on 05-04-2010 11:06 PM
All
I have begin to create our development IDS and am trying to perform an initial pass of our AS ABAP Dev system. I installed the AS ABAP - Initial Load job template and configured everything and ran the job and am getting the following error message on the "WriterABAPUsersRolePrivilegeAssignments pass.
Error putNextEntry failed storingADS_AGENT
Exception from Modify operation:com.sap.idm.ic.ToPassException: ToIDStore.modEntry failed modifying entry 'ADS_AGENT'. IDStore returned error message: " Not allowed to modify entry type:Attribute: MX_ENTRYTYPE" when storing attribute 'MX_ENTRYTYPE=MX_PRIVILEGE'
roleAssignments {ValidFrom=2008-08-05!!ValidTo=9999-12-31}SAP_BC_FP_ICF
It looks as if it is not allowing me to store the role validaty dates in my database and this is something I would like to be able to manage in the future.
I have disabled this pass for now until I figure it out.
All other Write passes were successful.
Michael
(BTW hows the beach Matt K)
Hello
Go to the Repository.
Check if you got MX_PROVISIONTASK set. I should point to 84/ProvisionABAP (while the 84 might be different for you)
Go to the Global Constants and check if SAP_MASTER_IDS_ID is set. Should most likely be 1.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Christian,
Thank you for your reply. Yes one of the first things I set during the initial set up was my provisioning tasks for the repository and the Master IDS ID to my primary store (1).
This error looks like it is specifically having an issue storing the validaty dates of the roles assigned to users in our backend ABAP system. Any further help is appriciated.
putNextEntry failed storingC9000076
Exception from Modify operation:com.sap.idm.ic.ToPassException: ToIDStore.modEntry failed modifying entry 'C9000076'. IDStore returned error message: " Not allowed to modify entry type:Attribute: MX_ENTRYTYPE" when storing attribute 'MX_ENTRYTYPE=MX_PRIVILEGE'
Thanks,
Michael
An update to this, I clicked on the "Insert Template" button, and let it add to the existant attribute entries but disabled my origianl set. I changed the attribute logonuid to MSKEYVALUE (because in this instance we are using the log on ID as the primary identifier).
# MSKEYVALUE %logonuid%
# changetype modify
# MXREF_MX_PRIVILEGE $FUNCTION.sap_getTimeDependentPrivilege(%$rep.$NAME%|ROLE|%roleAssignments%)$$
MSKEYVALUE %logonuid%
roleAssignments %roleAssignments%
After I ran this I got the following error message:
putNextEntry failed storingMX_PRIVILEGE
Exception from Add operation:com.sap.idm.ic.ToPassException: ToIDStore.addEntry failed storing entry 'MX_PRIVILEGE'. IDStore returned error message: " Cannot insert duplicate value:Attribute: MSKEYVALUE" when storing attribute 'MSKEYVALUE=ADS_AGENT'
Exception from Modify operation:com.sap.idm.ic.ToPassException: ToIDStore.modEntry failed updating entry 'MX_PRIVILEGE'. IDStore returned error message: "Entry does not exist" when fetching entry
This is telling me that the table MX_Privlege is not valid. So my question becomes how do I go about running a job that adds this table to my database and can then store these attributes?
Or am I approaching this from the wrong prospective?
Then end result is to be able to identify assigned roles to a user in any ABAP system and then either update/revoke/remove those roles based off of a nightly job that is fed from HR or the CRM Org model. Until I can get the roles to associate to the users identities I can not proceed with my next steps of creating an ordered task that can be scheduled to perform this.
Hi Sajin,
From the error message, seems its a space issue. Check space at OS file system, if you see space available at database to extend the files. Its possible that space not available at Disk group or file system that`s why oracle is not able to extend the data files.
Work with your system Administrator & Oracle DBA to check on this.
~ Krishna.
Thank you Krishna for your immediate reply. The issue is solved by increasing the size of tablespace users
Thanks
Sajin
Hi Krishna,
I am new to SAP IDM could you please suggest me what needs to be after the initil load job. I have configured IDM UI, but after running ABAP Initial Load I am unable to see anything like roles and users in IDM UI. please find the below screenshot. could you please tell what needs to be done to see the roles and users etc in IDM UI...
Hi Sajin,
You could have raised this as a separate question. But to answer to your question,
In the IDM UI, navigate to Manage tab, there is a field with drop down "Show". In that field if you want to see the users information, select "Identity", for roles - select "roles", for privileges - select "privilege".
If you create a custom entry type and made it as searchable, even that will be listed here.
Since you are saying that you are new to SAP IDM, I would suggest you to start up with the tutorials that comes with the installation of IDM management console. You can check for the tutorials in the folder <installation folder>\tutorial , usualy it ll be something like C:\usr\sap\IdM\Identity Center\Tutorial
And Identity Center General Documents section of IDM documentation is also a good place to start !!
All the best !!
~ Krishna.
User | Count |
---|---|
61 | |
9 | |
7 | |
6 | |
6 | |
6 | |
5 | |
5 | |
5 | |
5 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.