TFS 2013: Access problem when adding a AD group to members
Hi there!
I have a big access problem. It seems I cant log into TFS if I add a AD group to a collection but I can log in if I add single users from the same group.
EDIT: The group I want to add is from another domain. Maybe thats the reason for the problem?
Any ideas? I dont want to add 150 users one by one ;)
Hi John
I will try to answer your questions :)
There’s two domains, TFSdomain and Userdomain, right? - Yes
The TFSdomain one way trust to Userdomain? - Yes
If you add a single account(Userdomain) into your TFS Server, this single account(Userdomain) can connect to TFS Web Access or your account can connect to TFS Web Access? Your account and this single account(Userdomain) are not the same account? -
I have two accounts, one User domain accout and one TFS domain account that is TFS administrator. If I use the TFS domain account to add the User domain account as a project group member this user domain account will be able to access the TFS web access
from the user domain.
If you add an AD group(Userdomain) into your TFS Server, the user in this AD group(Userdomain) will cannot access TFS Web Access or your account cannot access TFS Web Access? Your account and this user are the same account? Or your account included in this
AD group(Userdomain) too? - The user domain:s "domain users" group includes my user domain account. If I add the user domain:s "domain users" group as a project group member in TFS (with my domain user) my user domain account will
not be able to access the TFS web access from the user domain.
When connect to TFS Web Access failed, what’s the error message you received? - There is no error message, I am only asked to log in again.
If you cannot access TFS Web Access, how did you add AD group(Userdomain) into your TFS Server? Or once you added the AD group(Userdomain) into TFS Server, you will cannot access TFS Web Access immediately? Your account is a Userdomain user? -
I added it with my TFS user domain administer account
The scenario is as follows:
I have a one way trust from tfs domain to user domain.
I add a user domain account as a project group member in TFS. Now this account is granted access to the project using the TFS web access client.
I remove the user again.
I add the users domain:s "domain users" group (where my user domain account is included) as a project group member in TFS. Now my user account is
not granted access to the project using the TFS web access client.
Hope this will spread some light on the problem.
Thanks Stefan
Similar Messages
-
JTable sorting - problem when adding elements (complete code inside)
I�m writing this email with reference to a recent posting here but this time with the code example. (I apologize for the duplicated posting � this time it will be with the code)
Problem: when adding more elements to the JTable (sorted) the exception: ArrayIndexOutOfBoundsException is thrown.
Example: If the elements in the table are 10 and then the user requests for 8 � the table will produce the correct result. However, if the user will ask for 11 items (>10) the exception will be thrown.
The program: The program below (compiles and running). A JTable is constructed with 3 items, when you click the button - the return result should be 4 items - this will generate the error, WHY?
I would highly appreciate your thoughts why this is happening and most importantly � how to fix it.
Thanks a lot
3 files:
(1) TableSorterDemo
(2) Traveler
(3)TableSorter
//TableSorterDemo:
package sorter;
import javax.swing.DefaultListModel;
import javax.swing.JButton;
import javax.swing.JFrame;
import javax.swing.JPanel;
import javax.swing.JScrollPane;
import javax.swing.JTable;
import javax.swing.table.AbstractTableModel;
import java.awt.BorderLayout;
import java.awt.Dimension;
import java.awt.event.ActionEvent;
import java.awt.event.ActionListener;
* TableSorterDemo is like TableDemo, except that it
* inserts a custom model -- a sorter -- between the table
* and its data model. It also has column tool tips.
public class TableSorterDemo implements ActionListener
private JPanel superPanel;
private JButton clickMe = new JButton("click me to get diff data");
private boolean DEBUG = false;
private DefaultListModel defaultListModel;
private JTable table;
public TableSorterDemo()
superPanel = new JPanel(new BorderLayout());
defaultListModel = new DefaultListModel();
init1();
TableSorter sorter = new TableSorter(new MyTableModel(defaultListModel)); //ADDED THIS
table = new JTable(sorter); //NEW
sorter.setTableHeader(table.getTableHeader()); //ADDED THIS
table.setPreferredScrollableViewportSize(new Dimension(500, 70));
//Set up tool tips for column headers.
table.getTableHeader().setToolTipText(
"Click to specify sorting; Control-Click to specify secondary sorting");
//Create the scroll pane and add the table to it.
JScrollPane scrollPane = new JScrollPane(table);
//Add the scroll pane to this panel.
superPanel.add("Center", scrollPane);
superPanel.add("South",clickMe);
clickMe.addActionListener(this);
public JPanel getPanel()
return superPanel;
public void init1()
//in real life this will be done from the db
Traveler a = new Traveler();
Traveler b = new Traveler();
Traveler c = new Traveler();
a.setFirstName("Elvis");
a.setLastName("Presley");
a.setSprot("Ping Pong");
a.setNumYears(3);
a.setVegetarian(true);
b.setFirstName("Elton");
b.setLastName("John");
b.setSprot("Soccer");
b.setNumYears(2);
b.setVegetarian(true);
c.setFirstName("shaquille");
c.setLastName("oneil");
c.setSprot("Golf");
c.setNumYears(22);
c.setVegetarian(true);
defaultListModel.addElement(a);
defaultListModel.addElement(b);
defaultListModel.addElement(c);
public void init2()
//in real life this will be done from the db
Traveler d = new Traveler();
Traveler e = new Traveler();
Traveler f = new Traveler();
Traveler g = new Traveler();
d.setFirstName("John");
d.setLastName("Smith");
d.setSprot("Tennis");
d.setNumYears(32);
d.setVegetarian(true);
e.setFirstName("Ron");
e.setLastName("Cohen");
e.setSprot("Baseball");
e.setNumYears(12);
e.setVegetarian(true);
f.setFirstName("Donald");
f.setLastName("Mac Novice");
f.setSprot("Vallyball");
f.setNumYears(1);
f.setVegetarian(true);
g.setFirstName("Eithan");
g.setLastName("Superstar");
g.setSprot("Vallyball");
g.setNumYears(21);
g.setVegetarian(true);
defaultListModel.addElement(d);
defaultListModel.addElement(e);
defaultListModel.addElement(f);
defaultListModel.addElement(g);
class MyTableModel extends AbstractTableModel
private DefaultListModel myModel;
public MyTableModel(DefaultListModel m)
myModel=m;
private String[] columnNames = {"First Name",
"Last Name",
"Sport",
"# of Years",
"Vegetarian"};
public int getColumnCount()
return columnNames.length;
public int getRowCount()
return myModel.size();
public String getColumnName(int column)
return getNames()[column];
public String[] getNames()
String[] names = {"First Name", "Last Name", "Sport", "# of Years", "Vegetarian"};
return names;
public Object getValueAt(int row, int col)
return distributeObjectsInTable(row, col, (Traveler) myModel.elementAt(row));
public Object distributeObjectsInTable(int row, int col, Traveler tr)
switch(col)
case 0:
return tr.getFirstName();
case 1:
return tr.getLastName();
case 2:
return tr.getSprot();
case 3:
return new Integer(tr.getNumYears());
case 4:
return new Boolean (tr.isVegetarian());
default:
return "Error";
public Class getColumnClass(int c)
return getValueAt(0, c).getClass();
private static void createAndShowGUI()
//Make sure we have nice window decorations.
JFrame.setDefaultLookAndFeelDecorated(true);
//Create and set up the window.
JFrame frame = new JFrame("TableSorterDemo");
frame.setDefaultCloseOperation(JFrame.EXIT_ON_CLOSE);
//Create and set up the content pane.
TableSorterDemo newContentPane = new TableSorterDemo();
newContentPane.getPanel().setOpaque(true); //content panes must be opaque
frame.setContentPane(newContentPane.getPanel());
//Display the window.
frame.pack();
frame.setVisible(true);
public static void main(String[] args)
//Schedule a job for the event-dispatching thread:
//creating and showing this application's GUI.
javax.swing.SwingUtilities.invokeLater(new Runnable()
public void run()
createAndShowGUI();
public void actionPerformed(ActionEvent ae)
if (ae.getSource()==clickMe)
defaultListModel.removeAllElements();
init2(); //if the size of the model was less than 2 items - the result will be ok.
//in other words, if you commens the last 2 rows of this method (addElement(f) & g)
// the result will be fine.
table.updateUI();
}//(2) Traveler
package sorter;
public class Traveler
private String firstName;
private String lastName;
private String sprot;
private int numYears;
private boolean vegetarian;
public String getFirstName()
return firstName;
public String getLastName()
return lastName;
public int getNumYears()
return numYears;
public String getSprot()
return sprot;
public boolean isVegetarian()
return vegetarian;
public void setFirstName(String firstName)
this.firstName = firstName;
public void setLastName(String lastName)
this.lastName = lastName;
public void setNumYears(int numYears)
this.numYears = numYears;
public void setSprot(String sprot)
this.sprot = sprot;
public void setVegetarian(boolean vegetarian)
this.vegetarian = vegetarian;
}//(3)TableSorter
package sorter;
import java.awt.*;
import java.awt.event.*;
import java.util.*;
import java.util.List;
import javax.swing.*;
import javax.swing.event.TableModelEvent;
import javax.swing.event.TableModelListener;
import javax.swing.table.*;
public class TableSorter extends AbstractTableModel {
protected TableModel tableModel;
public static final int DESCENDING = -1;
public static final int NOT_SORTED = 0;
public static final int ASCENDING = 1;
private static Directive EMPTY_DIRECTIVE = new Directive(-1, NOT_SORTED);
public static final Comparator COMPARABLE_COMAPRATOR = new Comparator() {
public int compare(Object o1, Object o2) {
return ((Comparable) o1).compareTo(o2);
public static final Comparator LEXICAL_COMPARATOR = new Comparator() {
public int compare(Object o1, Object o2) {
return o1.toString().compareTo(o2.toString());
private Row[] viewToModel;
private int[] modelToView;
private JTableHeader tableHeader;
private MouseListener mouseListener;
private TableModelListener tableModelListener;
private Map columnComparators = new HashMap();
private List sortingColumns = new ArrayList();
public TableSorter() {
this.mouseListener = new MouseHandler();
this.tableModelListener = new TableModelHandler();
public TableSorter(TableModel tableModel) {
this();
setTableModel(tableModel);
public TableSorter(TableModel tableModel, JTableHeader tableHeader) {
this();
setTableHeader(tableHeader);
setTableModel(tableModel);
private void clearSortingState() {
viewToModel = null;
modelToView = null;
public TableModel getTableModel() {
return tableModel;
public void setTableModel(TableModel tableModel) {
if (this.tableModel != null) {
this.tableModel.removeTableModelListener(tableModelListener);
this.tableModel = tableModel;
if (this.tableModel != null) {
this.tableModel.addTableModelListener(tableModelListener);
clearSortingState();
fireTableStructureChanged();
public JTableHeader getTableHeader() {
return tableHeader;
public void setTableHeader(JTableHeader tableHeader) {
if (this.tableHeader != null) {
this.tableHeader.removeMouseListener(mouseListener);
TableCellRenderer defaultRenderer = this.tableHeader.getDefaultRenderer();
if (defaultRenderer instanceof SortableHeaderRenderer) {
this.tableHeader.setDefaultRenderer(((SortableHeaderRenderer) defaultRenderer).tableCellRenderer);
this.tableHeader = tableHeader;
if (this.tableHeader != null) {
this.tableHeader.addMouseListener(mouseListener);
this.tableHeader.setDefaultRenderer(
new SortableHeaderRenderer(this.tableHeader.getDefaultRenderer()));
public boolean isSorting() {
return sortingColumns.size() != 0;
private Directive getDirective(int column) {
for (int i = 0; i < sortingColumns.size(); i++) {
Directive directive = (Directive)sortingColumns.get(i);
if (directive.column == column) {
return directive;
return EMPTY_DIRECTIVE;
public int getSortingStatus(int column) {
return getDirective(column).direction;
private void sortingStatusChanged() {
clearSortingState();
fireTableDataChanged();
if (tableHeader != null) {
tableHeader.repaint();
public void setSortingStatus(int column, int status) {
Directive directive = getDirective(column);
if (directive != EMPTY_DIRECTIVE) {
sortingColumns.remove(directive);
if (status != NOT_SORTED) {
sortingColumns.add(new Directive(column, status));
sortingStatusChanged();
protected Icon getHeaderRendererIcon(int column, int size) {
Directive directive = getDirective(column);
if (directive == EMPTY_DIRECTIVE) {
return null;
return new Arrow(directive.direction == DESCENDING, size, sortingColumns.indexOf(directive));
private void cancelSorting() {
sortingColumns.clear();
sortingStatusChanged();
public void setColumnComparator(Class type, Comparator comparator) {
if (comparator == null) {
columnComparators.remove(type);
} else {
columnComparators.put(type, comparator);
protected Comparator getComparator(int column) {
Class columnType = tableModel.getColumnClass(column);
Comparator comparator = (Comparator) columnComparators.get(columnType);
if (comparator != null) {
return comparator;
if (Comparable.class.isAssignableFrom(columnType)) {
return COMPARABLE_COMAPRATOR;
return LEXICAL_COMPARATOR;
private Row[] getViewToModel() {
if (viewToModel == null) {
int tableModelRowCount = tableModel.getRowCount();
viewToModel = new Row[tableModelRowCount];
for (int row = 0; row < tableModelRowCount; row++) {
viewToModel[row] = new Row(row);
if (isSorting()) {
Arrays.sort(viewToModel);
return viewToModel;
public int modelIndex(int viewIndex)
return getViewToModel()[viewIndex].modelIndex;
private int[] getModelToView()
if (modelToView == null) {
int n = getViewToModel().length;
modelToView = new int[n];
for (int i = 0; i < n; i++) {
modelToView[modelIndex(i)] = i;
return modelToView;
// TableModel interface methods
public int getRowCount() {
return (tableModel == null) ? 0 : tableModel.getRowCount();
public int getColumnCount() {
return (tableModel == null) ? 0 : tableModel.getColumnCount();
public String getColumnName(int column) {
return tableModel.getColumnName(column);
public Class getColumnClass(int column) {
return tableModel.getColumnClass(column);
public boolean isCellEditable(int row, int column) {
return tableModel.isCellEditable(modelIndex(row), column);
public Object getValueAt(int row, int column) {
return tableModel.getValueAt(modelIndex(row), column);
public void setValueAt(Object aValue, int row, int column) {
tableModel.setValueAt(aValue, modelIndex(row), column);
// Helper classes
private class Row implements Comparable {
private int modelIndex;
public Row(int index) {
this.modelIndex = index;
public int compareTo(Object o) {
int row1 = modelIndex;
int row2 = ((Row) o).modelIndex;
for (Iterator it = sortingColumns.iterator(); it.hasNext();) {
Directive directive = (Directive) it.next();
int column = directive.column;
Object o1 = tableModel.getValueAt(row1, column);
Object o2 = tableModel.getValueAt(row2, column);
int comparison = 0;
// Define null less than everything, except null.
if (o1 == null && o2 == null) {
comparison = 0;
} else if (o1 == null) {
comparison = -1;
} else if (o2 == null) {
comparison = 1;
} else {
comparison = getComparator(column).compare(o1, o2);
if (comparison != 0) {
return directive.direction == DESCENDING ? -comparison : comparison;
return 0;
private class TableModelHandler implements TableModelListener {
public void tableChanged(TableModelEvent e) {
// If we're not sorting by anything, just pass the event along.
if (!isSorting()) {
clearSortingState();
fireTableChanged(e);
return;
// If the table structure has changed, cancel the sorting; the
// sorting columns may have been either moved or deleted from
// the model.
if (e.getFirstRow() == TableModelEvent.HEADER_ROW) {
cancelSorting();
fireTableChanged(e);
return;
// We can map a cell event through to the view without widening
// when the following conditions apply:
// a) all the changes are on one row (e.getFirstRow() == e.getLastRow()) and,
// b) all the changes are in one column (column != TableModelEvent.ALL_COLUMNS) and,
// c) we are not sorting on that column (getSortingStatus(column) == NOT_SORTED) and,
// d) a reverse lookup will not trigger a sort (modelToView != null)
// Note: INSERT and DELETE events fail this test as they have column == ALL_COLUMNS.
// The last check, for (modelToView != null) is to see if modelToView
// is already allocated. If we don't do this check; sorting can become
// a performance bottleneck for applications where cells
// change rapidly in different parts of the table. If cells
// change alternately in the sorting column and then outside of
// it this class can end up re-sorting on alternate cell updates -
// which can be a performance problem for large tables. The last
// clause avoids this problem.
int column = e.getColumn();
if (e.getFirstRow() == e.getLastRow()
&& column != TableModelEvent.ALL_COLUMNS
&& getSortingStatus(column) == NOT_SORTED
&& modelToView != null) {
int viewIndex = getModelToView()[e.getFirstRow()];
fireTableChanged(new TableModelEvent(TableSorter.this,
viewIndex, viewIndex,
column, e.getType()));
return;
// Something has happened to the data that may have invalidated the row order.
clearSortingState();
fireTableDataChanged();
return;
private class MouseHandler extends MouseAdapter {
public void mouseClicked(MouseEvent e) {
JTableHeader h = (JTableHeader) e.getSource();
TableColumnModel columnModel = h.getColumnModel();
int viewColumn = columnModel.getColumnIndexAtX(e.getX());
int column = columnModel.getColumn(viewColumn).getModelIndex();
if (column != -1) {
int status = getSortingStatus(column);
if (!e.isControlDown()) {
cancelSorting();
// Cycle the sorting states through {NOT_SORTED, ASCENDING, DESCENDING} or
// {NOT_SORTED, DESCENDING, ASCENDING} depending on whether shift is pressed.
status = status + (e.isShiftDown() ? -1 : 1);
status = (status + 4) % 3 - 1; // signed mod, returning {-1, 0, 1}
setSortingStatus(column, status);
private static class Arrow implements Icon {
private boolean descending;
private int size;
private int priority;
public Arrow(boolean descending, int size, int priority) {
this.descending = descending;
this.size = size;
this.priority = priority;
public void paintIcon(Component c, Graphics g, int x, int y) {
Color color = c == null ? Color.GRAY : c.getBackground();
// In a compound sort, make each succesive triangle 20%
// smaller than the previous one.
int dx = (int)(size/2*Math.pow(0.8, priority));
int dy = descending ? dx : -dx;
// Align icon (roughly) with font baseline.
y = y + 5*size/6 + (descending ? -dy : 0);
int shift = descending ? 1 : -1;
g.translate(x, y);
// Right diagonal.
g.setColor(color.darker());
g.drawLine(dx / 2, dy, 0, 0);
g.drawLine(dx / 2, dy + shift, 0, shift);
// Left diagonal.
g.setColor(color.brighter());
g.drawLine(dx / 2, dy, dx, 0);
g.drawLine(dx / 2, dy + shift, dx, shift);
// Horizontal line.
if (descending) {
g.setColor(color.darker().darker());
} else {
g.setColor(color.brighter().brighter());
g.drawLine(dx, 0, 0, 0);
g.setColor(color);
g.translate(-x, -y);
public int getIconWidth() {
return size;
public int getIconHeight() {
return size;
private class SortableHeaderRenderer implements TableCellRenderer {
private TableCellRenderer tableCellRenderer;
public SortableHeaderRenderer(TableCellRenderer tableCellRenderer) {
this.tableCellRenderer = tableCellRenderer;
public Component getTableCellRendererComponent(JTable table,
Object value,
boolean isSelected,
boolean hasFocus,
int row,
int column) {
Component c = tableCellRenderer.getTableCellRendererComponent(table,
value, isSelected, hasFocus, row, column);
if (c instanceof JLabel) {
JLabel l = (JLabel) c;
l.setHorizontalTextPosition(JLabel.LEFT);
int modelColumn = table.convertColumnIndexToModel(column);
l.setIcon(getHeaderRendererIcon(modelColumn, l.getFont().getSize()));
return c;
private static class Directive {
private int column;
private int direction;
public Directive(int column, int direction) {
this.column = column;
this.direction = direction;
}The table listens to the TableModel for changes. Changing the table by adding/removing
rows or columns has no affect on its table model. If you make changes to the table model
the table will be notified by its TableModelListener and change its view. So tell
MyTableModel about the change of data:
public class TableSorterDemo implements ActionListener
MyTableModel tableModel;
public TableSorterDemo()
defaultListModel = new DefaultListModel();
init1();
tableModel = new MyTableModel(defaultListModel);
TableSorter sorter = new TableSorter(tableModel);
public void actionPerformed(ActionEvent ae)
if (ae.getSource()==clickMe)
defaultListModel.removeAllElements();
init2();
tableModel.fireTableStructureChanged();
} -
Hello,
I have to maintain a SharePoint 2010 project, in which a TopNavigation User Control for SiteCollection is registered in the MasterPage in this way:
<%@ Register TagPrefix="ABC" TagName="TopNavigation" src="~/_layouts/ABCApplication/MainSite/Navigation/TopNavigation.ascx" %>
<asp:ContentPlaceHolder id="PlaceHolderTopNavBar" runat="server">
<asp:ContentPlaceHolder id="PlaceHolderHorizontalNav" runat="server">
<ABC:TopNavigation ID="TopNavi" XMLDataLocation="/_layouts/ABCApplicatopm/MainSite/TopNavigation.xml" IsRoot="true"
runat="server" />
</asp:ContentPlaceHolder>
</asp:ContentPlaceHolder>
When I deploy the SiteCollection, the TopNavigation user control is working correctly. Unfortunately when i modify the masterpage over SharePoint Designer, the following error message comes allways, regardless of the art of changes i did in the MAsterPage
( even if I open the MasterPage, add an space and do save/close the MasterPage).
"Problem when adding user control in my custom master page, Parser Error Message: The referenced file '/_layouts/Navigation/TopNavigation.ascx' is not allowed on this page."
Any ideas?Hi Simon,
When we use UserControl in SharePoint Page or MasterPage, and the UserControl is kept in any folder other than ControlTemplates, we will got the error. Here is an article about this issue and provided the solution:
http://sharepoint-tina.blogspot.com/2009/07/referenced-file-pathxyzascx-is-not.html
The solution can also be used in SharePoint 2010.
Qiao Wei
TechNet Community Support -
Problems when adding iTunes to iMovie project
I recently recorded onto miniDV tape about 15 minutes of rare color film footage from 1938-40, courtesy of the University of Missouri archives. Using iMovie 6.0.1, I made about 15 clips, divided by subject and year and added some titles. I placed them into the clip viewer and previewed the movie. No problems when I previewed it. I also "unchecked" the ambient audio, because the film was silent and the only sound was the sound of the film projector picked up by the Sony TRV-30 digital camcorder. Via the Internet, I found the top songs of the those years and downloaded them from iTunes. I "clicked and dragged" the songs from iTunes into the sound track of the project. Here's where the problem arose. After I added the music, I previewed the movie. The music track played OK, but the video image was extremely "jerky;" in other words, it would appear to stop momentarily, then "jerk" to a start again. It appears that way through the entire project. Any ideas as to why it would be doing this?
Also, I have another "mystery." The icon for the project is in the "movies" folder. The icon appears as a white "one-dimentional square" with "sideways Vs" a the top and a black star on a white field on the face of the icon. When I click on the icon, the project opens (clips etc.). In previous projects, there is a two-dimentional folder with a blue front and when you open it, there are other sub-folders in it (a "media" folder" and the .mov file etc). Why does my current movie only give me the option of opening the project, and does not show the media folder and .mov file? As always, your assistance is very much appreciated. This forum has been very helpful to me in the past. --ScooperHi scooper,
... An answered the second part, I give a try to part one:
* is the project located on your Mac's local drive or external?
* is the iTunes library on the Mac's local drive or external?
* is the "internet" (<<woohoo, bad kharma;-) ) music coded as aac, mp3 or aiff? or, something different, internet "standard", as ogg, wav, whatever?
your Mac/iM tries to playback in realtime (sure, that makes sense with a movie...), but obviously has too much to do encoding the music...
in case you own QTpro or a designated audio-app (Garageband, Audacity), try to convert the internet music (<<woohoo, bad kharma... ah, said that) BEFORE import to iM into aiff...
in case of usage of external harddrives:
make sure, the drive is "MacOsExtended" formatted, not FAT32... use Disk Utility to accomplish that (any reformatting erases all content!)
pay the artists//respect local laws//get good kharma -
N8 - Strange problem when adding an OVI email acco...
Hi there.
When adding my GFs OVI email account to her N8 I start the installer which directs me to a page where I can sign up or login.
I choose login as she's already setup an account. The login succeeds and we get the "readying inbox" or a similar message. Then the browser seems to get stuck at reloading a link and finally gives me an error saying the login name or password was incorrect.
Login in on a PC works great.
I didn't have this problem on my N8 but then again I was using email.nokia.com since my previous E52.
Any one have a clue?
Thanks.
Simon
N8 User.Hi pradeepwitu,
probably this is the result of your excellent
code
Instead of
code
you could try
code
Regards,
Clemens -
I have Sharepoint Foundation installed with the latest CU updates. It is running on a VMware box (Windows Server 2008 R2 Standard) with its backend on a SQL Server 2008 R2 vmware box. The farm account is a domain user and has been given all appropriate
replication rights, etc to active directory.
Everything seems to be working fine except for security integrated with AD groups. When I go to edit permissions I can add individual AD users just fine and remove them just fine and their access is taken away right away or given to them right away.
I can also find AD groups in the people picker and add them to the site. When I add new groups to AD, they are found immediately within Sharepoint, and when I delete groups from AD, they are taken out of the people picker right away. Now comes
the weird part. When I add an AD group to the site, all users currently within that AD group are given access to the Sharepoint Site. This works for the first time only. Now when I add or remove users from the AD groups, it does not update
in SharePoint. For example, I have an AD testuser1 in the AD Group "All Users". testuser1 does not have access to SharePoint. So I add the AD group to the Sharepoint group "Visitors". testuser1 now has read access to the sharepoint
site. Now, I remove testuser1 from the AD group, but testuser 1 still has access to the site even though he is not part of the AD group, nor does he have any individual permissions to the site. Now, I add testuser2 to the ad group. testuser2
does not have access to the site, even though he is part of the ad group.
It seems that the only time AD group security is working for me is when I first initially add the AD group to the site. From then on, it's like sharepoint is caching the members of the group and not updating any new adds or deletes from the groups.
Any ideas? I am lost on where to go from here as I have tried everything from clearing cache files, rebooting servers, iisresets....I think I have at least cornered the problem, but am not 100% sure yet that it is the correct answer. I think it could be 1 of the following 2 scenarios.
Scenario 1: We have 3 web applications setup on our web server ports 80 - Our sharepoint Web app, 2020 - Our My Site Web App, 2040 - Our Search Web app. We are using host headers (http://sharepoint.***.com) instead of a server name. So
we setup our access mappings (Central Admin -> Application Management -> Configure Alternate access mappings) to use the host header (http://sharepoint.***.com) as the default mapping and the server name as the intranet access mapping. By
setting the default access mapping to host headers, i noticed that Sharepoint automatically assumes that all web apps are on port 80. You can see this by going to (Central Admin -> Manage Web Applications). The port listed all 3 web apps on
port 80. So I think when I was doing a profile sync and using mysites, it was messing with my AD security because of this. What I did was the following. I went to Central Admin -> Manage Service Applications -> [Name of your user profile
service] -> Setup my sites. I made sure that my preferred search center had the correct port number on it (mine originally had no port number), that my my site host had a port (again no port number originally), as well as the personal site location.
I then saved this.
Scenario 2: Our user profile sync had 2 BDC connections that were corrupt and throwing errors. I rebuilt the connections, remapped them to the proper user profile property.
I did both of these scenarios above around the same time. I then restarted all my servers, and at last the AD Group security is now functioning appropriately. I have done multiple IIS resets and server restarts. The issue has only reappeared
once. After restarting the machine again, we were back to the AD groups functioning correctly. Because we had the issue reappear once after doing the above, I still do not feel 100% sure that either one of the above corrected the issue completely.
As long as we are up and running currently, I am moving on to other tasks with this project. My only concern that it will break again and I will have to revisit it is when we restart the servers....which is never fun. I will update as I find
a "true" answer to this issue.... Let me know if any of the above helped you or if you find something I may not have thought of. -
Suddenly getting 404 error when adding user to group
Hi,
I have an OAM 10.1.4.0.1 instance that's been working fine.
However, today, I noticed that when I tried to add a user to a group, when I am in the selector page and click a user, I then get an HTTP 404 error.
I've searched all of the log files that I can find, and I can't see any error messages. The only thing that is showing an error in a log is the IIS that I have setup with WebGate for OAM Admin. I get a "404" error with a sc-win32-status or "3".
I have restarted everything, and that still hasn't helped.
Does anyone here know what might be causing this, or how to diagnose the problem?
Thanks,
JimHi,
I'm answering my own question/problem here, but hopefully this info will help someone else.
I was able to get adding users to groups working again. I found that after I cleared the cache in my browser (IE6), the "add user to groups" started working again, without the HTTP 404 error.
In hindsight, I guess this kind of makes sense, because if you ever watch the URIs on the selector pages, they all look alike, so I'm guessing the IE would not send a full GET request, but the "content" was no longer valid on the OAM server, thus the 404 error.
Jim -
Crystal Reports XI R2 Server problem when trying to load groups from LDAP
Hi,
I'm using Crystal Reports XI R2 SP4 on RedHat Linux. My users are being authorized through LDAP (OID). My problem is that after removing all groups (right now no groups/users are visible in CMC) in CMC Authentication tool and then trying to add them again I'm receiving following error:
"LDAP: Failed to commit objects to server : Duplicate object name in the same folder."
I've checked connectivity to LDAP server and it's ok. Could it be connected to CMS problems/corruption? Any help/suggestions would be appreciated.
Regards,
MarcinThe only personal folders visible from under Admin panel are for users Administrator and Guest. I've tried to query CMS tables but these store entries not in plain text so I cannot identify entries connected to personal folders. I have also tried to do this via Query Repository tool but all returned entries were ok.
I have also noticed that when trying to load group from LDAP after it returns error "LDAP: Failed to commit objects to server : Duplicate object name in the same folder." entry for this group is created in CMS table. Also this group is then visible in admin Groups panel. No users are created with the group and when I'm trying to list users belonging to added group it returns "internal secLDAP security plug-in error" but without any other suggestion what went wrong. -
Creative Zen 8gb- unknown error/access denied when adding mu
This is so frustrating....please help!? I have already reformatted, disk cleanup, reset and still nothing. When I'm trying to add new music to my Creative Zen 8gb I get the both error messages : "unknown error" when using the Media Zen 'browse media' option and when using the Windows Explorer drag and drop selection "access denied". Please help I've tried almost everything and it won't copy any music not even pictures.
What operating system do you have? Win Xp (sp2) (sp3) or Vista?
Note: I can only help you on Win Xp (Sp2)
Try this:
. Go into the "Recovery Mode" on the Zen disconnected from the PC and clean-up & reboot.
Check to see if this fixed your problem?
Next
. Connect your Zen to the PC
2. Select "Organize media files in this device using Creative Media Explorer"
3. You should have a "docked screen" ?
4. Under Windows, Control Panel, System, Hardware, Device Manager then look under Portable Device then
look for Blue (Yellow is bad) Creative Zen then check to see if the device is ok.
Do this for error code (0)
http://www.pchell.com/hardware/usbcode0.shtml
Do this for error code (9)
http://technet2.microsoft.com/window....mspx?mfr=true
Check back
BTW - I hope you are adding music to the right folder e.g. Creative Zen (My Zen) Media Library / Music
Cheers -
Problem when adding a web server in front of weblogic
Hello all,
I have the following problem. A Sun ONE WS (6.1) was added in front of the weblogic 70 that runs our application. The WS just forwards the requests from port 91 to the weblogic port, which is 8001. In my application, I have only one <welcome-file-list> that works fine if I access the AS directly. However, It doesn't work when I try to do it thru the WS. Is there anything I need to change in weblogic or my application to make this <welcome-file-list> functionality work ? Someone know if the HTTP request is received differently if it's sent internally ?
Thanks a lot!
FedericoThe AS wasn't the problem. Sun one was appending index.html in the request when it forward it to the AS...
-
Access denied when adding people to SharePoint group
Hi all,
I've been having problems with my SharePoint 2010 deployment that wasn't deployed by me. Sound familiar? Anyways, here is my problem: I try to add people to a SharePoint group and I'm getting:
Access Denied.
You do not have permission to perform this action or access this resource.
Troubleshoot issues with Microsoft SharePoint Foundation.
Correlation ID: 930333d7-64dc-4135-8f51-686303a9847c
Date and Time: 7/29/2014 2:21:11 PM
I've been having problems with pulling AD members in one of my site collections for awhile now. Been troubleshooting with what information I can find online. One step I took was to blank out the LDAP search string for each site collection so that it's not
limited to certain OUs.
Also I am getting security log entries that my farm account is trying to authenticate as a privileged [administrative permissioned] account for an employee that is no longer with us. Coincidentally enough he's the one that deployed this SharePoint solution
originally.
I need help in tracking down why I cannot add users to groups in this one site collection; but my root site collection I can add people no problem.
Environment:
Server1: SQL 2008 R2 on Windows Server 2008 R2
Server2: SharePoint 2010 with Enterprise CALs on Server 2008 R2
Current event viewer entries of note:
Load control template file /_controltemplates/TaxonomyPicker.ascx failed: Could not load the assembly ';Microsoft.SharePoint.Portal, Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c'. Make sure that it is compiled before accessing the page.
Object Cache: The super user account utilized by the cache is not configured. This can increase the number of cache misses, which causes the page requests to consume unneccesary system resources.
To configure the account use the following command 'stsadm -o setproperty -propertyname portalsuperuseraccount -propertyvalue account -url webappurl'. The account should be any account that has Full Control access to the SharePoint databases but is not an application pool account.
Additional Data:
Current default super user account: SHAREPOINT\system
A logon was attempted using explicit credentials.
Subject:
Security ID: domain\farm_account
Account Name: farm_account
Account Domain: domain
Logon ID: 0x79c13
Logon GUID: {e25efc28-8db1-ea76-9a8e-6d0143a681d9}
Account Whose Credentials Were Used:
Account Name: former_admin_employee
Account Domain: domain
Logon GUID: {00000000-0000-0000-0000-000000000000}
Target Server:
Target Server Name: domain_controller.domain.net
Additional Information: domain_controller.domain.net
Process Information:
Process ID: 0x13b0
Process Name: C:\Windows\System32\inetsrv\w3wp.exe
Network Information:
Network Address: -
Port: -
This event is generated when a process attempts to log on an account by explicitly specifying that account’s credentials. This most commonly occurs in batch-type configurations such as scheduled tasks, or when using the RUNAS command.Hello,
> he's the one that deployed this SharePoint solution originally.
Are you trying to add user by custom solution? If so then it seems your code is using the impersonate method to run code with admin privileged (i.e. RunWithElevatedPrivileges or User token).
If this is the case then you have to first add new account as site collection in site then change that web application pool identity on IIS. Go to IIS-->select your web app pool-->then go to properties and verify which account is been used
there. If it is old then replace with your account.
Let us know your result
Hemendra:Yesterday is just a memory,Tomorrow we may never see
Please remember to mark the replies as answers if they help and unmark them if they provide no help -
Having problems when adding new Curency value field + currency field.
I need to add a new Currency field (CURR, length 15, 2 decimal places) plus the Currency field itself to a view.
I'm really struggerling. I have looked at the existing SAP fields in the Component workbench and I have to admit I can not see how a field is linked/related to the currency itself. Is this link established purlely at the disctionary level?.
Has anyone added their own Z field value and Z currency field before. I can create both fields and display them, but what I can not work out is how I related them within the component workbench, or is this done from the dictionary?.
Any help would be greatly appreciated.
I should have been able to look at an existing SAP example and work out how it's done, but so far I can not see/determine how this is achieved, even though someone has mentioned that it's controlled via the GET_I_field method. Looking at this method I was expecting to see some mention of both the Currency value field and the Currency field. But as I don't see these confusion reigns.
JasonThat's correct, but am I right in thinking that you can't actually create the currency key field itself?.
I am aware that currency value fields can be created which reference a currency key field, but can see nothing that allows me to create a currency key field to be referenced.
I hope that makes sense.
Also, I have amended the structure, changing my value fields from Decimal 15,2 to Currency 15,2 and have created a new currency key field in the structure and referenced this from the Currency value field.
Witin the Component/view/context node I can see this new currency key field, but it appears as STRUCT.fieldlabel whereas my currency value field appears in the context node as EXT.fieldlabel, because it was created in the AET.
My problem is that when attempting to add the currency key field onto the screen I don't have it to select from within the list of structures/attributes. All the others attributes in the context node seem to be there, except the new currency key field/attribute.
The attribute has a SET_fieldlabel, GET_fieldlabel, GET_M_Fieldlabel and a GET_I_Fieldlabel, which I believe is all that should be required.
Does anyone know what my problem could be?.
Jason -
Usage Tracking - Access problem when Authentication Mode = Windows
Hi Everyone,
I´m working on UPK Usage Tracking configuration, in order to provide the finished training material.
1) In Server01 (on Window Server 2003) the UPK Usage Tracking is installed
2) In Server02 (also on Windows Server 2003) the Usage Tracking database is installed
3) By accessing the configuration file (http://Server01/ODSTrack/configuration/setup.aspx) on Server01,I setup the Authentication Mode = Forms
Note: The rest of the configurations were done.
4) Once the configuration from step 3 is done, I execute the traning material (on Server01) from another node of the windows network
and as a result I´m able to perform it.
5) I access the Statistc data on Server01 by accessing the file (http://Server01/ODSTrack/admin/default.aspx)and I´m also able to see the results.
6) When I execute the step 3 but with Authentication Mode = Windows, and including the GROUP name (windows group specially created for this goal where my user is included),
- I still have access to the training material (step 4)
- I have NO aceess to the statistics data any more (step 5) and the following message is display
"You do not have permission to access this page. Please contact your Usage Tracking Server Administrator to update your permissions. "
I don´t know what else I can do, and I wonder if some other configurations need to be done at windows network and/or explorer lever or any other.
Any help would be appreciated.
Best Regards//
Rubén ZamudioHi All,
This problem was solved by reconfiguring Usage Tracking in the authentication method (was anonymous and the solution was Windows integrated).
It is important to count on people from your organization working on Networks with some knowledge in IIS.
Best Regards
Ruben -
HR Custom InfoTypes problem when added to custom Infoset Report for PA
Hi, I am having an issue with the adhoc query /SAPQUERY/HR_ADM. I added the custom infotypes 9* I created to this standard infoset by using SQ02 and adding these by going into the menu path Edit--> Change InfoType selection. I regenerated this object and attached to a transport. The query runs fine in the DEV system where I made the change...I can choose fields for output or selection from the standard infotypes and custom infotypes as expected. I migrated this transport to the test system and now when I try to do the same thing I get an error when I try to click on any object in my custom infotype and some of the standard infotype. I tried regenerating and resending to the test system and still have the same issue. This is the error in the dump:
79 * create work area
80 create data data_wa like line of data_table.
81 assign data_wa->* to <data_wa>.
82 assign component fcat_wa-fieldname OF STRUCTURE <data_wa>
83 to <field>.
84
85 loop at t_fcat into fcat_wa.
86 field_filled = 'X'.
87 assign component fcat_wa-fieldname OF STRUCTURE <data_wa>
88 to <field>.
89 if sy-subrc <> 0.
>>>>> raise internal_error.
It appears the TEXT488 is the value in the fcat_wa-fieldname and I do not see this in the data_wa.
Does anyone know how to fix this problem or what I might try or look at to see what the difference is between the DEV system (where it works ok) the the Test system where it is giving me an error?
Thanks in advance for any help you can provide.
LaurieAfter further investigation I found the problem to this was in the generation of the objects. Even though I generated before attaching to a transport and all looked ok, there is some sort of bug causing it to not generate properly so I had to sign on to each environment and generate the object in SQ02 including in Production. After I did this the custom infotypes were accessible in the Infoset.
-
I am having problems when adding mp3
So when I sync the whole ipod touch, it's fine, but when I try to sync music or manually add music, i get some error windows.
When I first got the ipod in Jan2010, it was fine when I manually added mp3s, but recently I tried to add more music, it wouldn't allow me to.
I tried restoring to factory settings and restore from my back up, it didn't help.
I disabled my anti-virus (CA), still having trouble adding mp3s manually or syncing.
Everything else related to syncing works.
I tried my other ipods for this current PC and I was able to add music to those, but still not with the ipod touch.
http://sehanafortress.com/help/ipoderrors_201005may0001.jpg
http://sehanafortress.com/help/ipoderrors_201005may0002.jpg
http://sehanafortress.com/help/ipoderrors_201005may0003.jpg
http://sehanafortress.com/help/ipoderrors_201005may0004.jpg
http://sehanafortress.com/help/ipoderrors_201005may0005.jpg
Windows XP
iTunes 9.1.1.12
ipod touch 3.1.3
Thank You
Message was edited by: sehanaMany thanks.
Okay ... swinging into "basic principles" troubleshooting mode. I'm suspecting most strongly either a damaged pref file or library file here. If that's what is going on, then these errors should be specific to a single Windows user account on the PC (because there's a different set of iTunes preferences files and library files for each different Windows user account on the PC).
So I'd like to do a little experiment to check to see if this is a user account specific or system-wide problem on the PC.
Quit iTunes if you have it open. Head into your User accounts control panel. Create a new user account with full administrative rights.
Now log out of your usual user account and log into the new account. (Don't use fast user switching to move between accounts.)
Launch iTunes in the new user account. The iTunes set-up assistant will run. Don't add any files to iTunes when prompted to do so ... just let iTunes eventually launch to an empty library.
Now in iTunes go "Edit > preferences". Click the Devices tab. Make sure the "Prevent iPods, iPhones and iPads from syncing automatically" checkbox is checked and then click OK.
Now add a small number of mp3 to the new empty library. (Preferably, make them files that have transfered successfully to the ipod in the past.)
Now try attaching the iPod. Do not associate the iPod with the empty library. Now try checking that "manually manage" setting.
Attempt to do a manual transfer of the mp3s to the iPod from the new library. Do they transfer across without the error messages?
Now add a small number of the files that haven't synced successfully to the iPod (in the usual user account) to the iTunes library in the new account. Again, try a manual transfer of some of those files to the iPod. Do those transfer without the error messages?
(If both types of manual transfers take place without errors in the new account, that strongly suggests we should try to fix any library file or pref file issue in the usual account. If just the new mp3s refuse to transfer, then I'd be suspicious about a problem with the files themselves. If both types of files refuse to transfer, that would tend to rule out a library file or pref file issue, and we'll start checking on other possible causes of the issues.)
Maybe you are looking for
-
In Vista, Applet isn�t able to read the property files
I�m working on internationalization; the Applet which I�m using wasn�t able to read the property files properly in windows Vista machine. But if I create a jar which contains all the classes and property files, Applet works fine. This problem is only
-
Dynamic embedding of video file in pdf
Hi, I wanted to embed a video file ( *.mp4 format) in a pdf file programatically. I am using C# / Asp.net 4.0. Please let me know if there is any way / any tools do to it. Thanks, Uma Nath
-
What is the best way to have Mac setup for sync-ing 2 calendars? Any way to change? When we first got our Macbook we unknowingly set it up as 2 separate users, with separate everything. Now I have an iphone and I want to sync calendars but not con
-
Seasonal procurement and purchase requisition
Hi, is there a way to use seasonal procurement (WPOHF4C) to to create an order from a purchase requisition? I know how to create a purchase order from a purchase requisition using the ME21N. But I need the dateline with the transportation chain. Reg
-
IPad mail displaying email that was archived on computer
Hi all, I have an iPad Air with iOS 7. Mail that I archived on the gmail web interface still displays on the native mail app on my iPad. Otherwise, the mail app is working perfectly. Any suggestions on how to correct this? Thank you for your time. Be