User authenticaion failed after ADS connection

Hi,
We have a problem where the same user ID exists both in the Portal and LDAP.
I can see both(from LDAP and UME db) in the Portal with same logon ID. Now the user is not able to logon to the portal with any of the password. The config for ADS is
Data source = Micrsoft ADS (Deep Hierarchy) + Database
Data Source File name = dataSourceConfiguration_ads_deep_writeable_db.xml
Another problem is I cannot create new users in the Portal or copy from existing users.
Help me to resolve it.
Thanks
Jimmy

Hi Jimmy,
Then first remove the AD server from your portal configuration and give default settings for your data source as given below:
Data source = Database
Data Source File name = dataSourceConfiguration_database_only.xml
Once you do this ,restart your portal server and create users in portal database and delete the duplicate entries.
remember once you delete all your duplicate Login-ids you can reconfigure your
AD server with old datasource settings and everything should be fine.
Hope it helps.Reward points if Helpful
Regards
Rani A

Similar Messages

AD MA Large Group (9000+ users) export failing due to connectivity timeout:: cd-connectivity-error

I am currently implementing FIM 2010 in a test environemnt. I have MAs connected to the FIM Portal, an Oracle view, AD, and eDirectory 8.8SP6. All agents are working fine, users attribute flow is working great to all connected systems and groups are flowing
into the MV without issue. I have a few criteria-based groups in the FIM portal that I am synchronizing to AD. All but one of those groups is synchronizing correctly. The failing group contains by far the most members of any group I've attempted to export
so far, numbering around 9000 members. The only error I receive on an export run on the AD MA is "cd-connectivity-error" for the group object itself and the agent shows a run status of "dropped-connection." Event Viewer simply shows:
The management agent "Test Active Directory MA" failed on run profile "Export" because of connectivity issues.
Additional Information
Discovery Errors : "0"
Synchronization Errors : "0"
Metaverse Retry Errors : "0"
Export Errors : "1"
Warnings : "0"
User Action
View the management agent run history for details.
While 9000 members in a group is not insubstantial I can't help but feel like this should work. Are there configuration changes I need to make to AD in order to allow a longer timeout on the connection itself? I have tried increasing the timeout on the export
run profile without success. Any guidance would be greatly appreciated.
~Jeff

@Evgeniy Oddly enough, that is exactly the timeout change I made - 300 seconds. I am currently populating the group throung the FIM Portal. It's a criteria-based group. Basically I am taking every employee status type (we have ~12 of them) and I am creating
sub-groups for each. The largest one of these is the one I'm timing out on. The second largest one has ~2500 members and functions as expected. If I need to change this to provision with .dll code I certainly can - I was just hoping to provide some transparency
for our support staff and my fellow admins on these groups.
@Carol Good idea. I will do just that. I have 2 DC's isolated in a site with an exorbitantly high site link cost specifically to service our LDAP clients and other back end services. Those 2 DC's also happen to host the majority of our FSMO roles here as
well. I'll hardocde the link to one of those DC's and report back.
As a secondary question, would it be better perhaps if I simply used set transitions on the user accounts to individually add them to these groups? I don't plan on using employee status for any other functions beyond this one so it seems like it may be more
complicated to go that route but it may also be more stable.
Thanks for all the great replies! I'll keep you posted.

A connection attempt failed because the connected party did not properly respond after a period of time

Prior to the Increase Capacity for Outbound Network Calls update, my Azure websites running in
Standard mode experienced occasional connection attempt failed errors. Since this update the errors stopped but starting on 12/30/14, these errors started up again on both
South Central and East regions:
"A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond [IP]:80"
It occurs when attempting to consume an external web service over HTTP. This issue is not reproducible on our local environments nor did it occur with our previous shared hosting provider.
On Azure, the same web service call can result in this error or will return a response successfully.
There doesn't appear to be any pattern as to why the same call would work one time but not another.
How can this be resolved again? Any feedback is appreciated. Thanks.

Hi,
Please have a look at this article:
http://blogs.msdn.com/b/narahari/archive/2011/12/21/azure-a-connection-attempt-failed-because-the-connected-party-did-not-properly-respond-after-a-period-of-time-or-established-connection-failed-because-connected-host-has-failed-to-respond-x-x-x-x-x-quot.aspx,
it gives us several ways to solve this issue, hope this helps.
Best Regards,
Jambor
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Connection to host as user oracle9i failed

Examine and correct the following errors, then retry the operation:
Error - Connection to host as user oracle9i failed: Received unexpected response text : <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> <HTML><HEAD> <meta http-equiv="Content-Type" content="text/html; charset=windows-1251"> <TITLE>��: �� </TITLE> <STYLE type="text/css"></STYLE> </HEAD><BODY> <H1>��</H1> <H2> �� </H2> <HR noshade size="1px"> <P> �� : http://rx4640:1830/emd/main? <P> �� : <BLOCKQUOTE> �� IP �� <I>rx4640</I> </BLOCKQUOTE> <UL> <LI> <P> �� : <BLOCKQUOTE> Name Error: The domain name does not exist. </BLOCKQUOTE> </UL> <P> �� , ��: <PRE> �� , �� . ��

user5616408 wrote:
1.Which domain - db domain or network domain.
2.How to correct the error?It would seem that you are supplying a URL - this then returns an HTML error response. This response says "+domain name does not exist+".
As you provide no info on how you are making this HTTP call, and the fact that you are not getting a HTTP response code error, but a response page... the assumption is:
a) you are reaching the web server as specified in the URL
b) the web server is returning the error page
c) the error related to the web server not being satisfied with the data supplied (or obtained) via that HTTP command it received - for example the query string may fail validation (hostname without a domain name), the command itself may not have a valid referring domain, etc.
Also as the error response include "+http://rx4640:1830/emd/main?+" (one of the few text strings that are readable on my browser from that error response you have posted), it would seem that the web server expects fully qualified hostnames. I.e. hostnames need to include a domain name. And this URL refers to host "+rx4640+" and does not include a domain qualifier.

ACS v5.1 - Can internal users be disabled after x failed attempts?

I have noticed under authentication settings for internal user accounts there is no setting to disable the account after x number of failed attempts (ACS v5.1). This is such a fundamental requirement for user accounts that I am wondering whether I have missed something. (They include this option on Administration accounts)
Does anyone know if can this be set somewhere else or is Cisco going to implement it in a later version?
Many Thanks

Hello jrabinow ,
Thanks a lot for the reply .
We already have our AD setup to lock account of users who failed 3 consecutive windows login attempts .
However when network administrators fail to login after 3 consecutive attempts into a network device, they can still login into a network device if they provide their correct AD credentials .
Is there any specific configuration that needs to be done on the AD to be aware of the failed login attempts on the network devices and count it the same as a failed windows login attempt ?!
Kind Regards ,
Moussa

Face Time keeps failing after connecting

Face Time was working fine but now failing after connecting.
Calling IPad 2 with mac Book Pro and I Phone 4s.

The description of your problem indicates that your Lan/wi fi network MAY be the culprit because a video chat system requires lots of bandwidth, since large amounts of data need to be transfered back and forth on your system. You may be suffering from wifi interference from neighboring networks, in which case you need to change your wifi channel to another clear channel. Also, your network may have slowed down for a number of other reasons. To operate Facetime effectively using Wifi, you need a recent generation of wireless router for best results, such as an 802.11n capable unit.

Mobile connection fail after updating apple 4s to ios 6.1.3

Mobile connection fail after updating apple 4s to ios 6.1.3
intertnet and other online applications are not working after updating to apple iphone 4s to ios 6.1.3
what is the solution for this......

try resetting your network settings.
Settings.app -> General -> Reset - > Reset Network Settings
CMIIW

ODBC connections fails after going from Office 2003 to 2010 on some but not all PCs

ODBC connections fails after going from Office 2003 to 2010 on some but not all PCs. Setting up the connection has been a hit and miss. Have tried both x86 and x64. Any ideas? Use ODBC from the control panel and C:\Windows\SysWOW64 same results. Using
SQLexpress 2008r2
Thanks

Hello,
Please consider to configure Windows Firewall or disable it. Not only Windows Firewall but any security software.
https://msdn.microsoft.com/en-us/library/cc646023(v=sql.120).aspx
Windows Firewall is enabled by default.
Make sure you are using SQL Server Native Client to create the ODBC DSN. Not all Windows versions have it, so you may need to download and install it.
Hope this helps.
Regards,
Alberto Morillo
SQLCoffee.com

"User authentication failed" when connecting with Visual Administrator

Hello,
I am having trouble making a connection to my local J2EE Engine using the Visual Administrator (VA).
I open the VA interface and create a new connection. The default User Name is "Administrator". I put in "localhost" for host, "50004" for port and leave the Transport Layer selection to "Default".
When I try to connect this way I get the following message:
User authentication failed
Next I went into Start|Settings|Control Panel|Users and Passwords and saw that there were several ids created by the Developer Workplace (DW) installation. The ids that I see are: j2eadm,sapadmin,sapinstall and SAPServiceJ2E
I checked all of them to see what groups they're members of and they're all at least members of "Administrators" group.
There are also 3 new groups that must have been created by the DW installation: SAP_J2E_GlobalAdmin, SAP_J2E_LocalAdmin and SAP_LocalAdmin.
The j2eadm id belonged to all 3 new sap groups so I changed its password to something I'd remember and then changed the connection to use that login.
When I tried to connect thru VA using this id and the new password I still get the "User authentication failed" error message.
Can anyone please tell me what I'm doing wrong?
Thanks in advance for any help.
David.

Hi,
During the installation the SAPINST asks for a Administrator Password.. This password is very important.
We had kept same passwords for all userids to start with.
This helped reduce lot of confusion.
Warning: if you enter the wrong password 5 times, the userid 'Administrator' gets locked.
However there is an Emergency password recovery procedures.
Try this link
http://help.sap.com/saphelp_erp2004/helpdata/en/3a/4a0640d7b28f5ce10000000a155106/frameset.htm
Hope that helps
Regards,
Siddhesh

Connection to host as user administartor failed

hi all
i am not an oracle DBA but have to perform some task on oracle server.
Dear all,
I have a problem when using host credential (operating system login
credentials) for utility like backup, recovery setting.
When I entered the username and password then occured like "Connection
to host as user "username" failed: ERROR: Wrong password for user"
The username and password is true, I used it for login to windows (my
window is Windows XP Professional )

yes i am an ora_dba user
and i am tryong to perform this in EM.
Below is the contents of sqlnet.ora file
# sqlnet.ora Network Configuration File: D:\oracle\product\10.2.0\db_1\network\admin\sqlnet.ora
# Generated by Oracle configuration tools.
# This file is actually generated by netca. But if customers choose to
# install "Software Only", this file wont exist and without the native
# authentication, they will not be able to connect to the database on NT.
SQLNET.AUTHENTICATION_SERVICES= (NTS)
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
reards
imran

Provisioning user to AD failing after upgrading AD Connector

Hello,
I am facing issue while provisioning user to AD after i upgraded AD connector from 9.1.1.5 to 9.1.1.7, upgradtion successfull message was shown & when i tried to provision a user to AD it shows CreateUser task is rejected & following is the response shown
Response: com.thortech.xl.integration.ActiveDirectory.tcUtilADTasks.createADorADAMUser(java.lang.String, bool
Response Description: Unknown response received .
Error Details
Setting task status... "com.thortech.xl.integration.ActiveDirectory.tcUtilADTasks.createADorADAMUser(java.lang.String, bool" does not correspond to a known Response Code. Using "UNKNOWN".
Above response means its not able to find CreateAD which creates user in AD ?
Thanks,
Rahul
Edited by: Rahul Shah on Jun 12, 2012 9:52 PM

1- Follow the Postupgrade Steps mentioned in the connector documentation.
2- Check if connector has been upgraded successfully and also verify active version from OIM Database table - CIH
3- Check the jar file modified date in OIM database table i.e. oimhome_jars; it should be same as connector modified date in DB table CIH.
4- Modified date in previous step is not correct then upload the jar file using Uploadjar utility available under <Middleware>/Oracle_IDM1/server/bin/
5- Restart OIM and test the provisioning.
Thanks,
Hardew

Copy command fails after installing Raid system and new user accounts

Any help is appreciated. We installed a Raid to an existing Xserve at our school. We have created new accounts on the server.All other commands such as observe, control, sending messages and so works OK.
When I try to copy files, pictures, and so on... it immediately fails. It gives me no explanation or anything.
Any help?

Hi Tilly,
We had this same exact problem at our school. Copying to network users always failed, everything else worked fine.
We changed the owner of the Sharepoint where the student accounts reside from our Administrator user to 'Root'
We changed this through Workgroup Manager -> Sharing, selected the Sharepoint in the left column, clicked on the Access tab and changed the owner to 'root' and click save.
Also found this link:
http://lists.apple.com/archives/remote-desktop/2007/Nov/msg00009.html
Hope this helps!

Connect to database failed,rc=-10709 Connection failed (RTE:Database name)

Hi gurues, I'm facing this issue with an IDES on MaxDB with Windows.
System was up and running until someone tries to make an upgrade of the kernel. Since then we can not start our system. we tried to rollback kernel release to the previous one but it didn't work.
When we start our system from MMC console we can see all process in green but work processes are in RUN state and after a few minutes they goes down with the following error
trc file: "dev_w0", trc level: 1, release: "701"
ACTIVE TRACE LEVEL           1
ACTIVE TRACE COMPONENTS      all, MJ
B
B Mon May 16 23:57:31 2011
B create_con (con_name=R/3)
B Loading DB library '
sirillium1\sapmnt\SED\SYS\exe\uc\NTAMD64\dbsdbslib.dll' ...
B Library '
sirillium1\sapmnt\SED\SYS\exe\uc\NTAMD64\dbsdbslib.dll' loaded
B Version of '
sirillium1\sapmnt\SED\SYS\exe\uc\NTAMD64\dbsdbslib.dll' is "700.08", patchlevel (0.24)
B New connection 0 created
M sysno      00
M sid        SED
M systemid   562 (PC with Windows NT)
M relno      7010
M patchlevel 0
M patchno    32
M intno      20020600
M make:      multithreaded, Unicode, 64 bit, optimized
M pid        212
M
M kernel runs with dp version 241000(ext=110000) (@(#) DPLIB-INT-VERSION-241000-UC)
M length of sys_adm_ext is 576 bytes
M ***LOG Q0Q=> tskh_init, WPStart (Workproc 0 212) [dpxxdisp.c   1348]
I MtxInit: 30000 0 0
M DpSysAdmExtCreate: ABAP is active
M DpSysAdmExtCreate: VMC (JAVA VM in WP) is not active
M DpShMCreate: sizeof(wp_adm)          22784     (1752)
M DpShMCreate: sizeof(tm_adm)          5912704     (29416)
M DpShMCreate: sizeof(wp_ca_adm)          24064     (80)
M DpShMCreate: sizeof(appc_ca_adm)     8000     (80)
M DpCommTableSize: max/headSize/ftSize/tableSize=500/16/552064/552080
M DpShMCreate: sizeof(comm_adm)          552080     (1088)
M DpSlockTableSize: max/headSize/ftSize/fiSize/tableSize=0/0/0/0/0
M DpShMCreate: sizeof(slock_adm)          0     (104)
M DpFileTableSize: max/headSize/ftSize/tableSize=0/0/0/0
M DpShMCreate: sizeof(file_adm)          0     (72)
M DpShMCreate: sizeof(vmc_adm)          0     (1864)
M DpShMCreate: sizeof(wall_adm)          (41664/36752/64/192)
M DpShMCreate: sizeof(gw_adm)     48
M DpShMCreate: SHM_DP_ADM_KEY          (addr: 000000000B2C0050, size: 6607136)
M DpShMCreate: allocated sys_adm at 000000000B2C0050
M DpShMCreate: allocated wp_adm at 000000000B2C2270
M DpShMCreate: allocated tm_adm_list at 000000000B2C7B70
M DpShMCreate: allocated tm_adm at 000000000B2C7BD0
M DpShMCreate: allocated wp_ca_adm at 000000000B86B450
M DpShMCreate: allocated appc_ca_adm at 000000000B871250
M DpShMCreate: allocated comm_adm at 000000000B873190
M DpShMCreate: system runs without slock table
M DpShMCreate: system runs without file table
M DpShMCreate: allocated vmc_adm_list at 000000000B8F9E20
M DpShMCreate: allocated gw_adm at 000000000B8F9EA0
M DpShMCreate: system runs without vmc_adm
M DpShMCreate: allocated ca_info at 000000000B8F9ED0
M DpShMCreate: allocated wall_adm at 000000000B8F9EE0
M
M Mon May 16 23:57:32 2011
M rdisp/queue_size_check_value : -> off
M ThTaskStatus: rdisp/reset_online_during_debug 0
X EmInit: MmSetImplementation( 2 ).
X MM global diagnostic options set: 0
X <ES> client 0 initializing ....
X Using implementation view
X <EsNT> Using memory model view.
M <EsNT> Memory Reset disabled as NT default
X ES initialized.
M ThInit: running on host sirillium1
M
M Mon May 16 23:57:33 2011
M calling db_connect ...
C
C DBSDBSLIB : version 700.08, patch 0.024 (Make PL 0.32)
C MAXDB shared library (dbsdbslib) patchlevels (last 10)
C    (0.024) Default value for max. input variables is 2000 (note 655018)
C    (0.024) Profile parameter to define max. input variables (note 655018)
C    (0.024) Switch SQLMODE after CREATE INDEX SERIAL (note 1267841)
C    (0.024) Input parameters for SQL statements increased (note 655018)
C    (0.018) Create index serial for MaxDB 7.6 (note 1267841)
C    (0.018) More trace in case of packed to string conversion error (note 1262799)
C    (0.016) R3trans export aborts with signal 6 (note 1262245)
C    (0.009) IA64 alignment errors (note 1245982)
C    (0.007) Support DB-Type 'SAP DB' by UPDSTAT (note 1225668)
C
C
C Loading SQLDBC client runtime ...
C SQLDBC SDK Version : SQLDBC.H 7.6.0    BUILD 007-123-091-175
C SQLDBC Library Version : libSQLDBC 7.6.5    BUILD 015-123-202-938
C SQLDBC client runtime is MaxDB 7.6.5.015 CL 202938
C SQLDBC supports new DECIMAL interface : 0
C SQLDBC supports VARIABLE INPUT data   : 1
C SQLDBC supports keepAlive indicator   : 0
C INFO : SQLOPT= -I 0 -t 0 -S SAPR3
C Try to connect (DEFAULT) on connection 0 ...
C *** ERROR => Connect to database failed, rc = -10709 (Connection failed (RTE:Database name is missing))
[dbsdbsql.cpp 137]
B ***LOG BV3=> severe db error -10709    ; work process is stopped [dbsh#2 @ 1203] [dbsh    1203 ]
B ***LOG BY2=> sql error -10709 performing CON [dblink#3 @ 431] [dblink 0431 ]
B ***LOG BY0=> Connection failed (RTE:Database name is missing) [dblink#3 @ 431] [dblink 0431 ]
M ***LOG R19=> ThInit, db_connect ( DB-Connect 000256) [thxxhead.c   1449]
M in_ThErrHandle: 1
M *** ERROR => ThInit: db_connect (step 1, th_errno 13, action 3, level 1) [thxxhead.c   10563]
M
M Info for wp 0
M
M    pid = 212
M    severity = 0
M    status = 0
M    stat = WP_RUN
M    waiting_for = NO_WAITING
M    reqtype = DP_RQ_DIAWP
M    act_reqtype = NO_REQTYPE
M    rq_info = 0
M    tid = -1
M    mode = 255
M    len = -1
M    rq_id = 65535
M    rq_source =
M    last_tid = 0
M    last_mode = 0
M    semaphore = 0
M    act_cs_count = 0
M    csTrack = 0
M    csTrackRwExcl = 0
M    csTrackRwShrd = 0
M    mode_cleaned_counter = 0
M    control_flag = 0
M    int_checked_resource(RFC) = 0
M    ext_checked_resource(RFC) = 0
M    int_checked_resource(HTTP) = 0
M    ext_checked_resource(HTTP) = 0
M    report = >                                        <
M    action = 0
M    tab_name = >                              <
M    attachedVm = no VM
M
M *****************************************************************************
M *
M * LOCATION    SAP-Server sirillium1_SED_00 on host sirillium1 (wp 0)
M * ERROR       ThInit: db_connect
M *
M * TIME        Mon May 16 23:57:33 2011
M * RELEASE     701
M * COMPONENT   Taskhandler
M * VERSION     1
M * RC          13
M * MODULE      thxxhead.c
M * LINE        10783
M * COUNTER     1
M *
M *****************************************************************************
M
M PfStatDisconnect: disconnect statistics
M Entering TH_CALLHOOKS
M ThCallHooks: call hook >BtcCallLgCl< for event BEFORE_DUMP
M ThCallHooks: call hook >ThrSaveSPAFields< for event BEFORE_DUMP
M *** ERROR => ThrSaveSPAFields: no valid thr_wpadm [thxxrun1.c   723]
M *** ERROR => ThCallHooks: event handler ThrSaveSPAFields for event BEFORE_DUMP failed [thxxtool3.c 261]
M Entering ThSetStatError
M ThIErrHandle: do not call ThrCoreInfo (no_core_info=0, in_dynp_env=0)
M Entering ThReadDetachMode
M call ThrShutDown (1)...
M ***LOG Q02=> wp_halt, WPStop (Workproc 0 212) [dpnttool.c   334]
We check several entries on this SDN site, and look for a lot of notes on the marketplace, and they always are related to default user in xuser files, but our xuser list output is ok. We have a DEFAULT connection to SAPSID user, a DBM connection to CONTROL user and a USERDBA connection.
XUSER Entry 1
Key         :DEFAULT
Username    :SAPSID
UsernameUCS2:S.A.P.S.E.D. . . . . . . . . . . . . . . . . . . . . . . . . . .
Password    :?????????
PasswordUCS2:?????????
Dbname      :SID
Nodename    :server1
Sqlmode     :SAPR3
Cachelimit :-1
Timeout
Isolation
Charset     :<unspecified>
XUSER Entry 2
Key         :c
Username    :CONTROL
UsernameUCS2:C.O.N.T.R.O.L. . . . . . . . . . . . . . . . . . . . . . . . . .
Password    :?????????
PasswordUCS2:?????????
Dbname      :SID
Nodename    :server1
Sqlmode     :INTERNAL
Cachelimit :-1
Timeout     :-1
Isolation   :-1
Charset     :<unspecified>
XUSER Entry 3
Key         :c_J2EE
Username    :CONTROL
UsernameUCS2:C.O.N.T.R.O.L. . . . . . . . . . . . . . . . . . . . . . . . . .
Password    :?????????
PasswordUCS2:?????????
Dbname      :SID
Nodename    :server1
Sqlmode     :SAPR3
Cachelimit :-1
Timeout
Isolation
Charset     :<unspecified>
XUSER Entry 4
Key         :w
Username    :SUPERDBA
UsernameUCS2:S.U.P.E.R.D.B.A. . . . . . . . . . . . . . . . . . . . . . . . .
Password    :?????????
PasswordUCS2:?????????
Dbname      :SID
Nodename    :server1
Sqlmode     :INTERNAL
Cachelimit :-1
Timeout     :-1
Isolation   :-1
Charset     :<unspecified>
Any idea? we are out of ideas at this moment.
Regards
Edited by: Gustavo Goicochea on May 17, 2011 6:37 PM

Natalia, this system was not resored nor copied, it was up and running before kernel update. We did some of the tests you said and someothers, here are some outputs.
We update kernel to release 142
R3trans -d and -x exit with (all with user SIDADM)
SVERS table does exist and belongs to SAPSID
dbmcli on SID>sql_execute select * from domain.tables where tablename='SVERS'
OK
END
'SAPSID';'SAPSID';'SVERS';'';'TABLE';'TABLE';'20100406';'00054637';'20100406';'00054637';'20100406';'00054638';'NO';(null);20000;(null);x'0000000000004842';'NO';'NO';'YES';'NO';(null)
Why it still says that SVERS table does not exist and SQL error 942?
C Now I'm connected to SAP DB
C 00: server1-SID, since=20110518015619, ABAP= <unknown> (0)
B Connection 0 opened (DBSL handle 0)
C *** ERROR =>   prepare() of C_0000, rc=1, rcSQL=-942 (POS(28) Unknown table name:SVERS) [
dbsdbsql.cpp 1604]
C *** ERROR => SQL PREPARE on connection 0, rc=-942 (POS(28) Unknown table name:SVERS) [dbslsdb.cpp 7253]
C sc_p=000000000CFAECC0,no=0,idc_p=0000000000000000,con=0,act=0,slen=34,smax=256,#vars=0,stmt=0000000002EA0AF0,table=SVERS
C SELECT VERSION INTO ? FROM SVERS ;
B ***LOG BZA=> table SVERS      does not exist on database            [dblink#4 @ 1301] [dblink 1301 ]
M ***LOG R19=> ThInit, db_connect ( DB-Connect 004096) [thxxhead.c   1515]
M in_ThErrHandle: 1
M *** ERROR => ThInit: db_connect (step 1, th_errno 13, action 3, level 1) [thxxhead.c   10824]
M
Users seem to be ok
dbmcli on SID>sql_execute SELECT username, usermode FROM users
OK
END
'CONTROL';'ADMIN'
'SUPERDBA';'SYSDBA'
'SAPSID';'DBA'
'SAPR3';'DBA'
User SAPR3 does not have anything on database
dbmcli on SID>sql_execute select * from domain.tables where owner='SAPR3'
ERR
-24988,ERR_SQL: SQL error
100,Row not found
Any idea?
regards

Unable to see Active Directory Groups in the User Profile Database after Profile Import

***Major Update - I have finally been able to get the direct attention of the folks responsible for the User Profile Service on the SharePoint Product Team. Long story short, they have reproduced the error and identified as an actual mistake
that needs to be fixed, so it is now officially in the bug pipeline and will be fixed. The current estimate is some time in the summer. They will keep me updated with timeframes, which I am allowed to share as time goes on.
SharePoint Server 2010 Enterprise RTM. W2K8R2 w/multi-server setup:
AD/DNS
SQL 2008
WFE
APP
Claims Mode Web App only using Windows Integrated Auth
So, this was never a problem in 2007, and I didn't even realize it was a problem in 2010 until I started to build a solution that utilized my blog article:
InfoPath - User Roles in Browser-Enabled Forms Using AD Groups. I went to utilize the same web method of the same web service, but I noticed that no data was showing up at all. Typically,
the GetUserMembership/GetCommonMembership methods return the specified user's memberships: AD Security Groups, AD Distribution Lists, and SharePoint Sites (not SharePoint Groups, though).
My user profile sync is working. All AD users are pulled in with the proper profile data.
"Users and Groups" is selected in the Synchronization Entities section of my Sync Settings.
Security groups are working for permissions and audience targeting. Confirmed my users are affected properly by the use of Security Groups.
My query to the GetUserMemberships web method (and GetCommonMemberships) is running (not failing), but it's not returning anything even though my user is in some Security Groups and has explicit membership to multiple sites.
The GetUserProfileByName method of the same UserProfileService.asmx web service
returns all the regular profile data like expected, so the web service works and my profile database is populated
Basically, I'm not seeing my AD groups or any membership data populated in the profile database. I did use MIISCLIENT.exe to see what I could find, and here is what I saw:
Using the Metaverse Search, I searched for the "person" type and saw all of the users in my profile sync connection (single OU)
Using the same tool, I searched for the "group" type and saw nothing, but the message said 4 items were retrieved
I realized that the only column showing was displayName, and they were blank, so I added other columns to be sure
objectGUID, objectType, distinguishedName all showed values, and I could now see all the Security Groups from the OU where I'm doing my profile sync
My "person" objects all have displayNames showing but none of the groups do. In SharePoint, the GetUserMemberships method relies on displayName and accountName, but neither are coming through the profile import
So, it does seem like the groups are coming in with the profile import, but I can't see them. I also can't verify that the groups are being associated with my users in the profile database, because doing a query to the membership methods returns nothing...not
even blank rows.
***Edit: New information! Regular AD Distribution Lists _do_ work properly. I just never bothered testing them until folks on my blog notified me. DLs come through the profile sync, are visible in the profile database, and show up
when using the GetUserMemberships method.
***Edit: Ok, now we're getting somewhere. I checked my last profile sync with the MIISCLIENT, and this is what I found:
Here are the properties of my Distribution List:
Here are the properties of my Security Group:
Notice that the groupType value of the DL is a normal integer (2), but the groupType value of the SG is some crazy negative number. Both types are still lacking DisplayNames for some reason, but when I retrieve the DL via GetUserMemberships, it DOES
show the proper DisplayName despite nothing showing in the MIISCLIENT.
SharePoint Architect || Microsoft MVP ||
My Blog

Hello Clayton,
I have same problem with SP 2010 and now I am testing SP 2013 and seems that the problem still.aa
Probably I have some configuration problem, but all seems work, except this.
SharePoint 2013 has no improvements on this. Until seeing this thread, I thought it was an issue within my farm configuration or AD Service account for User Profile Sync. And I've dug far and wide for any other possible settings which would prevent users
from populating in the site people-picker. This might be flagged as off-topic, but I'll beg differ. How can I expect SharePoint to retrieve AD Users and Groups for accuracy in the sites which rely on this server??? Frustrating. I've spent hours and days on
this! I have 3 SP2013 farms with multiple clients (different OU's/containers and security groups). Testing in a separate QA DEV farm with the same config. NO luck yet!
This is where I'm at with it (posted this as a question recently on SharePoint Stack Exchange):
"Help.... Please.... Users from AD groups are not populating in the site people picker. I've set up a SharePoint 2013 site collection permissions group with only AD groups in it, no users added directly. Whether or not I give this SharePoint group permissions
to the site content, I still get none of the AD users showing up in the people picker. I have done the iisreset after adding the groups.
I've checked all of the people picker properties in stsadm to be sure there are no constraints in effect on the web app or site collections. User profiles are synching and I've tried both AD import and User Profile Sync. The AD groups are security
groups, though not email-enabled. The AD service account has all the special permissions. My web app is claims based. My app pool runs with Network Service account. No policies in place to restrict users, checked CA and the site collection settings.
What am I missing? I've read in multiple places that this is a supported/working config. So why can't I get these users to populate in people picker for things like Assigned To in a tasks list, or attendees of an event? "
There is some pretty good insight here, but no real hope:
User profile
synchronization: importing users and security groups in SharePoint 2010
Other Properties that I checked, before realizing this was an issue with the Profile Import...
stsadm -o getproperty -pn siteuseraccountdirectorypath -url https://URL
stsadm -o getproperty -propertyname peoplepicker-activedirectorysearchtimeout -url https://URL
stsadm -o getproperty -propertyname peoplepicker-distributionlistsearchdomains -url https://URL
stsadm -o getproperty -propertyname peoplepicker-nowindowsaccountsfornonwindowsauthenticationmode -url https://URL
stsadm -o getproperty -propertyname peoplepicker-onlysearchwithinsitecollection -url https://URL
stsadm -o getproperty -propertyname peoplepicker-searchadcustomfilter -url https://URL
stsadm -o getproperty -propertyname peoplepicker-searchadcustomquery -url https://URL
stsadm -o getproperty -propertyname peoplepicker-searchadforests -url https://URL
stsadm -o getproperty -propertyname peoplepicker-serviceaccountdirectorypaths -url https://URL
Hope we find a better answer, as it IS very misleading. User Profile Import specifies Users, or Users and Groups. Nothing is said about Containers or Distribution Groups, worse yet there lacks any clear disclosure about how "Groups" will not
actually import if they are a Global Security Group and the users contained within them exclusively will NOT be included in your profiles,
nor in any compiled Audiences. Which was another BIG bummer!
I'm hoping to see future improvements on the Group imports.

User like SUPERVISOR doesn't connect to repository

Hello,
I have created a new master repository and am trying to connect to it via another user besides the SUPERVISOR one that was default when I installed ODI. I created this MASTER user, selected it as having supervisor priviledges. I also created a new repository as per the snps_setup.pdf file.
When I try to connect to a repository given SUPERVISOR and the schema I created, all is well. When I try to connect to a repository given the MASTER user (the one I created with SUPERVISOR priviledges) I get an error message: "Connection failed. Invalid User or Password (Security Repository Connection)... SnpUser does not exist."
As an aside when I created a new repository I didn't get to name it. I entered the jdbc info, the connection worked, I hit create and the script ran. But I never really saw it in the list of repositories. Not sure if this is related.
thank you in advance,
Carmen

Very well too....
I beg your pardon Carmen, I "eat" an "w" at my first question, should be:
"Do you have tWo Master Rep, right? "
I asked it because you told that "create a new work repository" but I think that you're just trying to change to a new Master Rep from the demo Master Rep... Is that right?
Any way, the Master Rep doesn't need an ODI User just a database user.
After create a new Master you need to change the technology (if it is the case), url, database user (schema) and password at Topology connection window.
You must connect with SUPERVISOR at first time and, then, create a new Work Repository and any new user that you could wish (MASTER as your example).
After the previous steps, open the Designer connection window and edit (or create) the connections parameters AND chose the Work Rep that you create...
Does it help you?

User authenticaion failed after ADS connection

Similar Messages

Maybe you are looking for