AD target Recon-Change User Id event is not generating

Hi All,
I have configured my OIM 9.1 with AD for target recon. I am using MSFT AD 9.1.0.0 connector pack. I wanted to check if user id field is modified in AD directly, does it reflected in OIM on next recon. For that i have modified the user's user id in AD and then run the target recon (tried with full and increamental both), but it was not generating the event (under recon manager) for that user. In jboss logs it was showing "process user change: test390's data is not modified". I tried by changing container, last name and other attrs for particular attrs but OIM showed the same message every time. As i modified the user id to previous one in AD and then run the reconciliation, event getting generated and linked and all other changes reflected (ou, last name....) in OIM process form.
Am i missing something? Any help would really be appreciated.

I am expecting process match here...as per my understanding process match will utilize the key fields (which is obGuid in my case) not matching rule. My matching rule is " user login equals userid".

Similar Messages

User command event is not working ........

Hi ,
class event_class definition.
public section.
    methods:
       handle_user_command
           for event after_user_command of cl_gui_alv_grid
               importing e_ucomm.
    methods:handle_hotspot
      for event hotspot_click of cl_gui_alv_grid
           importing e_row_id.
endclass.                    "event_class DEFINITION
******selection screen**************************
call screen 100.
      CLASS event_class IMPLEMENTATION
********class implimentations********************
class event_class implementation.
method handle_user_command.
    case e_ucomm.
      when 'SAVE'.
   wa_default-checkbox = 'X'.
ENDCASE.
endmethod.            "handle_user_command
method handle_hotspot.
    wa_default-checkbox = 'X'.
    lv_layout-zebra = 'X'.
    lv_hotspot = lv_hotspot + 1.
    modify       lit_default
    index        e_row_id
    from         wa_default
    transporting checkbox.
    lv_id = e_row_id.
*************refreshing tables************
    call method wa_alv->refresh_table_display
     EXPORTING
       is_stable      =
       i_soft_refresh =
     EXCEPTIONS
       finished       = 1
       others         = 2
    if sy-subrc <> 0.
    MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
               WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
    endif.
endmethod.
            "handle_user_command
method user_command.
*****some code i will write with help of e_ucomm**********(   control not comming here)
endmethod.
endclass.
Hi,Here i have one alv grid display if i click on grid checkbox method (hotspot) will triggers properly,,,,but if i select any button like save ,modify i have created on screen method user_command is not triggering ,control is going to pai of that screen.my question is it shold trigger usr_command right??????
any help appriciated.
Thanks

Hi, Lingaraj.
Check your events handlers is registered
SET HANDLER go_event_receiver->handle_double_click FOR go_grid.
SET HANDLER go_event_receiver->handle_toolbar      FOR go_grid.
SET HANDLER go_event_receiver->handle_user_command FOR go_grid.
SET HANDLER go_event_receiver->handle_menu_button FOR go_grid.
SET HANDLER go_event_receiver->handle_context_menu FOR go_grid.
SET HANDLER go_event_receiver->on_f4               FOR go_grid.
SET HANDLER go_event_receiver->handle_data_changed FOR go_grid.
before calling an ALV:
go_grid->set_table_for_first_display(
     EXPORTING is_layout        = ls_layout
                is_variant       = ls_variant
                i_save           = 'A'
      CHANGING it_outtab        = gt_outtab
                it_fieldcatalog = lt_fieldcat
Hope it will be helpful for you.
Best regards,
George Shlyahov.

I need help to change user name, it does not belong to this account it belongs to my employee.

My employee was helping me setup my Apple ID and accidently typed his username "mykizism" into the user name field when creating my apple id account.. It is now permanently attached to my Apple ID and this is not acceptable.
My employee has also stated that his user name is private to him and wishes for it to be not publicly displayed.
Can a moderator / host please help me with this?

I sent your request in to the hosts.

11g R2 Update user after Target Recon

All,
I am doing a initial target recon for users that already exist in the target. The recon was successful and I see the resource instance in the Accounts tab of the user.
However, when I update any attribute, I see a change task for that field int he resource history but the task is getting rejected.
Is there anything else I need to do or I am missing.
Thanks,
M

The SJSDS_9.0.4.15.0.zip???
SUN DSEE LDAP connector does not handle Change tasks properly...
Normally for any proper handling:-
"Change Last Name" (i.e. on User Profile) ---> This task simply transfers this value to --> "Last Name" (on process form) --> triggers --> Last Name Updated ---> Target System specific APIs --> Target System last name
The AD User connector follows above principle..
However, this SJSDS_9.0.4.15.0 connector violates that principle.... "Change Last Name" (i.e. on User Profile) directly tries to Target System specific APIs --> Target System last name..
So, Process Data is NOT Updated... This answers your question that It is not updating the OIM process form.
This leads to a very critical bug of unnecessary reconciliation event...
(i.e. Last Name --> From John to John1 --> Target System also Changed to John1... But Process Form still has John... So, next time again when recon is run, unnecessarily recon event is raised... This time finally Process Form is updated to John1...
This means the issue is somewhere in the recon process... See the recon mappings.. Like IT Resource etc... All field mappings...
Anyway Retry the "Change Last Name" task.. And hopefully you have configured logs.. See those logs... In 1 minute you will be able to figure out the error... Probably IT Resource value is not being populated in the process form...
Share the log..
Hope it is helpful...

AD User Target Recon

What exactly does AD User Target Recon do? Since it is not trusted recon, I am sort of expecting changes made to AD to be reverted back to whatever OIM says they should be. So if an admin changes a user's givenName in AD, e.g. Ron to Ron2, then the AD User Target Recon will revert the change back to Ron. Does it make these attributes changes? What else does it do? The documentation is short and doesn't offer a good explanation.
Thanks

AD User Target Recon It reconciles the information back to the OIM. i.e When you change the name from RON to RON2 then it will update the OIM and make the name RON2. You need to decised during the implementation itself if you want only provisioning to happen from OIM to AD or you want also Reconcilliation to happen from AD to OIM aswell. To keep the information synchronous when there is updates from both ends then it is recommended to go for both provisioning and reconsiliation process.

At line-selection & at user-command event issue

hi
i am working on a interactive report,with at line & at user command event,on list 3 i have used a pf status,to trigger the at user command event,till that i was working with at line selection,which are working fine,but on list 3,i am able to see my pf status,but at user command event is not working properly,its still working like at line selection event,if i clk on record,it take to for nxt action,which i want to do through the action button of pf status.
In debugging i checked that it coming to at user command,but the action in sy-user is 'PICK' & its doing the operation.
WHEN '3'.
      IF itab4[] IS NOT INITIAL.
        SET PF-STATUS 'Z203'.
        LOOP AT itab4.
          AT FIRST.
            WRITE:/1 'Material' ,18 'Name'.
          ENDAT.
          WRITE:/1 itab4-matnr,8 itab4-maktx.
          HIDE:itab4-matnr.
        ENDLOOP.
      ELSE.
        WRITE:/ 'No Data Found'.
      ENDIF.
ENDCASE.
BREAK-POINT.
AT USER-COMMAND.
CASE sy-ucomm.
    WHEN 'CALL'.
      PERFORM bdc_mm02.
ENDCASE.
pls tel me how to use at line selection & at user command in same report to make both events working efficiently.
regds
vipin

Check whether you have assigned Function Key F2 to your function code 'CALL'. If so change that function key. The function key F2 is always linked to function code 'PICK'.
Regards
Sathar

Why can't I use the trackpad to change users?

I have a June 2009 MBP. I updated to Maverick's recently, although my problem dates back to Lion. When I log out to change users the trackpad does not allow me to click on another user. The mouse will respond to the movement, but when you try to tap or click on another user to log in it does not work. My magic mouse also doens't work at all once I log out. Right now I keep an old USB mouse handy just for switching users.
Any thoughts on why this happens or how I can fix it?

When login screen appears, try to hard click the trackpad to register the click.
Tap to click will be only enabled after you login.
Best.

Serious problem with TSCAL per user Licensing (Event 4105 on Licenseserver)

Hello,
i've got a problem with Terminalservice-Licensing: We migrated our AD from W2003 to W2008. At the same time, we updated our Terminalservice-Licenseserver to W2008 (Memberserver, no DC). We are using per-user TSCAL licensing. The problem is, that for (nearly) every user that logs on to a W2008 Terminalserver, an event 4105 is generated in the eventlog of the Licenseserver, that means that the licence server cannot update the ad user properties when he delivers the cals.
We have discovered that the terminalserver-licenceserver group is under the security properties of the user listed but has no rights. For new created users the rights "terminalserver-licenceserver read/write" are correctly set and for those users no event 4105 is generated. The problem is, that License-reporting (usage) is only working for those newly created accounts and not for old ones. Why doesn't the terminalserver-licenceserver group have the rights to modify the Terminalserver-AD attributes for older accounts (these accounts were created when the domain-level was W2003)??? Is there a workaround or hotfix from Microsoft to correct the securitysettings ??
Many thanks
Ralf

Hello Ralf,
Thanks for your post in our forum.
Based on my understanding on your post, you have met the following issue:
You have migrated the Active Directory domain from Windows Server 2003 to Windows Server 2008; You have also upgraded the Terminal Server License Server from Windows Server 2003 to Windows Server 2008. After that, when the existing terminal users access the Terminal Server, an Event ID 4105 is logged to claim that the License Server fails to update the AD user’s properties.
According to the analysis on the second paragraph of your post, I think it is a known issue caused by insufficient permissions of the migrated users created in Windows Server 2003 domain environment. As you’ve found, the permissions required are for the Terminal Services Licensing Servers
group:
· Read Terminal Server license server
· Write Terminal Server license server
To fix this issue, please give these two permissions to the existing users.
After that, please confirm if the License Usage Report is working for the old users.
For more information about Event ID 4105, please refer to:
Event ID 4105 — Terminal Services Per User Client Access License Tracking and Reporting
http://technet.microsoft.com/en-us/library/cc775179(WS.10).aspx
Please feel free to let me know if I can provide any further assistance. Thank you for your cooperation.
Lionel Chen
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact [email protected]

What keys can I use to change user?

What keys can I use to change user?

I am not aware of a keyoard shortcut to change between users. You can click on the current users name in the upper right of the menu bar and it shild drop dowm with the user list and you can click on that user for a quick change.

OIM 10g: Best practice for updating OIM user status from target recon?

We have a requirement, where we need to trigger one or more updates to the OIM user record (including status) based on values pulled in from a target resource recon from an LDAP. For example, if an LDAP attribute "disable-flag=123456" then we want to disable the OIM user. Other LDAP attributes may trigger other OIM user attribute changes.
I think I need to write a custom adapter to handle "recon insert received" and "recon update received" events from the target recon, but wanted to check with the community to see if this was the right approach. Would post-insert/post-update event handlers be a better choice?

Thanks Nishith. That's along the lines of what I was thinking. The only issue in my case is that I might need to update additional custom attributes on the OIM User in addition to enable/disable. Because of that requirement, my thought was to call the API directly from my task adapter to do the attribute updates in addition to the enable/disable. Does this seem like a sound approach?

AD User Target Recon - added whenCreated attribute but no data saved in OIM

Hello.
I added the whenCreated attribute from the AD account to the AD User form (I used Variant = Date and Field Type=DateFieldDlg, patterned after the UD_ADUSER_DATE field that came OOTB). However when I run the recon, the value for whenCreated is not saved in the form. However the Recon Event shows the data being fetched...
Thoughts anybody?
I believe whenCreated in AD is a timestamp in the Generalized Time syntax, but accountExpires is not, that may be one problem.

user8663548 wrote:
Thx Rajiv. The tool is a little shaking when it comes to saving more than one column at a time...Anyway, I'm getting close to being done with adding new fields for AD User Target Recon. What's the best way to export this new version of the AD User form to another OIM environment, so that I don't have to redo the work of updating: Form, Object Resource, Process Definition, Lookup Definition? Any lessons learned I should know to make that process as painless as possible?When you export the form along with the resource object or even without the resouce object, it always takes the export of the active version (can be latest or not latest) ... the way I follow is to take export of Resource Object and then continue selecting all the dependecies i.e. form, process and adapters etc.
Edited by: user8663548 on Jan 27, 2012 2:36 PM
Btw, if I click Save in Form Designer, and I wait until it looks like the tool is done (mouse pointer is no longer a rotating circle), then I click Close form, I get a message stating "Are you sure that you want to close without saving your work?". Has anybody experienced this, and lost work as a result, even after clicking Save a couple more times for good measure? I sure hope the Form Designer is more robust and user-friendly in 11g!Well 11G too has this issue, the message is kind of fake and can be ignored. I just make sure by reopening the object to see if the changes are persisted.
-Bikash

Error while running AD User Target Recon

Hi,
We are getting the below error while running AD User Target Recon:
[2012-09-04T10:07:32.262-04:00] [oim_server2] [NOTIFICATION] [] [oracle.iam.features.scheduler.agentry.operations] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 98fe4d9aa175090d:7101298f:13991840195:-8000-0000000000000235,0] [APP: oim#11.1.2.0.0] ADP ClassLoader failed to load: Script1[[
java.lang.ClassNotFoundException: ADP ClassLoader failed to load: Script1
at com.thortech.xl.dataobj.tcADPClassLoader.findClass(tcADPClassLoader.java:229)
at java.lang.ClassLoader.loadClass(ClassLoader.java:306)
at java.lang.ClassLoader.loadClass(ClassLoader.java:247)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:247)
at oracle.iam.scheduler.vo.ClassLoaderObjectInputStream.resolveClass(ClassLoaderObjectInputStream.java:72)
at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1574)
at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1495)
at java.io.ObjectInputStream.readClass(ObjectInputStream.java:1461)
at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1311)
at java.io.ObjectInputStream.defaultReadFields(ObjectInputStream.java:1946)
at java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:1870)
at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1752)
at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1328)
at java.io.ObjectInputStream.defaultReadFields(ObjectInputStream.java:1946)
at java.io.ObjectInputStream.readSerialData(ObjectInputStream.java:1870)
at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1752)
at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1328)
at java.io.ObjectInputStream.readObject(ObjectInputStream.java:350)
at oracle.iam.scheduler.vo.JobHistory.getExceptionObject(JobHistory.java:78)
at oracle.iam.features.scheduler.agentry.operations.LookupActor.prepare(LookupActor.java:1282)
at oracle.iam.features.scheduler.agentry.operations.LookupActor.refresh(LookupActor.java:3074)
at oracle.iam.features.scheduler.agentry.operations.LookupActor.perform(LookupActor.java:2495)
at oracle.iam.consoles.faces.mvc.canonic.Model.perform(Model.java:579)
at oracle.iam.consoles.faces.mvc.admin.Model.perform(Model.java:326)
at oracle.iam.consoles.faces.mvc.canonic.Controller.doPerform(Controller.java:257)
at oracle.iam.consoles.faces.mvc.canonic.Controller.doSelectAction(Controller.java:179)
at oracle.iam.consoles.faces.event.NavigationListener.processAction(NavigationListener.java:99)
at javax.faces.event.ActionEvent.processListener(ActionEvent.java:88)
at org.apache.myfaces.trinidad.component.UIXComponentBase.broadcast(UIXComponentBase.java:675)
at org.apache.myfaces.trinidad.component.UIXCommand.broadcast(UIXCommand.java:179)
at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$1.run(ContextSwitchingComponent.java:92)
at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:361)
at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:96)
at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:102)
at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$1.run(ContextSwitchingComponent.java:92)
at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:361)
at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:96)
at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:96)
at javax.faces.component.UIViewRoot.broadcastEvents(UIViewRoot.java:475)
at javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:756)
at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._invokeApplication(LifecycleImpl.java:889)
at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._executePhase(LifecycleImpl.java:379)
at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:194)
at javax.faces.webapp.FacesServlet.service(FacesServlet.java:265)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:301)
at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.adf.model.servlet.ADFBindingFilter.doFilter(ADFBindingFilter.java:205)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.adfinternal.view.faces.webapp.rich.RegistrationFilter.doFilter(RegistrationFilter.java:106)
at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446)
at oracle.adfinternal.view.faces.activedata.AdsFilter.doFilter(AdsFilter.java:60)
at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446)
at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:271)
at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:177)
at org.apache.myfaces.trinidad.webapp.TrinidadFilter.doFilter(TrinidadFilter.java:92)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.iam.platform.auth.web.OIMAuthContextFilter.doFilter(OIMAuthContextFilter.java:107)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.adf.library.webapp.LibraryFilter.doFilter(LibraryFilter.java:179)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:119)
at java.security.AccessController.doPrivileged(Native Method)
at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:315)
at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:442)
at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:103)
at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:171)
at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:139)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3730)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3696)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2273)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2179)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1490)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
[2012-09-04T10:07:32.314-04:00] [oim_server2] [NOTIFICATION] [] [oracle.iam.features.scheduler.agentry.operations] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 98fe4d9aa175090d:7101298f:13991840195:-8000-0000000000000235,0] [APP: oim#11.1.2.0.0] [[
java.lang.NullPointerException
at java.io.ByteArrayInputStream.<init>(ByteArrayInputStream.java:89)
at oracle.iam.scheduler.vo.JobHistory.getExceptionObject(JobHistory.java:76)
at oracle.iam.features.scheduler.agentry.operations.LookupActor.prepare(LookupActor.java:1282)
at oracle.iam.features.scheduler.agentry.operations.LookupActor.refresh(LookupActor.java:3074)
at oracle.iam.features.scheduler.agentry.operations.LookupActor.perform(LookupActor.java:2495)
at oracle.iam.consoles.faces.mvc.canonic.Model.perform(Model.java:579)
at oracle.iam.consoles.faces.mvc.admin.Model.perform(Model.java:326)
at oracle.iam.consoles.faces.mvc.canonic.Controller.doPerform(Controller.java:257)
at oracle.iam.consoles.faces.mvc.canonic.Controller.doSelectAction(Controller.java:179)
at oracle.iam.consoles.faces.event.NavigationListener.processAction(NavigationListener.java:99)
at javax.faces.event.ActionEvent.processListener(ActionEvent.java:88)
at org.apache.myfaces.trinidad.component.UIXComponentBase.broadcast(UIXComponentBase.java:675)
at org.apache.myfaces.trinidad.component.UIXCommand.broadcast(UIXCommand.java:179)
at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$1.run(ContextSwitchingComponent.java:92)
at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:361)
at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:96)
at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:102)
at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$1.run(ContextSwitchingComponent.java:92)
at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:361)
at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:96)
at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:96)
at javax.faces.component.UIViewRoot.broadcastEvents(UIViewRoot.java:475)
at javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:756)
at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._invokeApplication(LifecycleImpl.java:889)
at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._executePhase(LifecycleImpl.java:379)
at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:194)
at javax.faces.webapp.FacesServlet.service(FacesServlet.java:265)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:301)
at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.adf.model.servlet.ADFBindingFilter.doFilter(ADFBindingFilter.java:205)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.adfinternal.view.faces.webapp.rich.RegistrationFilter.doFilter(RegistrationFilter.java:106)
at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446)
at oracle.adfinternal.view.faces.activedata.AdsFilter.doFilter(AdsFilter.java:60)
at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446)
at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:271)
at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:177)
at org.apache.myfaces.trinidad.webapp.TrinidadFilter.doFilter(TrinidadFilter.java:92)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.iam.platform.auth.web.OIMAuthContextFilter.doFilter(OIMAuthContextFilter.java:107)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.adf.library.webapp.LibraryFilter.doFilter(LibraryFilter.java:179)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:119)
at java.security.AccessController.doPrivileged(Native Method)
at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:315)
at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:442)
at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:103)
at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:171)
at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:139)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3730)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3696)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2273)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2179)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1490)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
Have anyone faced this issue ?? Any idea how to resolve this ??
Thanks,
Hrushi

920194 wrote:
Hi Bikash,
Thank you that helped a bit!! I see the same behaviour i.e., recon events are created when using displayName or givenName attribute and it does not work using "samAccountName". Were you able to find the solution for this ??The solution would have to be provided by Oracle as this looks like a bug, since the connector doc gives example of filter as samAccountName.
Also, when we reconcile using displayName/givenName attribute, even though the recon event is created, the status if the scheduler is Failed with "oracle.iam.connectors.icfcommon.exceptions.OIMException: Thor.API.Exceptions.tcAPIException: Row index out of bounds" Any idea on this ??Full stacktrace??
Thanks,
Hrushi

OIM 11g DBAT connector - user update not working after target recon

Hi,
I have configured a resource (XSVR3) with the DBAT 9.1.0.5.0 connector to do provisioning and target recon to and from the same custom database table, following the example found on the connector guide. Now what happens is the following:
- if I first provision the resource to the user everything works fine
- if a resource is first assigned to a user as a result of a target recon, the connector then fails at propagating to the table any changes I make in the process form, returning the following error:
<8-gen-2013 16.44.16 CET> <Error> <OIMCP.DATC> <BEA-000000> <Class/Method: DBFacade/updateParentRecord encounter some problems: Empty parent row cannot be updated. Please ensure to run reconciliation task to bring the systems in sync.>
<8-gen-2013 16.44.16 CET> <Error> <OIMCP.DATC> <BEA-000000> <Class/Method: DBProvisioningTransportProvider/sendData encounter some problems: DB_UPDATE_EMPTY_RECORD_ERROR
com.thortech.xl.gc.exception.DBException: DB_UPDATE_EMPTY_RECORD_ERROR
at com.thortech.xl.gc.impl.common.DBFacade.updateParentRecord(Unknown Source)
at com.thortech.xl.gc.impl.prov.DBProvisioningTransportProvider.sendData(Unknown Source)
It looks like the connector is unable to find the record that needs to be updated. I've looked into the process form table of the resource on the DB (called UD_XSVR3), and I noticed that records resulting from target reconciliation have a null in the UD_XSVR3_ID column, while records resulting from a direct provisioning have the username in the same column. Updating manually the column in the first kind of records fixes the issue, but I need to know if/what have I missed in the connector configuration.
thanks in advance
Alex
Edited by: Prorad on Jan 9, 2013 3:02 AM

Hi, Prorad,
We are having same issue. What's the resolution for the issue? Any hints will be great.
Thanks,
Vincent

Linked Recon event does not show up in user's provisioned resources

I am totally new at this Orcale OIM stuff and I have looked through this forum and have not found an answer. I have configured the connector and and (I think) successfully ran the EBS_TR_User task limiting it to one specific user. It runs and I do not see any errors. It did create an entry in the Recon Event Manager in the design console and the event indicates that the EBS user is "linked" to the expected OIM user. The recon event also shows the responsibility that is in EBS for the user. However, what I do not understand is that when I look at the user in OIM and select to display the resource profile for the user, the responsibility does not show in OIM.
Why does it not show in OIM? Is there something I am missing to cause it not to appear? Or is there another step I need to complete to make it appear? Or does it just not ever appear? Does anyone know what to do after the EBS_TR_User scheduled task runs or where I can find information on this? Any insight or direction is greatly appreciated !!

Well take care of Martin's Suggestion to first of all identify that its Trusted Source or Target Resource model of reconciliation you are running. This is how you can identify that:
- Check it against the Connector Documentation Or
- Go to the Resource Object against which you are running this reconciliation. Check the Trusted check box. If this is checked then you are running Trusted Mode and in this case you won't be able to see those Responsibilities in the Resource Profile of Users.
Now if the above condition is not true and the mode is not Trusted then make sure you have the following rule condition defined.
One Entity Match Found -> Establish Link
One Process Match Found -> Establish Link *(For Later on identification of same Account)*
Thanks
Sunny

Error while "OID USER TARGET RECON"....

hi,
Iam new to OIM and i would really appreciate your help.
Everytime i run the OID USER TARGET RECON i keep getting this annoying error which actually prints in the log but it doesnt stop the process (i beleive). The updated data in the OID is reflecting the process form but for some reason this error is coming. please help!
DEBUG QuartzWorkerThread-3 XELLERATE.APIS - Class/Method: tcLookupOperationsBean
*/getLookupValuesFilteredData entered.*
DEBUG QuartzWorkerThread-3 XELLERATE.APIS - Class/Method: tcLookupOperationsBean
*/getLookupValuesFilteredData left.*
INFO QuartzWorkerThread-3 XELLERATE.JAVACLIENT - System Event Handler: Validatin
g the name of the Organization
ERROR QuartzWorkerThread-3 XELLERATE.DATABASE - Class/Method: tcDataBase/writeSt
atement encounter some problems: ORA-02291: integrity constraint (OIMUSER.FK_ACT
_ACT) violated - parent key not found*
java.sql.SQLIntegrityConstraintViolationException: ORA-02291: integrity constrai
nt (OIMUSER.FK_ACT_ACT) violated - parent key not found
at oracle.jdbc.driver.SQLStateMapping.newSQLException(SQLStateMapping.ja
va:85)
at oracle.jdbc.driver.DatabaseError.newSQLException(DatabaseError.java:1
*33)*
at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java
*:206)*
at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:455)
at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:413)
at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:1034)
at oracle.jdbc.driver.T4CPreparedStatement.doOall8(T4CPreparedStatement.
Thanks,
Thilak

hi,
Thanks for your timely reply,
The users are created in OIM and it is already provisioned to OID(*User is in both OIM and OID*), but we update the fields in OID through a script and try to bring the updated values to OIM process form by target recon. When i run the recon i get this error in the log but the values are getting updated successfully.
Thanks
Thilak

AD target Recon-Change User Id event is not generating

Similar Messages

Maybe you are looking for