Synchronization between su01 (usr02) and IdM

Hi experts,
if I assign an ABAP-system to CUA, transaction su01 in the managed system is locked. In opposition to IdM I can change or create in the managed system in t-code su01 user profiles. But if I create or change a user in su01 the change doesn't occur in IdM. Is there an abap specific task to synchronize usr02 an IdM? And is there any way to lock t-code su01?
Thanks and best regards,
Max

You need to run the AS ABAP update job on regular basis to get the information changed in ABAP to IdM.
Just modify your AS ABAP update job correctly, map only the attributes that you want to update or use the "." notation in the mapping and schedule the job according to your requirements.
You really need to define what system is the owner of which attribute and configure your provisioning tasks and jobs accordingly. If IdM is the leading system then the practice should be that nobody alters the data in SU01 anymore.

Similar Messages

No calendar synchronization between outlook2010 iphone4 and mobileme

Since I bought mobileme everything went wrong.
I can synchronize between mobileme and my iphone 4 (IOS 4.1)
But this is all.
No synchronization between outlook (2010) and mobileme (1.6.2)
No synchronization between outllok and Iphone
I tried almost everything..
I removed itunes and reloaded itunes
I removed mobile me and reloaded
I repared Outlook
I removed Outlook and reloaded outlook
and finally I removed Office pro 2010 and reloaded it..
Nothing worked at all..
I have another computer (at home) which is perfectly synchronized, with mobileme, outlook and my iphone.. Also a PC Windows XP pro.
I only use a single calendar..
I cannot find what's up here. And of course asked several expert groups
and obtained no answer. May be some of you experienced the same trouble and I could appreciate your feedback of what you did to fix this
looking formard hearing from you
Best regards
Jacques

Well, I have checked the iCloud settings on the phone. As I have mentioned above the are obviously storage at the iCloud in use because I can see that there are less than 5GB avaliable. But I can not see the new calendar entries on the phone.

Synchronize between promatric account and microsoft account

hi
i try to make Synchronize between promatric account and microsoft account but he con not find the certificate i toke it,

Hi ahmad_alnjjar,
It might seems that the training center have created a new MCP ID for you. To solve your problem just give a call to your Microsoft Region Service Centers (https://www.microsoft.com/learning/en-us/help.aspx) by calling them to merge your 2 MCP IDs to one
account.
Hope this helps :)

Relation ship between table USR02 and ADRP

Hi all,
My requirement is to dispaly the userid , username, address and email id.
iam unable to find the realtionship between table USR02 ( which maintains userid's) and ADRP( which has user name, etcs).
Please tell the how to fetch the name , address and email id data for perticular userid
urgent.
thanks in advance
ramprasad

Using userid U can get the personnel number from PA0105 ..
pass this PERSNUMBER to ADRP and get other details.
select pernr from pa0105 .....
where USRID = USR02-USRID.

Synchronization between iBook G4 and MacBook

Hey there!
I just got my new MacBook and I love it! Til today I have had the last generation of the iBook G4. I want to synch both. The iBook-data should mirgate to my new MacBook. Earlier that worked a fire wire connection. Now I recognized that the MacBook does not have a fire wire sonnection. How does the synchronization work? With USB 2.0???
I would appreicate any comments which helps me to solve this "problem"...
Thank You!

The cable works fine, tried it between the PowerBook G4 and an external hard drive.
The MacBook does not boot. It turns on to a blank white screen and stays there. It won't boot into safe mode or single user mode or anything like that.
Yes, I do have the install discs and put them in to try and reinstall Leopard. They boot, but the hard drive won't show when it asks me where to install. I hear there's a bug with the hard drive not appearing there and waited up to an hour on that screen, but that didn't make it show either. Then I went into Disk Utility, but the hard drive wouldn't show there either. At some point it did, but I couldn't run a repair on it. Then I restarted with the installation disc in again and then it wouldn't show at all.

Difference between SU01 ROLE and attribute ROLE in org.structure

HI,
In SU01 transaction ROLE tab employee role is assigned to the user.
In org. strucute attribute ROLE also contains the employee role.
what is the difference between ther two ?
we should mention employee role for the user in SUO1 and attribute ROLE both places to create shopping cart ?
please guide...points are alloted.
Thanks
mani

Hi SRM guys,
Just i want to know what is the perpose of the attribute - ROLE in Org.structure
and what is use of the ROLE tab in SU01 for user.
Both places ( attributes and in SUO1-ROLE tab ) need to give the sap_bbp_stal_employee role ??? to shop the user...
please confirm ..

Vertical Synchronization between Item DP and Initiative DP

Hi Folks,
Assuming that an Initiative will contain multiple portfolio items, how does the vertical synchronization of status work.
Let's say I map the Portfolio Item Decision Point to Initiative Decision Point, how will the status sync work if I have 5 portfolio items at different statuses? Since there is a 1:M relationship between Initiative and Portfolio Item, is this scenario supported.
Example: Initiative has 5 portfolio items and 1st decision point is "Move 2 Concept". Will the initiative DP status change when the 1st portfolio item DP "Move 2 Concept" is set to complete. What happens when the other portfolio items DP gets completed at a later stage.
Please let me know if the question is not clear enough.
Thanks,
Lashan

Hi Lashan,
in standard always the last changed Item DP status will be synchronized to the Target Initiative DP status.
Best Regards,
Andrea

Synchronization between Oracle Calendar 10.2 and Exchange 5.5 calendar

We are going to migrate 1000 users from Exchange 5.5 to OCS 10.1.2.3.
Mail and Calendar migration is done with ES/EX-migrate, but we have a PABX system (Trio Present 2.3) that is integrated with Exchange Calendar,and this is not compatible with Oracle Calendar in its current release.
In simple terms Trio is integrated with the calendar to programme our phones to "Busy", "Home Sick", "Meeting" etc, based on calendar entries.
In order to preserve this functionality we have to "coexist" with Exchange's calendar.
I see in the Coexistence guide that this is possible to booke meetings in both alendars, but we need a synchronization feature, as the users can booke meetings through their phones, which are then inserted in Exchange, but not Oracle.....
Any idéas ?
Regards,
André

If you find a solution that actually synchronizes between Oracle Calendar and Exchange, let me know. I don't want the Outlook connector - which creates access to the Oracle Calender using Outlook - I actually want to synchronize between the Exchange calendar and the Oracle Calendar. This way, if I update Exchange (using Outlook), Oracle Calendar will be updated when I synch. Also, if I modify the Oracle Calendar, the Exchange Calendar will be updated. We are using Exchange 6.
Thanks,
Fuller Ming, Jr.
[email protected]

Synchronization problem between the iPhone and iTunes

Hello
How do I solve this problem of synchronization between the iPhone and iTunes?
He always gives me this err:
Problem Event Name: APPCRASH
Application Name: SyncServer.exe
Application Version: 17.641.8.1
Application Timestamp: 4c0ed8cb
Name of the default module: CoreFoundation.dll
Default Module Version: 1.550.26.13
Module Timestamp default 4bff35d2
Exception code: c0000005
Shifting the exception 00043dd9
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 1036
Additional Information 1: 0a9e
Additional Information 2: 0a9e372d3b4ad19135b953a78882e789
Additional Information 3: 0a9e
Details No. 4: 0a9e372d3b4ad19135b953a78882e789
Also another error:
Problem Event Name: APPCRASH
Application Name: AppleMobileDeviceHelper.exe
Application version: 17.758.0.68
Application Timestamp: 4c0ed8cb
Name of the default module: CoreFoundation.dll
Default Module Version: 1.550.26.13
Module Timestamp default 4bff35d2
Exception code: c0000005
Shifting the exception 00043dd9
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 1036
Additional Information 1: 0a9e
Additional Information 2: 0a9e372d3b4ad19135b953a78882e789
Additional Information 3: 0a9e
Details No. 4: 0a9e372d3b4ad19135b953a78882e789
Thank you in advance for help.
<Config> Windows 7 / iTunes 9.2 / iPhone 3G 16 GB>

http://discussions.apple.com/thread.jspa?threadID=2470826&tstart=60
A discussion a little way down send you to a website charlesgates?? i think and he will walk you through your problem.
Corefoundation.dll is your issue. Good LUCK!!

Differences between suite products and standalones

I understand that there are differences between the versions of Ps and Soundbooth bundled in the eLearning Suite and the standalone versions.
Does anyone know if there's a complete list of the differences for both the eLearning Suite and Technical Communications Suite?
Anything that's likely to be a showstopper if used with standalone versions?
Thanks.

I don't know about the list, but I can tell you, that the major difference is the synchronization between standalone software and captivate won't
work Unless you do it manually In my case at the university where I work we have Cs4 License and captivate 5 and they just won't synchronize automatically you have to make the change in sound booth, Photoshop or any other software save the change and than do F5 on in captivate or completely reload the element you've created for the change to occur. My question would be is there a patch to emulate the connection between Cs4 and Captivate? Cause I don't think the university I work for would buy anther suite.

Password synchronization between two domains

Hey everybody,
we have currently the situation, where we comes to password synchronization between Domain A and Domain B. Trust relationships are not possible caused we need separated authentications between productive network and user tools.
So we would sync from Domain A (windows 2008 R2) --> Domain B (windows 2008 R2)
Domain B would also replicate per Okta to Office365 Cloud.
Now my question, could anyone point me in the right direction, what tools are usefully on the market to accomplish these issues.
Sorry for my limited english.
Best and thanks

You can try using FIM with PCNS to sync passwords from Domain A to Domain B: https://technet.microsoft.com/en-us/library/jj590203(v=ws.10).aspx
As for Office 365, you can simply implement an ADFS platform and federate it so that your users will be using their AD passwords. It is also possible to sync passwords with DirSync.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

"Deleted items: Synchronize deleted items between this mailbox and my device?" questions

When I log into the BIS site for Sprint, it gives me the option at the bottom that says
"Deleted items: Synchronize deleted items between this mailbox and my device." at the very bottom
What does this really mean? I am confused because when you delete an email off the blackberry, it gives you 3 options, delete from "mailbox & handheld," "handheld," and "cancel".
So, if I have the "Deleted items: Synchronize deleted items between this mailbox and my device." clicked...does that mean when I just choose delete from "handheld" only, it will STILL delete the email from my actual "mailbox" too?
I don't want it to delete the email from my "mailbox" if I choose to delete from "handheld" only on my blackberry
Does anyone know more about this?
Thanks guys

in my opinion :
if you choose to delete on device only, it will never delete on your server.
but best is you to try for one test message and you'll know for sure. And tell us.
The search box on top-right of this page is your true friend, and the public Knowledge Base too:

User synchronization issue between Active Directory and Solution manager.

Requirement:
Synchronize the users between Active directory and solution manager system.
What we did:
1. Created RFC connection (LDAP_RFC) for LDAP connector.
2. Created new LDAP connector that utilize the RFC (LDAP_RFC).
3. Created new logical LDAP Server(CUA).Here we have to maintain the connection
details to the physical directory.
4. We maintained the communication user that is used by the LDAP connector to bind the LDAP Directory Server.
5. In transaction LDAPMAP specific SAP data fields, we mapped to the desired
directory attributes.
6. Testing from LDAP transaction working fine. We are able to see the attributes and
values from Active directory.
Issue:
When executed the program RSLDAPSYNC_USER for user synchronization from t-code se38 with below selection .
LDAP Server = CUA (created earlier)
LDAP Connector = LDAP_RFC (RFC connection created created ealier)
In the tab: (Object that exist both in the directory and in the Database:)
Selected: Compare Time Stamp.
In the tab: (Objects the only exist in the Directory.)
Selected : Create in Database.
In the tab(Objects that only Exist in the Database:
Selected: Ignore Object.
Result from the report shows that connection to LDAP server is fine and 0(zero) objects in Directory.
The program does not create any new user in the Solution Manager system.
Any help on this issue greatly appreciated.
Thanks & Regards,
Harish

where did you see this error ? is there anymore details.
i think the account you are using for Sync does not have Replicate Directory Changes permission in AD. follow below article and give Replicate directory changes permission.
http://technet.microsoft.com/en-us/library/hh296982(v=office.15).aspx
Thanks, Noddy

Password synchronization between OID and AD - 10.1.2

Hi,
I've some questions about the following issue:
I've tried to setup the password synchronization between OID 10.1.2 and active directory, with the intent of exporting ldap users from OID to AD..
Well, the bootstrap gone fine, but when I tried to activate the export of password in the activexp.map configuration file,
I've obtained this:
*Writer Thread - 0 - [LDAP: error code 53 - 0000001F: SvcErr: DSID-031A0FC0, problem 5003 (WILL_NOT_PERFORM), data 0*
for each entry I tried to export...
I've opened a SR on metalink and I've received the following answer:
_" As shown by the synchronization profile, currently you have a mapping for the password from OID to AD._
_userpassword: : :person:unicodepwd: :person:_
_According to the documentation, password synchronization requires the directories to be configured for SSL mode:_
    _http://download-uk.oracle.com/docs/cd/B14099_12/idmanage.1012/b14085/odip_actdir003.htm#CHDEFIED_
_18.3.2.8 Synchronizing Passwords_
_You can synchronize Oracle Internet Directory passwords with Active Directory._
   _You can also make passwords stored in Microsoft Active Directory available in Oracle Internet Directory._
   _Password synchronization is possible only when the directories run in SSL mode 2, that is, server-only authentication."_
The SSL setup is the only way to achieve this, or there's another alternative?
Thanks

Yes. It needs to be in SSL.
http://download-uk.oracle.com/docs/cd/B14099_12/idmanage.1012/b14085/odip_actdir003.htm#CHDCJHHB
Some excerpts:
Active Directory Connector uses SSL to secure the synchronization process. Whether or not you synchronize in the SSL mode depends on your deployment requirements. For example, synchronizing public data does not require SSL, but synchronizing sensitive information such as passwords does. To synchronize password changes between Oracle Internet Directory and Microsoft Active Directory, you must use SSL mode with server-only authentication, that is, SSL Mode 2.
-shetty2k

Password synchronization problem between sun DS and ADS

Hi
I installed the sun one indentity synchronization 1.0. I synchronize password between one DS and one AD.It is working fine. My problem is i want to synchronize between two sun one DS and one AD , but it is ignoring the one DS in Sync , anothe DS and AD is Synchronizing. It is not synchrnonizing the two DS and one AD server.
My SUL Configuration is
SUL Name : DS1ToADS
Windows
Base DN : ou=newsync,dc=esecurity,dc=com
Filter : destinationindicator=ameer.com
Creation Expression : cn=%cn%, ou=newsync,dc=esecurity,dc=com
Sun One Directory Server
Base DN : cn=authorization2,dc=ameer,dc=com
destinationindicator=ameer.com
SUL Name : DS2ToADS
Windows
Base DN : ou=newsync,dc=esecurity,dc=com
Filter : destinationindicator=basha.com
Creation Expression : cn=%cn%, ou=newsync,dc=esecurity,dc=com
Sun One Directory Server
Base DN : cn=authorization2,dc=basha,dc=com
destinationindicator=basha.com
I am synchronizing the existing users using the following file.
<?xml version="1.0" encoding="UTF-8"?>
<UserLinkingOperationList allowLinkingOutOfScope="true">
<UserLinkingOperation parent.attr="UserLinkingOperation"
sulid="DS1ToADS">
<UserMatchingCriteria parent.attr="UserMatchingCriteria">
<AttributeMap parent.attr="AttributeMap">
<AttributeDescription parent.attr="SunAttribute" name="sn"/>
<AttributeDescription parent.attr="WindowsAttribute" name="sn"/>
</AttributeMap>
<AttributeMap parent.attr="AttributeMap">
<AttributeDescription parent.attr="SunAttribute" name="employeenumber"/>
<AttributeDescription parent.attr="WindowsAttribute" name="employeeid"/>
</AttributeMap>
</UserMatchingCriteria>
</UserLinkingOperation>
<UserLinkingOperation parent.attr="UserLinkingOperation"
sulid="DS2ToADS">
<UserMatchingCriteria parent.attr="UserMatchingCriteria">
<AttributeMap parent.attr="AttributeMap">
<AttributeDescription parent.attr="SunAttribute" name="givenName"/>
<AttributeDescription parent.attr="WindowsAttribute" name="givenName"/>
</AttributeMap>
<AttributeMap parent.attr="AttributeMap">
<AttributeDescription parent.attr="SunAttribute" name="employeenumber"/>
<AttributeDescription parent.attr="WindowsAttribute" name="employeeid"/>
</AttributeMap>
</UserMatchingCriteria>
</UserLinkingOperation>
</UserLinkingOperationList>
Should not showing the any error after synchronization.
I am giving my log files
resync log
[05/Jan/2005:17:29:12.505 +0530] INFO 66 CNN101 csi2a01 "Sent remote source entry 'dn: 'CN=actusr2,OU=newsync,DC=esecurity,DC=com' [activedirectorydomainname=esecurity.com, employeeid=11112]'." (Action ID=CNN101-10142707E24-10, SN=4)
[05/Jan/2005:17:29:12.958 +0530] INFO 66 CNN101 csi2a01 "Sent remote source entry 'dn: 'CN=actusr1,OU=newsync,DC=esecurity,DC=com' [activedirectorydomainname=esecurity.com, employeeid=11111]'." (Action ID=CNN101-10142707E24-11, SN=4)
[05/Jan/2005:17:29:13.051 +0530] INFO 66 CNN101 csi2a01 "Sent all entries for the 'DS2TOADS' Synchronization User List." (Action ID=CNN101-10142707E24-13, SN=0)
[05/Jan/2005:17:29:14.098 +0530] INFO 66 CNN101 csi2a01 "Sent all entries for the 'DS1TOADS' Synchronization User List." (Action ID=CNN101-10142707E24-14, SN=0)
[05/Jan/2005:17:29:17.442 +0530] INFO 71 CNN100 csi2a01 "Received all remote entries for the 'DS1TOADS' Synchronization User List." (Action ID=CNN101-10142707E24-14, SN=5)
[05/Jan/2005:17:29:18.567 +0530] INFO 62 CNN101 csi2a01 "Received all remote entries for the 'DS1TOADS' Synchronization User List." (Action ID=CNN101-10142707E24-14, SN=10)
[05/Jan/2005:17:29:22.098 +0530] INFO 72 CNN102 csi2a01 "The Windows entry 'dn: 'CN=actusr1,OU=newsync,DC=esecurity,DC=com' [employeenumber=11111, givenname=ameer1] [destinationindicator=[basha.com, ameer.com]]' is already linked to the Directory Server entry 'dn: 'uid=ds1ameer1,cn=Authorization1,dc=basha,dc=com' [employeenumber=11111, destinationindicator=esecurity.com]'." (Action ID=CNN101-10142707E24-11, SN=5)
[05/Jan/2005:17:29:22.098 +0530] INFO 71 CNN102 csi2a01 "The Windows entry 'dn: 'CN=actusr2,OU=newsync,DC=esecurity,DC=com' [employeenumber=11112, givenname=ameer2] [destinationindicator=[basha.com, ameer.com]]' is already linked to the Directory Server entry 'dn: 'uid=ds1ameer2,cn=Authorization1,dc=basha,dc=com' [employeenumber=11112, destinationindicator=esecurity.com]'." (Action ID=CNN101-10142707E24-10, SN=5)
[05/Jan/2005:17:29:22.520 +0530] INFO 73 CNN102 csi2a01 "Received all remote entries for the 'DS2TOADS' Synchronization User List." (Action ID=CNN101-10142707E24-13, SN=5)
[05/Jan/2005:17:29:22.629 +0530] INFO 63 CNN101 csi2a01 "Received all remote entries for the 'DS2TOADS' Synchronization User List." (Action ID=CNN101-10142707E24-13, SN=10)
audit log
[05/Jan/2005:17:29:15.629 +0530] FINE 16 CNN102 csi2a01 "The agent has received an outbound action from MQ: Type: REFRESH SUL: DS2TOADS {Data Attrs: [UNSPEC employeenumber: 11112] [UNSPEC activedirectorydomainname: esecurity.com]} {Other Attrs: cn: actusr2 destinationindicator: basha.com, ameer.com dn: CN=actusr2,OU=newsync,DC=esecurity,DC=com employeenumber: 11112 givenname: ameer2 objectclass: top, person, organizationalPerson, user dspswuserlink: tZeGDb7WM0SW72YcOMzfew== pwdlastset: 127493062677968750 samaccountname: 1234 sn: nagore2 usnchanged: 115104 whenchanged: 20050104100213.0Z}." (Action ID=CNN101-10142707E24-10, SN=3)
[05/Jan/2005:17:29:15.895 +0530] FINE 16 CNN102 csi2a01 "The controller has received the following outbound action from the agent: Type: REFRESH SUL: DS2TOADS {Data Attrs: [UNSPEC employeenumber: 11112] [UNSPEC activedirectorydomainname: esecurity.com]} {Other Attrs: cn: actusr2 destinationindicator: basha.com, ameer.com dn: CN=actusr2,OU=newsync,DC=esecurity,DC=com employeenumber: 11112 givenname: ameer2 objectclass: top, person, organizationalPerson, user dspswuserlink: tZeGDb7WM0SW72YcOMzfew== pwdlastset: 127493062677968750 samaccountname: 1234 sn: nagore2 usnchanged: 115104 whenchanged: 20050104100213.0Z}." (Action ID=CNN101-10142707E24-10, SN=4)
[05/Jan/2005:17:29:16.208 +0530] FINE 16 CNN102 csi2a01 "The agent has received an outbound action from MQ: Type: REFRESH SUL: DS2TOADS {Data Attrs: [UNSPEC employeenumber: 11111] [UNSPEC activedirectorydomainname: esecurity.com]} {Other Attrs: cn: actusr1 destinationindicator: basha.com, ameer.com dn: CN=actusr1,OU=newsync,DC=esecurity,DC=com employeenumber: 11111 givenname: ameer1 objectclass: top, person, organizationalPerson, user dspswuserlink: tfNQqDQ8VEigzgJjrfcVSg== pwdlastset: 127493178093125000 samaccountname: 123 sn: nagore1 usnchanged: 115147 whenchanged: 20050104131009.0Z}." (Action ID=CNN101-10142707E24-11, SN=3)
[05/Jan/2005:17:29:16.926 +0530] FINE 16 CNN100 csi2a01 "The agent has received an outbound action from MQ: Type: SENTINEL SUL: DS1TOADS {Data Attrs: } {Other Attrs: }." (Action ID=CNN101-10142707E24-14, SN=3)
[05/Jan/2005:17:29:16.926 +0530] FINE 16 CNN100 csi2a01 "The controller has received the following outbound action from the agent: Type: SENTINEL SUL: DS1TOADS {Data Attrs: } {Other Attrs: }." (Action ID=CNN101-10142707E24-14, SN=4)
[05/Jan/2005:17:29:16.973 +0530] FINE 16 CNN102 csi2a01 "The controller has received the following outbound action from the agent: Type: REFRESH SUL: DS2TOADS {Data Attrs: [UNSPEC employeenumber: 11111] [UNSPEC activedirectorydomainname: esecurity.com]} {Other Attrs: cn: actusr1 destinationindicator: basha.com, ameer.com dn: CN=actusr1,OU=newsync,DC=esecurity,DC=com employeenumber: 11111 givenname: ameer1 objectclass: top, person, organizationalPerson, user dspswuserlink: tfNQqDQ8VEigzgJjrfcVSg== pwdlastset: 127493178093125000 samaccountname: 123 sn: nagore1 usnchanged: 115147 whenchanged: 20050104131009.0Z}." (Action ID=CNN101-10142707E24-11, SN=4)
[05/Jan/2005:17:29:16.973 +0530] FINE 16 CNN102 csi2a01 "The agent has received an outbound action from MQ: Type: SENTINEL SUL: DS2TOADS {Data Attrs: } {Other Attrs: }." (Action ID=CNN101-10142707E24-13, SN=3)
[05/Jan/2005:17:29:16.989 +0530] FINE 16 CNN102 csi2a01 "The controller has received the following outbound action from the agent: Type: SENTINEL SUL: DS2TOADS {Data Attrs: } {Other Attrs: }." (Action ID=CNN101-10142707E24-13, SN=4)
[05/Jan/2005:17:29:17.442 +0530] FINER 13 SysMgr_100 csi2a01 "Sending an acknowledgement to the console for request (ID=1104926235041)."
[05/Jan/2005:17:29:17.473 +0530] FINE 13 SysMgr_100 csi2a01 "Sent an acknowledgement to the console for request (ID=1104926235041)."
[05/Jan/2005:17:29:17.457 +0530] FINE 71 CNN100 csi2a01 "The agent has received the following inbound action from the controller: Type: SENTINEL SUL: DS1TOADS {Data Attrs: } {Other Attrs: }." (Action ID=CNN101-10142707E24-14, SN=6)
[05/Jan/2005:17:29:17.489 +0530] INFO 71 CNN100 csi2a01 "The agent is sending the following inbound action to MQ: Type: SENTINEL SUL: DS1TOADS {Data Attrs: } {Other Attrs: }." (Action ID=CNN101-10142707E24-14, SN=7)
[05/Jan/2005:17:29:17.504 +0530] FINER 71 CNN100 csi2a01 "The controller has acknowledged the following outbound action to the agent: Type: SENTINEL SUL: DS1TOADS {Data Attrs: } {Other Attrs: }." (Action ID=CNN101-10142707E24-14, SN=8)
[05/Jan/2005:17:29:18.192 +0530] FINE 16 CNN101 csi2a01 "The agent has received an outbound action from MQ: Type: SENTINEL SUL: DS1TOADS {Data Attrs: } {Other Attrs: }." (Action ID=CNN101-10142707E24-14, SN=8)
[05/Jan/2005:17:29:18.364 +0530] FINE 16 CNN101 csi2a01 "The controller has received the following outbound action from the agent: Type: SENTINEL SUL: DS1TOADS {Data Attrs: } {Other Attrs: }." (Action ID=CNN101-10142707E24-14, SN=9)
[05/Jan/2005:17:29:18.676 +0530] FINER 62 CNN101 csi2a01 "The controller has acknowledged the following outbound action to the agent: Type: SENTINEL SUL: DS1TOADS {Data Attrs: } {Other Attrs: }." (Action ID=CNN101-10142707E24-14, SN=11)
Please do the needful
Basha

Hi Joshua,
Does this mean that I need to install the core and sub component but no need to install the DS and AD connectors. No!!! Core must only be installed on one machine! Here is a short summary of the steps during an installation having sun ONE LDAPs in multi-master replication (taking ldap2 as the machine, whrere core is installed):
1. Install core on ldap2
2. start console and configure your directory sources. For the sun directory source enter ldap2 as the preferred and ldap1 as the secondary ldap. Configure the rest: attribute-mapping, modification flow, AD-source, SULs, etc. save the configuration.
3. on ldap2 run idsync prepds untill you get the SUCCESS message in the following way (be sure to specify the secondary ldap with -j and -r options):
idsync prepds -h <ldap2> -p <ldap2port> -j <ldap1> -r <ldap1port> -D "cn=directory manager" -w <passwort> -s <configuration_registry_suffix>4. Run the install binaries again on ldap2. Install DS Connector on ldap2, install DS-Subcomponent (preferred) on ldap2. Install AD-Connector.
5. Copy over install binaries to ldap1. Run the install binaries on ldap1. Give ldap2 as configuration directory URL When you are asked, what components to install, select subcomponent. Select the suffix. When you are asked, what type of ldap, select secondary.
6. Copy over install binaries to any ldap slave in your replication topology and install the subcomponent there, choosing "other" as the ldap type.
Good luck again...
Jakob.

Synchronization between su01 (usr02) and IdM

Similar Messages

Maybe you are looking for