Unable to define a policy OAM

Hi All,
I have created a workflow for oragnisation manager and i have protected the workflow url using form based authentication. but wen i click org manager in identity system, form based authentication populates even after logging into identity system.
below is my workflow url:
http://pcalinvm21.powercor.com.au/identity/oblix/apps/objservcenter/bin/objservcenter.cgi?program=workflowSelfRegistration&ObWorkflowName=obworkflowid=c799abde706c012d0000F75812d5d17d,obcontainerId=workflowDefinitions,o=Oblix,dc=powercor,dc=com&ObDomainName=dc%3Dpowercor%2Cdc%3Dcom&tab_id=Locations&xsl=wf_selfreg_retail.xsl
how do i create apolicy so that OAm should challenge only when user access the above url. and it should not validate th user wen user checks org manager.

Hi suri,
I think that you may have the Authentication Level of the form scheme at a higher level than that of the scheme which is protecting the general Identity System urls - so it will always challenge the user when accessing the workflow url.
Regards,
Colin

Similar Messages

Unable to define Radio Button Text field & unable to change column position

Hi,
While designing a screen in Screen Painter, I am unable to define Radio Button Text field as this option is not there in Graphical Element. And also I want to specify the starting position of column of that element different from the default value, but I am unable to define that because the field is non-editable.
Can any one please help me out.
Regards,
Koushik

Hi,
Please find below the sample program from ABAP docu :
PROGRAM demo_dynpro_input_output.
DATA: input TYPE i,
      output TYPE i,
      radio1(1) TYPE c, radio2(1) TYPE c, radio3(1) TYPE c,
      box1(1) TYPE c, box2(1) TYPE c, box3(1) TYPE c, exit(1) TYPE c.
CALL SCREEN 100.
MODULE init_screen_100 output.
CLEAR input.
radio1 = 'X'.
CLEAR: radio2, radio3.
ENDMODULE.
MODULE user_command_0100 input.
output = input.
box1 = radio1.
box2 = radio2.
box3 = radio3.
IF exit NE space.
    LEAVE PROGRAM.
ENDIF.
ENDMODULE.
Here radio1(1) TYPE c is defined within the program but in the element list there are RADIO1 element exist. One is actual radio button and the other is Radio Button Text.
I am not able to create that radio button text using same object name.
Please suggest.
Regards,
Koushik

Unable to define RETURN REASONS in CREDIT_MEMO_REASON in Receivables Lookup

Hello All,
I am unable to define RETURN REASONS in CREDIT_MEMO_REASON in Receivables Lookup for RMA in 12.0.6 version. How to define. The moment i click the line level the add button gets disable.
Please help me regarding this. It is urgent.
Thanks in Advance.
Regards
Aditya

Hi,
Please change the access level to 'User' and then you can add new reason codes.
Thanks
Robert

Unable to set Password Policy controls

When I call oracle.ldap.util.User.autheticateUser() I receive the exception "Unable to set Password Policy controls". What is the cause of this error? I was not able to find anything useful through google searches.
I am running everything inside ServiceMix. Furthermore, I am able to create a context and retrieve properties through oracle.ldap.util.User.getProperties().
Here is the stack trace:
my.company.Exception.AuthenticationException: Unable to set Password Policy controls
at my.company.OracleLdap.authenticateClient(OracleLdap.java:171)
at service.AuthenticationInInterceptor.isAuthenticated(AuthenticationInInterceptor.java:55)
at service.AuthenticationInInterceptor.handleMessage(AuthenticationInInterceptor.java:32)
at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:243)
at org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:111)
at org.apache.cxf.transport.http_osgi.OsgiDestination.doMessage(OsgiDestination.java:80)
at org.apache.cxf.transport.http_osgi.OsgiServletController.invokeDestination(OsgiServletController.java:321)
at org.apache.cxf.transport.http_osgi.OsgiServletController.invoke(OsgiServletController.java:107)
at org.apache.cxf.transport.http_osgi.OsgiServlet.invoke(OsgiServlet.java:53)
at org.apache.cxf.transport.http_osgi.SpringOsgiServlet.invoke(SpringOsgiServlet.java:48)
at org.apache.cxf.transport.servlet.AbstractHTTPServlet.handleRequest(AbstractHTTPServlet.java:179)
at org.apache.cxf.transport.servlet.AbstractHTTPServlet.doPost(AbstractHTTPServlet.java:103)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:713)
at org.apache.cxf.transport.servlet.AbstractHTTPServlet.service(AbstractHTTPServlet.java:159)
at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)
at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:401)
at org.ops4j.pax.web.service.jetty.internal.HttpServiceServletHandler.handle(HttpServiceServletHandler.java:64)
at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)
at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)
at org.ops4j.pax.web.service.jetty.internal.HttpServiceContext.handle(HttpServiceContext.java:111)
at org.ops4j.pax.web.service.jetty.internal.JettyServerHandlerCollection.handle(JettyServerHandlerCollection.java:68)
at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)
at org.mortbay.jetty.Server.handle(Server.java:326)
at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)
at org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)
at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)
at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:218)
at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)
at org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:410)
at org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)
Caused by: oracle.ldap.util.UtilException: Unable to set Password Policy controls
at oracle.ldap.util.User.authenticateUser(User.java:1243)
at my.company.OracleLdap.authenticateClient(OracleLdap.java:158)
... 29 more
Edited by: user1094798 on Feb 22, 2011 12:53 PM
Edited by: user1094798 on Feb 22, 2011 12:55 PM
Edited by: user1094798 on Feb 22, 2011 1:17 PM

I fixed it by changing the way my InitialDirContext is created.
Previously I was using:
InitialDirContext ctx = oracle.ldap.util.jndi.ConnectionUtil.getDefaultDirCtx(hostname, portNum, adminName, adminPass);
Now I'm using:
Hashtable env = new HashTable();
env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, "ldap://" + hostname + ":" + portNum);
env.put(Context.SECURITY_PRINCIPAL, adminName);
env.put(Context.SECURITY_CREDENTIALS, adminPass);
InitialDirContext ctx = new InitialDirContext(env);
Edited by: user1094798 on Feb 23, 2011 8:29 AM

Power Policy Mananger unable to set global policy - error message

As my laptop hibernates after 30 minutes being unattended I would like to adjust the power settings. However I get a message saying "Power Policy Mananger unable to set global policy" - access is denied. Any ideas how I overcome this ?

hi found this on a forum hope it helps
I had a situation on machine where the administrator could not change
display settings, e.g., monitor blanking timeout period. After making
any changes and trying to save them a "Power Policy Manager unable to
set global policy" message box reported "Access is Denied".
I eventually solved this by exporting
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion
\ControlsFolder\PowerCfg\GlobalPowerPolicy
from a working machine, and importing it into the problem machine.
If that fails log on to the computer by using an account that has Administrator privileges, or make a new user and give them administrator privileges and try again with the new user account
Message was edited by: bigmac

Unable to Define Business System in SLD.

Hi All,
We configured SLD host on EPDEV system (EP System based on Only Web as Java).
We have diffrent system for PI. At the time of PI installation I mentioned SLD Host as EP system.
In PI am facing some problem while executing SLDCHECK, output as "No Business System defined for PI Technical system"
In EP SLD HOST, By using wizard I am trying to add PI as a technical system, In in first step, I selected Web as ABAP, after that next two steps its ok, In Installed product step, I added installed pucts and saved then it giving me error of "CIM_ERROR_ALREADY_EXISTS".
Then I canceled the wizard and came on main screen, I found two technical systems for PI SID as below.
1. PI Web as ABAP
2. PI Web as Java
I checked the installed products for both PI Technical Systems then I found,
1. PI Web as ABAP there is no installed product and when I tried to add new Installed product then itu2019s again showing the same CIM_ERROR.
2. PI Web as Java its showing all installed products for Java, so I am able to create business system for this technical system.
But I am unable to create busyness system for PI Web as ABAP system because no installed products in the list.
So can you please tell me how to resolve this problem. I tried to delete all PI technical systems and recreate ones again. It gets delete but at the time of recreation again the same CIM error I am getting.
Is this problem because of my EP is only based on Java??
Can I switch SLD HOST to my PI system as this is ABAP+JAVA? If possible its no big problem for me because its new implementation and only PI DEV and EP DEV two systems are there in this SLD group.
Please reply with your good experience skills.
Regards,
Jay

So can you please tell me how to resolve this problem. I tried to delete all PI technical systems and recreate ones again. It gets delete but at the time of recreation again the same CIM error I am getting.
Is this problem because of my EP is only based on Java??
You need to import SLD with latest cimsap & cr content to reflect ABAP & JAva systems provided by SAP....
Can I switch SLD HOST to my PI system as this is ABAP+JAVA? If possible its no big problem for me because its new implementation and only PI DEV and EP DEV two systems are there in this SLD group.
You can have SLD on EP or XI.. Technically it donse't matter. But as PI relies heavily on SLD, i would recommend the SLD to be moved to PI & EP sytem pointing to PI-SLD..
How to repoint SLD... Check SLD Installation guides...
-Siva Maranani

Unable to define a Java system in solman_workcenter

Dear experts,
I am trying to define a Java system in our Solution Manager in order to be able to generate an .xml stack configuration file
for an upgrade. The diagnostics agent has been installed.
I am clicking on Configure System in solman_workcenter, a new web browser opens with a multi-step setup.
I am getting to step 6 to create users. My user store is an ABAP system. At this step, there are 2 users, that need to be
created automatically: SAPSUPPORT and SM_COLL_<SID>.
In the Action combobox, there are only 2 options - Do nothing and Provide Existing User, though no option to create those
users automatically...
The SAPSUPPORT user already exists, as it was created during defining the ABAP system. I have created the SM_COLL_<SID>
user manually in the useradmin panel of Java and I have assigned the suggested roles to it.
I have selected Provide Existing User, typed in the password and after clicking on Execute, the following error pops up:
User J2EE_ADMIN is not allowed to perform this request. Check SAP Note 1647157.
I have googled a little and found SAP Note 1647267 - Solution Manager adaptation to Java UME security, and downloaded
it on our Solution Manager, though it says "Cannot be implemented".
Though there is no way to say that this step is done and the point remains gray. Nevertheless, I decided to continue to the
next step 7, called Configure Automatically. When I click on Execute all, almost all the points are getting green, except for
WEB Services Logical Port Creation. It shows the following error: Java communication user is not operational. Activity aborted.
WHY ?? The user exists and is very well operational... !! Can I skip this point and go ahead ?
PLEASE help me !! Thanks :-)

Hello Symon,
Based on the error message , I assumed that you are running managed system setup using "j2ee_admin" since admin users are not allowed for running setup configuration.
Please check note 1612514 - Solution Manager 7.1 SP Stack 03: recommended corrections
Current NW security policy implies that the "Create users" setup in Solution Manager transaction SOLMAN_SETUP (scenario "Managed system configuration") is failing for Java or double stack managed systems (including the Solution Manager system itself) and (some) users won't be created. There are two cases:
You encounter this error message: "An error occurred while processing the UME command READ_USER : SPML service failed to process searchRequestreply : <xxx> is not allowed to perform search request".
Action:The managed system Java setup user provided in "Enter System Parameters"needs to have additional permissions even though it is already an user with administrator privileges (see SAP note 1647157).
You encounter the error message: "An error occured while processing the UME command READ_USER from agent xxxx : no protocol: /nwaErrorPage. Please check SMD agent application logs", or other kind of errors.
Action:
Given that the SPML service (on the managed system) is not accessible (see also SAP note 1616058), you need to double check manually whether the user has been already created with the requested type (dialog or technical user) and the appropriate roles (UME & J2EE security). Else create the user using the managed system UME for independent Java stack systems, or using transaction SU01 (or the Central User Administration system) in case an ABAP back-end is used. Be aware that the step "CreateUsers" might list some roles that do not exist on the managed system, as the available roles vary with the managed system releases. In such case, simply ignore the assignments for the none existing roles. Finally provide the username and password in the step "Create users" using for each user the "Provide existing user" action.
As per the case 1 , you need to have additional privileges ,which note 1647157 suggests to create.
Since you have manually created user in the system , I feel you can ignore this step.
Regards,
Archana

Unable to locate unrestricted policy files for the Sun JCE for download

My platform:
java version "1.6.0_26"
Java(TM) SE Runtime Environment (build 1.6.0_26-b03)
Oracle JRockit(R) (build R28.1.4-7-144370-1.6.0_26-20110617-2130-windows-x86_64, compiled mode)
I am unable to locate the Unlimited Strength Jurisdiction JCE files.
According to BouncyCastle for Java 1.6:
..."you must download the unrestricted policy files for the Sun JCE if you want the provider to work properly. The policy files can be found at the same place as the JDK download. Further information on this can be found in the Sun documentation on the JCE."

The version at the very bottom of http://www.oracle.com/technetwork/java/javase/downloads/index.html should work.

How to define JMX policy for the operation ALSBConfigurationMBean.getRefs

Hello,
I'm trying to configure the JMX policies of my Weblogic Server.
I have followed the recommandations from the http://docs.oracle.com/cd/E13222_01/wls/docs100/ConsoleHelp/taskhelp/security/DefinePoliciesforMBeans.html link.
I try to run the following code on a client side :
ALSBConfigurationMBean lConfigMBean = (ALSBConfigurationMBean) lDomainMBean.findService(ALSBConfigurationMBean.NAME, ALSBConfigurationMBean.TYPE, null);
lConfigMBean.getRefs-BusinessServiceQuery);
I got the exception :
Caused by: weblogic.management.NoAccessRuntimeException: Access not allowed for subject: principals=[], on Resource com.bea.wli.sb.management.configuration.DelegatedALSBConfigurationMBean Operation: invoke , Target: getRefs
     at weblogic.management.mbeanservers.internal.SecurityInterceptor.isAccessAllowedInvoke(SecurityInterceptor.java:1173)
     at weblogic.management.mbeanservers.internal.SecurityInterceptor.checkInvokeSecurity(SecurityInterceptor.java:813)
     at weblogic.management.mbeanservers.internal.SecurityInterceptor.invoke(SecurityInterceptor.java:443)
     at weblogic.management.jmx.mbeanserver.WLSMBeanServer.invoke(WLSMBeanServer.java:323)
     at weblogic.management.jmx.MBeanServerInvocationHandler.doInvoke(MBeanServerInvocationHandler.java:544)
     at weblogic.management.jmx.MBeanServerInvocationHandler.invoke(MBeanServerInvocationHandler.java:380)
     at $Proxy154.getRefs(Unknown Source)
     at com.csg.cs.services.tech.TECH_RegistryService_1_RegistryPortImpl.getServiceRef(TECH_RegistryService_1_RegistryPortImpl.java:224)
     at com.csg.cs.services.tech.TECH_RegistryService_1_RegistryPortImpl.lookup(TECH_RegistryService_1_RegistryPortImpl.java:117)
     ... 63 more
And so I want to setup the JMX policy to give the rights to my client. But in the JMX Editor the ALSBConfigurationMBean doesn't exist, and I don't know which bean I have to set up.
Anyone do know where I can find how to define policy for the Operation "getRefs" of the "ALSBConfigurationMBean" ?
thanks and regards

OEG provides several filters for encryption (XML, S/MIME and PGP). It's also possible to accept client certificates via 2-way SSL or route to a destination over 2-way SSL. For further information check out the OEG docs.

Cisco ACS v5.3 - Unable to define Device Filter

Dear Community!
I'm new to ACS version 5 family and I would like to ask if anybody has already experienced the following strange issue with ACS version 5.3.0.40 GUI: I have several AAA clients already defined in the "Network Devices and AAA Clients" menu and I need to create a new device filter in the
"Policy Elements > ... > Session Conditions > Network Conditions > Device Filters"
menu.
But unfortunately after clicking "Create" button, I cannot use any types of device filters :-( After filling in the device IP / name / or group and clicking "Go" button, nothing happens, the I always get no results, so I cannot select any device to be included into the device filter.
For example, I have an IPS device named "DC1IPSC010" and I'm trying to add this device to a new device filter with no luck.
What I have already tried:
Using full text which equals to DC1IPSC010.
Using partial text containing IPS.
Using Internet Explorer 9-10-11
Using FireFox v4.x and the latest v32 versions
Clearing my Java temporary files cache
Using different operating systems
My installed Java version is Java 1.7 update 51.
Has anybody experienced the same issue with this version? Are there any workarounds for this?
Many thanks in advance!
BR
Bela

I know this is a 2 year old thread, but you just saved me from banging my head against a wall.
GUI credentials of super-admin should be in bold somewhere in the documentation.

Unable to find the policy file with 12C, with old version 10.3.4 works fine

Hi !
Iam using 12 C(12.1.1.0) and when i deploy the app, iam getting below error. I have this policy file under %WL_HOME%\common\lib\policies. And this setting works fine with 10.3.4.
Unable to find policy: "abc.xml", please make sure to use dynamic wsdl when initializing the service stub
     at weblogic.wsee.policy.runtime.PolicyServer.loadPolicy(PolicyServer.java:183)
     at weblogic.wsee.policy.runtime.PolicyServer.getPolicy(PolicyServer.java:118)
     at weblogic.wsee.policy.deployment.PolicyRef.getPolicy(PolicyRef.java:207)
     at weblogic.wsee.policy.deployment.PolicyReferenceWsdlExtension.getEffectivePolicy(PolicyReferenceWsdlExtension.java:125)
     at weblogic.wsee.policy.deployment.WsdlPolicySubject.getEffectivePolicyFromWsdlExtensible(WsdlPolicySubject.java:485)
     Truncated. see log file for complete stacktrace
Regards
Edited by: user13649523 on Mar 19, 2012 11:01 AM

Hi !
Iam using 12 C(12.1.1.0) and when i deploy the app, iam getting below error. I have this policy file under %WL_HOME%\common\lib\policies. And this setting works fine with 10.3.4.
Unable to find policy: "abc.xml", please make sure to use dynamic wsdl when initializing the service stub
     at weblogic.wsee.policy.runtime.PolicyServer.loadPolicy(PolicyServer.java:183)
     at weblogic.wsee.policy.runtime.PolicyServer.getPolicy(PolicyServer.java:118)
     at weblogic.wsee.policy.deployment.PolicyRef.getPolicy(PolicyRef.java:207)
     at weblogic.wsee.policy.deployment.PolicyReferenceWsdlExtension.getEffectivePolicy(PolicyReferenceWsdlExtension.java:125)
     at weblogic.wsee.policy.deployment.WsdlPolicySubject.getEffectivePolicyFromWsdlExtensible(WsdlPolicySubject.java:485)
     Truncated. see log file for complete stacktrace
Regards
Edited by: user13649523 on Mar 19, 2012 11:01 AM

Unable to Define EBS R12 Data Load Mappings in FDMEE

Hi,
I am trying to integrate EBS R12 and HFM using FDMEE 11.1.2.3.500. Here are the steps that I followed:
a. Configured the EBS_DATA_SERVERS and PHYSICAL SCHEMAS in ODI to point to EBS Instance using APPS User
b. Defined EBS R12 Source System and Clicked INITIALIZE. (Validated that the Initialization Process is completed without any Errors)
c. Selected the Approriate SOURCE ACCOUTING ENTITIES for R12 Source System
Now, when I define a new IMPORT LOCATION, I am unable to see any EBS related SOURCE SEGMENTS under DATA LOAD MAPPING Grid under Import Format
Is there something done incorrectly? Also strangely, I dont even see any RESPONSIBILITIES in the SOURCE ACCOUNTING ENTITES when I want to define the Drill Through feature
Thanks,
Mohit

One reason that you might not see entries in the segments drop down is due to the entries being filtered according to browser language or FDMEE user language settings for localization purposes. You might want to try adjusting the Setup > User Settings > User Language in FDMEE to see if that can make the segments appear.
We've got a US English EBS 12 source system to test with and if I change Setup > User Settings > User Language in FDMEE to something other than English United States then save and go back to the import format screen, segment drop down boxes are now completely empty. If I change back to en-us then they're back again. I believe that either the browser accept language or the User Language setting in FDMEE needs to match the 'base language' on the source system registration screen.
With a bit of luck that might be it

Unable to Define New Plant

Hi,
I need help regarding creating New Plant. I used the following steps
IMG> Enterprise Structure> Defiintion> Logistics Genral> Define, Copy, Delete, Check Plant
1.   Execute
2.   (Double Click) Define Plant
3.   New Entries
4.   Give Plant Name
5.   Country Code
I press F4 and search for DE for Germany but its not there. If I select any other like US, CA or GB. The field value remains null. Can someone tell me what I am missing? Please advice.
Thanks
RA

i think u r trying to input value in the county code feild on the screen of define plant
if that is the case then
i must tell u that county code is used in us for taxsation purpose
and this field is not country code rather it is county code
so u may leave the county code field blank
Edited by: baxter jas on Jan 5, 2008 6:12 PM

Illustrator CS4: Exporting as cropped image, unable to define Crop Area or Crop to Artboard

Preface: I am using Adobe Illustrator CS4 Design Premium, Windows version.
I am currently designing some projects in Illustrator CS4. I am NOT using multiple artboards, only one. On previous versions of Illustrator, users could simply Export> an image as a JPG, and the image would be appropriately cropped to either the Document size, or predetermined Crop Area marks which were easily chosen in the Object dropdown menu.
Since the ever useful Object > set cropmarks function was removed with the advent of CS4, I am unable to Export an Illustrator file as a high-res JPG or TIF using the supposed Artboard as the cropmarks. In other words, when trying to export my project, the saved/exported image includes all content placed in the document, even material that extends beyond the Document size or Artboard size. Why is this? What am I overlooking?
In the Artboard dialogue or settings, I cannot locate any option to set the Artboard as the default crop area for Exporting, saving, and printing, etc.
After doing a bunch of research trying to find a fix, I have only discovered that there are thousands of other people posting on various forums regarding this same issue, so I think a detailed and complete explanation or instruction on how to do this would be very helpful and appreciated.
Other than in the Save For Web & Devices settings, there seems to be no options to Export using cropmarks, or export a file to be properly cropped to the Artboard dimensions. Again, I know this function is possible when Saving for Web, but not with a normal high resolution Export as a flattened image such as a jpg... or at least I can't find out how.
Any help is appreciated, thanks.

Yeh this is pathetic and in my opinion a bug or false advertising. Since they haven't fixed it i believe this is false advertising and misleading for users who may have upgraded for this "feature".
I do know some CS2 users who are holding out from upgrading for this reason!!
I wonder what CEO's or higher ups would say if they heard or could understand this issue...How does program loose features meanwhile Adobe has how many billions in resources to fix these type of issues for their users who paid a pretty solid chunk for software that should work properly.
Need some competition to fire them up! (any alternatives to illustrator anyone actually using?)

Unable to update obpasswordchangeflag in OAM using IDXML call

Hi all,
I have written two IDXML calls reset password in OAM.
First IDXML call will reset the password to the specified new password and the subsequent second IDXML call should update the obpasswordchangeflag from "true" to "false".
And its working fine. but, its failing some times to update the obpasswordchangeflag to "false".
Please help me out its very urgent.
Thanks in Advance.
Siva Pokuri.

Please check these threads.
Re: Modifying obpasswordchangeflag with IDXML call
Re: reset and change password in OAM
It might be helpful.
-Mahendra.

Unable to define a policy OAM

Similar Messages

Maybe you are looking for