Users dn changes in AD, OID and portal

I have some question about dn changes...
we have a synchronized Active Directory with OID. When user's dn changes in AD, it changes in OID.
We using portal API (wwsec_api, wwsec_oid) functions for managing user... such as set his default group, add/remove to/from group and others.. After user's dn have changed these funtions not working for that user.
so.. here comes my questions:
these portal API functions uses dn from table portal.wwsec_person$ ?
if so, is there a way to update dn in this table when it changed in OID automatically? Or it can be done only manualy?
is it safe to update dn in this table?
thanks for any hints.
shar

thank you for response.
as I'm new to synchronization, some questions comes because of not knowing something..
Now I see that all changes in portal are made just after the user logs in. That was the problem.

Similar Messages

OiD and Portal Integration (WWC-41400)

Outside of the steps below what can be done to integrate Portal and OiD ?
Thanks in Advance !
This is a new install of Oid and Portal.
Portal is installed using ias10221 in a 8.1.7.2 database on Sun Solaris 2.7 w/patches.
Used Configuring Oracle 9iASPortal for LDAP Authentication. White Paper.
December 2000. To defined OID/Portal steps.
I've reviewed
Note: 133123.1 WWC-41400 trying to login to Portal using LDAP authentication
http://otn.oracle.com/products/iportal/htdocs/portal_faq.htm selecting from dba_libraries shows these items.
PORTAL30_SSO AUTH_EXT
/u01/app/oracle/product/8.1.7.2/lib/ssoxldap.so
Y VALID
SYS AUTH_EXT
/u01/app/oracle/product/8.1.7.2/lib/ssoxldap.so
Y VALID
PORTAL30 AUTH_EXT
/u01/app/oracle/product/8.1.7.2/lib/ssoxldap.so
Y VALID
The file exists:
-rw-r--r-- 1 oracle dba 8324 Dec 5 14:37
/u01/app/oracle/product/8.1.7.2/lib/ssoxldap.so
cmrapp:/ >echo $TNS_ADMIN
/u01/app/oracle/product/8.1.7.2/network/admin
cmrapp:/ >tnsping extproc_connection_data
TNS Ping Utility for Solaris: Version 8.1.7.2.0 - Production on 10-DEC-2001
(c) Copyright 1997 Oracle Corporation. All rights reserved.
Attempting to contact (ADDRESS=(PROTOCOL=IPC)(KEY=extprocO))
OK (30 msec)
Here is the listener.ora
LISTENER2 =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = cmrapp.ssd.census.gov)(PORT = 1526))
(DESCRIPTION =
(ADDRESS = (PROTOCOL = IPC)(KEY = extprocO))
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(PROGRAM = extprocO)
(SID_NAME = PLSExtProc)
(ORACLE_HOME = /u01/app/oracle/product/8.1.7.2)
(ENVS =
'LD_LIBRARY_PATH=/u01/app/oracle/product/8.1.7.2/ctx/lib:/u01/app/oracle/product/8.1.7.2/lib:/u01/app/oracle/product/8.1.7.2/bin:/u01/app/oracle/product/8.1.7.2/ctx/bin')
(SID_DESC =
(GLOBAL_DBNAME = oiddev)
(ORACLE_HOME = /u01/app/oracle/product/8.1.7.2)
(ENVS = 'TNS_ADMIN=/u01/app/oracle/product/8.1.7.2/network/admin')
(SID_NAME = oiddev)
TNS_ADMIN is set to /u01/app/oracle/product/8.1.7.2/network/admin in the
apachectl script and at the OS level.
Additionally
The Apache/Apache/logs and Apache/Jserv/logs are clear and no invalid database objects.
I also looked within the Portal30 schema for errors, but found none.
SQL> select * from wwv_rw_errors$;
no rows selected
SQL> select * from wwv_errors$;
no rows

Hello Lorenzo,
Currently the procedure on how to do this can be found at:
http://technet.oracle.com/products/iportal/pdf/conf_ldap.pdf
9iAS v2 will be in production sometime in the next month or two.
The procedure for setting this up will be more siplified in 9iAS
v2.
Thanks,
Jay

Link b/w orclIsEnabled on OID and portal API calls wwsec_api.activate_user

Hi Folks,
I am just curious about the account status on OID and access on portal user profiles.
Is account activation or deactivation in OAS portal (using wwsec_api.activate_portal_user/ deactivate_portal_user calls) related to the OID enable/ disable of an account using orclIsEnabled field?
i think the portal api calls control the portal access in the wwsec_person$ tables. but does it also reflect on to the orclIsEnabled field?
any guidance will be highly appreciated!
AMN

I'm not 100% positive but I do not think the portal account activation/deactivation calls change the orclIsEnabled attribute in OID since there are times when a user in OID may still be enabled for SSO purposes but that same user may be deactivated as a portal user.

When I open iTunes, I get a message that "iTunes has stopped working". I've tried reinstalling itunes, creating a new user file, changing the startup programs, and am having no success in getting iTunes to stay open. Any "fixes" for this problem?

When I open ITunes, I get a message that "iTunes has stopped working". I have tried reinstalling iTunes, creating a new user file, changing the startup programs in accordance with articles in iTunes troubleshooting, but am having no success in getting iTunes to stay open. Any fixes for this problem?

How to resolve Error Message WWC-41400 with OID and Portal

Hello.
I followed the guidelines to use Oracle's OID as the login
server for my 9iAS-based Portal. The login names and passwords
were successfully copied from the Portal to the users.lfif file
(visible in Oracle Directory Manager).
I tested the login/passwords and could not login to the Portal.
I received the error message WWC-41400. I check past "tars",
and the followed the steps to check the library linkage,
external library file, status of the listner, and the
environment settings for the TNS names file.
The settings are correct, yet I still can not login to the
Portal.
Any suggestions.
Joyce

Hello Joyce
I think you should input cn=orcladmin during "Configuring Login
Server to use LDAP using DBMS_LDAP package" step with
ssooid.sql script in "Enter value for bind_dn:" field
wbr from Russia

About OID and PORTAL?

When I run the sql 'c:\oracle\portal\plsql\admin\sso\ssoldap.sql',
the system reported the following error:
0/0 pls/sql:complication unit analysis termited
0/14 pls-00201 ???? wwsso_auth_external
0/14 pls-00304 ???? wwsso_auth_external.
I found that the error was cause by @@ssoxldap.pkb,how can I do about it?
Can the *.pkg file be modified?
Thank you.

I'm not 100% positive but I do not think the portal account activation/deactivation calls change the orclIsEnabled attribute in OID since there are times when a user in OID may still be enabled for SSO purposes but that same user may be deactivated as a portal user.

ISE 1.2 Guest portal user cannot change their passwords

I have a WLC 5508(version 7.6) and a server installed the ISE (version 1.2.1.198)，Now we configured the CWA，Use guest portal as an employee and guest login url，We can use the manually create internal user and password successfully logged in, and we set up allow guest users to change password in Multi-Portal, but the user can not change the password in the guest portal ,I suspect the change password option on the Guest Portal actually works? Can anyone tell me how to change their own username password in the guest portal ?

Requiring Guests to Change Password
You can allow or require guest users to change their password after their initial account credentials are created by the sponsor. If guest users change their passwords, sponsors cannot provide guests with their login credentials if they are lost. The sponsor must create a new guest account.
You can either allow guests to change their passwords, or you can require that they do it at expiration and at first login. To require internal users using a guest portal to change their password upon their next login, choose Administration > Identity Management > Identities > Users . Select the specific internal user from the Network Access Users list and enable the change password check box.
Before You Begin
Create a Guest portal or modify the DefaultGuestPortal. This setting is specific to each Guest portal.
Step 1 Choose Administration > Web Portal Management > Settings > Guest > Multi-Portal Configuration.
Step 2 Check the Guest portal to update and click Edit .
Step 3 Click the Operations tab.
Step 4 Check either or both options:
Allow guest users to change password
Require guest users to change password at expiration and first login
Step 5 Click Save .

Identify when a user has change value in USEREXIT_CHECK_VBAP before saving

I originally posted and closed this question, but I am still struggling with the code.
The req is now to also update the value of VBAP-LPRIO, so I now have to use the Exit : USEREXIT_CHECK_VBAP.
The issue is that my solution must take into account when a user manually overwrites a value and not replace it with a value determined in the user exit.
My problem is that the user might do the following
1 - Create a sales order and enter a new item line, press enter
2 - The user exit is triggered, and I check that XVBAP-UPDKZ = I (user add a new line)
3 - The user-exit determines the new value and populates the field
4- the user then click on the item line, and then manually changes the value of VBAP-LPRIO
5- The user-exit is triggered again, and because XVBAP-UPDKZ = I , my code is triggered and updates the field.
What I want is to identify that a user has manually changed the value and not overwritte the value.
1 - I have check YVBAP and it is blank, as the user has not saved the sales order.
2- The values of VBAP and XVBAP are the same..
3 - I cannot re-read the database (KNVV) table as the user could have populate the value with the same value.
What I need is how to identify when a user has made a change to a field before they save the sales item, as YVBAP is never filled.
Previous post----
Hello,
I am writing a bit of code that will overwrite the payment terms in a sales order item based on a number of factors. (ship-to, incoterms, document type, etc)
I am using the following program MV45AFZB at Exit : USEREXIT_CHECK_VBAP. I am using this exit as the users need to see the payment terms after an item has been entered into the sales order and not have the value determined at sales order save.
I am not using USEREXIT_MOVE_FIELD_TO_VBAP as it is only triggered once at the time of creation and not when I change the document. I need it in USEREXIT_CHECK_VBAP as users could change the incoterms in VA02, so the code must be redetermined.
My code is working as expected, however, I have a problem when a user enters a sales order item line and then manually changes the payment terms, as my code then is over writes the users values.
The flow is as follows
As user creates a sales order
They populate the sales order header
They populate material number and qty
User exit USEREXIT_CHECK_VBAP is triggered and correctly determines the payment terms
The user then double clicks on the sales order item and decides to overwrite the payment terms.
My user-exit is retriggered and check to see if XVBAP-UPDKZ = I (insert)
As it is still an insert, my code triggers.
I have tried to check YVBAP, but no entry exist as it stills is seen as in insert? What I really need to know that while it is still an insert, the user has change the field value and my code should not over write the users value.

When do you need to update LPRIO ? When user makes the change at the Payment terms on line item?
Regards,
Naimesh Patel

Exit for FB02 in order to restrict the users to change text & Long text

Hi All,
In FB02 for each line item there is a text field and a Long text option.
my requirement is to restrict some users to change the long text and text values though the users have authorization to FB02.
Thanks in advance,
Regards,
Deepak

Hi Firoz,
we have similar requirement..Please help us.
In FB02 the SGTXT (Text field) field should be editable only for particular users.
Can you please give the procedure you have done with screen shots if possible.
Regards,
Khaja

Can Communication User Id change its password

Hello Experts,
Can Communication User Id change its own password and can the password be deactivated automatically even after when its used?
Regards,
Sums

Note that if either Communication or System users have authorizations themselves for the user management (S_USER_GRP actvt '05' for the assigned user group) then they will both be able to change passwords (including their own if in that group or not assigned to one).
This is different to changing your own password voluntarily or being forced to by system password rules, but it is also a possibility you should ideally rule out (admin auths for RFC to change passwords).
Unfortunately, several RFC functions and transactions make "bogus" checks on exactly this authorization but do not need them. You you need to be carefull with it. Particularly anything relating to Business Parter functions should be very suspect if you find it in an authorization trace - it is not needed.
Cheers,
Julius
Edited by: Julius Bussche on Sep 20, 2011 10:30 PM

Change authpassword;oid and authpassword;orclcommonpwd with ldapmodify ?

We have an OCS 10g on SLES9 testinstallation. Is it possible to change authpassword;oid and authpassword;orclcommonpwd in OID with ldapmodify ?
Regards, Karsten Schnebel

Depending on what you are trying to do, if you change the "userpassword" attribute the authpassword attribute is updated (it changes the user's portal password).

How to allow user to change SAP Portal password by themselves

We would like to allow user to change SAP Portal password by themselves. However, I added role Manage_My_Password and Manage_My_Profile to a user account. After logoned with this user account and opened the option 'Personalize'. I only find the page allow me to customize the page layout. But I haven't find tab for changing profile and password.
Pls advise.
Thanks.
Edward

Hi Edwar,
You can hide the pages from portal personalization workset. copy the workset and select the page and click on property -> select Invisible in Navigation Areas ->yes
You can find the workset under
Portal content->End user content->Standard Portal Users>Workset->Portal Personalization
If you want a custom developed application fro change password see the below blog
A Change Password Application
Hope it helps
Regards
Santosh

User created but can't log into Portal. OID not in-sync with Repository.

Logged into Portal as portal
Go to Administ Tab
Created a group i.e. TestGroup
Created a user i.e. TestUser, put the user's default group as TestGroup.
I logged-out and and tried to log in as TestUser it doesn't let me log into Portal.
I do see the TestUser under TestGroup when going to Administer Tab and checking it, but some how can't log-in. I tried to use wwsec_api.user_in_groups to print the group names using SQL-Navigator but it never returns anything for the user I created above.
username := 'TestUser';
groupid := WWSEC_API.USER_IN_GROUPS(p_user_name=>username);
..........Now if if try the following and use portal it returns me all the groups the portal user is in i.e.
username := 'portal';
groupid := WWSEC_API.USER_IN_GROUPS(p_user_name=>username);
..........Looks like OID and repository are not in-sync. Can someone give some in-sight why is this happening and what can I do to fix this. I even tried adding the user under some other groups but still never returns me the groups when I run the above PL/SQL.
Thanks

Under Administer -> SSO/OID Tab I have Enable directory synchronization is checked. But still can't log in. Any ideas.
Thanks

I had renamed my user login name and assumed that there will be no change in the settings and files. When I login with the new profile name everything is gone. How can I get back all my files and settings?

I had renamed my user login name and assumed that there will be no change in the settings and files. When I login with the new profile name everything is gone. How can I get back all my files and settings? Please help. Thanks.

You should have asked this before you tried: Changing username or short name- User Account and Short Name- OS X- How to change user account name or home directory name.

Display some constant in the input field and allow the user to change it.

Dear All,
I have a requirement in WDA to display inputfield with some constant initially and allow
the user to change that value according to his wish.Currently I am using UI Element
InputField for this,but I am not able to show the constant initially.
How can I achieve this pls suggest.
Thanks,
Reddy.

Hi sudhir,
To display with default values, you need to write your code in wddointi method.
Check this code..
* navigate from <CONTEXT> to <INPUT> via lead selection
lo_nd_input = wd_context->get_child_node( name = wd_this->wdctx_input ).
* get element via lead selection
lo_el_input = lo_nd_input->get_element( ).
lv_ship_point = '1001'.
* set single attribute
lo_el_input->set_attribute(
name = `SHIP_POINT`
value = lv_ship_point ). // Now ship_point have initial value 1001.
Cheers,
Kris.

Users dn changes in AD, OID and portal

Similar Messages

Maybe you are looking for