UME connected to Active Directory. How to change what fields are available
I have successfully changed my UME to point to Active Directory. I'll describe process further on in post. My issue now is how to modify what AD fields will be available in UME and what UME fields they'll be 'mapped' to.
I'll try to describe the process I've gone through so far:
1) Download the 'dataSourceConfiguration_ads_readonly_db.xml' file from Config Tool
2) Renamed file and added the following:
a) in <responsibleFor><principal type="user"> <nameSpaces><nameSpace name="com.sap.security.core.usermanagement"><attributes> section I added a <attribute name="xxx"/> tag for each new field I wanted. 'xxx' is, of course, the name of the field
b) in <attributeMapping><principals><principal type="user"> <nameSpaces><nameSpace name="com.sap.security.core.usermanagement"><attributes> section I added a <attribute name="xxx"><physicalAttribute name="yyy"/></attribute> tag for each new field I wanted. 'xxx' is, of course, the name of the field in UME and 'yyy' is the field in the LDAP
Then I uploaded the new file into Config Tool and switched the "Data source configuration file" selection to that new file. Saved the change and restarted the engine.
When I ran some test code I was getting information back from the user's AD entry. For example, I tested the email field. This is a field that is not maintained in the UME but I got the correct value back so I knew it was getting it from AD.
Then I wanted to see if I could get one of the new fields. When I ran my test code the user.getXxx() method call returend null.
Since I knew that getting the e-mail worked I thought I'd change the mapping for the email UME field to point to the 'yyy' field in AD. I did this by making this change:
<b>FROM:</b>
<attribute name="email">
<physicalAttribute name="mail"/>
</attribute>
<b>TO:</b>
<attribute name="email">
<physicalAttribute name="yyy"/>
</attribute>
I then uploaded that new xml file and switched to it in Config Tool. Then I restarted the engine.
However, when I ran my test code (see below for snippet) it still shows the email value instead of the value of field 'yyy'.
Any help would be GREATLY appreciated.
<b>Web Dynpro code snippet:</b>
String input = "smith";
IUserFactory userFactory = UMFactory.getUserFactory();
try {
IUserSearchFilter searchFilter = userFactory.getUserSearchFilter();
searchFilter.setLastName(input, ISearchAttribute.LIKE_OPERATOR, false);
ISearchResult searchResult = userFactory.searchUsers(searchFilter);
while (searchResult.hasNext()) {
String userID = (String)searchResult.next();
IUser user = userFactory.getUser(userID);
String email = user.getEmail();
} catch (UMException e1) {
//error handling
Update. I uploaded the wrong file the 2nd time. When I changed the XML file to 'bind' theAD field to the 'email' UME field, my code did return the AD value when I did
user.getEmail();
However, I'm still not able to get the AD field bound to any other UME field that wasn't part of the default XML file.
Is there something else I need to do besides adding the tags I described in my original entry?
Thanks
Similar Messages
-
How to check what fields are output from ABAP to smartform
Hi All,
I am working on a Zcopy of RLB_INVOICE smart form and need to check what fields are being output to the vendor_address window in the smartform.
I have examined the NACE setup and found "Medium -> printoutput", "Program -> ZRLB_INVOICE", "Form Routine -> "ENTRY_INS", "Form -> ZRLB_INVOICE", "PDF/SmartForm -> ZRLB_INVOICE".
Where would I find the code that shows the direct correlation between the driver program and a specific element of the smart form.
All I need to check is that all elements of the venfore address are being sent to the form as I am hearing reports that we are missing house number on the printed output.
Many thanksHi Meenakshi,
First you find out your driver program. Here in your case it is ZRLB_INVOICE. Then within that check where address of the vendor is found and is assigned to which import parameter of the smartform.
Check your smartform also. Find which all fields are being printed in that. If vendor_address window is an address window, then there will be uniques identifier passed to that window from the driver program.
Regards,
Abijith -
Not able to connect to Active Directory through Topology manager of ODI
Hi,
We are trying to connect to Active Directory though ODI Topology manager.
The details given are :
+1. Using LDAP(JNDI) driver:+
username : CN=Administrator
JDBC Driver name : com.sun.jndi.ldap.LdapCtxFactory
JDBC URL : ldap://ten.mydomain.com:636/dc=oracle,dc=com
I am getting the error as shown below:
java.sql.SQLException: No suitable driver
at java.sql.DriverManager.getDriver(Unknown Source)
at com.sunopsis.sql.SnpsConnection.u(SnpsConnection.java)
at com.sunopsis.sql.SnpsConnection.a(SnpsConnection.java)
at com.sunopsis.sql.SnpsConnection.testConnection(SnpsConnection.java)
at com.sunopsis.sql.SnpsConnection.testConnection(SnpsConnection.java)
*2. Sunopsis JDBC driver for LDAP:*
Username: cn=Administrator
JDBC Driver Name : com.sunopsis.ldap.jdbc.driver.SnpsLdapDriver
JDBC Driver URL :
jdbc:snps:ldap?ldap_url=ldap://ten.mydomain.com:636/&ldap_password=abcd1234&ldap_basedn=dc=oracle,dc=com
We also tried with URL : jdbc:snps:ldap?ldap_url=ldap://ten.mydomain.com:636/&ldap_basedn=dc=oracle,dc=com
We are getting an error as shown below:
Java.sql.SQLException: A NamingException occured saying: Request: 1 cancelled with this explanation: Request: 1 cancelled and this remaining name: null
at com.sunopsis.ldap.jdbc.driver.i.e(i.java)
at com.sunopsis.ldap.jdbc.driver.i.a(i.java)
at com.sunopsis.ldap.jdbc.driver.SnpsLdapConnection.<init>(SnpsLdapConnection.java)
Did I misconfigure something? Do I need to install a seperate Driver for this?
Please help me out in this.
Thanks in advance for any help.For LDAP default user Root is having all the priviledge to access all the Ldap data.
Go to physical architecture and insert a new dataserver
user - cn=root,dc=css,dc=hyperion,dc=com [ change this according to your requirememnt for you it will be *cn=Administrator ,dc=oracle,dc=com* ]
password - null
JDBC
jdbc driver : com.sunopsis.ldap.jdbc.driver.SnpsLdapDriver
jdbc url : jdbc:snps:ldap?ldap_url=ldap://<server name :port/&ldap_password=KLLEJMNLKFLBKLKODDGPGPDB&ldap_basedn=dc=css,dc=hyperion,dc=com
[ for you it will be *jdbc:snps:ldap?ldap_url=ldap://ten.mydomain.com:636/&ldap_password=<encoded password>ldap_basedn=dc=oracle,dc=com* ]
Here the Default Ldap password for ROOT is SECURITY and if its changed or you are using for some other user . Please use that .
you also need to encode the password using this command
java -cp C:\OraHome_1\oracledi\drivers\snpsldapo.jar com.sunopsis.ldap.jdbc.driver.SnpsLdapEncoder <enter password here>
Later test the connection and you should be able to connect successfully.
Thanks -
I am trying to update my iphone to the latest software version, but am getting a message saying 'make sure your network settings are correction and your connection is active'. i know my connection is active, so how can I fix this problem?
Hi there pamela123456,
I would recommend taking a look at the troubleshooting steps found in the article below.
iTunes for Windows: iTunes cannot contact the iPhone, iPad, or iPod software update server
http://support.apple.com/kb/ts1814
-Griff W. -
How to change the Field Symbol, so Adobe Forms takes it as a Table?
Hi guys,
I created an Field Symbol, in a Interface which I use for Adobe Forms. The type of the Field Symbol is STANDARD TABLE, and this field symbol I fill with data from another program.
But the problem is that in adobe forms, this Field Symbol is taken as TEXT FIELD and not as Table... and this shows me a Dump because it can't convert Internal Table to type C (the dump is like that).
What I need, is how to change the Field Symbol, so Adobe Forms takes it as a Table?
I looked at Adobe Form, and found this:
The Type Category of the Field Symbol is DICTIONARY TYPE and I think I need to change it to Internal Table as shown in the right picture.
Does someone have any idea?Hello Taly,
To what i understand your requirement, you need to pass data from Field symbol to internal table in Adobe form.
You have done it correct partially. I have replicated your scenario and steps are below -
1) Create a Z structure
2) Create Z Table Type
3) Create Adobe Interface with Table & Field Symbol. Also do coding as shown to assign the internal table populated in driver program to filed symbol.
4) Design Form as -
5) Code driver as -
*& Report ZR_AF_FS_1
REPORT zr_af_fs_1.
DATA: fm_name TYPE rs38l_fnam,
fp_docparams TYPE sfpdocparams,
fp_outputparams TYPE sfpoutputparams,
it_kna1 TYPE ztt_fs_1.
* Sets the output parameters and opens the spool job
CALL FUNCTION 'FP_JOB_OPEN' "& Form Processing: Call Form
CHANGING
ie_outputparams = fp_outputparams
EXCEPTIONS
cancel = 1
usage_error = 2
system_error = 3
internal_error = 4
OTHERS = 5.
IF sy-subrc <> 0.
* <error handling>
ENDIF.
*&---- Get the name of the generated function module
CALL FUNCTION 'FP_FUNCTION_MODULE_NAME' "& Form Processing Generation
EXPORTING
i_name = 'ZAF_FS_1'
IMPORTING
e_funcname = fm_name.
IF sy-subrc <> 0.
* <error handling>
ENDIF.
*-- Fetch the Data and store it in the Internal Table
SELECT kunnr name1 name2 adrnr FROM kna1 INTO TABLE it_kna1 UP TO 15 ROWS.
* Language and country setting (here US as an example)
fp_docparams-langu = 'E'.
fp_docparams-country = 'US'.
*&--- Call the generated function module
CALL FUNCTION fm_name
EXPORTING
/1bcdwb/docparams = fp_docparams
it_data = it_kna1
* IMPORTING
* /1BCDWB/FORMOUTPUT =
EXCEPTIONS
usage_error = 1
system_error = 2
internal_error = 3.
IF sy-subrc <> 0.
* <error handling>
ENDIF.
*&---- Close the spool job
CALL FUNCTION 'FP_JOB_CLOSE'
* IMPORTING
* E_RESULT =
EXCEPTIONS
usage_error = 1
system_error = 2
internal_error = 3
OTHERS = 4.
IF sy-subrc <> 0.
* <error handling>
ENDIF.
6) Output -
BR. -
How to change the field length in standard sap program.
Hi All,
How to change the field length in standard sap program.
Urgent
Example:
Text1 type c length 75,
To change :
Text1 type c length 150,
Point will be rewarded..
Thank you,
Vikram.CIf the only solution is to change the sap standard program, simply change the program, it will prompt for an access key. This key can be retrieved in the SAP support portal (service.sap.com) at keys and requests, sccr keys, register object.
Sometimes these actions are outsourced to a competence center, so maybe youre not entitled to do this, in any case ask a resident senior developer for support.
regards, Rob -
How to Change the Fields from Input mode to display mode
Hi experts,
Here is my business requirement. I need to show certain fields in the PRICING TAB OF SALES ORDER in display mode. Now for this i am using the BADI definition CRM_PRICING_BADI.
Now, can anybody tell me how to change the field type from input mode to change mode?Hi Karan,
In your BADI has a parameter CT_INPUT_FIELD_NAMES with one field called CHANGEABLE with values:
Field Can Be Changed
A Field Cannot Be Changed
Assing this values to your fields according with your requirements.
Regards.
Manuel -
I have a large number of contacts in my Outlook account. As long as that account is active on the iPhone (6 ) the contact are available on the phone but disappear when that account is removed from the phone. How do I transfer the contacts permanently to the phone?
Archive the contacts you have in Address book, then delete them, they will be removed from iCloud as well. Restore the archive
-
How to change the field lenght in stanard structure.
hai Gurus,
When I enhanced the standard structure for the 1st time I got warning but I could able to replicate and pull the data from r3 to bw. When I tried to enhance it again it is not allowing me saying i the need to enhance the standard data field length or need to add a custom field for this. Can you tell me how can change the field length for a standard structure?.
Thanks, VP.hi,
u can add a custom field of the required length to your structure and write the exit to populate it. If its a standard field I dont think you will be able to alter the length of the field.
Regards. -
How to know what reports are running by looking at SSReproting Services to see what reports are running and also any clue of which application is using the reporting services?
To see what reports are running, take a look at the execution log views that are available in the database. Which views that are available are dependent on your version of SSRS.
http://technet.microsoft.com/en-us/library/ms159110.aspx
To see which application is using SSRS is a little more difficult. You can turn HTTP logging on, which will give you an idea of where connections are coming from, so you can see IP addresses. You can also look at the execution log view to see
user accounts. So, depending on your environment and use of service accounts, this could be easy, or difficult.
http://technet.microsoft.com/en-us/library/bb630443.aspx
If all else fails you can look for clues in the SSRS logs. Good luck... -
Anyone know how to see what apps are still open on lion?
If you do not have the light in dock active, activate it, or slide three finger up to open Mission Control or in Force qQuit all open programs are listed (even the hidden ones).
Hope that helps.. -
How to know what applications are currently running !!
how to know what applications are currently running !!
if it is in linux use "ps(Process Status)" command to know what is running currently.... for more see this link
http://www.computerhope.com/unix/ups.htm -
HT204370 Hi like the music store how to I get to see what movies are available and where ?
Hi like the music store how to I get to see what movies are available and where ?
iTunes Store: Which types of items can I buy in my country?
-
I have 3 server (Web server, database sql 2012 server and Active directory). I'm using sqlsvr version 3.0, PHP version 5.3 ,IIS version 7 and windows server 2008.
Right now my php connection to SQL 2012 using AD id, so How to handle if password on active directory change?Solved : Using Kaberos
-
Connect UME to the Active directory
Hello,
My UME is already connected to the portal.But I have too many users (including computers). I have 1500 users instead of only 500 users
I want to filter some of the users. The active directory is not organized well.
Can I bring only certain hierarchy of users, different types of users (only real-user and not computers), users who doesn't end with the char $, or any other search filter that will reduce the number of users in the portal?
Thanks and regards
Omer Shem-TovHi Omer
Sorry, there's no better solution! It may be time ro reorganise your AD...
Cheers
Maybe you are looking for
-
Setting up Express with new router
I have a Linksys wireless router which is replacing a older one of different brand. I want to use my Airport Express to extend signal strenth in the family room and feed the speakers as I've done before. Is there something I have to do to get this ne
-
Does anyone know how to get homesharing working right? I have it on my computer and it shows that it is sharing, but on my apple tv it says that it is not working when I look under the computer tabs...?
-
ITunes dead after System Restore
I can no longer launch iTunes, and this has nothing to do with spyware. Sequence of Events: 1) Last Thursday, I purchased a new track from itms (Iggy Pop - Candy - it's good, check it out). 2) Upon trying to play the track, I was presented with the m
-
I am having using my mail accounts on multiple computers
I have all of my email accounts (mostly gmail) setup on my Mail application on my iMac, Macbook, and iPod touch. I am having trouble with receiving all my mail. Some emails show on one computer and never show up anywhere else. Does anyone know if the
-
Why do you keep alienating your user base with worthless UI changes?
If it weren't for some add-ons that I've come to depend upon which are not supported in Chrome, I'd have switched long ago. But version 29 is the last straw. If I can't get version 28 re-installed and working again, I'm quitting FireFox for good. You