User import OD

Hi,
We're planning to automatically add/remove/modify accounts (with passwords) in OD using our identity management system. What is the options regarding managing accounts by ldap (ldif), command line, file import?
Frode

I'd recommend looking at the dsimport command as a first choice -- it can bring in user records (including passwords) from a delimited file fairly straightforwardly, and if you run it in O (overwrite existing records) or M (merge with existing records) mode, should be able to handle updates as well.
Other options include:
• Using dscl to create/edit user records -- but you'll essentially have to run a long series of commands to set each of the users' properties individually
• Using ldapadd and/or ldapmodify (depending on whether you're creating or updating user records) -- but this won't handle password setup (you'll have to create the password server entry with something like slapconfig -settopasswordserver)
See http://discussions.apple.com/message.jspa?messageID=10903140 for some previous discussion on the topic.

Similar Messages

Knowledge Center User Import Utility Password Issue

Hello,
I have imported some users using an Text File but the users are having trouble logging into their accounts in the Knowledge Center.
"Login Invalid. Please verify your Username and Password."
I have already checked the user properties, and it's okay.
The Text file looks like this:
USERNAME
PASSWORD
FIRSTNAME
LASTNAME
MINIT
EMAIL
NTINTEGRATED
USERGROUP
upkuser
user01
Name
Lastname
L
group01
If I change the password in the user properties, the users can access Knowledge Center.
Do I need to change the password for every imported user?
Many thanks.

Hello Sumeet,
You are right in saying 'The issue happens when importing from a text file. The User Import Utlity makes all passwords lower case.'
Oracle accepted this as a bug and provided me with patch Oracle Knowledge Base with ID 18328709. and the issue is resolved.
Thanks and Regards,
Jayraj

Knowledge Center User Import Utility

Hello,
I have imported some users using an Excel spreadsheet but the users are having trouble logging into their accounts in the Knowledge Center.
"Login Invalid. Please verify your Username and Password."
I have already checked the user properties, and it's okay.
The excel spreadsheet looks like this:
USERNAME
PASSWORD
FIRSTNAME
LASTNAME
MINIT
EMAIL
NTINTEGRATED
USERGROUP
upkuser
user01
Name
Lastname
L
group01
If I change the password in the user properties, the users can access Knowledge Center.
Do I need to change the password for every imported user?
Many thanks.

Hello Sumeet,
You are right in saying 'The issue happens when importing from a text file. The User Import Utlity makes all passwords lower case.'
Oracle accepted this as a bug and provided me with patch Oracle Knowledge Base with ID 18328709. and the issue is resolved.
Thanks and Regards,
Jayraj

OIA 11gR1 + OIM 9.1.0.2 (BP12) Websphere class not found error user import

Hi All,
I am integrating OIA (11gr1) with OIM 9.1.0.2 (BP12) patch and have followed the steps mentioned in the Sys Integration. However when importing users from OIM, the following error is thrown - OIM is on Websphere, OIA is on Tomcat - Thanks for your inputs!!
rg.quartz.SchedulerException: Job threw an unhandled exception. [See nested exception: java.lang.NoClassDefFoundError: com/ibm/websphere/security/auth/callback/WSCallbackHandlerImpl]
     at org.quartz.core.JobRunShell.run(JobRunShell.java:213)
     at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:534)
Caused by: java.lang.NoClassDefFoundError: com/ibm/websphere/security/auth/callback/WSCallbackHandlerImpl
     at Thor.API.Security.LoginHandler.websphereLoginHandler.login(Unknown Source)
     at Thor.API.Security.ClientLoginUtility.login(Unknown Source)
     at Thor.API.tcUtilityFactory.<init>(Unknown Source)
     at com.vaau.rbacx.iam.oracle.OIMIAMSolution.getUtilityFactory(OIMIAMSolution.java:2542)
     at com.vaau.rbacx.iam.oracle.OIMIAMSolution.readResources(OIMIAMSolution.java:402)
     at com.vaau.rbacx.iam.service.impl.RbacxIAMServiceImpl.importResources(RbacxIAMServiceImpl.java:469)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
     at java.lang.reflect.Method.invoke(Unknown Source)
     at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)

(Because no1 else has given you a reply I will try and help ;-) )
Its obvious that you are missing a jar file, check if you have any of the following missing (This is for the 11g product though this could resolve your issue)
xlAPI.jar
xlAuthentication.jar
xlCache.jar
xlCrypto.jar
xlDataObjectBeans.jar
xlDataObjects.jar
xlLogger.jar
xlScheduler.jar
xlUtils.xls
xLVO.jar -----> All from WebSphere directory into the WEB-INF/lib
Check the documentation also and see if you were meant to transfer the right .jar files over
Regards,
Daniel
Edited by: Daniel Redfern on Feb 7, 2011 2:28 PM

ISync palm conduit in 10.5 - won't work under user imported from 10.4?

My Palm m500 was syncing fine with my PowerBook G4 running Mac OS 10.4
I recently got a spiffy new MacBook Pro (Penryn) with 10.5, and although the Palm does communicate and sync via Palm Desktop, it no longer syncs via iSync with iCal & Address Book. I keep getting the following in the hotsync log:
< snip >
OK Install
iSync Conduit starting 3/13/08 10:38:34 PM
iSync Conduit: received NULL message, disconnecting...
OK iSync Conduit
</ snip >
==========
Other info:
I imported the user info for my main user from the old 10.4 installation using Migration Assistant.
• Deleted old Palm HotSync & Desktop files from the username:Library:Application Support, as palm preference files from username:Library:Preferences
• Copied the old user folder to an alternate location, and removed the Palm folder from username:Documents:
• Re-installed Palm Desktop 4.2.1 under main user (authorized as an "administrator" temporarily)
• Sync worked (no data on Palm Desktop, but everything backed up ok), HotSync even recovers and creates a new user based on the data on the device, and even backs up all the programs.
• Enabled Palm Os Syncing from within iSync (works fine, so long as the account being used has read/write permissions to HD:Library:Application Support:Palm HotSync:Conduits)
• "Enable iSync for this palm device" from the iSync conduit within HotSync Manager.
During a sync, iSync kicks in and "connects", but can't get past AddressBook syncing, and never actually sends info to the Palm device. Presumably, this is where the "NULL message" is received and syncing stops. When I specify "Erase data on device then sync" in iSync (for first syncronization), it does indeed erase address book data on the device, but never sends anything to replace it, but also does not touch the calendar data on the palm device.
Furthermore, I tried the same procedure when logged in as another administrator account (what is normally the main administrator account on this computer), and synced first without iSync, then enabling "iSync for this Palm device". Under this other account, the syncing works. I can add events to iCal, and contacts to address book, and they are transferred sucessfully and synced with the palm device. But it still does not work when logged in as the main user (even when administrator privileges are enabled, which I normally don't want), which actually has all my iCal and Address book data (which syncs successfully through .Mac with my computer at work).
There should be plenty of free space on the device for all my calendar & contact data (3MB).
Given that syncing DOES work for one administrator user (which was never before set-up for this), but not for the user that was imported from 10.4 and was syncing successfully before, I have a suspicion that there's either some leftover files that I missed, or a permissions conflict within the user's home folder that I am missing. Has anyone else been able to resolve this issue, or have any suggestions based on this information?
Much appreciated.

Experimentation reveals that:
• replacing the old addressbook data with blank allows syncing to work without problems.
• having multiple groups causes the same error: BUT only on the first sync (set to “Erase data on device then sync”, but also if set to “merge”). Adding groups after a successful initial sync did not interfere with further syncs.
• deleting groups from existing AddressBook data does allow a successful first sync.
• but adding them back in again breaks the sync.
Having no groups would seem to allow a successful sync.
see http://discussions.apple.com/thread.jspa?messageID=6805570&#6805570
I don’t want to have to limit myself to this. I do use groups rather a lot and it would be frustrating to have to give up using them just so I can sync my Palm in Leopard.
The following does NOT solve the problem:
1. Move old Address Book data to a backup location (after exporting AddressBook library)
2. do a first sync
3. re-import full Address Book data from archive
4. continue with regular syncs.
• only sync one Group still leads to the same error.
• iSync 2 doesn’t run under Leopard (error message along the lines of “You can’t use this software with this version of Mac OS”).
• I also tried to use the previous iSync palm conduit (v3.0.2 instead of v3.1.0), but got the same errors.
For now, I removed all the groups and synced my contacts to my Palm, but I then turned off syncing for contacts within iSync, so I could recover all my Address Book Groups. Fortunately, I need to update Calendar information more often than contact info, and I won’t be able to change contact info on the Palm device. When I do want to do a periodic update to my Palm device, I will have to:
1. Backup my address book
2. Delete all groups (but not the contacts within them, which stay in the library itself)
3. Turn contact syncing on in iSync
4. Sync the Palm device
5. Turn contact syncing OFF in iSync
6. Recover my Address Book Library & groups from backup
Not as simple as I would expect from Apple software ... I hope this issue gets fixed in iSync 3 (Leopard).

"Role not defined for individual users" on user import

Hello,
I am trying to import a certain user from one portal to another and I get this warning message:
"Role <pcd_role_path> not defined for individual users."
This role is assigned to this user at the 1st portal and exists at the 2nd portal at the same location.
What does it mean and what do I need to do in this case?

hi Roy,
just check one thing ....
please check wether the user have permissions to those roles.
please go to the PCD location, where the roles have defined.
right click on the role and check permissions.
see if the user you are using is mentioned there. if no, add your user with read/write end user permission.
i hope this will help you .
Regards,
Sujay

Can a user Import/Export Email from IMS?

VER: IMS 5.2
OS: NT4
Q: Is there any way to import/export email from a user's account?

What do you want to import/export from?
I think you can do a dump of someone's mailbox using the imsbackup utility, but am not sure what format this gives you. Probably you can only import this into another iMS server.
Apart from that, you could look at what tools your mail clients have for saving and importing messages. I think Outlook express has an archive utility that you could use. To import from Outlook to the server, you could use the iPlanet sync tool. This will synchronise in both directions between the iMS mail server and various clients. These include Outlook, Windows CE handhelds, palms, etc. Basically, if you set this up to synchronise with Outlook, then you can import/export using anything that will interface with Outlook.
Of course you don't have to use Microshaft products. You could use any mail client to do this. Not sure about synching with other clients cos we've not done it.
I'm not sure how you can get hold of this synching tool. There were various beta versions floating around about a year or so ago and I would have expected that they would have released a supported version by now. Then again.....

Workspace users Import

hi all
we are usin Oracle Apex 3.1
I have to import the Workspace users to another Server with Apex 3.1,
the Workspace is created with the same name
any Help please

Hi,
Have a look at: [http://download.oracle.com/docs/cd/E10513_01/doc/apirefs.310/e12855/apex_util.htm#insertedID20]
This allows you to download the script that can be used to create users in another workspace.
You can get a list of users using:
SELECT * FROM APEX_WORKSPACE_APEX_USERSAndy

ACS 4.2 users import

hi ,
i want to import users to ACS 4.2 with the static ip address assigned to every user.
i have found the format of the file to add users but i did not find how can i add the static ip to this file.
ADD:Dchira:CSDB:backup:PROFILE:4

Hi,
You can use RDBMS Synchronization to do the same. The attribute 150 "SET_STATIC_IP" can be used for this.
Please check http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4-2/user/guide/ACS4_2UG/A_RDBMS.html
Do rate if Helpful
Regards,
Kush

CUP user import: what XML field to use to set default ACLs for user?

Can someone please tell me what XML tags to use within the import file (via CUP) to set the default Document and Folder ACLs respectively to Public and Protected.
Thanks!
Brian

brian,
did you ever figure out how to assign default ACL to a user using XML? if so, could you show me how to do it? thanks

OD User Import Problems

Hi all
I have a file that will import users which works fine, all users get created as expected.
however as soon as i try and apply a preset during the import process to set home drive paths ect ect it make any user that gets imported full admins????
and i know there is nothing wrong with the template as if i create an individual user with the preset it works fine, i have tried this with server presets and have checked them multiple times and everytime they look fine but when I use them to import user they all get created as admin.
I used this system fine last year in 10.5.7 but now after updating to 10.6.2 we are getting this issue.
any suggestions?

I'd recommend looking at the dsimport command as a first choice -- it can bring in user records (including passwords) from a delimited file fairly straightforwardly, and if you run it in O (overwrite existing records) or M (merge with existing records) mode, should be able to handle updates as well.
Other options include:
• Using dscl to create/edit user records -- but you'll essentially have to run a long series of commands to set each of the users' properties individually
• Using ldapadd and/or ldapmodify (depending on whether you're creating or updating user records) -- but this won't handle password setup (you'll have to create the password server entry with something like slapconfig -settopasswordserver)
See http://discussions.apple.com/message.jspa?messageID=10903140 for some previous discussion on the topic.

Users imported to WGM via Passenger can't open Office. Users created with WGM can.

Title says it all. Has anyone seen this before? I've heard rumors about passenger having some odd problems but it's always worked well for me. Until now. And I need it working yesterday. Any ideas please? Thanks!

Best practice I have learn these days is: Create new Template_User set him everything what you need from imported users like pass, mail, groups etc. and then import users from exported script using as template your new template user. Then you must tell your users to change pass on first login. All done without problems in cca 2 days .

Ldap users import with access group

Hi,
I have callmanager 10.5 with LDAP. I want to import users and assign thse users to an access controll group (like ccm enduser etc)
I configure, I import the users, but they are not member of an access controll group and I have to do it still manual.
Not so much work, but why doesn't it work?
Any one else seen this?
JH

Did you add the Group information to the System > Ldap directory settings? In CUCM under the LDAP Directory you're sync'ing with you want to add the Standard CCM End Users to the "group information" for that directory before you sync.
If you sync first, then add the groups it it will only apply the groups to newly created users.

SCOTT의 데이타를 LARRY로 옮기는 방법(다른 USER로 IMPORT)

제품 : ORACLE SERVER
작성날짜 : 2003-05-16
SCOTT의 데이타를 LARRY로 옮기는 방법
===================================
scott의 데이타를 larry 로 옮기려면 export/import 를 이용해야 한다.
larry가 만들어져 있지 않다면 다음과 같이 만든다.
$sqlplus system/manager
SQL>create user larry
identified by lion
default tablespace users
temporary tablespace temp;
default tablespace, temporary tablespace 는 시스템에 따라 알맞게 설정한다.
다음과 같이 larry에게 권한을 부여한다.
SQL> grant connect, resource to larry;
SQL> revoke unlimited tablespace from larry;
SQL> alter user larry quota unlimited on users;
물론 users 테이블스페이스는 이미 존재한다고 가정한다.
scott로 export를 받고 larry로 import한다.
$ exp scott/tiger file=scott.dmp
$ imp larry/lion file=scott.dmp fromuser=scott touser=larry
만약 scott 가 dba 권한을 갖고 있었다면 다음과 같이 import를 해야 한다.
$imp system/manager file=scott.dmp fromuser=scott touser=larry commit=y
만약 import 도중 연속된 저장 공간이 부족해서 에러가 발생한다면 익스포트를
받을 때 compress=n 옵션을 사용하며, import 시 롤백 세그먼트 문제가 발생
한다면 import 시 commit=y 옵션을 사용하면 쉽게 해결이 가능하다.

User import error

Hi experts,
I have created the user in portal in user administrator->identity management
after that i have exported the user in to text file. here in the portal i am not getting the full details of the user means only general info i am getting.
now i have imported the user by changing the id in the text file.
here i am getting the failure message as
Error: Failed while committing because of BAPI_USER_CREATE1@JEDCLNT800: ID=01, NUMBER=364, MESSAGE=You do not have authorization to maintain users in the central system.
can any one help me to how to rectify this.
regards,
viswa

Hi,
It seems you don't have the required authorizations to create users in the Central User Administration (CUA).
You'll have to log in the CUA with your portal user and launch transaction su53 to see which authorization objects are needed to create a user.
Regards,
Pierre

User import OD

Similar Messages

Maybe you are looking for