Will LDAP migration of users affect their Collaboration Rooms??

Hi,
We are having EP 6.0 with MS-AD readonly Ldap.
We are having domain migration in process now, ie users
are being migrated from dom1.comp.com to dom2.comp.com.
I was wondering how this is going to affect all the collaboration roooms
that we are having, because the user's unique id will change once this
migration is done.(isnt it ??) So would we have to re-assign the users
permisions in each of these rooms?
Also what other things are bound to get affected.
Any help on this would be great.
Regards
Vineeth

Hi,
Yes it will change then (I hopeed you were using samaccountname).
I've got little experience with collboration, but if there is a mass export and import which requires little manual steps that indeed seems like the best way to go.
An alternative would be to program your own export and import functionality by using the collaboration java API.
This should be fairly trivial for a programmer since the API appears quite good
http://help.sap.com/javadocs/NW04/current/km/com/sap/ip/collaboration/room/api/IRooms.html
http://help.sap.com/javadocs/NW04/current/km/com/sap/ip/collaboration/room/api/IRoomUsers.html
Regards
Dagfinn

Similar Messages

Will LDAP migration of users affects Room permissions?

Hi,
We are having EP 6.0 with MS-AD readonly Ldap.
We are having domain migration in process now, ie users
are being migrated from dom1.comp.com to dom2.comp.com.
I was wondering how this is going to affect all the collaboration roooms
that we are having, because the user's unique id will change once this
migration is done.(isnt it ??) So would we have to re-assign the users
permisions in each of these rooms?
Also what other things are bound to get affected.
Any help on this would be great.
Regards
Rani A

Hi,
Yes it will change then (I hopeed you were using samaccountname).
I've got little experience with collboration, but if there is a mass export and import which requires little manual steps that indeed seems like the best way to go.
An alternative would be to program your own export and import functionality by using the collaboration java API.
This should be fairly trivial for a programmer since the API appears quite good
http://help.sap.com/javadocs/NW04/current/km/com/sap/ip/collaboration/room/api/IRooms.html
http://help.sap.com/javadocs/NW04/current/km/com/sap/ip/collaboration/room/api/IRoomUsers.html
Regards
Dagfinn

Sending Tasklist to user group from collaboration room

Hi Experts,
      I have to send task list to a user group. This group contains 5 members of this room. When i create a tasklist from my room & send it to group it showing error like this
" Enter valid assignees for task number 1 " . how can i rectify this?
Regards,
Kumar.

Hi Kumar,
This is really a **** to do an trial and error method because it consumes lot of time.
so here is something for u
A step is assigned to multiple users and has a minimum threshold of approvals assigned (that is, assignees are user 1, user 2, and user 3, and two of the three are required to approve before this step can be completed). In this case,
u25CF     two of the three users must approve before the step is considered approved
u25CF     if two of the three users reject it, the step is rejected, and consequently will either return the task to the last Action Item assignees or, if no previous Action Item exists, will conclude the task, with the history reflecting the rejection.
in my trial i had only two user connected to a group so sometimes second step is recieved by user 1 or user 2 . if one of them approves then document is getting approved and goes to next step
it is same in the case of rejection too.
i hope now everything would be clear
have a look at this [Link|http://help.sap.com/saphelp_nw70/helpdata/EN/a1/eb3f54ab7c4ce39408f38d9eb52f65/frameset.htm]
Regards,
vijay.

How to migrate Apex users with existing passwords.

Hi Guys,
Our apex env finally getting a upgrade from 3.1.1 to 4.1.1 (I know, it's been overdue for years)
Some of our apps use 'Application Express' authentication, and have few hundreds users in Apex (and users belong to diff user groups).
The issue is, the 4.1.1 env is set up on a brand new server and DB, we want to migrate these users with their existing passwords from the 3.1.1 env.
I tried exporting the workspace, and the users are exported as below,
 begin
 wwv_flow_fnd_user_api.create_fnd_user (
 p_user_id => '10592934818556549584',
 p_user_name => 'TEST',
 p_first_name => 'a',
 p_last_name => 'b',
 p_description => '',
 p_email_address=> '[email protected]',
 p_web_password => 'E92903DEAD135E6E86BD6B64544D2BD9',
 p_web_password_format => 'HEX_ENCODED_DIGEST_V2',
 p_group_ids => '10592435401495787816:',
 p_developer_privs=> '',
 p_default_schema=> 'TEST',
 p_account_locked=> 'N',
 p_account_expiry=> to_date('201212040000','YYYYMMDDHH24MI'),
 p_failed_access_attempts=> 0,
 p_change_password_on_first_use=> 'Y',
 p_first_password_use_occurred=> 'N',
 p_allow_access_to_schemas => '');
 end;
when I run this in 4.1.1 I had to modify it to the new format as below,
also changed the p_group_ids to new user group but kept the password the same
 begin
 wwv_flow_fnd_user_api.create_fnd_user (
 p_user_id => '',
 p_user_name => 'TEST',
 p_first_name => 'a',
 p_last_name => 'b',
 p_description => '',
 p_email_address=> '[email protected]',
 p_web_password => 'E92903DEAD135E6E86BD6B64544D2BD9',
 p_web_password_format => 'HEX_ENCODED_DIGEST_V2',
 p_group_ids => '1399416797653068:',
 p_developer_privs=> '',
 p_default_schema=> 'TEST',
 p_account_locked=> 'N',
 p_account_expiry=> to_date('201209041006','YYYYMMDDHH24MI'),
 p_failed_access_attempts=> 0,
 p_change_password_on_first_use=> 'Y',
 p_first_password_use_occurred=> 'N',
p_allow_app_building_yn=> 'N',
p_allow_sql_workshop_yn=> 'N',
p_allow_websheet_dev_yn=> 'N',
p_allow_team_development_yn=> 'N',
p_allow_access_to_schemas => '');
 end;
the result was that the user is created fine, but the password is not valid.
Anyone knows how to export apex users with existing password to a new server?
Thanks.
Edited by: Danny on 3/12/2012 20:51

Hi,
Not sure why you say
when I run this in 4.1.1 I had to modify it to the new format as below, If you just run the workspace export sql it should create the Workspace, Groups and Users
The signature of the procedure is below. See the highlighted lines.
procedure create_fnd_user (-- Description:
-- This procedure allows for programatic and bulk creation of users.
-- Example:
-- From sqlplus logged in as the privileged flows user, first
-- ensure that the security group id is set properly, then create
-- your users.
 -- begin wwv_flow_security.g_security_group_id := 20; end;
-- begin
-- for i in 1..10 loop
-- wwv_flow_fnd_user_api.create_fnd_user(
-- p_user_name => 'USER_'||i,
-- p_email_address => 'user_'||i||'@mycompany.com',
-- p_web_password => 'user_'||i) ;
-- end loop;
-- commit;
-- end;
-- Arguments:
-- p_user_id numeric primary key of user
-- p_user_name the username the user uses to login
-- p_first_name informational only
-- p_last_name informational only
 -- p_web_password the unencrypted password for the new user
-- p_group_ids A colon delimited list of group IDs from the table wwv_flow_fnd_user_groups
-- p_developer_privs A colon delmited list of developer privs, privs include:
-- ADMIN:BROWSE:CREATE:DATA_LOADER:DB_MONITOR:EDIT:HELP:MONITOR:SQL:USER_MANAGER
-- p_default_schema A valid oracle schema that is the default schema for use in browsing and
-- creating flows
-- p_allow_access_to_schemas A colon delimited list of oracle schemas that the user is allowed to
-- parse as. If null the user can parse as any schema available to the company.
-- This does not provide privilege it only resticts privilege, so listing a schema
-- does not provide the privilege to parse as a schema, it only restricts that user
-- to that list of schemas.
-- p_attributes_XX These attributes allow you to store arbitary information about a given user.
-- They are for use by flow developers who want to extend user information.
 -- p_web_password_format Identifies the format of the web password.
-- The range of values is CLEAR_TEXT, HEX_ENCODED_DIGEST, DIGEST 
-- p_person_type "E" marks the user as external
-->
Note there is no HEX_ENCODED_DIGEST, DIGEST_V2 listed. It may work, but not obvious from the signature.
Cheers,

Change settings of an active collaboration room

hello everybody
we have an active collaboration room. when this room was built, some iview-settings were given. now i have to change some settings, that the users of the collaboration room have more functions visible in the menu. now my question is: how can i change (iview-)settings of an active collaboration room without building the room again and that no data is lost? can you list the necessary steps, please?
thank you for your help!
greetings
flo

Hi Flo,
I hope you have already updated on SPS17, because unfortunately your request is only possible from this release on.
The steps how to transfer changed collaboration room workset properties are described in detailed here: http://help.sap.com/saphelp_nw04/helpdata/en/44/168eb1c3641a75e10000000a1553f6/frameset.htm
If you still have open questions, let me/us know.
Hope this helps,
Robert

Survey in Collaboration Room

Hello All,
we want in the intante that a user creates a collaboration room automaticamente is created an associate survey
Any Ideas..
Sergio

Hi Sergio,
unfortunately I dont have an idea regarding your problem with the collaboration room.
But as I found this current thread of yours, I would like to ask you, if you could help me further with another problem, you already solved it some time ago:
So would you be so kind to have a look at your previous thread (where you probably found a solution in the meantime, but it wasnt described in the thread):
tool tips in second level navegation
Im sorry having used your post without having an idea, but I thought this could be a way to contact you,
as it wasn't possible to ask you directly, and as this one is your current post, so probably youll check it rather than the other one.
Thanks in advance.
Kind regards
Nenad

Unable to remove Collaboration room member

We are unable to successfully remove a user from the members tab of "Room Maintenance" from Collaboration Rooms. After removing the user from the list, we receive the following error: "Properties could not be saved".
How can we resolve this issue? Any input would be appreciated.
Thank you,
Laura Sturdivant

We had the same problem. At us we are synchronizing users with Microsoft AD. The user had to be deleted from the rooms before they where deleted AD - otherwise we got the problem.
If this is the your situation, add the user to AD again and then delete the user from the collaboration room - and AD.
Regards Lars

Migrate the users, groups from essbase 7.1.6 to shared services

Hi
Our current production is essbase version 7.1.6 and we are planning to migrate to EPM 11.1.2 . We would like to move the security administration from Essbase to Shared Services (want to use Native Directory).
can somebody please suggest
1) An utility that Oracle provides with EPM 11.1.2 that helps to migrate the users and groups from 7.1.6 to shared services?
2) After bringing the users groups from 7.1.6 to 11.1.2, do we need to externalize these users and groups or no need?
Appreciate the help. Thanks,

if you have LDAP/MSAD try to configure it first .That will get your users
Now using maxl
spool on to GROUP.txt
display gruoup all;
spool on to USER.txt
display user in group all;
for test purpose create a test group and a test user from the shared services.
Now using GROUP.txt
make up maxl statements to create groups(use any advanced text editor or MS excel to get your work done fast)
create group 'groupname';
now login into that shared services
go to FOundation Application group->click sharedservices->drop down native directory ->Right click on Groups and select export for edit.THat will save you Groups.csv file.
Now
1.Open that Groups.csv file
2.Using USER,txt ,paste the users in that file under their respective group.(Look for test group created that should give you an idea!!!)
3.Paste user correctly and save it to the same file Groups.csv
4.go to FOundation Application group->click sharedservices->drop down native directory ->Right click on Groups and select IMPORT for edit.
5.that will get your users into the groups.
________filters_______
Using maxl again
spool on to FILTER.txt
display filter row all;
spool on to GRPRIVILEGE.txt
display privilege group all;
Now using FILTER.txt
create maxl statements
(use any advanced text editor or MS excel to get your work done fast)
Ex: create filter app.database.filtername read/write/none/metaread on 'AREA ' ;
Using GRPRIVILEGE.txt
create maxl statements
grant filter app.databse.filtername to 'groupname';
that should get your filters created and assigned.
else you can use Advanced Security Manger
http://www.appliedolap.com/free-tools/advanced-security-manager
hope that should give you an idea!!!!!!!

Multiple user creation in R12 and migration of users

I would like to know how we can automate a process of user creation in R12, or is there a way to create multiple users in Ebiz with respective responsibilities.
Second case is, migration of users from one instance to another. The problem out here is selective users not all?
Regards

Pl search the forums for FND_USER package - you will find several hits that show how this package can be used in a programmatic fashion to bulk create new users and assign responsibilities. Examples are also available on My Oracle Support.
To migrate user, use FNDLOAD. See this doc - you will also find hits in these forums if you search.
376469.1 - Can FNDLOAD Migrate User Accounts Without Forcing Users To Change Their Passwords?
HTH
Srini

Getting list of all users and their group memberships from Active Directory

Hi,
I want to retrieve a list of all the users and their group memberships through JNDI from Active Directory. I am using the following code to achieve this:
==================
import javax.naming.*;
import java.util.Hashtable;
import javax.naming.directory.*;
public class GetUsersGroups{
 public static void main(String[] args){
 String[] attributeNames = {"memberOf"};
 //create an initial directory context
 Hashtable env = new Hashtable();
 env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
 env.put(Context.PROVIDER_URL, "ldap://172.19.1.32:389/");
 env.put(Context.SECURITY_AUTHENTICATION, "simple");
 env.put(Context.SECURITY_PRINCIPAL, "[email protected]");
 env.put(Context.SECURITY_CREDENTIALS, "p8admin");
 try {
 // Create the initial directory context
 DirContext ctx = new InitialDirContext(env);
 //get all the users list and their group memberships
 NamingEnumeration contentsEnum = ctx.list("CN=Users,DC=filenetp8,DC=com");
 while (contentsEnum.hasMore()){
 NameClassPair ncp = (NameClassPair) contentsEnum.next();
 String userName = ncp.getName();
 System.out.println("User: "+userName);
 try{
 System.out.println("am here....1");
 Attributes attrs = ctx.getAttributes(userName, attributeNames); // only asked for one attribute so only one should be returned
 System.out.println("am here....2");
 Attribute groupsAttribute = attrs.get(attributeNames[0]); // memberOf
 System.out.println("-----"+groupsAttribute.size());
 if (groupsAttribute != null){
 // memberOf is a multi valued attribute
 for (int i=0; i<groupsAttribute.size(); i++){
 // print out each group that user belongs to
 System.out.println("MemberOf: "+groupsAttribute.get(i));
 }catch(NamingException ne){
 // ignore for now
 System.err.println("Problem encountered....0000:" + ne);
 //get all the groups list
 } catch (NamingException e) {
 System.err.println("Problem encountered 1111:" + e);
=================
The following exception gets thrown at every user entry:
User: CN=Administrator
am here....1
Problem encountered....0000:javax.naming.NamingException: [LDAP: error code 1 -
000020D6: SvcErr: DSID-03100690, problem 5012 (DIR_ERROR), data 0
]; remaining name 'CN=Administrator'
I think it gets thrown at this line in the code:
Attributes attrs = ctx.getAttributes(userName, attributeNames);
Any idea how to overcome this and where am I wrong?
Thanks in advance,
Regards.

In this sentence:
Attributes attrs = ctx.getAttributes(userName, attributeNames); // only asked for one attribute so only one should
It seems Ok when I add "CN=Users,DC=filenetp8,DC=com" after userName, just as
userName + ",CN=Users,DC=filenetp8,DC=com"
But I still have some problem with it.
Hope it will be useful for you.

Data propagation problems w/ NIS+ to LDAP migration..

Hello All,
I'm running in to an issue performing an NIS+ to LDAP migration with Solaris 9.
It all happens like this: NIS+ successfully populates the directory through the 'initialUpdateAction=to_ldap' option-- afterwards, no updates made directly to LDAP are ever pushed back into NIS+.
I'm of the understanding (which might be incorrect) that after performing the initial update, NIS+ should simply act as a cache to the data stored in LDAP. Do I need to perform an 'initialUpdateAction=from_ldap' after populating LDAP to force the direction of the data propagation to change?
I'm experienced with LDAP, so I'm comfortable everything is all right on that side, however, I'm not so sure about NIS+. Anyone out there who has gone through this migration who'd be willing to offer some assistance or advice would be greatly appreciated.
Many thanks in advance..
..Sean.

Well, you neglected to outline exactly how you accomplished your migration.
Starting with Tiger Server using NetInfo as a standalone server, we created an Open Directory Master, as described in Apple's Open Directory Guide. By the time we'd finished that, we had an OD admin. From there, we did as I previously described -- exported with WGM from NetInfo, imported with WGM into LDAP, deleted with WGM from NetInfo.
See http://support.apple.com/kb/TA23888?viewlocale=en_US
This seems to be an article on how to re-create a password that's been lost. That's not really what we need, though. The OD admin account we created works fine for other services, just not for WGM. And other admin users we created work fine for other services, but not for WGM. The problem is that although admin users can log into many services, they can't log into WGM -- only root can.

Migration assistant doesn't migrate all user files

I Wanted to do a semi clean install, so I decided to erase everything and install a fresh OS X Yosemite.
i Used migration assistance to only migrate my user account and all its files. Everything seemed to work fine, until I realized I was missing things. Some fonts were not copied over (/User/name/Library/Fonts) and most of my music was not copied over (~/Music/iTunes etc.). The only music that seemed to transfer were ones I purchased from iTunes or imported recently (with the latest iTunes). I got fed up with the entire process and didn't do any more investigation or debugging and am now doing a full restore from time machine. Luckily I have two time machine backups... Can't always assume everything will go correctly (one time machine is stuffed as it was preparing to backup my new installation with lost user files).
has anyone else had the same problems?
As a note I was able to locate those fonts manually on one of the time machine backups but it said the links we broken (they must be aliases) but since I knew the absolute path I could find them. Maybe that's part of the problem? Also I wonder if user permissions (eg ownership) could affect the restore user account process...
Ps: Apple this site ***** on my iPad mini. Fonts are way too small!

I did exactly that
If so, that would have been Setup Assistant, not Migration Assistant. From the sound of it, I'm not so certain that is what you did. They are very similar, but may produce different results. Setup Assistant appears on the first boot of the new Mac. It is generally far more problem free than Migration Assistant. If you select the option to migrate later you get MA. Have you checked to see if you don't now have another User where all your settings now reside. This can be the result of using MA.
If you didn't use SA on the first boot, it might be far less time consuming and aggravating to simply reinstall the OS and the bundled apps. This will produce a brand new option to use SA on the first boot.

After Migration AD users do we need to keep SID history ?

Hi Team,
After Migration AD users do we need to keep SID history ?
what are all the parameters need to verify post-migration ?
This posting is provided &quot;AS IS&quot; with no warranties and confers no rights! Always test ANY suggestion in a test environment before implementing! http://sesaitech.blogspot.in/

SID history is really more of an aesthetic problem.
If you have users with lots of SidHistory entries and lots of Groups, SidHistory will contribute to Kerberos Ticket bloat, so you may wish to clean it up for that reason.
You won't find a list of definitive things to check because SidHistory may affect your users ability to access ANY domain resource - File Share, Websites, databases etc.
If you are reasonably confident that you have migrated all your resources, you have good backups and a process to do a SID History restore (requires authoritative restore of AD users which will also restore passwords) I would suggest staging out your
SidHistory removal and watching for spikes in helpdesk calls.
Good Luck!
Shane

I need help migrating domain user profiles in a refresh scenario using hardlinks.

Hi,
I am trying to create a TS that will capture all of the domain users and their settings from a machine. Then refresh it with a new O/S and restore the data.
I don't want to use a state migration point and I would prefer to save the data to the machine.
I am using a MDT TS with the standard TS steps.
There are two sections to USMT.
Online USMT
Offline USMT
I have set the Online USMT to capture locally by using hardlinks instead of copying files. But I read that this doesn't work unless you set the
OSDStateStorePath variable to a value. In my example I would need that to be a local folder on the machine. Does the folder have to exist on the machine?
There is also a condition that has been set on the Restore User State step.
OSDStateStorePath exists
If any of the conditions are true
Folder %OSDStateStorePath%\USMT exists
Folder %OSDStateStorePath%\USMT3 exists
I would like to get this working.
Thanks

Hi Exintrovert,
Thanks for posting here.
According to your discription above, you can check the microsoft artical as below:
https://support.microsoft.com/en-us/kb/938120/
Would you please have a try the work around in the artical and then let us know the update?
Looking forward to your feedback.
Best Regards,
Elaine
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

How can i migrate my users from my laptop running 1.7.1 to my new i mac running 1.6.8

hi i tried to migrate my user info from my laptop to my new i mac and it wont do it until i update my i mac . i cant do this as the laptop is on 1.7.1 and the i mac is on 1.6.8. both are the current version. thanks

Lion Up-To-Date upgrade
"The Mac OS X Lion Up-To-Date upgrade is available at no additional charge via the Mac App Store to all customers who purchased a qualifying new Mac system from Apple or an Apple Authorized Reseller on or after June 6, 2011. Users must request their Up-To-Date upgrade within 30 days of purchase of their Mac computer. Customers who purchase a qualifying Mac between June 6, 2011 and the date when Lion is available in the Mac App Store will have 30 days from Lion’s official release date to make a request." See below:
OS X Lion - Get up to date
Apple Stores may still be carrying inventory of the models that did not have Lion pre-installed, hence the above offer. Product that is ordered from the Online store should come with Lion pre-installed as will CTO (configure to order) models.
And, babowa reminds me that you could install Lion on a separate partition in order to keep Snow Leopard's installation. You can create a second partition using Disk Utility.
To resize the drive do the following:
1. Open Disk Utility and select the drive entry (mfgr.'s ID and size) from the left side list.
2. Click on the Partition tab in the DU main window. You should see the graphical sizing window showing the existing partitions. A portion may appear as a blue rectangle representing the used space on a partition.
3. In the lower right corner of the sizing rectangle for each partition is a resizing gadget. Select it with the mouse and move the bottom of the rectangle upwards until you have reduced the existing partition enough to create the desired new volume's size. The space below the resized partition will appear gray. Click on the Apply button and wait until the process has completed. (Note: You can only make a partition smaller in order to create new free space.)
4. Click on the [+] button below the sizing window to add a new partition in the gray space you freed up. Give the new volume a name, if you wish, then click on the Apply button. Wait until the process has completed.
You should now have a new volume on the drive.
It would be wise to have a backup of your current system as resizing is not necessarily free of risk for data loss. Your drive must have sufficient contiguous free space for this process to work.
Once you have your Lion installer application you can create a bootable USB flash drive (8 GB size):
Make Your Own Lion Installer
1. After downloading Lion you must first save the Install Mac OS X Lion application. After Lion downloads DO NOT click on the Install button. Go to your Applications folder and make a copy of the Lion installer. Move the copy into your Downloads folder. Now you can click on the Install button. You must do this because the installer deletes itself automatically when it finishes installing Lion.
2. Get a USB flash drive that is at least 8 GBs. Prep this flash drive as follows:
Open Disk Utility in your Utilities folder.
After DU loads select your hard drive (this is the entry with the mfgr.'s ID and size) from the left side list. Note the SMART status of the drive in DU's status area. If it does not say "Verified" then the drive is failing or has failed and will need replacing. SMART info will not be reported on external drives. Otherwise, click on the Partition tab in the DU main window.
Under the Volume Scheme heading set the number of partitions from the drop down menu to one. Set the format type to Mac OS Extended (Journaled.) Click on the Options button, set the partition scheme to GUID then click on the OK button. Click on the Partition button and wait until the process has completed.
Select the volume you just created (this is the sub-entry under the drive entry) from the left side list. Click on the Erase tab in the DU main window.
Set the format type to Mac OS Extended (Journaled.) Click on the Options button, check the button for Zero Data and click on OK to return to the Erase window.
Click on the Erase button. The format process can take up to several hours depending upon the drive size.
3. Locate the saved Lion installer in your Downloads folder. CTRL- or RIGHT-click on the installer and select Show Package Contents from the contextual menu. Double-click on the Contents folder to open it. Double-click on the SharedSupport folder. In this folder you will see a disc image named InstallESD.dmg.
4. Plug in your freshly prepared USB flash drive. You are going to clone the InstallESD.dmg disc image to the flash drive as follows:
Open Disk Utility.
Select the USB flash drive from the left side list.
Click on the Restore tab in the DU main window.
Check the box labeled Erase destination.
Select the USB flash drive volume from the left side list and drag it to the Destination entry field.
Drag the InstallESD.dmg disc image file into the Source entry field.
Double-check you got it right, then click on the Restore button.
When the clone is completed you have a fully bootable Lion installer that you can use without having to re-download Lion.

Will LDAP migration of users affect their Collaboration Rooms??

Similar Messages

Maybe you are looking for