Policy Enforcement issues in AM 7.1 with multiple user repositories

Hello,
We have a scenario where we need to authenticate and authorize both ADAM and Sun Directory Server users into a web application through the same realm. The realm is setup with 2 identity repositories - one for ADAM and one for DS - both of type LDAP v3 Repo. Authentication into AM console through the ?realm=name parameter works fine in this setup for users from both repositories.
However, when we try to authenticate users into the protected web application as an AD/DS user, policy enforcement is not deterministic. Policy Agent starts allowing URL access to DENIED users also. Is this a known issue/bug with Sun Access Manager 7.1?
The policy agents in our setup are Apache, Tomcat and IIS 6.
Thanks,
Srinivas

Please provide more information. If I understand you correctly, you have a realm with 2 LDAP Auth modules configured. Are these part of an Auth Chain? What does that Chain look like? Both Required? Sufficient?
What does your URL policy look like?
Have you made sure AM Agent is not set to SSO_ONLY?
What do you mean by "Policy Agent starts allowing URL access to DENIED users also"? You see "DENIED" in a log file but the user gets through, or you are just reporting the behavior?
Thanks,
Eric

Similar Messages

1 Apple TV 2nd Gen, Windows 7 Computer with multiple user accounts

The issue that I am having is I have 1 Apple TV 2nd Gen and Windows 7 Computer with multiple user accounts.
When I log onto my Windows user account, open up Itunes and turn on home sharing my Apple TV work perfect but if another family member switches to their Windows user account without logging me out, the home share shows up on Apple TV but it just says "Loading ... Library" and never loads.
If we switch back to my user account, restart iTunes, everything is fine. Is there a way to keep my home share active in ATV2 across multiple user accounts? All of my video is under my account.

You can home-share multiple libraries but only use one account at a time.

File sharing with multiple users on one Mac

I have two Macs, both of which ca seen each other across the network. My question regards file sharing with multiple users on the same computer. When file sharing, are the files from all users available across the network, or just those of the user presently logged in? The issue is that I am trying to access files from a user who isn't currently logged in, but another user on that computer is. I need to get into that person's documents, but I don't see a way to navigate to their documents folder.

Right, I got that. But the computer is in constant use by User A, while I need access to User B's files. I could need access at anytime, and it would be a pain to make User A log off and log in as User B everytime. I was just wondering if there is anyway to access User B's files in this situation, without logging User B in.

Is there any information about using iCloud on a Mac with multiple user accounts (Mountain Lion)

When upgrading to Mountain Lion, you are asked to sign in using your iCloud ID. I don't understand how to set up the proper synching of "stuff" if your Mac has multiple user accounts, and they each have their own iCloud ID.
The whole issue of supporting multiple users on a Mac and making everything easy to understand with regard to iTunes and iCloud is, in my opinion, currently in a state of disaster. Apple needs to address this. They have conveniently made it a non-issue on iPads by not allowing multiple users. I can tell you that as one of the resident iOS and Apple experts in my office, most of the questions I get from others (not work-related) are on this topic. It needs to be easier to understand and accomplish.
Thanks in advance for any information you have on this subject.

CS7981 wrote:
is "Is there any benefit to using my Airport Express with my wireless router
no.

How can I share Catalog with multiple users?

I have Mac OSX 10.7.5
The catalog exists on a shared LOCAL folder that other users have read-write access to
The catalog works fine for the 1st user (no issues viewing, tagging, or updating photos & repairing it yields no issues)
However when I try to open this catalog with any other user I receive an error that the catalog may be corrupt and therefore cannot be opened...
Has anyone been able to share their catalog with multiple users on a Mac?
thanks
-Jay

If anyone runs into the same issue - I figured out why it wasn't working for me. Turns out it was actually an issue with folder permissions.
Despite the catalog being in a shared folder that all users can read/write to - Macs apparently don't understand inheritance & I needed to set the same read/write access to every sub-folder (the catalog folder & all of it's sub folders) as well.
This fixed my issue.
The Catalog is now shared between multiple users on the local drive with all the photos/videos stored on a NAS drive.

In trying to share music with multiple user accounts on one comp, I quit itunes, located my itunes media folder, moved it to a publicly accessible location. Problem is it didn't work and now I can't get it all back to the way it was.

In trying to share music with multiple users on one computer, I followed the directions on "iTunes:How to share music between different accounts on a single computer" (http://support.apple.com/kb/ht1203). I did something wrong because i lost iTunes
Tried to put files back, but it is not the same. Plugged in my ipod and it is not recognizing my computer.
Can someone tell me where iTunes should be, and what sub files should be included with it. Thanks!

If you are seeing the "Connect to iTunes" logo, then your device is in Recovery Mode, and you will need to restore it:
If you can't update or restore your iOS device
iOS: Back up and restore your iOS device with iCloud or iTunes
Cheers,
GB

Sharing iTunes on a single computer with multiple users

Greetings,
I have been troubleshooting a problem sharing iTunes on a single computer with multiple users that cropped up a few weeks ago and have not had very good luck.
Several months ago I successfully set up my wife’s G4 Laptop (PowerPC processor) so that we could share iTunes on that computer. I had just gotten her an “My Book” external hard drive (Western Digital). The iTunes Library will go on this new unit because the internal drive was running out of room. I successfully set the privileges, moved the entire library onto a “Share” directory and everything worked fine.
In this way, when I got a new CD I could add it to iTunes (under my login, administrator privileges) and she could access it (under her login) to listen to while working on the computer or using her iPod. This arrangement went well for quite awhile.
About a month and a half ago, when I tried to launch iTunes from my login I received this message:
“The iTunes Library file is locked, on a locked disk, or you do not have write permission for this file.”
I think the permissions must have changed when there was an update because my wife is pretty careful about what she does on her computer. Updates were the only thing I could think of that had changed since I had set her computer up. I also noticed that some of the iTunes defaults were different from the last time I had used it to add a CD.
So, I did some reading and went back through the motions of trying to set it up again. I re-formatted the My Book hard drive to Mac OS Extended (Journaled) added the files back to the external, reset permissions on the external hard drive. (Owners: System, Access: read and write - Group: wheel, Access: read and write – Others: read and write).
When I now launch iTunes under my login I get this message:
“The operation cannot be completed because you do not have sufficient privileges for some of the items.”
What gives? I am the original owner and have always had top-level privileges.
Can someone point me to any articles or clues as to how I need to set-up iTunes on a single computer to be shared by more than one user? Also, I am considering upgrading to the newer system in a few weeks, so if a solution for OS X 10.5 is available, that would work too.
Tim

Was your wife logged into the libray at the time you tried to log in? I have had a similar problem and it was because another user was logged into the library when I attempted to. I got the permission denied banner.

New Mac User: iTunes Auth with multiple user accounts

With a Mac with multiple user accounts, does EACH user account need to have iTunes authorized, or is iTunes authorized for an entire mac machine?

So then I assume that iTunes will know then if each of the computer's user accounts has a different iTunes account?
When you authorize an iTunes account on your computer, the authorization info is stored in \Users\Shared\. When you run iTunes, it looks there to see if it can play purchases. The purchase account info is embedded into each purchased file.

How do I share iTunes with multiple users on Mac mini?

How do I share iTunes with multiple users on Mac mini?

You have to turn on Sharing and then Authenticate Sharing on the other devices. You can have up to 5.

Time Machine with multiple users on single computer

Hi All,
I have an iMac at home with multiple user log ons. I'm about to get the Time Capsule and start using Time Machine (currently I use backup).
When I switch on Time Machine, does it switch on for all users, or will each user need to turn on Time Machine?
If I have to switch on Time Machine for each user, will each user's time machine back up the entire computer (so I'll have two complete copies on my computer on the external drive)?
If this does occur, can I control what Time Machine backs up so TM only backs up user specific information?
Thanks in advance,
Chris

When you first backup it will backup your whole system (user directories, system directories, applications, etc) unless you specify folders to exclude. When a user account is added to the computer, their home folder will be added to the backup in a similar way to if you added a new application. It will back up the directory structure exactly as it is on your main hard drive. The backup will essentially keep a copy of the whole hard drive on the backup drive.
The Time Machine will either be on for the whole system, or off for the whole system. It is not on or off for a specific user account. Users (depending on if they've got admin privileges) may have control over turning time machine on or off, but this does not change who can access the backups. All users will be able to invoke Time Machine to get to their backed up files.
Time Machine does not make separate backups for individual users. Instead, it preserves the permissions for backed up files, so while every user can access the backups, they cant just browse other users' files on the backup. The same restrictions on the main drive are carried over to the backup. Still, a standard user who's lost a file will be able to go into Time Machine, access a backed up version of the file, and restore it. Unlike standard users who are restricted from seeing other users' files in the backups, Admins are also restricted but they can be authenticated to view other users' files if they want to.

ICal sharing with multiple users on same computer

How can i set up iCal to share with multiple users on the same computer?

yes, BUT... you need a central repository for the master calendars, usually referred to a Calendar Server. If you are not using a Mac OS X Server on your private network, I think you can use web-based servers that use standard calendar protocol.
Mac 101: iCal

HT2688 Working on a single computer with multiple users, I have set things up to allow each user to view and listen to the others' music libraries under the "Shared Library" function. Can you then connect an iPod touch and copy music from a shared librar

Working on a single computer with multiple users, I have set things up to allow each user to view and listen to the others' music libraries under the "Shared Library" function. Can you then connect an iPod touch and copy music from a shared library?

Was your wife logged into the libray at the time you tried to log in? I have had a similar problem and it was because another user was logged into the library when I attempted to. I got the permission denied banner.

Multiple Macs with multiple user accounts

I have a Mac computer connected to airport and use Time Machine for backups. This works well.
I have now purchased a second Mac and would like to include this second Mac so that I can move between Macs and work. There does not appear to be any mechanism to allow this.

After searching the web and the discussion here, here's my minimal impact solution for multiple Macs with multiple users in a household:
1) Set up Mac1 for myself only
2) Set up Mac2 for the wife and kid
3) Set up each Mac to backup to the Airport base station using Time Machine (this would create two separate backups on the Airport base station's drive, which from what I've read has its own problems)
4) On Mac1 setup "empty user accounts" for the wife and kid. These will not have any files in them - just an access mechanism. If they want to access their files, they can use Time Machine's "The Browse Other Backup Disks Option" to get their file from Mac2, work on it and then drop it in the Shared Folder. Next time they are on Mac2, remember to copy the updated/created file from the Shared Folder into their Mac2 user account. If possible, get Time Machine to not backup the "empty user accounts".
5) Do the same for me on Mac2.
Not the most elegant solution, but until Apple get off their backside and make this seamless, I can't think of anything else :-( .
P.S. iCloud is not a soluton since it costs hundreds of dollars a year, uses up intenet data allowance and is slow.

Migrate itunes from pc to mac with multiple user accounts

I've read the numerous articles on transferring one's itunes library from a windows machine to a mac and I *think* I've got the details sorted (have itunes copy everything and then organize my library, then copy whole folder to external drive). I only have one itunes account but it my full library and itunes account is used across different windows user accounts.
My mac is setup with multiple user accounts and I'd like to have a single library and single itunes account (same apps, etc.,). I'm not quite sure how to migrate the library from windows and then set it up on the mac such that all mac user accounts are sharing the same library and itunes account. Any guidance?
Forgot to mention, have 2 iphones and 1 ipad as well, all attached to the same apple id.

See these support documents:
How to share iTunes between multiple accounts on a single computer: http://support.apple.com/kb/HT1203
How to use multiple iPods, iPads, or iPhones with one computer, http://support.apple.com/kb/HT1495

IMac with multiple user accounts "cannot associate apple id for ....."

I have an iMac with multiple user accounts each with an Apple ID and individual iTunes library and Itunes match linking to iPhones iPads etc.
I bought songs on my iPhone yesterday, on trying to listen to them on the iMac (my user account) this morning I get the "cannot associacte Apple ID for another 31 day" meassage.
Is there any way round this? or is the answer only purchase via iTunes on the iMac in the individual account. Why do Apple do this?

http://support.apple.com/kb/ht4627
I'm guessing it's for piracy reasons.

Policy Enforcement issues in AM 7.1 with multiple user repositories

Similar Messages

Maybe you are looking for