Unassign resources from lighthouse during active sync

I have a requirement to unassign resources during terminations. in the LDAP active sync userform , i tried the following code. it did not work, whereas disable and unlink works with this code.
<FieldLoop for='name' in='waveset.accounts[*].name'>
<Field name='resourceAccounts.currentResourceAccounts[$(name)].unassign'>
<Expansion>
<s>true</s>
</Expansion>
</Field>
</FieldLoop>
<FieldLoop for='name' in='waveset.accounts[*].name'>
<Field name='update.resourceAccounts.currentResourceAccounts[$(name)].unassign'>
<Expansion>
<s>true</s>
</Expansion>
</Field>
</FieldLoop>
any help will be appreciated.
Thanks,
Farooq

Hi Farooq,
I have a requirement, to unlink a resource account (user has multiple AD accounts) where 'dn' comes dynamically in WorkFlow.
I shall be thankful for any help,
Shadab

Similar Messages

Unassign resources from lighthouse

I have a requirement to unassign resources during terminations. in the LDAP active sync userform ,
i tried the following code. it did not work, whereas disable and unlink works with this code.
<FieldLoop for='name' in='waveset.accounts[*].name'>
<Field name='resourceAccounts.currentResourceAccounts[$(name)].unassign'>
<Expansion> true </Expansion>
</Field>
</FieldLoop>
<FieldLoop for='name' in='waveset.accounts[*].name'>
<Field name='update.resourceAccounts.currentResourceAccounts[$(name)].unassign'>
<Expansion> true </Expansion>
</Field>
</FieldLoop> any help will be appreciated. Thanks, Farooq

Hi Farooq,
I have a requirement, to unlink a resource account (user has multiple AD accounts) where 'dn' comes dynamically in WorkFlow.
I shall be thankful for any help,
Shadab

Release Resource from Project during closeout?

Hi,
How to release a resource from Project during project closeout. I found the following options, please suggest the procedure,
Case : 1. Created Requirement
2. Assigned Resource (Provisional)
3. Submit for Approval
4. Approver approves assignment.
Option A:
1: Update Requirement duration
2. Enter new End date
3. Subimit for Approval
4. Approver - Approves assignment
Option B:
1. Cancel resource requirement
Is there any way to release the resources from project. This should reduce the resource available hours ?
Regards,
AK

Hi,
I also strongly recommend you to read the following material. It is long, I know, but covers almost everything, including your questions:
Working with the Development Infrastructure
http://help.sap.com/saphelp_nw04s/helpdata/en/03/f6bc3d42f46c33e10000000a11405a/frameset.htm
This includes also some conceptual descriptions, tutorials, it describes among others the component model, and nwdi elements one by one like cms, dtr and cbs, etc, I believe it is a good start.
Still, let me briefly, but really only in a nutshell answer your questions.
The changes are only in inactive after checkin. You won't find in active, only if you activate (for details about actvation please refer to the above guide, since if I go into details, I am afraid the answer will be too long).
This was so far the dev/inactive and the dev/active part.
Then you release the changes and import into consolidation. Here it is indeed tricky, since a force activation takes place after a succesful import, so your changes will be visible in both cons/inactive and cons/active.
You also asked what to consider if you delete a DC:
#864515 - How To Delete a Development Component
You wanted to know where to monitor activities. For this go to the CBS webui and check the "Activities" page.
Here you can look up all the activations took place in the past, you can check pending activations, etc, you can even use CBS webui to activate.
Release: You are completely right, there is no release feature in any webuis, as this feature was never implemented. While you can activate from NWDS and from the CBS webui, regarding release the only option is NWDS.
I hope this helps, let me know if you require more clarification.
Best Regars,
Ervin

How to engage Shell Script resource action in an Active Sync workflow.

A little background, at my organization I have IDM set up simply to recognize changes in LDAP and transmit those changes, via active sync, to AD. We don't yet use the IDM interface to make any changes to users, instead we use external interfaces that we have written to make changes to LDAP which then get picked up via Active Sync and synchronized to AD. However, in addition to AD, there are several other resources that we would like to gradually wrap into this active sync workflow via native and custom resource adapters. Currently I am working on a simple Shell Script resource to manage Linux home directories. I have written all the necessary code and created the resource itself within IDM. This all seems to work, I can create, delete, disable, etc.. users in our Linux environment from the IDM interface.
Here is the problem, I would like to integrate the creation, deletion, enabling, disabling, etc.. of users into the same Active Sync workflow that engages whenever a change is made to LDAP. This way, whenever a user is created in LDAP (and consequently AD), that user will be granted a home directory in Linux. Unfortunately it seems that Shell Script Resources are not enabled for Active Sync. Any ideas on how one might accomplish this?
Thanks in advance.

Thank you for the prompt reply. Funny thing is that I have been banging my head on this problem for a couple weeks now (this is my first attempt at real customization ... ). I finally got desperate and decided to reach out for help. After I posted this message I came to a realization that ended up solving the problem for me, go figure.
For anyone in my place I can relate what I ended up doing, simple as it was. Keep in mind, of course, that this is a highly customized environment that I am working in so the specifics probably wont apply. What I basically did, is I found an LDAPCreateUserProcess form that gets invoked when Active Sync is run. For all I could tell, this simply processed the new attributes that came through Active Sync and related them to their llighthouse / AD counterarts. But I noticed a line like this:
<Field name="waveset.resources">
<Expansion>
<filterdup>
<appendAll>
<ref>waveset.resources</ref>
<s>AD</s>
</appendAll>
</filterdup>
</Expansion>
</Field>
and simply added the name of my shell script resource under the <s>AD</s> line. That was it.
Anyway, thanks bobm53, I can now get on with my life :-)

Io exception: Connection timed out during Active Sync

I received this connection exception during an Active Sync Process.
The exception caused the process to halt for 9 minutes - it then picked again and continued processing accounts.
We are running IdM v5.0 SP6, Tomcat Application Server, and an Oracle 9 Repository.
Any ideas?

Hi,
It seems the query is taking too long and eventually the connection to the database is timing out.
I also believe that you are on the supported database configurations for WLS 10.0 MP1 :-
Link:[http://edocs.bea.com/platform/suppconfigs/configs100/100_over/supported_db.html]
You will also have to look in the weblogic server log for relevant errors like socket exceptions.
Regards.

Why does the iPhone drop from iTunes during Wireless Sync?

Alright, so in my bedroom I have full wifi bars, occasionally when I move to the far corner I drop one single bar on the wifi but other than that, I never have a problem. Until I try to wireless sync. Then the iPhone 4 switches back to 3G for less than a second and then goes back to wireless again (still pleanty of bars on wifi). Of course, this is just enough to stop the phone from syncing wirelessly with iTunes.
I have done speed testing and local network ping testing and all that kind of thing, there is no reason for the iPhone to drop the wifi connection. I can stream netflix or hulu at maximum quality over my local wifi. Using iSSH I can VNC into the Mac without problem and using Filez I can SFTP to the mac or use AFP and transfer files without issue. I even transferred 2 Gigs worth of files from my living room to the bedroom over the local wifi with consistant good speed.
What gives? Is this some kind of strange design flaw or what?
This ONLY happens while trying to wirelessly sync with iTunes. And after, I cannot try to sync again until I reboot my phone and restart itunes.

Have you gone to the video tab (in itunes) and selected sync movies and selected the movie that you want synced?
http://manuals.info.apple.com/enUS/iPhone_UserGuide.pdf

Synchronization Policy Input Form versus Meta View Active Sync

In IdM 7.1, the Resources/ Active Sync Resource/ Edit Synchronization Policy provides options for �Input Form� under the Common Settings section. If the Active Sync application is enabled on the Meta View � Identity attributes page, the Input Form option on the Edit Synchronization Policy becomes disabled, and shows a statement ��MetaView will be used to handle detected changes for this resource��
I have logic to set IAPI.cancel based on certain conditions in my Synchronization Policy Input Form. Where does this type of logic go if Meta View is turned on for Active Sync?

Which Imput Form are you Selecting
Default User form or create user form.
I want to enter users into AD from IDM using Active Sync.

Delete/Unassign Resource Request Xml ?

What is the request xml to delete the resource from ACS4 ? Currently there is no xml request is generated in "Web service API Inspector" of ACS4. Also same for delete(unassign) resource from distributor resources?
Can anyhone help?

I've seen this too. Arguably, it's a bug, but I can also see an argument for the way it works now: if the account isn't going to be deleted, won't reconciliation likely just link it up again? In my particular case, the answer is "no"...
I'm running an old version of IDM 8, so I don't know if the behavior is still that way.
You can write your own task to unlink resources and make it available for launching under Server Tasks...Run Tasks. Or you can try using what's available under Accounts..Launch Bulk Actions.
-Les

Exchange Active Sync Help

I've been working with my company mobile phone IT people and we are having no luck getting my exchange active sync working.
I can sign in the owa site from my pc fine but if I try it from my phone it says the username and or password is wrong which it isn't I even e-mailed, copy and pasted it to make sure it was right.
It does the same thing from the exchange active sync section of trying to set up the account. The IT foks and I are at a loss for how to make it work, so I was cuirous if anyone else had the issue.

i just searched the tbolt forum for "active exchange" and "outlook exchange" and there's no tbolt owners here that have reported problems setting up the account. there's got to be some little thing that is off in your settings. for what it's worth, here are the instructions (which i'm sure you've already gone through): http://support.vzw.com/clc/devices/knowledge_base.html?id=39347

Role updation during Flat File Active Sync

Hi
I have defined a role which assigns default values to some attributes for a particular resource.
And this role am assigning it to the user in the Flat File Active Sync form during user creation.
But the problem is the attribute-values defined in the Role are not getting updated in the user data during the creation process. The next time there is an update, the values get reflected.
I want this to be reflected during the first creation process itself. Please let me know what changes needs to be done in the following code -
<Field name='accounts[Lighthouse].roles'>
<Expansion>
<filterdup>
<appendAll>
<ref>accounts[Lighthouse].roles</ref>
<s>Initial-Provision-Role</s>
</appendAll>
</filterdup>
</Expansion>
</Field>
This is done after assigning the user to the resources.
Please help asap
Thanks
Bushra

no....what i mean is that instead of using the user forms to set all the values, call a workflow instead. I believe the field in the configuration is called "process workflow" or something like that. this will be called instead of the forms. inside that workflow create a view, or get the existing view...set the new role....refresh the view...then call the create/update/delete user etc.
a create view is s provisioning task...so you cant call it from a workflow. take the "provisioning task" part out of the header of the create user workflow and it should work just fine.
this may be much more complicated than what you actually need. Its just the way i would handle it. I dont like using the user forms and always call a workflow instead. gives me much more flexibility
dana

Flat File Active Sync Target Resource not working

Hi there,
I've been trying now for several days to get user data from a csv-file into a target resource (mysql table in this case), but I don't get it working.
I created MySQL resource with correct schema mapping, then I created FFAS adapter for the csv file with correct schema mapping and added MySQL table as target resource (I chose "wizard generated input from" and basic configuration mode in active sync wizard). I also configured meta view (or identity attributes in IDM 6.0) with FFAS as source and MySQL as target for several attributes.
Accounts can be loaded from the csv (lighthouse users are created) and MySQL-resource can be assigned to users, but it would be pretty nice to have this done automatically. So what I want is load accounts from csv and add mysql resource without any user action required (manually assign resource).
Thanks for your help!

Right. Roles are a great way to assign Resources to users. They have the added value of being able to re-define the Role at a later time (e.g. users having Role X get an account in MySQL and AD, for example) through Bulk Action.
I typically do my ActiveSync processing through an ActiveSync input Form. I realize MetaView is available too, but I was "brought up" on the Form model and it still works for me.
If you go the ActiveSync Form route, you basically have to understand the Form as a tool to help you build the user View and extend the handful of attributes from your CSV file into a larger representation of the user. In other words, the Form is often used to create an Email Address (either in the Form or through Rule invocation), assign Roles/Resources, assign a Manager (IdM 7.0 and later), etc.

Help Pls: how to assign a user form to a non active sync resource adapter

I need to implement a non active sync resource adapter, such as oracle database or RACF. When a user is assigned a resource by IdM, an account is created on that resource. I want to transform some attributes during the creation, such as pre-padding the accountId with a letter and zeros. My questions are:
1) I think attribute transformation should be accomplished by user form. is it correct? How do I assign the user form to the non active sync resource?
2) What workflow/userform should I change to accomplish that?
Thanks a lot.

A cleaner option would be to
1. Create a custom form, which could be derived from the Tabbed User Form.
2. Create a delegated admin, with account administrator capabilities at the minimum, and required controlled organization, and assign the above form to this delegated admin -- this is on the same page.
3. Use this form to create IDs on the specific resource.
Now in this custom form you could have the logic on how to create the ID in the specific resource. In fact you could have different logic for different resource. Check the tech deployment guide for the exact syntax, but the field might be:
account[Res_Name].identity
Note that this setting would override the 'Identity Template' setting as defined in the RA configuration.
And BTW, it would really help if you readup the 'Forms' section in the guide.
Regards,
Suveer Chainani

Exchange active sync cannot connect to server after migration mailbox user from exchange 2007 to exchange 2013 coexistence

Hello, everyone, my name is rafl
I have a problem with exchange 2013 active sync.
I have installed exchange 2013 coexistence with legacy exchange 2007, I have to migrate user mailboxes: [email protected] from exchange 2007 to exchange 2013.
but any problem with active sync connection on the mobile device after moving mailbox user. I reconfigure the exchange ActiveSync external connection domain (latest.domain.com) on mobile device replacing legacy exchange ActiveSync external connection domain
(legacy.domain.com)
the process of moving mailboxes successfully without error.
Access OWA for exchange 2007 and exchange 2013 is running normally
access mail from Outlook running normally
Certificate request has been installed and has no problem with it
The OWA virtual directory is configured for internal and external connections and different from the legacy exchange
The autodiscover virtual directory is configured for internal and external connections and different from the legacy exchange
ActiveSync virtual directory is configured for internal and external connections and different from the legacy exchange
user mailboxes are still on exchange 2007 is not problematic.
only problem with Exchange Active Sync on mobile devices, where I set up an email with android, iphone, windows phone. the error message: cannot connect to the server.
but, if I create a new user and create user mailboxes directly in exchange server 2013, ActiveSync can run without error on mobile device, access through OWA, MsOutlook, Outlook Anywhere also run normally.
only the results of user migration from exchange 2007 to exchange 2013 which is troubled with exchange ActiveSync connection.
any ideas for this problem, and what should I check on the exchange server ..?

i have run the activesync test connectivity and get some error :
Testing TCP port 443 on host domain.co.id to ensure it's listening and open.
The specified port is either blocked, not listening, or not producing the expected response.
A network error occurred while communicating with the remote host.
Elapsed Time: 3091 ms.
Testing TCP port 443 on host autodiscover.domain.co.id to ensure it's listening and open.
The specified port is either blocked, not listening, or not producing the expected response.
A network error occurred while communicating with the remote host.
Elapsed Time: 21072 ms.
Testing TCP port 80 on host autodiscover.domain.co.id to ensure it's listening and open.
The specified port is either blocked, not listening, or not producing the expected response.
A network error occurred while communicating with the remote host.
Elapsed Time: 21049 ms.
I have allowed access to port 443 (https) and 80 (http) on the firewall and re-run testconnectivity, but still with the same results. if I enable active sync for users who created directly in Exch 2013 there is no problem with the ActiveSync, just a problem
for users who moved from Exch 2007 to Exch 2013. @Android, iPhone, and Blackberry the error message "cannot connect to the server"

"This message has not been downloaded from the server" - Multiple devices all using Exchange Active Sync

We are having this issue across multiple IOS devices ranging from IOS version 5.x up to the latest 6.1.2. Many (not all) emails sent to the devices are unreadable and simply state: "This message has not been downloaded from the server". Microsoft believes this to be some sort of bug with the IOS devices in the way they are handling the SSL encryption.
Facts:
- Devices are connected to an Exchange 2010 SP1 Rollup 6 via Active Sync (No POP3, IMAP or SMTP)
- issue occurs on multiple IOS devices within the organization ranging from IOS 5.x up to the latest 6.1.2
- Issue occurs on both external cellular data and internal wireless networks
- Not all emails sent to the devices result in the error, but issue does tend to occur more frequently from certain senders/domains
- Using the same user account on an android phone does not result in an issue (even when receiving the exactly same email that has been sent to the IOS devices)
- Closing mail app / rebooting device does not resolve the issue
- Doesn't appear to matter what the mesage format is (can be html, plaintext, etc)
- Spent nearly 7 hours with Microsoft going through the Exchange server configuration and looking for possible causes. None have been found and all testing indicates things are setup correctly.
- This is not a case of Issue 2.3 listed here: http://support.microsoft.com/kb/2563324 (verified by Microsoft Support)
- If we disable SSL on the IOS device and connect via plain HTTP the messages are displayed correctly!
- If we use a different SSL certificate, the issue still occurs - so not a problem with the original cert.
Does anyone have any suggestions on what would cause this? Does the ISO devices have any sort of log that would indicate why it's reporting this error? The current error is pretty unhelpful.

GFI Have a solution for this problem. It is to do with iOS implementation of reading the message headers when SPF compliance modifications are made by GFI.
http://kb.gfi.com/articles/SkyNet_Article/Error-This-message-has-not-been-downlo aded-from-the-server-when-downloading-messages-to-an-iOS-device?retURL=%2Fapex%2 FSupportHome&popup=true

Sync between MacBookPro and iPhone 3G does not sync properly. Calendars duplicate events but worse is that only contacts from Address book from letter T onwards sync. Any contacts on iPhone which are not on Mac are lost during sync.

Sync between MacBookPro and iPhone 3G does not sync properly. Calendars duplicate events but worse is that only contacts from Address book from letter T onwards sync. Any contacts on iPhone which are not on Mac are lost during sync.
Solutions?

No, I never really found an easy solution. I believe it is an issue with some corruption in the iTunes database on the specific device. In my case, both my iPad and iPhone now show duplicate stream songs if viewed through iTunes on my Mac, but they show different songs. A couple years ago I had a similar issue on my iPhone, and Apple support suggested I back up the phone, completely reset it, and then restore it from the backup. It did work, so I imagine it would probably work for my current issues with the iPhone and iPad. But resetting and restoring an iPad or iPhone always makes me a little nervous that something will get lost. When I did reset/restore the iPhone, I do have to say, the restore process was 100% perfect and I did not lose any data at all even though Apple support said I might. If you try to go that route, I would suggest backing the device up both to a computer through iTunes, and to the iCloud so that you have a double backup.
None of this really resolves the issue with how the iTunes databases are becoming corrupted on the apple devices though, so it is very likely to happen again until they fix it. I have been unable to determine if there were any specific actions or conditions which caused the corruption to happen in the first place.
Might be worth another call to Apple support, or dropping in the local Apple store if you have one near by.

Unassign resources from lighthouse during active sync

Similar Messages

Maybe you are looking for