Provisioning: Users from OIM to Active Directory

Question

Dear Experts!
I am trying to setup provisionig from OIM to AD. I just want to provision Users from OIM to AD.
I am going through this documentation/tutorial:
http://download.oracle.com/docs/cd/E11223_01/doc.910/e11197/deploy.htm#insertedID0
i also read this:
http://www.oracle.com/technology/obe/fusion_middleware/im1014/oim/ad_provision/prov2ad.htm
But it just won't work. The provisioned resource get's always status rejected in the (To-Do List --> Open Tasks).
Then i tried to test the connection to AD using this documentation:
http://download.oracle.com/docs/cd/E11223_01/doc.910/e11197/testing.htm
And i get this error in the console:
http://img689.imageshack.us/img689/3190/errorq.png
The IT resource: ADITResource looks like this:
Remote Manager Prov Script Path:     
Admin FQDN: [email protected]
Use SSL: no
Remote Manager Prov Lookup: AtMap.AD.RemoteScriptlookUp
Target Locale TimeZone: GMT
Port Number: +636+
AtMap ADUser: AtMap.AD
ADGroup LookUp Definition: Lookup.ADReconciliation.GroupLookup
isUserDeleteLeafNode: no
Allow Password Provisioning: no
UPN Domain: domain-test.local
AtMap ADGroup: AtMap.ADGroup
ADAM LockoutThreshold Value: +5+
isADAM: no
Admin Password: *********
Invert Display Name: no
Root Context: dc=domain-test,dc=local
Server Address: testing-server.domain-test.local
Could be the problem that i don't use SSL? I don't set Passwords in AD, i have read that then i don't need SSL...?
I am new to OIM, so your response is greatly appreciated!
Thank you very much in advance!

Answer 1

Hello again Raj!
Thank you for your answer. You have always good ideas...
*1) Whats the response that you are getting from AD for this operation. Check this as following:*
Go to Users->UserABC->(Resource Profile from Drop down)->(Click your particular resource instance)->(Select the rejected task precisely "Create User")_
I get this on the Task Name - Create User:
Status:Rejected
Response: Please Select the Organization or Container Name from Organization Name Lookup
Response Description: Please Select the Organization or Container Name from Organization Name Lookup
But i can't get to populate the Organization Name on the user form, because there are no values available.
Under Error Details there is nothing.
*2) If your IT resource parameters are incorrect, you will get a connection error in logs. Your port information is correct, it has to be Port->389 and Use SSL-no*
I have created a new IT resource without SSL. Just to test the connection to AD. It works because I get “Successfully established connection to the AD_Test_without_SSL.”
Bellow is my NEW configuration for the IT Resource.
IT Resource Name:* AD_Test_without_SSL
IT Resource Type:* AD Server
ADAM LockoutThreshold Value:* 5
ADGroup LookUp Definition:* Lookup.ADReconciliation.GroupLookup
Admin FQDN:* [email protected]
Admin Password:* *********
Allow Password Provisioning:* no
AtMap ADGroup:* AtMap.ADGroup
AtMap ADUser:* AtMap.AD
Invert Display Name:* no
isADAM:* no
isUserDeleteLeafNode:* no
Port Number:* 389
Remote Manager Prov Lookup:* AtMap.AD.RemoteScriptlookUp
Remote Manager Prov Script Path:*
Root Context:* dc=domain-test,dc=local
Server Address:* testing-server.domain-test.local
Target Locale TimeZone:* GMT
UPN Domain:* domain-test.local
Use SSL:* no