Problem in provisioning role to a particular system urgen

Hi all,
I am getting the following error while provisioning the roles in AE. I checked the configurations and connectors everything is working fine with all other system. Only with this particular system i have the problem in provisioning the things.
I believe the problem is more pertaining to BAPI and not to do with SAP GRC. Please guide me on this.
Error: Hi all,
I am getting the following error while provisioning the roles in AE. I checked the configurations and connectors everything is working fine with all other system. Only with this particular system i have the problem in provisioning the things.
I believe the problem is more pertaining to BAPI and not to do with SAP GRC. Please guide me on this.
Error: P20_100-INSPECT_P20_915-USER CREATE - Function template/VIRSA/BAPI_USER_CREATEcould not be retrieved from P20_100
Regards,
Suma Devaraj

Hi Suma,
Did you check that VIRSANH/VIRSAHR BAPI are correctly installed on relevant back-ends ? Moreover, if using CUA to provision users, BAPI should be installed not only on the system hosting the CUA, but on every client system (eg. ECC, SRM, BI, ...).
You also may verify in SPAM transaction that you installed correct BAPI depending on your basis install (640, 700, ...) and on your GRC AC version (5.1, 5.2, ...). For example, if you are installing AC 5.2 on a BASIS700 system, corresponding package should be VIRSANH520_700 and/or VIRSAHR520_700. You may find more detailed information in "GRC Access Control ABAP install guide".
Best regards,
JC

Similar Messages

Provisioning roles to a JAVA system

Hi Experts!
I'm working on a syncronization job between IDM and SAP JAVA. In this job I need to pass the username and the rolename that I want to pass from IDM to the SAP JAVA system. I can get the user and role information from both systems, however I'm a little stuck on passing this information back to SAP JAVA.
From what I can see from the Framework, the pass SetJavaRoleForUser&Group is the one that would do what I need, but I'm not quite seeing how the user information gets passed in. Has anyone done anything like this before? Got any pointers?
Thanks!
Matt

Hi Matt,
not sure if this helps, but did this few years ago on 7.0.. What assignedroles and assignedgroups expected were just pipe-delimeted list of AS Java role/group-names. I doubt this has changed since.
Just write a custom script that gets the groups/roles from the link-tables and pass the values forward. You need to replace the IdM-prefix ("PRIV:ROLE/GROUP:[REP_NAME]:") from the privilege name and put "SPML.SAPROLE." (or "SPML.SAPGROUP.") inplace.
regards, Tero

Integrate GRC 10.1 with CUA and how to import roles from CUA & Child systems into GRC for provisioning

Hello,
I am trying to integrate CUA into our GRC 10.1 system through the below steps and so far I have completed the below steps following SAP Notes 1680108 and 1616121:
1. Connected CUABOX to GRCBOX like a plug-in system.
2. Updated CUA Global System and CUA Model Distribution in Maintain CUA settings under User Provisioning.
3. Next I am trying to import the roles from CUA(CUABOX) into GRC(GRCBOX) to be able to provision roles in CUA Child Systems(ECCBOX).
After reading few discussions in SCN, I have figured that we have to download a template in Role Import and populate it accordingly to upload the CUA child system roles into GRC system for provisioning in CUA Child Systems.
Unfortunately, this template has multiple fields and I am unable to determine the fields that should be populated as CUA Global System and CUA Child System to import into GRC. Also, when we upload CUA Child System Roles template what selections should be made in Role Import window.
Any help in this regard is very helpful.
Thank you,
Pawan

Hi Alessandro,
I have "Create user if does not exist" setting checked for both change action and assign role action and also have CUA enabled. Here is the list of steps that I am performing:
1. Create an access request for new account, T-CUA_CHILD and select a role from a child system ECC Z_ECC_ROLE_IN_CHILD_SYSTEM.
2. Approvals provided to assign the ECC role.
3. I see the following in GRFNMW_DBGMONITOR_WD.
           Auto provisioning activity at end of request at Path GRAC_DEFAULT_PATH and Stage              GRAC_SECURITY
               New User:T-CUA_CHILD created in System(s): ECC (created without role assignments)
               T-CUA_CHILD User does not exist in target system CUA
GRC created an account without role assignment in ECC but also throwed me an error that the user does not exist in CUA.
However, if I select roles from both CUA and ECC it creates the account in both systems with the selected role assignments.
So I am wondering if there is way to provide CUA access to users by default for new account requests types. I have tried setting up default roles for CUA but it does not assign the roles by default until I select the CUA system.
Thank you for your help!
Pawan

Error provisioning role

Hi all,
I am getting the following error while provisioning the roles in AE. I checked the configurations and connectors everything is working fine with all other system. Only with this particular system i have the problem in provisioning the things.
I believe the problem is more pertaining to BAPI and not to do with SAP GRC. Please guide me on this.
(Error: P20_100-INSPECT_P20_915-USER CREATE - Function template/VIRSA/BAPI_USER_CREATEcould not be retrieved from P20_100)
Regards,
Suma Devaraj

Hi,
Has the VIRSA RTA been installed on the client you are connecting to?
Regards

CUA problem with composite role

Hello experts, I have a problem with a composite role in my CUA parent system. If you look at the roles tab you will see one of the child roles has a name of child CUA system in the 'target sys' column. the rest all have 'user system'. Can anyone explain how this 'target sys' column is defined?
Thanks
Dave Wood

I do not know if you have solved this issue, but the target system is defined within your single role on you menu tab.
No what happens is that in transaction SM30 table SSM_RFC you define system variable linked to your logical system.
This variable determines that when you import roles from another system by means of transaction PFCG > Read from other system from RFC and you select your variable the system will automatically default in the target system field the system it is suppose to go back to.
So this way when you distibute the roles it will only go back to that particular target system, and you do not need to specify and guess where the role came from.
Try removing that table entry in SM30 SSM_RFC and see if that way you will be able to remove the target system from the role.
However it is not a bad thing to have activated. If you are working with position base authorizations and you have more than 1 system, you define 1 composite role for all the roles, for all the systems and you will be able to see where the composite resides by means of the target value.
Hope this makes sense.
Regards
Sonja

OIM 9.1.0.2 ORA-0936 encountered when provisioning roles

I've configured an Access Policy that provisions users without requiring approval to a DB through the DB connector. It also provisions them with roles: CONNECT and DBA.
The latter was achieved by making Role provisioning dependent upon User creation completion in the Access Policy. The Access Policy is also where the roles are specified.
The user is created and role provisioning fires OK, but gets rejected.
The relevant section in the log looks like this:
ERROR RMICallHandler-266 XELLERATE.DATABASE - select UD_DB_ORA_P_PRIVILEGE from UD_DB_ORA_P where UD_DB_ORA_P_KEY =
java.sql.SQLException: ORA-00936: missing expression
     at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:138)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:316)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:282)
     at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:639)
<snip>
     at java.lang.reflect.Method.invoke(Method.java:585)
     at com.evermind.server.rmi.RmiMethodCall.run(RmiMethodCall.java:53)
     at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
     at java.lang.Thread.run(Thread.java:595)
ERROR RMICallHandler-266 XELLERATE.DATABASE - Class/Method: tcDataBase/readPartialStatement encounter some problems: ORA-00936: missing expression
java.sql.SQLException: ORA-00936: missing expression
     at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:138)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:316)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:282)
     at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:639)
     at oracle.jdbc.driver.T4CStatement.doOall8(T4CStatement.java:113)
     <snip>
     at com.evermind.server.rmi.RmiMethodCall.run(RmiMethodCall.java:53)
     at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
     at java.lang.Thread.run(Thread.java:595)
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem entered.
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: event - Value: adpDBADDPRIVILEGE
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: New Status - Value: R
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: SchData - Value: Data Access Error
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: Reason - Value: Exception com.thortech.xl.dataaccess.tcDataSetException: Data Access Error was thrown in adapter "DB Add Privilege". The Adapter Response was "Data Access Error"
There is an article about this on Oracle support, which I think is relevant, it states:
CAUSE
The error is caused by the fact that the rule is based on the values of the process form which are not yet commited to the database.
The usage of the process form will be avoided when creating rules for prepopulate adapters.
SOLUTION
Create a rule based on the "Request Target Information" which is reffering attributes of the OIM target user which has to be provisioned.
Suppose an access policy is used and this is based on a specific autogroup membership, the same rule can be used when creating the rule for the prepopulate adapter.
Unfortunately, this is greek to me.
Can anyone explain how I can resolve this problem with the role provisioning?
Many thanks,
2Hugh
Edited by: 2hughg on 08-Mar-2011 09:19

I had a privilege provisioning task set up as well, when I removed that, the error condition went away.
2hugh

Error while provisioning roles (SetABAPRole&ProfileForUser)

Hi Experts
While provisioning roles in IDM 7.2, I see this error in the Job logs:
Failed running function in string "$FUNCTION.sap_abap_getNameOfAssignedPendingPrivileges(mskey!!repname!!role!!true)$$". Marking entry as failed. Exception was: undefined: "sap_abap_convertToABAPValidFromDate" is not defined.
I am getting this error only if I provision the existing SAP users. Assigning any role to a new user works fine. Went through both the above mentioned scripts, but don't see any Problem there.
What am I missing here?
Best regards
Annapurna

Hi Annapurna,
I was just going through the setup in our landscape and noticed that we have only one script for Assign User Membership to ABAP which is "sap_abap_getNameOfAssignedPendingPrivileges"
As mentioned by Jai earlier, we have the same script as Jai.
Can you try by using the below script for "sap_abap_getNameOfAssignedPendingPrivileges" and delete the other two and try to execute?
Not sure, if this could work, but maybe can give a try.
Script below:
===============================================
// Main function: sap_abap_getNameOfAssignedPendingPrivileges
* Returns a list of all privileges with properties {validfrom, validto} of the
* passed user for the passed repository and the passed privilege type.
* It contains all already assigned privileges plus/minus the delta of the
* current pending added and/or removed privileges.
* Note: Needed by connectors that always send the complete list of privileges
* to the backend, e.g. ABAP, BusinessSuite, JAVA
* @param {Par} Format:
* MSKEY of user!!repository name!!privilege type<!!includeValidityProperty>
* e.g. 172645!!BQQ001!!PROFILE!!TRUE
* @return {String} List of Privilege (backend) names in format:
* if includeValidityProperty is defined as true, then
* {VALIDFROM=<date>!!VALIDTO=<date>}<priv>|{VALIDFROM=<date>!!VALIDTO=<date>}<priv>|{VALIDFROM=<date>!!VALIDTO=<date>}<priv>
* else
* <priv>|<priv>|<priv>
function sap_abap_getNameOfAssignedPendingPrivileges(Par) {
importClass(java.lang.StringBuffer);
// enable this flag (tracingEnabled) only for debugging purposes as this will impact the performance
var tracingEnabled = false;
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: is called with " + Par);
var parameters = Par.split("!!");
var mskey = parameters[0];
var repositoryName = parameters[1];
var privilegeType = parameters[2];
var addValidityProperty = false;
if (parameters.length > 3 && parameters[3] != null && parameters[3].toLowerCase() == "true") {
addValidityProperty = true;
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: mskey: " + mskey);
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: repositoryName: " + repositoryName);
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: privilegeType: " + privilegeType);
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: addValidityProperty: " + addValidityProperty);
var nolock = "";
if("%$ddm.databasetype%" == 1) { //MS-SQL
nolock = "WITH (NOLOCK)";
if (tracingEnabled) {
sap_debug_logUserAssignments(mskey);
* - get only assignments (mcLinkType = 2)
* - get all assignments of current entry X (mcLinkState = 0, mcExecState = 1 & mcDisabled = 0)
* - and with assignments in state "pending add" (mcLinkState = 1 & mcExecState = 512 or 513,
mcDisabled can be 1 e.g. if the user gets reactivated)
* - assignments with mcExecState 2 (Rejected) and 4 (Failed) are not included. If a failed
* assignment gets retried, the state changes immediately to pending.
* - for specfified repository Y
* - and privilege type Z
* - add member task must have been running for the privilege (mcAddAudit IS NOT NULL)
-> no future assignments
-> no assignments for which an approval will be done but approval task is not yet running
* - no privileges for which an approval is needed/running
* mcValidateAddAudit < mcAddAudit <- approval is already done
* or mcValidateAddAudit IS NULL <- if no approval is necessary
* - no duplicate privilege names (-> SELECT DISTINCT) in case of contexts
var sql = "SELECT DISTINCT privilegename.mcMSKEYVALUE, assignment.mcValidFrom, assignment.mcValidTo \
FROM idmv_value_basic_all repositorynames " + nolock + " \
INNER JOIN idmv_value_basic_all privilegetype " + nolock + " ON privilegetype.mskey = repositorynames.mskey \
INNER JOIN idmv_entry_simple privilegename " + nolock + " ON privilegename.mcMSKEY = repositorynames.mskey \
INNER JOIN mxi_link assignment " + nolock + " ON assignment.mcOtherMskey = repositorynames.mskey \
WHERE assignment.mcThisMskey = " + mskey + " \
AND assignment.mcLinkType = 2 \
AND (\
(assignment.mcLinkState = 0 AND assignment.mcExecState = 1 AND assignment.mcDisabled = 0) \
OR (\
assignment.mcLinkState = 1 AND assignment.mcExecState IN (512,513) \
AND ( \
(assignment.mcAddAudit > assignment.mcValidateAddAudit) \
OR \
(assignment.mcAddAudit IS NOT NULL AND assignment.mcValidateAddAudit IS NULL) \
AND repositorynames.attrname = 'MX_REPOSITORYNAME' AND repositorynames.SearchValue = '" + repositoryName + "' \
AND privilegetype.attrname = 'MX_PRIVILEGE_TYPE' AND privilegetype.SearchValue = '" + privilegeType + "'";
//result looks like privMskeyValue!!privMskeyValue!!privMskeyValue
var result = uSelect(sql);
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: SQL Query:\n" + sql);
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: Result: " + result);
var allPrivsStringBuf = new StringBuffer();
var firstElement = true;
if (result != null && result != "") {
var resultArray = result.split("!!");
for (var i = 0; i < resultArray.length; i++) {
var columns = resultArray[i];
var columnArray = columns.split("|");
//privMskeyValue is like PRIV:<type>:<repository>:<privilegeName>
var privMskeyValue = columnArray[0];
var repTemp = privMskeyValue.split(":");
var repstring = repTemp[0] + ":" + repTemp[1] + ":" + repTemp[2] + ":";
var privName = uReplaceString(privMskeyValue, repstring, "");
if (!firstElement) {
allPrivsStringBuf.append("|");
if (addValidityProperty) {
var validfrom = columnArray[1];
var validto = columnArray[2];
allPrivsStringBuf.append("{VALIDFROM=");
allPrivsStringBuf.append(validfrom);
allPrivsStringBuf.append("!!VALIDTO=");
allPrivsStringBuf.append(validto);
allPrivsStringBuf.append("}");
allPrivsStringBuf.append(privName);
firstElement = false;
var allPrivs = String(allPrivsStringBuf); // must be casted explicitly to String
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: Calculated privileges for " + Par + " are: " + allPrivs);
return allPrivs;
* Prints out all assignments the user has (also all assignments in pending remove state etc.)
function sap_debug_logUserAssignments(mskey) {
var columns = "mcUniqueId, mcThisMSKEY, mcOtherMSKEY, mcAttrName, mcThisOcName, mcOtherOcName, mcThisMSKEYVALUE, mcOtherMSKEYVALUE, mcLinkState, mcAssignedDirect, mcAssignedInheritCount, mcExecState, mcExecStateHierarchy, mcChangeNumber, mcGroupGuid, mcLastAudit, mcAddedTime, mcModifyTime, mcValidateAddAudit, mcAddAudit, mcContextMSKEY, mcContextCategory, mcContextStr1, mcContextStr2, mcOrphan, mcSoDViolation, mcNotAllowedFor, mcUnsupportedContextType, mcMissingConditionalContext, mcDisabled, mcRequestID";
var debugSql = "SELECT " + columns + " FROM idmv_link_ext WHERE mcThisMskey = " + mskey + " ORDER BY mcUniqueId";
var debugResult = uSelect(debugSql);
//format output
debugResult = uReplaceString(debugResult, "!!", "\n");
debugResult = uReplaceString(debugResult, "\|", "\t");
columns = uReplaceString(columns, ", ", "\t");
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: Debug SQL Query:\n" + debugSql);
uInfo("sap_abap_getNameOfAssignedPendingPrivileges:: Debug Result:\n" + columns + "\n" + debugResult);
Thanks & Regards,
V!

Cannot find role SAP_SDCCN_ALL in satellite system

Hi,
I cannot find the role SAP_SDCCN_ALL in satellite system. The sattelite system is R3 4.7 PI 2003_1_470, PI_Basis 2003_1_620. Did anyone of you encounter the same problem?.
Regards
Anil

Hi Anil,
the role SAP_SDCCN_ALL is shipped with ST-PI 2005_1_*.
In this ST-PI release the new transaction SDCCN is shipped first time. This transaction replaces the old SDCC. So it is quite clear that in the ST-PI 2003__ the role is not available.
So please upgrade your ST-PI and you will get the new SDCCN.
This SDCCN has the following new features and functions. You can send data to more then one Solution Manager.
If you have installed the new ST-PI and you are generating then RFCs (the SM_*_BACK), the tool automatically assigns this destination to the SDCCN, so then automatically the SDCCN would ask the new SolMan for new sessions.
Also one big advantage of the new SDCCN is, if one download is required by more then one service, this download will not be collected multiple times (reduces system load), it is collected only ones. By default a new download will be collected after 3 or 6 days, this is customizing of the SDCCN.
So I recommend to upgrade your ST-PI
Regards,
uDo

Logon is not possible because you have not been assigned to a business role; please contact your system administrator

Hi experts,
I'm having a problem when our project approaching the end.
If I assigned the business role in parameter CRM_UI_PROFILE and PFCG role in SU01.
It works fine,and the user can logon the web ui.
Now I created a new organization model and position,assigned the business role and user to the position.
A PFCG role was also assigned to the business role:
Then I removed all the roles and profiles in user master in SU01.
The user can not login CRM WEB UI and the system raised "Logon is not possible because you have not been assigned to a business role; please contact your system administrator".
Can anybody suggest what the problem is? Is there any other settings I should make?
I suppose that,since the user was assigned to the position the organizational model, the system can determine the user's business role, and through the business role, the corresponding PFCG role can also be determined.
Am I correct?
Thanks.
Jerry

Jerry, yes, you're right.
Let me point you to pretty good explanation right here: Logon is not possible because you have not been assigned to a business role; please contact your system administrator
So business role determination is taken in three steps (you can observe them in class CL_CRM_UI_PROFILE_DETERM method LOAD_PROFILES):
1. From user's parameter CRM_UI_PROFILE (method LOAD_FROM_USER_PARAMETER);
If CRM_UI_PROFILE = * then the user needs to have S_DEVELOP authorization object with OBJTYPE = 'DEBUG' (debug authorization).
2. If not found on previous step: From organizational management (method LOAD_FROM_ORG_MANAGEMENT)
3. If not found on previous steps: Based on PFCG roles (method LOAD_FROM_PFCG_ROLE);

Role for a particular Transaction

Hi,
How will I know the role for a particular Transaction?
like , I need to know the role of Transaction PFCG coz i dont have access to this Transaction now.....

Vamsee,
If you dwell down to the bottom of the access/authorizations/profile/roles etc what ever you call....you have something called authorizations.
If you are talking about a particular transaction a custom one or a standard one, there is an auth. group assigned to it. Basis is the team which creates auth. objects and they create a profile which are infact added to the roles.
These are the roles which are added to the user ids of the people using the system.
Different roles which give us different authorizations to work with in the system.
Hope I made my point clear.
One more important thing is, you cant just ask basis to assign a particular profile or role which you might have found by some means like SU53. Because a tcode can be there in many roles or profiles. It is up to basis to decide what role they have to assign based on what authorizations you need. The profile or role which you might have found out may contain other auth's for other tcodes which basis may not want to offer.
Thanks,
Message was edited by: Naren Somen

Problem with internet. When i open System preferences, Network, message drops down: 'your network settings have been changed by another application'. I click OK, but it drops a message again and again, preventing me to do anything about the setting.

Problem with internet. When i open System preferences, Network, message drops down: 'your network settings have been changed by another application'. I click OK, but it dropps the message again and again, preventing me to do anything about the setting.

A Fix for "Your network preferences have been changed by another application" Error
In the Library/Preferences/SystemConfiguration/ folder delete the following:
com.apple.airport.preferences.plist
NetworkInterfaces.plist
preferences.plist
com.apple.nat.plist
You will have to re-configure all your network settings since deleting.
(10.4.10)
Use Software Update to update your OS to last version of Tiger. Install all the other updates that goes along w/it.

An error has occurred. Please try again, and if the problem persists, contact your help desk or system administrator. (Error 3000)

Hi,
When i open my Password Reset portal then provide Username credentials in text box and click on next then asked the Securites Question Answers to me,i provide the correct Answers to the securites Question after this password reset portal asked
me New Password and Confirm Password then click on next for resetting the password then gives below Error only for 2 Users. and all other users are working fine.
An error has occurred. Please try again, and if the problem persists, contact your help desk or system administrator. (Error 3000:)
Regards
Anil Kumar

Anything in the event log?

How do i find out what drives are present in a particular system

Hi,
How do i find out what drives are available in a particular system either by giving the systems ipaddress or the systems name...

You can't do that. That would be a real security risc.
/KAj

Problem in provisioning user from oim to active directory using ssl

hi,
problem in provisioning user from oim to active directory using ssl i am getting following error while provisioning user to AD.
15:18:12,984 ERROR [ADCS] Communication Errorsimple bind failed: 172.16.30.35:636
15:18:12,984 ERROR [ADCS] The error occured in tcADUtilLDAPController::connectTo
AvailableAD():simple bind failed: 172.16.30.35:636
15:18:13,015 ERROR [SERVER] Class/Method: tcProperties/tcProperties encounter so
me problems: Must set a query before executing
com.thortech.xl.dataaccess.tcDataSetException: Must set a query before executing
at com.thortech.xl.dataaccess.tcDataSet.checkExecute(Unknown Source)
at com.thortech.xl.dataaccess.tcDataSet.executeQuery(Unknown Source)
at com.thortech.xl.dataobj.tcDataSet.executeQuery(Unknown Source)
at com.thortech.xl.dataaccess.tcDataSet.executeQuery(Unknown Source)
at com.thortech.xl.dataobj.tcDataSet.executeQuery(Unknown Source)
at com.thortech.xl.dataobj.util.tcProperties.<init>(Unknown Source)
at com.thortech.xl.dataobj.util.tcProperties.initialize(Unknown Source)
at Thor.API.tcUtilityFactory.getLocalUtility(Unknown Source)
at Thor.API.tcUtilityFactory.getUtility(Unknown Source)
at com.thortech.xl.integration.ActiveDirectory.tcADUtilLDAPController.co
nnectToAvailableNextAD(Unknown Source)
at com.thortech.xl.integration.ActiveDirectory.tcADUtilLDAPController.se
archResultPageEnum(Unknown Source)
at com.thortech.xl.schedule.tasks.ADLookupRecon.performReconciliation(Un
known Source)
at com.thortech.xl.schedule.tasks.ADLookupReconTask.execute(Unknown Sour
ce)
at com.thortech.xl.scheduler.tasks.SchedulerBaseTask.run(Unknown Source)
at com.thortech.xl.scheduler.core.quartz.QuartzWrapper$TaskExecutionActi
on.run(Unknown Source)
at Thor.API.Security.LoginHandler.jbossLoginSession.runAs(Unknown Source
at com.thortech.xl.scheduler.core.quartz.QuartzWrapper.execute(Unknown S
ource)
at org.quartz.core.JobRunShell.run(JobRunShell.java:203)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.j
ava:520)
can any one help.
Thanks and Regards,
praveen,

Are you able to connect to AD over SSL through some LDAP Browser ?
Check the validity of Certificate ?
Does your certificate appear in the list ?

How to find out what iviews are using a particular system

EP NW2004 SP 17
We are trying to see which iviews are associated with a particular system. I've tried using Content Admin -> Multiiple property Replacement. I add our corporate folder to the 'Selected Objects' -> click next. I then select 'iview' then 'system'. I then select radio button 'search objects by property value' and enter current value of the system in quest and new value with the same system in question. I get like 1,400 hits and the list can not be displayed.
Thanks in advance
-- Steve

Hi,
this was a really good idea. Since the list is so big, I could think of one other very simple way. Why don't you try to export the complete PCD content as a XML (via the [XML Content and Actions|http://help.sap.com/saphelp_nw70/helpdata/en/93/28f999daa6434a845da6bf9ab5072c/frameset.htm].) In the resulting file you should also be able to search for the system alias and from there get the iView (with the complete PCD path).
Of course there is certainly a way to develop some code which can do the same for you.
Regards,
Holger.

Problem in provisioning role to a particular system urgen

Similar Messages

Maybe you are looking for