AD Trusted Recon not working OOTB

Question

I am using OIM 9.1 on Oracle Application Server 10g, Java 1.4.2 provided by the Oracle Application Server, in a RedHat environment.
I require multiple trusted resources -
1. flat file
2. AD (non-SSL)
My Flat File works fine, I can reconcile users in successfully. I have imported the Trusted Recon XML from AD already, and use the fields auto-generated from AD as my Xellerate User Recon Object mapping for the flat file.
However, when I run the scheduled task, ActiveDirectoryReconTask, it gives me two issues.
1) The scheduled task won't get out of "RUNNING" mode.
2) The scheduled task throws the following NoClassDefFoundError, as shown in the logs:
========================
DEBUG,14 May 2008 15:49:57,724,[XL_INTG.ACTIVEDIRECTORY],ActiveDirectoryRecon/performOrgReconciliation Start
DEBUG,14 May 2008 15:49:57,724,[XL_INTG.ACTIVEDIRECTORY],Before Connect
DEBUG,14 May 2008 15:49:57,756,[XL_INTG.ACTIVEDIRECTORY],After Connect
DEBUG,14 May 2008 15:49:57,756,[XL_INTG.ACTIVEDIRECTORY],
********tcADUtilLDAPController ----- Starting internal ldap search with SEARCH CONTROLS
DEBUG,14 May 2008 15:49:57,756,[XL_INTG.ACTIVEDIRECTORY],Before Searching
DEBUG,14 May 2008 15:49:57,762,[XL_INTG.ACTIVEDIRECTORY],After Searching
DEBUG,14 May 2008 15:49:57,768,[XL_INTG.ACTIVEDIRECTORY],ActiveDirectoryRecon/performOrgReconciliation: Org attributes are: {name=name: test, instancetype=instanceType: 4, ou=ou: test, usncreated=uSNCreated: 50129, usnchanged=uSNChanged: 50129, objectclass=objectClass: top, organizationalUnit, distinguishedname=distinguishedName: OU=test,DC=lab,DC=com, objectcategory=objectCategory: CN=Organizational-Unit,CN=Schema,CN=Configuration,DC=lab,DC=com, objectguid=objectGUID: [B@a6a14b, whencreated=whenCreated: 20080428182832.0Z, whenchanged=whenChanged: 20080428182832.0Z}
DEBUG,14 May 2008 15:49:57,768,[XL_INTG.ACTIVEDIRECTORY],ActiveDirectoryRecon/getHashtableFromAttributes
DEBUG,14 May 2008 15:49:57,769,[XL_INTG.ACTIVEDIRECTORY],ActiveDirectoryRecon/getHashtableFromAttributes: dn :OU=test,DC=lab,DC=com
DEBUG,14 May 2008 15:49:57,769,[XL_INTG.ACTIVEDIRECTORY],Class tcADUtilDAPController :: getUsrParentOrg() :: usrDN :: OU=test,DC=lab,DC=com
08/05/14 15:49:57 Exception in thread "QuartzWorkerThread-2" java.lang.NoClassDefFoundError: netscape/ldap/LDAPDN
08/05/14 15:49:57      at com.thortech.xl.integration.ActiveDirectory.tcADUtilLDAPController.getUsrParentOrg(Unknown Source)
08/05/14 15:49:57      at com.thortech.xl.schedule.tasks.ActiveDirectoryRecon.getHashtableFromAttributes(Unknown Source)
08/05/14 15:49:57      at com.thortech.xl.schedule.tasks.ActiveDirectoryRecon.getOrgHashtableFromAttributes(Unknown Source)
08/05/14 15:49:57      at com.thortech.xl.schedule.tasks.ActiveDirectoryRecon.performOrgReconciliation(Unknown Source)
08/05/14 15:49:57      at com.thortech.xl.schedule.tasks.ActiveDirectoryRecon.performReconciliationFirst(Unknown Source)
08/05/14 15:49:57      at com.thortech.xl.schedule.tasks.ActiveDirectoryReconTask.execute(Unknown Source)
08/05/14 15:49:57      at com.thortech.xl.scheduler.tasks.SchedulerBaseTask.run(Unknown Source)
08/05/14 15:49:57      at com.thortech.xl.scheduler.core.quartz.QuartzWrapper$TaskExecutionAction.run(Unknown Source)
08/05/14 15:49:57      at Thor.API.Security.LoginHandler.oracleLoginSession.runAs(Unknown Source)
08/05/14 15:49:57      at com.thortech.xl.scheduler.core.quartz.QuartzWrapper.execute(Unknown Source)
08/05/14 15:49:57      at org.quartz.core.JobRunShell.run(JobRunShell.java:178)
========================
The error that is consistent is
08/05/14 15:49:57 Exception in thread "QuartzWorkerThread-2" java.lang.NoClassDefFoundError: netscape/ldap/LDAPDN
I am able to provision to this same AD Instance.
I've included all the relevant information below...
The scheduled task fields are as follows:
DeleteRecon:     false
FieldLookupCode:     Lookup.ADReconciliation.FieldMap
MaintainHierarchy:     true
Object:     AD User
Server:     ADITResource
TransformLookupCode:     Lookup.ADReconciliation.TransformationMap
UseFieldMapping:     true
UseTransformMapping:     false
XellerateOrg:     Xellerate Users
XellerateObject:     Xellerate User
GroupObject:     AD Group
MultiValueAttributes:     memberOf
StartRecord:     1
BatchSize:     2
NumberOfBatches:     All Available
My IT Resource is as follows:
AD Sync installed (yes/no):     no
ADDisableAttr Lookup Definition:     Lookup.ADProvisioning.DisableAttrLookup
ADGroup LookUp Definition:     Lookup.ADReconliation.GroupLookup
Admin FQDN:     [email protected]
Admin Login:     oimadmin
Admin Password:     *******
AtMap ADUser:     AtMap.AD
AtMap Group:     AtMap.ADGroup
Custom Attribute Name:     
CustomizedReconQuery:     
Last Modified Time Stamp:     0
Last Modified Time Stamp Group:     
OIM User UDF:     
Root Context:     OU=test,DC=lab,DC=com
SSL Port Number:     636
Server Address:     x.x.x.x
Target Locale: Country     US
Target Locale: Language     en
Use Disable Attr:     false
Use SSL:     false
My IT Resource Type Definition is as follows:
ADDisableAttr Lookup Definition:     Lookup.ADProvisioning.DisableAttrLookup     
Use Disable Attr:     false     
Target Locale: Language     en     
Target Locale: Country     US     
Server Address:          
Root Context:          
Admin FQDN:          
Admin Password:          1
Use SSL:     false     
SSL Port Number:     636     
Admin Login:          
AtMap ADUser:     AtMap.AD     
AtMap Group:     AtMap.ADGroup     
Last Modified Time Stamp:     0     
Last Modified Time Stamp Group:     0     
ADGroup LookUp Definition:     Lookup.ADReconliation.GroupLookup     
CustomizedReconQuery:          
AD Sync installed (yes/no):     no     
Custom Attribute Name:          
OIM User UDF:          
My questions are:
1. Has anyone run into this issue, or know what the origin of this issue is? It looks like it's not picking up a class file. However, I have the LDAP jar downloaded, provisioning works fine.
3. How can I get my scheduled task to get out of RUNNING mode and actually stop? The "Last Stop Time" doesn't update, and the only time I can re-run the task is by bouncing the server.
Thanks for your help.
Message was edited by:
sake
Message was edited by:
sake

Answer 1

The problem that you are having is because the ldapsdk-4.17.jar is not in your third party directory.
To quote the deployment guide for the connector:
"You can search for and download the ldapsdk-4.17.jar file from the Internet and copy it into the OIM_home/xellerate/ThirdParty directory."
(Not the most clear and straightforward language but at least it is mentioned.)
You can get the SDK here: http://www.mozilla.org/directory/javasdk.html
I thought the 9.0.1.4 version was supposed to have transitioned over to pure JNDI but it seems like the connector stills uses some things in the old lib. Oracle also used to distribute the old Netscape build of this component as a part of the connector but it seems like someone (probably the Oracle lawyers) disliked this practice.
Good luck!
/M