Re: Initial load issue for AD
In the Write To IDStore pass, you should have set the entrytype up the top. However, you can also add it as an attribute in the pass. The UI will remove it later but it forces it to accept what you...
View ArticleRe: Error on IDM UI
We've had a spate of these recently, which is odd. Perhaps the doco should be updated to specifically state its read only (not sure if it does, but if so it needs to be more prominent). Peter
View ArticleRe: Error on IDM UI
Yep. I think, it would already help, if this would be in the description of the field. Sadly, the error messege, that is thrown with this, isn't really helpful. :/ Regards,Steffi.
View ArticleRe: Does SP8 resolve AS ABAP Delta Handling for Role/Profile Assignments?
Hi Matt, I have checked the release notes for SP8 here:SAP NetWeaver Identity Management 7.2 SP 8 - What's New in SAP NetWeaver Identity Management 7.2 (Release Notes) - SAP L… I've also reviewed items...
View ArticleRe: Read AD Manager Attribute in DN format during AD Initial Load
A regex works really well for DNs as they're in a defined format. It makes it pretty easy to pull things out of a DN. Peter
View ArticleRe: Does SP8 resolve AS ABAP Delta Handling for Role/Profile Assignments?
SP8 resolved the issue that I wrote my blog post about (and as described in http://scn.sap.com/thread/3349510) - privs that were assigned before initial load being removed from ABAP when the first...
View ArticleRe: Remove repository from IDM
Hi LaurentYes, the ID is 222, the name is NT5100.You only need to remove tasks / jobs if they are specific to the repository. If they are shared, the repository will just disappear from the assigned...
View ArticleRe: Read AD Manager Attribute in DN format during AD Initial Load
I worked it out. Here's the code: // Main function: z_setADManager// This function reads in the manager attribute value from AD (which is in DN format) and strips out all but CN=<Manager...
View ArticleRe: Read AD Manager Attribute in DN format during AD Initial Load
Yeah - you have to be careful splitting on ',' - '\,' is an escaped comma in the DN. That's why I tend to use a regex. You can split on ',ou=' which will give you the components before the OU. That...
View ArticleRe: Read AD Manager Attribute in DN format during AD Initial Load
You have a whitespace between comma and string "OU". Split with comma only.
View ArticleRe: Read AD Manager Attribute in DN format during AD Initial Load
Hello Leonard, my script looks like this: // Job:103621/'72 - ADS - 2 Update directReports mit Script (TEST)'// Main function: isv_split_CN_DISPLAYNAMEfunction isv_split_CN_DISPLAYNAME(Par) {//...
View ArticleRe: Read AD Manager Attribute in DN format during AD Initial Load
You're correct about the sequence of passes in your job. What I meant is that when you're using the script in "to Identity Store" pass you must return the MSKEY of the manager to the...
View ArticleRe: use of FIELD in Attribute SQL Query
Hi Matt, I am trying to use '%FIELD.[attributename]%' with 7.2 SP8 and am facing the same problems as you did back then. Did you somehow solve the problem? Thanks,Moritz
View ArticleRe: Read AD Manager Attribute in DN format during AD Initial Load
Tero, When I try your method and add the following value to the MX_MANAGER: {R}<%manager%> I get this error:putNextEntry failed storing USERSAMACCOUNTNAMEException from Add...
View ArticleRe: Read AD Manager Attribute in DN format during AD Initial Load
Hello Leonard,did you try this in the inital job or in a new one after the inital load is completed? The errors look like you tried it in the initial load job, where your concern from the other post...
View Articleunable to see messages of uInfo
Hello, I am writing a script with java coding. To debug the steps I put uInfo statements. After executing the job, when I go and see the job log (which is located above the pass), I am not able to see...
View ArticleRe: unable to see messages of uInfo
Hello Mark, did you check the log level of the dispatcher you are using for this job? Maybe it's set at warning or higher, so that infos aren't logged. I use the warning-output because of that. Also...
View ArticleRe: Reconcilation error in IDM 7.2 SP8
Dear Andy,it seems to me that you are near the correct solution, could you please help me to make last step?I see that all these dirty accounts (now 210 entries) have mark 'Inactive' and mark 'Account...
View Article