Relationship between OAM,OIM,OID

Hi Gurus,
I am very very new to fusion middleware ,i would like to know the relationship between following in simple terms.
Oracle Access Manager
Oracle Identitiy Manager
Oracle Internet directory
Below are my understanding correct i'f im wrong
OID is like LDAP where passwords and passwords and security policies will be saved.
redirecting to similar question or post is also fine.
Thanks in advance...

OIM and OAM may use OID to write/retrieve user details from OID.
Lets say a user joined an organization. Now as per onboarding process, you reconcile user from trusted source to OIM and sync that user to OID using LDAP sync. Now when you try to access an application which is protected by OAM, the authentication and authorization of that user happens against OID if it is configured as user identity store.

Similar Messages

OAM OIM OID OVD ?

I always hear these things from Oracle, OAM, OIM, OID and OVD. are they the same thing? if not, I belive they are related since people always mention them together, then, what's relationship? please clarify
I'm new to Oracle identity management products. please let me know if there are any others products closely relate to above in this family.
Thanks

Hi,
Each and every thing performs specific role,It will interdependent you can say when it comes to implementation.
OAM->oracle access manager=performing authentication and authorization of web based and non webbased resources by protecting them.
OIM->oracle identity manager =managing identities of organisation,integrating and provisioning(giving access) to various application and single sign on.
OID->oracle internet directory=its one of the directory server like sun directory server,AD for managing user data.
OVD->oracle virtual directory=its a virtual directory server which provides only view from multiple directory servers.
Please go through oracle docs for more info.
Thanks,
Ragu.

Self registration error in OIM-OID-OAM 11g

Hi,
We are using OIM,OID,OAM 11G,in clustering mode.We are facing a problem on self registration process.
For every alternate self registration request,system is throwing an error.After the self register user request has got approveod,I have checked the request status in 'advanced' panel its saying ; " IAM-3051103:The create operation on user entity failed in action stage.:"
This is really a big mysterious thing to me,1st self registration was successful,2nd was throwing an error , again 3rd was success ,4th was failure , 5th was success and 6th was failure.
Below is the corresponding error message in log file for the failed request.
<Mar 21, 2011 2:22:30 PM CDT> <Error> <oracle.iam.identity.usermgmt.impl.handlers.create> <IAM-3051103> <The create operation on user entity failed in action stage.
oracle.iam.platform.entitymgr.MissingRequiredAttributeException: [act_key]
 at oracle.iam.platform.entitymgr.impl.EntityManagerImpl.checkRequired(EntityManagerImpl.java:1448)
 at oracle.iam.platform.entitymgr.impl.EntityManagerImpl.createEntity(EntityManagerImpl.java:261)
 at oracle.iam.platform.entitymgr.impl.EntityManagerImpl.createEntity(EntityManagerImpl.java:237)
 at oracle.iam.identity.usermgmt.impl.handlers.create.CreateUserActionHandler.execute(CreateUserActionHandler.java:141)
 at oracle.iam.identity.usermgmt.impl.handlers.create.CreateUserActionHandler.execute(CreateUserActionHandler.java:68)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
 at java.lang.reflect.Method.invoke(Method.java:597)
 at oracle.iam.platform.kernel.impl.EventHandlerDynamicProxy.invoke(EventHandlerDynamicProxy.java:30)
 at $Proxy235.execute(Unknown Source)
 at oracle.iam.platform.kernel.impl.OrchProcessData.runActionEvents(OrchProcessData.java:1028)
 at oracle.iam.platform.kernel.impl.OrchProcessData.runEvents(OrchProcessData.java:637)
 at oracle.iam.platform.kernel.impl.OrchProcessData.executeEvents(OrchProcessData.java:220)
 at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.resumeProcess(OrchestrationEngineImpl.java:669)
 at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.resumeProcess(OrchestrationEngineImpl.java:716)
 at oracle.iam.platform.kernel.impl.OrhestrationAsyncTask.execute(OrhestrationAsyncTask.java:108)
 at oracle.iam.platform.async.impl.TaskExecutor.executeUnmanagedTask(TaskExecutor.java:100)
 at oracle.iam.platform.async.impl.TaskExecutor.execute(TaskExecutor.java:70)
 at oracle.iam.platform.async.messaging.MessageReceiver.onMessage(MessageReceiver.java:68)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
 at java.lang.reflect.Method.invoke(Method.java:597)
 at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
 at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
 at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
 at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
 at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
 at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
 at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
 at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
 at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
 at $Proxy428.onMessage(Unknown Source)
 at weblogic.ejb.container.internal.MDListener.execute(MDListener.java:466)
 at weblogic.ejb.container.internal.MDListener.transactionalOnMessage(MDListener.java:371)
 at weblogic.ejb.container.internal.MDListener.onMessage(MDListener.java:327)
 at weblogic.jms.client.JMSSession.onMessage(JMSSession.java:4659)
 at weblogic.jms.client.JMSSession.execute(JMSSession.java:4345)
 at weblogic.jms.client.JMSSession.executeMessage(JMSSession.java:3821)
 at weblogic.jms.client.JMSSession.access$000(JMSSession.java:115)
 at weblogic.jms.client.JMSSession$UseForRunnable.run(JMSSession.java:5170)
 at weblogic.work.SelfTuningWorkManagerImpl$WorkAdapterImpl.run(SelfTuningWorkManagerImpl.java:528)
 at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
 at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
>
<Mar 21, 2011 2:22:30 PM CDT> <Error> <oracle.iam.platform.entitymgr.provider.ldap> <IAM-0042004> <An error occurred while un-reserving the user in LDAP, and the corresponding error is - java.lang.NullPointerException>
<Mar 21, 2011 2:22:30 PM CDT> <Warning> <oracle.iam.identity.usermgmt.impl.handlers.create> <BEA-000000> <null>
Any help would be really appreciated.
Thanks.

Hi,
I am assuming in clustered environment you are having two instances running.
It must be an issue with a single server,,because the problem is intermittent.
To see which server is causing problem....just perform the following steps:
1) Stop server1 and keep running server2..and fire new registration request...
2) stop server 2..and keep running server1.....and fire new registration request.
Using above, atleast you can see which server is causing the problem...
Regards,
J
Edited by: J_IDM on Mar 21, 2011 10:52 PM

Base IDM product should consist of OIM, OID, OVD, OAM and OIF ?

Hi Experts,
I want to understand what should be the very base IDM 11g Product should satisfy majority of client requirement. What is best Practices of Product combination one should have ?
1) OIM, OID, OVD, OAM and OIF 11g
2) OIM, OID, OVD, OAM 11g
3)OIM, OID, OVD and OIA 11g
Considering 11g & best pratices.
I would like to understand what Pack is must for what kind of requirement ?
There are so many product combination so confused what is best base Security Prodcut combination can be ?
Help Appreciated.
Thanks In Advance.
Edited by: 937775 on 31/05/2012 06:01

Thanks Gyanprakash for valuable Suggestion.
I have one more question,
Now to do the OIM,OID,OVD,OAM Security Stack Installaton,
can I use two VM 1) all security product (OIM,OID,OVD,OAM) 2) DB VM (I heard we do have database VM)
Could you mind sharing Info 1) what number of VM do I use for security Product Installation 2) Can I use DB VM or Database should be installed physically not on VM ?
Thoughts ?

OAM / OIM - Conceptual question

Hi all,
I'm trying to understand the overlap between OAM and OIM in terms of identity management. I'm going through the OAM manuals and it talks about OAM's Identity System in a way that very closely resembles a lot of what OIM does, ie. user management, groups, delegated admin, self admin, etc...
I'm trying to understand how these two fit together. I know OIM does a lot more in terms of provisioning to other resources... is OAM considered a resources that OIM provisions to? If you have OIM and OAM, it seems that there's now 2 repositories of user data....
Can someone explain (or point me to a doc that does) the relationship(s) between OIM and OAM, how they fit together, which drives the other, etc...?
Thanks very much
Alex

OAM's Identity System is web based self service tool for users to edit their information for their identity records. Forgot Password Service will help the users to reset their passwords. Oracle Access Manager's main functionality is the Single Sign On feature and to offer AU and AZ services. Also OAM's Identity System helps you to create/manage/delegate LDAP Dynamic Groups and Organizations. Remember, OAM will not be able to provision users with LDAP Accounts. You need to create LDAP Accounts and then you can manage the users via OAM Identity System. You can also create users from OAM Identity System but no one creates users from OAM Identity System in a corporate environment. OAM Identity System is designed to provision the Access Administrators with capability of creating/managing/delegating the tasks of Dynamic LDAP Groups which are in turn used in AZ rules for Access Policies. AFAIK, creating users and organizations from OAM - Identity System is not recommended. My recommendation for using the OAM Identity System is to limit the usage to LDAP Dynamic Group Creation. As a Access Administrator it will be very convincing to create the groups without contacting the LDAP Teams.
On the other hand, OIM can synchronize with Corporate HR systems/AD/LDAP and other authoritative identity sources and pull the records to OIM. Based on the business roles, OIM can automatically provision the users with all required resources with appropriate access rights. OIM also offers Forgot Password and Password Reset services which are recommended for usage in a corporate environment. Also I don't think you can create LDAP Dynamic Groups and Organizations in an authoritative LDAP via OIM.
Coming to the integration part, OAM can protect OIM and offer Single Sign On to OIM Services. OIM can provision users to OAM but not straight forwards as there is no connector provided for OAM OOTB. If you have both OIM and OAM still you have a single identity (user) store. Both OAM and OIM will talk to the single user store for synchronization. For OIM, you will have a user account in OIM System apart from the user directory but for OAM you will use the account from the user directory to access Identity and Access Services.

OAM-OIM 11g User Lockout Question

All,
We have a OAM and OIM 11.1.1.3 installation and i am testing the invalid login attempt scenarios and came across teh following situation. I was wondering if you could give me steps or some pointers for resolving this:
1. created an account [email protected] as xelsysadm and reset the password on first login
2. Have the following OIM default parameters (these are the only configs that i could find are possibly related to this)
XL.UnlockAfter - 0
XL.MaxLoginAttempts - 10
3. Entered incorrect password and for the initial 4 times i got the OAM login screen back with an error message "An incorrect Username or Password was specified"
4. After 5th attempt i just got the error message "Error
An incorrect Username or Password was specified"
5. I go back the http://oimservername:oimport/oim i get the login screen again and enter [email protected] with an incorrect password next 4 times (total 9 now) I get login screen back with "An incorrect Username or Password was specified"
6. after the 10th attempt with incorrect password i get a different error message with no login screen "Error
The user account is locked. Please contact Administrator."
7. I logged into OIM as xelsysadm -> administration -> search user [email protected] and it doesn't show that the account is locked. I lock it anyways explicitly by clicking the button the user screen and click unlock immediately and now enter [email protected] and correct password everything works.
Few questions that i have are:
1. how do i get the OAM/OIM system to behave consistently, (give an incorrect username or password message until the first 9 attempts with a login screen back to the end user and give them an error message at the end that the accoutn is locked". I am okay with out of the box message text
2. How will our operations team understand that the user is really locked becuase they have nowhere to go find this information
3. what are all the places where i will look for this information in the above scneario when the user account is locked by himself. (OVD/OID, USR table in OIM_DEV schema etc)
4. Are there any other best practices that i should follow in setting up the system.
Thanks in advance for reviewing this.
Prasad.

It appears to be all happening in OAM. After researching some more, I found this piece at http://download.oracle.com/docs/cd/E17904_01/doc.1111/e15740/idmint.htm#CACBBIDI.
But never the less it doesn't explain how to unlock the user other than the workaround that i found. Did anyone else had to deal with this.
x---------------------------------------------------------------x
2.8.4.4 Account Lock and Unlock
Oracle Access Manager keeps track of the login attempts and locks the account when the count exceeds the established limit.
When an account is locked, Oracle Access Manager displays the Help Desk contact information.
When contacted by the end user, the Help Desk unlocks the account using the Oracle Identity Manager administrative console. Oracle Identity Manager notifies Oracle Access Manager about the changes.
Account Lock and Unlock Flow
When the number of unsuccessful user login attempts exceeds the value specified in the password policy, the user account is locked. Any login attempt after the user account has been locked displays a page that provides information about the account unlocking process, which will need to be customized to reflect the process (Help Desk information or similar) that is followed by your organization.
Note:
Oracle Identity Manager does not support automatic locking of a user account after a specific period has elapsed.
The following describes the account locking/unlocking flow:
Using a browser, a user tries to access an application URL that is protected by Oracle Access Manager.
Oracle Access Manager Webgate (SSO Agent) intercepts the request and redirects the user to the Oracle Access Manager login page.
The user submits credentials that fail Oracle Access Manager validation. Oracle Access Manager renders the login page and asks the user to resubmit credentials.
The user's unsuccessful login attempts exceed the limit specified by the policy. Oracle Access Manager locks the user account and redirects the user to the Oracle Access Manager Account Lockout URL, which displays Help Desk contact information.
The user contacts the Help Desk over the telephone and asks an administrator to unlock the account.
Oracle Identity Manager notifies Oracle Access Manager of the account unlock event.
The user attempts to access an application URL and this event triggers the normal Oracle Access Manager single sign-on flow.

Error while adding a used relationship between the New DC and the Web DC

Hi Gurus
We are getting the Error in NWDS while Adding a used relationship between the New DC and the Web DC.
Steps what we are Done
1. Create the custom project from inactiveDC's
2.creating the project for the component crm/b2b in SHRAPP_1
3.After that we changed the application.xml and given the contect path.
4.Then we tried to add Dependency to the custom create DC we are getting the error saying that illegal deppendency : the compartment sap.com_CUSTCRMPRJ_1 of DC sap.com/home/b2b_xyz(sap.com.CUSTCRMPRJ_1) must explicitly use compartment sap.com_SAP-SHRWEB_1 of DC sap.com/crm/isa/ like that it was throwing the error.
so, we skip this step and tried to create the build then it is saying that build is failed..
Please help us in this regard.
Awaiting for ur quick response...
Regards
Satish

Hi
Please Ignore my above message.
Thanks for ur Response.
After ur valuble inputs we have added the required dependencies and sucessfully created the projects, then building of the projects was also sucessfully done and EAR file was created.
We need to deploy this EAR file in CRM Application Server by using the interface NWDI.
For Deploying the EAR into NWDI, we need to check-in the activites what i have created for EAR. once i check-in the activites ,the NWDI will deploy the EAR into CRM Application Server.
In the Activity Log we are able to check the Activities as Suceeded but the Deployment column is not showing any status.
When i right click on my activity Id the deployment summery is also disabled.
So finally my Question is that where can i get the deployment log file, and where can i check the deployment status for my application..
Any pointers in this regard would be of great help..
Awaiting for ur valuble Responses..
Regards
Satish

Relationship between Portal and back-end roles in business package

Hi all,
I wonder how technically works on the backend system when I install a BP for SAP EP. Let's say for example that I installed on the portal the business package for SRM. I will have on the Portal some roles configured (buyer, supplier, invoice manager, etc), and some iviews in them organized by pages and workest.
How can I see the relations with those roles and the roles on the SRM backend system? And then: if I modify a standard role on the Portal, adding new functionalites (iviews), I do update the backend role? We are going to implement SSO, and users will be the same on Portal and backend system. But that also means I need to assign users to backend roles on the backend system, isn't it?
I would be glad to you if someone can provide me also a link to a document explaining the relationshipe between backend roles management and portal roles management.
Thanks a lot,
Valentina

To add.. no, you will not update a backend SRM role if you update an iView on the Portal. The Backend roles will always be assigned to the user via PFCG and do not change automatically with the Portal roles.
This help document might help you understand the concept better (Look at the Permissions vs Authorisations section):
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/c605c690-0201-0010-e8b5-94677245a46b
Hope this helps. I am sure SAP/SDN library has many such documents that you can read through.
Sudha
Message was edited by:
Sudha Mohan

Getting Error The trust relationship between the primary domain and the trusted domain failed in SharePoint 2010

Hi,
SharePoint 2010 Backup has been taken from production and restored through Semantic Tool in one of the server.The wepapplication of which the backup was taken is working fine.
But the problem is that the SharePoint is not working correctly.We cannot create any new webapplication ,cannot navigate to the ServiceApplications.aspx page it shows error.Even the Search and UserProfile Services of the existing Web Application is not working.Checking
the SharePoint Logs I found out the below exception
11/30/2011 12:14:53.78 WebAnalyticsService.exe (0x06D4)        0x2D24 SharePoint Foundation         Database
8u1d High    Flushing connection pool 'Data Source=urasvr139;Initial Catalog=SharePoint_Config;Integrated Security=True;Enlist=False;Connect Timeout=15'
11/30/2011 12:14:53.78 WebAnalyticsService.exe (0x06D4)        0x2D24 SharePoint Foundation         Topology
2myf Medium Enabling the configuration filesystem and memory caches.
11/30/2011 12:14:53.79 WebAnalyticsService.exe (0x06D4)        0x12AC SharePoint Foundation         Database
8u1d High    Flushing connection pool 'Data Source=urasvr139;Initial Catalog=SharePoint_Config;Integrated Security=True;Enlist=False;Connect Timeout=15'
11/30/2011 12:14:53.79 WebAnalyticsService.exe (0x06D4)        0x12AC SharePoint Foundation         Topology
2myf Medium Enabling the configuration filesystem and memory caches.
11/30/2011 12:14:55.54 mssearch.exe (0x0864)                   0x2B24 SharePoint Server Search      Propagation Manager
fo2s Medium [3b3-c-0 An] aborting all propagation tasks and propagation-owned transactions after waiting 300 seconds (0 indexes) [indexpropagator.cxx:1607] d:\office\source\search\native\ytrip\tripoli\propagation\indexpropagator.cxx
11/30/2011 12:14:55.99 OWSTIMER.EXE (0x1DF4)                   0x1994 SharePoint Foundation         Topology
75dz High    The SPPersistedObject with
Name User Profile Service Application, Id 9577a6aa-33ec-498e-b198-56651b53bf27, Parent 13e1ef7d-40c2-4bcb-906c-a080866ca9bd failed to initialize with the following error: System.SystemException: The trust relationship between the primary domain and the trusted
domain failed.       at System.Security.Principal.SecurityIdentifier.TranslateToNTAccounts(IdentityReferenceCollection sourceSids, Boolean& someFailed)     at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection
sourceSids, Type targetType, Boolean forceSuccess)     at System.Security.Principal.SecurityIdentifier.Translate(Type targetType)     at Microsoft.SharePoint.Administration.SPAce`1.get_PrincipalName()
at Microsoft.SharePoint.Administration.SPAcl`1.Add(String princip...
11/30/2011 12:14:55.99* OWSTIMER.EXE (0x1DF4)                   0x1994 SharePoint Foundation         Topology
75dz High    ...alName, String displayName, Byte[] securityIdentifier, T grantRightsMask, T denyRightsMask)     at Microsoft.SharePoint.Administration.SPAcl`1..ctor(String persistedAcl)
at Microsoft.SharePoint.Administration.SPServiceApplication.OnDeserialization()     at Microsoft.SharePoint.Administration.SPIisWebServiceApplication.OnDeserialization()     at Microsoft.SharePoint.Administration.SPPersistedObject.Initialize(ISPPersistedStoreProvider
persistedStoreProvider, Guid id, Guid parentId, String name, SPObjectStatus status, Int64 version, XmlDocument state)
11/30/2011 12:14:56.00 OWSTIMER.EXE (0x1DF4)                   0x1994 SharePoint Foundation         Topology
8xqx High    Exception in RefreshCache. Exception message :The trust relationship between the primary domain and the trusted domain failed.
11/30/2011 12:14:56.00 OWSTIMER.EXE (0x1DF4)                   0x1994 SharePoint Foundation         Timer
2n2p Monitorable The following error occured while trying to initialize the timer: System.SystemException: The trust relationship between the primary domain and the trusted domain failed.       at System.Security.Principal.SecurityIdentifier.TranslateToNTAccounts(IdentityReferenceCollection
sourceSids, Boolean& someFailed)     at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection sourceSids, Type targetType, Boolean forceSuccess)     at System.Security.Principal.SecurityIdentifier.Translate(Type
targetType)     at Microsoft.SharePoint.Administration.SPAce`1.get_PrincipalName()     at Microsoft.SharePoint.Administration.SPAcl`1.Add(String principalName, String displayName, Byte[] securityIdentifier, T grantRightsMask,
T denyRightsMask)     at Microsoft.SharePoint.Administrati...
11/30/2011 12:14:56.00* OWSTIMER.EXE (0x1DF4)                   0x1994 SharePoint Foundation         Timer
2n2p Monitorable ...on.SPAcl`1..ctor(String persistedAcl)     at Microsoft.SharePoint.Administration.SPServiceApplication.OnDeserialization()     at Microsoft.SharePoint.Administration.SPIisWebServiceApplication.OnDeserialization()
at Microsoft.SharePoint.Administration.SPPersistedObject.Initialize(ISPPersistedStoreProvider persistedStoreProvider, Guid id, Guid parentId, String name, SPObjectStatus status, Int64 version, XmlDocument state)     at Microsoft.SharePoint.Administration.SPConfigurationDatabase.GetObject(Guid
id, Guid parentId, Guid type, String name, SPObjectStatus status, Byte[] versionBuffer, String xml)     at Microsoft.SharePoint.Administration.SPConfigurationDatabase.GetObject(SqlDataReader dr)     at Microsoft.SharePoint.Administration.SPConfigurationDatabase.RefreshCache(Int64
currentVe...
Please guide me on the above issue ,this will be of great help
Thanks.

I have same error. Verified for trust , ports , cleaned up cache.. nothing has helped.
The problem is caused by User profile Synch Service:
UserProfileProperty_WCFLogging :: ProfilePropertyService.GetProfileProperties Exception: System.SystemException:
The trust relationship between the primary domain and the trusted domain failed.       at System.Security.Principal.SecurityIdentifier.TranslateToNTAccounts(IdentityReferenceCollection sourceSids,
Boolean& someFailed)     at System.Security.Principal.SecurityIdentifier.Translate(IdentityReferenceCollection sourceSids, Type targetType, Boolean forceSuccess)     at System.Security.Principal.SecurityIdentifier.Translate(Type
targetType)     at Microsoft.SharePoint.Administration.SPAce`1.get_PrincipalName()     at Microsoft.SharePoint.Administration.SPAcl`1.Add(String principalName, String displayName, SPIdentifierType identifierType, Byte[]
identifier, T grantRightsMask, T denyRigh...
08/23/2014 13:00:20.96*        w3wp.exe (0x2204)
        0x293C        SharePoint Portal Server              User Profiles
        eh0u        Unexpected        ...tsMask)     at Microsoft.SharePoint.Administration.SPAcl`1..ctor(String persistedAcl)
at Microsoft.Office.Server.Administration.UserProfileApplication.get_SerializedAdministratorAcl()     at Microsoft.Office.Server.Administration.UserProfileApplication.GetProperties()     at Microsoft.Office.Server.UserProfiles.ProfilePropertyService.GetProfileProperties()
Please let me know if you any solution found for this?
Regards,
Kunal

1-to-1 Relationship Between UI and subVI Data Cluster

Discussion continued from here.
In summary:
JackDunaway wrote:
Yes,
I can see clear benefits in implementing this Idea - that is, if your
underlying datatype elements have a 1:1 relationship with the UI
elements.
I will
illustrate this point by showing some potential flaws in your example:
"Profile Running" and "Profile Complete" are mutually exclusive, no?
Wouldn't it be better to have a single enum named "Profile" with three
elements "Idle, Running, and Complete" for the underlying datatype?
Having two mutually exclusive pieces of data in an underlying datatype
is among my favorite of code smell indicators.
Also, the underlying datatype probably only needs "Forward Miles" and
"Reverse Miles" since "Total Miles" is derived. Exclude "Total Miles"
from the underlying cluster and just show the sum for display.
Another
argument against using a 1:1 relationship: the customer now wants to
multiply speed by -1 if Direction==Reverse and not show the Direction
enum on the UI. The data source (the VI that generates the data) would
need to be updated using your 1:1 relationship. Using underlying data
different from the display data, only the data client (the UI front
panel) needs to change. I would be much more inclined to service the UI
FP for a cosmetic upgrade rather than tracing the data source back
through the HMI framework, through TCP, back to the RT, back to FPGA...
Basically...
I question a perfectly overlapped Venn Diagram where the set of data
shown to the user equals the dataset used for underlying data
processing/messaging/storing. The underlying datatype should be as
stripped and streamlined as possible, while the display datatype can
inherit all the flair and post-processing that Upper Management wants to
see in a UI.
LabBEAN wrote:
<JackDunaway wrote
I will illustrate this point by showing some potential flaws in your example...
<LabBEAN response
The data you see maps directly to tags on the PLC.
<JackDunaway wrote
Yes, I can see clear benefits in implementing this Idea - that is, if your underlying datatype elements have a 1:1 relationship with the UI elements.
<LabBEAN response
JackDunaway wrote:
This is a good indicator that we're both aware at this point that I'm
missing something... in all seriousness, could you reply to the 1:1
argument? I really want to understand this Idea and learn how/if I need
to apply it to my own style (our last back-and-forth turned out to be an enlightening and introspective exercise for me).
***EDIT: By all means, please start a discussion on the LabVIEW board so we're not hindered by the Exchange's interface. ***
My long delayed response:
The indicators you see map to tags on the PLC. That is, we were connecting through OPC to an application on a PLC that was written ~15 years ago. I have a VI where I read a bunch of SVs (Shared Variables). Each SV is bound through OPC to a PLC tag. In the interest of disclosure, two 16-bit tags are required to represent each 32-bit mileage number. In the same subVI, I read each set of mileage tags, convert, and feed my subVI cluster indicator. The same is true for wheel size: three bits get converted to the enum. Regardless, though, I have one subVI that reads SVs and outputs the same "underlying data" cluster that is seen on the UI. The UI has a "Faults" cluster full of fault Booleans that follows the same logic. When the user configures a profile of steps, they do so via an array of "step" clusters (although the cluster look is hidden for aesthetics). It's the same thing as above except we write tags instead of reading them.
In my case, each set of 16-bit tags is worthless as two 16-bit numbers. They are only useful as a 32-bit mileage, so I don't pass around the raw 16-bit data. The same is true for the wheel size bits. My software can just as easily (in fact, more easily) operate on the enum. So, the underlying cluster from the subVI is programmatically useful and applicable to the UI. I would guess that the same is true for a lot of RT applications, where the read VI can have some intelligence to process the data into useful / applicable clusters.
There are going to be cases where "Upper Management" would like to see "flair and post-processing" as you say. Your speed illustration is a good example of this. There are also instances where the cluster works fine on the UI the way it is (like this one and many others that we've seen).
<JackDunaway wrote
"Profile Running" and "Profile Complete" are mutually exclusive, no?
Wouldn't it be better to have a single enum named "Profile" with three
elements "Idle, Running, and Complete" for the underlying datatype?
<LabBEAN response
Did you mean "not" mutually exclusive? We combined 3 "dependent" (not mutually exclusive) Booleans into an enum for Wheel Size, as I mentioned above. Not sure now why we went the other way with these two (this was 2 years ago). In any event, with regard to UI representation, I still pass a cluster out of my read-raw-data-and-process-into-cluster subVI up to the applicable queued state machines and to the UI.
<JackDunaway wrote
Having two mutually exclusive pieces of data in an underlying datatype
is among my favorite of code smell indicators.
<LabBEAN response
Working with applications written in ladder logic, it is not uncommon to see separate Booleans that indicate the same condition. This seems to be especially true when safety is a concern. That is, ladder Coil A ON and Coil B OFF == switch open. Coil A OFF and Coil B ON == switch closed. If you ever read OPC tags from Coil A and Coil B and the two are the same, you know the ladder is in transition (hasn't updated the tags). Throw that point out and read again.
I, too, appreciate our back-and-forths. Good discussion.
Certified LabVIEW Architect
Wait for Flag / Set Flag
Separate Views from Implementation for Strict Type Defs

Thanks for replying, Jason. Let me see if I can craft a coherent response after getting back up to speed...
(...later)
OK, let's go. I'm going to fully agree with you that LabVIEW imposes a strange constraint unique from most other languages where a Typedef defines two things: the underlying data structure, and also the view. A Strict Typedef should be more accurately deemed the Datatype-View-Definition, and a Typedef would be more accurately called the Datatype-Definition-and-View-Suggestion. And to be clear, there are two types of views: the programmer's view (a SubVI look and feel) and the UI view (what the user and Upper Management sees). (Finally, I admit I'm ignorant whether view or View is more a more appropriate term)
Linking the programmer's view to the datatype is perfectly fine with me, and based on your original Idea I think we both agree that's OK. I think we run into a disagreement where you have loosely tied the concept of "Strict TD" to "UI View".
Historically, I have used Strict Typedefs for the programmer's view (SubVIs), since I like to maintain a "functional UI" at the SubVI level. I don't use type definitions on User Interfaces - only Controls. That's the reason your Idea does not appeal to me, but perhaps if your Idea were implemented, it would appeal to me since View and Implementation would be divorced as separate entities within the Type Definition. (Does that classify as a Catch-22?) So, you're Idea is fundamentally suggesting that Type Definition .ctl files should be more accurately called "a container that holds both a Type Definition and any number of View Definitions as well".
Fundamentally, I think I finally understand the gist of your Idea: "let's ditch this weird constraint where View and Datatype are inextricably defined together in one file", and for that, I'll give Kudos to the original Idea. I got really tied up with the example you used to present the Idea, and plus I'm still learning a lot.
Additional thoughts:
This Idea reminds me of another: Tag XControl as Class View
We've still got some arguing to do on a 1:1 relationship between underlying datatype and UI presentation, so put your mean face back on:
Since our last conversation, interestingly, I have been on an anti-Typedef kick altogether. Why don't you drop some feedback on my attempt at a completely typedef-free UI framework?
a.lia-user-name-link[href="/t5/user/viewprofilepage/user-id/88938"] {color: black;} a.lia-user-name-link[href="/t5/user/viewprofilepage/user-id/88938"]:after {content: '';} .jrd-sig {height: 80px; overflow: visible;} .jrd-sig-deploy {float:left; opacity:0.2;} .jrd-sig-img {float:right; opacity:0.2;} .jrd-sig-img:hover {opacity:0.8;} .jrd-sig-deploy:hover {opacity:0.8;}

Extending DataFinder to include Non-Data Entries and Relationships Between Entries

I am trying to create custom data centralization and management software for our lab with DataFinder Toolkit. In addition to storing data from data acquisitions, I want to be able to store additional information with the data such as images, pdf files, word documents that can be easily accessed after finding the data. My current idea is to handle external files by storing the filepath in a property of an object vs trying to store the data itself in the datafinder database. My code would know how to open these files so the user can see them with external software or a custom labview app.
I also want to be able to store non-data objects such as an object that describes a piece of test equipment or a sample through properties and external files. Images and documents are again important here. And then create relationships through unique barcoded IDs that are a property in the datafinder entry. So not only could I look at the data, I could find information about the samples and lab equipment. Or anything else we think needs to be saved.
The code I am writing around DataFinder would be in charge of maintaining the unique IDs and know how the relationships between those IDs work to generate the proper queries. Like a 'Get Test Equipment Used' button next to a search result.
For the external non-data objects I was going to use Labview code to create a file with all the information about the object (unique ID, properties and external file paths) and create a plug-in so the datafinder will index the file and make it searchable.
Does this seem reasonable? I like the idea of working with one system and having everything update based on adding, deleting and modifying files in a folder. Also, I like the idea of not splitting the data management up into multiple technologies and having to make those work together.
Solved!
Go to Solution.

From the description, you've given the system seems plausible. The non-data elements you discussed when broken down are just additional data to associate with an object. Storing file paths seems plausible as done in the community example below:
Execute String/Numeric Querry Using Data Finder Toolkit
https://decibel.ni.com/content/docs/DOC-10631
Regards,
Isaac S.
Regards,
Isaac S.
Applications Engineer
National Instruments

Relationship between unknown SAP-TABLES

Hi Folks,
Lets take a scenario of populating an ouput internal table with fields from 4 unknown sap tables(relation between the tables is unknown). How can we check the relationship between those tables to populate the internal table..? What are the possible ways to check the relationship between tables..?
Can u please help me on this.
Thanks n regards,
ram.

Hi Ram,
 I tried the following method to find relation between tables and i think it is quite useful. I hope this will be of some use to you.
-> Goto SE11 and display one of the tables.
-> Click on the Graphic icon on the toolbar or use shortcut ctrlshiftF11
-> It displays all the related tables by foreign key and even gives you all check tables involved. If the list is a long one, you can even use Find option to check if the other tables you are trying to find relation with, exist in the screen.
 Hope this Helps!! Do get back!!
Regards,
Naveenan.

RELATIONSHIP BETWEEN VBAK/VBAP AND V46R_HEAD TABLE

Hi,
can you please tell me that is there any relationship between VBAK and V46R_HEAD TABLE or VBAP and V46R_HEAD TABLE table.
where V46R_HEAD TABLE is a structure and i want to display sme fields of vbak and some of V46R_HEAD and some of VBAP.
I got the relation between VBAK and VBAP ie. the field VBELN. But i am not getting the relation with V46R_HEAD sturcture.
Please help me to solve this problem.

Hi,
the field vbeln is present in V46R_HEAD also.
Please check it!! Please do a CTR+F and look for VBELN.
Regards.

Relationship Between ECC Customers (Contact Persons) and CRM BP

Hello,
I am new to middleware and need some help with the relationship between ECC customers/contact persons and CRM business partners.
We are transferring via bdoc this information from ECC to CRM.
Which bdoc types are used when transferring customers/contact persons? I believe it is BUPA_MAIN but am not too sure. How is the relationship between customer its contact person transferred? Is this done through BUPA_REL? I looked at the segment fields in SBDM but am not too sure how to understand the relationship...
Thanks for the help!
Regards,
Tiffanie

Thanks! With the initial load, how do I check what fields are being passed in the bdocs?
I tried to look for customer_main, customer_rel in SBDM and couldn't find it. Instead I used BUPA_MAIN and found some segments but couldn't find all the data that was being transferred (e.g. customer name, address, etc...) Where do I find all the fields contained in the bdoc?
I see them in SMW01 when I view the bdoc contents but can not find the actual structure (data fields) that are being brought in from ECC.
Thanks!
Tiffanie

Relationship between material type and industry sector

Hi experts
when using t-code mm01,there are two fields material type and industry setor in screen.Is there any relationship between material type and industry sector? I want to know if user be able to see the material type related to particular industry sector?
thanks in advance!

Hello
There is no direct relationship between the material type and the industry sector.
The industry sector is used only for field sttus maintenance (fields in display/optional/requierd entry) in transactions.
We will assign seperate field reference groups to industry sectors and deopending on how we configure the field references, the fields will appear for the materials created for that industry sector.
regards

Relationship between OAM,OIM,OID

Similar Messages

Maybe you are looking for