UP issue with Disallowed attribute

I have Given name & Surname in "Exclude passwords that match attribute
values"
So Jones Ela user is created, UP is set to default, user has 1 grace login,
password is expired)
User logs in with default, being informed that last grace login was used,
needs to change password
So the user changes password to housejones15
All is OK, but on next boot the user is being informed that the password
needs to be changed
That happens obviously because of
"Verify whether existing passwords comply with the password policy
(verification occurs on login)"
But why the system allowed user to change the password in first place to a
password in which Surname attribute was used?
I would expect the user to NOT be allowed to chose such password
Thanks
Seb

No idea, it was looking a "cool" option to have set when i done it years ago
Removed it now, should make life easier
Thanks a lot
Seb
"ab" <[email protected]> wrote in message
news:eJg0u.776$[email protected]..
> Out of curiosity, is there a reason you are using that option? It's not a
> default, and causes overhead on every login that is typically not needed
> (if the password didn't match when it was set then it shouldn't be
> un-matching now... except in a few less-common cases). I'll see if I can
> duplicate this and get a bug opened for it. For now, I'd disable the
> checkbox unless you really need it.
>
> Cases that come to mind when the checkbox is mildly useful include when
> password policies change to become more-complex and enforcement is needed
> ASAP (users hate this) or maybe when migrating from NDS Password to UP.
>
> Good luck.

Similar Messages

Issue with URL attribute in Header

Hi,
I am facing an issue with the URL attribute.
I have created an header attribute #HDR_TEST_URL and selected the type as URL.
Given a default value as http://www.google.com as the url
Associated this attribute to the Notification message.
But in the notification, the URL is being shown as the plain text not as a link.
Can you please let me know what I am missing here.
Thanks

Please check the notification format if it is text then it might not be shown as a url but if it is HTML it might show up, if it is not showing then i would recommend using the anchor tag to create the Hyperlink.
Regards,
Varun

Issue with binary attribute types through Directory Proxy Server 6.3.1

I'm having problems with DPS 6.3.1.1 on Solaris 10 with binary attribute types. From most LDAP servers, requesting an attribute such as userCertificate would return userCertificate;binary without any issues. However, DPS seems to consider these two separate attributes. In order to see userCertificate;binary, I have to ask for it in that exact format. This obviously is causing trouble for many clients as they shouldn't care about the binary type as it's the same attribute.
I've tried to correct this with a virtual data transformation (dpconf add-virtual-transformation 'PKI Tree' read add-attr-value userCertificate \${userCertificate\;binary}) but the end results are the same. Any ideas on how I can correct this one?
Thanks in advance.

Here is some complementary information:
system (uname -a):
SunOS xxx 5.10 Generic_142900-13 sun4u sparc SUNW,Sun-Fire-V440
since patch 118666-26: update java 1.5.0 update 24
we are experiencing the follwing problem:
xxx$ ./dpadm start /opt/ldap/instances/mail/
The Directory Proxy Server instance '/opt/ldap/instances/mail' failed to start after the waiting period.
The Directory Proxy Server instance start has produced the following error output:
Exception in thread "main" java.lang.NoSuchFieldError: strm
at java.util.zip.Inflater.initIDs(Native Method)
at java.util.zip.Inflater.<clinit>(Inflater.java:60)
at java.util.zip.ZipFile.getInflater(ZipFile.java:375)
at java.util.zip.ZipFile.getInputStream(ZipFile.java:320)
at java.util.zip.ZipFile.getInputStream(ZipFile.java:286)
at java.util.jar.JarFile.hasClassPathAttribute(JarFile.java:469)
at java.util.jar.JavaUtilJarAccessImpl.jarFileHasClassPathAttribute(JavaUtilJarAccessImpl.java:21)
at sun.misc.URLClassPath$JarLoader.getClassPath(URLClassPath.java:809)
at sun.misc.URLClassPath.getLoader(URLClassPath.java:293)
at sun.misc.URLClassPath.getResource(URLClassPath.java:160)
at java.net.URLClassLoader$1.run(URLClassLoader.java:192)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:188)
at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
at java.lang.ClassLoader.loadClass(ClassLoader.java:300)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:268)
at java.lang.ClassLoader.loadClass(ClassLoader.java:252)
at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:320)
The Directory Proxy Server instance '/opt/ldap/instances/mail' is not running.
We have tried to install patch 118666-27 (not recommended, but already available) which includes jdk 1.5.0 update 25 -> same problem
When returning to jdk 1.5.0 update 20 the directory proxy server starts as normal

Issue with employe attributes in SRM

Hello All,
In ECC HR Organization structure, multiple employees are assigned to
single position. The organization structure along with employee data is
replicated from ECC to SRM as it is with the help of ALE Standard
interface and PFAL execution.
Issue: Since attributes are assigned at employee position level in SRM
unlike at employee level in ECC HR. If attributes such as company code,
currency, cost center delivery address are different for each employee
in ECC HR and the how can these be assigned to a single position in SRM
org structure as a default attribute for each employee?
SRM Version 7.13 SP02.
Appreciate your help.
Thanks & Regards,
Phanidhar Maddi

Hi Konstantin Anikeev ,
Thanks. We could see that ECC organization structure is replicated as it is to SRM System ( multiple employees assigned to single position) and employees are able to create SC with out any issue. The default attributes are assigned at employee position level.
The challenge is : In case multiple employees assigned to single position are maintained with different values such as company code and delivery address in ECC and which are replicated to SRM system, how to set default values for each employees?
Regards
Phani

Data issue with Navigational Attribute in the report

Hi Experts,
We have a report which has Material and Material Group in the report. Material Group is a navigational attribute of 0Material. We have some 31 material groups in the ODS. However, the report is diaplaying only 3 material Groups. If I use Material Group directly( not as an attribute of material) then it is displaying all the 31 material groups correctly.
We have a hierarchy which is loaded through Flat file on Material Group. We need the hierarchy to be displayed for all the material groups in the ODS. Please let me know what could be causing this issue?
Thanks and Regards,
Kavitha Jagannath

Hello Kavitha,
Check if the Material Masterdata is having these Material groups. If not then load this Material masterdata and activate it.
As your query is using Material group as Navigational attribute then the data should come from this Material Masterdata.
If your Material has only 3 of th eMat Groups then report will show only 3. Better update this Material masterdata.
Regards,
Pratap Sone

Issue with Transaction Attribute

Hi All
I am trying to build a program that will interact with two database at the same time.Lets say, I am getting/updating/inserting data from/to Database1.table1 so I am creating transaction attribute for the same to commit and roll back the changes.
Now, after the above scenario I need to update my audit trail table in database2 but since I have already created transaction for the above database it not allowing me to connect to database2 saying "Connection already exit for database1 cannot create new transaction for Database2".
Also if I tried to create a new transaction for Database2 its passing me exception saying "A transaction is already running for the thread cannot create new transaction for the same thread".
I tried calling a new thread also but the exception remains as the new thread is called from the main thread.
Please help me in same so that i can create two transaction or connection to two database using same transaction.

user12882304 wrote:
... connection to two database using same transaction.Not possible.
You are attempting something with a JDBC driver that the driver does not support.
Your first step is to research distributed transactions.
For this to actually work the database itself must support it. And you must use the correct idiom to invoke it.

Import Issue with Attributes

Hi everybody,
during import of approx. 16.000 records I am facing an issue concerning the attributes. The input file is an Access database, which was exported from another repository. Now, I am using Import Manager to re-import this file into a new repository. The taxonomy and the allocation of attributes in this taxonomy are the same. However, when I import the data, some products have wrong attributes attached to them with wrong values. I already tried to do a two-step import (first product data, then attributes). The same problem here. In the Access file all records are correct. Any ideas?
Best regards
Christian
Edited by: Christian Heuer on Mar 31, 2009 12:15 PM

Hey gimnos,
Thanks for the question. I understand you are experiencing issues importing a CD to iTunes for Windows. The following resources may provide a solution:
iTunes 11 for Windows: Import songs from CDs
http://support.apple.com/kb/PH12486
iTunes for Windows: Additional troubleshooting tips for burning issues
http://support.apple.com/kb/TS1374
Thanks,
Matt M.

Keychain Issue with Entourage SMTP password or port attribute

I am posting this under Using OS X rather than Mail since I do not
use Apple's Mail. The problem is the Microsoft Entourage or something
may be sending bad information to the OS X keychain and this prevents me
from sending mail to my ATT/Yahoo account. The workaround I have
been using to send mail is use the OS X Keychain First Aid repair.
After the repair Entourage will send the message one or two times then
I get the following Keychain verification error note:
Item “pop.att.yahoo.com” has unspecified value for port attribute
Item “smtp.att.yahoo.com” has unspecified value for port attribute
Problems were found; you should choose the Repair option to fix them
Verification failed.
The Repair option corrects the problem until the next message is
sent. I have done everything I can think of to the Entourage v12.1.7
settings and something is still not right.
I am beginning to suspect a Keychain bug or error but have no idea
how to get the correct attribute written to the keychain.
Maybe someone could provide some terminal commands to the will
help me write the correct password and port attribute to the keychain.
I am open to any suggestions to clear being nagged every time I
need to send a message to enter my password. The POP mail works
fine. This seems to be an issue with the password that is required
by the ATT/Yahoo smtp server.

If you are sure your primary account is setup correct (per the above URLs), open
the Applications/Utilities/Keychain Access.app and go to Keychain Access/Keychain
First Aid and click on the Verify and Repair if necessary.
FYI, Entourage will write errors to the keychain if you have the account setup wrong.
My error (that cause the keychain errors) was I typed in the my ID and password in
the smtp option. Check the box to use the received and do NOT type in the address.
When you save the settings with nothing in the boxes, Entourage will do it for you
and it will work.
I don't know why but it will not work if you type in the info. Just follow the rules
and it will work
Try It!!
Message was edited by: aRKay

UI Hints displayWidth conflict issue with precision value in 11.1.1.6

Hi All,
Env. 11.1.1.6
Issue : "bindings.VoAttribute.hints.displayWidth" is taking value of precision (validation>> precision i.e. DB Table precision for VarChar ) in 11.1.1.6 which I am migrating from 11.1.1.3 that was working fine. I have checked apps running in both 1.6 showing precision value of displayWidth if not explicitly define UI Hints displayWidth in EO. Is this issue with 11.1.1.6 ? and of course, is there any configuration to disallow precision value as displayWidth for default hints ?
Thanks .
-Robin

Hi Timo,
The issue is like this :
in 11.1.1.6 for inputText which is using column attribute as bindings.voAttribute.hints.displayWidth. But the displayWidth is not explicitly defined in EO attribute i.e. non value for UI Hints displayWidth. And EO attribute precision is being picked from database table precision for that field as validation for that attribute. While checking in UI Hints for that bindings attribute in UI is taking displayWidth from attribute precision value (255) which is stretching that component whole width of page as its database table column precision is defined as 255 varchar.
Does UI Hints displayWidth checks precision value of attribute if it is not explicitly defined in EO newer version than 11.1.1.3? In my case displayWidth is taking value from EO attribute's precision value. If I define display width for UI Hints, then only it overrides its value in 11.1.1.6. But in jdev 11.1.1.3, it is coming up as 0 for displayWidth for same attribute with precision 255 Varchar.
Thanks,
Robin

BW 3.5 - Issue with formula variable with replacement path

Dear experts,
I'm facing an issue with formula variable with replacement path.
Just to clarify, I know replacement paths is raising a lot of questions but I've been using this functionnality extensively in the past, both in 7.0 and 3.5, so I'm not looking for basic information about how to use it.
I'm trying to setup a simple report that would show total values per plant of Purchase Order < 100
To do so I've setup a calculated key figure as follow:
VAR1 * ("PO value" < 100 ) * "PO value"
VAR1 is a formula variable with replacement path on 'purchase order' and value attribute 'constant =1'.
(The report has to show values summarized by plant but should not show the detail PO by PO, so I'm not looking at a solution based on condition)
The report as characteristic "plant" in rows and my CKF in columns.
Now let's take an example. I have 3 POs in Plant 1:
PO1 -> 150
PO2 -> 90
PO3 -> 80
Because of the variable with replacement path, the result in my query should be:
plant1 = 170 (even though characteristic "purchase order" is not in my rows, system should evaluate PO one by one and return values only for those two that are below 100).
But the result coming is 320, which is wrong.
I've done the same report on many other 3.5 systems and it worked perfectly, and I am not able to get proper support from SAP OSS who keep saying that this functionnality is not ready in 3.5 (although I've provided screenshot of this working on another 3.5 system!!! how frustrating...)
They have also pointed to problems of Before and After aggregation but that has absolutely no impact. Once again, the scenario is working perfectly on other 3.5 systems with the same query design, so i'm sure it has nothing to do with Query Designer options.
Would anyone have ever come to an equivalenet problem? I'm wondering whether the DB itself could not play a role in the variable with ref characteristic 'constant =1' ...
Any though is welcome!
thanks

Hi,
The text variable is replaced when the exact date is clear for this key figure column according to the restriction.
To achive this, please make sure that either the variable is directly restricted in the key figure selection, or that the date characteristic is in drilldown.
Regards,
Patricia

Issues with setting "Album Artist" in iTunes 9.2.5.1 on Windows 7

I googled this for a while but haven't been able to find this issues mentioned anywhere else yet. Here's what's happening: I am importing CDs to iTunes 9.2.1.5 on Windows 7 Pro (64 Bit) using MP3 Encoder > Higher Quality. All is well except for a few CDs where I'd like to set an overall Album Artist. Example: Tony Bennett's Duets: An American Classic. When importing the CD it shows up under "Various Artists" since "Artist" is always Tony Bennett plus whoever he sings with. To make sure the album shows up under Tony Bennett in the library I click on the album and set "Album Artist" to Tony Bennett. That, however results in changing the "Artist" field as well now so all fields say Tony Bennett, which shouldn't happen, "artists" should stay unchanged. I tried this with several albums and the behavior is always the same.
I also tried the back door by going into the actual folder of the album in Windows then change the MP3 details and populate "Album Artist" there for all tracks within the album. Once I re=open iTunes it registers the change only for the first track but not the rest. So I re-import the folder into iTunes and then it does take "Album Artist" and also leaves "Artist" unchanged but for some reason has now lots of numbers under "Comments". There seems to be a mismatch of the field attributes between iTunes and Windows for MP3 files (possibly other formats as well). Wondering if anyone else has observed this or if I am just missing some setting.

FYI iTunes handling of ID3v2.4 tags seems to have some issues as well... Translating genres into their numeric codes for one thing. I'd recommend sticking with v2.3.
I'm not exactly sure from your posts what you were seeing. Was the artist being changed in Get Info. after you'd set Album Artist, or was it changing elsewhere on screeen? iTunes 9(.1 I think) added an option *View > Column Browser > Use Album Artists*. Unfortunately this doesn't change the heading of the column so that you "see" it is now only listing album artists but that's what it does.
There is also an occasional issue with the current build in that sometimes changes to Album Artist or Sort Album Artist fail to be reflected properly in the column browser until iTunes is closed and reopened.
tt2

An issue with authentication and authorization on ISE 1.2

Hi, I'm new to ISE.
I have an issue with authentication and authorization.
I have ISE 1.2 plus patch 6 installed on VMware.
I have built-in Windows XP supplicant and 2960 cisco switch with IOS c2960-lanbasek9-mz.150-2.SE5.bin
On supplicant I use EAP(PEAP) with EAP-MSCHAP v2.
I created authentication and authorization rules with Active Directory as External Identity Source. Also I applied authorization profile with DACL.I login on Windows XP machine under different Active Directory accounts. Everything works fine (authentication, authorization ), but only for several hours. After several hours passed , authentication and authorization stop working . I can see that ISE trying authenticate and authorize users, but ISE always use only one account for authentication and authorization . Even if I login under different accounts ISE continue to use only one last account.
I traied to reboot switch and PC,but it didn’t help. Only rebooting of ISE helps. After ISE rebooting, authentication and authorization start to work properly for several hours.
I don’t understand is it a glitch or I misconfigured ISE or switch, supplicant?
What should I do to resolve this issue?
Switch configuration:
testISE#sh runn
Building configuration...
Current configuration : 7103 bytes
! Last configuration change at 12:20:15Tue Apr 15 2014
! NVRAM config last updated at 10:35:02 Tue Apr 15 2014
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname testISE
boot-start-marker
boot-end-marker
no logging console
logging monitor informational
enable secret 5 ************
enable password ********
username radius-test password 0 ********
username admin privilege 15 secret 5 ******************
aaa new-model
aaa authentication dot1x default group radius
aaa authorization network default group radius
aaa authorization auth-proxy default group radius
aaa accounting update periodic 5
aaa accounting dot1x default start-stop group radius
aaa server radius dynamic-author
client 172.16.0.90 server-key ********
aaa session-id common
clock timezone 4 0
system mtu routing 1500
authentication mac-move permit
ip dhcp snooping vlan 1,22
ip dhcp snooping
ip domain-name elauloks
ip device tracking probe use-svi
ip device tracking
epm logging
crypto pki trustpoint TP-self-signed-1888913408
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1888913408
revocation-check none
rsakeypair TP-self-signed-1888913408
crypto pki certificate chain TP-self-signed-1888913408
dot1x system-auth-control
spanning-tree mode pvst
spanning-tree extend system-id
vlan internal allocation policy ascending
ip ssh version 2
interface FastEthernet0/5
switchport mode access
ip access-group ACL-ALLOW in
authentication event fail action next-method
authentication event server dead action reinitialize vlan 1
authentication event server alive action reinitialize
authentication host-mode multi-auth
authentication open
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
authentication violation restrict
mab
dot1x pae authenticator
dot1x timeout tx-period 10
spanning-tree portfast
interface FastEthernet0/6
switchport mode access
ip access-group ACL-ALLOW in
authentication event fail action next-method
authentication event server dead action reinitialize vlan 1
authentication event server alive action reinitialize
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
authentication violation restrict
mab
dot1x pae authenticator
dot1x timeout tx-period 10
spanning-tree portfast
interface FastEthernet0/7
interface Vlan1
ip address 172.16.0.204 255.255.240.0
no ip route-cache
ip default-gateway 172.16.0.1
ip http server
ip http secure-server
ip access-list extended ACL-ALLOW
deny icmp any host 172.16.0.1
permit ip any any
ip radius source-interface Vlan1
logging origin-id ip
logging source-interface Vlan1
logging host 172.16.0.90 transport udp port 20514
snmp-server community public RO
snmp-server community ciscoro RO
snmp-server trap-source Vlan1
snmp-server source-interface informs Vlan1
snmp-server enable traps snmp linkdown linkup
snmp-server enable traps mac-notification change move
snmp-server host 172.16.0.90 ciscoro
radius-server attribute 6 on-for-login-auth
radius-server attribute 6 support-multiple
radius-server attribute 8 include-in-access-req
radius-server attribute 25 access-request include
radius-server dead-criteria time 5 tries 3
radius-server vsa send accounting
radius-server vsa send authentication
radius server ISE-Alex
address ipv4 172.16.0.90 auth-port 1812 acct-port 1813
automate-tester username radius-test idle-time 15
key ******
ntp server 172.16.0.1
ntp server 172.16.0.5
end

Yes. Tried that (several times) didn't work. 5 people in my office, all with vers. 6.0.1 couldn't access their gmail accounts. Kept getting error message that username and password invalid. Finally solved the issue by using Microsoft Exchange and "m.google.com" as server and domain and that the trick. Think there is an issue with imap.gmail.com and IOS 6.0.1. I'm sure the 5 of us suddently experiencing this issue aren't the only ones. Apple will figure it out. Thanks.

Issue with File Download(messageDownload) on Search Page.

Hi,
I created a custom OAF search page which fetches values from one table. The document in getting stored in my custom table in a BLOB colums and NOT in FND_LOBS.
The table has 3 collumns along with others:
1st is primary key (Record_Seq) ==> number data type
2nd to store actual file name (File1Name) ==> varcahar2 data type
3rd to store the actual uploaded data (File1Data) ==> BLOB data type
The reason for having the “File1Name” is so that I can display the original file name of the document that was uploaded, instead of just the “view” in the search page results .
On the File1Data BLOB and created a messageDownload for that under query results table with following details:
ID : File1Data
ItemStyle : messageDownload
FileMIME Type : pdf
Datatype : BLOB
View Instance : LacEmpExposureVO1
view Attribute : File1Name
File View Attribute : File1Data
When I click on the "File1Name" data hyperlink, it is opening only the first document corresponding to the first record in the search page results.
For example, If my search page returns 10 rows then when I click on the file1name on any row, It is open the first row file name only.
I have a primary key column(RECORD_SEQ) in the Table / EO / VO which is displayed in the search page results.
Also one weird thing is happening:
If I try to do this more than 2 times then it is opening the update page with the first record from the search page results…
I tried to print the context and it is nul the first time, But the second time then context is changing to "update". Dont know how this is happening????
Any advice is greatly appreciated as it is very crucial for me to get this resolved ASAP. I have looked at several forums and did a lot of things as advised in the forums . But nothing seems to work for me.
Thanks,
Mir
CO code for the search page
===========================
if (pageContext.getParameter("Create")!= null)
System.out.println("Into LacEmpExposureCO in PROCESS FORM REQUEST with Context of CREATE");
pageContext.setForwardURL
("OA.jsp?page=/lac/oracle/apps/lac/lacempexposure/webui/LacEmpExposureCreatePG",
null,
OAWebBeanConstants.KEEP_MENU_CONTEXT,
null,
null,
true, //Retain AM
OAWebBeanConstants.ADD_BREAD_CRUMB_YES,
OAWebBeanConstants.IGNORE_MESSAGES);
else if ("update".equals(pageContext.getParameter(EVENT_PARAM)))
System.out.println("Into LacEmpExposureCO in PROCESS FORM REQUEST with Context of UPDATE");
System.out.println("LacEmpExposureCO ==> RecordSeq in PROCESS FORM REQUEST is: " + RecordSeq);
HashMap params = new HashMap(1);
params.put("RecordSeq", RecordSeq);
pageContext.setForwardURL
("OA.jsp?page=/lac/oracle/apps/lac/lacempexposure/webui/LacEmpExposureUpdatePG",
null,
OAWebBeanConstants.KEEP_MENU_CONTEXT,
null,
params,
true, //Retain AM
OAWebBeanConstants.ADD_BREAD_CRUMB_NO, // Do not display breadcrumbs
OAWebBeanConstants.IGNORE_MESSAGES);
else {
String strEvent = pageContext.getParameter(OAWebBeanConstants.EVENT_PARAM);
System.out.println(strEvent);
System.out.println("Into the last ELSE part in LacEmpExposureCO.java");

Duplicate post -- Issue with File Download(messageDownload) on Search Page.

Som issues with Nvidia GTX960 - dmesg error output posted

I have some issues with icons not showing up, eg. in pamac. Just red crosses or what it's called.
Here is my dmesg error output.
$ dmesg --level=err,warn
[ 0.000000] ACPI: RSDP 0x00000000DD7F6000 000024 (v02 ALASKA)
[ 0.000000] ACPI: XSDT 0x00000000DD7F6080 00007C (v01 ALASKA A M I 01072009 AMI 00010013)
[ 0.000000] ACPI: FACP 0x00000000DD8041A8 00010C (v05 ALASKA A M I 01072009 AMI 00010013)
[ 0.000000] ACPI: DSDT 0x00000000DD7F6198 00E009 (v02 ALASKA A M I 00000031 INTL 20091112)
[ 0.000000] ACPI: FACS 0x00000000DDD45080 000040
[ 0.000000] ACPI: APIC 0x00000000DD8042B8 000092 (v03 ALASKA A M I 01072009 AMI 00010013)
[ 0.000000] ACPI: FPDT 0x00000000DD804350 000044 (v01 ALASKA A M I 01072009 AMI 00010013)
[ 0.000000] ACPI: LPIT 0x00000000DD804398 00005C (v01 ALASKA A M I 00000000 AMI. 00000005)
[ 0.000000] ACPI: SSDT 0x00000000DD8043F8 000539 (v01 PmRef Cpu0Ist 00003000 INTL 20091112)
[ 0.000000] ACPI: SSDT 0x00000000DD804938 000AD8 (v01 PmRef CpuPm 00003000 INTL 20091112)
[ 0.000000] ACPI: MCFG 0x00000000DD805410 00003C (v01 ALASKA A M I 01072009 MSFT 00000097)
[ 0.000000] ACPI: HPET 0x00000000DD805450 000038 (v01 ALASKA A M I 01072009 AMI. 00000005)
[ 0.000000] ACPI: SSDT 0x00000000DD805488 00036D (v01 SataRe SataTabl 00001000 INTL 20091112)
[ 0.000000] ACPI: SSDT 0x00000000DD8057F8 0034E1 (v01 SaSsdt SaSsdt 00003000 INTL 20091112)
[ 0.000000] ACPI: BGRT 0x00000000DD808D38 000038 (v00 ALASKA A M I 01072009 AMI 00010013)
[ 0.006274] ACPI: All ACPI Tables successfully acquired
[ 0.014978] ENERGY_PERF_BIAS: Set to 'normal', was 'performance'
[ 0.014978] ENERGY_PERF_BIAS: View and update with x86_energy_perf_policy(8)
[ 0.016204] Ignoring BGRT: invalid status 0 (expected 1)
[ 0.102300] #2 #3 #4 #5 #6 #7
[ 0.263542] ACPI: Executed 1 blocks of module-level executable AML code
[ 0.265355] ACPI: Dynamic OEM Table Load:
[ 0.265358] ACPI: SSDT 0xFFFF8807FA42A800 0003D3 (v01 PmRef Cpu0Cst 00003001 INTL 20091112)
[ 0.265733] ACPI: Dynamic OEM Table Load:
[ 0.265736] ACPI: SSDT 0xFFFF8807FA419800 0005AA (v01 PmRef ApIst 00003000 INTL 20091112)
[ 0.266134] ACPI: Dynamic OEM Table Load:
[ 0.266135] ACPI: SSDT 0xFFFF8807FA46DA00 000119 (v01 PmRef ApCst 00003000 INTL 20091112)
[ 0.267060] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S1_] (20150204/hwxface-580)
[ 0.267063] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S2_] (20150204/hwxface-580)
[ 0.285136] ACPI: Enabled 5 GPEs in block 00 to 3F
[ 0.793801] ata1.00: supports DRM functions and may not be fully accessible
[ 0.794140] ata1.00: supports DRM functions and may not be fully accessible
[ 0.794388] ACPI Error: [DSSP] Namespace lookup failure, AE_NOT_FOUND (20150204/psargs-359)
[ 0.794391] ACPI Error: Method parse/execution failed [\_SB_.PCI0.SAT0.SPT5._GTF] (Node ffff8807fe0d19b0), AE_NOT_FOUND (20150204/psparse-536)
[ 0.795480] ACPI Error: [DSSP] Namespace lookup failure, AE_NOT_FOUND (20150204/psargs-359)
[ 0.795482] ACPI Error: Method parse/execution failed [\_SB_.PCI0.SAT0.SPT5._GTF] (Node ffff8807fe0d19b0), AE_NOT_FOUND (20150204/psparse-536)
[ 1.018384] usb 3-3: ep 0x81 - rounding interval to 64 microframes, ep desc says 80 microframes
[ 1.018386] usb 3-3: ep 0x82 - rounding interval to 64 microframes, ep desc says 80 microframes
[ 1.040606] systemd-journald[181]: Failed to set file attributes: Inappropriate ioctl for device
[ 1.114596] r8169 0000:03:00.0: can't disable ASPM; OS doesn't have ASPM control
[ 1.115441] ACPI Warning: SystemIO range 0x000000000000F000-0x000000000000F01F conflicts with OpRegion 0x000000000000F000-0x000000000000F00F (\_SB_.PCI0.SBUS.SMBI) (20150204/utaddress-254)
[ 1.230333] nvidia: module license 'NVIDIA' taints kernel.
[ 1.230335] Disabling lock debugging due to kernel taint
[ 1.235547] NVRM: loading NVIDIA UNIX x86_64 Kernel Module 352.21 Tue Jun 9 21:53:31 PDT 2015
[ 2.072087] NVRM: Your system is not currently configured to drive a VGA console
[ 2.072090] NVRM: on the primary VGA device. The NVIDIA Linux graphics driver
[ 2.072091] NVRM: requires the use of a text-mode VGA console. Use of other console
[ 2.072091] NVRM: drivers including, but not limited to, vesafb, may result in
[ 2.072092] NVRM: corruption and stability problems, and is not supported.
My hardware is a desktop with i7 4790K (4 cores with HT enabled) ASUS Z87-K motherboard, 32 GB Corsair 1600 MHz RAM. Samsung 850 PRO 1 TB SSD.
My inxi -F
System: Host: archie Kernel: 4.0.5-1-ARCH x86_64 (64 bit) Desktop: Xfce 4.12.2 Distro: Arch Linux
Machine: System: ASUS product: All Series
Mobo: ASUSTeK model: Z87-K v: Rev X.0x serial: 130612439103584
Bios: American Megatrends v: 1402 date: 11/05/2014
CPU: Quad core Intel Core i7-4790K (-HT-MCP-) cache: 8192 KB
clock speeds: max: 4400 MHz 1: 4000 MHz 2: 4002 MHz 3: 4000 MHz 4: 4000 MHz 5: 4256 MHz
6: 4001 MHz 7: 4002 MHz 8: 4002 MHz
Graphics: Card: NVIDIA GM206 [GeForce GTX 960]
Display Server: X.org 1.17.2 driver: nvidia tty size: 108x41 Advanced Data: N/A for root
Audio: Card-1 Intel 8 Series/C220 Series High Definition Audio Controller driver: snd_hda_intel
Card-2 NVIDIA Device 0fba driver: snd_hda_intel
Sound: Advanced Linux Sound Architecture v: k4.0.5-1-ARCH
Network: Card: Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller driver: r8169
IF: enp3s0 state: up speed: 1000 Mbps duplex: full mac: <masked>
Drives: HDD Total Size: 1024.2GB (4.4% used) ID-1: /dev/sda model: Samsung_SSD_850 size: 1024.2GB
Partition: ID-1: / size: 48G used: 13G (27%) fs: ext4 dev: /dev/sda3
ID-2: /home size: 769G used: 154M (1%) fs: ext4 dev: /dev/sda4
ID-3: /boot size: 511M used: 25M (5%) fs: vfat dev: /dev/sda1
ID-4: swap-1 size: 33.55GB used: 0.00GB (0%) fs: swap dev: /dev/sda2
Sensors: System Temperatures: cpu: 29.8C mobo: 27.8C
Fan Speeds (in rpm): cpu: N/A
Info: Processes: 172 Uptime: 10 min Memory: 1133.0/32119.5MB Client: Shell (sudo) inxi: 2.2.25
Have I missed something to post?
Last edited by dockland (2015-06-17 20:30:48)

I read that this line in my case
[ 1.115441] ACPI Warning: SystemIO range 0x000000000000F000-0x000000000000F01F conflicts with OpRegion 0x000000000000F000-0x000000000000F00F (\_SB_.PCI0.SBUS.SMBI) (20150204/utaddress-254)
is a bug and unfixable.
What does that mean and why is it "unfixable"? Is that some hardware that is not compatible with Arch at all?

Issues with Approval Task IN IDM 7.1

Hi,
I have been facing issues with Approval task.
Firstly,
I have created an Approval task with 'Mskeyvalue' and 'Mxref_mx_privilege' as attributes.
I am having a problem in the Approvers workflow UI where, we see these approvals.
It not only displays the requested privilege,but also the already provisioned privileges of the enduser to the approver.
He will not be able to recognize which privilege has been requested.
Is this an already known issue which has been sorted out in recently updated patches?
If not can you suggest me a solution for this.
Secondly,
The privilege requested by the end-user is getting provisioned to the backend,even before it is Approved.
Since Provisioning tasks are mapped through repository,privileges are getting provisioned as soon as
an entry is made into the Identity Stores.
But,Ideally the requested privilege should not be proviosioned to the backend until it is approved by the Approver.
Is this an already known isuue which has been sorted out in recently updated patches?
If not can you suggest me a solution for this.
Thanks and Regards,
Joel
Edited by: Joel Sundararajan Davis on Jul 16, 2009 11:04 AM

Joel,
I'm afraid the approval process is not quite this simple. You are correct, if you have provisioning setup on the repository for a privilege it will be assigned immediately. The approval task as you are using it works as an 'interrupt' to a process - nothing more.
There is an entry type called pending value that you would need to leverage in order to have privileges requested route for approval. This pending value object is created by default for role requests in 7.1, but I'm not sure how to create a pending value for a privilege.
Which brings to mind a question - is there a reason you want users to request privileges instead of roles? In general I think the security model is setup so that users are assigned roles which contain one or more privileges.
If you do choose to use a role instead of privilege, simply set the attribute MX_APPROVAL_TASK to the id of the approval task you want to use and the system will do the rest. The display you referenced in the first part of your question will always display the current values of the attributes you select for the user, so don't try to display the roles there - just display the user id, name, whatever else is helpful and when the approver clicks on the user id they will get the approval details which will include the requested role.
Also, please note that if you would like to assign a role directly anywhere (bypass approvals) you can use the switch: {direct_reference=1}
-Geoff

UP issue with Disallowed attribute

Similar Messages

Maybe you are looking for