Synchronization beetween CUA x LDAP - Can it use paged queries?

Im using the synchronization process between LDAP (Microsoft Active Directory) and CUA (ECC 6.0). Im having problems with a specific Microsoft best practice. This best practice allow only read 1000 objects in one query, in order to get the next 1000 objects, you should make a new query.
Ive already open this parameter to more than 1000 objects, then everything works well. However, when we receive a Microsoft consulters and auditors, they had hardly advice us to return this parameter to default 1000 objects due security issues.
Then my question is how can SAP support it? The transaction rsldapsync_user has any configuration to support paged queries.

Notes 1000644 807846 and 584121 which are discussing this issue.
You can activate the paged search with the commandline parameter
"-pagesize" as mentioned in these notes.

Similar Messages

Can we use multiple queries on one template

Can we use multiple queries on one template

Hi,
if you're using data templates for your data set, you
can put multiple queries in the XML data template.
The queries may then be linked (or not) by the "link
name" tag ...
Grtz.Following you answer here...do you know eventually how/if possible to preview a report (with XMLP Desktop) that is using data templates for the data set?
Thanks,
Liviu

How can i use dsadm to change the ldap port?

I have a ldap with port 1389,I changed it to 389,now I can not start it because it is a non root user.
Now I want to change the port back to 1389,but I can not use dsconf because the server is not running.
How can i do now? How can i use dsadm to change the port?
Thank u very much.

My apologies, I didn't mean to be rude/impolite.
I just wanted to emphasize that in a situation where a Directory Server doesn't even start, you cannot interact with the live server to configure the new port (either talking LDAP or otherwise). All you can do in that case won't be related with the LDAP (that's just the name of the protocol): either assigning network privileges to the user, or changing the Directory Server configuration file.
The other thing I'd like to outline (and this could take a separate thread ;-) ), is that semantically, I'd prefer talking of a Directory Server instead of an LDAP Server because the former is 'something' providing Directory Services, whereas the latter is just the name of the protocol we use to interact with the server; but this is just my personal opinion, you don't have to agree with me.
that's all folks!
marco

How can I use LDAP searching from OSX Lion Server to Mozilla Thunderbird?

How can I use LDAP searching from OSX Lion Server to Mozilla Thunderbird? We have a super awesome contacts server that works great for our Mac users. About 30% of our company are on PCs, and I would like to use the Mozilla Thunderbird mail client for them. I see that in Thunderbird I can set up LDAP searching, and would like to have this feature point to our contacts server. I've tried several different settings, and looked all over the web, but could not find the proper way to configure this. Does anyone know if this can be done, or if not, would have a better suggestion? Thank you for your time!!

try double clicking keychain acces should launch and ask if you want to install login, system, System roots
A dialog box will launch asking where to install the cert since your configuring a vpn I would put the certificate it in system.

Can I use iCloud as my library instead of using local storage? Would I be able to synchronize the music on my phone? and make CDs out of the my music in the icloud using itunes?

Can I use iCloud as my library instead of using local storage? Would I be able to synchronize the music on my phone? and make CDs out of the my music in the icloud using itunes?

Many thanks JEM24 for your help. Ive just spent the best part of six hundred pounds on a new Sony Rx100m2 compact camera, so I have no interest in the Ipods camera at all really. I doubt Ill be watching many videos on it as Im very lucky in that I have a good Android tablet. Its more as a stock music player that Ill be buying the Ipod for, if indeed I do end up buying one. I dont like the idea of paying the exorbitant amount added for more memory space that Apple along with most other companies charge. In fact I read an article on this very subject just yesterday in the tech section of Flipboard. It stated in the article that in the case of the Iphone the actual cost of each additional gigabyte of storage to Apple et al is something in the order of 60p.. This is certainly not reflected in the price us the customer has to pay at the till.. Its for this reason primarily that Apple in particular, because their products do not allow adding expandable memory of your own in the form of cheap to buy cards, that nobody in their right mind buys the 64gig etc Iphones..I am aware that we are discussing my potential purchase of an Ipod Touch here but you see my point. Many thanks again though for helping me.

Can I use icloud to synchronize contacts and calender for 1 ipad and 3 Windows 7/8 PC?

Can I use icloud to synchronize contacts and calender for 1 ipad and 3 Windows 7/8 PC?
regards,
Jan

Thanks! One more question ..... Will I have to enter appointments on an iCloud default calendar by logging in to my iCloud account every time, or can I just enter data on calendars in my 2 devices?

Can't use JDBC URL for multiple LDAPs

ColdFusion 8,0,1,195765 Enterprise (Trial)
We use Oracle OID (LDAP) instead of tnsnames.ora to resolve database connection strings. This is how I specify one LDAP JDBC URL. On the CF admin page, Server Settings, Java and JVM, ColdFusion Class Path is set to C:\oracle\product\10.2.0\db_1\jdbc\lib\ojdbc14.jar. Under Data & Services, Data Sources, create a new source. Set JDBC URL to
jdbc:oracle:thin:@ldap://mdaoid1.mycompany.com:389/mdad2,cn=OracleContext,dc=mycompany,dc= com
where mdaoid1 is one of the two Oracle OID servers that resolve connection strings, and mdad2 is an entry in the two OID's sync'ed to each other. That works.
According to many sources based on Google search for "space separated LDAP URLs", I should be able to add another LDAP server separated by space. Now I append " ldap://mdaoid2.mycompany.com:389/mdad2,cn=OracleContext,dc=mycompany,dc=com" (no quotes, added to indicate leading space) to that string. Upon clicking Submit, I get
Connection verification failed for data source: orcl10g3
java.sql.SQLException: For input string: "389 ldap:"
The root cause was that: java.sql.SQLException: For input string: "389 ldap:"
(orcl10g3 is the CF data source name I'm creating) Some say I need to replace space with %20 in the double LDAP URL. With %20, I get error
Connection verification failed for data source: orcl10g3
java.sql.SQLException: Io exception: JNDI Package failurejavax.naming.InvalidNameException: Invalid name: mdad2,cn=OracleContext,dc=mycompany,dc=com ldap://mdaoid2.mycompany.com:389
The root cause was that: java.sql.SQLException: Io exception: JNDI Package failurejavax.naming.InvalidNameException: Invalid name: mdad2,cn=OracleContext,dc=mycompany,dc=com ldap://mdaoid2.mycompany.com:389
Question: How do I add more than one LDAP server to the JDBC URL so I can achieve failover and load balance?
Yong Huang
yong321 at yahoo.com

The message above was posted by me two years ago and was brought to my attention today. Here's a short update: The network team added a load balancer mdaoid in front of, and resolved to, mdaoid1 and mdaoid2 (in round-robin fashion). The problem described in this thread is bypassed because the JDBC URL can simply use one-OID format, in which mdaoid is used as the LDAP server.

Can I use your Embeded LDAP Server?

Hi,
WebLogic Server 7.0 and 8.1 comes with an embedded LDAP Server?
I have an application that requires iPlanet Directory Server for 7000 entries.
Can I use the embedded LDAP Server to put my own entries and use it?
Regards,
Shanmugavel R P

Are these videos on mozilla.org somewhere? Please see the last section of the following page, on "Site Licensing": http://www.mozilla.org/about/legal.html

Using LDAP in 9.3.1, I can got the user list but can not use their password

Hey guys, I need your help.
I am using msad for Shared Services External Authentication.
I configurate the msad successfully.
And I could find the user in local domain. But I can not use their password in workspace.
That mean's I could find the user in local domain and do the provision job.
But I can not use their password in localdomain to login on workspace.
Is there any thing I missed when configurate the Shared Services?
Need your help.

you may have trouble -
if password use NATIONAL character, such letters like (я ч ъ ю )
if user, who's have access from SS to AD under "NATIONAL" folder
p.s. my settings for AD
Name: NTLM Domain NAME
Hostname: x.x.x.x
Port: 389
Base DN: DC=NAME,DC=domain suffix
User DN: CN=user_name, CN=Users Catalog
Login: sAMAccountName
Email: mail

Synchronization from OID to AD failed by using ActiveExport profile

Hi All
Synchronization from OID to AD failed by using ActiveExport profile
and i use copy activeexp.map.master that contains
DomainRules
cn=Users,dc=software,dc=raya,dc=corp:CN=Users,DC=twa,DC=com:
AttributeRules
# Organizational Unit Mapping
ou: : :organizationalunit:ou: : organizationalunit
# Container mapping
cn: : :orclcontainer: cn: :Container
#Domain cannot be exported
#name: : :domain: dc: :domain
cn:1: :inetorgperson:cn: :User
cn:1: :inetorgperson:SAMAccountName: :User
# attribute rule for mapping Active Directory LOGIN id
#mail: : :person:sn: :User:
mail: : :person:UserPrincipalName: :User:
# attribute rule for mapping entry and to create orclUserV2
# There should be a mapping rule with orcluserv2 objectclass
# without which the PORTAL may not function properly
cn: : :inetorgperson:givenname: :person
givenName: : :person:displayName: :person
# mail needs to be assigned valid value for default settings ing DAS
mail: : :inetorgperson:mail: :person
# The next mapping rule is for synchronizing password from OID to AD.
# Additional configuration is required. Please refer to DIP documentation
# for details.
# NOTE - To synchronize password from OID to AD, uncomment the next rule.
# userpassword: : :person:unicodepwd: :person:
# Setting useraccountcontrol to "544" (0x220) means
# 1) regular account 2) password not required 3) user account is enabled
cn: : :person:useraccountcontrol: :person:"544"
mobile: : :inetorgperson:mobile: :organizationalperson:
# GROUP ENTRY MAPPING RULES
cn: : :orclgroup:cn: :group:
# This will work successfully only when cn doesn't have any
# special characters associated with it.
cn: : :orclgroup:SAMAccountName: :group:
uniquemember: : :groupofuniquenames:member: :group:
when i check the log file i found
Trace Log Started at Mon Jul 24 07:54:58 EEST 2006
tampro.Twa.com:389
rdn value is missing in change record when performing insert operation. Please ensure that required mapping rule is specified in the profile.
java.lang.NullPointerException
at oracle.ldap.odip.gsi.ActiveWriter.insert(ActiveWriter.java:286)
at oracle.ldap.odip.gsi.LDAPWriter.writeChanges(LDAPWriter.java:272)
at oracle.ldap.odip.engine.AgentThread.mapExecute(AgentThread.java:581)
at oracle.ldap.odip.engine.AgentThread.execMapping(AgentThread.java:306)
at oracle.ldap.odip.engine.AgentThread.run(AgentThread.java:200)
null
ActiveExport:Error in Mapping Enginejava.lang.NullPointerException
java.lang.NullPointerException
at java.io.Writer.write(Writer.java:126)
at java.io.PrintStream.write(PrintStream.java:303)
at java.io.PrintStream.print(PrintStream.java:462)
at java.io.PrintStream.println(PrintStream.java:599)
at java.lang.Throwable.printStackTrace(Throwable.java:461)
at oracle.ldap.odip.engine.ODIException.printStackTrace(ODIException.java:296)
at oracle.ldap.odip.engine.AgentThread.mapExecute(AgentThread.java:740)
at oracle.ldap.odip.engine.AgentThread.execMapping(AgentThread.java:306)
at oracle.ldap.odip.engine.AgentThread.run(AgentThread.java:200)
Updated Attributes
orclodipLastExecutionTime: 20060724075501
orclLastAppliedChangeNumber: 3833
orclOdipSynchronizationStatus: Mapping Failure, Agent Execution Not Attempted
orclOdipSynchronizationErrors: Unknown Error Encountered
Sleeping for 1 secs
can any one tell me what can i do ?

If its a very rare failure, then as you mentioned, you can skip it..

Can I use SAP HR to drive ESS Portal user creation?

Hello
We are implementing a new instance of SAP HR and Portal for ESS and MSS and I am not sure of all the steps that need to be completed so any guidance / tips would be greatly appreciated.
Company currently has an LDAP - but not used extensively. Not all employees currently in LDAP as not all have network ids. All employees will have a SAP account to enable ESS (via Kiosks etc). ESS iViews in Portal will call SAP HR and possibly SAP BW. We have an instance of SAP already and user admin maintained via CUA - this will continue.
Scenario:
My initial thoughts are that we try to use SAP HR as the leading system to drive the ESS Portal users and access. Basically I want to create the user in SAP and assign them an ESS SAP role... then through syncronization have the user created in the Portal and have the correct ESS Portal assigned (in the Portal)
My thinking so far is to go the following way;
1) Create User Master Record in SAP (SU01)
2) Hire employee into the org structure (via HR processes)
3) Populate Infotype 0105 with SAP username
4) Populate Infortype 1016 - with SAP role to be assigned to allow ESS access (not sure about this aspect) or role could be assigned in 1) above
I am not sure of the next steps - I think there must be a way in an SAP table to map the ESS SAP role to the ESS Portal Role (is this via WP3R?)
then I am hoping that a standard job can be run (is this RSLDAPSYNC_USER) that will create the user in the Portal (UME?) and assign the correct Portal role ?
(obviously configuration needed)
For MSS and HR Power users - we would continue to assign SAP roles via SU01.
Can anyone assist with;
- Is my thinking correct in terms of how this should / could work?
- in SAP how can I map SAP Roles to Portal Roles ?
- will syncronization in SAP create the user in Portal and assign the role ? what do I need to configure?
Thanks in advance

Dear Michale,
I just dont know if this can throw some light on your prob.'
In our Orgn we had around 250 ess users and 200 sapr/3 users. Some of the r/3 users also logon to ess via their r/3 uname and password.
What we have done is like follows:
1. Created a role for only the ess users ZHRESS. For this i asked the HR functional people with sap_all profile to do all the job which the ESS users are supposed to do and tracer the authorization via tcode st01. We created the role on the basis of this trace report.
2. For the purely ESS users we created the users via tcode HRUSER and assigned then with the above role.
3. For the R/3 users who are supposed to avail the ess facility we assigned them with the role ZHRESS role in addition to the other roles assigned to them to carry out their normal R/3 transactions. Then we mapped their R/3 uname to their employee no via PA30 infotype 105.
4. Tcode HRUSER saved time which would have consumed had we done it via su01 and moreover it picked Name etc data from the HR master table. In HRUSER tcode , setting the user attributes helps to define what roles the users are to be assigned, what should be their initial password etc.
Pl let me know if it satisfies you querry.
Regards

How can I use the pulse train from a 6602 to trigger an niFGEN and niSCOPE on each rising edge of the pulse train?

Hello,
Here is my application: I need to use a 6602 counter/timer to generate a pulse train of certain frequency and duty cycle. On each rising edge of this pulse train, I need to output an arbitrary waveform on Ch. 0 of an niFGEN (5422) AND acquire data from CH. 0 of an niSCOPE (5124). I also need to synchronize the niFGEN and the niSCOPE to the same clock used for the pulse train (6602/ctr0). This process needs to continue until the user stops the system.
I can generate the pulse train using the 6602 just fine using ctr0, but the pulse train shows up on OUT0 by default. When setting up the niFGEN and niSCOPE to trigger on rising/positive slope edge, OUT0 is not an option for either device as a source for the digital rising edge (pulse train). The main options for both are PFI0-3 and RTSI lines.
Questions:
1.) Is there a way that I can direct the pulse train to a location (such as an RTSI line) where BOTH the niFGEN and the niSCOPE can use it as a start trigger for each rising edge? I noticed in MAX that a route can be made between ctr0's internal output and a trigger line and others. If this is a solution, could you please explain how to accomplish this?
2.) Once I configure the niFGEN and niSCOPE to be triggered on a digital rising edge, how can I effectively have this happen for every rising edge from the pulse train? In other words, can I just initiate the FGEN outside of the while loop and it will generate a waveform for each rising edge it sees at the source until the while loop is exitted?
3.) Is setting a reference clock for the niFGEN and the niSCOPE the same thing as synchronizing both devices using the same clock that generated the pulse train? It is not clear to me the difference, and why it would necessarily be useful.
Images of my current front panel and block diagram are attached. If you would rather have the actual VI's just let me know. Any help and/or explanation on this is greatly appreciated. Thanks in advance.
Attachments:
Front_Panel_Control.jpg ‏278 KB
Block_Diagram_Control.jpg ‏263 KB

Hello Cgifford,
Welcome to National Instruments Forums.
To output your signal to the PFI lines,
you can use external connectios between OUT0 and PFI lines. You can also use
the backplane to do so by routing into the same RTSI line.
1)
On the SCOPE and FGEN, the name of the
terminals are actually “PXI Trigger Line x/RTSIx” but on the 6602 you might
need to route the signal using the property:
You can also use the DAQmx route signal which perform the same opperation.
2)
This will depend on the frequency of
your pulse train. If this is lower than about 10 ms, then you can probably
place this on a loop and start and stop the acquisition every time. If the
frequency is higher than this, you will have to use:
- Scripting on the FGEN side (read more)
- MultiRecord Fetch (more information in the scope help file
section “Acquisition Functions Reading versus Fetching”).
3)
The short answer is yes. The longer one
might depend on how tight you need the synchronization to be (us, ns, ps). For
very tight synchronization, you should look into here.
Message Edited by Yardov on 06-18-2007 03:14 PM
Gerardo O.
RF Systems Engineering
National Instruments
Attachments:
property.JPG ‏7 KB

How can I use 2 iPhone 4's on same iTunes account, but NOT sync same contacts?

How can I use 2 iPhone 4's on same iTunes account, but NOT sync same contacts?

They need to be registered under different Apple ID's. The initial Apple ID is set when you first start the phone up. If you've already registered the phone to the iTunes account, back it up to your computer, and then have iTunes do a factory reset. Go to www.icloud.com, log in with your current Apple ID, select "Find My iPhone," choose the iPhone you want to dissociate from your primary Apple ID from the upper left, and then click the little circled X ("remove").
When you start the phone, it will have you go through the setup process again, at which time you need to create a unique Apple ID for the device. You can then restore it from your iTunes backup to get back your apps and other settings.
Whenever you use the iTunes store, use the login information (Apple ID and password) that you were using before. Basically, the second Apple ID that you created is purely used for accessing iCloud services, which includes synchronization of contacts, iCal events, and other such things.

How can I use Balancing, if I connected to two ISP?

Hello,
I have NetWare6sp3 with 3 NIC's and connected to two ISP. I set two default
gateways (One to first ISP, Another to second ISP). But all of trafic goes
via first gateway. Can I use Balancing beetween ISP1 and IPS2?
Maxim Cuznetov

Maxy,
It appears that in the past few days you have not received a response to your posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Do a search of our knowledgebase at http://support.novell.com/search/kb_index.jsp
- Check all of the other support tools and options available at http://support.novell.com in both the "free product support" and "paid product support" drop down boxes.
- You could also try posting your message again. Make sure it is posted in the correct newsgroup. (http://support.novell.com/forums)
If this is a reply to a duplicate posting, please ignore and accept our apologies and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Can I use the same database for two WSUS servers?

Hi Folks,
Our HQ WSUS database is on a dedicated SQL Server 2008 in HQ. We are planning to set up a replica WSUS server in a branch office (centralized management mode). But we want to check the WSUS reports (e.g. computer/update status) only from the HQ instead
of each branch. I have two questions.
I should not install the SQL Server in Branch, and specify the HQ SQL Server as the Branch WSUS server database, right? In this case, I can check WSUS reports of both HQ and Branch from HQ, right?
Can I use a specific update source (e.g. Microsoft Update or other WSUS upsteam servers) for Branch WSUS server instead of HQ WSUS server even it's a replica WSUS server?
Thanks,
高麻雀

Regarding to "If the branch office server is intended to be a replica server, then it must be configured with the HQ WSUS server as the update source", does it mean my branch WSUS server is only able to get the patches from my HQ WSUS server?
That is the fundamental premise of a downstream replica server.
Isn't it able to get the patches from Microsoft Update or other WSUS servers?
Well, here we may have a terminology challenge... so let me take a step back and answer this way:
A WSUS server obtains *updates* via the process of synchronization. Updates can be synchronized from one of two sources: Microsoft, or an Upstream WSUS Server.
Additionally, updates have a concept of APPROVAL. Approvals can be obtained from an Upstream WSUS Server when the server is configured as a REPLICA server; otherwise, Approvals are created at each individual WSUS server.
Finally, updates have FILES. Files can be obtained from Microsoft or the Upstream WSUS server, and this configuration option is absolutely independent of where the updates and/or approvals come from.
Please note: All of this is exhaustively documented and discussed in the
WSUS Deployment Guide. I would highly recommend reading it cover-to-cover.
In this case, there will a a lot of bandwith cost on the leased line which is only 2Mbps and intended for critical business like VDI/ERP applications.
A few thoughts here...
First a 2Mb/sec link is more than adequate to support a WSUS server downloading update files from an Upstream WSUS Server.
Second, using BITS you can configure when those files are transferred as well as how much of that 2Mb/sec is made available to the WSUS downstream server.
Third... Patch Management IS a critical business function. Do not let it be treated as a step-child or the VDI/ERP functionally will be irrelevant.
"after installing the replica server in the branch office, on the upstream server enable the option for Reporting Rollup", will the report information (computer/update status) be recorded in the HQ SQL Server?
The detail reporting data for the clients of the downstream replica servers is physically stored in the upstream server's database.
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

Synchronization beetween CUA x LDAP - Can it use paged queries?

Similar Messages

Maybe you are looking for