AD Password Sync to OIM 9.0.3 - User not found in OIM

When attempting to capture password on AD Domain Controller and sync back to OIM, we are receiving the below error. Have verified that the user does exist in OIM, so what Active Directory attribute for the User Account is used to perform the lookup - is it samAccountName, userPrincipalName, or something else ???? Please Help
[Fri Nov 20 08:47:01 2009 ] 3813 [main] INFO adpasswordsynch.ChangePassword - Logged in successfully to OIM Server and ready for password escalation
[ Fri Nov 20 08:47:01 2009 ] 4000 [main] ERROR adpasswordsynch.ChangePassword - User: idmtest not found in OIM
[ Fri Nov 20 08:47:01 2009 ] userIntf not null ...closing connection!!
[ Fri Nov 20 08:47:01 2009 ] passwdIntf not null ...closing connection!!
[ Fri Nov 20 08:47:01 2009 ]
apiFactory not null ...closing connection!!
Finally !!
userIntf not null ...closing connection!!
passwdIntf not null ...closing connection!!
apiFactory not null ...closing connection!!
******************************

Run the following query:
SQL>UPDATE SYS.USR SET USR_LOCKED=0, USR_LOGIN_ATTEMPTS_CTR=0 WHERE USR_LOGIN='XELSYSADM';
After row update, commit the changes to the database by issuing:
SQL>commit;
Then restart the OIM Server

Similar Messages

Problem with ActiveDirectory Password Sync in OIM 11gR2

Hi,
I installed active directory password sync connector successfully and i enabled SPML web-service also .but the problem is while changing password in AD it is not reflecting in OIM
log info in 20120930082425511_adsi_debug file is
Debug [09/30/12 08:24:25] CONFIG VALUE LENGTH
Debug [09/30/12 08:24:25] 330
Debug [09/30/12 08:24:25]
Debug [09/30/12 08:24:25]
Debug [09/30/12 08:24:25] Before adding configsync attributes
Debug [09/30/12 08:24:25]
sgslrgac instance
Debug [09/30/12 08:24:25] User Name --->
Debug [09/30/12 08:24:25] padmaja
Debug [09/30/12 08:24:25]
Debug [09/30/12 08:24:25] RelativeId:
Debug [09/30/12 08:24:25] 1152
Debug [09/30/12 08:24:25]
Debug [09/30/12 08:24:25]
sgsladac Instance
Debug [09/30/12 08:24:25]
LDAP Connected
Debug [09/30/12 08:24:25] search string :
Debug [09/30/12 08:24:25] (&(objectCategory=person)(objectClass=user)(sAMAccountName=padmaja))
Debug [09/30/12 08:24:25]
Debug [09/30/12 08:24:25] Connected to ADSI
Debug [09/30/12 08:24:25] After Search
Debug [09/30/12 08:24:25] SID::
Debug [09/30/12 08:24:25] S-1-5-21-2856378657-228540474-388709823-1152
Debug [09/30/12 08:24:25]
Debug [09/30/12 08:24:25] DN::
Debug [09/30/12 08:24:25] CN=padmaja,OU=Users1,DC=odc,DC=com
Debug [09/30/12 08:24:25]
Debug [09/30/12 08:24:25] GUID:::
Debug [09/30/12 08:24:25] YzyFkltH9UqYuk/zbJiSuQ==
Debug [09/30/12 08:24:25]
Debug [09/30/12 08:24:25] after ladp search
Debug [09/30/12 08:24:25] Success sgsldpap
Debug [09/30/12 08:24:25]
Passlen populated :
Debug [09/30/12 08:24:25] 266
Debug [09/30/12 08:24:25]
Debug [09/30/12 08:24:25]
Moving sgsloidi from asynchSystem
Debug [09/30/12 08:24:25] Store Object populated
Debug [09/30/12 08:24:25] [getObjectGuid=YzyFkltH9UqYuk/zbJiSuQ==
getPasswordLen=266
getUserDn=CN=padmaja,OU=Users1,DC=odc,DC=com
getUserId=padmaja
Debug [09/30/12 08:24:25]
***end of status
Debug [09/30/12 08:24:25]
Out of sgsloidi from asynchSystem
Debug [09/30/12 08:24:25]
Before Free
Debug [09/30/12 08:24:25]
After Free
Thanks,

Hi,
This is my Error in OIM Log file :
Debug [10/01/12 02:11:17] Search result fetched
Debug [10/01/12 02:11:17] 2:430 7 314 420 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAShm+mp7fKU2Dv/gbeNNOrgAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAAQZgAAAAEAACAAAAB7L8K4A9Eylj2yszNBI3x8VxQPEE7sA4HxLJehzytXBgAAAAAOgAAAAAIAACAAAACNbZQoSKuTFqSE6kbzrRONowt74kZX2/BoFbZ8249xTUAAAAAVM3ikVDndtYiDqBaZL1t9K17ptPUm7XrpFMRiF0OiyR1cPGq/n/CIElmHiwH43eHRNVGv0jI5vPYveKudnkWBQAAAAIn4+NxxMGHP3SBAngDcKLDAhoMfzJpsfteiAIjPePW2mWodSRWOUZvmjRKmbv+A/Pa2Dzce5UNkjaVlvBz41lQ=
Debug [10/01/12 02:11:17] --------------------&&&----------------
Debug [10/01/12 02:11:17] Inside sgsladds::sgsladdsgetData NEW Look
Debug [10/01/12 02:11:17] 2:430 7 314 420 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAShm+mp7fKU2Dv/gbeNNOrgAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAAQZgAAAAEAACAAAAB7L8K4A9Eylj2yszNBI3x8VxQPEE7sA4HxLJehzytXBgAAAAAOgAAAAAIAACAAAACNbZQoSKuTFqSE6kbzrRONowt74kZX2/BoFbZ8249xTUAAAAAVM3ikVDndtYiDqBaZL1t9K17ptPUm7XrpFMRiF0OiyR1cPGq/n/CIElmHiwH43eHRNVGv0jI5vPYveKudnkWBQAAAAIn4+NxxMGHP3SBAngDcKLDAhoMfzJpsfteiAIjPePW2mWodSRWOUZvmjRKmbv+A/Pa2Dzce5UNkjaVlvBz41lQ=
Debug [10/01/12 02:11:17] Encoded Data Extracted in sgsladdsgetData
Debug [10/01/12 02:11:17] 430 7 314 420 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAShm+mp7fKU2Dv/gbeNNOrgAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAAQZgAAAAEAACAAAAB7L8K4A9Eylj2yszNBI3x8VxQPEE7sA4HxLJehzytXBgAAAAAOgAAAAAIAACAAAACNbZQoSKuTFqSE6kbzrRONowt74kZX2/BoFbZ8249xTUAAAAAVM3ikVDndtYiDqBaZL1t9K17ptPUm7XrpFMRiF0OiyR1cPGq/n/CIElmHiwH43eHRNVGv0jI5vPYveKudnkWBQAAAAIn4+NxxMGHP3SBAngDcKLDAhoMfzJpsfteiAIjPePW2mWodSRWOUZvmjRKmbv+A/Pa2Dzce5UNkjaVlvBz41lQ=
Debug [10/01/12 02:11:17] Moving out sgsladdsgetData
Debug [10/01/12 02:11:17] Encoded Data Extracted
Debug [10/01/12 02:11:17] 430 7 314 420 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAShm+mp7fKU2Dv/gbeNNOrgAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAAQZgAAAAEAACAAAAB7L8K4A9Eylj2yszNBI3x8VxQPEE7sA4HxLJehzytXBgAAAAAOgAAAAAIAACAAAACNbZQoSKuTFqSE6kbzrRONowt74kZX2/BoFbZ8249xTUAAAAAVM3ikVDndtYiDqBaZL1t9K17ptPUm7XrpFMRiF0OiyR1cPGq/n/CIElmHiwH43eHRNVGv0jI5vPYveKudnkWBQAAAAIn4+NxxMGHP3SBAngDcKLDAhoMfzJpsfteiAIjPePW2mWodSRWOUZvmjRKmbv+A/Pa2Dzce5UNkjaVlvBz41lQ=
Debug [10/01/12 02:11:17] Incrementing the MAX_RETRY LIMIT:
Debug [10/01/12 02:11:17] 3
Debug [10/01/12 02:11:17] numretries ======
Debug [10/01/12 02:11:17] 3
Debug [10/01/12 02:11:17] Inside sgslcodsupdateChild
Debug [10/01/12 02:11:17] 3:430 7 314 420 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAShm+mp7fKU2Dv/gbeNNOrgAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAAQZgAAAAEAACAAAAB7L8K4A9Eylj2yszNBI3x8VxQPEE7sA4HxLJehzytXBgAAAAAOgAAAAAIAACAAAACNbZQoSKuTFqSE6kbzrRONowt74kZX2/BoFbZ8249xTUAAAAAVM3ikVDndtYiDqBaZL1t9K17ptPUm7XrpFMRiF0OiyR1cPGq/n/CIElmHiwH43eHRNVGv0jI5vPYveKudnkWBQAAAAIn4+NxxMGHP3SBAngDcKLDAhoMfzJpsfteiAIjPePW2mWodSRWOUZvmjRKmbv+A/Pa2Dzce5UNkjaVlvBz41lQ=
Debug [10/01/12 02:11:17]
Encrypted record data updated successfully
Debug [10/01/12 02:11:17] Inside sgsladac destructor
Debug [10/01/12 02:11:17] End of sgsloidiOIMGeneralErrorHandler
Debug [10/01/12 02:11:17] Password updation failed in child process
Debug [10/01/12 02:11:17]
Relaxing while processing records from datastore

HT201253 Sync problems x2 - duplicates and SyncUICoreLocalized.dll not found

I have sync 2 issues:
On my work computer, I typically only sync Outlook contacts with my iPod Touch.
1 - I get an error but it seems to sync anyway... Resource not found SyncUICoreLocalized.dll not found
2 - iTunes does a less-than-stellar job of dealing with duplicates when syncing contacts with Outlook. I'll get some conflicts but have to search and clear out many more, despite using 'overwrite'.
WinTel machine, Win7
iTunes v11.x so far
iPod Touch 64gb 5gen

Bump!
Now, after following usual App support procedures, I've all my OLD notes but none of the NEW ones.
PLUS - Notes isn't uploading to my Mac.

When I try to sync my iPad iTunes says required disk not found

When I sync it it says required disk not found??

Here for PC
https://discussions.apple.com/message/8488249#

OIM Password Sync with SAP

Hi,
I have a requirement of password sync between OIM and SAP. Do you have any idea of how we can achieve this?
Is there any out of box connector for the password sync with SAP?
Please let me know.
thanks in advance
Edited by: IDMuser19 on Jul 26, 2010 2:17 PM

Ramesh,
Are you using the password hook or something from the framework?
The password hook only works with Microsoft Active Directory.
If you're using a framework task or other job or a custom task you almost always need a SSL enabled connection to the LDAP server.
Hope this helps.
Matt

Error while password sync with Active directory.

Hi all.
Am doing active directory password sync with oim 11g but this gives an error
Debug [07/31/12 11:52:14] CONFIG VALUE LENGTH
Debug [07/31/12 11:52:14] 254
Debug [07/31/12 11:52:14]
Debug [07/31/12 11:52:14]
Debug [07/31/12 11:52:14] Before adding configsync attributes
Debug [07/31/12 11:52:14]
sgslrgac instance
Debug [07/31/12 11:52:14] User Name --->
Debug [07/31/12 11:52:14] TEST.TEST10
Debug [07/31/12 11:52:14]
Debug [07/31/12 11:52:14] RelativeId:
Debug [07/31/12 11:52:14] 1122
Debug [07/31/12 11:52:14]
Debug [07/31/12 11:52:14]
sgsladac Instance
Debug [07/31/12 11:52:14]
LDAP Connected
Debug [07/31/12 11:52:14] search string :
Debug [07/31/12 11:52:14] (&(objectCategory=person)(objectClass=user)(sAMAccountName=TEST.TEST10))
Debug [07/31/12 11:52:14]
Debug [07/31/12 11:52:14] Connected to ADSI
Debug [07/31/12 11:52:14] After Search
Debug [07/31/12 11:52:14] SID::
Debug [07/31/12 11:52:14] S-1-5-21-449192332-2375483478-3823051035-1122
Debug [07/31/12 11:52:14]
Debug [07/31/12 11:52:14] DN::
Debug [07/31/12 11:52:14] CN=test test10,CN=Users,DC=thakralone,DC=com
Debug [07/31/12 11:52:14]
Debug [07/31/12 11:52:14] GUID:::
Debug [07/31/12 11:52:14] QHetRJE7hEKkG8PeqYRKlQ==
Debug [07/31/12 11:52:14]
Debug [07/31/12 11:52:14] after ladp search
Debug [07/31/12 11:52:14] Success sgsldpap
Debug [07/31/12 11:52:14]
Passlen populated :
Debug [07/31/12 11:52:14] 190
Debug [07/31/12 11:52:14]
Debug [07/31/12 11:52:14]
Moving sgsloidi from asynchSystem
Debug [07/31/12 11:52:14] Store Object populated
Debug [07/31/12 11:52:14] [getObjectGuid=QHetRJE7hEKkG8PeqYRKlQ==
getPasswordLen=190
getUserDn=CN=test test10,CN=Users,DC=thakralone,DC=com
getUserId=TEST.TEST10
Debug [07/31/12 11:52:14]
***end of status
Debug [07/31/12 11:52:14]
Out of sgsloidi from asynchSystem
Debug [07/31/12 11:52:14]
Before Free
Debug [07/31/12 11:52:14]
After Free
i have tried to reconfig and reinstall the connector but still the same issue.

Don't think so.
Reconcile will just find accounts that are out of sync (that is, that exist on one system but not the other). It doesn't update account attributes.
ActiveSync can identify and process changed records, but the password itself is hashed, so unless you can use the hashed password directly (and IDM can't) then you just would get "garbage" data via the sync.
I think you do need to use one of the PasswordSync tools for this, because they intercept the password change process before the password is hashed, allowing you to apply the changes in multiple locations.

Issue with installing password sync on Windows 2008

I have installed pwd sync 64 bit on Windows 2008. Configured it in direct mode (no jms). But when I change the password of a user it is not syncing with the IdM. We have the 32 bit pwd sync working fine on Win 2003. Is there any special steps for installing, configuring 64 bit pwd sync on Win 2008. Thanks. Jack

Hi again Tim-
Given the error "failed to crack URL" I believe you're hitting an issue we have documented as bug # 21999. Here's the jist of it and a possible way around it.
==========
When installing password sync on a Windows 2008 system, if you are not
logged in as 'Administrator', the installer and the configure applications
may be subject to Windows File And Registry Virtualization (FARV). This may
cause the registry entries for password sync to be written to the user portion
of the registry, rather than the system portion. Subsequently, password sync
will fail with the message "failed to crack URL".
To work around FARV, either run the MSI installer from a privileged cmd.exe
prompt, or run the configure.exe application using the "Run As Administrator"
functionality (right-click on the configure.exe application, select "Run As
Administrator").
==========
Hope this helps.
Regards,
Alex

Ovi Sync not found

Sir, I was using E72 that was ovi sync. Now purchase new E72 but not found ovi sync tool. please inform me how to get it.

Ovi sync has now become Nokia sync but don't bother as it does not have the same functionality, for a start after the first sync any changes you make to your contacts are not reflected online & any further sync just downloads the original contact list, you lose any photos which you've added to a contact & any contact with a symbol (i.e. '&') in the first or last name has characters missing from the name before the symbol.
This happens on my E7 & has done so since the migration to Nokia sync.

AD Password Sync connector 9.1.1 With OIM 11g R2 - ERROR OVER SSL

I have set up AD password sync with from AD to OIM 11G R2
The password syncs from AD to OIM 11G R2 on non ssl port 389.
But if fails on SSL Port 636.
Errors in OIMMain.Log:_
Debug [10/11/2012 10:49:34 AM] Inside ConnectToADSI
Debug [10/11/2012 10:49:34 AM]
ldap_connect failed with
Debug [10/11/2012 10:49:34 AM] Server Down
Debug [10/11/2012 10:49:34 AM]
Steps Carried Out thus far:_
AD is up and running.
Configured AD Password Sync Connector on 636 and selected ssl.
Created Certificate on OIM host, configured custom identity key store on weblogic. Restarted Weblogic.
Imported Certificate to AD. After this, restarted the AD
I can Telnet port 636 from OIM Box and also connect to AD through LDAP Browser on 636 and view OU and CN, so this seems fine.
Provisioning from OIM through Connector Server to AD works over SSL and this works fine.
Help would be appreciated.
Many Thanks

This question is now been fixed.
Instead of explicitly stating 636 for SSL,
Use the same port 389 for ssl and also configured oim port to be 140001 which is the ssl port for oim in the configuration of OIM Password Sync.
Export Certificates from AD to java security keystore and to weblogic keystore
Export .pem certificate created on OIM host machine to AD.
Restart weblogic, oim and AD
Everything would work fine.
For all the other information, refer to doc.
Thanks

OIM 9102 , AD Password Sync 91x, JBoss 423GA - issue over SSL port.

Followed the steps describe in "Deploying the connector"
http://download.oracle.com/docs/cd/E11223_01/doc.910/e11218/install_config.htm#insertedID0
section
Pre-Installation both SSL n non-SSL works for SPML verification.
For JBoss Application Server:
http://IP ADDRESS:8080/spmlws/services/HttpSoap11
https://IP ADDRESS:8443/spmlws/services/HttpSoap11
Post Installation - configured SSL.
On AD machine logs following error message is displayed:
MAX_RETRY LIMIT count is not updated: OIM is down
Following meta-link ID 1073889.1
https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&doctype=PROBLEM&id=1073889.1
explains to verify 'oimhost and oimport' - oimhost is machine ip address ( AD machine is able to ping OIM machine through ip address and machine name )
oimport is 8443
Any suggestion.
Or anyone previously successfully deployed password sync over SSL for OIM 9102 and AD Password sync 91x,
as i found a similar thread in OTN forum where user had issues over SSL.

Did anyone resolve this issue? I have the same running SSL Password Sync on OAS 10.1.3.4 and OIM 9.1.0.2 BP09a with AD 2003.
Debug [7/8/2010 6:35:45 AM] oimport is
Debug [7/8/2010 6:35:45 AM] 4443
Debug [7/8/2010 6:35:45 AM]
Debug [7/8/2010 6:35:45 AM] oimsslclient is
Debug [7/8/2010 6:35:45 AM] nw-dc-01.nwocaland.nwoca.org
Debug [7/8/2010 6:35:45 AM]
Debug [7/8/2010 6:35:45 AM] oimuserattr is
Debug [7/8/2010 6:35:45 AM] USR_UDF_SAM_ACCTNAME
Debug [7/8/2010 6:35:45 AM]
Debug [7/8/2010 6:35:45 AM] oimusessl is
Debug [7/8/2010 6:35:45 AM] Y
Debug [7/8/2010 6:35:45 AM]
Debug [7/8/2010 6:35:45 AM] oimappservertype is
Debug [7/8/2010 6:35:45 AM] 2
Debug [7/8/2010 6:35:45 AM]
Debug [7/8/2010 6:35:45 AM] End of sgsloidi::getConfigParamters
Debug [7/8/2010 6:35:45 AM] Inside sgsloidi::setParameters
Debug [7/8/2010 6:35:45 AM] The SOAP start element is
Debug [7/8/2010 6:35:45 AM] <SPMLv2Document xmlns="http://xmlns.oracle.com/OIM/provisioning">
Debug [7/8/2010 6:35:45 AM] The SOAP end element is
Debug [7/8/2010 6:35:45 AM] </SPMLv2Document>
Debug [7/8/2010 6:35:45 AM] The path is
Debug [7/8/2010 6:35:45 AM] /spmlws/HttpSoap11
Debug [7/8/2010 6:35:45 AM] End of sgsloidi::setParameters

OIM-AD password sync not working

Hi All,
I am trying to sync password b/w AD and OIM. I have installed the password sync connector and followed the steps specified in the connector document. However when i change the password in AD, it is not reflected in OIM.
The connector version is 11.1.1.5. And the following have been done
1. deployed SPML-DSML service
2. Tested the SPML-DSML service
3. Installed the connector
4. Enabled the logs
5. Configured IT resource and enabled SSL
But the password changed in AD is not reflected in OIM. Please let me know if any additional steps have to performed.
Thanks

Hi Raghav,
Please find the log below
Debug [1/19/2012 3:54:05 PM] Inside sgsladds::sgslperwriteData YOOOO
Debug [1/19/2012 3:54:05 PM] Inside sgsladac c-tor
Debug [1/19/2012 3:54:05 PM] AD Host
Debug [1/19/2012 3:54:05 PM] localhost
Debug [1/19/2012 3:54:05 PM]
Debug [1/19/2012 3:54:05 PM] AD Port
Debug [1/19/2012 3:54:05 PM] 636
Debug [1/19/2012 3:54:05 PM]
Debug [1/19/2012 3:54:05 PM] AD Base DN
Debug [1/19/2012 3:54:05 PM] DC=abc,DC=xyz,DC=com
Debug [1/19/2012 3:54:05 PM]
Debug [1/19/2012 3:54:05 PM] Only dataattribute
Debug [1/19/2012 3:54:05 PM] Got Registry enteries
Debug [1/19/2012 3:54:05 PM] contact
Debug [1/19/2012 3:54:05 PM] description
Debug [1/19/2012 3:54:05 PM] Got Entiredn
Debug [1/19/2012 3:54:05 PM] OU=oimpwdsynctms.abc.xyz,ou=org1,DC=abc,DC=xyz,DC=com
Debug [1/19/2012 3:54:05 PM] Encrypted record already exists in Datastore
Debug [1/19/2012 3:54:05 PM] Already Exists
Debug [1/19/2012 3:54:05 PM] Encrypted record already exists in Datastore
Debug [1/19/2012 3:54:05 PM] Already Exists
Debug [1/19/2012 3:54:05 PM] Inside sgsladdsSearchUser
Debug [1/19/2012 3:54:05 PM] Firing Search Request
Debug [1/19/2012 3:54:05 PM] AD search for a user objectGUID is successfull
Debug [1/19/2012 3:54:05 PM] Count success
Debug [1/19/2012 3:54:05 PM] Search result fetched
Debug [1/19/2012 3:54:05 PM] 0:319 10 230 308 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAA6msQnVk0HkW+zmHr7+2nyAAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAADZgAAqAAAABAAAABU2g1ES3TOo35N6+zJPunGAAAAAASAAACgAAAAEAAAAEsx8lF3vt0oEaE0BhubB/A4AAAAl0IEcVLgvhvZryqKTWzBkjEatBoCMvekzXvlLlUfj/moGrX2NgWL9zlmeLKY9scstvPONOalbbgUAAAArNCxOGd02kIZELgCavo2IZpN5ZA=
Debug [1/19/2012 3:54:05 PM] --------------------&&&----------------
Debug [1/19/2012 3:54:05 PM] Inside sgsladds::sgsladdsgetData NEW Look
Debug [1/19/2012 3:54:05 PM] 0:319 10 230 308 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAA6msQnVk0HkW+zmHr7+2nyAAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAADZgAAqAAAABAAAABU2g1ES3TOo35N6+zJPunGAAAAAASAAACgAAAAEAAAAEsx8lF3vt0oEaE0BhubB/A4AAAAl0IEcVLgvhvZryqKTWzBkjEatBoCMvekzXvlLlUfj/moGrX2NgWL9zlmeLKY9scstvPONOalbbgUAAAArNCxOGd02kIZELgCavo2IZpN5ZA=
Debug [1/19/2012 3:54:05 PM] Encoded Data Extracted in sgsladdsgetData
Debug [1/19/2012 3:54:05 PM] 319 10 230 308 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAA6msQnVk0HkW+zmHr7+2nyAAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAADZgAAqAAAABAAAABU2g1ES3TOo35N6+zJPunGAAAAAASAAACgAAAAEAAAAEsx8lF3vt0oEaE0BhubB/A4AAAAl0IEcVLgvhvZryqKTWzBkjEatBoCMvekzXvlLlUfj/moGrX2NgWL9zlmeLKY9scstvPONOalbbgUAAAArNCxOGd02kIZELgCavo2IZpN5ZA=
Debug [1/19/2012 3:54:05 PM] Moving out sgsladdsgetData
Debug [1/19/2012 3:54:05 PM] Encoded Data Extracted
Debug [1/19/2012 3:54:05 PM] 319 10 230 308 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAA6msQnVk0HkW+zmHr7+2nyAAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAADZgAAqAAAABAAAABU2g1ES3TOo35N6+zJPunGAAAAAASAAACgAAAAEAAAAEsx8lF3vt0oEaE0BhubB/A4AAAAl0IEcVLgvhvZryqKTWzBkjEatBoCMvekzXvlLlUfj/moGrX2NgWL9zlmeLKY9scstvPONOalbbgUAAAArNCxOGd02kIZELgCavo2IZpN5ZA=
Debug [1/19/2012 3:54:05 PM] MAX_RETRY LIMIT count is not updated: OIM is down
Debug [1/19/2012 3:54:05 PM] 0
Debug [1/19/2012 3:54:05 PM] numretries ======
Debug [1/19/2012 3:54:05 PM] 0
Debug [1/19/2012 3:54:05 PM] Inside sgslcodsupdateChild
Debug [1/19/2012 3:54:05 PM] 0:319 10 230 308 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAA6msQnVk0HkW+zmHr7+2nyAAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAADZgAAqAAAABAAAABU2g1ES3TOo35N6+zJPunGAAAAAASAAACgAAAAEAAAAEsx8lF3vt0oEaE0BhubB/A4AAAAl0IEcVLgvhvZryqKTWzBkjEatBoCMvekzXvlLlUfj/moGrX2NgWL9zlmeLKY9scstvPONOalbbgUAAAArNCxOGd02kIZELgCavo2IZpN5ZA=
Debug [1/19/2012 3:54:05 PM]
Encrypted record data updated successfully
Debug [1/19/2012 3:54:05 PM] Inside sgsladac destructor
Debug [1/19/2012 3:54:05 PM] Password updation failed in child process
Debug [1/19/2012 3:54:05 PM]
Relaxing while processing records from datastore
I have provided the correct port numbers and also my certificate is same as the OIM server name. But still when the password is changed in AD, its not updated in OIM.
Thanks,
Bhavana

OIM AD Password Sync issue

HI,
I am doing OIM 9.1.01 AD Password Sync.
I installed AD Password Sync connector in AD Machine. During installation it asked to mention OIM host name and SPML port for that i deployed SMPL in OIM using command line successfully.
While installation AD Password Sync Connector in Oracle Identity Manager Configuration Parameters i have given like these.
Host : rwoim
Port : 8080 (sample value)
Administrator Login :admin
Administrator Password: admin1234
OIM User Attribute : Users.User ID
OIM Application Server Type : WebLogic
Use SSL : Yes
Client Certificate Subject Name : TQL17
where in Port parameter (Enter the number of the port at which the Oracle Identity Manager SPML Web service is listening.
Sample value: 8080)
But i don't know which port SPML using and its enable or not in OIM server. I am strucked at installation.
Please give any one suggestion.
regards
Ramu

Hi Sagar,
i had success with OIM AD Password Sync process with AD Port 389 and SPML Port 7001 and passwords are updating from AD to OIM successfully.
From OIM over AD SSL passwords are updating in AD successfully.
But when again reinstalled the AD Password Sync connector with AD Port 636, passwords are not updating from AD to OIM.
Below the log file saying ldap_connect failed with
Debug [2/6/2012 5:25:35 PM] Server Down
***********Inside sgslldpcopenLDAPConnection****************
Debug [2/6/2012 5:25:35 PM] Inside sgsladac c-tor
Debug [2/6/2012 5:25:35 PM] AD Host
Debug [2/6/2012 5:25:35 PM] 10.129.149.137
Debug [2/6/2012 5:25:35 PM]
Debug [2/6/2012 5:25:35 PM] AD Port
Debug [2/6/2012 5:25:35 PM] 636
Debug [2/6/2012 5:25:35 PM]
Debug [2/6/2012 5:25:35 PM] AD Base DN
Debug [2/6/2012 5:25:35 PM] DC=oimad,DC=com
Debug [2/6/2012 5:25:35 PM]
Debug [2/6/2012 5:25:35 PM]
Debugging the code
Debug [2/6/2012 5:25:35 PM] Inside ConnectToADSI
Debug [2/6/2012 5:25:35 PM]
ldap_connect failed with
Debug [2/6/2012 5:25:35 PM] Server Down
Debug [2/6/2012 5:25:35 PM]
Debug [2/6/2012 5:25:35 PM]
Connection to AD failed
Debug [2/6/2012 5:25:35 PM]
***********Out of openLDAPConnection****************
Debug [2/6/2012 5:25:35 PM] Inside sgsladac destructor
regards
Ramu

OIM Password sync connector installation issue

Hi All,
I am trying to configure password synchronziation between OIM & Active Directory. while installing AD Password Sync connector on AD Host it is returniing following.
Error occurred while uploading prepAD.ldif. , please refer to %TEMP%\oimpwdsync.log. Please upload
prepAD.ldif to Active Directory Domain Controller before applying ACLs.
Kindly suggest me on this.
Regards,
Madhu

I'm also getting the same error.
This is the content of the log file :
(Apr 14, 2011 6:19:27 AM), Install, com.oracle.installshield.adpwd.pathValidator, dbg, Directory does not exists, will get created at the installation time
(Apr 14, 2011 6:19:38 AM), Install, com.installshield.product.actions.UninstallerJVMResolution, dbg.jvm, attempting to use the current JVM
(Apr 14, 2011 6:19:38 AM), Install, com.installshield.product.actions.UninstallerJVMResolution, dbg.jvm, searching for a JVM
(Apr 14, 2011 6:19:38 AM), Install, com.installshield.product.service.product.PureJavaProductServiceImpl$Installer, err, ProductException: (error code = 601; message="JVM not found")
STACK_TRACE: 8
ProductException: (error code = 601; message="JVM not found")
     at com.installshield.product.actions.JVMResolution.install(JVMResolution.java:171)
     at com.installshield.product.service.product.PureJavaProductServiceImpl$InstallProduct.checkUninstallerJVMResolution(PureJavaProductServiceImpl.java:4793)
     at com.installshield.product.service.product.PureJavaProductServiceImpl$InstallProduct.install(PureJavaProductServiceImpl.java:4554)
     at com.installshield.product.service.product.PureJavaProductServiceImpl$Installer.execute(PureJavaProductServiceImpl.java:3758)
     at com.installshield.wizard.service.AsynchronousOperation.run(AsynchronousOperation.java:41)
     at java.lang.Thread.run(Unknown Source)
(Apr 14, 2011 6:19:38 AM), Install, com.oracle.installshield.adpwd.execTool, err, Cannot run program "C:\Program": CreateProcess error=2, The system cannot find the file specified
(Apr 14, 2011 6:19:38 AM), Install, com.installshield.wizardx.ascii.ModifyFile, msg2, ASCII file C:\Program Files\oracle\OIMADPasswordSync\prepAD.ldif does not exist and will be created.
(Apr 14, 2011 6:19:38 AM), Install, com.oracle.installshield.adpwd.ldapModify, err, gen exp
(Apr 14, 2011 6:19:38 AM), Install, com.oracle.installshield.adpwd.ldapModify, err, C:\Program Files\oracle\OIMADPasswordSync\prepAD.ldif (The system cannot find the file specified)
Anyone fixed it. I have checked JAVA env is set in my machine
C:\>echo %JAVA_HOME%
D:\oracle\Middleware\jdk160_14_R27.6.5-32
C:\>java -version
java version "1.6.0_12"
Java(TM) SE Runtime Environment (build 1.6.0_12-b04)
Java HotSpot(TM) Client VM (build 11.2-b01, mixed mode)
Did anyone fix the issue?

AD password sync connector configuration for OIM Cluster

Hi
I have OIM running on clustered environment in two nodes.
I have some AD domain controller. I need to install the AD password sync connector (version 9.1.1) in the AD domain controller.
I remember that in the earlier versions we need to install the user management console and then change the value in xlConfig file to have both the node name.
Version 9.1.1 is changed to use the SPML webservices. I have installed the SPML WS in both the nodes.
My question is where do i specify in the AD password sync connector that I have two server as there is no xlConfig or any other config file that I can give both the server address.
I referred the following PDF http://download.oracle.com/docs/cd/E11223_01/doc.910/e11218.pdf
Thanks
Narendar Doshi

have you tried importing the cert in cacerts under $JAVA_HOME?

OIM AD reverse password sync from one AD instance to multiple OIM instances

Hi All,
I have a followind scenario. My client is having multiple offices across the globe. They have OIM installed and configured in each location in each country to manage there local applications. Client also has a Global LDAP which is common across all the offices worldwide.
My requirement is then i need to setup reverse password sync from Global LDAP to all the OIM sysem across the Globe. As per the reverse password sync connector i can only define one OIM system to sync the password.
Can you please suggest me some way to achieve this functionality? Is it possible to install more than one password sync connector and configure them with different OIM systems?
Thanks
Yogesh

I have one AD instance and n OIM instances. Can i install multiple AD-OIM passwordd sync components on the same AD machine and configure each component with various OIM's?

AD Password Sync to OIM 9.0.3 - User not found in OIM

Similar Messages

Maybe you are looking for