Using the iplanet-am-static-group-dn attribute

Hi,
I'm trying to construct a user query filter that would return me all the users in a particular static group, in order to integrate with some Synchronisation Services in Plumtree Portal.
I'm thinking of using the iplanet-am-static-group-dn attribute to do so.
However it seems that although I can see this attribute, there are restrictions using this for queries. I could only use this attribute to query when using the root account. When I tried the same query with my application account, it returned no results.
I need advice on a few issues:
1) Are there other better ways to query for the users in a static group? I'm not sure if the iplanet-am-static-group-dn attribute will remain stable in future releases.
2) If there are no better ways to do this, can the right to query using this attribute be delegated? This is a system attribute, so I'm not sure if we can really open this out to be searchable by other users other than root?
Appreciate any advice on this at all, as I'm running on a tight deadline for this solution.
Thanks!

The best way to query for members of a static group is to read the list of uniqueMembers in the group entry itself.
The iplanet-am-static-group-dn attribute is an attribute whose usage is private to Identity Server, and is not guaranteed to be up to date, accurate, or maintained by any other tool that used the directory.

Similar Messages

I can't find iplanet-am-static-group

After intstallation JES, and during configuring now
postinstallation, Access Manager step, i cant find the
attribute iplanet-am-static-group.
I enbaled successfully the plugin Referential integrity
postoperation. But when adding the indexes.
Anyone has a response for my problem.
Thanks in advance.

enlarge your DS admin window. Find out Additional Indexes:
Scrolling down as attributes are alphabetic order. You will find iplanet-am-static-group is below iplanet-am-modifiable-by attribute. Jerry

Using the Local Director static command

A few questions:-
1. I understand that this can be used to change the source IP address for real server oubound connections. Please confirm if this is just for connections that are initiated by the stipulated real servers.
2. I have a group of servers already being load balanced by a virtual using port 80 and want to use the static command to change the source IP address for connections that are initiated by the real servers to port 80. Could some just provide a few lines of sample config for this. Many Thanks

Yes, for outbound connections that the real server makes (not in response to a user accessing the virtual server), the IP address is translated to the virtual IP address identified by the static command. If the real_ip exists as a real server, then the outbound connection is counted toward the number of connections for that real server (that is, it will affect load balancing); otherwise, the connection is only translated and does not affect load balancing.
I am not sure about the static configuration for a particular port. Anyone else would like to comment?

How do I use the ? operator in JSF tag attributes?

I want to do something like this:
<h:inputText styleClass="${myBean.valid ? 'styleA' : styleB'}" ...>
What do I have to do to use this Expression language?
With the #{...} expression the ? operator doesnt seem to be available.
When I use the ${...} expression I am getting this error:
javax.servlet.ServletException: ServletException in '/WEB-INF/body/Test.jsp': /WEB-INF/body/Test.jsp(12,5) According to TLD or attribute directive in tag file, attribute styleClass does not accept any expressions
javax.faces.webapp.FacesServlet.service(FacesServlet.java:121)
Can anybody please help?
Thanks!

Personally, i'd do:
<h:inputText styleClass="styleA" rendered="#{myBean.valid}"/>
<h:inputText styleClass="styleB" rendered="#{!myBean.valid}"/>

How do I use the same css style but different attributes, Without affecting another page.

Hey everyone,
I am using the "NivoSlider", for my dreamweaver page but I am not sure how to tell styles that one page has one attribute and the other one will have a different attribute.
For example: in my "about us" I have a small slideshow with its own pictures. I then put a gallery page with its own pictures, yet, I want to make that slideshow box larger without affecting the other small slideshow.
I am using just one Style.CSS for the slideshow.
Anyways, is their a way to tell tell the code that one page is going to be a different width then the other?
Thank you!

Embedded CSS rules take priority over styles in external style sheets. So you can add page specific rules between your document's <head> tags and after all other links to external CSS files.
<style>
page specific rules here....
</style>
Nancy O.

How to use the dynamical or static variable for ESSBASE cube name?

Hi Experts,
When I import ESSBASE Cube into physical layer, the cube name from ESSBASE is created automatically, such as H_Sales.
I want to use the the static or dynamical variable for replacing the external name. So I try to create the static variable in RPD,such as cubeName, and use the following code
'VALUEOF(cubeName)' into the textbox of external name.
However, when I view the report in answer, it will generate the error message: Database VALUEOF(cubeName) does not exist.
Is it possible to implement this functionality?
Thanks..

Hi,
use <%=odiRef.getSchemaName("D")%>
D as parameter if it is the Data Schema or W if you need the schema from Work Schema
Your command will be like:
select <%=odiRef.getSchemaName("D")%>.GER_LOT_EXEC_ODI('Fluxo', 1, 'C') FROM DUAL
Works?
Cezar Santos
http://odiexperts.com

Do you have to request a SSL server certificate using the iPlanet Java console?

I have an SSL certificate that was signed by a CA. The original certificate
request was made external to the iPlanet Directory server. I believe it was
made using OpenSSL. Is there a way that I can take this signed certificate
along with the private key (base64 encoded) and install it for use with
iPlanet Directory server?
Or, do I have to make the certificate request directly through the iPlanet
Java Console application?
Jon

pls refer this site to enter your host name and your details they will provide free certificates for directory server and web server in 60 days trial.select Netscape commerce server its under dircetory server.
http://freecerts.entrust.com
once you get encripted code from CA then installing into your directory server.

Use the for-each to group the element across in output

I have the report in XMLP for which we need to design the template to generate the output in excel. we need to group the element across the report. by default the for-each group the element top-down, is there any option to group the elements across. example:
consider the xml data as
<?xml version="1.0"?>
<XXFA_TAL_REP_XMLP>
<LIST_G_DAY_WE_EXECUTED>
<G_DAY_WE_EXECUTED>
<DAY_WE_EXECUTED>18-NOV-09</DAY_WE_EXECUTED>
</G_DAY_WE_EXECUTED>
<G_DAY_WE_EXECUTED>
<DAY_WE_EXECUTED>19-NOV-09</DAY_WE_EXECUTED>
</G_DAY_WE_EXECUTED>
</LIST_G_DAY_WE_EXECUTED>
</XXFA_TAL_REP_XMLP>
if we group by the above data with group G_DAY_WE_EXECUTED and try to print the data element - DAY_WE_EXECUTED we will get two fields as below
18-NOV-09 - in excel cell A1
19-NOV-09 - in excel cell A2
but we need to have these fields in excel cells - A1 & B1
Please help me to achieve this.
~ Ashish | 630 487 9486

Can you try with
for-each@column

Has anyone every try using the iplanet portal server radius authentication module with cryptoCard?

We are using the easyRadius server from CryptoCARD. When we run the radius server in debug mode, it appears ips is sending multiple access-request message. Also, the server is coming back with a challenge which we are not expecting.

yes,
we did basic integration where the authentication will be done using siteminder. The trick is to protect the portal server web server and not the gateway. You also need to add a new authentication module for siteminder in the portal using ipsadmin. We are protecting the login html page only. We couldn't protect the desktop because it's built using servlets.

Using the Null function to delete an attribute from a user in the metaverse

RC1 Update 3 adds a new Null function, which (to me) sounds like it should flow a null value into the destination attribute. I have a case where i am flowing a date from SQL into the metaverse. Just for testing, I tried a basic flow of:
Null()->employeeEndDate
This seems to function the same as this:
""-employeeEndDate
Both will add the employeeEndDate attribute to the metaverse object with a blank (not null) value. To me, Null() seems like it should be equivalent of mventry("employeeEndDate").Delete, but it doesn't seem to. Ultimately, what I want is to flow the value in if it is present in my connector space, and delete it if it is not. Something like this:
IIF(IsPresent(TermDate),DateTimeFormat(TermDate,"yyyy-MM-ddTHH:mm:ss.000"),Null())
Anyone have any thouse on this? Is there an easier to way to do this that I am overlooking?
Thanks,
Keith

So here is a new update on this, with somewhat of a workaround. I ran into a scenario where I wanted to delete attributes upon removal of a sync rule. Unless I am missing something, this can't be done normally. When my sync rule is removed,
the attributes are no longer flowed from the MV to the CS, but they aren't removed from the object in the CS either.
My Scenario:
Only certain users should flow their location info to AD for display in the GAL.
My Solution (these aren’t the real Set/Rule/WF/MPR names, it just makes it easier to understand):
1.
Create two sets: “Show Info” & “Hide Info”
2.
Create Sync Rule: “Flow info to AD”
a.
Dependent on a Sync Rule “AD Base”
3.
Create Workflow “Apply Flow Info to AD” to apply “Flow Info to AD” Sync Rule
4.
Create MPR to apply the “Apply Flow info to AD” Workflow on Transition In to “Show Info”
5.
Create a new Metaverse attribute for people called “nullString”
6.
Create Sync Rule: “Null Info to AD”
a.
Dependent on “AD Base”
b.
Flows the nullString attribute to all AD attributes that need to be blanked out
7.
Create Workflow “Remove Flow Info to AD” to remove “Flow Info to AD” Sync Rule
8.
Create Workflow “Apply Null Info to AD” to apply “Null Info to AD” Sync Rule
9.
Create MPR to apply “Remove Flow Info to AD” and “Apply Null Info to AD” Workflows on Transition In to “Hide Info” set.
Obviously, you’ll need a null MV attribute for each data type you need to blank out, but it works.
I haven't tried it, but it's likely this could also be done on inbound flows, provided you have unused attributes of each type in your data set (with a view you could
just create them). If X, then flow regular attribute from the CS in to the MV; if not X then flow the "null" attribute from the CS into the MV.
Keith

Why ..we have to use this ? public static void ? please !

hi ...im ibrahim ..and im new here in java nd new in the forum too ...nd please i would like to know ...why
do we use the method
public static void main (String []args)
i mean why ..static nd why public ..why void ....why main ..nd why (string []args)
...why we use it ...always ....hopefully ..im looking for a very clear answer to this ...issue ..?
please help .......!

public - this is the visibility modifier (it means that the body method can be call by any outside method)
static - the method is a static instance of the class. Not sure what exactly it does though.
void - this is the return type. void means that the method returns nothing.
main - the name of the method. It can be anything.
"public static void main" - this is the main method where upon executing the Java program the Java Virtual Machine will try to locate this method within the specifies class to be executed. This is always the first one to run when executing a Java program. None of this word may be changed or the program cannot be run.

Can't find the type wsrc_runtime_attr_varray for using the wwrc_api API

hi,
I manage to build a custom search portlet in PL SQL that can search for items and filter on their attributes.
everything works lovely and I'm at the final stage : performing the search !
I plan to use the wwsrc_api.item_search procedure and specify attributes with the
wwsrc_api.specify_attributes.
(see the doc on > http://www.oracle.com/technology/products/ias/portal/html/plsqldoc/pldoc1014/wwsrc_api.html#procedure-specify_attributes )
The problem is when calling teh specify_attibutes procedure, I can't declare the last (but not the least) parameter. It's type is wsrc_runtime_attr_varray and I can't find it anywhere in any schemas of my DB.
here is the signature of the procedure :
procedure specify_attributes(
p_id in number,
p_siteid in number default wwsbr_site_db . shared_siteid,
p_value in varchar2,
p_operator in varchar2 default contains_all,
p_datatype in varchar2 default data_type_text,
p_in_out_attr_varray in out nocopy wwsrc_runtime_attr_varray
My question is : where is the type wsrc_runtime_attr_varray ?
any clues ?

hi sebastien,
I've some troubles when performing a search using the "specify_attributes" procedure
I get the SEARCH_FAILURE_EXCEPTION when i try to search items with an attribute.
The search works well without calling it.
Can you help me ?
CODE
create or replace
PACKAGE BODY PKG_SEARCH AS
PROCEDURE get_contents(p_siteid INTEGER, p_intitule VARCHAR2 DEFAULT NULL) IS
v_result portal.wwsrc_api.items_result_array_type;
v_outcount NUMBER;
v_outscores portal.wwsrc_api.number_list_type;
v_attributes portal.wwsrc_runtime_attr_varray;
v_intitule portal.wwsbr_item_attributes.VALUE %TYPE;
-- Attribut "INTITULE"
v_intitule_attrid NUMBER;
v_intitule_caid NUMBER;
v_intitule_type VARCHAR2(20);
BEGIN
* Construction de l'objet ATTRIBUT avec la vue WWSBR_ATTRIBUTES
* partie "INTITULE"
select id, caid, data_type into v_intitule_attrid, v_intitule_caid, v_intitule_type
from portal.wwsbr_attributes where name = 'INTITULE' and rownum = 1;
portal.wwsrc_api.specify_attributes(
p_id => v_intitule_attrid,
p_siteid => v_intitule_caid,
p_value => p_intitule,
p_operator => portal.wwsrc_api.MATCH_ANY,
p_datatype => v_intitule_type,
p_in_out_attr_varray => v_attributes
v_result := portal.wwsrc_api.item_search(
p_attributes => v_attributes,
p_attributesmatch => portal.wwsrc_api.match_any,
p_out_count => v_outcount,
p_out_scores => v_outscores);
-- nbre de résultats
htp.prn('Total : ' || v_outcount);
-- pour chaque resultat
FOR i IN 0 .. v_result.COUNT LOOP
IF v_result.EXISTS(i) THEN
-- récupération de l'attribut personnalisé 'INTITULE'
SELECT VALUE INTO v_intitule FROM portal.wwsbr_item_attributes
WHERE item_caid = p_siteid AND item_masterid = v_result(i).id
AND attribute_id = v_intitule_attrid AND attribute_caid = v_intitule_caid;
-- PRINT
htp.prn('<document>');
htp.prn('<id>' || v_result(i).id || '</id>');
htp.prn('<type><![CDATA[' || v_type || ']]></type>');
htp.prn('</document>');
END IF;
END LOOP;
htp.prn('</documents>');
-- gestion des exceptions
EXCEPTION
WHEN portal.wwsrc_api.search_failure_exception THEN
htp.prn(' An internal exception was raised by
* Portal or Oracle Text');
WHEN others THEN
htp.prn('Erreur inconnue');
END;
END PKG_SEARCH;

Grouping of Shopping Carts using the report BBP_SC_TRANSFER_GROUPED

Hi Experts,
I am a new SRM consultant and have been asked to investigate an issue regarding grouping of Shopping Carts using the report BBP_SC_TRANSFER_GROUPED.
The wanted scenario:
For one specific vendor we wish to pool/group request coming from various shopping carts into one PO e.g. once a day. The shopping carts for that vendor can be destinguished by one specific product category.
We are on classic scenario hence the PO will be created in our ECC system.
Settings we have done to accomplish what we want:
1. We have set up the transfer for grouping on the specific product category in the sourcing area in the IMG structure
2. We have run the report BBP_SC_TRANSFER_GROUPED (grouping takes place according to the product category)
This approach works, the shopping carts gets grouped into one PO in ECC. however the line items from the Shopping Carts are mixed in the PO eg SC1: Item A, Item B, Item C, Item D SC2: Item 1, Item 2, Item 3, Item 4 PO (Current result) Item A, Item 1, Item B, Item 2, Item C, Item 3, Item D, Item 4.
This seems quite strange, as there are no logic reason for this split. It would be understandable if it was a matter of delivery dates of the goods, but they are not in any order i.e. first coming delivery date first.
Does anyone know how to correct this or can anyone clarify why this sequence mix happens?
For me it seems like a program errror.
Hope you can help me solve this issues
Cheers Christian
Edited by: Christian Gjellerup on Aug 6, 2010 3:34 PM
Edited by: Christian Gjellerup on Aug 6, 2010 3:35 PM

Hi,
In SRM -Product categories = Purchasing group in SAP R/3.
During the transfer of P.R from R/3 you have enter the Purchasing group in R/3.
In SRM in the PPOMA_BBP in the extended attribute you can enter the exact product categories
or else enter * in the product categoies and the backend logical system
in SPRO --define objects in backend system --- in this enter the purchasing group and category Id
check your default settings in the SRM web browser
Regards
G.Ganesh Kumar

Attribute parsing using the Oracle SAX Parser

I am trying to parse attributes like <Phone Type="N"> using the SAX xml parser from oracle in the startElement method and am getting a null pointer exception
public void startElement(String sName_, AttributeList attrs_) {
if sName_.equals("Phone")
String phoneType = attrs_.getValue("Type")
Any ideas ??
null

Using 2.0.2.9, the following works for me:
import oracle.xml.parser.v2.*;
public class SAXParserExample {
public static void main(String[] a) throws Throwable {
SAXParser s = new SAXParser();
Handler h = new Handler();
s.setDocumentHandler(h);
s.parse(new java.io.StringReader("<Phone Type='N'/>"));
import org.xml.sax.*;
public class Handler extends HandlerBase {
public void startElement(String sName_, AttributeList attrs_) {
if (sName_.equals("Phone")) {
String phoneType = attrs_.getValue("Type");
System.out.println(phoneType);
}What's different about your case?

Using the binding attribute within Tomahawk's t:dataList tag

I am trying to create a .jsp page with a dynamic list of tables. Each table on the page has a dynamic number of columns. I read an excellent blog ([The BalusC Code - Using datatables|http://balusc.blogspot.com/2006/06/using-datatables.html#PopulateDynamicDatatable]) that taught me how to create dynamic tables using the binding attribute. I can now get the tables with dynamic columns working.
What I would like to do next is nest the dynamic tables within a Tomahawk t:dataList tag:
<t:dataList value="#{utilitiesTableSegBean.attributeTables}" var="attributeTable">
    <h:outputText value="#{attributeTable.title}"/>
    <h:panelGroup binding="#{attributeTable.dynamicTableGroup}/>
</t:dataList>
{code}
When I run my app I get this error:
javax.servlet.ServletException: javax.servlet.jsp.JspException: org.apache.jasper.el.JspPropertyNotFoundException: /s/UtilitiesTableSeg.jsp(57,56) '#{attributeTable.dynamicTableGroup}' Target Unreachable, identifier 'attributeTable' resolved to null
Why do I get this error?
If I remove the h:panelGroup tag then the h:outputText tag works just fine. Why does 'attributeTable' resolve to null for the binding attribute of h:panelGroup, yet works for the value attribute of h:outputText?
So then I thought that I might be able to make it work with an index into a bean property that returned the list of table objects. So I tried to modify my panel group tag to:
{code}<h:panelGroup binding="#{utilitiesTableSegBean.attributeTables[0].dynamicTableGroup}"/>{code}
I was just doing a quick initial test and expected to see the first table repeated over and over because I had hard coded the value of '0' as the index. But I was wrong. It listed through all of the tables correctly. Why? This makes no sense to me!
So I changed my jsp again so that it looked like this:
{code}
<t:dataList rowIndexVar="tableIndex" value="#{utilitiesTableSegBean.attributeTables}" var="attributeTable">
    <h:outputText value="#{attributeTable.title}"/>
    <h:panelGroup binding="#{utilitiesTableSegBean.attributeTables[tableIndex].dynamicTableGroup}"/>
</t:dataList>
{code}
This is how I expected to code it so that the tables would all be shown correctly. And it gives this error:
org.apache.jasper.JasperException: An exception occurred processing JSP page /s/UtilitiesTableSeg.jsp at line 57
(Line 57 is the line with the h:panelGroup tag.)
Root cause: javax.servlet.ServletException: javax.servlet.jsp.JspException: java.lang.IllegalArgumentException: null
I would really like to get the original version working, but any feedback and/or suggestions would be greatly appreciated. I have spent a lot of time trying to figure this out and I just don't know where else to look.
Thank you very much!
Dave

Yes, sorry about that - I started off trying to prove a potential solution.
Aim:
A user logs onto a weblogic application and is authenticated against OID. The application is making SOAP service calls to a proxy endpoint monitored by another vendors software which authenticates the user against the ldap and checks their roles to see if the user can call the service.
Solution so far:
The initial application gets the username from the JAAS principal, but the password is not supplied. I can easily supply the SHA password digest to it (but putting a cleartext password in the header will probably not be given the go-ahead). This would enable the application to make the SOAP call with a username and digest.
The software protecting the services can be configured in a variety of ways to authenticate the user to the ldap. One involves using the wsse username token in the header (cleartext password or digest).
This authentication is failing and I don't yet have the diagnostic tools available to see which stage is in error. I was trying to prove that you could actually authenticate with an SHA password digest by doing a bind.
Regards

Using the iplanet-am-static-group-dn attribute

Similar Messages

Maybe you are looking for