Service Account Management through Request Templates
Hi,
I am trying to implement Service Account lifecycle use cases (Create, Modify, Delete) on 2 resources(AD User, iPlanet User) through Request templates. In this case OOTB tasks - Service Account Alert, Service Account Changed, Service Account Moved with resource specific Process definitions are not get triggered as I am initiating process through Request Templates.
I want to trigger post process EventHandler upon triggering any of these events. so, I created metadata xml file as the following and imported it into MDS.
-----------------EventHandler Metadata file------------------------
<?xml version='1.0' encoding='utf-8'?>
<eventhandlers>
<action-handler class="com.wipro.sdf.iam.oim.plugin.ServiceAccountCreationEventHandler" entity-type="Resource" operation="PROVISION" name="ServiceAccountCreateEventHandler" stage="postprocess" order="1021" sync="TRUE"/>
</eventhandlers>
----------------------------XXX----------------------------------------------
When I trigger create event of SA on any of the resources, the EventHandler is being invoked and from execute() method, Orchestration is giving the following data
{UD_IPNT_USR_LAST_NAME=TestTwo, BENEFICIARYKEY=798, UD_IPNT_USR_COMMON_NAME=SA Test Two, *ResourceKey*=12, serviceaccount=true, UD_IPNT_USR_SA_ADMIN=USER16TE, UD_IPNT_USR_USERID=SATEST2, UD_IPNT_USR_FIRST_NAME=SAccount}
My EventHandler has to do some actions on target resource(AD / iPlanet),so I would like to get resource connection details like IP, port , admin login details etc.
To fetch those details, I am using ResourceKey that is coming from Orchestration.
When I use the following code to find Resource details based on Key, its throwing resource not found exception.
-----------------------Code from execute() of EventHandler----------------------
String resKey = getParamaterValue(parameters, "ResourceKey");
tcITResourceInstanceOperationsIntf resInsObj = Platform.getService(tcITResourceInstanceOperationsIntf.class);
//Get Resource Details based on Resource Key
HashMap searchMap= new HashMap();
searchMap.put(Constants.IT_RESOURCE_KEY, resKey);
logger.debug(methodName+" - IT Resouece Search Map is : "+searchMap);
tcResultSet resultSet = resInsObj.findITResourceInstances(searchMap);
-------------------------------End of code ------------------------------------------------
I tried finding for the table which stores all IT Resource connection details. But no luck.
Now my questions are:
1. Which table stores all IT Resource Information that can be seen from Design Console -> Resource Management -> IT Resource Type Definition - > Resource?
2. Which table stores Resource Key and Name details?
3. When we do query for records from any form in Design Console, where exactly would logs get recorded? (as it queries DB to fetch information there should some file like DB Tracer Log etc)
Could somebody please answer these questions and give some hint to implement SA management through Req Templates?
Thank you in advance,
Mounika
Hi kevin,
thanks for reply.
i am thinking that, Even though OIM11G is developed in ADF,some parts of the code is in struts only,like xlWebApp.war .
i have seen source code of xlWebApp.war folder that is there in OIM11g.
it seems to be developed in struts only.
is there any ADF interaction in that?
i have written helloworld program in struts,that is working fine.
i have done that,for ADUser resource popup i added button "serviceaccount for this resource".when i click that one jsp page will come.
so i am thinking that,some other reason is there for not working.
can u please tell me the reason?
Similar Messages
-
Hi all,
I have read in the documentation(Design Client) that OIM connector provides different prvisioning process for Service account (there are alltogether separate tasks for these accounts under process definition) and Normal account for each target resource. Could any one please elaborate me how to process service account provisioning (if there is any difference) as there is no documentation stating underline.Hi ,
I am having the same concern. I want to implement service account management through OIM ,OOB AD connector provides by default tasks to handle service account scenerio. Please provide the suggestion regrding the implementation of service account provisioning, if there is any document related to it, will be quite helpfull.
Thanks
Edited by: user8634889 on Sep 15, 2009 11:09 PM -
OIM 11g - Error Creating Custom 'Service Account' Field
Hi experts,
we would like to create a custom "Service Account" checkbox on a Form Provisioning, in way to enable\disable the 'service account'
status on a target account.
We wanto to control the 'Service Account' status through a checkbox into the account form.
Here our steps:
- Create a new Field on 'UD_ADUSER' Form, we add a 'Service Account' CheckBox as boolean type with default value = 0.
- Create a new Adapter 'Service Account':
---- into 'Variable List' tab we define 2 variables: ProcessInstance -> Long and ServiceAccountCheckBox -> boolean
---- into 'Adapter Task' tab we define an IF(ServiceAccountCheckbox == 1) launch tcUserOperationsIntf.changeToServiceAccount method, with our variable 'ProcessInstance' as Input
- Create a new task into 'Process Definition', we created 'Service Account Updated'.
---- into task tab named 'Integration' we set our custom adapter, mapping Process Data > Process Instance and Process Data > Service Account with adapter variables.
When we assign an 'AD User' resource to a user, the new checkbox 'Service Account' is showed into the form.
If we check/uncheck the checkbox the task 'Service Account Updated' is launched, but the response is "*Specified User Account Not Found*"
I think that the problem is into the adapter..
Any one can help us?
Best Regards
ATAs I said map user key(usr_key) and process instance key(orc_key) form design console
and use below query to get oiu_key
prockey=<PROCESS_INSTANCE_KEY>;
user_key=<USR_KEY>;
String sqlquery="select oiu_key from oiu " +
"where ORC_KEY = prockey " +
"and usr_key = user_key" ;
Connection con=Platform.getOperationalDS().getConnection();
Statement st=con.prepareStatement(query);
ResultSet rs=st.executeQuery();
while(rs.next())
long oiuKey=rs.getLong("oiu_key");
now pass this key in the method -
ICM LOGGER -Service Account Failure
Hi,
Please suggest me for below-
ICM Version- 7.5, SQL Version-2005
I have 3 Servers for ICM.
1 for Progger 1 , 1 for Progger 2 and 1 for AW/HDS.
I have Installed both the logger and AW?HDS and installed SQL 2005 on the machine and updated SQL 2005 with Service Pack 3.
I created database(from ICMDBA)for Progger 1 and Progger 2 and AW/HDS.
Now the moment I started Logger Services , It got Corrupted .
I am getting the error" Unable to start service (Cisco ICM Ins1 Logger A).The service did not start due to loggon failure"
Please find the enclosed .
Thanks,
ManishRan into a similar situation recently. Be sure that the applied domain policy to the server allows for the domain account to 'logon as a service'. Also helpful in troubleshooting this is using the new 'Service Account Manager' tool available in the ICM folder. It could be as simple as a password mismatch.
-
How to change myself to account manager from account member?
Hi,
I've been to the Verizion store where me and my dad activated our cellphones to change my role to account manager(since me and my dad's phones were activated by my uncle-in-law, which means my phone lines are his sub-account or something).
we went there since i'm moving to Louisiana and just wanted to change the billing address, so we talked to the employee at there and she simply put me as an account manager or something, but when i checked my verizon today, i'm still an account member.
Can anybody tell me what i have to be an account manager? or just wanna know how to change the billing address..
hope you guys can help me out.
thanks!Hey Mrpark121,
Being an account manager is extremely convenient. It allows you to view the bill and make account changes without the account owner present. It also means you are doing something right, because the account owner has placed that trust in you to make those changes.
If you are listed on the account as an account manager you can call in and have the ability to discuss the account in complete detail and make changes. The only changes you cannot make are adding or removing an account manager as well as add, change or delete the billing system password.
You would have to be given that same access online. Right now you are an account member so the information you are allowed to see is limited. For steps on how to make you an account manage through My Verizon, visit http://vz.to/ZIaxkY.
Then when you're ready to change the billing address please visit, http://vz.to/WH2nm8.
Let us know if you need additional assistance.
NickB_VZW
VZWSupport
Follow us on Twitter @VZWSupport -
Service Account details are not going through header(OSB Business service)
Hi
I have an issue with service account. Assume I have a proxy service A, Business Service B, Proxy service C.
A invokes B and B invokes C (A --> B --> C). All calls are through http protocol.
I created a service account with userid and password details and attached it to the Business service B(Static for basic authentication).
Added log activity in proxy service C for context variable $header to verify whether userid and password are coming through request header or not.
I executed proxy service A from sbconsole but I couldn't see userid and password details of created service account in the logs. Only nemespace are logged in the file.
<soap:Header xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"></soap:Header>>
Can someone please help me why service account details are not going through business service request. Am I missing any steps?
Thanks in advance
KK
Edited by: 966531 on Oct 23, 2012 4:23 AMBasic authentication information is stored under transport headers (check $inbound) whereas $header is populated for message headers (for e.g. - SOAP headers), so you should be checking $inbound instead of $header
Regards,
Anuj -
Activity Templates inside Service Request Templates
I have run into a problem and I was hoping there is an easy solution.
I have built Activity Templates for Access Requests, one template per application.
Then I have Service Requests for per Job Code, which include up to 20 of those Activity Templates.
I did it this way specifically so if an Application Access process changed, I could just edit the Activity Template for that Application, and all the Service Requests that use that template would update as well.... or so you would think.
I just had to change some, and my service request is still showing the old templates, not the esits I did. I waited over an hour. Is this a workflow problem, or a functionality problem? If the Service Request Template saves when created instead of pullign
the activity templates each time its opened, it defeats my purpose of trying to do this modularly. This also makes absolutely no sense to me either, if that is in effect how it works.
What that will mean is I will have to edit every service request that uses a specific activity, instead of just that activity template.Activity templates do not cascade. When you add an activity template to a Service Request, SCSM creates a copy of the activity template _inside_ the SR template. That's where they diverge.
Any further changes to the original activity template will not be replicated to any SRs that contain that activity.
I'm sorry to say that's the way SCSM's template management was implemented. -
Hi All,
I am seeing the following error for SMS_AWEBSVC_CONTROL_MANAGER component with Message ID: 8100
Application Web Service Control Manager detected AWEBSVC is not responding to HTTP requests. The http status code and text is 400, Bad Request.
awebsctl.log file has below errors:
Call to HttpSendRequestSync failed for port 80 with status code 400, text: Bad Request
SMS_AWEBSVC_CONTROL_MANAGER 12/22/2014 3:37:55 PM
13920 (0x3660)
AWEBSVCs http check returned hr=0, bFailed=1
SMS_AWEBSVC_CONTROL_MANAGER 12/22/2014 3:37:55 PM
13920 (0x3660)
AWEBSVC's previous status was 1 (0 = Online, 1 = Failed, 4 = Undefined)
SMS_AWEBSVC_CONTROL_MANAGER 12/22/2014 3:37:55 PM
13920 (0x3660)
Health check request failed, status code is 400, 'Bad Request'.
SMS_AWEBSVC_CONTROL_MANAGER 12/22/2014 3:37:55 PM
13920 (0x3660)
Management point and Application Catalog Website Point are installed on the same Server where I am seeing the error for Application Catalog Web Service Point role. Management Point and Application Catalog Website Point are functioning properly. Application
Catalog Website is working.
Thanks & Regards, KedarHi Jason,
Application Catalog Web Service Point and Application Catalog Website Point; both are installed as per below configuration on same Server:
IIS Website: Default Web Site
Port Number: 80
with default value for Web Application Name configured.
For SMS_AWEBSVC_CONTROL_MANAGER component, I am getting below error in Component Status:
Application Web Service Control Manager detected AWEBSVC is not responding to HTTP requests. The http status code and text is 400, Bad Request.
Possible cause: Internet Information Services (IIS) isn't configured to listen on the ports over which AWEBSVC is configured to communicate.
Solution: Verify that the designated Web Site is configured to use the same ports which AWEBSVC is configured to use.
Possible cause: The designated Web Site is disabled in IIS.
Solution: Verify that the designated Web Site is enabled, and functioning properly.
For more information, refer to Microsoft Knowledge Base.
And awebsctl.log has the below error lines:
Call to HttpSendRequestSync failed for port 80 with status code 400, text: Bad Request
SMS_AWEBSVC_CONTROL_MANAGER
12/23/2014 11:04:36 AM 16388 (0x4004)
AWEBSVCs http check returned hr=0, bFailed=1
SMS_AWEBSVC_CONTROL_MANAGER
12/23/2014 11:04:36 AM 16388 (0x4004)
AWEBSVC's previous status was 1 (0 = Online, 1 = Failed, 4 = Undefined)
SMS_AWEBSVC_CONTROL_MANAGER
12/23/2014 11:04:36 AM 16388 (0x4004)
Health check request failed, status code is 400, 'Bad Request'.
SMS_AWEBSVC_CONTROL_MANAGER
12/23/2014 11:04:36 AM 16388 (0x4004)
STATMSG: ID=8100
What should I check from IIS side?
Application Catalog Website is functioning properly.
Thanks & regards,
Kedar
Thanks & Regards, Kedar -
Query relating to the creation of Managed Service Accounts
Hi Folks
I am studying for my 70-411 exam and have a query relating to the creation of Managed Service Accounts.
I have successfully created an MSA account named 'MSATest' on a DC using:
new-adserviceaccount -name msatest –dnshostname home-dc-01 -passthru
and
add-AdcomputerServiceAccount -identity home-ap-01 -serviceaccount msatest -passthru
However the guide that I am using now says that I now need to run: Install-ADServiceAccount on the host computer in the domain to install the MSA in order to make available it available for use by services.
So on my member server (home-ap-01) I have installed the Active Directory Module for powershell and ran:
PS C:\Users\administrator.PCECORP> Install-ADServiceAccount -Identity msatest
Install-ADServiceAccount : Cannot install service account. Error Message: 'An
unspecified error has occurred'.
At line:1 char:1
+ Install-ADServiceAccount -Identity msatest
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : WriteError: (msatest:String) [Install-ADServiceA
ccount], ADException
+ FullyQualifiedErrorId : InstallADServiceAccount:PerformOperation:Install
ServiceAcccountFailure,Microsoft.ActiveDirectory.Management.Commands.Insta
llADServiceAccount
PS C:\Users\administrator.PCECORP>
However this errors, Have I misunderstood the purpose of the Install-ADServiceAccount ? or am I doing something wrong?
Thanks in advance for you help.Try using -RestrictToSingleComputer parameter when creating service account with New-ADServiceAccount.
Gleb.
Hi Gleb
Thank you for your help, it is appreciated. That did the trick.
All the best. -
Unable to Create Service Request Template in CRM
Hello,
I need to create a service request template in crm web ui,
Following are the steps followed.
I have identified the transaction type as SRQT screen shot attached below
However when I click on on the work center link groups of the service pro role, I am not able to find the same for the service request template
As per the post below it says that you need to go navigation bar profile and add the SM-SUPPORT work center and the work center link group as SM-SRQT-CR
How to customize service request templates
The error appears when I try to add the logical link id,
Because of the above error I am not able to create service request template in sap crm, please advice which logical link ID, I need to use so that the service request template can be created in the system.
Kind Regards
AtulHi Atul,
1. Screen shot 1 is correct
2. Screen shot 2 - You are at end of all work centers in your custom role which you might have copied from standard or Z role. If you look in standard role SERVICEPRO, navigation bar profile SRV-PRO, work center - SRV-ORD, you will find service request template
In Cases work Center in standard SERVICEPRO role you can create service request template.
Try copying this to your custom role in your required work center. It should work.
Regards,
Niraj -
Are Group Managed Service Accounts supported by BizTalk?
Hi all,
I saw that there is already a discussion about the Managed Service Accounts support in BizTalk (http://social.msdn.microsoft.com/Forums/en-US/ffcea33b-652b-4866-8bb2-21ffc7d8bffa/are-managed-service-accounts-supported-in-biztalk?forum=biztalkgeneral) with
a clear response to NO.
But Windows 2012 R2 introduced the "Group Managed Service Accounts" which seems to be a better way to workaround the MSA limitations.
Are the gMSA supported in BizTalk?
Thanks.While the documentation mentions that gMSA are managed by the Domain Controller and is introduced in Windows Server 2012. I interpret this to imply that this functionality would be AVAILABLE ONLY if you're running your DOMAIN CONTROLLERS on a Windows Server
2012 or higher DOMAIN.
If you just setup BizTalk on a Windows Server 2012 machine but in a domain which is running on Windows Server 2003 or 2008 compatibility mode because of other things such as Exchange, etc. then you WOULD NOT be able to leverage the gMSA functionality.
If on the other hand, your domain controllers are running Windows Server 2012 and Domain Level is Windows Server 2012 then you should be able to leverage gMSA accounts for BizTalk/SQL/IIS Service accounts.
Regards.
NOTE: The effect of a gMSA account on the Enterprise SSO service which has a serious dependency on the service account password and encryption however would still need to be evaluated. -
What permission does the Service account requires on AD for the Workflow manager 1.0 to be configured in SharePoint Farm?
The workflow manager configuration wizard crashes with the below error when used a domain account (setup account with full prvilige on sql and server). It requires some specific permissions on AD ? I couldnt see any documentation stating what permission
it requires.
Can anyone help ?
Problem signature:
Problem Event Name: CLR20r3
Problem Signature 01: AUTRTV22OQMI5JWSVNDSSNCH0E5DQ2L1
Problem Signature 02: 1.0.20922.0
Problem Signature 03: 505e1b30
Problem Signature 04: System.DirectoryServices.AccountManagement
Problem Signature 05: 4.0.30319.17929
Problem Signature 06: 4ffa5bda
Problem Signature 07: 3ef
Problem Signature 08: 348
Problem Signature 09: KCKGYE1NBUPA2CLDHCXJ0IFBDVSEPD1F
OS Version: 6.2.9200.2.0.0.272.7
Locale ID: 1044
Additional Information 1: 8e7b
Additional Information 2: 8e7b3fcdf081688bfcdf47496694f0e4
Additional Information 3: c007
Additional Information 4: c007e99b2d5f6f723ff4e7b990b5c691
Log Name: Application
Source: Application Error
Date: 27.08.2014 11:47:54
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: OSS01-MAP-226.global.corp
Description:
Faulting application name: Microsoft.Workflow.Deployment.ConfigWizard.exe, version: 1.0.20922.0, time stamp: 0x505e1b30
Faulting module name: KERNELBASE.dll, version: 6.2.9200.16864, time stamp: 0x531d34d8
Exception code: 0xe0434352
Fault offset: 0x0000000000047b8c
Faulting process id: 0x23a0
Faulting application start time: 0x01cfc1dbe703a8ac
Faulting application path: C:\Program Files\Workflow Manager\1.0\Microsoft.Workflow.Deployment.ConfigWizard.exe
Faulting module path: C:\Windows\system32\KERNELBASE.dll
Report Id: 36f30eb4-2dcf-11e4-9415-005056892fae
Faulting package full name:
Faulting package-relative application ID:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2014-08-27T09:47:54.000000000Z" />
<EventRecordID>7471545</EventRecordID>
<Channel>Application</Channel>
<Computer>OSS01-MAP-226.global.corp</Computer>
<Security />
</System>
<EventData>
<Data>Microsoft.Workflow.Deployment.ConfigWizard.exe</Data>
<Data>1.0.20922.0</Data>
<Data>505e1b30</Data>
<Data>KERNELBASE.dll</Data>
<Data>6.2.9200.16864</Data>
<Data>531d34d8</Data>
<Data>e0434352</Data>
<Data>0000000000047b8c</Data>
<Data>23a0</Data>
<Data>01cfc1dbe703a8ac</Data>
<Data>C:\Program Files\Workflow Manager\1.0\Microsoft.Workflow.Deployment.ConfigWizard.exe</Data>
<Data>C:\Windows\system32\KERNELBASE.dll</Data>
<Data>36f30eb4-2dcf-11e4-9415-005056892fae</Data>
<Data>
</Data>
<Data>
</Data>
</EventData>
</Event>
Log Name: Application
Source: .NET Runtime
Date: 27.08.2014 11:47:54
Event ID: 1026
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: OSS01-MAP-226.global.corp
Description:
Application: Microsoft.Workflow.Deployment.ConfigWizard.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.DirectoryServices.AccountManagement.MultipleMatchesException
Stack:
at System.DirectoryServices.AccountManagement.ADStoreCtx.FindPrincipalByIdentRefHelper(System.Type, System.String, System.String, System.DateTime, Boolean)
at System.DirectoryServices.AccountManagement.ADStoreCtx.FindPrincipalByIdentRef(System.Type, System.String, System.String, System.DateTime)
at System.DirectoryServices.AccountManagement.Principal.FindByIdentityWithTypeHelper(System.DirectoryServices.AccountManagement.PrincipalContext, System.Type, System.Nullable`1<System.DirectoryServices.AccountManagement.IdentityType>, System.String,
System.DateTime)
at System.DirectoryServices.AccountManagement.UserPrincipal.FindByIdentity(System.DirectoryServices.AccountManagement.PrincipalContext, System.String)
at Microsoft.ServiceBus.Commands.Common.SecurityHelper.IsUserValid(System.DirectoryServices.AccountManagement.PrincipalContext, System.String)
at Microsoft.ServiceBus.Commands.Common.SecurityHelper.IsDomainUserValid(System.String, System.String)
at Microsoft.ServiceBus.Commands.Common.ValidateUserAttribute.Validate(System.String)
at Microsoft.Deployment.ConfigWizard.UICommon.AccountDetailsViewModel.ValidateDomainUser()
at Microsoft.Deployment.ConfigWizard.UICommon.AccountDetailsControl.UserIdTextBox_LostFocus(System.Object, System.Windows.RoutedEventArgs)
at System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
at System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)
at System.Windows.Controls.Primitives.TextBoxBase.OnLostFocus(System.Windows.RoutedEventArgs)
at System.Windows.UIElement.IsFocused_Changed(System.Windows.DependencyObject, System.Windows.DependencyPropertyChangedEventArgs)
at System.Windows.DependencyObject.OnPropertyChanged(System.Windows.DependencyPropertyChangedEventArgs)
at System.Windows.FrameworkElement.OnPropertyChanged(System.Windows.DependencyPropertyChangedEventArgs)
at System.Windows.Controls.TextBox.OnPropertyChanged(System.Windows.DependencyPropertyChangedEventArgs)
at System.Windows.DependencyObject.NotifyPropertyChange(System.Windows.DependencyPropertyChangedEventArgs)
at System.Windows.DependencyObject.UpdateEffectiveValue(System.Windows.EntryIndex, System.Windows.DependencyProperty, System.Windows.PropertyMetadata, System.Windows.EffectiveValueEntry, System.Windows.EffectiveValueEntry ByRef, Boolean, Boolean,
System.Windows.OperationType)
at System.Windows.DependencyObject.ClearValueCommon(System.Windows.EntryIndex, System.Windows.DependencyProperty, System.Windows.PropertyMetadata)
at System.Windows.DependencyObject.ClearValue(System.Windows.DependencyPropertyKey)
at System.Windows.Input.FocusManager.OnFocusedElementChanged(System.Windows.DependencyObject, System.Windows.DependencyPropertyChangedEventArgs)
at System.Windows.DependencyObject.OnPropertyChanged(System.Windows.DependencyPropertyChangedEventArgs)
at System.Windows.FrameworkElement.OnPropertyChanged(System.Windows.DependencyPropertyChangedEventArgs)
at System.Windows.DependencyObject.NotifyPropertyChange(System.Windows.DependencyPropertyChangedEventArgs)
at System.Windows.DependencyObject.UpdateEffectiveValue(System.Windows.EntryIndex, System.Windows.DependencyProperty, System.Windows.PropertyMetadata, System.Windows.EffectiveValueEntry, System.Windows.EffectiveValueEntry ByRef, Boolean, Boolean,
System.Windows.OperationType)
at System.Windows.DependencyObject.SetValueCommon(System.Windows.DependencyProperty, System.Object, System.Windows.PropertyMetadata, Boolean, Boolean, System.Windows.OperationType, Boolean)
at System.Windows.DependencyObject.SetValue(System.Windows.DependencyProperty, System.Object)
at System.Windows.FrameworkElement.OnGotKeyboardFocus(System.Object, System.Windows.Input.KeyboardFocusChangedEventArgs)
at System.Windows.RoutedEventArgs.InvokeHandler(System.Delegate, System.Object)
at System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
at System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)
at System.Windows.UIElement.RaiseTrustedEvent(System.Windows.RoutedEventArgs)
at System.Windows.Input.InputManager.ProcessStagingArea()
at System.Windows.Input.KeyboardDevice.ChangeFocus(System.Windows.DependencyObject, Int32)
at System.Windows.Input.KeyboardDevice.Focus(System.Windows.DependencyObject, Boolean, Boolean, Boolean)
at System.Windows.Input.KeyboardDevice.Focus(System.Windows.IInputElement)
at System.Windows.UIElement.Focus()
at System.Windows.Documents.TextEditorMouse.MoveFocusToUiScope(System.Windows.Documents.TextEditor)
at System.Windows.Documents.TextEditorMouse.OnMouseDown(System.Object, System.Windows.Input.MouseButtonEventArgs)
at System.Windows.UIElement.OnMouseDownThunk(System.Object, System.Windows.Input.MouseButtonEventArgs)
at System.Windows.RoutedEventArgs.InvokeHandler(System.Delegate, System.Object)
at System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
at System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)
at System.Windows.UIElement.RaiseTrustedEvent(System.Windows.RoutedEventArgs)
at System.Windows.Input.InputManager.ProcessStagingArea()
at System.Windows.Input.InputProviderSite.ReportInput(System.Windows.Input.InputReport)
at System.Windows.Interop.HwndMouseInputProvider.ReportInput(IntPtr, System.Windows.Input.InputMode, Int32, System.Windows.Input.RawMouseActions, Int32, Int32, Int32)
at System.Windows.Interop.HwndMouseInputProvider.FilterMessage(IntPtr, MS.Internal.Interop.WindowMessage, IntPtr, IntPtr, Boolean ByRef)
at System.Windows.Interop.HwndSource.InputFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
at MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
at MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
at System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
at MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
at System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
at MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
at MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
at MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
at System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
at System.Windows.Application.RunInternal(System.Windows.Window)
at System.Windows.Application.Run()
at Microsoft.Workflow.Deployment.ConfigWizard.App.Main()
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name=".NET Runtime" />
<EventID Qualifiers="0">1026</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2014-08-27T09:47:54.000000000Z" />
<EventRecordID>7471544</EventRecordID>
<Channel>Application</Channel>
<Computer>OSS01-MAP-226.global.corp</Computer>
<Security />
</System>
<EventData>
<Data>Application: Microsoft.Workflow.Deployment.ConfigWizard.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.DirectoryServices.AccountManagement.MultipleMatchesException
Stack:
at System.DirectoryServices.AccountManagement.ADStoreCtx.FindPrincipalByIdentRefHelper(System.Type, System.String, System.String, System.DateTime, Boolean)
at System.DirectoryServices.AccountManagement.ADStoreCtx.FindPrincipalByIdentRef(System.Type, System.String, System.String, System.DateTime)
at System.DirectoryServices.AccountManagement.Principal.FindByIdentityWithTypeHelper(System.DirectoryServices.AccountManagement.PrincipalContext, System.Type, System.Nullable`1<System.DirectoryServices.AccountManagement.IdentityType>,
System.String, System.DateTime)
at System.DirectoryServices.AccountManagement.UserPrincipal.FindByIdentity(System.DirectoryServices.AccountManagement.PrincipalContext, System.String)
at Microsoft.ServiceBus.Commands.Common.SecurityHelper.IsUserValid(System.DirectoryServices.AccountManagement.PrincipalContext, System.String)
at Microsoft.ServiceBus.Commands.Common.SecurityHelper.IsDomainUserValid(System.String, System.String)
at Microsoft.ServiceBus.Commands.Common.ValidateUserAttribute.Validate(System.String)
at Microsoft.Deployment.ConfigWizard.UICommon.AccountDetailsViewModel.ValidateDomainUser()
at Microsoft.Deployment.ConfigWizard.UICommon.AccountDetailsControl.UserIdTextBox_LostFocus(System.Object, System.Windows.RoutedEventArgs)
at System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
at System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)
at System.Windows.Controls.Primitives.TextBoxBase.OnLostFocus(System.Windows.RoutedEventArgs)
at System.Windows.UIElement.IsFocused_Changed(System.Windows.DependencyObject, System.Windows.DependencyPropertyChangedEventArgs)
at System.Windows.DependencyObject.OnPropertyChanged(System.Windows.DependencyPropertyChangedEventArgs)
at System.Windows.FrameworkElement.OnPropertyChanged(System.Windows.DependencyPropertyChangedEventArgs)
at System.Windows.Controls.TextBox.OnPropertyChanged(System.Windows.DependencyPropertyChangedEventArgs)
at System.Windows.DependencyObject.NotifyPropertyChange(System.Windows.DependencyPropertyChangedEventArgs)
at System.Windows.DependencyObject.UpdateEffectiveValue(System.Windows.EntryIndex, System.Windows.DependencyProperty, System.Windows.PropertyMetadata, System.Windows.EffectiveValueEntry, System.Windows.EffectiveValueEntry ByRef, Boolean, Boolean,
System.Windows.OperationType)
at System.Windows.DependencyObject.ClearValueCommon(System.Windows.EntryIndex, System.Windows.DependencyProperty, System.Windows.PropertyMetadata)
at System.Windows.DependencyObject.ClearValue(System.Windows.DependencyPropertyKey)
at System.Windows.Input.FocusManager.OnFocusedElementChanged(System.Windows.DependencyObject, System.Windows.DependencyPropertyChangedEventArgs)
at System.Windows.DependencyObject.OnPropertyChanged(System.Windows.DependencyPropertyChangedEventArgs)
at System.Windows.FrameworkElement.OnPropertyChanged(System.Windows.DependencyPropertyChangedEventArgs)
at System.Windows.DependencyObject.NotifyPropertyChange(System.Windows.DependencyPropertyChangedEventArgs)
at System.Windows.DependencyObject.UpdateEffectiveValue(System.Windows.EntryIndex, System.Windows.DependencyProperty, System.Windows.PropertyMetadata, System.Windows.EffectiveValueEntry, System.Windows.EffectiveValueEntry ByRef, Boolean, Boolean,
System.Windows.OperationType)
at System.Windows.DependencyObject.SetValueCommon(System.Windows.DependencyProperty, System.Object, System.Windows.PropertyMetadata, Boolean, Boolean, System.Windows.OperationType, Boolean)
at System.Windows.DependencyObject.SetValue(System.Windows.DependencyProperty, System.Object)
at System.Windows.FrameworkElement.OnGotKeyboardFocus(System.Object, System.Windows.Input.KeyboardFocusChangedEventArgs)
at System.Windows.RoutedEventArgs.InvokeHandler(System.Delegate, System.Object)
at System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
at System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)
at System.Windows.UIElement.RaiseTrustedEvent(System.Windows.RoutedEventArgs)
at System.Windows.Input.InputManager.ProcessStagingArea()
at System.Windows.Input.KeyboardDevice.ChangeFocus(System.Windows.DependencyObject, Int32)
at System.Windows.Input.KeyboardDevice.Focus(System.Windows.DependencyObject, Boolean, Boolean, Boolean)
at System.Windows.Input.KeyboardDevice.Focus(System.Windows.IInputElement)
at System.Windows.UIElement.Focus()
at System.Windows.Documents.TextEditorMouse.MoveFocusToUiScope(System.Windows.Documents.TextEditor)
at System.Windows.Documents.TextEditorMouse.OnMouseDown(System.Object, System.Windows.Input.MouseButtonEventArgs)
at System.Windows.UIElement.OnMouseDownThunk(System.Object, System.Windows.Input.MouseButtonEventArgs)
at System.Windows.RoutedEventArgs.InvokeHandler(System.Delegate, System.Object)
at System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
at System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)
at System.Windows.UIElement.RaiseTrustedEvent(System.Windows.RoutedEventArgs)
at System.Windows.Input.InputManager.ProcessStagingArea()
at System.Windows.Input.InputProviderSite.ReportInput(System.Windows.Input.InputReport)
at System.Windows.Interop.HwndMouseInputProvider.ReportInput(IntPtr, System.Windows.Input.InputMode, Int32, System.Windows.Input.RawMouseActions, Int32, Int32, Int32)
at System.Windows.Interop.HwndMouseInputProvider.FilterMessage(IntPtr, MS.Internal.Interop.WindowMessage, IntPtr, IntPtr, Boolean ByRef)
at System.Windows.Interop.HwndSource.InputFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
at MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
at MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
at System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
at MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
at System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
at MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
at MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
at MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
at System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
at System.Windows.Application.RunInternal(System.Windows.Window)
at System.Windows.Application.Run()
at Microsoft.Workflow.Deployment.ConfigWizard.App.Main()
</Data>
</EventData>
</Event>Hi Karthik,
You could refer to the series of videos below to install and configure workflow manager in SharePoint 2013:
http://technet.microsoft.com/en-us/library/dn201724(v=office.15).aspx
The Episode 2 describes the necessary account in AD with right permission in the installation process:
http://technet.microsoft.com/en-us/library/dn201724(v=office.15).aspx#episode2
Regards,
Rebecca Tu
TechNet Community Support -
Can't access Reporting Services Manager through web browser.
Hello,
I want to start using SQL Server Reporting Services. I'm trying to get access to Report Manager through Internet Explorer so I can set up System-level permissions. I'm running SQL Server 2008 R2 on Windows Server 2008 R2 SP1.
I didn't set up this instance of SQL Server so I don't know a lot about it's configuration. I browsed the "C:\Program Files\Microsoft SQL Server\MSSQL10_50.<SQL Instance>\Reporting Services" folder and found the following items:
LogFiles folder, ReportManager folder, ReportServer folder, RSTempFiles folder, sql_rs_keyfile.dll.
Given the ReportManager folder I found inside the Reporting Services directory, I assumed the url for Report Manager would be http://<server name>/ReportManager but I get a 404 error when I try that. Then, I found on some MSDN article that the default
URL for Report Manager is http://<server name>/Reports. When I tried that I got an error that said:
"The underlying connection was closed: Could not established trust relationship for the SSL\TLS secure channel".
I should mention I'm not very knowledgeable with SQL Server so I may be approaching this in the wrong way.
I appreciate any help that you can provide. Thanks!Hello,
Based on your description, you configure Report Manager access through an SSL-encrypted channel by binding a certificate.
Please verify that the certificate is installed in the Console Root\Certificates\Trusted Root Certification Authority of the local machine.
For more details, please refer to the follwoing blog about similar issue:
http://blogs.msdn.com/b/mariae/archive/2007/12/12/ssl-configuration-and-reporting-services.aspx
Regards,
Fanny Liu
Fanny Liu
TechNet Community Support -
Managed Service Accounts to run SQL Server Service
Has anyone played around with using managed service accounts for running the SQL Server Service? I am on a forest functional level of 2008R2 and was thinking about how cool it would be to use those for SQL Server. Unfortunately, I hear that it's not supported
by Microsoft and yet I've read about people doing that but would like to know if anyone has first hand experience. Otherwise, if not recommended, I'll stick to the old fashioned way of creating typical user accounts. Thanks in advance!Hi Scott hi Sean
I see that my first answer was badly phrased.
Let me try to make it more clear:
Managed Service Accounts(MSA):
Works with Kerberos including Delegation, but:
NOT working with cluster nodes
NOT working for load balancing using Kerberos
More information:
http://blogs.technet.com/b/askds/archive/2009/09/10/managed-service-accounts-understanding-implementing-best-practices-and-troubleshooting.aspx
Group Managed Service Accounts (GMSA):
Works with Kerberos including Delegation, but:
NOT supported with Failover Clustered Instances
Here is the connect item:
http://connect.microsoft.com/SQLServer/feedback/details/767211/gmsa-for-sql-server-failover-clusters
@all Please feel free to vote(!). I am waiting for this as well.
This is the state of my information today. Feel free to correct me if you know of any changes.
Andreas Wolter (Blog |
Twitter)
MCM - Microsoft Certified Master SQL Server 2008
MCSM - Microsoft Certified Solutions Master Data Platform, SQL Server 2012
www.andreas-wolter.com |
www.SarpedonQualityLab.com -
Why would you use a managed service account rather than a virtual account in SQL Server 2012?
In SQL Server 2012, service accounts are created as
virtual accounts (VAs), as described
here, as opposed to
managed service accounts (MSAs).
The important differences I can see for these, based on the descriptions:
MSAs are domain accounts, VAs are local accounts
MSAs use automagic password management handled by AD, VAs have no passwords
in a Kerberos context, MSAs register SPNs automatically, VAs do not
Are there any other differences? If Kerberos is not in use, why would a DBA ever prefer an MSA?
UPDATE:
Another user has noted a
possible contradiction in the MS docs concerning VAs:
The virtual account is auto-managed, and the virtual account can access the network
in a domain environment.
versus
Virtual accounts cannot be authenticated to a remote location. All virtual accounts
use the permission of machine account. Provision the machine account in the format
<domain_name>\<computer_name>$.
What is the "machine account"? How/when/why does it get "provisioned"? What is the difference between "accessing the network in a domain environment" and "authenticating to a remote location [in a domain environment]"?Hi,
“Virtual accounts cannot be authenticated to a remote location. All virtual accounts use the permission of machine account. Provision the machine account in the format <domain_name>\<computer_name>$.”
“The virtual account is auto-managed, and the virtual account can access the network in a domain environment. If the default value is used for the service accounts during SQL Server setup on Windows Server 2008 R2 or Windows 7, a virtual account
using the instance name as the service name is used, in the format NT SERVICE\<SERVICENAME>”
Per the above description, they are two concepts and not conflict with each other.
As you understand, virtual account access network resources by using the credentials of the computer account. Generally, computer account will not be granted permission unless giving the computer account permission on the shared folder manually.
Thanks.
Tracy Cai
TechNet Community Support
Maybe you are looking for
-
Dynamic Action on tabular form: to auto set value for all changes rows
Hi All: I am using APEX4.2.3 and I am not very familar with JQUERY or Javascript. I am having a tabular form to support Update and Delete action. The tabular form has 4 columns: Column A: ID (Number) : Read-only column column
-
Right now i'm doing a migration project. I need to import data from excel and text files into the oracle database. Now my question is how to do the duplication data checking,validation on identical attributes and data type need to make sure i import
-
Custom theme with Fiori launchpad
Hi I have created a custom theme using the theme designer as per detailed in Colorful Fiori - Part 3 - Sea Blue I can see some changes taking effect in the preview but not all. For e.g. the tile title color, icon color did not change. When I use the
-
I was prompted when downloading Firefox to UPDATE Microsoft DRM Plugin and the Microsoft Windows Media Player Firefox Plugin. The Update tab for the first download was unresponsive. The second upon following the search given to me, was basically chat
-
After Upadate to Firefox 18.0.1 Sync and Pair Device options stop to work
<blockquote>Locking duplicate thread.<br> Please continue here: [[/questions/949285]]</blockquote> I"m trying to pair device but then i click next button I always return to "Firefox Sync Setup " dialog