PUBLIC pseudo user

select table_name, grantor, privilege from dba_tab_privs where GRANTEE='PUBLIC';
If we run this query, we can see so many privileges given to pseudo role PUBLIC.
And also by default, all users have the privileges which are given to PUBLIC. If we connect to the database useing 3rd party tools, like the BO XI, it shows all the schemas and the privileges which are there with PUBLIC.
can we do something in which, the users dont use the privileges granted to PUBLIC.
thanks!

thanks a lot! it sounds great!
the thing is that in business object, they have a kind of universe, where they create roles and sub roles and integrate it to the WINDOWS AD. so the users of the active directory have automatically the privileges assigned at the BO level.
that is the middle tier..
at the database level, i have created a user for the BO as BOE and gave SELECT privilege on some objects from a schema. Apart from these SELECT privileges on 50 objects in a schema, the only other privilege given to BOE is CONNECT.
so as far as oracle database is concerned, there are only
SELECT on 50 OBJECTS in a schema
CONNECT role
Now when we connect the user from the BUSINESS OBJECT, we can see a whole bunch of tables from SYS, DBSNMP, CTXSYS, ALL_ and USER_ views.
so i was shocked, that when i gave only SELECT on 50 objects, how come the user can see all teh tables and views from almost all the schemas in the database.
Then from my search, i think it is because of the privileges given to the PUBLIC role which is automatically granted to all the users, it could see all that...
so i just wanted to restrict those views to the user BOE, so that it should not see more than what i give him the privileges.
thanks!

Similar Messages

How to use process overriden public runtime user?

Hello,
While creating a unix/linux dynamic target, I am passing unix/linux hostname and username
manually.
I am using the dynamic target in 'Open Terminal Session' and overriding the default username
with Public authenticated username. Open terminal session is working fine and able to
ssh the linux host.
But 'Execute Terminal Commands' process is getting failed while using the same 'Open Terminal
Session' as target.
Even though i am passing the sam 'Open Terminal Session' as target; 'Execute Terminal Command' is using the default runtime user rather than using the process overriden public runtime user.
Please do the needfule for the same. Please let me know if I need to provide more information.
Thanks,
Prashant

Thanks for your reply Chris.
In Open Terminal Session we have Credentials tab, there we can override process runtime user with public key
but we dont have anything in execute terminal commands.
We have credentials tab in 'Execute Unix/linux scripts' also but we cant use Public Authenticated Runtime User.
I have attached snapshots for ref puposes.

How do I find my public identity user name i registered with so I can sign in to support community?

How can I find/retrieve my public identity "user name" that i registered with my apple ID a long time ago so I can sign in to the support community?
If I try to create a new public identity user name it states that my email address is already used.
Thank you!

I created a new email and user name to get in and post this question.

Does shared public fixed user database links work with 9.2.0.8

Hi,
I'm trying to test benefits of using 'shared public fixed user database links' in 9.2.0.8 .
I've monitored tcp/ip communication after creating db link via:
CREATE SHARED PUBLIC DATABASE LINK sales.us.americas.acme_auto.com CONNECT TO scott IDENTIFIED BY tiger AUTHENTICATED BY anupam IDENTIFIED BY bhide USING 'sales';
but as far as I've observed there is new tcp/ip connection made after new user requesting remote table .
So looks like there is 1:1 relationship between user sessions requesting remote table and network connection opened .
Actually there are 2 network connection opened for every session using remote table .
tcp4 0 0 192.15.x.y.44141 192.15.x.y.1521 ESTABLISHED
tcp4 0 1127 192.15.x.y.1521 192.15.x.y.44170 ESTABLISHEDAs of both instances sharing same hardware ,maybe better aproatch would be BEQ communication ?
But I dont see obvious reasons that IPC communication would be better than few connections (because of shared db links) via tcp/ip .
Maybe my understanding of shared db links is wrong but I think that at some point there will be no 1:1 relation between user session requesting remote table
and number of network connection with remote instance . So for exaple with 100 user session I see only 10 network connections .
Regards.
Greg

Thank You, that looks promising .
But could You help with creating test case scenario in which I can clearly see the difference in tcp/ip connection numbers between shared non-shared db links.
Regards.
Greg

Manage Public Share User Access - At least a Read-Only option

Hi WD!I just bought a WD My Cloud 3TB and the first thing I wanted to do was to restrict access to the PUBLIC share so that not anymone can manage everything its own way. I've been across a lot of posts around the WD forums and other sites on the web and I found out I'm not the only person having the same "problem" as me. I know it is possible to tweak the box using the SSH access (BTW, thanks for opening up this access!) and modify the rights from behind, but with a sharp and clear GUI like what I seen, I cannot think this option is not present. I don't understand why (I'm no Linux pro here!) the "public access" switch in the GUI is not replace by a user name "public" that I would be able to give read or RW access to this specific share (and all the other share I would also create!). In fact, this should behave more like the "everyone" user in Windows on which I can set the access I want. If this is a by design need for other features, why these so-called features cannot simply use a different credential to access the Public share? Well, all in all, I want a way to manage the "everyone" access on the public share (and also the other custom shares). Everyone else than WD people, please kudos (star on the left) this post so maybe WD will hear us all... Thanks in advance! --David

Hi user78995,
We do the executeQuery() after the commit in the taskflow, we see the logging saying that the query has been executed and show the correct number of rows being returned.
So, I believe we are oke with the rows in bc, it is now only the refresh of the component in JSF.
I can not do the partialtrigger programmatically, since (in the afterlistener) I do not have access to the bindingcontainer.
Any other way to perform this partialtrigger, please let me know.
Thank you in advance.
Filip

IOS6 map is useless for public transit users

I LOVED the google map on my iphone and used it daily, the user experience was great w/ detailed directions and a map view for public transit. Having to use Embark on the new OS is AWFUL and I have to switch back and forth between Embark and the new map. PLEASE BRING BACK GOOGLE MAP!

this will certainly rank among Apples stupidest moves. Maybe the proportion of map users that utilize the public transit feature is not enormous, but those of us that do use this feature use it intensively and derive great utility from it.
Isn't it ironic that Apple, the company that created one of the most iconic ad campaigns in history (i.e. the one poking fun at lemmings following the masses onto the PC platform), is now dictating use of inferior features just because they have the lemmings locked into their platform? It's almost as if Apple is no longer interested if customers can or can't use their products to create the most individually valuable user experience possible.
Wasn't there a time when Apple would not attempt to provide a product or service unless it could provide a superior service? Or am I thinking of someone else?
I am now.

Mandatory UCSS for Public Space - What is the user license upgrade entitlement?

I'm facing a scenario where a customer is running CUWL 8.x and wish to add a large number of conference phones.
Along with the license L-PUB-IP-DEV-UWL the CCW tool auto-adds UCSS. This is a mandatory requirement, it cannot be removed.
However, the Public Space concept has been retired, so this implies that if they eventually try to move onto CUCM 10.x, leveraging their main UCSS contract, they would simply lose all their Public Space users. Is this correct?
My concern is that in spite of being forced to purchase a software upgrade subscription, our customer will never be able to do anything with it.
I was hoping that SWSS had been released but I have a feeling it will not be made available for these licenses.

Thanks Aman.
A considerable decision is being made and I'm looking for supporting documentation. Do we have any link or PDF confirming the public space license would automatically convert to UCL with a major version upgrade?
Also what UCL does it upgrade to (presuming Enhanced)?
Enhanced UCL is about 30% more expensive than Public Space (at least in our theatre). Forgive my skepticism, but I am surprised that Cisco would automatically convert Public => Enh UCL for free. Why not everyone go out and buy Public Space licenses then do the upgrade if this is the case?
Kind Regards,
Ben.

Migrating users in sql server to oracle 10g

migrating users from sqlserver to oracle10g
what are the setps to follow for migrating users in sqlserver to oracle10g
also
please let me know the migration of roles and privelage in sqlserver into oracle10g
meaning
these are roles in sqlserver
public
db_owner
db_accessadmin
db_securityadmin
db_ddladmin
db_backupoperator
db_datareader
db_datawriter
db_denydatareader
db_denydatawriter
what are equivalent role and priv in oracle

Hi,
We can't directly and exactly map the roles but I have mapped to similar roles below.
In Oracle, the access mechanisms work like this:
A user with create table privilege can create any number of tables in his own schema. He may have some quota on tablespaces, the amount of data he can use for all his tables together in that tablespace and he becomes the dbowner for his schema and schema objects.
He can grant select, insert, update and delete privileges to any user he like.. the user who got the privileges is called a "grantee". A grantee can again grant the privileges that he received to others, provided he has been granted with "with grant option".
A pseudo user called public, is only a place holder to say ALL ... if you grant some privileges to PUBLIC, then everyone in the database will have that privileges.
A user with EXP_FULL_DATABASE will be able to backup the full database.
Please refer to oracle documentation for complete details.
public - PUBLIC
db_owner - SCHEMA USER him self
db_accessadmin - SCHEMA USER himself
db_securityadmin - SCHEMA USER himself
db_ddladmin - SCHEMA USER himself
db_backupoperator - a role EXP_FULL_DATABASE
db_datareader - any user who has select previliges
db_datawriter - any user who has select, insert , update and insert privileges
db_denydatareader - any user who do NOT have select priviliges
db_denydatawriter - any user who do NOT have insert , update and delete privileges
HTH
Regards,
Badri.

Exchange 2010 - visibility of items in Public Folders

Hello all,
I already posted this question to the German Exchange 2010 forum, but have not gotten an answer yet. So I hope to be more lucky in the English forum.
Environment: Exchange 2010 SP3 RU4, 2 replicas for Public Folders, Outlook 2007 cache Mode
Problem:
Some of our users have a phenomenon when working with mail enabled Public Folders:
User has the focus set to Public Folder A, an email is sent there (and correctly delivered) but remains invisible to the user. When he changes the focus to point to his inbox or to Public Folder B and directly changes back to folder A he can see the email.
Other users can see the email directly on delivery without leaving the folder first.
When an affected user adds Public Folder A to his Public Folder Favorites he can see that an email is delivered from the change in numbers of unread mails (number in brackets behind folder name).
I already checked the Exchange server to see if there is a replication related problem (though the default Public Folder DB is the same for all mailbox databases). Even after a successful replication an effected user does not see the email unless he leaves
the folder and re-opens it.
As the problem does not affect all users having permissions to this folder I picked one affected user and tried to remedy the issue as follows:
- deleted the existing Outlook profile and re-created it => without success
- deleted the user profile and re-created it => without success
We use Outlook Cache Mode (set by policy, so the user cannot deactivate it) but there is no Public Folder data downloaded.
When I create a new mail enabled Public Folder to test the scenario with an affected user everything works without problems, he can see an email on delivery.
As far as I know this problem occurs with only two folders (and for both folders only a few users are affected - different users for each folder) I do not know what else to do. Can someone please give me a hint where to look at? Thanks in advance.
Kind regards,
Klaus

The user is caching the public folder. When he changes the focus and goes back, it tells Outlook to update. In my experience, I've seen that Outlook only gets the update notices for the primary mailbox, so cached shared mailboxes are generally
rarely updated. We have stopped caching shared mailboxes for this reason and others. Think of the following scenario:
Ten different users perform actions on items in a shared mailbox
When they first get the message, they move it to a subfolder in the mailbox (so it won't be there for other users)
Since users are working in Cached mode, they will see an out-of-date image of the mailbox - they will move the item in their copy of the mailbox, but that won't be reflected in the other mailboxes until their copy updates to the server, then the server updates
the other copies. Talk about being lagged ...

System_Mail_Send - Get user email address

Hi,
I am trying to use System_Mail_Send to send a notification in the end of a Job Chain.
How I can retrieve user email address from SAP CPS user(UME)?
I want to use this information as To destination.
Regards,
André Ferreira

Hi Andre,
Actually, I had no time to test what I wrote earlier ... the code below should work in a library source:
// Example code to illustrate
package masalan;
import com.redwood.scheduler.api.model.SchedulerSession;
import com.redwood.scheduler.api.model.Subject;
import com.redwood.scheduler.api.model.enumeration.SubjectType;
import com.redwood.scheduler.api.scripting.variables.*;
public class user
public static String getEmailAddress(String username)
     //Default email address is [email protected]
      String defaultEmail = "[email protected]";
      if (username == null || username.trim().isEmpty()) return defaultEmail;
      SchedulerSession jcsSession = ScriptSessionFactory.getSession();
      Subject subject = jcsSession.getSubjectByTypeName(SubjectType.User, username);
      String email = "";
      if (subject != null) email = subject.getEmail();
      if (email != null && email.endsWith("@company.com")) return email;
      return defaultEmail;
You create REL entry points:
Name - getEmail
FQ Class Name - masalan.user
Method Signature - getEmailAddress(String)
Now, create a parameter Username on the job chain.
Parameter To should have the value =Custom.getEmail(chainParameters.Username)
You specify the username in the Username parameter, the email address will be retrieved from CPS. The user must have logged on to CPS at least once, alternatively, you can import the user.
Note that to import the user, you must assign at the very least the AccessScheduler action in UME.
Regards,
HP
Message was edited by: h. Carpenter - missed an import and add SchedulerSession
Message was edited by: h. Carpenter - Improved error handling, more secure code (it uses default email address if anything goes wrong or if somebody tries to use an external email address)

Managing Lync Online user traffic

Hi,
Trying to understand what is the best way to route the Lync online user traffic from corporate LAN to Lync online server and to users connected on Internet.
I see that suggested methods are route it via firewall or proxy
Challenges I see with firewall method are: Routing issue from certain subnets and risk of opening up so many ports for so many subnets.
In Proxy method I foresee performance issue.
Is there any other better method to achieve this?
Can we do something better using dedicated F5 big IP for Lync traffic alone? Is this supported?
Also is it mandatory to open up 50-60K port to have p2p call? Can’t it happen via Lync online edge server?
Please share your thoughts.
We use Lync 2013 on prim with 3 Lync pool in three different sites with total user base of 30k. Each site has dedicated internet connectivity.
Regards
Praveen R

According to your description, I suppose when you mentioned Lync online user you meant the Lync on premises users other than Office 365 account.
The 50k port ranges are required between internet and Lync A/V service.
You need to create persistent static routes on the internal interface to all internal networks.
The Lync Server 2013 scaled consolidated Edge topology is optimized for DNS load balancing for new deployments federating primarily with other organizations using Lync Server. If high availability is required for any of the following scenarios, a hardware
load balancer must be used on Edge Server pools for the following:
Federation with organizations using Office Communications Server 2007 R2 or Office Communications Server 2007
Exchange UM for remote users using Exchange UM prior to Exchange 2010 with SP1
Connectivity to public IM users
For details, check
http://technet.microsoft.com/en-us/library/jj656815.aspx
You need to open 50k port ranges to have peer-to-peer call.
Lisa Zheng
TechNet Community Support

I want is that I get user name!

Hi,
Below are my two annotated classes, namely, Requisition and User, that represent two tables requisitions and users. What I want is that I get
to get username from users table in my requisition query instead of user id which is stored in the requisitions.request_by.
Table field requisitions.request_by hold the ids of users ,ie, users.id values.
Here are my tables:
     users
               + id int(11)
               username varchar(15)
               password varchar(15)
               role int(11)
               last_login timestamp
     requisitions
               id int(11)
               post varchar(50)
               + request_by int(11)
               platform varchar(50)
               experience_required int(11)
               comments text
               date_requested date
Here is my Query for fetching requsition object in the RequisitionServiceimpl.java
     public List getRequisitions(User loggedInUser){
          Query queryRequsitions = em.createQuery("Select r FROM Requisition as r");
          List list = queryRequsitions.getResultList();
          return list;
Below are my two annotated classes Requisition and User:
import java.util.Date;
import javax.persistence.Column;
import javax.persistence.Entity;
import javax.persistence.Id;
import javax.persistence.PrimaryKeyJoinColumn;
import javax.persistence.SecondaryTable;
import javax.persistence.Table;
import javax.persistence.JoinColumns;
import javax.persistence.JoinColumn;
@Table(name="requisitions")
@SecondaryTable(name="users")
@Entity
public class Requisition {
     @Id
     private int id;
     private String post;
     @Column(name = "request_by")
     private int requestBy;
     private String platform;
     @Column(name = "experience_required")
     private int experienceRequired;
     private String comments;
     @Column(name = "date_requested")
     private Date dateRequested;
     // Name from users Table
     @Column(table="users", name="username")
     private String username;
     public int getId() {
          return id;
     public void setId(int id) {
          this.id = id;
     public String getPost() {
          return post;
     public void setPost(String post) {
          this.post = post;
     public int getRequestBy() {
          return requestBy;
     public void setRequestBy(int requestBy) {
          this.requestBy = requestBy;
     public String getPlatform() {
          return platform;
     public void setPlatform(String platform) {
          this.platform = platform;
     public int getExperienceRequired() {
          return experienceRequired;
     public void setExperienceRequired(int experienceRequired) {
          this.experienceRequired = experienceRequired;
     public String getComments() {
          return comments;
     public void setComments(String comments) {
          this.comments = comments;
     public Date getDateRequested() {
          return dateRequested;
     public void setDateRequested(Date dateRequested) {
          this.dateRequested = dateRequested;
// Only Getter for Users Table field username
     public String getUsername() {
          return username;
import javax.persistence.Column;
import javax.persistence.Entity;
import javax.persistence.Id;
import javax.persistence.Table;
@Table(name="users")
@Entity
public class User {
@Id
private Long id;
@Column(name="username")
private String name;
private String password;
private int role;
public String getName() {
return name;
public void setName(String user) {
this.name = user;
public String getPassword() {
return password;
public void setPassword(String password) {
this.password = password;
public Long getId() {
return id;
public void setId(Long id) {
this.id = id;
public int getRole() {
return role;
public void setRole(int role){
this.role = role;
Thank you,
Adil

I made this changes to Requisition.java and now I can get user name
import java.util.Date;
import javax.persistence.Column;
import javax.persistence.Entity;
import javax.persistence.Id;
import javax.persistence.JoinColumn;
import javax.persistence.OneToOne;
import javax.persistence.Table;
@Table(name="requisitions")
@Entity
public class Requisition {
@Id
private int id;
private String post;
@Column(name = "request_by")
private int requestBy;
private String platform;
@Column(name = "experience_required")
private int experienceRequired;
private String comments;
@Column(name = "date_requested")
private Date dateRequested;
@OneToOne
@JoinColumn( name="request_by", insertable=false, updatable=false)
private User user;
public int getId() {
return id;
public void setId(int id) {
this.id = id;
public String getPost() {
return post;
public void setPost(String post) {
this.post = post;
public int getRequestBy() {
return requestBy;
public void setRequestBy(int requestBy) {
this.requestBy = requestBy;
public String getPlatform() {
return platform;
public void setPlatform(String platform) {
this.platform = platform;
public int getExperienceRequired() {
return experienceRequired;
public void setExperienceRequired(int experienceRequired) {
this.experienceRequired = experienceRequired;
public String getComments() {
return comments;
public void setComments(String comments) {
this.comments = comments;
public Date getDateRequested() {
return dateRequested;
public void setDateRequested(Date dateRequested) {
this.dateRequested = dateRequested;
public User getUser() {
return user;
public void setUser(User user) {
this.user = user;
Edited by: adilsun on Jul 23, 2008 8:36 PM

Adobe Reader under 2 user accounts in Vista

I down loaded Adobe Reader 8.1 to my laptop running Vista Home Premium. My wife and I have separate user accounts in Vista, both being aministrative.
I have no trouble using Reader under my account but when my wife tries to use it under hers, she gets a "down loading file window" that runs until another window comes up that says "User agreement not accepted, must exit program". Also, Foxfire will open with a window that says "file not found". I've loaded and removed the program several times from both accounts with no change. Any HELP? You sure get no help from adobe!!!

If you want both accounts to have access to the same library completely - all tracks, playlists, ratings, etc. are identical and anything changed in one is completely and immediately reflected in the other, do this:
1) First, make sure that all the iTunes content is in the iTunes Music folder in the iTunes folder for one of the accounts. If you have content spread around the drive, this becomes a lot more difficult.
2) Copy the entire iTunes folder (not just the iTunes Music folder) to a folder that both accounts have read and write access to. I'm not entirely familiar with Vista's permissions, but the Users -> Public or Users -> Public -> Public Music should work, though it's possible you'll have to adjust the Security settings for the folder to allow both user accounts to have full access.
3) In each account, hold down the Shift key and launch iTunes. You'll get a dialog box offering to create an iTunes library or locate an existing one. Select the option to locate the library, and navigate to and select the iTunes folder in the Public (or other shared) location.
Both copies of iTunes will then point to exactly the same library files, so iTunes will be identical to both accounts and any changes made from one account will appear to the other. Note that you will probably not be able to have iTunes open in both user accounts at the same time via Fast User Switching.
Hope this helps.

ZCM Agent 11.3.x - Remote Management - Windows User Variable

I noticed this back during the initial deployment of 11.3.1, however have not had a chance to comeback to it. Now we are at 11.3.2 and the issue seems to still be.
On login we have a script that runs via a bundle it tracks user, date, time, computer login info to 2 locations, one on the local workstation to a hidden folder and 2 on the network.....
It looks like this in the log file
"pwolfe" , "192.168.x.x" , "LPTP-PWOLFE" , "Tue 02/03/2015" , "11:44:20.05"
What I have noticed is if someone uses ZRM (Zen Remote Management) to manage the workstation / shadow a user for help or any other such thing...the next logon on the box will look like this
"LPTP-PWOLFE$" , "192.168.x.x" , "LPTP-PWOLFE" , "Tue 02/03/2015" , "11:44:20.05"
Notice the user variable went from the username to the computer name with a dollar sign. I would say it could be the script, however see below it works fine with the old agent installed.
If you reboot the computer its fine, you can login and out time after time and it will display correctly. However if someone remote manages the computer it is broke until the next restart.
here is the script that runs:
for /f "Tokens=2 Delims=[]" %%i in ('ping -4 -n 1 "%computername%"') do set IP=%%i
Echo "%username%" , "%IP%" , "%ComputerName%" , "%date%" , "%Time%" >>"\\192.168.x.x\support\utilities\logfiles\IPaddr essLog.txt"
Echo "%username%" , "%IP%" , "%ComputerName%" , "%date%" , "%Time%" >>"C:\Utilities\IPaddressLog.txt"
This is being called as a launch item under a user run bundle, it is set to run as logged in user.
This is not happening on the older 11.2.4 separate Zone / server setup that is still in use for the majority of people. Just on the newer 11.3.x environment.
If I remove the 11.3.x agent and install the 11.2.4 agent and point it to the old environment / server it works fine.
Any ideas?
Thanks,
Patrick

Originally Posted by CRAIGDWILSON
What happens if you create a Shortcut to this bundle and run it manually after the desktop is up and active? (after a RC session that messes stuff up?)
What happens if you create a bundle that runs "cmd.exe" as logged on user and run it manually while this other bundle is having issues? (type "set" from the cmd session....)
Thanks Craig,
I finally got some time to look at this again.
It appears on the first logon to a computer it runs correctly, if a Remote Management session takes place and once logged off and a log in is initiated you get the incorrect information. If you run the application from the Zen App Window it displays correctly. If you reboot the computer it works as expected for the first logon and then stops working if a remote session is initiated.
3 Straight logons, the 4th entry is when I ran it manually from the zen app window:
"pwolfe" , "192.168.30.75 " , "TDLARM280-50125" , "Tue 03/03/2015" , "14:53:33.77"
"TDLARM280-50125$" , "192.168.30.75 " , "TDLARM280-50125" , "Tue 03/03/2015" , "14:54:51.09"
"TDLARM280-50125$" , "192.168.30.75 " , "TDLARM280-50125" , "Tue 03/03/2015" , "14:57:24.29"
"pwolfe" , "192.168.30.75 " , "TDLARM280-50125" , "Tue 03/03/2015" , "14:58:22.51"
Here is the "Set" CMD
ALLUSERSPROFILE=C:\ProgramData
APPDATA=C:\Users\pwolfe\AppData\Roaming
CommonProgramFiles=C:\Program Files\Common Files
CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files
CommonProgramW6432=C:\Program Files\Common Files
COMPUTERNAME=TDLARM280-50125
ComSpec=C:\Windows\system32\cmd.exe
DEFLOGDIR=C:\ProgramData\McAfee\DesktopProtection
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Users\pwolfe
LOCALAPPDATA=C:\Users\pwolfe\AppData\Local
LOGONSERVER=\\TDLARM280-50125
NUMBER_OF_PROCESSORS=4
NWLANGUAGE=ENGLISH
NWUSERNAME=pwolfe
OS=Windows_NT
Path=C:\ProgramData\Oracle\Java\javapath;C:\Progra m Files (x86)\Intel\iCLS Clien
t\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows
\System32\Wbem;C:\Windows\System32\WindowsPowerShe ll\v1.0\;C:\Program Files\Inte
l\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Mana
gement Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management En
gine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Comp
onents\IPT;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Progra
m Files (x86)\Novell\ZENworks\bin;C:\Program Files (x86)\QuickTime\QTSystem\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WS F;.WSH;.MSC
PROCESSOR_ARCHITECTURE=AMD64
PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=3a09
ProgramData=C:\ProgramData
ProgramFiles=C:\Program Files
ProgramFiles(x86)=C:\Program Files (x86)
ProgramW6432=C:\Program Files
PROMPT=$P$G
PSModulePath=C:\Windows\system32\WindowsPowerShell \v1.0\Modules\
PUBLIC=C:\Users\Public
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\Windows
TEMP=C:\Users\pwolfe\AppData\Local\Temp
TMP=C:\Users\pwolfe\AppData\Local\Temp
USERDOMAIN=TDLARM280-50125
USERNAME=pwolfe
USERPROFILE=C:\Users\pwolfe
VSEDEFLOGDIR=C:\ProgramData\McAfee\DesktopProtecti on
windir=C:\Windows
WINDOWS_LOGIN=0
windows_tracing_flags=3
windows_tracing_logfile=C:\BVTBin\Tests\installpac kage\csilogfile.log
ZENWORKS_HOME=C:\Program Files (x86)\Novell\ZENworks

Adding users in OCS R2

dears,
is there a way or script that i can use so i can add a mailbox, calender and assigne a portal to users on OID why do i have to add a mailbox, calendar and assigne a portal for every user created on OID alone it taks time. or is there a portal for administarato that he can login and creat the user on oid and a mailbox, calendar and assigne a portal for him form one place only

There are three main comand Line programms that you need to use
The first is LDAPADD and LDAPMODIFY, you can look these up to see how its done but below is a couple of examples
ldapadd -p 4032 -h www.mymachine.org -D "cn=orcladmin" -w <orcl password> -f newuser.ldif -x
The newuser.dif file looks like
dn: cn=jinky.jenkins, cn=users, dc=mydomain, dc=org
userpassword: m0nday
mail: [email protected]
objectclass: top
objectclass: person
objectclass: inetorgperson
objectclass: organizationalperson
objectclass: orcluser
objectclass: orcluserv2
orclactivestartdate: 20031020000000z
sn: jinky.jenkins
cn: jinky.jenkins
You need to also run ldapmodify using the same flags but with the following LDIF file
dn: cn=OCS_PORTAL_USERS, cn=Groups, dc=hubsdale, dc=org
changetype :modify
add: uniquemember
uniquemember: cn=jinky.jenkins, cn=users, dc=hubsdale, dc=org
To add an calendar user simple run
unidssearch
this will output all of the OID users who are not calendar users
example
A DID=cn=jason.gardiner,cn=users,dc=hubsdale,dc=org
A DID=cn=julian.lintell-smith,cn=users,dc=hubsdale,dc=org
A DID=cn=robert.chubb,cn=users, dc=hubsdale,dc=org
A DID=cn=lecturer,cn=users, dc=hubsdale,dc=org
A DID=cn=student,cn=users, dc=hubsdale,dc=org
A DID=cn=PORTAL_ADMIN,cn=users,dc=hubsdale,dc=org
A DID=cn=PORTAL,cn=users,dc=hubsdale,dc=org
A DID=cn=PUBLIC,cn=users,dc=hubsdale,dc=org
Next what you need to do is
uniuser -add "DID=cn=James Alexander, ou=Research, o=Acme, c=US" -n 134
Obviously put cut and paste the DID info for your user into the -add command
Notes can be found at the following URL
http://bigip-steltor.oracle.com/notes/corptime-server/5_4/admin/chapter6.htm#1019416
Finally you need to add the email user...
To do this you need to create a file of the following structure
[email protected]
orclmailquota=400000000
baseuserdn=cn=who.ever,cn=users,dc=mydomain,dc=org
I called the file email_user_details
Then you just
oesucr email_user_details
and that should do it
We www.xicon.com spent 3 days writing a java utility that adds either one user and reads a file of usernames and passwords and then creates them all so it might be an idea for you to do the same.
Cheers
Paul

PUBLIC pseudo user

Similar Messages

Maybe you are looking for