Recreating User GW Account
Hello All,
A little background... we have one user who has had GroupWise issues since she started with our company about two years ago. These issues have manifested as random crashes and lock ups in the GroupWise client. Sometimes it's related to clicking reply, sometimes related to opening the address book and sometimes it's in the middle of typing a message. Over this time I have run structure, contents, fix on her mailbox numerous times, though I do run the same maintenance on our whole PO each weekend. Over that time I have also completely rebuilt her mailbox indexes twice and run a structural rebuild twice. The issue has also followed her starting with GW 8 and on through our GW 2012 upgrade and client versions all the way up to the current version. On the hardware side, she is on her 3rd system, each was formatted to factory start before it was given to her.
So now the only other option I can come up with is to completely recreate her GroupWise account. As a general plan I want to rename her current account, create a new account, associate her new account with her eDir user, share the folders from her old account with her new one, transfer her messages over, export then import any personal address books and then make sure her new account is on the correct distribution lists. As I'm planning through the process though, I do not see a way to change the edir-GW association. Anyone know if that is possible? Are there any other suggestions for a course of action or anything you can see I am forgetting about.
Thank you for any help with this project!
Daniel Joaquin
Daniel,
here's what could also do:
- export address books
- archive all mail and calendar items
- delete the Groupwise account
- create a new Groupwise account
- note the FID
- use the archive editor to change the FID
- unarchive all items
- import address books
If you follow your plan: Highlight a Groupwise or edir account in C1, click Tools, Groupwise Utilities, GW/eDirectory association and select disassociate or associate.
Was that what you were looking for?
Uwe
Novell Knowledge Associate
Please don't send me support related e-mail unless I ask you to do so.
Similar Messages
-
OBICS Login & issues while recreating users
Using Oracle BI Cloud Service we encounter an error during Self Service Password Reset:
IAM-3040027 is the message
Does anyone know what this means?
Does anyone know whether recreating the user (remove & create by the Identity Domain Admin) could resolve this issue?
And while recreating a user account, can he still use his BI catalog files (My Folder etc)?
Being an Identity Domain Admin I would like to know this or other issues while recreating users.You may want to read this support note:
OIM 11.1.2.2.x - Forgot Password Gives Vague Error Msg On UI If Password Policy Is Not Met (Doc ID 1998845.1) -
How do I move all my files from one User Profile (account) into another?
I needed to create a new account and want all of my files accessible in the new one.ok, what you're learning right now is 101 unix, which is good. Unix is a good thing
now: the way unix works, and macos (which uses unix underneath) the files and folders work like a hierarchy.
the start of that tree is /
so, if you were to do:
cd /
(cd means change directory)
it will bring you at the highest branch of the file system.
cd /Users
will bring you to where all the users are.
to see whats in /Users you can use your friend ls command
ls means list files/directories
so:
cd /Users
ls -la
(the -la here means show all (even hidden) and long format (very verbose)) this flag is very optional.
you will see
fred
user2
for example.
if you want to see the desktop of user2 you would change directory to it then list the files.
for example:
cd /Users/user2/Desktop
Note that the files and directory are case sensitive, so, desktop is NOT the same as Desktop, or DESKTOP
ls -la
you should then be able to see everything in users2 desktop
you could have done as well the same thing in smaller steps, for example:
cd /
cd Users
cd user2
cd Desktop
this is the equivalent of cd /Users/user2/Desktop
So, for your file, i don't know where it was, but know that if you log in as user2, it will directly put you in
/Users/user2
which most likely the file you had created from the other user was in /Users/user1
if you copied all the files from /Users/original_user to /Users/secondUser
most likely yes, all your mail, bookmarks etc would be copied over.
so in your case.
sudo chown -R seconduser:staff /Users/secondUser
should work
Remember that if you start a path with the character / it means start from the root of the file system, at the highest top you can ever get.
so
cd /Users/fred
is not the same as
cd Users/fred
unless you were in / already
i know it may be confusing at first but it's actually very logical if you play with it.
to simplify, think of it that / means C:\ on windows
you can't go any higher than C:\ (in a way)
if you're unsure which directory you're currently in, you can always type:
pwd
it will tell you where you are.
for example:
cd /
pwd
this shows /
cd Users
pwd
this now shows /Users
cd /System/Library
pwd will show /System/Library
cd /
cd /Users
cd fred
cd Library
pwd will show /Users/fred/Library
unix can look very scary but it's actually vital and very necessary to do tasks sometimes that would take for ever to do via the windows. This is good learning.
so for the myfile you had created, i can't tell you where it is, at the time you created, if you can do a pwd command you'll know the path,
ls -la (this shows all the files where you are)
if you see myfile in the list
do a pwd
whatever is return, the real location of the file would be:
whatever pwd returned / myfile
I hope that makes sense. -
How many different iPods can I sync with my single iMac user/iTunes account?
Good Day to All,
Can anyone tell me how many different iPods & iPhones can I successfully consistently sync/integrate using my one "user account" in iTunes on my iMac? This ist situation:
I have always (and only) synced etc. my iPhone with my one iTunes UID which is under my ONE "User Account" on my iMac. Recently, my elderly folks gave me 2 iPods they have never used. One is a little silver 4GB shuffle (the little guy with a built on "belt clip" & it verbally tells you what song and artist is playing. The other is also an iPod shuffle ( only 1GB), also has the metal "pinch to open; belt clip"; also no display, however it came with a little USB Dock and THIS ONE has all of the user controls on the face of it in a circular patter of course..
To have COMPLETE successful "interaction/integration/syncing" etc (with no issues/complications etc) with my iTunes currently and previously only used with my iPhone, do I have to create two new additional "User Login/accounts" on my iMac (one for each iPod) to have all three if my devices work perfectly fine, or can I just use my same iMac login (UID) & iTunes that I use with my iPhone and have no worries?
(ie: I created my girlfriend her own iMac login UID which she has always used for backing up/syncing etc her iPhone with HER iTunes library etc)
In short, does iTunes have the ability to have multiple iPods & my iPhone under my one existing iTunes account AND using the same single iMac login/UID I've always used with my iPhone?
Obviously, I know I could create an iMac login for my mom's, another for my dad's & create them both their individual iTunes accounts, but they really don't want to have to worry about dealing with all that. I'm teetering between just treating them as my iPods and mixing/adding their limited CD's into my library (again, if iTunes allows multiple iPods etc as explained above..
OR; my other thought would be (again, if one iTunes account can integrate the two iPods as seperate devices and to just create ONE iMac UID login and ONE iTunes account under my dad's name, and use that one account for both of their music, both of their iPods, importing their CD's into the same iTunes library, then when syncing etc. just doing selective transfers/sync's of the specific music for each iPod... Even then, will iTunes be able to differentiate the two as far as backups/restored etc? I think answering my own question as I type due to the cloud... For completely individual cloud interaction/integration, I would def need to create each of them their own iTunes accounts, otherwise they will have all of each other's songs on their devices.. (ie: And my dad def doesn't want to worry about skipping over my mom's Journey or Aerosmith tunes to get to his Willie Nelson and vice versa for example.
(Sorry sooooo drawn out; thinking outloud) I guess it seems obvious that since all their digital music has to be on my iMac, I really should create them each their own iMac UID login as well as their own individual iTunes Acounts to insure cloud services work easily for restores/backups etc...
Thanks for stumbling thru my thought processes here (if I didn't lose ya long ago); I'm exhausted and throwing thoughts at the classroom board to see what sticks.... The best easiest way that is.. (The two aren't always the same obviously!)
Thank you all for your precious time and consideration and most if all; YOUR PATIENCE!! Any confirmation if the options and suggestions are greatly appreciated. You know, gotta take care of the folks & what is the simplest for them as just end users is the most important or they'll NEVER bother with them in the end...
Respectfully appreciative,
DBYou can use as many iPods with one iTunes library as you want.
(108420) -
LaserJet P1505n printing slow just for user-level accounts in Win7
I have several workstations running Win7 Pro 64-bit that have been installed as replacements for XP machines. All of them print to one of several P1505n printers, and are using the latest drivers from HP. Under XP there were no problems printing to these printers, but the Win7 machines have significant delays when trying to print. The Windows test page prints instantaneously, but printing from any other application has a delay of up to a full minute before the job begins to print. Once the job prints, it prints without issue.
One thing that I have noticed during my testing seems to point to permissions. If I am logged in using my admin-level account, everything prints as it should, with no delays at all. Once I log in with a user-level account, however, the delays begin. I found the driver files at C:\Windows\System32\spool\drivers\x64\3, but giving "everyone" full control over those files does not help.
Is there anything else that I should be looking at?
Thanks in advance!
DonnyIn the end, I was able to resolve the problem by installing the Vista x64 drivers. No playing with permissions necessary.
-
Help with user.update.accounts[Lighthouse].changes[roleInfos].new
When I access user.update.accounts[Lighthouse].changes[roleInfos].new it returns a list of XMLObjects, which are the new list of roles to be provisioned in IDM. The following is an example:
<GenericAttribute>
<Object>
<Attribute name='attribute'>
<Object name='Production Server'>
<Attribute name='directlyAssigned'>
<Boolean>true</Boolean>
</Attribute>
<Attribute name='state' value='assigned'/>
<Attribute name='type' value='BusinessRole'/>
</Object>
</Attribute>
</Object>
</GenericAttribute>I would like to execute a specific transition when a specific role is identified within work flow transition from this list. So I thought I could try the following:
<contains>
<ref>user.update.accounts[Lighthouse].changes[roleInfos].new</ref>
<s>Production Server</s>
</contains>This does not work, but in my workflow debug I see the following:
Resolved reference user.update.accounts[Lighthouse].changes[roleInfos].new = [Corporate Domain Administrator
assignedBy = [Information Security Specialist]
assignmentType = conditional
state = assigned
type = ITRole
, Employee Production
assignedBy = [Information Security Specialist]
assignmentType = required
state = assigned
type = ITRole
, IT Organization
assignedBy = [Information Security Specialist]
assignmentType = required
state = assigned
type = ITRole
, Information Security
assignedBy = [Information Security Specialist]
assignmentType = required
state = assigned
type = ITRole
, Information Security Specialist
directlyAssigned = true
state = assigned
type = BusinessRole
, MachineEX bzncvs02ex
assignedBy = [Information Security Specialist]
assignmentType = conditional
state = assigned
type = ApplicationRole
, MachineEx bznsa02ex
assignedBy = [Information Security Specialist]
assignmentType = conditional
state = assigned
type = ApplicationRole
, MachineEx bznwsint01
assignedBy = [Information Security Specialist]
assignmentType = conditional
state = assigned
type = ApplicationRole
, Technology Organization
assignedBy = [Information Security Specialist]
assignmentType = required
state = assigned
type = ITRole
]My question is how can I check for something specific in XMLobject list similar to the following or Java code?
<contains>
<ref>user.update.accounts[Lighthouse].changes[roleInfos].new</ref>
<s>Production Server</s>
</contains>I solved my problem and wanted to share the solution with yall
1. First off the modifications are stored in a task instance, which is passed to the workflow engine
variables.user.update.accounts[Lighthouse].changes[roleInfos].new2. I created a class to parse the list of changes which are stored as XMLobject in a task definition
public Boolean roleChangeValidation(List<GenericAttribute> changes, String roleid)
String type = "MANUAL";
Boolean returncode = false;
if (changes != null) {
Iterator<GenericAttribute> it = changes.iterator();
do {
if (!it.hasNext())
break;
GenericAttribute change = it.next();
GenericObject value = change.get();
String name = value.getName();
if(this.Debug)
System.out.println(type + ":" + name);
if(value.containsValue(roleid))
if(this.Debug)
System.out.println(name);
returncode = true;
} while (true);
return returncode;
}3. I added the following actions to the update workflow, which passes the Roleid I am looking for and returns true if found.
<Action id='1' name='Validate Privileged Role'>
<expression>
<block>
<defvar name='zRoleChange'>
<new class='com.generic.util.zRoleChange'>
<Boolean>true</Boolean>
</new>
</defvar>
<set name='_tokencheck_'>
<invoke name='roleChangeValidation'>
<ref>zRoleChange</ref>
<ref>user.update.accounts[Lighthouse].changes[roleInfos].new</ref>
<s>Production Server</s>
</invoke>
</set>
</block>
</expression>
</Action>Edited by: OlympicAdmin on Feb 24, 2010 12:39 PM -
How to report with different time zone dynamically based on user's account?
Hello
I am wondering is there a way to change the report's date & time data based on user's locale setting in OBIEE?
Let's say the user log in to OBIEE with eastern time zone setting. The data that's in the database is storing a transaction of $400 at 1am Pacific time.
So when this user run a query which does something like 'select date, transaction, amount from date, transaction, sales where this = that', it should display the $400 amount done at 4am eastern time instead of 1am pst.
What I have done is to have data stores in date dimension to be UTC time, and I have also changed the data type of the date column to be 'local time zone'. DB is Oracle DB 11G now.
Now this query works perfectly well in the DB as long as I run the following commend first:
Alter session set time zone = 'whatever my time zone'
and then
Select date, transaction from tables..
The date displayed will automatically be converted into different time zone..
Since everything is working nicely from Oracle DB level, I need to know how to make it work when OBIEE sends the same query down to the DB..
I know that, probably I will have to enter the above alter session commend in the connection pool, however, I can't hardcode the time zone value.
I also don't want to store user's time zone in the user table because these users travels a lot. So even if his table setting is EST, but at a given day he can be traveling to pst time zone and view reports.
Is there a way to dynamically set the time zone based on user's account locale setting?
Let me know if you guys have implemented something similar or not
Thanksgaruda wrote:
Hello Sarvan
I have already done that part at the DB level and it is working perfectly with alter session commend before the query.
My question is, how do I configure OBIEE so that before each user runs a report from BI, the alter session commend will be fired with each user's personal locale time zone setting passed through so that each user will be able to view data according to their different time zone?did you tried with Connection scripts(Execute On connect) in Connection pool.write ur Alter commend to Change Time Zone in this script box. -
Hi,
I have a setup ISE 1.1.1. Users are getting authenticate against AD. Everything is working fine except some users report disconnection. I see in the ISE that (Authentication failed: 24415 User authentication against Active Directory failed since user's account is locked out). Users are using Windows 7 OS.
Error is enclosed & here is the port configuration.
Port Configuration.
interface GigabitEthernet0/2
switchport access vlan 120
switchport mode access
switchport voice vlan 121
authentication event fail action next-method
authentication event server dead action reinitialize vlan 120
authentication event server alive action reinitialize
authentication host-mode multi-auth
authentication order mab dot1x
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
mab
dot1x pae authenticator
dot1x timeout tx-period 60
spanning-tree portfast
ip dhcp snooping limit rate 30 interface GigabitEthernet0/2
switchport access vlan 120
switchport mode access
switchport voice vlan 121
authentication event fail action next-method
authentication event server dead action reinitialize vlan 120
authentication event server alive action reinitialize
authentication host-mode multi-auth
authentication order mab dot1x
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
mab
dot1x pae authenticator
dot1x timeout tx-period 60
spanning-tree portfast
ip dhcp snooping limit rate 30
Please help.The error message means that Active Directory server Reject the authentication attempt
as for some reasons the user account got locked.I guess, You should ask your AD Team to check in the AD
Event Logs why did the user account got locked.
Under Even Viewers, You can find it out
Regards
Minakshi (Do rate the helpful posts) -
Hi All,
we created Users and Accounts using RIDC.
Now need to map user Account mapping programmatically.
Let me know any suggestion.
Thanks to all.Hi ,
Infact while creating the user itself this could have been done using the following :
ADD_USER with the following parameters :
HDA format with optional parameters:
@Properties LocalData
IdcService=ADD_USER
dName=jsmith
dUserAuthType=LOCAL
dFullName=Jennifer Smith
dPassword=password
dEmail=[email protected]
@end
@ResultSet UserAttribInfo
2
dUserName
AttributeInfo
jsmith
role,admin,15,role,contributor,15
@end
Now that the users are all created you will need to use the EDIT_USER service call to add accounts to the users :
The format for doing this is described with the mandatory and optional parameters : http://docs.oracle.com/cd/E23943_01/doc.1111/e11011/c04_core.htm#CSSRG2678
Hope this helps .
Thanks
Srinath -
Recreate USER - User Defined Report
Dear all,
you might find this useful!
For those who are interested in saving the definition of a user before dropping him.
I have created this user-defined report. You may save this and import it as user defined report.
If you have additions please let me know:
-------------- CUT HERE -------------------
<?xml version="1.0" encoding="UTF-8" ?><displays><display id="37db04bc-0120-1000-8003-a609686616e5" type="" style="Code" enable="true">
<name><![CDATA[RECREATE User]]></name>
<description><![CDATA[Create a script to recreate a user]]></description>
<tooltip><![CDATA[]]></tooltip>
<drillclass><![CDATA[null]]></drillclass>
<CustomValues>
</CustomValues>
<query>
<sql><![CDATA[select line from
select 1 as line_no,
'CREATE USER ' || username || CHR(10) ||
' IDENTIFIED BY VALUES "' || password || '"' || CHR(10) ||
' DEFAULT TABLESPACE ' || default_tablespace || CHR(10) ||
' TEMPORARY TABLESPACE ' || temporary_tablespace || CHR(10) ||
' PROFILE ' || profile ||
' ;' || CHR(10) || CHR(10) as line
from dba_users
where username = :USERNAME
UNION
SELECT 2 as line_no,
'ALTER USER ' || username || CHR(10) ||
' QUOTA ' || bytes || ' ON ' || tablespace_name ||
';' || CHR(10) || CHR(10) as line
FROM
dba_ts_quotas
where username = :USERNAME
UNION
select 3 as line_no,
'GRANT ' || privilege || ' TO ' || grantee || decode(admin_option,'NO',' ','YES',' WITH ADMIN OPTION ') ||
';' || CHR(10) || CHR(10) as line
from dba_sys_privs
where grantee = :USERNAME
UNION
select 4 as line_no,
'GRANT ' || privilege || ' ON ' || owner || '.' || table_name ||
' TO ' || grantee || decode(grantable,'NO', ' ','YES',' WITH GRANT OPTION ') ||
';' || CHR(10) as line
from dba_tab_privs
where grantee = :USERNAME
UNION
select 5 as line_no, ' '|| CHR(10) as line from dual
UNION
select 6 as line_no,
'GRANT ' || granted_role || ' TO ' || grantee || decode(admin_option,'NO', ' ','YES',' WITH ADMIN OPTION ') ||
' ;' || CHR(10) as line
from dba_role_privs
where grantee = :USERNAME
UNION
select 7 as line_no, ' '|| CHR(10) as line from dual
UNION
select 8 as line_no, 'ALTER USER ' || :USERNAME || ' DEFAULT ROLE ' || defrole || ' ;' as line from
(select rtrim(listagg,',') as defrole from (
select
xmltransform
sys_xmlagg
sys_xmlgen(granted_role)
xmltype
'<?xml version="1.0"?><xsl:stylesheet version="1.0"
xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
<xsl:template match="/">
<xsl:for-each select="/ROWSET/GRANTED_ROLE">
<xsl:value-of select="text()"/>,</xsl:for-each>
</xsl:template>
</xsl:stylesheet>'
).getstringval() listagg
from dba_role_privs
where grantee = :USERNAME
order by line_no
)]]></sql>
<binds>
<bind id="USERNAME">
<prompt><![CDATA[Name of the User to recreate:]]></prompt>
<value><![CDATA[TRAINER01]]></value>
</bind>
</binds>
</query>
</display>
</displays>
-------------- CUT HERE -------------------1) Create user defined parameters in builder
2) While running in web give paramform=yes. This will cause paramform to be displayed and user can enter the values
Thanks
The Oracle Reports Team -
SYSTEM user's accounts get locks automatically
Oracle SYSTEM user's account gets lock automatically after every 4-5 days. I user to run following query which unlocks the account:
SQL:\>ALTER USER system ACCOUNT UNLOCK;
How I can stop this happening? I am not able to alter profile for unlimited attempts also.
Is there any workout, please help me....In my opinion, you should immediately find out who constantly tries to guess the password of system instead of making it possible for him to try that indefinitely without locking the account. That is like switching off the annoying alert sirene if someone constantly tries to break in.
You should
SQL> connect sys/oracle@prima as sysdba
Connected.
SQL> alter system set audit_trail=true scope=spfile;
System altered.
SQL> startup force
ORACLE instance started.
Total System Global Area 313860096 bytes
Fixed Size 1299624 bytes
Variable Size 285215576 bytes
Database Buffers 20971520 bytes
Redo Buffers 6373376 bytes
Database mounted.
Database opened.
SQL> audit session whenever not successful;
Audit succeeded.
SQL> select count(*) from dba_audit_trail;
COUNT(*)
0
SQL> connect system/wrongpw@prima
ERROR:
ORA-01017: invalid username/password; logon denied
Warning: You are no longer connected to ORACLE.
SQL> connect sys/oracle@prima as sysdba
Connected.
SQL> select count(*) from dba_audit_trail;
COUNT(*)
1 -
How to recreate user environment profile
Hi All,
Does any one have any idea about recreate user environment profile ?
SAP User home directory is deleted, so SAP system can't be started.
OS version is solaris 10.5.
Regards.
WenjrIf you have backup is the best options.
If not
proceed as follow.
1.Copy the /home/sidadm directory of sidadm from qa or dev server.
2.Adapt sidadm enviroment into .sh or .csh depending upon the shell sidadm uses.
3.Adapt instance start and stop script
4.Probably you may need to adapt the .kshrc or .cshr??
5.You can do ls -la in dev or qa and check the files required
It is easy if you have no option but restoration from backup is the best.
All the best.
Amit -
I'm trying to share a folder between users on a single mac. I want both users to be able to read and write so the folder stays current on both accounts. I put the folder in "shared," set permissions on folder so other user can read and write, enabled file sharing, but can't find the folder on the second user's account. Any help?
Did you log out of one account and into the other or just used Fast user switching?
Is the permissions set to anyone?
When you move data to teh Shared folder is it copied or just moved?
If copied then it's not a folder both can access, just a way station like a USB thumb drive that things are coped too and off of likely.
You can run this #5 on each user account to reset the user permissions once they are taken back out of the Shared folder
Step by Step to fix your Mac -
Unable to deploy user mobility account
Hello
I upgraded my Mac mini server to yosemite and also bought the new server OS
On my imac 1, I did an upgrade version of maverick to yosemite, mean that my network account existed. And everything work
On my imac 2, I decided to do a clean installation of yosemite because this imac is an old one. Everything work except network user deployment
When I tried to connect to one of my user network account, identification works but I had a message which said that the account can not be create for now
Any idea?Solved
I forgot to add the server adress on my computer network DNS
so it was not able to catch the server domain -
HT4796 how to delete the user pc account on my mac?
i tried to transfer files from my pc to mac. now i want to delete the user pc account on my mac because it didn't transfer the files i needed.
Ensure it's logged out, open the Users & Groups pane of System Preferences, unlock the pane, select it, and press the - button.
(68006)
Maybe you are looking for
-
Why firefox has slow response when i 'm saving pictures to hard disk?
I have windows 7 64 bit and Mozila firefox ver. 17.0.1. I have the following problem. When i try to save a picture from a site (right mouse click and save as) to the hard disk of my pc, the response of firefox is slow. It takes about 6 to 10 seconds.
-
Dear guys, we are planning to bypass the Enterprise Portal and separating the content player in separate host and Content Repository in separate host. adding to that we are planning the Content Server by using IIS. The operation speed of the Enterpr
-
Can i make an appointment for update the macbook pro
Hi I use to have a macbook I brought from China that when i came to US i want to instal for new edition in the store, dose i have pay any fee for that? if not, i want to make an appointment for instal it. thanks.
-
My original question says it all. I cannot get my Big Fish Games toolbar to reload. It will with internet explorer but not with your product's new upgrade. I wish to undo the upgrade to the earlier version so I can get my toolbar back.
-
Error "KSRPC.SendPacket: Timed out on Socket header" when stopping iAS
I am using iAS 6.5 on Win2k. I frequently get this error when stopping the app server: KSRPC.SendPacket: Timed out on Socket header Any ideas? Anything to worry about? Thanks.