Sun Convergence for user with disabled calendar service

I have Communication Suite 7 installed with the "Sun Convergence" web interface.
I create a test user with a disabled calendar service (service package platinum).
The user test logged in in Sun Convergence web interface and I'm surprised,
that the calendar for him is available.
How can I disable the calendar view in Sun Convergence for user with disabled calendar service?
Thank you.

petrahu wrote:
I'm getting the expected result with a service package for mail and calendar,
e.g. mercury, and setting the status of calendar service to inactive or disabled.The behaviour you are seeing is both "expected" (i.e. as per the current Convergence design) and "unexpected" (i.e. doesn't make sense from a DA service provisioning perspective). It is a real "can-o-worms".
The problem stems back to the "local.autoprovision" functionality provided at the Calendar Server end (enabled by default):
http://docs.sun.com/app/docs/doc/819-4654/acajh?l=En&a=view
"The first time a user logs in, the user's LDAP entry in updated to add calendar service, and a default calendar is created. The user entry must already exist in the LDAP directory. If it does not, an error is returned."
So even if the calendar service has not been granted at the Delegated Administrator end, the calendar server will "helpfully" add the required objectclasses/attributes when a client (such as Convergence) attempts to login as that user.
This means Convergence cannot automatically assume a user is not able to access the Calendar service based on the users current objectclass/attribute settings.
This leads to an existing bug for Convergence:
Bug#6871400 - "Mail only user is able to access the calendar service"
I've also created a new Change Request for Calendar Server:
RFE#6898717 - "local.autoprovision should be disabled by default"
Please raise this issue with Sun support (log a support request) if you believe the current behaviour is confusing/needs changing (i.e. fix the bug/RFE above).
Regards,
Shane.

Similar Messages

Deployment issue - Login failed for user 'NT AUTHORITY\NETWORK SERVICE'

I am attempting to deploy a site from my development PC to my server. I have no issues running the site on the server using VS2010 Express Web in debug. All page queries are working within the debugger. The connection strings are identical between the PC
and Server, except the host name.
connectionString
="Data
Source=SOCIALSERVER;Initial Catalog=Intake_be;Integrated Security=True"
However, when using the site normally via IIS, the pages containing data access are failing with a permissions problem. The non-data access pages render normally.
Login failed for user 'NT AUTHORITY\NETWORK SERVICE'
Looking at the SQL2005 instance via SQL Management Studio, I see security folder with Logins under the Server. NTA\NS is listed as a user login. But, I also see similar folders under each
of 3 databases. NTA\NS is not listed as a login specific to my target dB.
My site is for internal (intranet) use only. There is no internet access into my IIS. This is my first deployment into production. I think I only need Windows Authentication but I lack the experience to make a good decision. My goal is to allow domain users
to access pages that produce read only data. But, I also need controlled access to pages that can modify data. I used the native winform template for ASP.NET 4, which includes some roles based security.
How do I grant permissions for internal users on the pages that access SQL data? How does that security model work with the native roles based security? i.e.
add
name="AspNetSqlMembershipProvider"type="System.Web.Security.SqlMembershipProvider"connectionStringName="ApplicationServices"...
etc.
Thanks for your time and patience on this Deployment 101 type issue.
Kurt

hi,
You receive either of these error messages specifically when you use integrated security.
To resolve you can use one of below.
Method 1: Programmatically change the security context of the ASP.NET worker process to a user who has the correct SQL Server permissions.
Method 2: Change the default configuration of ASP.NET so that the ASP.NET worker process starts and runs under the context of a user who has the correct permissions in SQL Server.
Method 3: Grant the correct permissions in SQL Server so that the ASPNET account (or NetworkService account, for an application that runs on IIS 6.0) has the appropriate access to the required resources.(Go to the Computer Management >> Local User and
Groups >> Groups >> Right Click and go to properties on IIS_IUSRS >> Add appropriate user.
Thanx, Mark as answered if you are ok ..

How to make form field read only for users with certain permissions

We need to make two form fields read only for users with certain permissions. Kindly guide me on how to do this in Infopath. I searched and there is an option to disable to the column, but no option to select user permissions.
Please give your suggestion on this.
thanks.

Hi,
See the link below:
http://info.akgroup.com/blog-0/bid/69277/InfoPath-Restrict-visibility-to-users-in-a-SharePoint-Group
Here you can add the fomatting action on the field to disable the field if those users belong to certain Sharepoint group (does not matter the permission levels though). Hope it helps.
Regards, Kapil ***Please mark answer as Helpful or Answered after consideration***

How to Control authorization for users with certain status for level 2 WBS Element

Dear All,
Is there any standard way or enhancement available to control authorization for users with certain status for WBS Element i.e. for example
Pre-requisite:
There is only 2 level of project i.e.
Lev_ WBSE_______Description
1___ 7-14.E_______summay outage controller
2___ 7-14.E.2310__ Plant/unit # 2310
2___ 7-14.E.2310__ Plant/unit # 2220
Project Controller (authorization role assigned "Z_PS_OP7_OTGCON_C") have all project level authorization
Plant/Unit Controller (authorization role assigned "Z_PS_OP7_PLNTOTG_C_2310") have only level 2 authorization with enhancement that we did in system by Z table.
User ID_ Plant #
123345_ 2310
122455_ 2220
Issue:
After System Status released and User Status approved the WBS basic date for Plant/Units should be restricted from updating/changing by Plant/Unit Controller level and only project controller should have this authority.
Solution required:
Can any one tell how to control this scenario either by standard or enhancement available to control authorization
BR
Saqib Usman

Hi,
Did you explore SAP Enhancement CNEX0002 Using Transaction CMOD?
Thank you and regards,
Varshal Kachole
The SCN Rules of Engagement

How add Authorization check for user with assigened role for t.code-MIR4

Hi All,
Regarding authorization how to check authorizations check for user whith assigned roles for the t.code MIR4 using ABAP.
In Detail:2) All users are allowed to go to MIR4(invoice number), But ONLY for users with role: MM_RELEASE_INVOICE can proceed to do the posting.
suggest me...
Thanks,
srii..

Hi Sri ,
first u need to find out in which user rules u are using this object , after that if u want to restrict users then remove create/change values from that object values .
make use of Tcode SUIM to find out all roles which are using this Object.
or
ask ur basis guy to remove authorizations to create/change....
regards
Prabhu

Sun Convergence - allow access with spaces as password

Hi,
We've discovered that Sun Convergence log in as any user when we write space sign without any other signs in password field. It's lok like ldap search (or bind) command fails if only spaces are in password field.
We use:
- Convergence with patch 12 and 10.
- Directory Server 5.2 (not recomennded, but on compatibile list)
We read some threards about similar problem with LDAP auth, but ... thera are not Sun Products. I suspect that problem are in LDAP (implementation Convergence requests).
We have temporary workaround, but ... it very bad. Any people have acces to any known user.
I woonder if some other have similar problem
regards
IT

Oracle does not comment on published reports of alleged Oracle product vulnerabilities. Please refer to Critical Patch Updates and Security Alerts (http://www.oracle.com/technology/deploy/security/alerts.htm) for more details on the policy.
Note: I still recommend you contact support for access to the latest Convergence patch (not yet available on SunSolve) which fixes known product vulnerabilities.

How to get Unique calid for users with same name in multiple domain env..

I found we need to use "-k legacy" option for creating users in non-hosted setup..
I had two domains default as xxxx.com and the one that I created as yyyy.com
When I have users with same name in two of the domains as user1..
The calid for both of them is... user1 ....so they share the same calendar
When Im in valid SSO of yyyy.com I get the mail account for user1 as [email protected] .....but the calid .. common as user1
How I can get unique calid for users under two domains..
whether I need to set Hosted domain support...Then how the mailid's differ with out using hosted domain support..
And I need to login UWC without using @domain.com...
Help me on this...
Ashik

Do you have UWC and Cal configured at least for virtual domain support?
basically.. for discussion.. let's say you have three domains on your server.. 1st domain is the default domain. other 2 domains are virtual domains.
if all domains were created with mail and cal support (-S mail,cal).. you would use the following options when creating users:
1) for the default domain.. you must use the "-k legacy" option when adding users.
2) for the other two domains.. when you create the user.. do NOT use a "-k" option.
If you do not use the "-k" option.. it defaults to "hosted" which will cause the user's calid to be [email protected]
If you Do use the "-k legacy" option.. it will create the calid as just "userid"
With regard to logging into UWC without the @domain.com part of a username in a hosted domain.. the easiest way to avoid this.. is to point a host name under the hosted domain to the server.
if you point webmail.xxxx.com to the server... and then access it via:
http://webmail.xxxx.com/uwc/
any users in the xxxx.com hosted domain will NOT need to use @xxxx.com when logging in... they can just use "userid"
This feature does not take any special configuration (aside from adding a DNS entry for the hosted domain)
Hopefully that helps.

Sun grid engine interface with 10g grid services

Hi,
I am a Graduate student in Comp Science. for my parallel class I am looking at interfacing sun Grid engine with Oracle 10g services.But I could not find ant API in oracle for me to use globus or any other oracle native API to call the job scheduling ( or even job submitting) functions in 10g. could any one please enligten me on this.I saw a marketing paper on Oracle globus development kit.But could not find any technical documentation on that regard.
thanks,
saji

Hi Sajindra,
Check out the Unified scheduler feature of Oracle Database 10g. Unified scheduler allows you to submit jobs that can be both database jobs or non-database jobs (i.e. executed outside the database).
cheers,
Brajesh.

Urgent: Search for user with 'ß' character failed.

Hi all,
I have problem for searching the user with 'ß' character included in the name of user in Identity Management.
When nothing is specified in the search criteria, then the user is displayed.
When the name of user without 'ß' is given in the search criteria, then also the user is displayed.
But when the name is given with 'ß' in search criteria, the user is not recognized and cannot be displayed.
'ß' is the German Character.
Please help me out, why the user is not recognized with the character 'ß' in the search criteria.
Thanks in Advance.
Regards,
Yogita.

Hi,
You can ofcourse use ß and all other chars in your search.
It makes no sence that you can create users with these chars, but cannot search using them.
I tried to create user with char ß and also could search with this char. So it is only a local problem on your server.
Is your UME connected with LDAP or DB? My UME where I tested is DB.
So dont give up, open an OSS message with SAP for a solution and also update this thread if you find an answer.
Regards,
Praveen Gudapati

Reseeding cache for users with role based security

I have role based security and trying to set up cache by purging all cache and later seeding cache by query. The query would be different for different users. What is the best way to purge all cache and reseed cache for administrator as well as all users. The EPT would purge cache based on updated tables. But how do I next go about reseeding cache for better performance to all the users. Thanks.

I have created an ibot with the following:
General - Normal Priority, Personalized (recipient's data visibility)
Conditional Request - example_report
Schedule - some schedule
Recipients - Me(administrator) and User1
Destinations - Oracle BI Server cache
when the ibot runs 2 cache entries are created (for the 2 recipients).
I have the report (example_report) on the dashboard (1 dashboard, 1 page, 1 report).
After the ibot runs:
When the administrator logs in first, there is a cache hit on the report. Followed by when the User1 logs in there is NO cache hit.
On the other hand when the User1 logs in first, there is a cache hit on the report. Followed by when the administrator logs in there is no cache hit. The query log creates a Query issued to the database instead of cache hit on query.
The User1 has a data level security.
Please let me know where was I making an error in setting the ibot and how to get the cache seeding work for the different users with different role based security.
Thanks for your inputs.

Performance tab not working in Enterprise Manager for user with dba role

Database: 11g2
New to Oracle. Don't want share SYS user account among dbas. Tried to create user with dba role to perform all tasks.
1. Removed DBMS_JOB, DBMS_LOB, UTL_FILE, UTL_HTTP, UTL_SMTP, and UTL_TCP from PUBLIC
2. Created user dbauser1 with dba role
3. Log in as dbauser1 in Enterprise Manager
After click Performance tab, it just went straight to "Database Login" page. No error message.
Any suggestions or advice will be appreciated.
piaoma

Hi Gourav,
This is the wsdl url:
http://hostname:8000/sap/bc/srt/wsdl/bndg_E04711310A0E55F1A0E3005056B03D6F/wsdl11/allinone/ws_policy/document?sap-client=450
Kind Regards,
Richard

Install for users with limited rights.

Is there a way to install Flash player so users with limited rights can perform updates? I don't want to touch hundreds of machines each time a minor upgrade is released. Security policies dictate that users cannot have local admin rights.

Hi, not that I have heard of. If you can't update, then most likely you are under Group Policy and the IT Department would be in charge of that.
If it is possible, then someone else would need to reply to you.
Thanks,
eidnolb

Anyone recommend best iTunes release for user with no iPhone/iPod touch?

After finally resolving some iPod restore issues - I am going to clean up my Windows install with a fresh install this weekend.
Just wonder what folks think about always using the latest iTunes if one does not have an iPhone/iTouch etc. As I gathered as much info as I could on the iTunes releases within the last year or so - it seems each release tends to add more overhead. Like more services suddenly appearing like the "mobile device" service being installed on top of the already RAM hungry core components.
When I first got this iPod for Xmas last year - and installed iTunes for the first time - the thing that struck me the most was watching iTunes guzzle 65MB of RAM just sitting there doing nothing (not even playing a track). After that eye-opener (and no change for the better over the last release which seem to use somewhere around 90MB in my last tests) - I simply reverted back to Winamp 5.35 as my actual player. It uses 4.5MB when minimized to the System Tray and I simply set it to scan the My Music folder - giving me the entire library with almost no overhead - I mean c'mon...90MB to just listen to some music?
So - if you are in this situation - 5.5g 80GB iPod with no iPhone, no iPod Touch and use iTunes simply to load/manage the iPod - what iTunes release (within the last year) would you recommend for the best balance of features/performance and least amount of background drain? I have read some have stuck with 7.2.3.6...good? Bad?
Another Q - if I was to go current - can one install the 7.5 package and then uninstall or disable that Mobile Service(or not even install it all at) when installing iTunes?
Appreciate any comments!
Cheers!
VP

I don't recall there being any choices when it came to installing iTunes. I guess if there is an issue about the resources that iTunes is using, I would only start iTunes when I want to manage the music on the iPod. Otherwise, not start and/or minimize it, especially since you are using another software product to play music. I haven't started iTunes on my laptop today, and the iTunes helper is only using 1.9MB of memory right now. I'm using the latest version. I'll start up iTunes and give you a reply on how much it is using.
I just started iTunes and it is only using 31MB of RAM.
Message was edited by: ChrisJ4203
Added start up RAM usage

Outlook 2007 - User with multiple calendars appointments do not default into her calendar

We are on exchange and use Outlook 2007. I have a user who has her calendar (A) and 3 others in a side-by-side format (B,C, and D). When she goes into her calendar and clicks the icon for new appointment, the appointment always defaults
for the D calendar and not her own.
EDIT: She can click on her own calendar and then new appointment and the entry goes into her calendar. She can click back into her inbox and then back into calendar view and the default switches back to the D calendar.
I have searched for a solution to this issue but have not been successful. Any ideas on how to correct?
EDIT x2 - corrected the calendar labels for clarity.

Hi,
Did you installed any add-ins for your Outlook? If so, try to disable your add-ins to check if the problem persists.
http://office.microsoft.com/en-in/outlook-help/enable-or-disable-add-ins-in-office-programs-HA010034127.aspx
Regards,
Steve Fan
TechNet Community Support

Access Denied for User with Contribute Rights to a SP list

I have two users that I have given Contribute Rights on a SharePoint 2010 site - the SP list in question is inheriting permissions from the Parent site, as well as other lists in the site. These two users can edit items in the all other lists on the
site except for this one in question.
It is only one list that they cannot view or edit list items. They can view the items in the list, but when they try to open an item in display or edit form, it gives the access denied.
Other users on the site are NOT having these issues - with the same permissions.
I researched this problem and have tried various solutions with no luck. I have checked to see that there are NO item level permissions set up; I have deleted the user from the site collection, then added them back, with no luck.
I am at a loss on what to do.
Please help

Timestamp              Process
TID   Area                          Category
EventID Level     Message Correlation
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg4 Verbose Groups for process identity 'DOMAIN\spadmin': 'DOMAIN\Domain Users', 'Everyone', 'SHAREPOINT\WSS_ADMIN_WPG', 'SHAREPOINT\WSS_RESTRICTED_WPG_V4', 'SHAREPOINT\WSS_WPG', 'BUILTIN\IIS_IUSRS', 'BUILTIN\Performance Monitor Users', 'BUILTIN\Users',
'BUILTIN\Administrators', 'NT AUTHORITY\SERVICE', 'CONSOLE LOGON', 'NT AUTHORITY\Authenticated Users', 'NT AUTHORITY\This Organization', 'NT SERVICE\SPTimerV4', 'LOCAL', 'DOMAIN\Group Policy Creator Owners', 'DOMAIN\Department_Schedules_ReadWrite', 'DOMAIN\Sage50_ReadWrite',
'DOMAIN\GrainCleaners_ReadWrite', 'DOMAIN\Domain Admins', 'DOMAIN\IT Department', 'DOMAIN\RDP_Users', 'DOMAIN\Engineering_ReadWrite', 'DOMAIN\Inventory_ReadWrite', 'DOMAIN\Schema Admins', 'DOMAIN\FabTrol', 'DOMAIN\Enterprise Admins', 'DOMAIN\Software', 'DOMAIN\Denied
RODC Password Replication Group', 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg1 High    Group WSS_WPG... 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_WPG: DOMAIN\spadmin 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_WPG: NT AUTHORITY\LOCAL SERVICE 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_WPG: DOMAIN\spservice 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_WPG: DOMAIN\SearchSvc 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_WPG: DOMAIN\spContent 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_WPG: DOMAIN\WebAnalProcessSvc 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_WPG: DOMAIN\svcAppPoolSecure 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_WPG: NT AUTHORITY\SYSTEM 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg1 High    Group WSS_ADMIN_WPG... 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_ADMIN_WPG: BUILTIN\Administrators 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_ADMIN_WPG: DOMAIN\spadmin 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_ADMIN_WPG: DOMAIN\rawtecadmin 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:50:15.56 w3wp.exe (0x0098)                       0x19B8 SharePoint Foundation
Monitoring                    b4ly Medium Leaving Monitored Scope (Request (GET:https://portal.emw.ca:443/ehs/Lists/InvestigationReports/DispForm.aspx?ID=40&Source=https%3A%2F%2Fportal%2Eemw%2Eca%2Fehs%2FLists%2FInvestigationReports%2FMyInvestigations%2Easpx&ContentTypeId=0x0100E352DB580E29424FB1C52A1D93E09345&IsDlg=1)).
Execution Time=115.2334 0c90a46f-e4ea-46b5-a566-e7a9f404c0aa
03/11/2014 10:50:15.66 w3wp.exe (0x0098)                       0x16CC SharePoint Foundation
Monitoring                    nasq Medium Entering monitored scope (Request (GET:https://portal.emw.ca:443/ehs/_layouts/AccessDenied.aspx?Source=https%3A%2F%2Fportal%2Eemw%2Eca%2Fehs%2FLists%2FInvestigationReports%2FDispForm%2Easpx%3FID%3D40%26Source%3Dhttps%253A%252F%252Fportal%252Eemw%252Eca%252Fehs%252FLists%252FInvestigationReports%252FMyInvestigations%252Easpx%26ContentTypeId%3D0x0100E352DB580E29424FB1C52A1D93E09345%26IsDlg%3D1&Type=list&name=%7BD3F44F01%2DC738%2D409A%2DA491%2DDD0F905CC83B%7D&IsDlg=1))
03/11/2014 10:50:15.66 w3wp.exe (0x0098)                       0x16CC SharePoint Foundation
Logging Correlation Data      xmnv Medium Name=Request (GET:https://portal.emw.ca:443/ehs/_layouts/AccessDenied.aspx?Source=https%3A%2F%2Fportal%2Eemw%2Eca%2Fehs%2FLists%2FInvestigationReports%2FDispForm%2Easpx%3FID%3D40%26Source%3Dhttps%253A%252F%252Fportal%252Eemw%252Eca%252Fehs%252FLists%252FInvestigationReports%252FMyInvestigations%252Easpx%26ContentTypeId%3D0x0100E352DB580E29424FB1C52A1D93E09345%26IsDlg%3D1&Type=list&name=%7BD3F44F01%2DC738%2D409A%2DA491%2DDD0F905CC83B%7D&IsDlg=1) 9446cae0-8ef5-4ffa-aad8-798d3139a2e7

Sun Convergence for user with disabled calendar service

Similar Messages

Maybe you are looking for