Scheduled report fails when set to print

Error Message:
Invalid printer specified. ~ce1b6881fc74f0d52.rpt
There is, indeed a default printer on the server and I can print to it manually from the BOE server. It shows in the choices of printers in the default settings. It does reside in the Crystal Reports Configuration Printer list. There is nothing in the 'printer connection' field. The report itself has 'no printer' selected. In the default settings I select the printer installed on the server and in Crystal Reports Configuration, Printer List..
Perhaps I'm just not hitting the right combination of choices?
The printer is set up with a tcp/ip port.
Could sure use some help . . . .thanks
Oh this is Business Objects Enterprise 4.0 SP 9 and Crystal Reports 2011.

Since this question has more to do with the BO server configuration, you will probably get a better answer for this question in the BI Platform space here: http://scn.sap.com/community/bi-platform.
-Dell

Similar Messages

Automatic Email When Scheduled Report Fails?

Is there a way to configure XI to automatically send an email if a scheduled report fails to run successfully?

This is actually configured at the report level from the CMC and not via auditing. For each report that you want notification(s)to be set for, switch to the Schedule tab --> Notification in the CMC. Enable email notifications as required. ie. "A job has failed to run. "

How to mail to users when a report fail when scheduled in Infoview-BO XIR2

Hi,
We need to send a mail notification to the mail recipients when a report fail. Is this possible in Infoview.
Please suggest.
Thanks in advance.

it is not possible in infoview. but it can be done using CMC. if you go schedule a reports in CMC, goto notifications and add email notification and add email addresses.

Scheduled Report Failing - Don't Know Why

I'm trying to re-create a scheduled report on CMC that had gotten deleted. It ran before (sometimes multiple times...) but at least it ran. I'm duplicating all the settings for this report based on how they were before, but every time I try to get the report to run, it fails.
I don't know enough about this to be able to embed any kind of error messages in the e-mail notifications we get. All I know is that no matter what I change/tweak/adjust, we get an email saying "This report has failed to run."
What kinds of things should I be looking at to troubleshoot? I know the report itself is fine, as users can view it normally (as in, through other viewers). There's definitely something specific to the scheduling process that is not correct, but I don't know what to look at.
Here is how the scheduling is currently configured:
Schedule > Main Tab
-Run Weekly, Tues - Sat
-Start Date: 10/01/08, 8:30 AM (I originally set this up yesterday, so today at 8:30 should have been the first time it ran, but instead it failed)
-End Date: 10/01/18, 12:00 AM
-Number of retries allowed: 0
-Retry interval in seconds: 1800
Schedule > Notification
-Email notification based on: a job has failed to run
-Message: Report failed to run. Scheduled Report: %SI_NAME% - %SI_STARTTIME% What other codes can we put in this message, BTW? I've been trying to look for something to return error codes, but %SI_OUTCOME%, %SI_STATUSINFO%, and %SI_ALERT_MESSAGE% don't display anything, they just print on the email
Schedule > Destination
-Destination: Email (SMTP)
-Clean up instance after scheduling is checked
-We have "Set the values to be used at schedule time here:" populated with our list of email addresses for recipients
-Attach object instance to email message is checked
-Specified file name: %SI_NAME%%SI_STARTTIME%.%EXT%
-Add extension is checked
Schedule > Format
-Format: Microsoft Excel (Still fails if we choose Excel Data Only or Adobe Acrobat)
-Use options saved with report is checked (Still fails if we deselect this)
Schedule > Schedule For
-Schedule only for myself.
Could really use some help here, as I don't know what in the world could be causing this to fail. Thanks in advance.

First thing is to forget all the complex configs and just try to schedule the report to run once now, no alerts, no notifications, no nothing.
Does that work?
Then you can build up the schedule, to see where the problem is coming from.
Sincerely,
Ted Ueda

Scheduled report failed after 10 mins

Hi Everyone,
We are using Business Object XI 3.1 and Crystal Report 2008.
We have a few reports which uses Java Beans Connectivity. They all run fine using Crystal Report 2008 Designer.
After I publish the reports to the server and schedule it to run from InfoView, the reports fail if it runs over 10 mins and returns error ( See below). If I rerun the report and it completes within 10 mins, it will be fine.
Error:
Title: Test Report
Document Type: Microsoft Excel
Status Failed
External Destination: None
Owner: SLuo
Server Used: BOETEST.CrystalReportsJobServer
PID: 14496
Folder Path: Reporting
Remote Instance: No
Creation Time: 6/27/2014 10:21 AM
Expiry: 6/27/2024 10:21 AM
Start Time: 6/27/2014 10:22 AM
End Time: 6/27/2014 10:32 AM
Printer: None
Formats: Microsoft Excel
Parameters: 1/6/14; 1/6/14
Error Message: Error in File ~tmp38a08076f722e00.rpt: Failed to retrieve data from the database.
I added -crpetrace 7 - trace to the command line params to view the details of the log, however not much luck in getting a meaningful message.
The log from Crystal Job Server:
2014/06/30 14:03:50.063|==| | | 3900|4308|
|||||||||||||||procReport.dll:
CRPE FAILED: GetLastPEErrorInfo(1) returns crpe error code [723] with
extended error string [Failed to retrieve data from the database.
Failed to retrieve data from the database.
Error in File ~tmpf3c80895162f60.rpt:
I have looked the configuration of Crystal Job Server, Reports Cache Server and Processing Server, nothing obvious that has limited the connection to 10 mins. I have extended the time in CRConfig.xml still no luck.
There are other reports on the server using direct db connection and run fine for 2 hours+.
Anyone has experienced this before and aware of any configuration that might cause the report to fail in 10 mins?
Many thanks,
Shan

Hi Shan,
You can refer to the following SAP KBA for the issue:
1204347 - Error: "Failed to retrieve data from the database" when using Javabeans as a datasource
The SAP Note is for BO XI R2; however, you can try the same resolution for BO XI 3.1.
Hope this helps.
Regards,
Renu

Reports fail when run against a different data source

Hello,
We have a VB.NET 2008 WinForms application running on Microsoft .NET 3.5. We are using Crystal Reports 2008 runtime, service pack 3 -- using the CrystalDecisions.Windows.Forms.CrystalReportViewer in the app to view reports. In the GAC on all our client computers, we have versions 12.0.1100.0 and 12.0.2000.0 of CrystalDecisions.CrystalReports.Engine, CrystalDecisions.Shared, and CrystalDecisions.Windows.Forms.
Please refer to another one of our posted forum issues, u201CCritical issue since upgrading from CR9 to CR2008u201D, as these issues seem to be related:
Critical issue since upgrading from CR9 to CR2008
We were concerned with report display slow down, and we seemed to have solved this by using the Oracle Server driver (instead of either Microsoft's or Oracle's OLEDB driver). But now we must find a resolution to another piece of the puzzle, which is: why does a report break if one data source is embedded in the .rpt file is different than the one you are trying to run the report against, in the .NET Viewer?
Problem:
If you have a production database name (e.g. "ProdDB") embedded in your .rpt file that you built your report from and try to run that report against a development database (e.g. "DevDB") (OR VICE VERSA -- it is the switch that is the important concept here), the report fails with a list of messages such as this:
    Failed to retrieve data from the database
    Details: [Database vendor code: 6550 ]
This only seems to happen if the source of the report data (i.e. the underlying query) is an Oracle stored procedure or a Crystal Reports SQL Command -- the reports run fine against all data sources if the source is a table or a view). In trying different things to troubleshoot this, including adding a ReportDocument.VerifyDatabase() call after setting the connection information, the Crystal Reports viewer will spit out other nonsensical errers regarding being unable to find certain fields (e.g. "The field name is not known), or not able to find the table (even though the source data should be coming from an Oracle stored procedure, not a table).
When the reports are run in the Crystal Reports Designer, they run fine no matter what database is being used; but the problem only happens while being run in the .NET viewer. It's almost as if something internally isn't getting fully "set" to the new data source, or something -- we're really grasping at straws here.
For the sake of completeness of information, here is how we're setting the connection information
        '-- Set database connection info for the main report
        For Each oConnectionInfo In oCrystalReport.DataSourceConnections
            oConnectionInfo.SetConnection(gsDBDataSource, "", gsDBUserID, gsDBPassword)
        Next oConnectionInfo
        '-- Set database connection info for each subreport
        For Each oSubreport In oCrystalReport.Subreports
            For Each oConnectionInfo In oSubreport.DataSourceConnections
                oConnectionInfo.SetConnection(gsDBDataSource, "", gsDBUserID, gsDBPassword)
            Next oConnectionInfo
        Next oSubreport
... but in troubleshooting, we've even tried an "overkill" approach and added this code as well:
        '-- Set database connection info for each table in the main report
        For Each oTable In oCrystalReport.Database.Tables
            With oTable.LogOnInfo.ConnectionInfo
                .ServerName = gsDBDataSource
                .UserID = gsDBUserID
                .Password = gsDBPassword
                For Each oPair In .LogonProperties
                    If UCase(CStr(oPair.Name)) = "DATA SOURCE" Then
                        oPair.Value = gsDBDataSource
                        Exit For
                    End If
                Next oPair
            End With
            oTable.ApplyLogOnInfo(oTable.LogOnInfo)
        Next oTable
        '-- Set database connection info for each table in each subreport
        For Each oSubreport In oCrystalReport.Subreports
            For Each oTable In oSubreport.Database.Tables
                With oTable.LogOnInfo.ConnectionInfo
                    .ServerName = gsDBDataSource
                    .UserID = gsDBUserID
                    .Password = gsDBPassword
                    For Each oPair In .LogonProperties
                        If UCase(CStr(oPair.Name)) = "DATA SOURCE" Then
                            oPair.Value = gsDBDataSource
                            Exit For
                        End If
                    Next oPair
                End With
                oTable.ApplyLogOnInfo(oTable.LogOnInfo)
            Next oTable
        Next oSubreport
... alas, it makes no difference. If we run the report against a database that is different than the one specified with "Set Datasource Location" in Crystal, it fails with nonsense errors

Thanks for the reply, Ludek. We have made some breakthroughs, uncovered some Crystal bugs and workarounds, and we're probably 90% there I hope.
For your first point, unfortunately the information on the Oracle 6550 error was generic, and not much help in our case. And for your second point, the errors didn't have anything to do with subreports at that time -- the error would manifest itself even in a simple, one-level report.
However, your third point (pointing us to KB 1553921) helped move us forward quite a bit more. For the benefit of all, here is a link to that KB article:
Link: [KB 1553921|http://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/oss_notes_boj/sdn_oss_boj_bi/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/scn_bosap/notes%7B6163636573733d36393736354636443646363436353344333933393338323636393736354637333631373036453646373436353733354636453735364436323635373233443330333033303331333533353333333933323331%7D.do]
We downloaded the tool referenced there, and pointed it at a couple of our reports. The bottom line is that the code it generated uses a completely new area of the Crystal Reports .NET API which we had not used before -- in the CrystalDecisions.ReportAppServer namespace. Using code based on what that RasConnectionInfo tool generated, we were able gain greater visibility into some of the objects in the API and to uncover what I think qualifies as a genuine bug in Crystal Reports.
The CrystalDecisions.ReportAppServer.DataDefModel.ISCRTable class exposes a property called QualifiedName, something that isn't exposed by the more commonly-used CrystalDecisions.CrystalReports.Engine.Table class. When changing the data source with our old code referenced above (CrystalDecisions.Shared.ConnectionInfo.SetConnection), I saw that Crystal would actually change the Table.QualifiedName from something like "SCHEMAOWNER.PACKAGENAME.PROCNAME" to just "PROCNAME" (essentially stripping off the schema and package name). Bad, Crystal... VERY BAD! IMHO, Crystal potentially deserves to be swatted on the a** with the proverbial rolled-up newspaper.
I believe this explains why we were also able to generate errors indicating that field names or tables were not found -- because Crystal had gone and changed the QualifiedName to remove some key info identifying the database object! So, knowing this and using the code generated by the RasConnectionInfo tool, we were able to work around this bug with code that worked for most of our reports ("most" is the key word here -- more on that in a bit).
So, first of all, I'll post our new code. Here is the main area where we loop through all of the tables in the report and subreports:
'-- Replace each table in the main report with new connection info
For Each oTable In oCrystalReport.ReportClientDocument.DatabaseController.Database.Tables
    oNewTable = oTable.Clone()
    oNewTable.ConnectionInfo = GetNewConnectionInfo(oTable)
    oCrystalReport.ReportClientDocument.DatabaseController.SetTableLocation(oTable, oNewTable)
Next oTable
'-- Replace each table in any subreports with new connection info
For iLoop = 0 To oCrystalReport.Subreports.Count - 1
    sSubreportName = oCrystalReport.Subreports(iLoop).Name
    For Each oTable In oCrystalReport.ReportClientDocument.SubreportController.GetSubreportDatabase(sSubreportName).Tables
        oNewTable = oTable.Clone()
        oNewTable.ConnectionInfo = GetNewConnectionInfo(oTable)
        oCrystalReport.ReportClientDocument.SubreportController.SetTableLocation(sSubreportName, oTable, oNewTable)
    Next oTable
Next iLoop
'-- Call VerifyDatabase() to ensure that the tables update properly
oCrystalReport.VerifyDatabase()
(Thanks to Colin Stynes for his post in the following thread, which describes how to handle the subreports):
Setting subreport connection info at runtime
There seems to be a limitation on the number of characters in a post on this forum (before all formatting gets lost), so please see my next post for the rest....

Schedule reports fail - CrystalEnterprise.Smtp

We have scheduled a report to run for all corporate employees. When the schedule runs, here is what happens.
- Report run and is marked in the running state
- Report moves to pending state in history but the email is sent to recip.
- Report moves back to running state
- Report moves to pending state and again the email is sent
- Report moves to running state
- Report moves to failed but again the email is sent
In all, each recip gets three copies of the report and finally the report is marked failed.
The same report can be scheduled to addresses not hosted on our domain and only one copy is sent and the report instance is marked successful.
When the report fails, I get the following error : recipient error. []: [CrystalEnterprise.Smtp]
Any help would be appreciated,
Chris

Hi John,
I have the SMTP address with the ports and we have our mail server.
As per admin guide, what would be the user for the destination ?
User Name
Provide the Job Server with a user name that has permission to send email
and attachments through the SMTP server.
Password
Provide the Job Server with the password for the SMTP server.
Can i just leave the user name and password so that the users email will be taken ?
Please refer to SAP Note 455140 to configure the SMTP plug-in to send emails. However there is no section in SAPconnect to enable you to add a user and password as a means of authentication. You will have to enter the IP address of your sending SAP application server to your mail server as a means of authentication to enable emails to be correctly relayed to your mail server.
Hope this helps
Michael

Load Report fail when use impersonate="true" in dotnet config

We have VS2005 and use Crystal 11.5. Our crystal report runs fine. When we set <identity impersonate="true" userName=".\user id" password="user password" />
in our Web.Config file, the report show error "Load report fail".
Could someone tells me why?
Thanks
Tony

Hi Tony,
Please check you are using impersonation in same way
following line below under the <system.web > tag , as illustrated below
<system.web>
<identity impersonate="true"/>
<authtorization>
<allow users="?"/><authtorization/>
This may be permission issue. Domain users need access to "C\Windows\Temp directory" and to the report directory try with giving permission .
Hope this helps!!
Regards,
Shweta

Not printing full 6x4 when set to print 6x4 leaving at least 1/2" blank at the end answers please

not printing full 6x4 when set to 6x4 leaving at least 1/2" at the ends un printed this is bad any answers to solve this problem please have tried looking on hp but cannot find a answeer to the problem.

Hi there,
Could you provide the community with a little more information to help narrow troubleshooting? Things like your printer model and your operating system help out a lot.
You can say thanks by clicking the Kudos Star in my post. If my post resolves your problem, please mark it as Accepted Solution so others can benefit too.

Load Report failed when opening Report under IIS 5.1

I recently upgraded to Crystal Reports 2008 (12) from Crystal Reports Basic 2008 (10.5). I am using Visual Studio 2008 with the CrystalReportViewer. Now when I run my reports from the website under IIS 5.1 (Windows XP SP3), I get a Load Report Failed. The detailed exception follow:
Error loading report (ConfigureCrystalReports)
CrystalDecisions.Shared.CrystalReportsException: Load report failed. ---> System.Runtime.InteropServices.COMException (0x800001F5): The Report Application Server failed at CrystalDecisions.ReportAppServer.ClientDoc.ReportClientDocumentClass.Open(Object& DocumentPath, Int32 Options) at CrystalDecisions.ReportAppServer.ReportClientDocumentWrapper.Open(Object& DocumentPath, Int32 Options) at CrystalDecisions.ReportAppServer.ReportClientDocumentWrapper.EnsureDocumentIsOpened() --- End of inner exception stack trace --- at CrystalDecisions.ReportAppServer.ReportClientDocumentWrapper.EnsureDocumentIsOpened() at CrystalDecisions.CrystalReports.Engine.ReportDocument.Load(String filename, OpenReportMethod openMethod, Int16 parentJob) at CrystalDecisions.CrystalReports.Engine.ReportDocument.Load(String filename) at ncspo.ReportViewer.ConfigureCrystalReports() in D:\Websites\NCSPO\FIS\ReportViewer.aspx.vb:line 43
If I run the report using the ASP.Net Development Server, the reports run fine. It only fails under IIS. From other posts, I understand that i need to grant the Network Service and IIS_WPG group read/write permissions to the windows\temp folder. I have done this for the Network Service, but the IIS_WPG group was not introduced until IIS 6.0. Any ideas on how I can get this working under IIS 5.1?
Here is the code behind page:
Private Sub ConfigureCrystalReports()
            Try
                rpt = New ReportDocument
                Dim strReportFilename As String
                If Len(Request.QueryString("ReportFilename")) > 0 Then
                    strReportFilename = Request.QueryString("ReportFilename")
                Else
                    strReportFilename = System.Configuration.ConfigurationManager.AppSettings("cr404Page")
                End If
                Dim strReportPath As String = System.Configuration.ConfigurationManager.AppSettings("ReportPath")
                Dim strReportFilePath As String = strReportPath & strReportFilename
                Dim strReportFilePath_Full As String = Server.MapPath(strReportFilePath)
                rpt.Load(strReportFilePath_Full)    <--- Exception occurs on this line
            Catch ex As Exception
                lblStatus.Text = "Error loading report (ConfigureCrystalReports)"
                lblStatus.Text &= "<BR>" & ex.ToString()
                ncspo.clsMisc.LogError(ex, Me)
            End Try
        End Sub

Am I correct in reading the following 2 documents that IIS 5.1 is not supported?
If you check this document. It shows IIS6 and 7 no support on 5. See page 6
[https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/f05523e4-35c4-2b10-2c89-9fcf64b0dd22]
This document also on page 5
[https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/50a87366-da1d-2b10-e1b4-a37ab37a2dea]
Thanks.

Report fails when run in Workspace, but it works in reporting studio

Hi all,
I have a bqy file which runs fine in the design studio client (v9.3) however when I import it into the Workspace and try and run it i get the following error :
An Interactive Reporting Service error has occurred.-SQL API: [SQLFetchScroll], SQL RETURN: [-1], SQL STATE: [HY010], SQL NATIVE ERROR: [0], SQL MESSAGE: [[DataDirect][ODBC lib] Function sequence error]
(2001)
The query was built from importing the SQL as below:
DECLARE @Fig1 int
DECLARE @i int
DECLARE skuCursor CURSOR FOR
Select r.QtyReceived / b.qty as Figure1
from ReceiptDetail r
inner join BillofMaterial b on b.SKU = r.Lottable03
where r.DateReceived > getdate() - 14
create table #TEMPIG (Test char(2),Median1 int)
OPEN skuCursor
FETCH NEXT FROM skuCursor INTO @Fig1
set @i = 0
WHILE @@FETCH_STATUS = 0
BEGIN
while @i < @Fig1
begin
insert into #TempIG (Test,Median1) values ('MV',@Fig1)
--print @Fig1
set @i = @i + 1
end
set @i = 0
FETCH NEXT FROM skuCursor INTO @Fig1
END
CLOSE skuCursor
DEALLOCATE skuCursor
--select cast(Median1 as Int) from #TEMPIG
--order by 1 asc
select
AVG(Median1) as MedianVal
from
select Median1,
ROW_NUMBER() over (partition by Test order by Median1 ASC) as MedRank,
COUNT(*) over (partition by Test) as MedCount
from
#TEMPIG
) x
where
x.MedRank in (x.MedCount/2+1, (x.MedCount+1)/2)
drop table #TEMPIG
Could anyone explain what is wrong and how to put it right.
Many Thanks in advance.
Ian.

Hi,
OCEs the same? Yes
Client drivers the same? Yes
DAS connection information set up same as desktop connection information Yes
The server which workspace runs is on Linux, but the reporting studio client runs on windows desktops, this is the only difference i know off.
I have chopped and changed things whilst testing this report and it appears that the fault relates to the Cursor and the navigation (Fetch) through the records.
This is starting to drive me around the bend.
Please do come back to me if you have any ideas.
Many thanks in advance.
Ian.

Scheduled report failing with "Incorrect log on parameters"

I am having trouble with a report scheduled on our Crystal Enterprise Server. I didn't design this report but am responsible for supporting the server, so I am trying to determine if this is a server issue or not.
The user who designs these reports has designed many others without issue. She uses Crystal Reports XI and publishes them to the server. There is a group of similar reports that she has setup to run on a schedule and all run fine except for one. This one gives the error:
Error Message: Error in File C:\Program Files\Business Objects\BusinessObjects Enterprise 11.5\Data\procSched\REPORTS.reportjobserver\~tmpee06be03474eb18.rpt: Unable to connect: incorrect log on parameters. Details: [Database Vendor Code: 18456 ]
Within CR XI, we have double and triple checked the username, password and database connection info. The report is using OLE DB to connect to a SQL 2005 server. I know the credentials are correct because several other reports use the same credentials and work fine.
One other interesting note, if I log into the Central Management Console, I can run the same report manually without errors. It only throws this error when it runs as scheduled.
Hope someone can offer some suggestions. I'm no Crystal expert so please ask if I didn't provide enough information.

Moved to BOE Admin Forums.
In the Properties of the report in the CMC you can set the log on info as well as any parameters when scheduled.
Check the Admin guide on how to
Don

Scheduled Report Fails To Run If User Password Has Expired

Why can't a report, that has been scheduled for a user whose password has expired, continue to run and go to its predefined destinations?
A user doesn't know until he/she attempts to log in that there is a password expiration issue. They may have scheduled the report to go to a multitude of inboxes, but if their password has expired, the report doesn't run.
I can understand "some" issues with the necessity to stop the report until credentials are updated correctly. However, Business Objects doesn't notify a user until it has expired, thus making it too late for those expecting something in their inbox.
Is there any method of notifying users that their password is going to be expiring soon, in advance? In other words, is there any "proactive" feature within Business Objects for notifying the user of an upcoming need to change their password?
HepMe

There is nothing built in to BusinessObjects for this, but there may be third-party tools available or you can write code that would do this.
In Query Builder, run this query:
Select SI_ID, SI_Name, SI_LAST_PASSWORD_CHANGE_TIME, SI_UPDATE_TS, SI_LASTLOGONTIME
from CI_SYSTEMOBJECTS where SI_Kind = 'User' and SI_NAME != 'Administrator' and SI_NAME != 'Guest' and SI_PASSWORDEXPIRE = 1
order by SI_LAST_PASSWORD_CHANGE_TIME desc, SI_UPDATE_TS desc
Users who are new and haven't yet changed their password will not have a value for SI_LAST_PASSWORD_CHANGE_TIME, so you can use SI_UPDATE_TS to determine when they were created.
You could build an application that uses this query to determine who is getting close to password expiration and send out an email reminding those users to change their passwords.
-Dell

Target JSP report fails when called with a key defined in cgicmd.dat

Hi,
When I am calling the parameter form report as (on my local pc):
http://rnbhatta-us:8888/reports/pf_sumsptype.jsp?gsi
It works fine. Here 'gsi' is the KEY that has the userid/passwd@connect_string that I have defined in the cmgcgi.dat file on my local pc.
Now the report pf_sumsptype.jsp makes a call in a similar manner to the target report with the same 'gsi' key as in the code :
<form name="form1" method="post" action="/reports/summary_sptype.jsp?gsi">
The call to the target report 'summary_sptype.jsp' fails. It works if I replace 'gsi' in the above line with the userid and connect info.
Is there any other way to hide the database connect info?
Thanks,
Ritendra.

I'm not sure why this should fail, but you could try changing the method above from post to get.
-Manish

Deprovisioning AD Group Assignment fails when setting MX_INACTIVE

Hi,
IdM 7.1 SP5 Patch Level 2
We have an Identity which has some AD Group privileges assigned to it via a role. So these privileges exist as MX_AUTOPRIVILEGE attributes on the identity.
If we remove the role, the privileges are removed and the SAP provisioning framework task DeprovisionADSGroupAssignment works ok.
If we set MX_INACTIVE, de-provisioning is triggered for each repository but the task DeprovisionADSGroupAssignment fails because it cannot determine the DN for the AD groups from the privilege master records.
My analysis so far has deduced the following:
The SAP provisioning framework task DeprovisionADSGroupAssignment uses a javascript sap_getGroupDN to determine the DN value for the ad group. It uses the audit record's UserId field to determine which old_id to read from the MXIV_OENTRIES table. The audit record UserId has the format: e.g. #15:DELETE;0;205081 i.e. attribute 15 on our system is (MX_AUTOPRIVILEGE), the operation is DELETE, the checksum is 0 and the OldValuesId is 205081.
From there the script uses the mskey of the privilege to look up the DN<repository name> attribute on the privilege master. This DN is then used in the To LDAP pass to remove the identity from the AD group.
So unless you actually remove the privileges from the identity, the values don't exist in the MXIV_OENTRIES table and therefore, the script cannot find the mskey for the privilege and therefore cannot get the DN.
Does anyone know if setting MX_INACTIVE is supposed to remove roles and privileges before triggering de-provisioning or how this is designed to work?
Has anyone else de-provisioned AD accounts and groups by just setting MX_INACTIVE?
Edited by: Paul Abrahamson on Dec 3, 2010 5:54 PM

We've now set up a scheduled job to pick up all users which should be made inactive on a given day and this job first removes roles and privileges (triggering de-provisioning of AD groups because the privileges are removed) and then after a while sets the MX_INACTIVE attribute.
Incidentally I also found this [SAP Note 1540835 - LDAP group assignment fails due to ambiguous bchecksum |https://service.sap.com/sap/support/notes/1540835] which 'corrects' some logic in the sap_getGroupDN global script - it now uses context variables instead of reading the MXIV_OENTRIES table etc...

Scheduled report fails when set to print

Similar Messages

Maybe you are looking for