User not local

We are trying to send email to a domain that appears to have a configuration problem. The mail resolves to two servers:
Host Preference IP(s) [Country]
mail.neal-prince.com. 5 66.0.186.134 [US]
mail.itcdeltacom.net. 10 165.212.65.113 [US]
My C100 returns this error:
551 <JoeSixpack>... User not local (at 12 Sep 2007 14:46:11 (GMT)) IP:165.212.65.113
The Ironport wants to send to the 165.212.65.113 address which causes this error. Can I make it send to the 66.0.186.34 address?
I have contacted the ISP to see if they can fix the problem, just thought I'd do what I can to resolve it myself if I can.

Here are some diagnostic commands that you can perform from the command line (CLI) of the Ironport appliance. Once you've ssh'ed onto the command line with a terminal program like Putty.
tophosts --> Active Recipients(1)
- This displays messages in the delivery queue. Messages here have
already been scanned and is waiting to be delivered.
hoststatus --> domain (i.e. yahoo.com, stetson.edu)
- This provides some information about the mailserver and if they are
up or down.
delivernow
- Will try to immediately re-send all mail that was previously deferred and sitting in the delivery queue.
- nslookup
To perform hostname, MX records and IP addresses of a domain
In your case, "hoststatus" would be useful since it will display the MX records and IP addresses near the bottom of the 'hoststatus' output.
For example,
nslookup
Please enter the host or IP address to resolve.
[]> neal-prince.com
Choose the query type:
1. A the host's Internet address
2. CNAME the canonical name for an alias
3. MX the mail exchanger
4. NS the name server for the named zone
5. PTR the hostname if the query is an Internet address,
otherwise the pointer to other information
6. SOA the domain's "start-of-authority" information
7. TXT the text information
[1]> 3
MX=mail.itcdeltacom.net PREF=10 TTL=1d
MX=mail.neal-prince.com PREF=5 TTL=1d
I noticed that there is a Time to Live (TTL) of 1 day for the hostname before it clears the cache. To immediately clear the DNS cache and have the Ironport AsyncOS go out and obtain current MX and IP addreses, type the following:
dnsflush
by the way, you can get a snippet of information on how the command works by typing,
help
help dnsflush
--kevin
Hmmm, the fact that your C100 is going to the MX 10 destination instead of the MX 5 one probably means that the MX 5 destination is down, since smaller MX values are more preferred.
But to answer your question directly, you can use an SMTP route to force the mail to go where you want it. Use the "smtproutes" command in the CLI.

Similar Messages

  • Server login works just with Open Dir user not local user ?

    Hi,
    New to MAC server and trying to learn.
    I configured the server with a local account and then took into use the OpenDir
    service and made some new users.
    Now I can login an the server just using my OpenDir username NOT my local serveradmin username
    that was used when setting up the server.
    This is a login on the actual server itself - not remotely.
    Have I configured something wrongly or should this behave like this?
    Sincerely,
    DB
    Message was edited by: DominicusB

    No names are identical.
    Tried to look in the place where the login cridentials are
    configured (login options) and there was a searchpath "local" and "LDAP"
    so it seems to me that it's allright.
    Hope someone sees something obvious that I'm missing.
    I can login using one of the OD users and then authenticate when changing something
    on the server using the serveradmin username.
    Sincerely,
    DB
    Message was edited by: DominicusB
    Message was edited by: DominicusB

  • Users not able to print local (frontend)

    SAP users are not able to print LOCL (front-end). The error message found in SP01 is waiting for formatter. This is no dump on ST22 related to this problem. SM21 is clean as well. SM66 looks OK. There are plenty of spool work process in wait status (SM50). How to troubleshoot this problem?

    Hello.
    Is this an issue across all of the users?
    The way i would look into this is first look at the user in SU01. Does the user have local as the printer default and is print immediately checked?
    From there i would have a look at the spool using transaction SP01. Is this beginning to get full?
    If it is just specfic users is there any differences with the SAPGui's to someone that it works with? Does the users have SAPLPD coming up? This often gives a better error than the spool. If it is what is the error.
    Sorry if you have already looked into this but this is the process i always work through with printing errors
    Kind Regards,
    Emily
    Edited by: Emily Needham on Jul 28, 2009 3:24 PM

  • " User not authorized" error while deploying webdynpro application on WAS

    I am getting following error while deploying dyn pro application on WAS
    Error
    May 17, 2005 6:37:21 PM /userOut/deploy (com.sap.ide.eclipse.sdm.threading.DeployThreadManager) [Thread[Deploy Thread,5,main]] ERROR:
    [002]Deployment aborted
    Settings
    SDM host : DYNPRO
    SDM port : 50018
    URL to deploy : file:/C:/DOCUME1/720359/LOCALS1/Temp/temp50603PVTOSAP.ear
    Result
    => deployment aborted : file:/C:/DOCUME1/720359/LOCALS1/Temp/temp50603PVTOSAP.ear
    Aborted: development component 'PVTOSAP'/'local'/'LOKAL'/'0.2005.05.17.18.37.08':
    Caught exception while checking the login credentials for SAP J2EE Engine. Check whether the SAP J2EE Engine is up and running.
    com.sap.engine.deploy.manager.DeployManagerException: ERROR: Cannot connect to Host: [DYNPRO] with user name: [J2EE_ADMIN]                     Check your login information.                     Exception is: com.sap.engine.services.jndi.persistent.exceptions.NamingException: Exception while trying to get InitialContext. [Root exception is com.sap.engine.services.security.exceptions.BaseLoginException: User not authorized.]
    (message ID: com.sap.sdm.serverext.servertype.inqmy.extern.EngineApplOnlineDeployerImpl.checkLoginCredentials.DMEXC)
    Deployment exception : The deployment of at least one item aborted
    Additional Log :
    May 17, 2005 6:37:21 PM /userOut/deploy (com.sap.ide.eclipse.sdm.threading.DeployThreadManager) [Thread[Deploy Thread,5,main]] INFO:
    [002]Additional log information about the deployment
    <!LOGHEADER[START]/>
    <!HELP[Manual modification of the header may cause parsing problem!]/>
    <!LOGGINGVERSION[1.5.3.7162 - 630_SP]/>
    <!NAME[D:\usr\sap\DYN\DVEBMGS00\SDM\program\log\sdmcl20050517131312.log]/>
    <!PATTERN[sdmcl20050517131312.log]/>
    <!FORMATTER[com.sap.tc.logging.TraceFormatter(%24d %s: %m)]/>
    <!ENCODING[Cp1252]/>
    <!LOGHEADER[END]/>
    May 17, 2005 6:43:12 PM  Info: -
    Starting deployment -
    May 17, 2005 6:43:12 PM  Info: Loading selected archives...
    May 17, 2005 6:43:12 PM  Info: Loading archive 'D:\usr\sap\DYN\DVEBMGS00\SDM\program\temp\temp50603PVTOSAP.ear'
    May 17, 2005 6:43:14 PM  Info: Selected archives successfully loaded.
    May 17, 2005 6:43:14 PM  Info: Actions per selected component:
    May 17, 2005 6:43:14 PM  Info: Update: Selected development component 'PVTOSAP'/'local'/'LOKAL'/'0.2005.05.17.18.37.08' updates currently deployed development component 'PVTOSAP'/'local'/'LOKAL'/'0.2005.05.17.09.04.27'.
    May 17, 2005 6:43:15 PM  Info: Error handling strategy: OnErrorStop
    May 17, 2005 6:43:15 PM  Info: Update strategy: UpdateAllVersions
    May 17, 2005 6:43:15 PM  Info: Starting: Update: Selected development component 'PVTOSAP'/'local'/'LOKAL'/'0.2005.05.17.18.37.08' updates currently deployed development component 'PVTOSAP'/'local'/'LOKAL'/'0.2005.05.17.09.04.27'.
    May 17, 2005 6:43:15 PM  Info: SDA to be deployed: D:\usr\sap\DYN\DVEBMGS00\SDM\root\origin\local\PVtoSAP\LOKAL\0.2005.05.17.18.37.08\temp50603PVTOSAP.ear
    May 17, 2005 6:43:15 PM  Info: Software type of SDA: J2EE
    May 17, 2005 6:43:15 PM  Info: ***** Begin of SAP J2EE Engine Deployment (J2EE Application) *****
    May 17, 2005 6:43:15 PM  Info: ***** End of SAP J2EE Engine Deployment (J2EE Application) *****
    May 17, 2005 6:43:15 PM  Error: Aborted: development component 'PVTOSAP'/'local'/'LOKAL'/'0.2005.05.17.18.37.08':
    Caught exception while checking the login credentials for SAP J2EE Engine. Check whether the SAP J2EE Engine is up and running.
    com.sap.engine.deploy.manager.DeployManagerException: ERROR: Cannot connect to Host: [DYNPRO] with user name: [J2EE_ADMIN]
                        Check your login information.
                        Exception is:
    com.sap.engine.services.jndi.persistent.exceptions.NamingException: Exception while trying to get InitialContext. [Root exception is com.sap.engine.services.security.exceptions.BaseLoginException: User not authorized.]
    (message ID: com.sap.sdm.serverext.servertype.inqmy.extern.EngineApplOnlineDeployerImpl.checkLoginCredentials.DMEXC)
    May 17, 2005 6:43:17 PM  Error: -
    At least one of the Deployments failed -

    Hi Abhijeet,
    1. Execute the remoteGUI
    <<Installed drive>>:\usr\sap\J2E\JC00\SDM\program\RemoteGui.bat
    2. Click the "Connect to SDM server" (Menu "SDM GUI --> Login")
    3. Give the hostname (DYNPRO) and port (50018)
    4. Enter the password and click login.
    Check whether you are able to login or not. If you are not able to login through the RemoteGUI, then the password might be wrong. Check the password.
    Regards,
    Santhosh.C

  • AnyConnect error " User not authorized for AnyConnect Client access, contact your administrator"

    Hi everyone,
    it's probably just me but I have tried real hard to get a simple AnyConnect setup working in a lab environment on my ASA 5505 at home, without luck. When I connect with the AnyConnect client I get the error message "User not authorized for AnyConnect Client access, contact your administrator". I have searched for this error and tried some of the few solutions out there, but to no avail. I also updated the ASA from 8.4.4(1) to 9.1(1) and ASDM from 6.4(9) to 7.1(1) but still the same problem. The setup of the ASA is straight forward, directly connected to the Internet with a 10.0.1.0 / 24 subnet on the inside and an address pool of 10.0.2.0 / 24 to assign to the VPN clients. Please note that due to ISP restrictions, I'm using port 44455 instead of 443. I had AnyConnect working with the SSL portal, but IKEv2 IPsec is giving me a headache. I have stripped down certificate authentication which I had running before just to eliminate this as a potential cause of the issue. When running debugging, I do not get any error messages - the handshake completes successfully and the local authentication works fine as well.
    Please find the current config and debugging output below. I appreciate any pointers as to what might be wrong here.
    : Saved
    ASA Version 9.1(1)
    hostname ASA
    domain-name ingo.local
    enable password ... encrypted
    xlate per-session deny tcp any4 any4
    xlate per-session deny tcp any4 any6
    xlate per-session deny tcp any6 any4
    xlate per-session deny tcp any6 any6
    xlate per-session deny udp any4 any4 eq domain
    xlate per-session deny udp any4 any6 eq domain
    xlate per-session deny udp any6 any4 eq domain
    xlate per-session deny udp any6 any6 eq domain
    passwd ... encrypted
    names
    name 10.0.1.0 LAN-10-0-1-x
    dns-guard
    ip local pool VPNPool 10.0.2.1-10.0.2.10 mask 255.255.255.0
    interface Ethernet0/0
    switchport access vlan 2
    interface Ethernet0/1
    interface Ethernet0/2
    interface Ethernet0/3
    interface Ethernet0/4
    interface Ethernet0/5
    interface Ethernet0/6
    interface Ethernet0/7
    interface Vlan1
    nameif Internal
    security-level 100
    ip address 10.0.1.254 255.255.255.0
    interface Vlan2
    nameif External
    security-level 0
    ip address dhcp setroute
    regex BlockFacebook "facebook.com"
    banner login This is a monitored system. Unauthorized access is prohibited.
    boot system disk0:/asa911-k8.bin
    ftp mode passive
    clock timezone PST -8
    clock summer-time PDT recurring
    dns domain-lookup Internal
    dns domain-lookup External
    dns server-group DefaultDNS
    name-server 10.0.1.11
    name-server 75.153.176.1
    name-server 75.153.176.9
    domain-name ingo.local
    object network obj_any
    subnet 0.0.0.0 0.0.0.0
    object network LAN-10-0-1-x
    subnet 10.0.1.0 255.255.255.0
    object network Company-IP1
    host xxx.xxx.xxx.xxx
    object network Company-IP2
    host xxx.xxx.xxx.xxx
    object network HYPER-V-DUAL-IP
    range 10.0.1.1 10.0.1.2
    object network LAN-10-0-1-X
    access-list 100 extended permit tcp any4 object HYPER-V-DUAL-IP eq 3389 inactive
    access-list 100 extended permit tcp object Company-IP1 object HYPER-V-DUAL-IP eq 3389
    access-list 100 extended permit tcp object Company-IP2 object HYPER-V-DUAL-IP eq 3389 
    tcp-map Normalizer
      check-retransmission
      checksum-verification
    no pager
    logging enable
    logging timestamp
    logging list Threats message 106023
    logging list Threats message 106100
    logging list Threats message 106015
    logging list Threats message 106021
    logging list Threats message 401004
    logging buffered errors
    logging trap Threats
    logging asdm debugging
    logging device-id hostname
    logging host Internal 10.0.1.11 format emblem
    logging ftp-bufferwrap
    logging ftp-server 10.0.1.11 / asa *****
    logging permit-hostdown
    mtu Internal 1500
    mtu External 1500
    ip verify reverse-path interface Internal
    ip verify reverse-path interface External
    icmp unreachable rate-limit 1 burst-size 1
    icmp deny any echo External
    asdm image disk0:/asdm-711.bin
    no asdm history enable
    arp timeout 14400
    no arp permit-nonconnected
    object network obj_any
    nat (Internal,External) dynamic interface
    object network LAN-10-0-1-x
    nat (Internal,External) dynamic interface
    object network HYPER-V-DUAL-IP
    nat (Internal,External) static interface service tcp 3389 3389
    access-group 100 in interface External
    timeout xlate 3:00:00
    timeout pat-xlate 0:00:30
    timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
    timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
    timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
    timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
    timeout tcp-proxy-reassembly 0:01:00
    timeout floating-conn 0:00:00
    dynamic-access-policy-record DfltAccessPolicy
    aaa-server radius protocol radius
    aaa-server radius (Internal) host 10.0.1.11
    key *****
    radius-common-pw *****
    user-identity default-domain LOCAL
    aaa authentication ssh console radius LOCAL
    http server enable
    http LAN-10-0-1-x 255.255.255.0 Internal
    no snmp-server location
    no snmp-server contact
    snmp-server enable traps snmp authentication linkup linkdown coldstart
    crypto ipsec ikev2 ipsec-proposal DES
    protocol esp encryption des
    protocol esp integrity sha-1 md5
    crypto ipsec ikev2 ipsec-proposal 3DES
    protocol esp encryption 3des
    protocol esp integrity sha-1 md5
    crypto ipsec ikev2 ipsec-proposal AES
    protocol esp encryption aes
    protocol esp integrity sha-1 md5
    crypto ipsec ikev2 ipsec-proposal AES192
    protocol esp encryption aes-192
    protocol esp integrity sha-1 md5
    crypto ipsec ikev2 ipsec-proposal AES256
    protocol esp encryption aes-256
    protocol esp integrity sha-1 md5
    crypto ipsec security-association pmtu-aging infinite
    crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set ikev2 ipsec-proposal AES256 AES192 AES 3DES DES
    crypto map External_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
    crypto map External_map interface External
    crypto ca trustpoint srv01_trustpoint
    enrollment terminal
    crl configure
    crypto ca trustpoint asa_cert_trustpoint
    keypair asa_cert_trustpoint
    crl configure
    crypto ca trustpoint LOCAL-CA-SERVER
    keypair LOCAL-CA-SERVER
    crl configure
    crypto ca trustpool policy
    crypto ca server
    cdp-url http://.../+CSCOCA+/asa_ca.crl:44435
    issuer-name CN=...
    database path disk0:/LOCAL_CA_SERVER/
    smtp from-address ...
    publish-crl External 44436
    crypto ca certificate chain srv01_trustpoint
    certificate <output omitted>
      quit
    crypto ca certificate chain asa_cert_trustpoint
    certificate <output omitted>
      quit
    crypto ca certificate chain LOCAL-CA-SERVER
    certificate <output omitted>
      quit
    crypto ikev2 policy 1
    encryption aes-256
    integrity sha
    group 5 2
    prf sha
    lifetime seconds 86400
    crypto ikev2 policy 10
    encryption aes-192
    integrity sha
    group 5 2
    prf sha
    lifetime seconds 86400
    crypto ikev2 policy 20
    encryption aes
    integrity sha
    group 5 2
    prf sha
    lifetime seconds 86400
    crypto ikev2 policy 30
    encryption 3des
    integrity sha
    group 5 2
    prf sha
    lifetime seconds 86400
    crypto ikev2 policy 40
    encryption des
    integrity sha
    group 5 2
    prf sha
    lifetime seconds 86400
    crypto ikev2 enable External client-services port 44455
    crypto ikev2 remote-access trustpoint asa_cert_trustpoint
    telnet timeout 5
    ssh LAN-10-0-1-x 255.255.255.0 Internal
    ssh xxx.xxx.xxx.xxx 255.255.255.255 External
    ssh xxx.xxx.xxx.xxx 255.255.255.255 External
    ssh timeout 5
    ssh version 2
    console timeout 0
    no vpn-addr-assign aaa
    no ipv6-vpn-addr-assign aaa
    no ipv6-vpn-addr-assign local
    dhcpd dns 75.153.176.9 75.153.176.1
    dhcpd domain ingo.local
    dhcpd option 3 ip 10.0.1.254
    dhcpd address 10.0.1.50-10.0.1.81 Internal
    dhcpd enable Internal
    threat-detection basic-threat
    threat-detection scanning-threat shun except ip-address LAN-10-0-1-x 255.255.255.0
    threat-detection statistics access-list
    threat-detection statistics tcp-intercept rate-interval 30 burst-rate 400 average-rate 200
    dynamic-filter use-database
    dynamic-filter enable interface Internal
    dynamic-filter enable interface External
    dynamic-filter drop blacklist interface Internal
    dynamic-filter drop blacklist interface External
    ntp server 128.233.3.101 source External
    ntp server 128.233.3.100 source External prefer
    ntp server 204.152.184.72 source External
    ntp server 192.6.38.127 source External
    ssl encryption aes256-sha1 aes128-sha1 3des-sha1
    ssl trust-point asa_cert_trustpoint External
    webvpn
    port 44433
    enable External
    dtls port 44433
    anyconnect image disk0:/anyconnect-win-3.1.02026-k9.pkg 1
    anyconnect profiles profile1 disk0:/profile1.xml
    anyconnect enable
    smart-tunnel list SmartTunnelList1 mstsc mstsc.exe platform windows
    smart-tunnel list SmartTunnelList1 putty putty.exe platform windows
    group-policy DfltGrpPolicy attributes
    vpn-tunnel-protocol ikev1 ikev2 l2tp-ipsec ssl-client ssl-clientless
    webvpn
      anyconnect profiles value profile1 type user
    username write.ingo password ... encrypted
    username ingo password ... encrypted privilege 15
    username tom.tucker password ... encrypted
    class-map TCP
    match port tcp range 1 65535
    class-map type regex match-any BlockFacebook
    match regex BlockFacebook
    class-map type inspect http match-all BlockDomains
    match request header host regex class BlockFacebook
    class-map inspection_default
    match default-inspection-traffic
    policy-map type inspect dns preset_dns_map
    parameters
      message-length maximum client auto
      message-length maximum 1500
      id-randomization
    policy-map TCP
    class TCP
      set connection conn-max 1000 embryonic-conn-max 1000 per-client-max 250 per-client-embryonic-max 250
      set connection timeout dcd
      set connection advanced-options Normalizer
      set connection decrement-ttl
    policy-map type inspect http HTTP
    parameters
      protocol-violation action drop-connection log
    class BlockDomains
    policy-map global_policy
    class inspection_default
      inspect ftp
      inspect h323 h225
      inspect h323 ras
      inspect rsh
      inspect rtsp
      inspect esmtp
      inspect sqlnet
      inspect skinny 
      inspect sunrpc
      inspect xdmcp
      inspect sip 
      inspect netbios
      inspect tftp
      inspect ip-options
      inspect dns preset_dns_map dynamic-filter-snoop
      inspect http HTTP
    service-policy global_policy global
    service-policy TCP interface External
    smtp-server 199.185.220.249
    privilege cmd level 3 mode exec command perfmon
    privilege cmd level 3 mode exec command ping
    privilege cmd level 3 mode exec command who
    privilege cmd level 3 mode exec command logging
    privilege cmd level 3 mode exec command failover
    privilege cmd level 3 mode exec command vpn-sessiondb
    privilege cmd level 3 mode exec command packet-tracer
    privilege show level 5 mode exec command import
    privilege show level 5 mode exec command running-config
    privilege show level 3 mode exec command reload
    privilege show level 3 mode exec command mode
    privilege show level 3 mode exec command firewall
    privilege show level 3 mode exec command asp
    privilege show level 3 mode exec command cpu
    privilege show level 3 mode exec command interface
    privilege show level 3 mode exec command clock
    privilege show level 3 mode exec command dns-hosts
    privilege show level 3 mode exec command access-list
    privilege show level 3 mode exec command logging
    privilege show level 3 mode exec command vlan
    privilege show level 3 mode exec command ip
    privilege show level 3 mode exec command failover
    privilege show level 3 mode exec command asdm
    privilege show level 3 mode exec command arp
    privilege show level 3 mode exec command ipv6
    privilege show level 3 mode exec command route
    privilege show level 3 mode exec command ospf
    privilege show level 3 mode exec command aaa-server
    privilege show level 3 mode exec command aaa
    privilege show level 3 mode exec command eigrp
    privilege show level 3 mode exec command crypto
    privilege show level 3 mode exec command ssh
    privilege show level 3 mode exec command vpn-sessiondb
    privilege show level 3 mode exec command vpnclient
    privilege show level 3 mode exec command vpn
    privilege show level 3 mode exec command dhcpd
    privilege show level 3 mode exec command blocks
    privilege show level 3 mode exec command wccp
    privilege show level 3 mode exec command dynamic-filter
    privilege show level 3 mode exec command webvpn
    privilege show level 3 mode exec command service-policy
    privilege show level 3 mode exec command module
    privilege show level 3 mode exec command uauth
    privilege show level 3 mode exec command compression
    privilege show level 3 mode configure command interface
    privilege show level 3 mode configure command clock
    privilege show level 3 mode configure command access-list
    privilege show level 3 mode configure command logging
    privilege show level 3 mode configure command ip
    privilege show level 3 mode configure command failover
    privilege show level 5 mode configure command asdm
    privilege show level 3 mode configure command arp
    privilege show level 3 mode configure command route
    privilege show level 3 mode configure command aaa-server
    privilege show level 3 mode configure command aaa
    privilege show level 3 mode configure command crypto
    privilege show level 3 mode configure command ssh
    privilege show level 3 mode configure command dhcpd
    privilege show level 5 mode configure command privilege
    privilege clear level 3 mode exec command dns-hosts
    privilege clear level 3 mode exec command logging
    privilege clear level 3 mode exec command arp
    privilege clear level 3 mode exec command aaa-server
    privilege clear level 3 mode exec command crypto
    privilege clear level 3 mode exec command dynamic-filter
    privilege cmd level 3 mode configure command failover
    privilege clear level 3 mode configure command logging
    privilege clear level 3 mode configure command arp
    privilege clear level 3 mode configure command crypto
    privilege clear level 3 mode configure command aaa-server
    prompt hostname context
    no call-home reporting anonymous
    call-home
    profile CiscoTAC-1
      no active
      destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
      destination address email [email protected]
      destination transport-method http
      subscribe-to-alert-group diagnostic
      subscribe-to-alert-group environment
      subscribe-to-alert-group inventory periodic monthly
      subscribe-to-alert-group configuration periodic monthly
      subscribe-to-alert-group telemetry periodic daily
    Cryptochecksum:41a021a28f73c647a2f550ba932bed1a
    : end
    Many thanks,
    Ingo

    Hi Jose,
    here is what I got now:
    ASA(config)# sh run | begin tunnel-group
    tunnel-group DefaultWEBVPNGroup general-attributes
    address-pool VPNPool
    authorization-required
    and DAP debugging still the same:
    ASA(config)# DAP_TRACE: DAP_open: CDC45080
    DAP_TRACE: Username: tom.tucker, aaa.cisco.grouppolicy = DfltGrpPolicy
    DAP_TRACE: Username: tom.tucker, aaa.cisco.username = tom.tucker
    DAP_TRACE: Username: tom.tucker, aaa.cisco.username1 = tom.tucker
    DAP_TRACE: Username: tom.tucker, aaa.cisco.username2 =
    DAP_TRACE: Username: tom.tucker, aaa.cisco.tunnelgroup = DefaultWEBVPNGroup
    DAP_TRACE: Username: tom.tucker, DAP_add_SCEP: scep required = [FALSE]
    DAP_TRACE: Username: tom.tucker, DAP_add_AC:
    endpoint.anyconnect.clientversion="3.1.02026";
    endpoint.anyconnect.platform="win";
    DAP_TRACE: Username: tom.tucker, dap_aggregate_attr: rec_count = 1
    DAP_TRACE: Username: tom.tucker, Selected DAPs: DfltAccessPolicy
    DAP_TRACE: Username: tom.tucker, DAP_close: CDC45080
    Unfortunately, it still doesn't work. Hmmm.. maybe a wipe of the config and starting from scratch can help?
    Thanks,
    Ingo

  • User not able to run a report.

    Report Server has encountered a SharePoint error. (rsSharePointError) Cannot open database "dbname" requested by the login. The login failed. Login failed for user . For more information about this error navigate to the report server on the local
    server machine, or enable remote errors

    Hi Kunal, here are a few links that might point you in the right direction:
    http://social.msdn.microsoft.com/Forums/sharepoint/en-US/cca6cb99-c86d-4ba6-b6b9-81ec88771aa8/users-not-able-to-see-the-published-reports?forum=sqlreportingservices
    http://social.msdn.microsoft.com/Forums/sharepoint/en-US/c6c1414c-c338-4222-a5ca-a554d3ad912c/problem-getting-some-users-to-be-able-to-run-reports-probably-security-of-some-sort?forum=sqlreportingservices
    http://gj80blogtech.blogspot.com/2010/07/ssrs-error-report-server-has.html
    http://support.microsoft.com/default.aspx?scid=kb;EN-US;2597014
    cameron rautmann

  • My Nook says "User not Activated" How do I fix this?

    I recently downloaded Adobe Digital Editions to check out books from my local library. In Digital Editions, it says my Nook is authorized. I download a book and drag it to my Nook. When I open the book on my Nook it says "User Not Activated"
    How do I fix this?!?!

    Connect to iTunes on the computer you usually Sync with and Restore...
    If necessary Place the Device into Recovery mode...
    http://support.apple.com/kb/HT1808

  • Remotely add Domain User to local group

    I've been playing with this for some time, and I seem to be missing something.  I am trying to develop a script that reads and XML file containing a list of computers, local groups, and names of domain users (and computers) to be added to the local
    groups.  I would like to be able to run this from a management workstation. 
    I've been working from these two posts.
    http://blogs.technet.com/b/heyscriptingguy/archive/2010/08/19/use-powershell-to-add-domain-users-to-a-local-group.aspx
    http://blogs.technet.com/b/heyscriptingguy/archive/2008/03/11/how-can-i-use-windows-powershell-to-add-a-domain-user-to-a-local-group.aspx
    It appears that the command $objGroup = [ADSI]("WinNT://atl-fs-001/Administrators") only works locally.  I have not been able to figure out any format that allows me to get the information remotely.  So I figured I would use Invoke-Command
    to execute the two lines of code remotely. 
    Invoke-Command -ComputerName RemoteServer {
    $de = [ADSI]"WinNT://RemoteServer/Administrators,Group"
    $de.psbase.invoke("Add",([ADSI]"WinNT://Domain/User").path)
    (I am trying it first with fixed, valid values - change to variables when I get things figured out.)  That gave me the error:
    Exception calling "Invoke" with "2" argument(s): "Number of parameters specified does not match the expected number."
    +CategoryInfo :NotSpecified: (:) [], MethodInvocationException
    +FullyQualifiedErrorID :DotNetMethodTargetInvocation
    +PSComputerName :RemoteServer
    I need help on what to try next.
    Thanks.
    . : | : . : | : . tim

    I've been playing with this for some time, and I seem to be missing something.  I am trying to develop a script that reads and XML file containing a list of computers, local groups, and names of domain users (and computers) to be added to the local
    groups.  I would like to be able to run this from a management workstation. 
    I've been working from these two posts.
    http://blogs.technet.com/b/heyscriptingguy/archive/2010/08/19/use-powershell-to-add-domain-users-to-a-local-group.aspx
    http://blogs.technet.com/b/heyscriptingguy/archive/2008/03/11/how-can-i-use-windows-powershell-to-add-a-domain-user-to-a-local-group.aspx
    It appears that the command $objGroup = [ADSI]("WinNT://atl-fs-001/Administrators") only works locally.  I have not been able to figure out any format that allows me to get the information remotely.  So I figured I would use Invoke-Command
    to execute the two lines of code remotely. 
    Invoke-Command -ComputerName RemoteServer {
    $de = [ADSI]"WinNT://RemoteServer/Administrators,Group"
    $de.psbase.invoke("Add",([ADSI]"WinNT://Domain/User").path)
    (I am trying it first with fixed, valid values - change to variables when I get things figured out.)  That gave me the error:
    Exception calling "Invoke" with "2" argument(s): "Number of parameters specified does not match the expected number."
    +CategoryInfo :NotSpecified: (:) [], MethodInvocationException
    +FullyQualifiedErrorID :DotNetMethodTargetInvocation
    +PSComputerName :RemoteServer
    I need help on what to try next.
    Thanks.
    . : | : . : | : . tim
    The ADSI commands work remotely as long as you are an administrator on the domain.
    Invoke-Command only works on systems set up for WinRM remoting and if you are an Administrator on the domain.
    Normally we would use AD and GP to add users to local groups.
    Your script is also incorrect.  Thisis the correct template.
    $remotepc='somepc'
    $de=[ADSI]"WinNT://$remotepc/Administrators,Group"
    $de.Add("WinNT://Domain/User")
    You should never the user to the admin group.  It is a formula for disaster.
    ¯\_(ツ)_/¯

  • Error adding new users from local server

    Hello, BPC Gurus,
    We use BPC 7.0 MS SP4, MS SQL 2008 (Server name - BPCP01)
    In Administration Console we're trying to add user from local server (server with SQL Database), and warning window is appeared with message "The Server Is Not Operational [BPBCP01]"
    I checked Logging folder and found message:
    ==============[System Error Tracing]==============
    [System  Name] : OSoftAdminSecurity
    [Job Name]     : frmManageUser::GetAllObjectsFromDomainServer
    [DateTime]     : 2010-12-06 16:58:43
    [Exception]
        DetailMsg  : {System.Exception: The server is not operational [BPCP01]
       at Microsoft.VisualBasic.CompilerServices.LateBinding.LateGet(Object o, Type objType, String name, Object[] args, String[] paramnames, Boolean[] CopyBack)
       at OSoft.Consumers.Admin.Security50.ManageDataSet.GetAllObjectsFromDomainServer(String pDomainName, String pLDAPFullPath, Int32 pDomainObjectType, String pObjectValue, String pDomainType)
       at OSoft.Consumers.Admin.Security50.frmManageUser.GetAllObjectsFromDomainServer(String pDomainName, FILTER_TYPE pOptionType, String pOptionValue, String pDomainType)}
    ===========[System Error Tracing  End ]===========
    Any ideas?

    The installation was done with a local user or with a domain user?
    You know that BPC server can not be in the same time also domain controler.
    Are you using Windows authentication or CMS authentication.
    If you are using CMS authentication then again you can not add local users.
    If you are using Windows authentication then you have to go into server Manager
    Options - Define System User Groups
    Domain Type - Local Windows
    System User Group Name - Local Users.
    If you are using Windows 2008 make sure you addrole to have compatibility with IIS 6.because using this module bpc is adding new users.
    Regards
    Sorin Radulescu

  • How to add first log on user to local administrator group

    Hi All,
    When first time user log in to system, i need to add that particular user to local administrator group?
    How to achieve it using vbscript?
    Thanks
    Divakar

    It is also now against federal law in the US, Canada and, I believe, the UK. 
    In the US HIPAA and the federal network security act (???) and Sarbanes-Oxley all prohibit users running as Admins.   This may not specifically affect your
    installation but it does show how important this is.
    There is NEVER a good reason to make a user an administrator.  It is only lack of technical know how that leads to this scenario.  Any vendor product that
    requires this is not a safe product to use in a corporate network.  Malware specifically looks for this as an attack vector.
    I spent three years arguing with Inuit to get there software to work.  Every time they said you have to run as an admin I told them it would never be.  We
    were always able to find a way.  Now QuickBooks installs as a standard user with no issues.
    It can be done.
    ¯\_(ツ)_/¯
    It is also now against federal law in the US, Canada and, I believe, the UK. 
    In the US HIPAA and the federal network security act (???) and Sarbanes-Oxley all prohibit users running as Admins.   This may not specifically affect your
    installation but it does show how important this is.
    There is NEVER a good reason to make a user an administrator.  It is only lack of technical know how that leads to this scenario.  Any vendor product that
    requires this is not a safe product to use in a corporate network.  Malware specifically looks for this as an attack vector.
    I spent three years arguing with Inuit to get there software to work.  Every time they said you have to run as an admin I told them it would never be.  We
    were always able to find a way.  Now QuickBooks installs as a standard user with no issues.
    It can be done.
    ¯\_(ツ)_/¯

  • I'm getting this error message: "User not registered for online use" when i'm trying to download music/ track names from a CD into ITunes on my Windows 8 PC.  I'm registered and my itunes account/ appleID are all correct and working.

    I'm getting this error message: "User not registered for online use" when i'm trying to download music/ track names from a CD into ITunes on my Windows 8 PC.  I'm registered and my itunes account/ appleID are all correct and working.

    The ""not recognized for on-line use". error is associated with the Gracenote service that iTunes uses to look up and retrieve metadata for CDs.  Some users have reported that this error occurs when trying to import from CD, subsequent to upgrading to version 12.  A number of slightly different solutions have been reported (though all of a similar nature).
    Try walking through the following steps - before starting you may have to enable hidden files and folders to be viewed - in Windows 7 / Windows Explorer select Organize > Folder and search options, then on the View tab make sure that Show hidden files, folders and drives is selected.  Without this you won't see the AppData folder in C:\Users\username\
    Exit iTunes
    In Windows Explorer, go to the folder C:\Users\username\AppData\Roaming\Apple Computer\iTunes
    Delete the following files:
    CD Info.cidb
    com.apple.iTunes.Gracenote.plist
    Restart iTunes
    Insert a CD and see if details are now correctly retrieved from Gracenote
    If this doesn't work:
    In iTunes, select Edit > Preferences and make a note (or take a screenshot) of your preferences settings in all relevant tabs
    Exit iTunes
    In Windows Explorer, go to the folder C:\Users\username\AppData\Roaming\Apple Computer\iTunes
    Delete the following file:iTunesPrefs.xml
    Restart iTunes
    Insert a CD and see if details are now correctly retrieved from Gracenote
    If this second procedure does work, you'll need to restore other iTunes preferences settings to those that you noted in step 1.
    If this one didn't work:
    Exit iTunes
    Check the following folders:
    C:\Users\username\AppData\Local\Apple Computer\iTunes
    C:\Users\username\AppData\LocalLow\Apple Computer\iTunes
    Delete any copies of the following files:
    CD Info.cidb
    com.apple.iTunes.Gracenote.plist
    iTunesPrefs.xml
    Restart iTunes
    Insert a CD and see if details are now correctly retrieved from Gracenote
    Again, if this procedure does work, you'll need to restore other iTunes preferences settings to those that you noted in step 1 of the second procedure. If you're still not able to retrieve CD info:
    Exit iTunes
    In Windows, select Start > Control Panel > Programs and Features.  Find the entry for iTunes, right-click and select Repair.
    When this process has finished, restart iTunes
    Insert a CD and see if details are now correctly retrieved from Gracenote
    If none of these have worked (and almost everything I've seen suggests you should be OK by this point), you may have an issue with the installation and configuration of iTunes itself.  If you have got this far, see turingtest2's notes on Troubleshooting issues with iTunes for Windows updates for advice on how to remove and replace of all components of iTunes.

  • JNLP javaws error:  requested version of JRE...not locally installed

    Greetings,
    First: I am a user not a developer and have very limited understanding of JDK, JRE, and Java Web Start. I just want to figure out how to get these applications to run. I suspect it is a JAVA bug that is peculiar to my particular Windows XP-SP2 system configuration.
    My Problem: When trying to run (two different/independent applications) java web start applications, I get the following error.
    The application has requested a version of the JRE (version 1.4) that currently is not locally installed. Java Web Start is unable to automatically download and install the requested version. This JRE must be installed manually.+
    For reference, the Launch file is:
    <?xml version="1.0" encoding="utf-8"?>
    <!-- JNLP to launch MOViewer application -->
    <jnlp
    codebase="http://gnlewis.ic.edu/~webmo/webmo/java"
    spec="1.0+" >
    <information>
    <title>MOViewer</title>
    <vendor>WebMO, LLC</vendor>
    <description>MOViewer application</description>
    <description kind="short">A Java interface for viewing molecular orbitals.</description>
    <homepage href="www.webmo.net"></homepage>
    <icon href="images/splash.gif"/>
    <offline-allowed/>
    </information>
    <security>
    <all-permissions/>
    </security>
    <resources>
    <j2se version="1.4+"/>
    <jar href="MOViewer.jar"/>
    <jar href="Jmol.jar"/>
    </resources>
    <application-desc main-class="net.webmo.moviewer.MOViewerFrame"/>
    </jnlp>
    I should note that the required JRE is installed. I have various builds of versions 1.4 through 1.6 installed on my laptop. And my gut tells me that it is not the JNLP file that is the problem. I believe it to be a problem (bug) with java, JRE, or javaws that shows up with my particular PC configuration (which I did not set up but don't believe is particularly unusual).
    Another interesting and possibly related problem, is that when I goto the java application control panel (Start->Control Panel->Java) and select the "Java" tab, there is a lower section for "Java Application Runtime Settings". If I slect the "View" button a screen appears with two tabs: User and System. There are no entries under either tab. I can "Add" an entry under the user tab (and find the path to the correct java version etc.) and "Apply" the settings. I cannot add anyting under the system tab (even the my user ID is part of the administrator group and should have full system access). Even after applying this change, I still cannot run the java web start application. If I close the control panel and reopen it, the JRE path that I "added" is no longer listed under "View". This seems odd behavior. It is as if there is some configuration file or environment variable somewhere that is not getting set/saved.
    Please....is there anyone that has seen this problem and has a suggested fix. I have googled this problem and found a very few seemingly relevant pieces of info but it seemed more of a developer issue and I do have the background to understand the proposed fixes.
    Thanks, in advance, for your assistance.
    --Clay                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               

    I have the same error message, just a different java version:
    I have Java 6 installed, but the application wants 1.5 or newer :O
    Message:
    The application has requested a version of the JRE (version 1.5+) that currently is not locally installed. Java Web Start is unable to automatically download and install the requested version. This JRE must be installed manually.
    Launch file:
    JNLPException[category: System Configuration : Exception: null : LaunchDesc:
    <jnlp spec="1.0+" codebase="http://192.168.125.25:8421/ibm/dircon/">
      <information>
        <title>IBM Launched Tasks</title>
        <vendor>IBM Corporation</vendor>
        <homepage href="http://www.ibm.com"/>
        <description kind="one-line">IBM Launched Tasks</description>
        <icon href="http://192.168.125.25:8421/ibm/dircon/images/dir_licext.gif" kind="default"/>
      </information>
      <security>
        <all-permissions/>
      </security>
      <update check="timeout" policy="always"/>
      <resources>
        <java href="http://192.168.125.25:8421/ibm/jreinst/installer" version="1.5.0+"/>
        <jar href="http://192.168.125.25:8421/ibm/dircon/lib/Director.jar" download="eager" main="true"/>
        <jar href="http://192.168.125.25:8421/ibm/dircon/lib/DirLibs.jar" download="eager" main="false"/>
        <jar href="http://192.168.125.25:8421/ibm/dircon/lib/DirUIL.jar" download="eager" main="false"/>
        <jar href="http://192.168.125.25:8421/ibm/dircon/lib/monitorinf.jar" download="eager" main="false"/>
        <jar href="http://192.168.125.25:8421/ibm/dircon/lib/lic.jar" download="eager" main="false"/>
        <jar href="http://192.168.125.25:8421/ibm/dircon/lib/USMSEngine.jar" download="eager" main="false"/>
        <jar href="http://192.168.125.25:8421/ibm/dircon/lib/USMSKernelServices.jar" download="eager" main="false"/>
        <jar href="http://192.168.125.25:8421/ibm/dircon/lib/ITDDefaultProductInfo.properties.jar" download="eager" main="false"/>
        <jar href="http://192.168.125.25:8421/ibm/dircon/lib/dircon_inst.jar" download="eager" main="false"/>
        <extension href="http://192.168.125.25:8421/ibm/dircon/lib/jnlp/dircon_extensions.jnlp"/>
        <extension href="http://192.168.125.25:8421/ibm/dircon/lib/jnlp/dircon_inst_ext.jnlp"/>
        <property name="twg.help.dir" value="http://192.168.125.25:8421/ibm/dircon/ConsoleHelp/"/>
        <property name="dir.env" value="lic"/>
        <property name="twg.log.output" value="1"/>
        <property name="twg.code.base" value="\\Director"/>
        <property name="twg.directory.root" value="\\Director"/>
        <property name="twg.directory.classes" value="\\Director\\classes"/>
        <property name="twg.directory.data" value="\\Director\\data"/>
        <property name="twg.directory.log" value="\\Director\\log"/>
        <property name="twg.directory.proddata" value="\\Director\\proddata"/>
        <property name="twg.directory.tempdata" value="\\Director\\tempdata"/>
      </resources>
      <application-desc main-class="com.tivoli.console.ConsoleLauncher">
        <argument>192.168.125.25</argument>
          </application-desc>
    </jnlp> ]
         at com.sun.javaws.Launcher.prepareLaunchFile(Unknown Source)
         at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
         at com.sun.javaws.Launcher.launch(Unknown Source)
         at com.sun.javaws.Main.launchApp(Unknown Source)
         at com.sun.javaws.Main.continueInSecureThread(Unknown Source)
         at com.sun.javaws.Main$1.run(Unknown Source)
         at java.lang.Thread.run(Unknown Source)
    Exception:
    JNLPException[category: System Configuration : Exception: null : LaunchDesc:
    <jnlp spec="1.0+" codebase="http://192.168.125.25:8421/ibm/dircon/">
      <information>
        <title>IBM Launched Tasks</title>
        <vendor>IBM Corporation</vendor>
        <homepage href="http://www.ibm.com"/>
        <description kind="one-line">IBM Launched Tasks</description>
        <icon href="http://192.168.125.25:8421/ibm/dircon/images/dir_licext.gif" kind="default"/>
      </information>
      <security>
        <all-permissions/>
      </security>
      <update check="timeout" policy="always"/>
      <resources>
        <java href="http://192.168.125.25:8421/ibm/jreinst/installer" version="1.5.0+"/>
        <jar href="http://192.168.125.25:8421/ibm/dircon/lib/Director.jar" download="eager" main="true"/>
        <jar href="http://192.168.125.25:8421/ibm/dircon/lib/DirLibs.jar" download="eager" main="false"/>
        <jar href="http://192.168.125.25:8421/ibm/dircon/lib/DirUIL.jar" download="eager" main="false"/>
        <jar href="http://192.168.125.25:8421/ibm/dircon/lib/monitorinf.jar" download="eager" main="false"/>
        <jar href="http://192.168.125.25:8421/ibm/dircon/lib/lic.jar" download="eager" main="false"/>
        <jar href="http://192.168.125.25:8421/ibm/dircon/lib/USMSEngine.jar" download="eager" main="false"/>
        <jar href="http://192.168.125.25:8421/ibm/dircon/lib/USMSKernelServices.jar" download="eager" main="false"/>
        <jar href="http://192.168.125.25:8421/ibm/dircon/lib/ITDDefaultProductInfo.properties.jar" download="eager" main="false"/>
        <jar href="http://192.168.125.25:8421/ibm/dircon/lib/dircon_inst.jar" download="eager" main="false"/>
        <extension href="http://192.168.125.25:8421/ibm/dircon/lib/jnlp/dircon_extensions.jnlp"/>
        <extension href="http://192.168.125.25:8421/ibm/dircon/lib/jnlp/dircon_inst_ext.jnlp"/>
        <property name="twg.help.dir" value="http://192.168.125.25:8421/ibm/dircon/ConsoleHelp/"/>
        <property name="dir.env" value="lic"/>
        <property name="twg.log.output" value="1"/>
        <property name="twg.code.base" value="\\Director"/>
        <property name="twg.directory.root" value="\\Director"/>
        <property name="twg.directory.classes" value="\\Director\\classes"/>
        <property name="twg.directory.data" value="\\Director\\data"/>
        <property name="twg.directory.log" value="\\Director\\log"/>
        <property name="twg.directory.proddata" value="\\Director\\proddata"/>
        <property name="twg.directory.tempdata" value="\\Director\\tempdata"/>
      </resources>
      <application-desc main-class="com.tivoli.console.ConsoleLauncher">
        <argument>192.168.125.25</argument>
          </application-desc>
    </jnlp> ]
         at com.sun.javaws.Launcher.prepareLaunchFile(Unknown Source)
         at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
         at com.sun.javaws.Launcher.launch(Unknown Source)
         at com.sun.javaws.Main.launchApp(Unknown Source)
         at com.sun.javaws.Main.continueInSecureThread(Unknown Source)
         at com.sun.javaws.Main$1.run(Unknown Source)
         at java.lang.Thread.run(Unknown Source)
    deployment.properties:
    deployment.javaws.jre.1.registered=true
    deployment.javaws.jre.1.enabled=true
    deployment.javaws.jre.1.osarch=x86
    deployment.javaws.jre.1.osname=Windows
    deployment.javaws.jre.1.path=C:\\Program Files\\Java\\jre1.6.0_07\\bin\\javaw.exe
    deployment.javaws.jre.1.location=http://java.sun.com/products/autodl/j2se
    deployment.javaws.jre.1.product=1.6.0_07
    deployment.javaws.jre.1.platform=1.6
    deployment.javaws.jre.0.osarch=x86
    deployment.javaws.jre.0.enabled=true
    deployment.javaws.jre.0.location=http\://java.sun.com/products/autodl/j2se
    deployment.javaws.jre.0.path=C\:\\Program Files\\Java\\jre1.6.0_02\\bin\\javaw.exe
    deployment.javaws.jre.0.platform=1.6
    deployment.javaws.jre.0.osname=Windows
    deployment.javaws.jre.0.registered=true
    deployment.javaws.jre.0.product=1.6.0_02
    deployment.browser.path=C\:\\Program Files\\Internet Explorer\\IEXPLORE.EXE
    deployment.version=6.0
    deployment.javaws.splash.index=C\:\\Documents and Settings\\adamd292\\Application Data\\Sun\\Java\\Deployment\\cache\\6.0\\splash\\splash.xml

  • Import export utility user not found

    I'm getting the following error when running the 9.3.1 ImportExportUtility on a 9.2.0.2 version of Shared Services. NTLM is used as the authentication provider.
    2009-06-19 08:49:30,642 Export : Exception encountered while retrieving user ntlm://SID=S-1-5-21-2134593322-327503246-231145771-21130?USER
    2009-06-19 08:49:30,642 Export : Root cause : User not found with identity = ntlm://SID=S-1-5-21-2134593322-327503246-231145771-21130?USER
    2009-06-19 08:49:30,658 Export : Silently ignoring the last error
    There were 99 users extracted and this message appeared for 36 of the 99. Could someone tell me where the users are not in sync. Is it between Open Ldap and NTLM, Open Ldap and the application repository, etc. Also, is there a way of identifying the user Id. from the message.
    Thanks,
    Tom

    I finally found a real solution to this problem and I wish I had found it sooner.......
    Starting sometime around 9.2, Oracle started including a tool called : UpdateNativeDir
    The primary purpose of the tool (as I understand it) is to allow you to do a refresh between your external provider (i.e. Active Directory) and the native (OpenLDAP) directory in the event you moved directories around. This tool will also purge any invalid entries that are in the local (LDAP) directory that are not in the external provider.
    The tool is pretty straight forward and the readme file explains the details of how to use it.
    I've tested this tool in our dev and production environments now and it does exactly what I need. The additional benefit is that I can schedule this to run periodically to ensure the directories are sync'd.
    The tool is going to be on your Shared Services machine and comes zipped in a file called UpdateNativeDir.zip
    According to the documention (9.2.0.3) it is located at :
    <Hyperion_Home>/common/utilities/nativedirectoryupdateutility
    On our 9.3.1 Shared Services box, I located it at :
    <Hyperion_Home>/common/utilities/SyncOpenLdapUtility

  • Problem with BP. Assignment: Business partner person to user not unique

    I have a problem with a user. They have no BP assigned in PPOSA_BBP. We have found a BP in transaction BP.
    When we try the BBP_BP_OM_INTEGRATE the message BBP_UM_UI048 appear" Assignment: Business partner person to user not unique" .
    Any idea about how solve this??
    Best regards
    Jorge

    Hi
    Which SAP version are you using ?
    The user needs to be attached to the Org Plan. (PPOMA_BBP)
    Have you maintained the Contact person for this USer in the Org Plan. (PPOMA_BBP) ?
    Please check the consitency of this BP as well.
    Have you read the documenattion of the Transaction -> BBP_BP_OM_INTEGRATE ?
    If no, here it is..
    Transaction -> BBP_BP_OM_INTEGRATE
    Short text
    Object Synchronization and Repair
    Purpose
    This report enables you to run a consistency check for the integration of HR Master Data and Business Partner data. If not all data exists for the business partner, you can first synchronize data. When synchronization is run for organizational units, the basic data (name, description) and the address data is included; when synchronization is run for central persons, bank information is included in addition to the basic data and address data.
    Prerequisites
    To be able to run this report, integration between Organizational Management and SAP Business Partner must be active.
    Features
    This section contains information about the functions you can use to select and output data.
    Selection
    The following options enable you to restrict the selection of objects:
    Central Person
    In addition to selecting central persons created during integration between HR Master Data and Business Partner data, you can also select central persons who have been created locally. However, central persons created locally are not checked for consistency.
    Employee (object type P)
    This selection option is only available in HR systems. The corresponding central person is displayed together with the person. Both objects are kept consistent in the Basic Data, Address, and Bank Data columns.
    Positions
    Business Partners (Employee role)
    Users
    Organizational Unit(s)
    You can specify specific organizational units for the selection.
    Business Partner (Organizational Unit role)
    Note:
    The selection objects Position, Business Partner (Employee role), User, and Business Partner (Organizational Unit role) are only available if an implementation of BAdI HRALX_HRALXSYNC_BADI exists.
    Branch as of Organizational Unit
    This option enables you to select all objects in the structure for one or more organizational units. You can also restrict selection according to one of the following object types:
    Central Persons Only
    Employees Only
    Positions Only
    Business Partners Only (Employee role)
    Users Only
    Organizational Units Only
    Business Partners Only (Organizational Unit role)
    Include All Object Types
    Changes Since
    All organizational units and central persons for which changes have been made since the last time all objects were synchronized are read. When all objects have been synchronized successfully, a new change date is set.
    Note:
    If a selection has been made but the relevant input field remains blank, all objects of a particular object type are read from the database. This condition can lead to a long runtime, therefore, SAP recommends you also enter a restriction.
    Output
    The organizational units and central persons that have been found are displayed in a list that includes status data.
    To facilitate navigation, a hierarchical tree structure is displayed on the left-hand side of the object list. The branches are sorted according to the type of action that is to be executed.
    If an implementation of BAdI HRALX_HRALXSYNC_BADI exists, checks from this BAdI are executed in the External Checks branch.
    If you double-click on the folder icon in the navigation tree, all objects are displayed in the list.
    Note:
    Meaning of status display for data in the Basic Data, Address, and Bank Data columns:
    Icon Message Text Meaning
    Green traffic light Business partner does not need to be synchronized with HR object data All business partner data is consistent with HR object data.
    Yellow traffic light Business partner does need to be synchronized with HR object data Business partner exists. The business partner data is not consistent with the HR object data.
    Red traffic light Object data is new and must first be created for the business partner The business partner does not yet exist or the the business partner data is incomplete.
    No traffic light Object type does not include this type of data Check type is not relevant for this object.
    Activities
    To integrate business partners or to repair selected objects, you must select the relevant lines in the object list and choose Execute. Any errors that occur are displayed after synchronization.
    Hope this will help.
    Please reward suitable points, incase it suits your requirements.
    Regards
    - Atul

  • 3 million user on Local AD to be synchronized with Office 365 FID issue

    Hello everyone,
    I have a customer (University) Who has an issue with DirSync. They have 3 million users on Local AD they want to synchronize with Office 365 to enable
    these users for Exchange online. 
    Now they have users "Students" enabled for Exchange online and management and staff are enabled on the On-premises Exchange servers. 
    Dirsync during the day synchronize 2 times fine without any error and again 2 times doesn't synchronize and gives error with no details. the error
    is "Stopped Extension-dll exception" 
    More errors shown as below 
    Directory Synchronization:
    An unknown error occurred with the Microsoft Online Services Sign-in Assistant. Contact Technical Support. SetCredential() failed. Contact Technical
    Support.  (0x8009000B)
    I am attaching other errors as well
    at Microsoft.Online.Coexistence.ProvisionHelper.GetLiveCompactToken(String userName, String userPassword)
    at Microsoft.Azure.ActiveDirectory.Connector.ProvisioningServiceAdapter.Initialize()
    at Microsoft.Azure.ActiveDirectory.Connector.ProvisioningServiceAdapter.Import(Byte[] syncCookie, Boolean isFullImport)
    at Microsoft.Azure.ActiveDirectory.Connector.Connector.GetImportEntriesCore()
    at Microsoft.Azure.ActiveDirectory.Connector.Connector.GetImportEntries(GetImportEntriesRunStep getImportEntriesRunStep)
    Forefront Identity Manager 4.1.3465.0"
    FIMSynchronizationService:
    The management agent "Windows Azure Active Directory Connector" failed on run profile "Delta Import Delta Sync" because the server encountered errors.
    FIMSynchronizationService:
    The management agent "Windows Azure Active Directory Connector" step execution completed on run profile "Delta Import Delta Sync" but the watermark was not saved.
    Additional Information
    Discovery Errors : "0"
    Synchronization Errors : "0"
    Metaverse Retry Errors : "0"
    Export Errors : "0"
    Warnings : "0"
    User Action
    View the management agent run history for details.
    Directory Synchronization:
    The Management Agent Windows Azure Active Directory Connector failed on execution. Error returned is 'stopped-extension-dll-exception'. If the problem persists, contact Technical Support.
    Customer have tried to involve Microsoft with them through a third party technical support company but microsoft was not able to apply anything since they have tried to apply some scripts but those scripts would take
    3 days without finishing.
    The first time the Dirsync was applied it took 1 week without finishing until now they were not able to apply a full import and export sync.
    What have really got me interested is that Microsoft did not suggest to the customer to upgrade his FIM (ForeFront Identity Manager)'s old version
    to the latest one. 
    Customer is using Full SQL deployment on a dedicated server and DirSync (FID) on a separate server too. The deployed servers are virtual and have 32
    GB ram and 200 GB HDD size and 4 cores.
    I have recommended to this customer that we do not touch this current deployment since Microsoft themselves couldn't do anything in regard, but what
    we could do is take a virtual snapshot and then apply the upgrade and see if this resolves the issue or not?
    Note:
    Microsoft talked to them about a limited number of synchronized items to their Azure site per week! I am not sure about this but what the customer
    said is that they change approximately about 25,000 user object per day. 
    Could this issue happens because of this limit?
    Thanks

    Besides the large number of objects in the system, which I am not sure DirSync can handle, I suggest you separate the failing step from other steps in the RunProfile.
    So, if you have a step that does Delta Import and Delta Sync, separate into 2 steps;
    Best,
    Nosh
    Nosh Mernacaj, Identity Management Specialist

Maybe you are looking for