Sun LDAP & Password

Hi im just wondering about how password are stored in sun ldap.
Now when I view a users password in the console it is encrypted, when i change the password it also gets encrypted which is fine.
Now my question is for example if I am querying or adding new entries in LDAP from a vb.net script can I
1) Compare a password entered by the user on my homepage to the encrypted password in ldap
2) If i had a new entry with password from a .net page does this automatically get encrypted ?
Thanks in advance

Hi Jeremy,
here the answers to your questions:
>My question is which system takes precedence over the password policy?
Unfortunately there is no policy verification between the portal and your Sun One LDAP. So if you reset the password from the portal then only the portal password policies can be checked.
>  If I wanted to do password resets from the Portal, does the portal then store only the password in its database?
No, the password will be stored in the LDAP, but only if it also corresponds with the LDAP policies. If not, then you will get an error, but you will not see the real LDAP exception.
> Also what would then happen if you tried to reset the password from the LDAP?
The password in the LDAP does not have to fit to the Portal password policies. When you log in, the portal will only check if the password you tipped in is the new one in LDAP and will not check any policies.
Hope this brings some light in,
Robert

Similar Messages

  • Sun LDAP to IDM synchronization issue

    Hello friends, I am trying to synchronize all the new accounts created in sun LDAP to IDM. It runs every 10 minutes as configured but does not pick the new user from LDAP. Here is the brief configuration detail.
    (1) I have switched on the "Retro Plugin" for LDAP and found the changes are getting logged. The sample entry of the change log looks like :-
    dn: changenumber=665,cn=changelog
    objectClass: top
    objectClass: changelogentry
    changeNumber: 665
    targetDn: uid=zorouser7,ou=people,ou=appuser,dc=educ,dc=mde
    changeTime: 20090518211551Z
    changeType: modify
    changes:: cmVwbGFjZTogb2JwYXNzd29yZGNoYW5nZWZsYWcKb2JwYXNzd29yZGNoYW5nZWZsYWc6IGZhbHNlCi0KcmVwbGFjZTogb2JwYXNzd29yZGNyZWF0aW9uZGF0ZQpvYnBhc3N3b3JkY3JlYXRpb25kYXRlOiAyMDA5LTA1LTE4VDIxOjE1OjUwWgotCnJlcGxhY2U6IG1vZGlmaWVyc05hbWUKbW9kaWZpZXJzTmFtZTogY249b2JsaXgKLQpyZXBsYWNlOiBtb2RpZnlUaW1lc3RhbXAKbW9kaW
    Z5VGltZXN0YW1wOiAyMDA5MDUxODIxMTU1MFoKLQoA
    creatorsname: cn=Retro Changelog Plugin,cn=plugins,cn=config
    modifiersname: cn=Retro Changelog Plugin,cn=plugins,cn=config
    createtimestamp: 20090518211551Z
    modifytimestamp: 20090518211551Z
    nsuniqueid: 081d2284-1dd211b2-80b380e1-7558dd15
    parentid: 1
    entryid: 666
    entrydn: changenumber=665,cn=changelog
    numsubordinates: 0
    subschemasubentry: cn=schema
    hassubordinates: FALSE
    (2) Here is my synchronization policy for LDAP resource :-
    o Object class to synchronize : inetorgperson mdeUser mdeAuthZ OblixPersonPwdPolicy OblixOrgPerson (Last four are custom object)
    o Ldap Filter for account synchronize : objectClass=inetOrgPerson
    o Attributes to synchronize : uid userPassword givenName sn cn mail telephoneNumber objectClass mdeApplicationId mdeRoleId
    o change log block size : 100
    o Change Number Attribute Name : 665
    o Proxy Administrator : Configurator
    o Input form : Tabbed : User Form
    o Create Unmatched Accounts : yes
    o Assign source resource on create events : yes
    (3) The IDM log for synchronization shows the following detail for each polling :-
    2009-05-18T17:20:00.069-0500: Pause completed
    2009-05-18T17:20:00.131-0500: Polling
    2009-05-18T17:20:00.209-0500: Start of poll - lastUpdated = {changenumber=266}
    2009-05-18T17:20:00.209-0500: buildSearchParams:BEGIN
    2009-05-18T17:20:00.209-0500: Block Size: 100
    2009-05-18T17:20:00.209-0500: Change Number Attribute Name: 665
    2009-05-18T17:20:00.209-0500: Searching for: (&(665>=267)(665<=366))
    2009-05-18T17:20:00.209-0500: Search attributes: [targetdn, changetype, changes, changetime, changenumber, newrdn, deleteoldrdn, newsuperior]
    2009-05-18T17:20:00.225-0500: buildSearchParams:END
    2009-05-18T17:20:00.240-0500: End of poll - lastUpdated = {changenumber=266}
    2009-05-18T17:20:00.240-0500: Poll complete.
    2009-05-18T17:20:00.240-0500: SARunner: loop 1
    2009-05-18T17:20:00.272-0500: Started, paused until Mon May 18 17:30:00 CDT 2009
    Please help .....
    - Kabi
    Edited by: kpp on May 18, 2009 5:21 PM

    Maybe something like this. Keep in mind, your LDAP may have specific rules for what really constitutes a Create, Update, or Delete.
    <?xml version='1.0' encoding='UTF-8'?>
    <!DOCTYPE Configuration PUBLIC 'waveset.dtd' 'waveset.dtd'>
    <Configuration name='LDAP Active Sync Form' wstype='UserForm'>
         <Extension>
              <Form name='LDAP Active Sync Form' objectLocationID='objectType=UserForm&objectName=LDAP+Active+Sync+Form&objectPath=0&isBegin=true'>
                   <Field name='IAPI.cancel'>
                        <Expansion>
                             <s>true</s>
                        </Expansion>
                        <Disable>
                             <isnull>
                                  <select>
                                       <ref>activeSync.changedAttributes.accountType</ref>
                                       <ref>activeSync.accountType</ref>
                                  </select>
                             </isnull>
                        </Disable>
                   </Field>
                   <Field name='password.password'>
                        <Expansion>
                             <s>TestPassword1</s>                              
                        </Expansion>
                   </Field>
                   <Field name='waveset.accountId'>
                        <Expansion>
                             <ref>activeSync.accountId</ref>
                        </Expansion>
                        <Disable>
                             <neq>
                                  <upcase>
                                       <ref>feedOp</ref>
                                  </upcase>
                                  <upcase>
                                       <s>create</s>
                                  </upcase>
                             </neq>
                        </Disable>
                   </Field>
                   <Field name='waveset.resources'>
                        <Expansion>
                             <list>
                                  <s>LDAP_RESOURCE_NAME</s>
                             </list>
                        </Expansion>
                        <Disable>
                             <neq>
                                  <upcase>
                                       <ref>feedOp</ref>
                                  </upcase>
                                  <upcase>
                                       <s>create</s>
                                  </upcase>
                             </neq>
                        </Disable>
                   </Field>
                   <Field name='waveset.organization'>
                        <Expansion>
                             <s>Top:Something</s>
                        </Expansion>
                        <Disable>
                             <neq>
                                  <upcase>
                                       <ref>feedOp</ref>
                                  </upcase>
                                  <upcase>
                                       <s>create</s>
                                  </upcase>
                             </neq>
                        </Disable>
                   </Field>
                   <Field name='accounts[Lighthouse].email'>
                        <Expansion>
                             <ref>activeSync.mail</ref>
                        </Expansion>
                   </Field>
                   <Field name='global.idmManager'>
                        <Expansion>
                             <ref>activeSync.supervisor</ref>
                        </Expansion>
                        <Disable>
                             <neq>
                                  <upcase>
                                       <ref>feedOp</ref>
                                  </upcase>
                                  <upcase>
                                       <s>create</s>
                                  </upcase>
                             </neq>
                        </Disable>
                   </Field>
                   <Field name='waveset.idmManager'>
                        <Expansion>
                             <ref>global.idmManager</ref>
                        </Expansion>
                        <Disable>
                             <neq>
                                  <upcase>
                                       <ref>feedOp</ref>
                                  </upcase>
                                  <upcase>
                                       <s>create</s>
                                  </upcase>
                             </neq>
                        </Disable>
                   </Field>
                   <Field name='viewOptions.Process'>
                        <Expansion>
                             <switch>
                                  <upcase>
                                       <ref>feedOp</ref>
                                  </upcase>
                                  <case>
                                       <s>CREATE</s>
                                       <s>Active Sync Create User Workflow</s>
                                  </case>
                                  <case>
                                       <s>UPDATE</s>
                                       <s>Active Sync Update User Workflow</s>
                                  </case>
                                  <case>
                                       <s>DELETE</s>
                                       <s>Active Sync Disable User Workflow</s>
                                  </case>
                                  <case default='true'>
                                       <null/>
                                  </case>
                             </switch>
                        </Expansion>
                   </Field>
              </Form>
         </Extension>
         <MemberObjectGroups>
              <ObjectRef type='ObjectGroup' id='#ID#Top' name='Top'/>
         </MemberObjectGroups>
    </Configuration>

  • WLM integration with SUN ldap

    Hi everyone,
    I cant integrate SUN LDAP with the WLM, I configured it as the manual says, I can authenticate the user, but when the user tries to checkout a task, I got the following exception:
    [#|2006-10-17T11:12:11.459-0400|SEVERE|IS5.1.1|javax.enterprise.system.container.web|_ThreadID=33; ThreadName=http18001-Processor4;|StandardWrapperValve[action]: Servlet.service() for servlet action threw exception
    com.stc.bpms.wlm.TaskException
         at com.stc.bpms.wlm.TaskManager.reserveTask(TaskManager.java:668)
         at com.stc.wlm.web.worklist.CheckoutAction.executeWLMAction(CheckoutAction.java:80)
         at com.stc.wlm.web.worklist.WLMAction.execute(WLMAction.java:49)
         at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:484)
         at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:274)
         at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
         at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:507)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:748)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:861)
         at sun.reflect.GeneratedMethodAccessor454.invoke(Unknown Source)
         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
         at java.lang.reflect.Method.invoke(Method.java:585)
         at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:289)
         at java.security.AccessController.doPrivileged(Native Method)
         at javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
         at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:318)
         at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:205)
         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:283)
         at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:102)
         at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:192)
         at java.security.AccessController.doPrivileged(Native Method)
         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
         at com.stc.wlm.web.worklist.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:89)
         at sun.reflect.GeneratedMethodAccessor455.invoke(Unknown Source)
         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
         at java.lang.reflect.Method.invoke(Method.java:585)
         at org.apache.catalina.security.SecurityUtil$1.run(SecurityUtil.java:289)
         at java.security.AccessController.doPrivileged(Native Method)
         at javax.security.auth.Subject.doAsPrivileged(Subject.java:517)
         at org.apache.catalina.security.SecurityUtil.execute(SecurityUtil.java:318)
         at org.apache.catalina.security.SecurityUtil.doAsPrivilege(SecurityUtil.java:261)
         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
         at org.apache.catalina.core.ApplicationFilterChain.access$000(ApplicationFilterChain.java:102)
         at org.apache.catalina.core.ApplicationFilterChain$1.run(ApplicationFilterChain.java:192)
         at java.security.AccessController.doPrivileged(Native Method)
         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
         at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:263)
         at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:156)
         at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:569)
         at org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:261)
         at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:215)
         at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:156)
         at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:569)
         at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:200)
         at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:156)
         at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:180)
         at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:154)
         at com.sun.enterprise.webservice.EjbWebServiceValve.invoke(EjbWebServiceValve.java:134)
         at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:154)
         at com.sun.enterprise.security.web.SingleSignOn.invoke(SingleSignOn.java:272)
         at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:154)
         at com.sun.enterprise.web.VirtualServerValve.invoke(VirtualServerValve.java:209)
         at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:154)
         at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:569)
         at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:161)
         at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:156)
         at com.sun.enterprise.web.VirtualServerMappingValve.invoke(VirtualServerMappingValve.java:173)
         at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:154)
         at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:569)
         at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:979)
         at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:211)
         at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:692)
         at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:647)
         at org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:589)
         at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:691)
         at java.lang.Thread.run(Thread.java:595)
    |#]
    Any idea? The doc is not clear about the attributes Manager, Subordinate, and email, I set them to Manager=manager, Subordinate=(any valid attribute, I use "secretary") and email=mail.
    thanks in advance,
    Edgar.

    Hi TE,
    These are the only lines that the LDAP log in the access.log:
    [27/Oct/2006:11:49:15 -0400] conn=36493 op=63 msgId=64 - SRCH base="" scope=0 filter="(objectClass=*)" attrs=ALL
    [27/Oct/2006:11:49:15 -0400] conn=36493 op=63 msgId=64 - RESULT err=0 tag=101 nentries=1 etime=0
    [27/Oct/2006:11:49:15 -0400] conn=36493 op=64 msgId=65 - SRCH base="ou=people,o=qoslabs,dc=lab" scope=1 filter="(uid=csagan)" attrs="manager"
    [27/Oct/2006:11:49:15 -0400] conn=36493 op=64 msgId=65 - RESULT err=0 tag=101 nentries=1 etime=0
    Any idea?
    Regards,
    Edgar Maya

  • Problem in Synchronizing LDAP Password

    I have done every step as described in idm doc to synchronize LDAP password to IdM, but I encountered a problem when activeSync is fetching the idmpasswd attribute value from LDAP.
    In my activeSync log I have the message below:
    2006-05-29T10:12:05.209+0200: Entry skipped because object class not in "Object Classes to Synchronize" list.
    I have already added idmpasswd and userPassword attributes in 'Attributes to synchronize' list. idmpasswd is an operational attribute so it doesn't really need to be in the 'Object Classes to Synchronize' list.
    So I really wonder I am missing here!?

    The problem stated above is solved now. ActiveSync now can detect the the password change on LDAP.
    But I am stuck with another problem. I can't see how to retrieve the password. The attribute activeSync.password returns null in the activeSync form.
    Where exactly is the decypted password stored? Is there any other special configuration I am missing?

  • Command to View LDAP Password on Cisco ASA 5520

    Hello
    I am migrating from a Cisco ASA 5520 (ASA version 8.4(6)5 to a Cisco ASA 5585. We have LDAP issues logging into to our vpn client software. I assume the LDAP password may be incorrectly entered on the new 5585. No service password- encryption or more running:config won't show the encrypted LDAP password. What is the command to view that?
    Thanks!
    Matt

    Thankyou Jennifer for the responds.
    Could you please help me on how to enable "memberOf" attribute on AD to be pushed to ASA for the OU matching.
    i have already set the "Remote Dialin" property of user account name "testvendor" in AD as "Allow Access" .It can be shown in the debug output as below.
    [454095] sAMAccountName: value = testvendor
    [454095] sAMAccountType: value = 805306368
    [454095] userPrincipalName: value = [email protected]
    [454095] objectCategory: value = CN=Person,CN=Schema,CN=Configuration,DC=abc,DC=local
    [454095] msNPAllowDialin: value = TRUE
    [454095] dSCorePropagationData: value = 20111026081253.0Z
    [454095] dSCorePropagationData: value = 20111026080938.0Z
    [454095] dSCorePropagationData: value = 16010101000417.0Z
    Is their any other settings that i need to do it on AD ?
    Kindly advice
    Regards
    Shiji

  • Urgent: Please help: Trusted recon - Sun LDAP - timeout

    Hi Experts,
    I am doing trusted reconciliation with sun ldap using oim 11.1.1.5 bp4.
    LDAP system has around 3 lakh users. so i am planned to do trusted recon in 5 or 6 intervals to get around 50K records each time.
    i tested for 1000 users - no timeout is happening and all users are created perfectly using trusted recon
    when i run for 25K users, i am getting timeout excception below,
    1. It is searching and listing the users, (please chck time)
    recon.schedule.tasks.tcTskIPlanetUserReconciliation : countRecord() : Before search time: Tue Oct 09 13:24:41 KST 2012
    recon.schedule.tasks.tcTskIPlanetUserReconciliation : countRecord() : TotalRecords from LDAP: 22882
    recon.schedule.tasks.tcTskIPlanetUserReconciliation : countRecord() : After search time: Tue Oct 09 15:54:42 KST 2012
    2. Timeout exception
    recon.schedule.tasks.tcTskIPlanetUserReconciliation : pagingBatchingReconciliation() : The searchBase is: ou=XX,ou=XX,o=XX
    pagingBatchingReconciliation() : Problem searching directory: javax.naming.TimeLimitExceededException: [LDAP: error code 3 - Timelimit Exceeded]; Remaining name: ou=XX,ou=XX,o=XX
    In iPlanet User Truseted Recon I gave,
    Abandoned connection timeout - 108000 (seconds)
    Connection pooling supported - false
    Connection wait timeout - 60 (seconds)
    LDAP Connection TimeOut - 3000 (seconds)
    Inactive connection timeout - 60 (seconds)
    Above parameters are good for more than 25K users?
    Please help me...
    Thanks..

    They look good...
    Try to use Connection pooling too if possible...
    Abandoned connection timeout - 108000 (seconds)
    Connection pooling supported - true
    Connection wait timeout - 60 (seconds) --> Increase it to say 90 (seconds)
    LDAP Connection TimeOut - 3000 (seconds) --->
    Inactive connection timeout - 60 (seconds) --> Increase it to 600 (As the default value in the LDAP Server IT Resource Type Definition)
    Alternatively You can rather break your chunks in 20000 records because you are able to fetch 22882 records successfully....

  • Sun LDAP to SQL server provisiong

    I am a new to Sun IDM.
    I am planning to use Sun IDM for a simple provisioning requirement. We have all our external (yahoo, hotmail type) users in our sun LDAP and need to be synced (one way) to a sql server based on certain group type. So far from sun documentation I could figure out that I have to
    (1) switch on retro change log of source LDAP.
    (2) configure a active sync adapter.
    However, I am not sure where to start. I just configured the source LDAP as a resource and did a (full reconciliation) from it. Here are my questions.
    (1) should I configure the source LDAP user as "service Provider User " OR "Identity Manager User". Asking since, the users are outsider, not our employee.
    (2) After the "Load from Resource" operation I see list of accounts pulled from the LDAP. However, I don't see any other attributes other than userId (account Id) in the "List Account" page. do I have to customize the ../accout/List.jsp page ?
    (3) what are the next high level tasks to sync the changes to a sql server ?
    Thanks!

    Thank You Roman, Looks like I need some more spoon feedings to overcome the initial learning curve.
    I did what you suggested. Created two resources (Ldap & SQL Server). I could load the accounts from the LDAP resources. Now I wanted to do the followings:-
    (A) Load users from Ldap to Sql server based on the filter say "userAssociation=Finance", where 'userAssociatation' is custom attributes in the LDAP for the user object.
    (B) Continue the above said provisioning for all new users from Ldap.
    I tried to Edit "Synchronization Policy" for SQLServer resource. My question is,
    (1) Where in the "Edit synchronization policy" screen I can mention the rule "userAssociation=Finance" ?
    (2) I have enabled the "Retro Changelog Plugin" for the LDAP. Do I have to mention this somewhere for this Ldap to SQLServer provisioning ?
    Thanks!
    Kabi

  • Error in change LDAP password

    Hi,
    Can anybody help me out in this .
    I want to change LDAP password using follows command:
    modifyldapbindpasswd.exe -genpasswdfile test_file.xml
    But there is a error appear: No installation directory specified.
    Please reply me with possible solution .
    Regards,
    keikey.

    Thanks for Mahendra's help!
    When I use the follow command,another error appears:
    C:\oracle\oam\idserver\identity\oblix\tools\modbinpasswd>modifyldapbindpasswd.exe -i c:\oracle\oam\idserver\identity -c is -t all -x ***** -y *****
    Error = The specified procedure could not be found.
    Symbol=oblxkInitcap
    Error = The specified procedure could not be found.
    Symbol=obslxcfcb
    Error = The specified procedure could not be found.
    Symbol=obslxcfob
    Error = The specified procedure could not be found.
    Symbol=obslxcfrb
    Error = The specified procedure could not be found.
    Symbol=oblfvinit
    Error = The specified procedure could not be found.
    Symbol=oblxldini
    Error = The specified procedure could not be found.
    Symbol=oblxlgsz
    Error =The specified procedure could not be found.
    Symbol=obslsta2e
    Error = The specified procedure could not be found.
    Symbol=obslste2a
    Error = The specified procedure could not be found.
    Symbol=oblxlfrd
    Error = The specified procedure could not be found.
    Symbol=oblxpendian
    Language initialization failed. Please check that the installation directory is correct.
    Please reply me with possible solution .
    Regards,
    keikey.
    Edited by: keikey on 2009-10-28 下午6:31

  • Settting embedded LDAP password using WLST

    Hi All,
    I have a requirement where I need to automate some setup on weblogic server. As part of these scripts, I need to set the embedded ldap password using WLST . I tried recording the actions through Admin console. But, I wasn't able to use the generated script for the same. Any pointers on this would be really helpful.

    Do you mean you need to change a users password in embeded LDAP? If so here's the link Configuring Existing WebLogic Domains - 12c Release 1 (12.1.1)   look for
    Changing a Password

  • Advantaged of SUN LDAP Server over OID

    Hi all,
    Can any body tell me the use of SUN LDAP Server instead of Oracle Directory Server......What all advantages we have to use SUN LDAP Server instead of OID....
    Regards
    Kumar

    If no one tells you can assume there is no advantage, simple.

  • User locked while Ldap password sync.

    I'm testing Ldap Password Synchronization in IDM70.
    It works pretty fine, but sometimes I find in the ActiveSync log the following error:
    "Cannot access user <accountId> at this time, please try again later.".
    In this case ActiveSync fails updating the User's password, but what is bad is that it will never try it again: the changelog update is considered done, no later try.
    IDM and Ldap passwords are out-of-sync.
    Is there a way to overcome this limit?

    I usually see that message occur when an account is opened for edit and didn't press the cancel button. A common practice, but remember that there is a lock on that account you are performing an edit on, and cancel will unlock it. If you just close out instead of cancel, the record can't be accessed.
    let me know if that solves it

  • Are there any rough processes for Solaris administrator to setup Sun LDAP as nameing server at Sun sparc host? like: 1st: modify /etc/nfsswitch.nfs 2nd: add LDAP server in /etc/hosts. 3rd: ......

    Besides, can we install the LDAP server in sparc hosts as nameing system? Can we use Sun LDAP server or iPlanet Directory Server? or need BIND DNS server too?

    There is a nice book from Michael Haines and Tom Bialaski: "Solaris and LDAP Naming Services" which contains all you need to configure Directory Server, LDAP, Naming Switch...
    Ludovic.

  • LDAP Password Error in Publisher for CUCM and Unity Connection

    HI all,
    We recently virtualized all our unified communications and I'm having an odd issue with LDAP Directory configuration.
    When attempting to do an Ldap synch from the publisher  in either CUCM OR CUC I get the following error:
    Ldap Password::
    - Passwords do not match
    If I try to do a synch through the subscriber, directory will synch with no issues. If I redo the password and the confirm password and immediately synch without first saving,it works, but if I Save before re-synching,  I get the above error.
    Current Versions:
    CUCM: 8.6.2.22900-9
    CUC: 8.6.2ES44.22900-44
    Anyone have any ideas?

    Have you taken a look at the docwiki about spec based hardware of unified communications?
    http://docwiki.cisco.com/wiki/UC_Virtualization_Supported_Hardware#Processors_.2F_CPUs

  • Suns LDAP Pool and Multithreading

    I used Suns built in LDAP Pool for quite a while in a multithreaded environment. JDK 1.4.2_08, OpenLdap 2.1.19, Win32.
    Suddenly I have some trouble with it. All pools connections become busy and if that state is reached none is getting free anymore, which locks up my program. I've set the pools logging level to "all" with which I was able to observe how more and more connections get busy until the max connections limit is reached.
    I had had some trouble with the pool. The solution had been to close() each and every JNDI Resource I had requested (NamingEnumerations and Contexts). But now im clueless...
    Anyone who can help with some hints? Are there any rules to observe when using the pool in a multithreaded environment?
    Thanx,
    Peter

    Some more info:
    1. The problem can be reproduced on Java 1.5 and 1.6 (I tried 1.5.0_12 and 1.6.0_01).
    2. Method query() implemented using Netscape LDAP driver works correctly (number of established TCP connections does not exceed 30).
    3. I use Sun LDAP Directory Server 5.2.
    Marek

  • IDsync 1.0 and DS5.2, deletion from AD not wrking in SUN LDAP

    Good day all,
    we were doing test on account creation account lock, so on and so forth, everything is working except the deletion from AD are not getting deleted in SUN LDAP.
    Anyone has the answer for that.
    Thank you in advance

    What happens when you set "block internet access" to always? I have also had weird experiences with this feature.
    For example, as I am typing this message, I have instructed the router to block all internet access on this computer (using parental controls), yet I am still able to visit this forum; although, other websites are blocked. I'll also try your rules and see what effect they have on my computer.
    I also agree with you about the annoying "network device" issue that happens when the router isn't able to identify the devices' hostnames. There are also devices that appear in that list, which haven't seen in my DHCP table for awhile.
    I don't work for Cisco. I'm just here to help.

Maybe you are looking for