In the text extract of DGE Agent log we have following entries:
Info NTFS Data Processor The NTFS Processor has completed a full scan Encountered 6376257 items, and processed 1619563.
>> What's difference between Encountered and Processed items
↧
DGE Agent logs
↧
Error while inserting in PersonWantsOrg
Hi,
I'am using a script that inserts objects in PersonWantsOrg table and I run sometimes a following exception:
[810008] Could not save object Request procedures ("PersonName" - 02/13/2014 16:07:48).
[881173] This employee is not authorized to place an request here. (Possibly wait for the DBScheduler evaluation)
Actually I'am working on two environments, and this exception is generated only on one of them althought the procedures are the same...
Could you please help me to understand a cause of this issue?
Regards,
Anton
↧
↧
ADSGroup Synchronization Errors
Recently I've noticed that ADSGroup memberships between the Active Directory environment and IdentityManager are showing a larger disparity where membership removals in AD are not being detected and updated in IdentityManager even after a synchronization is run. I've run multiple simulations with synchronizations running full synchronizations and just specific Object Types (Groups + ADSGroupMember). These syncs always are set with IdentityManager as the slave system so group membership removals will be deleted and any new direct assignment membership will be updated in the IdentityManager Db. (see image)
The synchronization has failed consistently with errors as seen below for multiple Groups and Users.
tart processing objects / relation of type "ADSGROUPMember" using following settings:
database amount : IGNORE,
intersection amount: UPDATEDB,
namespace amount: IMPORT - USN optimization False.
[854011] Error processing M:N relations of CN=\#Some DL,OU=Distribution Lists,OU=Location,OU=Location Data Center,OU=NA,DC=1234,DC=net in database.
[921056] Error inserting relation CN=Some Group,OU=Groups,OU=Contacts,OU=NA,DC=1234,DC=net - CN=\#Covidien Sales Force.com Support,OU=Distribution Lists,OU=Mansfield01,OU=Mansfield Data Center,OU=NA,DC=thcg,DC=net into database table ADSAccountInADSGroupTotal.
[854041] No relation definition exists for object type publicFolder in relation block ADSGROUPMember .
[854011] Error processing M:N relations of CN=\#Some DL1,OU=Distribution Lists,OU=Location,OU=LocationData Center,OU=NA,DC=1234,DC=net in database.
[921056] Error inserting relation CN=Some User,OU=Misc,OU=Contacts,OU=NA,DC=1234,DC=net - CN=\#Some DL3,OU=Distribution Lists,OU=Location,OU=LocationData Center,OU=NA,DC=1234,DC=net into database table ADSAccountInADSGroupTotal.
[854011] Error processing M:N relations of CN=\#Some other DL,OU=Distribution Lists,OU=Location2,OU=Location2 Data Center,OU=NA,DC=1234,DC=net in database.
[921056] Error inserting relation CN=Some User,OU=Misc,OU=Contacts,OU=NA,DC=1234,DC=net - CN=\Some DL 3,OU=Distribution Lists,OU=Location2,OU=Location2 Data Center,OU=NA,DC=1234,DC=net into database table ADSAccountInADSGroupTotal.
Has anyone encountered a similar issue with sychronizations? This disparity is causing owners to be unable to manage their groups and put additional pressure on the call center .
↧
Configurint ITShop in IIS
Hi everybody.
I need to configure IT shop to respond with a FQDN for example idm.mydomain.com. I have three application pools defined, each for one language: idm.mydomain.com/IdentityManager, idm.mydomain.com/IdentityManager2 and idm.mydomain.com/IdentityManager3. Application pool for my (default) language is idm.mydomain.com/IdentityManager2.
I inserted FQDN idm.mydomain.com in the <applicationpool> section in web config for all three application pools, like suggested in http://communities.quest.com/message/84281#84281.
If I type the address http://idm.mydomain.com the default IIS web page is displayed. Is it possible to redirect user to http://idm.mydomain.com/IdentityManager2?
If I type http://idm.mydomain.com/IdentityManager2 in a web browser, I have to put login credentials to show the IT-Shop login page. Then I have to put my username and password to login. How to get rid of putting login credentials to show login page?
Thanks for help,
Evgen
↧
Job Server List Acting Up
Yet another question as my company continues to run forward on Q1 at light speed. I have been copying the setup of the Test environment (created by Quest Engineers) to our Dev environment and thought I was doing pretty good. When it came time to do some Job Queue checks, I realized I made a major error somewhere.
In the Job Server List, there are hardly ANY servers listed in my Dev environmet whereas the Test environment shows 6. I poked around and found the Job Service Configurator option and created a Job Service server that matches the one in Test (outside of changing the URLs and such). However, when I try to do an HTTP Request, it comes back with a "Page Cannot Be Displayed" screen. When I do the same thing in test, it shows a Quest interface with basic HTTP info.
I checked out the IIS config and also found that neither the manager nor the qim virtual directories were defined. However, not even the test system has any IIS config I can find for the port 1880. This appears to be setup internally somewhere and I have no idea how to fix it. Any suggestions?
↧
↧
Deeplinking into the IT Shop with the authentication module "Person (role-based)"
Hi there,
I have a problem using deeplinks for the IT shop by using the authentication Module "Person (role-based)".
It does not seem to be possible to put a deeplink, because after entering the login data the user is always redirected to the homepage. After the user got a session everything works fine but it should also work with the first link.
With the authentification module "ADSAccount (rolebased)" the problem does not exist and the user is directed to the requested page directly.
Is it possible get the same behaviour with a none-sso-authentification-module?
Version is 5.1
Thx in advance and best regards
Martin
↧
Designer - Manager Not Added to Person Record
Gurus,
I am back again with another one of those custom script questions. It seems that one of my Quest engineers is on vacation and the other is on the first week of an engagement so I have no idea when they might be able to help me. The problem I have now is that in my Development lab, none of the Person records have a Manager assigned to them. I know that the ADSAccount table is storing the user's manager in the UID_ADSAccountManager field and 90% of the accounts have a manager assigned. The problem is that the value for the manager is not being stored in the Person table and I have no idea why. Much like my other problems, this same symptom does not appear in the PRD database which was almost entirely created by Quest engineers. Yet, I would think that if we transported all changes from one system to the other, the code would still work.
Here is what I do know. We have two custom scripts that are all about user records. The first one is QC1_PersonAuto_ADS which basically delivers the users from ADSAccount, filters the accounts we are not interested in and then puts the remainder in Person table. This particular one is connected to the ADS/EX2K_ADSAccount_Insert/Update process. Then, we have a QC1_AD_Department_Import file that basically looks at one of our custom AD Attribs and populates the Department field. Lastly, there is a QC1_UpdatePersonDepartment_FromADS which serves the purpose of assigning the user to the department to which they belong. These scripts all seem to work and the values are there but the Manager is not populated.
We also have a script called QC1_PersonUpdate_ADS but it currently does not appear to be linked to any schedule or process plan.There is a possibility that this is the script that needs to be run to populate manager, I do see a section in the code that says this:
VID_PutValueSafe(Person, "UID_PersonHead", Connection.GetSingleProperty("ADSAccount", "UID_Person", f.Comparison("UID_ADSAccount", Account.GetValue("UID_ADSAccountManager").String, ValType.String)).String)
Is this setting the Manager property for UID_PersonHead? If so, I need ot figure out how to get this script put into a process. I tried setting one up to do so but the other import process have some ParameterValue0, 1 and 2 set for different things and I am not sure what parameters I would want to set in these values to ensure that the data is properly imported.
Accordnig to what I have in the comments of the code mentioned above, this script ovverides the VI_PersonUpdate_ADS function. So if I were to set this script in the orchestration with the same parameters as the VI_PersonUpdate_ADS function, would it populate the proper values when orchestrated?
I know this is a huge and funky question but my knowledge of coding is very limited.
↧
How can I configure Identity Manager in Web?
Hi all,
I am trying to publish the Identity Manager webapp in IIS but I won't work. It keeps giving me the message "Required permissions cannot be acquired." as shown below.
I followed the manual "IdentityManagerWeb_Installation.pdf".
I manually created the Cache folders and gave IUSER... account full control but that didn't help.
I am running the ITShop on the same web server so I know connecting and communicating with Quest is possible.
Does anyone know what I need to do to get it to work?
Any idea is welcome.
Thanks in advance,
Leen Boers
Server Error in '/IM' Application.
Required permissions cannot be acquired.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: System.Security.Policy.PolicyException: Required permissions cannot be acquired.
Source Error:
An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below. |
Stack Trace:
|
↧
Designer - Access right on a column
Hi,
In the Web designer I created a grid to dispay an Org collection (created basedon the org table)
When I goto the page do display my org, I got the following :
(Rôle métier = Ident_Org, Libellé = ShortName,Description = description)
I think the message is understandable : ShortName field is hidden 
but I really don't know where should it be modified.
In the designer I modified the access right on the corresponding table and column column (see below)
Access right on the table
Access right on the column
But I still got the same message <hidden: ...>
Do you have any idea what's goin on ? Which group permission should I add if I want everybody to see this column value ?
thanks again for your help,
Regards,
Steph.
↧
↧
Refreshing a collection in a component that is used as container reference
Hi,
we are using a custom component that displays role memberships for a selected person. This component has one Virtual Collection from type person and two internal collections (PersonInOrg and Org).
If a user now selects a person (P1) in the parent module the whole mechanism works fine. But if the user selects another person (P2), the role memberships of P1 are displayed.
I'am using delete and load collection data actions in the Initializer of the component of course, but they seem to be useless: Those collections keep their initial state.
Has so. an idea for me?
Thanks,
Norbert
↧
Web Application - sample custom authentication module
Hi all,
I would like to create my own authenticatio module to use a web Service to authenticate people on the Web Q1IM.
Do you know where can I find a sample or some documentational stuff like a quick start ?
thanks for your help,
regards,
Steph.
↧
Setting up IT Shop authentication for SSO and manual logon
Hi all,
I'm not sure if this can be done or not, so any advice is welcome.
My customer has their IT shop set up so that they seamlessly go into IT shop as the Windows authenticated account.
But they have said "what can I do if I want to change the user that I am logged in as? How can I also log in manually?"
I have run the WebDesignerConfigFileEditor and set
- Primary Authentication Module --> ADSAccount (Rolebased)
- Secondary Module --> ADSAccount
thinking that they could login automatically, logout and then login manually. But it seems as if the WebApp automatically logs them back in again.
Is there any configuration that I need to make to IIS to enable the above config to work, or is it just an inompatible set of requirements ?
Thanks
Jon.
↧
Integrating Q1IM with ServiceNow (web service configuration)
Hello all,
I'm looking for some help getting Q1IM configured to ServiceNow. I need to be able to submit a request from Q1IM to ServiceNow successfully (for testing purposes). The steps I have taken so far are noted below:
1) Created "ServiceNow" target sytem type in UNS (using generic UNS sync)...does synch server need to be defined?
2) Created a web service within designer, able to make SOAP call, point to WSDL, generate proxy code, and map all the required fields (extended db schema for UNSAccountB table for required ServiceNow fields and am using GenericUNS synchronization).
3) Generated Insert/Update/Delete scripts, although for this scenario, I think I just need Insert
4) Created process in designer to handle event "CreateTicket" for ServiceNow, added process step to create ticket by executing script "TQA_UnsAccount_ServiceNow_Insert.vbs" (compiles ok and I think it's good enough to test)
5) Tied "ServiceNow" resource to service item and self-service approval policy (for testing purposes), enabled in ITShop...not sure if this is correct...
...at this point, I'm not sure how I can log into the webportal and "request" a ServiceNow ticket by inputting all the required fields and submitting. When I log in, I just get a ServiceNow requestable item that i can add to cart and submit (no fields to input), but I'm thinking it's because i'm missing something critical that's not tying everything together or just not doing this correctly...
...on the ServiceNow to Q1IM web service call (acknowledge/close) side, I have configured:
1) WSstaging table in SQL
2) added ITC_WS as virtual application in IIS
3) confirmed web.config has proper credentials
...probably some more things I missed, but at this point not critical to testing the "Q1IM to ServiceNow" call...
...thanks in advance for any support/guidance anyone can provide!!!!!
Kenny
↧
↧
Membership of AD Group tied to Business Role with Dynamic SQL query not updating membership
In our environment, we have Business Roles configured tied to Active Directory groups to automate membership based on attribute criteria. We've begun noticing that the Dynamic Role calculation number for membership differs from the associated AD group membership count. Forcing recalculation doesn't force Q1IM V6.0.2 to pull members that dont meet the dynamic role criteria out of the group. Has anyone seen similar issues with AD groups populated via dynamic role not syncing correctly, most notably with membership removal?
↧
WebDesigner: Hide navigation bar,userlogon and Title if the shop is called using an IFrame
Hi there,
To provide the users witch some idenity information via Sharepoint I would like tohidevarious componentsof different moduleswhen the shopwasloaded viaan IFrame. If possible Ido not wanttoreplacethe modules. Ialso don'twant to set upanotherweb project
Icurrentlyseethe following options:
-CreateHTTP parametersfor each moduleandrespondin the allocatedform typeswithvisibilityconditionsto it.
-Only copyin the necessarymodules.Hidethisin the menuandassign this tonewform types.
-Use acompletelyseparateweb project.
All pointsare not optimalin my opinion.
Do you havebetter suggestions?
Thank you in advance.
Best regards
Martin
↧
How to change column name in a form with Web Designer
Hi all,
I'm currently using Q1IM Web Designer studio to design a form.
On a module I'm modifying the settings...
I would like to modify the column names to display these names in a form
=> Where can I do this ?
Thanks for your help.
↧
How to unsubscribe user requested product
Hi All,
From End user web application a user requested a product (Service Item), once approval process completes, system will assign the product to the user. Now user can unsubscribe the product from Web interface. But my question is, How Administrator can remove that product from user? I have accessed Manager (viadmin) but i didn't see any option to remove Entitlements.
thanks
Rob
↧
↧
Date Format in Manager Screens
Hello,
is there a way to change the date format in the Manager (and/or Identtiy Manager) app? I have a multilanguage implementation and would like for the format to change from the one displayed of mm/dd/yyyy to another like dd/mm/yyyy.
Thanks.
↧
Web-Portal: Automatic generation of end user documentation
Hello,
I have a question regarding the automatic generation of documentation.
I am referring to the documentation Help_WebPortal which is in the folder \\WebFrontends\Webdesigner\bin or rather to the chm-file WebPortal_User_Guide in the folder \\Help\... of the installation directory.
Especially in Version 5.1 the file/s look generated according to the related Modules of the VI_Standard_Web.
This leads us to the question if it is possible to use the process of creating this documentation for a Webproject which is build from scratch?
I do not ask for a working solution. But i would like to discuss the possibilities of automaticly creating and updating user documentation out of the information stored in the table DialogAEDS.
Best Regards
Martin
↧
Webdesigner Checkbox (multi-selection)
Hi,
I was looking for some help on how to use Checkbox (multiselect) and couldn't find much, even in the help file. Can anybody help me with sample code or any help on this works? Thanks in advance for your help.
Thanks,
John
↧