We had a situation this week where our LDAP server failed. We do not have failover set up to stay running in a situation like this. Our security resources have asked if there is any special needs Lawson has with setting up failover. Has anyone done this and can you share any special items to keep in mind as we build this out.

Is there a maximum number of groups that can be assigned to an individual RMID  We are implementing a LBI report with many 'parts' and management wants to restrict leaders to certain 'parts' which looks like quite a few group assignments.  I wanted to check to see if I will hit a limit at some point.

I'm having an issue setting up a job in jobdef using a token I set up in tokendef.  I have several questions about this whole thing.  I will try to explain:   I set up a token called send_mail in a category called SCRIPTS.  We see 2 catagories one of which is SCRIPTS.  (How do we get more catagories to be displayed if there are any)  The token points to a unix script to send a simple e-mail to me when executed '/vg01lvol1/lsf/scripts/mailtest.sh'.  I can save it and everything is fine with the ...

Multi-State company that locks access based on geographical location using HR11 Security Location. Goal: On a global level or close to a global level, a rule that will allow a user with assigned 'CompanyControl' custom values of M & P in their RMid to only see employee records with a HR11 Security Location of M & P. I've tried Element Groups, element group rules, get db rules, etc. and nothing seems to work unless I go down to the specific form and table level with the user.getAttribute rule. ...

We are LSF 9.0.0.6, 8.1 apps, and LBI 9.0.2.2.  We use laua and haven't gone to Lawson Security 9 although we do utilize Lawson Security Administrator (LSA) since RD30 is gone and some Portal support moved to LSA.  We are interested in writing Crystal Reports that marry security data from LDAP, laua/GEN, and LBI databases.  That's two db2 databases and one SQL database.  In the past we've been led to believe that querying LDAP and GEN are undesirable and that it's safer to dump this data somewhe...

I need to restrict a Security Class: 'Volunteer' from accessing any Employee records in HR11 that do not belong to a particular Emp Status and/or Range of Employee Numbers. For Example: Condition 1: When (([FIELD] Employee Status = [VALUE]'ZX' And [FIELD]Employee Status = [VALUE] 'ZC)) -OR- I've tried the range of Employee Numbers When ((Field [EMPLOYEE] > [VALUE] '810000' and Field [EMPLOYEE] It sort of works - with either condition EXCEPT that you can still Inquire, Ne...

Would anyone be able to provide me with the Lawson-supplied MSS rule for the Employee table  I changed the rule by mistake while working on a class based on it, and really don't feel like unpacking all of those classes again.   TIA.   Frank Z.

Can anybody tell me where to find the wtsubmit executable (for submitting batch jobs from the command line) in LSF9 security  I've been able to find jqsubmit, which does almost (but not quite) the same thing, but not wtsubmit. I found jqsubmit in ENV>Executables>Batch Job Scheduling, but wtsubmit isn't there. We have a user that needs to be set up under the new security, and they need to have access to this tool, but we can't find it.  Jqsubmit really isn't adequate in this case.  This user c...

I have noticed that if I login to portal using my own login...then open another IE window and login using my ESS login (we still use LAUA...lock down for application login and have generic security class for ESS users)...my first login session is going - but the security used is from my second login. For us...my security does not allow corporate access - but when I open that second IE browser window (staying logged into the first window) and login using ESS login (which, of course, has to allow...

We modified the time entry form, when users click on the update button at the tim entry forms, supervisors will receive email noticications.  It worked when we use LAUA secuity. But it doesn't work when I'm working the new Lawson security. The new security is working fine on the time entry forms but the process flow just didn't  kick off for notification.  I don't understand why it is related to process flow  We modified the 'timentryperiodwindow.js' , to trigger a process flow: function Up...

Has anyone have experience in trying to edit the portal xml file, so you remove the logout function (forcing users to close IE from the browser - clicking the x or file - exit)   Also has anyone edited the main login screen, to add a shortcut to external site...for us we would like to put  a link on the login screen so users who have forgotten their password can click the link and be redirected to another screen that would submits a reset password request to our help desk.

We are trying to get a handle on LSF9 security (moving away from LAUA).  We have been to training, and had a consultant here for a week.  We also purchased the FastTrack security templates, but still seem to be having issues. Situation:  We need to restrict certain roles from seeing exec pay-rate by process level (900 & 950).  We have the HRFFAFileAccess opened wide up (as delivered) and assigned to a role that should be able to see pay rate for everyone.  User cannot see pay rate for anyone.  ...

We use Lawson AP v 7.07 on a UNIX platform. For one security class, the drop dow list of Payment Terms can't be selected and assigned to a vendor. It is located on the Defaults tab in the AP10.1 screen. How and what forms do I add Payment Terms to this security class Is there a process that needs to be run Thank you.

Greetings, Is there any way to  determine who (a number of users) is logged into Lawson at any one point  We are currently using Lawson Security 9 (checkLS=Y) so many users do not have a LAUA (or UNIX) account.  So we cannot use AIX features to audit this information.  Any ideas on how to retrieve this info.   Thanks. Matt

Has anyone had any luck dumping out identity information, specifically requester identities from the Lawson Security Module.

Since RD30 is no longer used in version 9.0.1 on the Iseries, we don't know how to link Company and Employee to the user id.  Does anyone have experience doing this on the Iseries  We keep running across the loadusers -g username Qshell command but are not confident in how it works.  Any suggestion would be appreciated.

I'm trying to lock down the PR260 report for one of my security classes so that they only pull for two depts. I could not find where I could write a condition for the pr260. I'm using LAUA security with lsf. Is this possible

We are on LS security. The CB175 Bank Transaction posting job has update options of Yes or No We want to grant access to some users to run this job but only have the update option of No. Can this be done in LS security, if so how would you set this up   Thanks JC

Hi all!  Hope everyone is having a GREAT week!! Question-  We are trying to nail down which table the Goalview 'Completion Comments' resides in. I suspect it's one of those darn L underscore tables, but as to which one it is baffling me. Any help would be appreciated. -Greg

Trying to figure out which table the Goalview 'Completion Comments' are stored in. I suspect its one of those darned L underscore tables, but cannot figure out which one. Any help would be appreciated. -Greg

Anyone have a quick/easy way to merge 2 existing LAUA security classes together to come up with a brand new security class I can merge one with the other, but then it is left in the target security class which is still needed in it's unmerged state. Anyone  Thanks much!!! -Greg

Hi all, I tried a search through the forums, but didn't really find what I'm looking for.  We have security setup to limit users to be able to see companies that pertain to the region(s) they work in.  A request came in for our west region to be able to run a report off of east data, but this usually doesn't get approved. So, I was wondering, if I setup a job with another user's username (logged in as myself, but changing the username on the job definition), will it use that user's security pe...

I am in the process of copying all of my security from one profile to another on my development box. I have run the LSDUMP/LSLOAD for the profile   Now I have all the security classes under the new profile and I can see all the ROLES under the new profile, as they are on the same box, but none of the security classes are associated with the roles. Do I need to go in and add them all manually or is there an easier way

I am working to automate the initial 'loadusers' user load and maintain it on a daily basis (using input from Lawson HR and Lawson RM).  I will have two portal roles, one for manager self-service and the other for employee self-service.  I have recently learned that some non-managers will be using manager self-service (e.g. Executive secretaries, Administrative staff).  Has anyone automated their user RM maintenance, and if so, how do you identify which employees get MSS versus ESS

If you are trying to segregate the HR functions from payroll functions such that for example a user cannot create an employee and also process payroll for them, I'm thinking the forms you don't want  the user to have are HR: (forms HR.11.1 and PA52.1) and PR: (forms PR 30.1, PR32, PR33, PR35, PR36, PR37 and PR38). Can someone tell me if I'm I missing something Thanks, May