UME connected to Active Directory. How to change what fields are available

I have successfully changed my UME to point to Active Directory. I'll describe process further on in post. My issue now is how to modify what AD fields will be available in UME and what UME fields they'll be 'mapped' to.
I'll try to describe the process I've gone through so far:
1) Download the 'dataSourceConfiguration_ads_readonly_db.xml' file from Config Tool
2) Renamed file and added the following:
    a) in <responsibleFor><principal type="user"> <nameSpaces><nameSpace name="com.sap.security.core.usermanagement"><attributes> section I added a <attribute name="xxx"/> tag for each new field I wanted. 'xxx' is, of course, the name of the field
    b) in <attributeMapping><principals><principal type="user"> <nameSpaces><nameSpace name="com.sap.security.core.usermanagement"><attributes> section I added a <attribute name="xxx"><physicalAttribute name="yyy"/></attribute> tag for each new field I wanted. 'xxx' is, of course, the name of the field in UME and 'yyy' is the field in the LDAP
Then I uploaded the new file into Config Tool and switched the "Data source configuration file" selection to that new file. Saved the change and restarted the engine.
When I ran some test code I was getting information back from the user's AD entry. For example, I tested the email field. This is a field that is not maintained in the UME but I got the correct value back so I knew it was getting it from AD.
Then I wanted to see if I could get one of the new fields. When I ran my test code the user.getXxx() method call returend null.
Since I knew that getting the e-mail worked I thought I'd change the mapping for the email UME field to point to the 'yyy' field in AD. I did this by making this change:
<b>FROM:</b>
<attribute name="email">
    <physicalAttribute name="mail"/>
  </attribute>
<b>TO:</b>
  <attribute name="email">
    <physicalAttribute name="yyy"/>
  </attribute>
I then uploaded that new xml file and switched to it in Config Tool. Then I restarted the engine.
However, when I ran my test code (see below for snippet) it still shows the email value instead of the value of field 'yyy'.
Any help would be GREATLY appreciated.
<b>Web Dynpro code snippet:</b>
String input = "smith";
IUserFactory userFactory = UMFactory.getUserFactory();
try {
  IUserSearchFilter searchFilter = userFactory.getUserSearchFilter();
  searchFilter.setLastName(input, ISearchAttribute.LIKE_OPERATOR, false);
  ISearchResult searchResult = userFactory.searchUsers(searchFilter);
  while (searchResult.hasNext()) {
    String userID = (String)searchResult.next();
    IUser user = userFactory.getUser(userID);
    String email = user.getEmail();
} catch (UMException e1) {
  //error handling

Update. I uploaded the wrong file the 2nd time. When I changed the XML file to 'bind' theAD field to the 'email' UME field, my code did return the AD value when I did
user.getEmail();
However, I'm still not able to get the AD field bound to any other UME field that wasn't part of the default XML file.
Is there something else I need to do besides adding the tags I described in my original entry?
Thanks

Similar Messages

  • How to check what fields are output from ABAP to smartform

    Hi All,
    I am working on a Zcopy of RLB_INVOICE smart form and need to check what fields are being output to the vendor_address window in the smartform.
    I have examined the NACE setup and found "Medium -> printoutput", "Program -> ZRLB_INVOICE", "Form Routine -> "ENTRY_INS", "Form -> ZRLB_INVOICE", "PDF/SmartForm -> ZRLB_INVOICE".
    Where would I find the code that shows the direct correlation between the driver program and a specific element of the smart form.
    All I need to check is that all elements of the venfore address are being sent to the form as I am hearing reports that we are missing house number on the printed output.
    Many thanks

    Hi Meenakshi,
    First you find out your driver program. Here in your case it is ZRLB_INVOICE. Then within that check where address of the vendor is found and is assigned to which import parameter of the smartform.
    Check your smartform also. Find which all fields are being printed in that. If vendor_address window is an address window, then there will be uniques identifier passed to that window from the driver program.
    Regards,
    Abijith

  • Not able to connect to Active Directory through Topology manager of ODI

    Hi,
    We are trying to connect to Active Directory though ODI Topology manager.
    The details given are :
    +1. Using LDAP(JNDI) driver:+
    username : CN=Administrator
    JDBC Driver name : com.sun.jndi.ldap.LdapCtxFactory
    JDBC URL : ldap://ten.mydomain.com:636/dc=oracle,dc=com
    I am getting the error as shown below:
    java.sql.SQLException: No suitable driver
         at java.sql.DriverManager.getDriver(Unknown Source)
         at com.sunopsis.sql.SnpsConnection.u(SnpsConnection.java)
         at com.sunopsis.sql.SnpsConnection.a(SnpsConnection.java)
         at com.sunopsis.sql.SnpsConnection.testConnection(SnpsConnection.java)
         at com.sunopsis.sql.SnpsConnection.testConnection(SnpsConnection.java)
    *2. Sunopsis JDBC driver for LDAP:*
    Username: cn=Administrator
    JDBC Driver Name : com.sunopsis.ldap.jdbc.driver.SnpsLdapDriver
    JDBC Driver URL :
    jdbc:snps:ldap?ldap_url=ldap://ten.mydomain.com:636/&ldap_password=abcd1234&ldap_basedn=dc=oracle,dc=com
    We also tried with URL : jdbc:snps:ldap?ldap_url=ldap://ten.mydomain.com:636/&ldap_basedn=dc=oracle,dc=com
    We are getting an error as shown below:
    Java.sql.SQLException: A NamingException occured saying: Request: 1 cancelled with this explanation: Request: 1 cancelled and this remaining name: null
         at com.sunopsis.ldap.jdbc.driver.i.e(i.java)
         at com.sunopsis.ldap.jdbc.driver.i.a(i.java)
         at com.sunopsis.ldap.jdbc.driver.SnpsLdapConnection.<init>(SnpsLdapConnection.java)
    Did I misconfigure something? Do I need to install a seperate Driver for this?
    Please help me out in this.
    Thanks in advance for any help.

    For LDAP default user Root is having all the priviledge to access all the Ldap data.
    Go to physical architecture and insert a new dataserver
    user - cn=root,dc=css,dc=hyperion,dc=com [ change this  according to your requirememnt  for you it will be   *cn=Administrator ,dc=oracle,dc=com* ]
    password - null
    JDBC
    jdbc driver : com.sunopsis.ldap.jdbc.driver.SnpsLdapDriver
    jdbc url : jdbc:snps:ldap?ldap_url=ldap://<server name :port/&ldap_password=KLLEJMNLKFLBKLKODDGPGPDB&ldap_basedn=dc=css,dc=hyperion,dc=com
    [  for you it will be  *jdbc:snps:ldap?ldap_url=ldap://ten.mydomain.com:636/&ldap_password=<encoded password>ldap_basedn=dc=oracle,dc=com* ]
    Here the Default Ldap password for ROOT is SECURITY and if its changed or you are using for some other user . Please use that .
    you also need to encode the password using this command
    java -cp C:\OraHome_1\oracledi\drivers\snpsldapo.jar com.sunopsis.ldap.jdbc.driver.SnpsLdapEncoder <enter password here>
    Later test the connection and you should be able to connect successfully.
    Thanks

  • I am trying to update my iphone to the latest software version, but am getting a message saying 'make sure your network settings are correction and your connection is active'.  i know my connection is active, so how can I fix this problem?

    I am trying to update my iphone to the latest software version, but am getting a message saying 'make sure your network settings are correction and your connection is active'.  i know my connection is active, so how can I fix this problem?

    Hi there pamela123456,
    I would recommend taking a look at the troubleshooting steps found in the article below.
    iTunes for Windows: iTunes cannot contact the iPhone, iPad, or iPod software update server
    http://support.apple.com/kb/ts1814
    -Griff W.

  • How to change the Field Symbol, so Adobe Forms takes it as a Table?

    Hi guys,
    I created an Field Symbol, in a Interface which I use for Adobe Forms. The type of the Field Symbol is STANDARD TABLE, and this field symbol I fill with data from another program.
    But the problem is that in adobe forms, this Field Symbol is taken as TEXT FIELD and not as Table... and this shows me a Dump because it can't convert Internal Table to type C (the dump is like that).
    What I need, is how to change the Field Symbol, so Adobe Forms takes it as a Table?
    I looked at Adobe Form, and found this:
    The Type Category of the Field Symbol is DICTIONARY TYPE and I think I need to change it to Internal Table as shown in the right picture.
    Does someone have any idea?

    Hello Taly,
    To what i understand your requirement, you need to pass data from Field symbol to internal table in Adobe form.
    You have done it correct partially. I have replicated your scenario and steps are below -
    1) Create a Z structure
    2) Create Z Table Type
    3) Create Adobe Interface with Table & Field Symbol. Also do coding as shown to assign the internal table populated in driver program to filed symbol.
    4) Design Form as -
    5) Code driver as -
    *& Report  ZR_AF_FS_1
    REPORT  zr_af_fs_1.
    DATA: fm_name           TYPE rs38l_fnam,
           fp_docparams      TYPE sfpdocparams,
           fp_outputparams   TYPE sfpoutputparams,
           it_kna1           TYPE ztt_fs_1.
    * Sets the output parameters and opens the spool job
    CALL FUNCTION 'FP_JOB_OPEN'                   "& Form Processing: Call Form
       CHANGING
         ie_outputparams = fp_outputparams
       EXCEPTIONS
         cancel          = 1
         usage_error     = 2
         system_error    = 3
         internal_error  = 4
         OTHERS          = 5.
    IF sy-subrc <> 0.
    *            <error handling>
    ENDIF.
    *&---- Get the name of the generated function module
    CALL FUNCTION 'FP_FUNCTION_MODULE_NAME'           "& Form Processing Generation
       EXPORTING
         i_name     = 'ZAF_FS_1'
       IMPORTING
         e_funcname = fm_name.
    IF sy-subrc <> 0.
    *  <error handling>
    ENDIF.
    *-- Fetch the Data and store it in the Internal Table
    SELECT kunnr name1 name2 adrnr FROM kna1 INTO TABLE it_kna1 UP TO 15 ROWS.
    * Language and country setting (here US as an example)
    fp_docparams-langu   = 'E'.
    fp_docparams-country = 'US'.
    *&--- Call the generated function module
    CALL FUNCTION fm_name
       EXPORTING
         /1bcdwb/docparams        = fp_docparams
          it_data                   = it_kna1
    *    IMPORTING
    *     /1BCDWB/FORMOUTPUT       =
       EXCEPTIONS
         usage_error           = 1
         system_error          = 2
         internal_error           = 3.
    IF sy-subrc <> 0.
    *  <error handling>
    ENDIF.
    *&---- Close the spool job
    CALL FUNCTION 'FP_JOB_CLOSE'
    *    IMPORTING
    *     E_RESULT             =
       EXCEPTIONS
         usage_error           = 1
         system_error          = 2
         internal_error        = 3
         OTHERS               = 4.
    IF sy-subrc <> 0.
    *            <error handling>
    ENDIF.
    6) Output -
    BR.

  • How to change the field length in standard sap program.

    Hi All,
    How to change the field length in standard sap program.
    Urgent
    Example:
    Text1 type c length 75,
    To change :
    Text1 type c length 150,
    Point will be rewarded..
    Thank you,
    Vikram.C

    If the only solution is to change the sap standard program, simply change the program, it will prompt for an access key. This key can be retrieved in the SAP support portal (service.sap.com) at keys and requests, sccr keys, register object.
    Sometimes these actions are outsourced to a competence center, so maybe youre not entitled to do this, in any case ask a resident senior developer for support.
    regards, Rob

  • How to Change the Fields from Input mode to display mode

    Hi experts,
    Here is my business requirement. I need to show certain fields in the PRICING TAB OF SALES ORDER  in display mode. Now for this i am using the BADI definition CRM_PRICING_BADI.
       Now, can anybody tell me how to change the field type from input mode to change mode?

    Hi Karan,
      In your BADI has a parameter CT_INPUT_FIELD_NAMES with one field called CHANGEABLE with values:
         Field Can Be Changed
    A     Field Cannot Be Changed
       Assing this values to your fields according with your requirements.
    Regards.
    Manuel

  • I have a large number of contacts in my Outlook account.  As long as that account is active on the iPhone (6 ) the contact are available on the phone but disappear when that account is removed from the phone.  How do I transfer the contacts?

    I have a large number of contacts in my Outlook account.  As long as that account is active on the iPhone (6 ) the contact are available on the phone but disappear when that account is removed from the phone.  How do I transfer the contacts permanently to the phone?

    Archive the contacts you have in Address book, then delete them, they will be removed from iCloud as well. Restore the archive

  • How to change the field lenght in stanard structure.

    hai Gurus,
    When I enhanced the standard structure for the 1st time I got warning but I could able to replicate and pull the data from r3 to bw. When I tried to enhance it again it is not allowing me saying i the need to enhance the standard data field length or need to add a custom field for this. Can you tell me how can change the field length for a standard structure?.
    Thanks, VP.

    hi,
    u can add a custom field of the required length to your structure and write the exit to populate it. If its a standard field I dont think you will be able to alter the length of the field.
    Regards.

  • How to know what reports are running by looking at SSReproting Services to see what reports are running and also any clue of which application is using the reporting services?

    How to know what reports are running by looking at SSReproting Services to see what reports are running and also any clue of which application is using the reporting services?

    To see what reports are running, take a look at the execution log views that are available in the database.  Which views that are available are dependent on your version of SSRS.
    http://technet.microsoft.com/en-us/library/ms159110.aspx
    To see which application is using SSRS is a little more difficult.  You can turn HTTP logging on, which will give you an idea of where connections are coming from, so you can see IP addresses.  You can also look at the execution log view to see
    user accounts.  So, depending on your environment and use of service accounts, this could be easy, or difficult.
    http://technet.microsoft.com/en-us/library/bb630443.aspx
    If all else fails you can look for clues in the SSRS logs.  Good luck...

  • Does anyone know how to see what apps are still open on lion? On snow leopard you just had to slide three fingers side ways I believe thanks

    Anyone know how to see what apps are still open on lion?

    If you do not have the light in dock active, activate it, or slide three finger up to open Mission Control or in Force qQuit all  open programs are listed (even the hidden ones).
    Hope that helps..

  • How to know what applications are currently running !!

    how to know what applications are currently running !!

    if it is in linux use "ps(Process Status)" command to know what is running currently.... for more see this link
    http://www.computerhope.com/unix/ups.htm

  • HT204370 Hi like the music store how to I get to see what movies are available and where ?

    Hi like the music store how to I get to see what movies are available and where ?

    iTunes Store: Which types of items can I buy in my country?

  • How to handle SQL connection if password Active directory always change? (Connection using Active directory via network SQL 2012 )

    I have 3 server (Web server, database sql 2012 server and Active directory). I'm using sqlsvr version 3.0,  PHP version 5.3 ,IIS version 7 and windows server 2008.
    Right now my php connection to SQL 2012 using AD id, so How to handle if password on active directory change?

    Solved : Using Kaberos

  • Connect UME to the Active directory

    Hello,
    My UME is already connected to the portal.But I have too many users (including computers). I have 1500 users instead of only 500 users
    I want to filter some of the users. The active directory is not organized well.
    Can I bring only certain hierarchy of users, different types of users (only real-user and not computers), users who doesn't end with the char $, or any other search filter that will reduce the number of users in the portal?
    Thanks and regards
             Omer Shem-Tov

    Hi Omer
    Sorry, there's no better solution! It may be time ro reorganise your AD...
    Cheers

Maybe you are looking for