See Group Members

Hi all,
I have an error (class java.lang.NullPointerException)when I try to see the group members on a subscription member selection especially when the group members are groups!
<b>EP 6.20 Patch 29</b>
Regards

Hi Giorj,
this sounds like a bug. Please check if this behaves the same on P30, and if yes, please open an OSS message with a more detailed description (which iView you are using, what are you clicking in detail, how are the groups built, submit stack trace from log...).
Hope it helps
Detlev

Similar Messages

CustomRealm without listing Group Members

Hi,
we are considering to implement a custom security realm. We have a fixed number
of groups to be used in ACLs. Users are stored in an LDAP server.
Group membership depends on some information on the individual user which needs
to be gathered from a separate backend system. Therefore, it is not feasible to
implement the getMembers() method on the Group class since that means iterating
over all "user records" in the backend system.
Here my question:
1. Is the getMembers() method needed for Authorization and/or Authentication or
can we simply make it return an empty list? (We do not mind if we do not see group
members in the administration console.)
2. Is it a good idea at all to have this kind of group definition?
3. What about the method "getUsers" for the ListableRealm? Is this one needed
for Authorization/Authentification. This method poses a similar problem.
Regards,
Andreas

1. Is the getMembers() method needed for Authorization and/orAuthentication or
can we simply make it return an empty list? (We do not mind if we do notsee group
members in the administration console.)I think this method is not needed at all for authentication and
authorization, it's only used to list the users in the WL admin page.
3. What about the method "getUsers" for the ListableRealm? Is this oneneeded
for Authorization/Authentification. This method poses a similar problem.Same answer.

Seeing offline Group members?

This may be a problem of my not understanding how Groups work, but here's the question:
I just created a new buddy Group. I added members to it by dragging from my current Buddies list; some members were online, and some were offline (and viewable in the Offline group). The online buddies now show up in my new Group, but the offline members don't show up anywhere. I dragged them from "Offline" to "New Group" and the drag appeared successful (New Group was selected when I dragged into it), but those buddy names just disappeared altogether. Is there some way to retrieve them? Are offline group members supposed to show up in the Buddy List if you have "Show Offline Buddies" selected (which I do)?
Thanks for any help.

Ok,
Yes Off-Line Buddies will appear in the group they are allocated to IF
1) the Show Off-line Buddies is Selected
2) the Show Off-line Buddies as Group is NOT selected.
I have only used Show Off-Line Buddies with the Groups they belong to.
It is such a long time ago (iChat 2) that I set groups that I have never considered adding a Group and moving people in the manner you describe.
As a first step I would trun Off groups and see if you have all your Buddies.
6:13 PM Friday; January 4, 2008

AD integration, making AD groups members of OD groups

Hello everyone!
I have a 10.4.8 server bound to AD. It is an OD master. On order to define Mac OS X preferences for my users/client computers, I need to work with OD groups.
So I create a new OD group, and grab the appropriate AD user groups and make them members of the OD group. Then, if I define this OD group as the one authorized to log-in to a specific machine (in the OD machine groups), and manage the login preferences for that machine so that it shows the list of authorized users at login. No go! Nothing happens.
If I add a single AD user to the OD group, all is well, and it shows up in the list of users at the login screen of the machine.
So, Open Directory does not seem to be able to see the members of Active Directory groups. Bummer!
Ideas anyone?

Well, this issue really seems to be limited to a specific area.
In my testing, I was able to assign specific permissons on a shared folder to an AD group. The members of that AD group were able to connect to the mac server and have only the permissions I gave them on that folder, which is hosted on the Mac server.
So in that case, the AD members are 'seen' by the Mac server. But not when it comes to populating a login screen list.

How to bulk add group members in Open Directory

So the workgroup manager interface is ghey. The + sign to add group members drag&drops users one at a time. I need to bulk add group members.
I tried ldapadd to add all the users quickly and that doesn't seem to work. The ldap group record now has all the users populated, under the multivalued attribute memberUid), but workgroup manager doesn't see the bulk group members.
Any idea how to do this?

Use tcsh SHELL builtin command 'foreach' to accomplish this:
$ tcsh
$ which foreach
foreach: shell built-in command.
$ foreach user (`cat users.txt`)
foreach? echo adding $user to group
foreach? /usr/bin/dscl -u diradmin -P [passwd] /LDAPv3/127.0.0.1 append /Groups/yourgroup GroupMembership $user
foreach? end

Missing group members in ADSI & LDAP

Hi there. I have an AD problem here (obviously :))
It started by wanting to list all members of a group (recursivly, but that does not matter for now, the problem occurs on a single group).
I tried this in Powershell, but our AD is still on 2003, so no AD web services, so no powershell.
In PHP & Java I got the same results: It only shows 3 members, where there should be 23.
In Active Directory Computers & Users, these 23 (including a group) are listed on the member tab.
In ADSI I see only the 3 entries mentioned above in the attribute "member", and the other users don't have the membersOf attribute backlink.
dsget group -members (-expand) works properly.
Where do Active Directory Computers & Users and dsget get their information regarding group members from, and how can I access that programmatically via LDAP access from php or Java?

Sorry, forgot about the Domain Users or the Domain Admins group over the link/image upload issue.
No, it wasn't these groups.
But: you were on the right path. The term primary group is what I was missing.
The group is for one of our roadwarrior subsidiaries, and they are not Domain users as primary group, but the one shown here.
Do you happen to know which LDAP attributes represent the primary group association?
The primaryGroupID attriute store the RID of the group that is assigned as the primary group. This was to work around the limitation in Windows 2000 before LVR (Linked-Value Replication) so that more than 5000 users could be member of the same group. (It also
plays a role for POSIX - Services for Mac clients)
Enfo Zipper
Christoffer Andersson – Principal Advisor
http://blogs.chrisse.se - Directory Services Blog

How to restrict Permission to the group members in Forum??

Hi All,
I have created discussion forum for a group in that group some members are Expert person who will answer thread posted by the group members
Noe the issue that i am faceing is that:
<b>1)when any user posts thread he and some other group member other than expert is able to see Reply and delete link,with that link any other person can reply or delete thread that i want to restrict.
delete and reply link should be visible only to Expert person
2)Edit Subscription tab is also visible to every group people but that should be only visible to Expert that also i want to restrict.</b>
I think that this thing can be achived by assigning proper permission to the users
Any help achiveing me this will be highly appretiated and rewarded.
thanks in advance.
Vinit

"crystalReportViewer1.ReportSource" i dont find this anywhr in the file.
pasting a small portion of my code.....
<%@ Page Language="C#" MasterPageFile="~/MasterPage.master" AutoEventWireup="true" CodeFile="Reports.aspx.cs" Inherits="Reports" Title="Reports Details" %>
                        <CR:CrystalReportViewer ID="CrystalReportViewer1" runat="server" AutoDataBind="True"
        DisplayGroupTree="False" DisplayToolbar="False" Height="1013px"
        Width="773px" />
                    </td>
                </tr>
                <tr>
                </tr>
                <tr>
                </tr>
               <tr>
                </tr>
                <tr>
                    <td colspan="9">
    <CR:CrystalReportSource ID="CrystalReportSource1" runat="server">
        <Report FileName="CrystalReport1.rpt">
        </Report>
    </CR:CrystalReportSource>
                    </td>
                </tr>
            </table>
        </div>
    </div>
    <br />
</asp:Content>

Cant see group calendars

So i have setup iCal server in an open directory environment. Its running ok, and i can manage and use individual user calendars, but the group calendars are not showing up in iCal on the client machine im using for testing. In this scenario i have a group called "Staff Members". and i have "wiki and blog" as well as "web calendar" checked in workgroup manager. with "group members only" set as read and write permissions.
If i access the web based calendar i do see the group calendar, and have all abilities i would expect.
The client machine is a bound member of the open directory. in iCal i added the account, and i am given a personal calendar which i can edit and use. but i do not see the group calendar. and if i go into "Delegation" it says i cannot access any accounts.

Hi and welcome to the Skype Community,
do you see the conversation listed in your Skype application at all?
Follow the latest Skype Community News
↓ Did my reply answer your question? Accept it as a solution to help others, Thanks. ↓

LDAPRealmV2 using group members as entries

Hi all,
we have configured our ldaprealm v2 (wls 6.1) to have group members as entries
below the group as opposed to the normal setup with group members as attributes
of one group. This has imposed some strange problems. We have several groups mapped
to one role in our webapps, but only members of some of the groups get access.
From the debug output of the realm I see that the groups working have a dn like:
groupName=GROUPA, ou=Groups, dc=common, dc=company,dc=com
and the ones that don't have a dn like:
groupName=GROUPB,ou=Groups,dc=common,dc=company,dc=com
that is the only differences are the spaces. I don't see how this could make such
a difference. In the LDAP all the groups look exactly the same.
Does anyone have any experience with this or have seen similar problems
Our ldap realm is configured like this:
server.host=someserver;
server.principal=cn=Manager,dc=company,dc=com;
user.filter=(&(uid=%u)(objectclass=person));
user.dn=ou=People, dc=common, dc=company, dc=com;
membership.scope=sub;
membership.scope.depth=1;
membership.filter=(&(member=%M)(objectclass=groupMember));
group.filter=(&(groupName=%g)(objectclass=Group));
group.dn=ou=Groups, dc=common, dc=company,dc=com

Check your attribute precedence in the metaverse for the group objects "member" attribute. Make sure your ADMA is set to the highest precedence.
Also ensure that the attribute flow on your FIM MA is an export and not an import.

6.1 SP2 Caching realm not caching group members

Hello:
We have caching realm set over LDAP security realm.
We see caching realm never caching group members.
Any help is appreciated.
Thanks
Gennadiy
Here is the sequence we see:
1) Search for user name - OK
2) Search for group name - OK
3) - ALWAYS going to LDAP to get group members even though they should be cached
at this point.
The question is - why does it go to LDAP at all?
I am doing the same call a 1-2 seconds apart. The group members should be cached.
It looks like caching realm does not actually cache the members within a group.
The realm is configured to cache group membership:
Enable Group Cache true
Group Cache Size: 211
Group Cache TTLPositive: 600
Group Cache TTLNegative: 600
Group Membership Cache TTL: 300
<Jul 17, 2002 8:53:49 AM EDT> <Debug> <CachingRealm> <getUser("AppLayerRunAs")>
<Jul 17, 2002 8:53:49 AM EDT> <Debug> <CachingRealm> <user: pos HIT AppLayerRunAs>
<Jul 17, 2002 8:53:49 AM EDT> <Debug> <CachingRealm> <getAcl("weblogic.jndi.CCSAcctEntityBean",
'.')>
<Jul 17, 2002 8:53:49 AM EDT> <Debug> <CachingRealm> <getAcl("weblogic.jndi.CCSAcctEntityBean")>
<Jul 17, 2002 8:53:49 AM EDT> <Debug> <CachingRealm> <acl: neg HIT weblogic.jndi.CCSAcctEntityBean>
<Jul 17, 2002 8:53:49 AM EDT> <Debug> <CachingRealm> <getAcl("weblogic.jndi")>
<Jul 17, 2002 8:53:49 AM EDT> <Debug> <CachingRealm> <acl: neg HIT weblogic.jndi>
<Jul 17, 2002 8:53:49 AM EDT> <Debug> <CachingRealm> <getAcl("weblogic")>
<Jul 17, 2002 8:53:49 AM EDT> <Debug> <CachingRealm> <acl: neg HIT weblogic>
<Jul 17, 2002 8:53:49 AM EDT> <Debug> <CachingRealm> <getUser("AppLayerRunAs")>
<Jul 17, 2002 8:53:49 AM EDT> <Debug> <CachingRealm> <user: pos HIT AppLayerRunAs>
<Jul 17, 2002 8:53:49 AM EDT> <Debug> <CachingRealm> <getUser("AcctEntityUsers")>
<Jul 17, 2002 8:53:49 AM EDT> <Debug> <CachingRealm> <user: neg HIT AcctEntityUsers>
<Jul 17, 2002 8:53:49 AM EDT> <Debug> <CachingRealm> <getGroup("AcctEntityUsers")>
<Jul 17, 2002 8:53:49 AM EDT> <Debug> <CachingRealm> <group: pos HIT AcctEntityUsers>
<Jul 17, 2002 8:53:49 AM EDT> <Debug> <LDAPRealm> <search("ou=ldap, ou=dev_serv,
ou=hick, o=ccs", "(&(member=cn=AppLayerRunAs,ou=LDAP
ICK,o=CCS)(objectclass=groupofuniquenames))", base DN & below)>
<Jul 17, 2002 8:53:49 AM EDT> <Debug> <CachingRealm> <getUser("AppLayerRunAs")>
<Jul 17, 2002 8:53:49 AM EDT> <Debug> <CachingRealm> <user: pos HIT AppLayerRunAs>

This has been fixed in SP3.
-utpal

Migrate network object group members; risk

       We upgraded to new 5555 hardware and jumped from 8.2 to 9.1 last year. Our objects listing is now a bit messy. I have never run the "Migrate Network Object Group Members" menu option in asdm. I see what it is going to do, I am not sure it really helps me clean old objects, it seems low risk, but when I walk up to execution, there are a lot of changes it wants to make. We always save backup configurations but, if there are "gotchas" I don't want to put the company in that position. What has been the communities, Cisco's experience? Thanks for any feedback. jc

John,
if you feel that is risky, you can always go for plan B.
- you can take closure look at the object groups and decide new object naming convention policy.
- from ASDM or CSM, you can see overlapped or duplicate rules, so you can start with reducing them
- you can see same services used in couple of rules with different service groups.
     - like object-group service WEB-PORTS tcp
                    port-object eq http
                    port-object eq https
             object-group service APPLICATION-PORTS tcp
                    port-object eq http
                    port-object eq https
               object-group service APPS-PORT tcp
                    port-object eq www
                    port-object eq https
- you can replace all these different object-group with one object group. like WEB-PORTS.
- same way you can do excercise for network group as well.
hope this helps.
JD...

How to specify which group members have wiki write permissions

In the 10.5 Workgroup Manager, Basic tab, there are two drop down boxes after the checked boxes for enbabling wiki, blog, mailing lists, web calendar, et al -
Allow [group members only | some group members | authenticated users | anyone]
to write to these services.
If I select "some group members" how do I actually say which group members? I see nowhere that I can specify that.
Specifically this is in regards to the wiki.

Unless I'm missing something, the directory.app only lets me do the same thing the Server Admin does, add people to a group and enable services to that group.
For example I have a group called Techs, they have a mailing list and wiki.
Some of the junior techs I only want to have read access, others write access.
I don't see how I can specify user1 has read only access but user2 and user3 have write access.

How can I set up an SMS group so that all group members can dial a group number and have a text sent out to all members of the group

How can I set up an SMS group so that all group members can dial a group number and have a text sent out to all members of the group
This would be an SMS group similar to an email listserv but running on the SMS network
I have seen private individuals offering this service
It seems strange to me that no internet site like Apple, Yahoo or Google offers this as a free service much as the email group services are free services.
Steve

I think the app GroupMe might do what you want. You might also try contacting your carrier. My carrier offered some fancy group texting service for a while but they never really advertised it so, unless you asked, you never would have known. But, GroupMe is available in the app store. There are lots of other apps that also do group texting but it seems to be the one that gets recommended the most.

How to see Shared Members in Smart View on Ad-hoc Analysis mode

Hi All,
We are using Hyperion Planning v 11.1.1.3.
For the alternate hierarchy we have created shared members. But in Smart View we are unable to see Shared members hierarchy in Ad-hoc analysis mode.
Is this limitation in Hyperion Planning?
Or
Is there any way to see shared members Hierarchy in Smart View in Ad-hoc analysis mode?
It is urgent requirement Please let me know as early as possible
Thanks in Advance!!!

When you say open data form in Ad-hoc mode, can you do that? I think when you select Ad-hoc mode, you are basically connecting to Essbase and therefore need to manually select the members. (of course, I've got a 11.1.2 env right now so not too sure of 11.1.1.3)
I'm able to just go to Member Selection and select whatever hierarchy i want, Shared or Stored, when I'm connected to Essbase. When connecting to Planning, I dont have any option of opening the form as Ad-hoc mode.
Can you see the hierarchy if selecting the members using Essbase connection and not planning?
Cheers,
Abhishek

How to show logged-in Line Group Members in a Hunt Pilot (CUCM V7.1.3)

I have configured a Hunt Pilot with a Hunt List which points to a Line Group with some DNs as Line Group Members. Additionally i gave the affected Users the option to log-in or log-out from the Hunt Pilot by configuring the "Hunt Group Logout" Button in the corresponding Phone Button Template.
Is there a way to find out who is logged-in or logged-out from the Hunt Pilot?

Hi Bill,
thanks for your very interesting hint .
I run the query you posted and actually got the following output. But the displayed linegroups are only a subset from my configured 79 linegroups . Is there a possibility to display all linegroups with all corresponding DNs and can i display this information for only one linegroup?
When i know the queery that satisfy my claims, i will write a small web application that uses the AXL-SOAP API.
Regards, Robert
admin:run sql select lg.name as LineGroup,n.dnorpattern,dhd.hlog from linegroup as lg inner join linegroupnumplanmap as lgmap on lgmap.fklinegroup=lg.pkid inner join numplan as n on lgmap.fknumplan = n.pkid inner join devicenumplanmap as dmap on dmap.fknumplan = n.pkid inner join device as d on dmap.fkdevice=d.pkid inner join devicehlogdynamic as dhd on dhd.fkdevice=d.pkid order by lg.name
linegroup                      dnorpattern     hlog
============================== =============== ====
LG_A-Ulr4_Augsburg_9965077_235 \+498215075234 f
LG_A-Ulr4_Augsburg_9965077_235 \+498215075209 f
LG_A-Ulr4_Augsburg_9965077_235 \+498215075224 f
LG_A-Ulr4_Augsburg_9965077_235 \+498215075226 f
LG_A-Ulr4_Augsburg_9965077_235 \+498215075227 f
LG_A-Ulr4_Augsburg_9965079_300 \+498215075327 f
LG_A-Ulr4_Augsburg_9965079_300 \+498215075306 f
LG_AB-Fried17_9965006          \+496021391713 f
LG_AB-Fried17_9965006          \+496021391714 f
LG_AB-Fried17_9965006          \+496021391721 f
LG_AB-Fried17_9965006          \+496021391727 f
LG_AM-Mar9_9965004             \+499621474921 f
LG_BT-Sch9_9965010             \+4992189423    f
LG_DD-Fet29_9965014            \+493514459055 t
LG_HO-Bah1_9965020             \+4992818194122 f
LG_KE-Moz31_9965024            \+498315215110 f
LG_LA-Dre11_9965025            \+498714308419 f
LG_LA-Dre12_9965026            \+498719239113 f
LG_Mue-Sta41_9965029           \+498631386227 f
LG_N-KOEN11_9965034            \+4991124039112 f
LG_N-KOEN11_9965034            \+4991124039142 f
LG_N-KOEN11_9965034            \+4991124039110 f
LG_N-Ste6_9965057_400          \+499112428403 f
LG_N-Ste6_9965058_450          \+499112428455 f
LG_NES-Sie2_9965008            \+499771610413 f
LG_NES-Sie2_9965008            \+499771610421 f
LG_NM-Bah12_9965030            \+499181293312 f
LG_PA-Kle13_9965035            \+498519594109 f
LG_PA-Kle13_9965035            \+498519594113 f
LG_PAN-Drb12_9965036           \+498561961225 t
LG_PAN-Drb12_9965036           \+498561961224 f
LG_R-Her2_9965068_400          \+499413783414 f
LG_TS-Bah26_9965040            \+498619887312 f
LG_Voicemail                   997005          t
LG_Voicemail                   997006          t
LG_Voicemail                   997007          t
LG_Voicemail                   997008          t
LG_Voicemail                   997009          t
LG_Voicemail                   997010          t
LG_Voicemail                   997011          t
LG_Voicemail                   997012          t
LG_Voicemail                   997013          t
LG_Voicemail                   997014          t
LG_Voicemail                   997015          t
LG_Voicemail                   997016          t
LG_Voicemail                   997017          t
LG_Voicemail                   997018          t
LG_Voicemail                   997019          t
LG_Voicemail                   997020          t
LG_Voicemail                   997021          t
LG_Voicemail                   997022          t
LG_Voicemail                   997023          t
LG_Voicemail                   997024          t
LG_Voicemail                   997025          t
LG_Voicemail                   997026          t
LG_Voicemail                   997027          t
LG_Voicemail                   997028          t
LG_WEN-Buer16_9965041          \+499614820413 t
LG_WEN-Buer16_9965041          \+499614820415 f
LG_WM-Puet35_9965042           \+49881922927   f
admin:

See Group Members

Similar Messages

Maybe you are looking for