User status shows active in portal for inactive LDAP users

Hi all,
Users listed in the LDAP as deleted or inactive are still listed in EP
User Management as valid active users.
1) is there any process or OSS note which can help us to get users
inactive in portal user management to the corresponding LDAP inactive
users?
2) is there any chance that any inactive or deleted entries in LDAP
should not be searchable from User admin Portal search?
Any solution for the above problem?
Please reply.
Regards,
haroon

Hello there,
i have the same problem: We have several domains that sometimes contain users with the same user-id. This happens, if a user is "moved" from one domain to another: A new user with the same user-id is created in the new domain and the user-status of the user in the old domain is set to "inactive".
But SAP NetWeaver Portal (7.0 EHP 1) ignores this user-status flag and thus login (with SPNego / Integrated Windows Authentication, which does not send the domain of an identified user to the portal) fails.
Is there a possibility to get the portal to "ignore" LDAP users (meaning no longer list them in the UME) that have their user-status flag set to "inactive"?
Thanks for a reply in advance!
Regards,
René

Similar Messages

Showing headers in portal for MSS

hi
when i login to portal , i have MSS role , and when i click
on the MSS role , i need overview, team as the header , i dont want Budgets and plannings as part of header
and also when i click the team or overview , there related services should be available as header in the portal .
can any one plz help out ?

Hi Kishore,
You should copy MSS role in PCD (you can find it in install business package, in my Portal it's here pcd:portal_content/com.sap.pct/every_user/com.sap.pct.erp.ess.bp_folder) to a new location in PCD, rename it and work with this role. When you open this role you should delete worksets which you needn't and stay workset which you need. Open workset properties which you want to be in the top menu and in find entry point, chose yes. After that save changes. This workset appear in the top menu.
I hope me advice help you.

Message bridge connecting to MQ shows active/forwarding messages but fails to deliver

Created a message bridge between active MQ and weblogic.
Status shows active >>forwarding messages
when i put a message in the queue i see the following error in the logs
<Aug 21, 2013 5:13:29 PM PDT> <Warning> <MessagingBridge> <BEA-200026> <Bridge "
Bridge-1" encountered some problems in one of its adapters or underlying systems
. It stopped transferring messages and will try to reconnect to the adapters sho
(The exception caught was javax.resource.ResourceException: Error sending
message.)>
Weblogic10.3

We resolved this issue by using the latest Active MQ jar.Earlier we were using 5.4.3 now when using the latest version this issue got resolved

Pre-populate adapter for setting the Active Directory OU for a user

Hi All
I created a pre-populate adapter that set the Active Directory OU for a user...
In the end the status of the resource is still showing "provisioning"..
It must be "Provsioned"..did I miss something ?
The logs speak as below :-
08:01:12,678 INFO [STDOUT] Running Create User
08:01:12,678 INFO [STDOUT] Before appending Root Context:OU=Human Resources,
08:01:12,678 INFO [STDOUT] tcUtilLDAPController.java : hierString : OU=Human Resources,dc=mydomain,dc=com
08:01:13,553 ERROR [ACTIVEDIRECTORYCONTROLLER] Problem creating object: javax.naming.OperationNotSupportedException: [LD
AP: error code 53 - 0000001F: SvcErr: DSID-031A0FC0, problem 5003 (WILL_NOT_PERFORM), data 0
]; remaining name 'cn=ASYMONDS'
08:03:18,756 INFO [[xlWebApp]] action: LogonAction: User 'XELSYSADM' logged on in session 8116CBC0FA1481D06A207A1941B9
E096
08:22:31,256 ERROR [WEBAPP] Class/Method: ProvisionedResourcesForUserAction/confirmEnableSelection encounter some proble
ms: No checkbox was checked.

Just verify the OU value is correctly populated , first try doing the provisioning by manually giving OU and everything .
Is it successful ?
Then we can check if something wrong going with pre pop.
Thanks
Suren

FileReceiver communcation channel inactive even after the status is Active

Hi,
i am not able to find whats the problem. i have activated the communation channel and the status is also Active. still when i do a CC monitoring it shows as the CC is inactive.
i have refereshed the cache.
CPA referesh is also done
modified and activated again and again
object is not locked
can some one tell what can be the problem

HI Deepika,
Is the yellow status is just for your CC or for all File receivers ?
If its just in your case, try to create a new Receiver CC and see if it helps.
Thanks,
Pooja Pandey

How do i use an active directory group for vpn and not all user

hi all,
i have an asa 5515x...
how do i use a particular group in active directory to have vpn/anyconnect access? right now i believe it's for all user on my current config,
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
!integrate with active directory
aaa-server LDAPSERVERS protocol ldap
aaa-server LDAPSERVERS (vlan192) host 10.0.0.2
ldap-base-dn dc=company,dc=com
ldap-scope subtree
ldap-naming-attribute sAMAccountName
ldap-login-password 12345678
ldap-login-dn cn=administrator,cn=Users,dc=company,dc=com
server-type auto-detect
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
say i want this "vpn-group" object group in AD and my vpn is only anyconnect and no other vpn types.
thanks for any comment you may add.

The best way is to use Dynamic Access Policies (DAP). Cisco has a white paper (here) that shows how one can choose the LDAP group as one of the DAP criteria.
DAP requires the Advanced Endpoint Assessment feature, so your licensing must support that.

How to use ISE Guest Portal for AD users

Hi there,
As subject explains all, I want to use ISE Guest Portal for my domain users. I have tried many different ways to authenticate users and finally I came to the conclusion that ISE CWA works pretty well and is very stable. WLC Webauth sucks alot, does not redirect to the login page always.
Can you please share what other ways are stable ways to authenticate AD users? I know about WPA 802.1x authentication but that requires a CA in the network which is not available at the moment. So can you please Suggect?
Otherwise, I want to use ISE Guest Portal for my AD users as well. AD is already integrated to ISE, the issue happens when I attempt to athenticate using AD user account, the user gets authenticated but the Guest Portal redirects me to Device Provissioning page and there it shows an error saying "there is not policy to register the device, contact system admin"
Am I missing something??
I am running WLC 5760 with ISE 1.2
Thanks in advance..

Hi,
Can you post a screenshot of your current policies? Also for 802.1x authentication although it is best practices you do not have to have an internal CA to make this solution work. You can disable the option to "validate server certificate" or you can use a trusted CA to sign the certificate for the eap interface.
In most cases 802.1x is the method to go because it provides dynamic authentication without forcing users to redirected to a web page multiple times throughout the day, scenarios such as computers that sleep or users that are mobile will not have connectivity until they redirect to the portal if one of the scenarios exist. You also gain WPA encryption on your WLAN, if you are using strictly layer 3 web auth you run into issues where encryption is not used and rely on encryption from the application as your method of data integrity and security.
Thanks,
Tarik Admani
*Please rate helpful posts*

Change status from active to inactive

Hi Experts,
How can I change status from active to inactive for the InfoCube?
Thank you

You can deactivate a cube by deactivating one of the infoobject in it:
select one of the char in the cube
menu option Extras/Unlock infoobjects
The system will offer you to delete the cube content.
If you agreed, the cube becomes inactive.
Please assign if helpful

Query is running but status shows INACTIVE

Hi All,
I am running one query and is still running but when i checked v$session the status shows INACTIVE since long time..
Can somebody please help me to understand why the status is INACTIVE even if the query is running.. Is my session waiting for some resources?
Also i checked v$session_wait it shows "SQL*Net message from client"
Oracle version 9.2.0.7.0
OS : SunOS 5.10
Module : Sql*Plus
Any help is greatly appreciated.
-Harsh

Thanks much for your reply Mark.
This session i myself running from sqlplus and its still running.
Also here's my session info
select SID, STATUS, program, module, last_call_et from v$session where SID=78;
SID STATUS PROGRAM MODULE LAST_CALL_ET
78 INACTIVE sqlplus.exe SQL*PLUS 0
I checked the locks too there is no blocking or blocked sessions using following.
select /*+ RULE */ a.session_id, s.serial#, s.username, s.status
from dba_locks a, v$session s
where a.blocking_others = 'Blocking'
and a.session_id = s.sid
order by 1;
Now under v$session_wait my session 78 is showing wait as 'db file sequential read'
So is my session now waiting for resources? Can you please help me how to find that my query has enough resources or if not does my session is under wait.
Thanks
-Harsh

*Plant Maintenance: Urgent: User status ECUS active.*

Dear Gurus,
One of our customer wanted serial number obligatory in OBD in the repair process.So we made it mandatory in serial number profile.Afterwards he posted some documents.But now he is not able to process those repair orders.He is trying to create OBD and after picking when he tries to post goods issue, system is giving the error as ECUS status is active.And serial number so and so can not be used here.
So again we changed serial number profile from mandatory to optional while doing PGI. still the system is giving the same error.We checked serial number against that material in IQ02. the status is Repaired. So we are not able to understand from where system is picking ecus status. Because the status of the serial number is showing repr not ecus. I am not able to understand where the system is picking ecus status from.
So now his all repair OBD transactions got stucked because of this.Please suggest a solution on highest priority.
He follows the process as given below.
repair order in VA01.
do inbound delivery where he has to put serial number which is mandatory here.
PGR.
after repair,
OBD
PGI.
Thanks,
Anand

hi
i think once you have delivered the material ,it will create the equipment master record record stating the status as installed at customer site,
the status you have said i think is user status ,if so kindly change the user status and proceed with the above said procedure
revert back with any further queries
regards
thyagarajan

Data element status showing Modified / Active

Hi Gurus,
created one custom field using EEW in WEB UI, that filed length and type is NUMC,2, my requirement is need to change the length from 2 to 3.So i am not able to change the length from WEB UI ,doing changes manually from SE11. i have chaged the particular Data element length to 3 and activated Data element the Data element status showing Modified /Active instead of Active.
i have checked SE09 .showing inactive objects. please help me on this how to come out from this problem.how to activate Data element.
Thanks & Regards,
Sunil B

Hi Sanly yan,
i have done table Adjustment in se14.
Thanks & Regards,
Sunil B

New outlook install not showing all email histories for some users

Hello,
I recently installed outlook 2013 on a windows 8 machine connected to exchange. I noticed it is not showing all the email histories for a particular user. Is there an index that needs to be rebuilt or something? Some users it shows a
bunch emails for others it only shows one or two. Thanks in advance.

Hi,
Do you mean only one particular user couldn't view all messages from Outlook?
From this sentence "Some users it shows a bunch emails for others it only shows one or two.", it seems that this issue affect some users, not only one.
If only one user is affected by this problem, you can follow the steps below to check result.
1. Please check if it displays all mails in OWA.
2. And please switch between Outlook cached mode and online mode to check result.
If some users are affected, please check database index status.
Best regards,
Belinda Ma
TechNet Community Support

There are no active responsibilities available for this user

Hi Guys...
I am not technical person... but wanted to if anybody has experienced the following problem:-
When logging into any account i get the following message:- There are no active responsibilities available for this user
No i have looked the threads posted and most advise to run the WF_SYNCHRONIZE_LOCAL_TABLES concurrent request.. if i run this through toad or UNIX as i can’t get into forms i always seem to get the following message which could be playing a part in my initial problem.....ORA-00600: internal error code, arguments: [ktsircinfo_num1], [9], [33], [52844], [], [], [], []
When i also query the following table Fnd_User_Resp_Groups i also get the following message: ORA-00600: internal error code, arguments: [ktsircinfo_num1], [9], [33], [52844], [], [], [], []
any help would be most welcome......
Bal

Is the system in maintenance mode, by any chance ? You put the app in maintenance mode when applying patches. If you connect as the apps database user, what does this sql statement return ?
select fnd_profile.value('APPS_MAINTENANCE_MODE') from dual;
MOS Doc 400151.1 - After Login Receive Error: 'There are no active responsibilities available for this user'
If the system is not in maintenance mode, you only option would be to open an SR
HTH
Srini

Adobe Reader 9.0 - Disable Forms Highlight color show border hover color for fields for all user a

Hello.
I am installing Adobe Reader 9.0 onto a new windows xp corporate build for my company. We would like to have the Forms Preference "Highlight Color" Show border Hover Color for Fields checkbox unchecked by default for any user that logs onto the workstation. (All new WinXP profiles, and if possible, any existing profiles) Is there a registry entry that can be changed to ensure that this option is unchecked by default on our WinXP build?
Thank you.

bumping thread...
I have downloaded the Adobe Reader 9.0 Custom Wizard install creator tool, but it still appears that I will need to know what registry key to change/import into the installer for this preference to be disabled by default for all users of the workstation that Adobe Reader 9.x is installed onto.
Any and all help is greatly appreciated.
Thank you.

AFS material-/mrp-status not active for plant.

Hello Everyone
I am facing an issue while executing the sales order
Issue :AFS material-/mrp-status not active for plant..
CAN ANY ONE RESOLVE THIS...
Regards,Rajneesh

Hi Rajneesh,
Tht prb might be the material master.
Goto Material master, select AFS MRP View and activate/ press the AFS MRP status button and save.
Reward with points if it is helpful
Kishore

User status shows active in portal for inactive LDAP users

Similar Messages

Maybe you are looking for