concat>
<ref>user.accounts[Lighthouse].fullname</ref>
</set>
</block>
</expression>
</Action>
<Action id='3' name='Check In User View' application='com.waveset.session.WorkflowServices'>
<Argument name='op' value='checkinView'/>
<Argument name='view' value='$(user)'/>
<Argument name='authorized' value='true'/>
<Argument name='Form' value="Empty Form"/>
</Action>
<Transition to='end'/>
<WorkflowEditor x='244' y='48'/>
</Activity>
When i run this in the IDM I can see all the entries but only first one is actually created on the target resource. When I open the user object in IDM and hit Save button IDM creates the accounts on the target system.
I have already tried by using the refresh view just before the checkin view action but no luck..
Any help for solving this problem would be appreciated.
Thanks

Thanks for the reply... in my case this would be done by the active synch process so no GUI form is required. I will be getting a list of application ID for the user by LDAP AS. One i get it i will have to parse it and get the list of application user id. I am passing those ID;s to a workflow where I am forming the resource name as you mentioned
for example:
If i get user1#user2#user3 from AS i am separating them based on # using split and getting 3 different user id;s
now i am forming a string with the resource name and passing it to the sub process in which i am checking out the user object, setting the user attributes and checking in the new view.
user1#LDAP
user2#LDAP|1
user3#LDAP|2
Problem ; When i run this user1 is getting created in LDAP but user2 and user3 are not. There entry is getting created in IDM.
When I open the IDM object I get a yellow triangle (warning) and if I open the user object and hit save button IDM creates the user account on the LDAP.
any help for further solving this problem would be appreciated.
Regards,

Multiple accounts on the same resource in Oracle Waveset 8.1.1 patch 5

Hi IDM Experts!
I've customized my userforms in order to create multiple accounts on the same resource using the syntax accounts[<resourceName>|n].<attribute> like the documentation suggests. That worked fine using Sun Identity Manager 8.1.
However, I've not been able to create new multiple accounts after I upgraded to Oracle Waveset 8.1.1 patch 5.
Is there anything else that I have to take into account for this new version? Is that a bug?
Thanks in advance for your help!

Thanks for the reply... in my case this would be done by the active synch process so no GUI form is required. I will be getting a list of application ID for the user by LDAP AS. One i get it i will have to parse it and get the list of application user id. I am passing those ID;s to a workflow where I am forming the resource name as you mentioned
for example:
If i get user1#user2#user3 from AS i am separating them based on # using split and getting 3 different user id;s
now i am forming a string with the resource name and passing it to the sub process in which i am checking out the user object, setting the user attributes and checking in the new view.
user1#LDAP
user2#LDAP|1
user3#LDAP|2
Problem ; When i run this user1 is getting created in LDAP but user2 and user3 are not. There entry is getting created in IDM.
When I open the IDM object I get a yellow triangle (warning) and if I open the user object and hit save button IDM creates the user account on the LDAP.
any help for further solving this problem would be appreciated.
Regards,

ERROR WHILE POSTING MIRO FOR MULTIPLE ACCOUNT ASSIGNMENT (ASSET)

Hi Guys,
We created a PO for asset with multiple account assignment. And we immediately do IR instead of GR.
While doing IR it is giving error
1) Quantity delivered is zero - Warning message
2) Account 245350 requires a Transaction Type or is Invalid - Error message
what may be the problem. how can we eliminate and post it
Regards
palani

Hi,
I would assume the G/L account you used was not properly set up. Did you get the same problem if you try to change to another G/L account? Perhaps, get your FI specialist to look into this G/L account-related error and verify it.
Cheers,
HT

Multiple Account assignment with cost distribution value error

Hello Experts,
We are facing the below issue,
We are trying to create Limit SC with MAA cost center with cost distribution "By Value". we distribute the total value to 5 cost centers. when we try to order the SC, system is not allowing us to order, we got the error message "Multiple account assignment only with percentage less than 100%".
Please advise how to resolve this issue.
Regards,
Santhosh Kumar.G

Hi
Check this OSS notes : 1644804
Regards
G.Ganesh Kumar

PO Error in Process with Multiple account assignment

Hi ,
I am working with Extended Classsic scenario.
Problem is with PO with Multiple account assignement.
There is only one user who is getting problem with one particular account assignement "CCC" - Cost Center RP.. . When PO gets created with this particular AAC , it goes into "Error in process" only for one user.
In RZ20 it shows messsage as "Please enter quantity or percentage for account assignment" & "Distr. ind. and partial invoice ind. must be set f or multi acct. assgt.".
On other hand , other users are able to order the PO with the same AAC without any error.
What could be the reason behind this only for one user ?
Regards,
Sheetal

Hi ,
I have checked it intially and both are identical.
Initialy the problem was, user had entered 128 times AA line items ( added & deleted ) in the PO while in the SC it was having only 64.... Our system accepts line items till 99 , so i asked him to delete the items above 99 ..
So after that POs error has gone and it went for approval..
But after approval it again went into error in process
Sheetal

Error creating a contract with multiple account assignments

Hallo,
I have created a PO agreement with a single account assignment on tr - ME31K.
If I open this agreement and open the account assignments for an item I'm able to press the "Change display" button. In the screen which is showed I'm able to set the distribution to set the distribution to 1 - Distribution on quantity basis. If I do so I get the following error message: " Enter Acc. ***. Block". The only thing I could do is set this indicator!. But when I set this indicator this indicator is resettled and the message appears again.
The thing I want to do is that it is possible to create a contract whit multiple account assignments.
Could any one say what is missing or what is wrong?
My SAP version is 47x110 SR1.
Kind regards,
Richard MeijnError creating a contract with multiple account assignments

Rahul,
The reason why I created a contract with a single Account Assignment is that it was not possible to save the document.
So I created a document for my example and want to change it to a multiple Account assignment. So I did the steps as described.
After adding a extra account line and pressing Enter I get the error message as described: "Enter Acc. ***. Block".
There must be a setting wring in the IMG but I don't know which one?
I have looked ad transaction "OME9" but couldn't see the cause.
Kind Regards,
Richard Meijn

Reconcile question: Error iterating accounts for resource:

Guys,
One question. While trying to reconsile my MS SQL database table it fails and I'm getting the next error message:
Error iterating accounts for resource :
java.lang.NullPointerException
Any Idea what might cause this error. All other resources are reconsiling just fine...
Thanks.
Elger

Unfortunately that didn't help. I deleted the whole account index just to make sure all 'links' where gone but I'm still getting the null pointer exception.
Any more idea's?

Multiple Accounts on Multiple resources through ActiveSync

Hi,
I am trying to create multiple accounts on multiple resource through activesync. But i am able 2 create on a single resource... below is the code
<Field name='NDSFilter'>
<Disable>
<isFalse>
<contains>
<ref>accountInfo.assigned</ref>
<s>Dev-NDS</s>
</contains>
</isFalse>
</Disable>
<Field name='newAccountRequest'>
<Expansion>
<block trace='true'>
<s>Dev-NDS</s>
</block>
</Expansion>
</Field>
<Field name='global.NdsUname'>
<Expansion>
<block>
<s>NdsFour</s>
</block>
</Expansion>
</Field>
<Field name='global.NDSOU'>
<Expansion>
<block>
<s>ADK</s>
</block>
</Expansion>
</Field>
<Field name='accounts[Dev-NDS].waveset.generate'>
<Default>
<s>true</s>
</Default>
</Field>
</Field>
<Field name='DSFilter'>
<Disable>
<isFalse>
<contains>
<ref>accountInfo.assigned</ref>
<s>UOS-AssociatesLDAP</s>
</contains>
</isFalse>
</Disable>
<Field name='newAccountRequest'>
<Expansion>
<block trace='true'>
<s>UOS-AssociatesLDAP</s>
</block>
</Expansion>
</Field>
<Field name='accounts[UOS-AssociatesLDAP].accountId'>
<Expansion>
<block trace='true'>
<s>AccountTwo</s>
</block>
</Expansion>
</Field>
<Field name='global.OU'>
<Expansion>
<block trace='true'>
<s>UOS-MultiAccounts</s>
</block>
</Expansion>
</Field>
<Field name='accounts[UOS-AssociatesLDAP].waveset.generate'>
<Default>
<s>true</s>
</Default>
</Field>
</Field>
Can anyone pls suggest me the solution...
Thanks in advance
Kiran

Thanks for the reply... in my case this would be done by the active synch process so no GUI form is required. I will be getting a list of application ID for the user by LDAP AS. One i get it i will have to parse it and get the list of application user id. I am passing those ID;s to a workflow where I am forming the resource name as you mentioned
for example:
If i get user1#user2#user3 from AS i am separating them based on # using split and getting 3 different user id;s
now i am forming a string with the resource name and passing it to the sub process in which i am checking out the user object, setting the user attributes and checking in the new view.
user1#LDAP
user2#LDAP|1
user3#LDAP|2
Problem ; When i run this user1 is getting created in LDAP but user2 and user3 are not. There entry is getting created in IDM.
When I open the IDM object I get a yellow triangle (warning) and if I open the user object and hit save button IDM creates the user account on the LDAP.
any help for further solving this problem would be appreciated.
Regards,

Urgent plz...Error: Multiple Account assignment in BAPI_REQUISITION_CREATE

Hi All,
I'm using BAPI_REQUISITION_CREATE to create the PR . The PR is created successfully with service lines. The service lines for PR item has to be assigned to different account assignment. My problem is that account assignment is not getting assigned to the service line for multiple account assignment cases, instead the account assignment is blank for the sevice line.
Here is part of my code.
For Account Assignment
t_requisitionaccoun-preq_item = '00010'.
t_requisitionaccoun-serial_no = '01'.
t_requisitionaccoun-g_l_acct = '0000630010'.
t_requisitionaccoun-cost_ctr = '0801112560'.
append t_requisitionaccoun
t_requisitionaccoun-preq_item = '00010'.
t_requisitionaccoun-serial_no = '02'.
t_requisitionaccoun-cost_ctr = '0801111710'
t_requisitionaccoun-g_l_acct = '0000610090'.
append t_requisitionaccoun
t_requisitionaccoun-preq_item = '00020'.
t_requisitionaccoun-serial_no = '01'.
t_requisitionaccoun-cost_ctr = '0801111710'
t_requisitionaccoun-g_l_acct = '0000610090'.
append t_requisitionaccoun
For Service account Assignment
*PR item 10
Service item 1
t_requisitionsrvaccass-pckg_no = '0000000002'.
t_requisitionsrvaccass-line_no = 2. " line 1 is the header for service
t_requisitionsrvaccass-serno_line = '01'.
t_requisitionsrvaccass-quantity = '10'
t_requisitionsrvaccass-serial_no = '01'
APPEND t_requisitionsrvaccass.
Service item 2
t_requisitionsrvaccass-pckg_no = '0000000002'.
t_requisitionsrvaccass-line_no = 3.
t_requisitionsrvaccass-serno_line = '01'.
t_requisitionsrvaccass-quantity = '10'
t_requisitionsrvaccass-serial_no = '02'
APPEND t_requisitionsrvaccass.
*PR item 20
Service item 1
t_requisitionsrvaccass-pckg_no = '0000000004'.
t_requisitionsrvaccass-line_no = 2. " line 1 is the header for service
t_requisitionsrvaccass-serno_line = '01'.
t_requisitionsrvaccass-quantity = '10'
t_requisitionsrvaccass-serial_no = '01'
APPEND t_requisitionsrvaccass.
With this code, what I get is the blank account assignment for PR item 10 and correctly filled account assignment for PR item 20.
Does anyone done this before and can give me some help. Thanks.

Hi, can you send me an example of this BAPI.
I have the same requeriment, i'm new with bapis
thanks

Allocating multiple accounts on a resource through multiple roles

Is there anyway for IdM to cater for the following scenario
Role 1 -> Allocates accounts on Resources A & B
Role 2-> Allocates accounts on Resources A & C
Such that when a User is given both Roles, their account list is
(1st) account on A, account on B, (2nd) account on A, account on C
rather than the aggregate of (1 only) Account on A,account on B, account on C.
And if, say, Role 1 is revoked for the account on Resource A as provisioned by Role 1 is the only account to be revoked on the resource allowing the 2nd account on Resource A (as provisioned through the still active Role 2) to still be managed
Thanks
--Calum

Yes, it should be possible, but messy.
The easiest way would be to create separate resources for the roles. So you'd have two configured resources for the same target, and the roles would assign the separate resources. You'd have to make sure that the target resources account names are different because usually they are required to be unique.

Down payment with multiple account assignment PO

Dear Experts,
While posting down payment request through transaction F -47 with
reference to purchase order we are getting below given error.
In that purchase order we have given
multiple account assignment i.e. multiple cost centers (e.g. Cost center A 50% cost center B 10% Cost Center C 40% i.e. distribution by %)
but
system is flagging message
Item 00010 of purch. document 4500024875 contains no suitable account
assignment
Message no. ME717
What will be the possible cause?
regards,
Abhijit

Hi,
In the request f-27 tr.code give the purchase order which item you want to give ie., for above said example 10 is a line item of 4500024875 - purchase order and beside you have to mention
10(lineitem) 4500024875 (purchase order) 2009 (year)
and system will take that request against the above purchase order.
Regards,
satish

GR and GR Non Val indicator in R/3 PO for multiple account assigned SC's

Hi,
We are on SRM 3.0(EBP 4.0) and R/3 4.7.
We have implemented the BBP_CREATE_PO_BACK badi for setting or clearing the GR and IR indicators under certian conditions.
But for Multiple account assigned SC's we get an error message "06181 With non-valuated GR, please also enter GR i ndicator ".
We have tried implementing note# 872000, but this has not solved the issue.
The PO's get created only if we force the GR indicator when transferring the data into R/3.
It seems clear that while creating the PO the system is encountering the GR Non Val indicator but not the GR indicator, so its throwing the error message (we get the same error message when we create the PO from R/3 with GRnon val indicator checked and GR ind unchecked).
The proposed solution is that in the same BADI, along with clearing the GR indicator, we will also clear the GR non val indicator.
This can solve the issue if the indicators are transferred as it is from EBP.
But can anyone tell me if these indicators are also checked/changed in any FM/program in R/3 before the PO is created?
Is there any customizing setting which is affecting this particular behaviour?
Regards,
Srivatsan

Hi Srivatsan ?
In ECC, you have a configuration point :
Materials Management->Account Assignment->Maintain Account Assignment Categories
Here you can untick the indicator you want by account assignment category;
Kind regards,
Yann

1) I have multiple accounts at the iTunes store and none are now associated with my purchases...I think because passwords have been associated with various id's and I can't log in and access those purchases. I want to get back to being able to use one i

1) I have multiple accounts at the iTunes store and none are now associated with my purchases...I think because passwords have been associated with various id’s and I can’t log in and access those purchases. I want to get back to being able to use one id and password and be able to access those purchases.
2) When I upgraded my iPhone 3gs, to the latest version 5.0.1 (9A405), is when I noticed that i couldn’t update my applications. There are two names/accounts on the phone and prior to the update there was just the one. I have tried entering every conceivable password that I have ever used and get the incorrect password error every time. The apps on the iPhone are apparently associated with several/different accounts. I just want to get everything back to the way it was. One id and one password with purchases associated with just one account that can be updated on my computer as well as my iPhone.

Hello sadiepix,
The following article details several things that can be done to quell iTunes' constant need for authorization.
iTunes repeatedly prompts to authorize computer to play iTunes Store purchases
http://support.apple.com/kb/TS1389
Cheers,
Allen

'BAPI_PO_CREATE1' Multiple account assignment is not possible for AFS item

'BAPI_PO_CREATE1' -> This BAPI works perfectly without the 'account assignment' option . But for purchase requisitions which have account assignments BAPI returns the error - E|8W |185   |Multiple account assignment is not possible for AFS items.
Can somebody please help me to get this error resoleve .
My coding I have done like below.
DATA: pohead TYPE bapimepoheader.
DATA: poheadx TYPE bapimepoheaderx.
CONSTANTS : c_x VALUE 'X'.
DATA: exp_head TYPE bapimepoheader.
DATA: return TYPE TABLE OF bapiret2 WITH HEADER LINE.
DATA: poitem TYPE TABLE OF bapimepoitem WITH HEADER LINE.
DATA: poitemx TYPE TABLE OF bapimepoitemx WITH HEADER LINE.
DATA: posched TYPE TABLE OF bapimeposchedule WITH HEADER LINE.
DATA: poschedx TYPE TABLE OF bapimeposchedulx WITH HEADER LINE.
DATA: POACCOUNT TYPE TABLE OF BAPIMEPOACCOUNT WITH HEADER LINE.
DATA: POACCOUNTX TYPE TABLE OF BAPIMEPOACCOUNTx WITH HEADER LINE.
pohead-comp_code = '1000'.   "IEQ1 plant. "'1000'.
pohead-doc_type   = 'NB'     .
pohead-creat_date = sy-datum   .
pohead-vendor = EKKO-LIFNR. "'0000500004'.
pohead-purch_org = purch_org.
pohead-pur_group = purch_grp.
pohead-langu      = sy-langu   .
pohead-doc_date   = sy-datum.
poheadx-comp_code = c_x.
poheadx-doc_type   = c_x.
poheadx-creat_date = c_x.
poheadx-vendor     = c_x.
poheadx-langu      = c_x.
poheadx-purch_org = c_x.
poheadx-pur_group = c_x.
poheadx-doc_date   = c_x.
poitem-po_item    = iLineItem.      "1.
poitem-material   = req_item-MATERIAL.   " '000000000040000234'.
poitem-plant      = req_item-PLANT.
poitem-quantity   = req_item-QUANTITY.
poitem-net_price = NET_PRICE.
poitem-price_unit = PRICE_UNIT.
poitem-shipping   = 'Z1'.
poitem-preq_no    = req_item-PREQ_NO.
poitem-preq_item = req_item-PREQ_ITEM.
poitem-acctasscat = 'K'.
APPEND poitem.
poitemx-po_item    = iLineItem. "1.
poitemx-po_itemx   = c_x.
poitemx-material   = c_x.
poitemx-plant      = c_x .
poitemx-quantity   = c_x .
poitemx-tax_code   = c_x .
poitemx-item_cat   = c_x .
poitemx-acctasscat = c_x .
poitemx-net_price = c_x.
poitemx-price_unit = c_x.
poitemx-shipping   = c_x.
poitemx-preq_no    = c_x.
poitemx-preq_item = c_x.
poitemx-acctasscat = c_x.
APPEND poitemx.
POACCOUNT-PO_ITEM = iLineItem.
POACCOUNT-SERIAL_NO = iLineItem.
POACCOUNT-GL_ACCOUNT = '0000211010'.
POACCOUNT-SD_DOC = '0001001056'.
POACCOUNT-ITM_NUMBER = '000100'.
POACCOUNT-CO_AREA = '1000'.
APPEND POACCOUNT.
POACCOUNTX-PO_ITEM = '00001'.
POACCOUNTX-SERIAL_NO = '01'." '01'.
POACCOUNTX-PO_ITEMX = 'X'.
POACCOUNTX-SERIAL_NOX = 'X'.
POACCOUNTX-GL_ACCOUNT = 'X'.
POACCOUNTX-SD_DOC = 'X'.
POACCOUNTX-ITM_NUMBER = 'X'.
APPEND POACCOUNTX.
CALL FUNCTION 'BAPI_PO_CREATE1'
    EXPORTING
      poheader = pohead
      poheaderx = poheadx
    IMPORTING
    exppurchaseorder = ex_po_number
    expheader        = exp_head
    TABLES
      return    = return
      poitem    = poitem
      poitemx   = poitemx
      POACCOUNT = POACCOUNT
      POACCOUNTX = POACCOUNTX.

I found the answer

Multiple account AD resource error

Similar Messages

Maybe you are looking for