Adding Users in OIM using SPML

Hi,
In our project we have a requirement where we have to create a user in OID/OIM. The existing code connects to OIMProvisioning using SPML to search, add and modify users. In SPML we couldn’t find any basedn being set while adding user or searching for user.
a. It would be helpful if someone who has knowledge on OID/OIM and SPML to let me know how to query or add users in a specific BaseDN using SPML.
b. I would like to know if it is possible to update both OID and OIM using SPML.
Regards
Philip

It may help you:
http://www.youtube.com/watch?v=7C8cI5zc1DM

Similar Messages

Error while creating user in OIM using Create User API

Hi All,
My Setup:
OIM running on Jboss Server where as my custom application to create user using CreateUser API in Tomcat Server.
Below is the code that im trying to run.
try
          System.out.println("Started ---");
               ConfigurationClient.ComplexSetting config = ConfigurationClient.getComplexSettingByPath("Discovery.CoreServer");
               System.out.println("Login ---");
               Hashtable env = config.getAllSettings();
               tcUtilityFactory ioUtilityFactory = new tcUtilityFactory(env,"xelsysadm","abcd1234");
               System.out.println("Authenticated");
               if (ioUtilityFactory!=null)
                    System.out.println("Login OK ---");
               System.out.println("Getting utility interfaces...");
               tcUserOperationsIntf moUserUtility = (tcUserOperationsIntf)ioUtilityFactory.getUtility("Thor.API.Operations.tcUserOperationsIntf");
               System.out.println("Starting processing...");
               Map attrs = new Hashtable();
               attrs.put("Users.User ID",request.getParameter("userid"));
               attrs.put("Users.Last Name",request.getParameter("lname"));
               attrs.put("Users.First Name",request.getParameter("fname"));
               attrs.put("Organizations.Key","1");
               attrs.put("Users.Role","Full-Time");
               attrs.put("Users.Xellerate Type","End-User");
               attrs.put("Users.Password",request.getParameter("password"));
               long key = moUserUtility.createUser(attrs);
               System.out.println("Processing DONE...");
               ioUtilityFactory.close();
     catch(Exception e )
     System.out.println("---" + e.getMessage());
     e.printStackTrace();
When i am trying to create user it's throwing the below error message.
HTTP Status 500 -
type Exception report
message
description The server encountered an internal error () that prevented it from fulfilling this request.
exception
javax.servlet.ServletException: Servlet execution threw an exception
root cause
java.lang.NoClassDefFoundError: Could not initialize class com.thortech.xl.util.config.ConfigurationClient
     com.emulex.productsellers.CreateUser.doPost(CreateUser.java:33)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:709)
     javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
note The full stack trace of the root cause is available in the Apache Tomcat/5.0.28 logs.
Apache Tomcat/5.0.28
And one more thing is if i place this code in jboss and it was working there with out any issues.
Please let me know if i am missing anything.
It's bit urgent.
Thanks in Advance.
Siva Pokuri.

URGENT** How to change OIM user password from outside OIM

How to create a user using spml call

Hello,
I am trying to create an user in idm using spml call. I have also imported spml.xml into idm. I m using LighthouseClient class to set the user attributes. After authenticating to idm i m sending the request to rpcrouter2 on localhost via client.request(req); But i m getting error
com.waveset.util.InternalError: Unable to locate view handler for 'user'. Why cant i create a user in IDM from a command line program. Do i need to call this program from a workflow only ? Is it necessary?
thanks in advance
ravi

hi All,
I am working with Idm7.1 and using SPML to write command-line programe to work with Idm7.1
getting a guideline from all your post I started with few sample code and got stucked ... Can any of you answer me ....
Why Can't i do the following in IDM from a command line program using SPML.
Add a User
Delete a User
Modify a User
Search for a User
I am using following code to create user:-
------ CODE--------
LighthouseClient client = new LighthouseClient();
client.setUrl("http://localhost:8080//idm/servlet/rpcrouter2");
client.setUser("configurator");
client.setPassword("configurator");
AddRequest req = new AddRequest();
req.setOperationalAttribute("trace", "true");
req.setObjectClass("person");
req.setIdentifier("user1");
req.setAttribute("password", "abcd");
req.setAttribute("gn", "showmen");
req.setAttribute("sn", "majumdar");
req.setAttribute("email", "[email protected]");
SpmlResponse res = client.request(req);
System.out.println("Response from Server->"+res.getResult());
System.out.println("Error from server->"+res.getError());
The output Reflect's as:-
------------OUT-PUT--------
init:
deps-jar:
compile-single:
run-single:
Response from Server->urn:oasis:names:tc:SPML:1:0#failure
Error from server->null
BUILD SUCCESSFUL (total time: 5 seconds)
---------------------XXXXX------------------------
I am currently using Idm7.1 and when i try to Import spml.xml file it throws some Weird Exception
where as spml2.xml can import without any Exception.
After all these when i loging to Idm7.1 using login.jsp as -u "configurator" -p "configurator"
there is no new user created .....
likewise all the sample code provided is throwing exception's ....
Can any of you please send me some guideline to figureout these
Thank's
Showmen Majumdar
e-mail: [email protected]
Wipro Technology
Bangalore.

Adding a user to ldap using dbms_ldap

We're adding users into ldap using a trigger. Any inserts, updates, or deletes from the emp table emp_ins (the trigger) will update the ldap server. One of the use cases that we need is to synch the emp.grp field with the default group in ldap. For example, if in the emp table we insert/update user test123 to have group test_grp, I want the default user to be a member of this group and to have this group as his default group.
Thanks,
Marcelo

Hi Marcello!
Presuming that the group already exists you add the user as a uniquemember to the group.
cu
Andreas

Using SPML to create a custom end user interface?

We are trying to create a custom end user interface which uses SPML to communicate with our IDM server. The issue we have is whether there is a way to login to IDM from this end user interface as the end user, or at least run the end user functionality such as password changes and authentication question setup as the end user without giving all end users SPML capabilities. Right now we have created a special SPML user account and we have given that user broad capabilities. We are able to change passwords and set questions but the auditing just shows the SPML user as the subject for all these actions.
Thanks,

It looks like you are absolutely right.
I also cannot find that zlman option.
So it looks like you are the first that needs it.
We use zlman to create bundles and add packages when we build them in our rpm build environment, but at that time that are always new packages that need top be uploaded. So the bundle-add-package is what we use, but that doesn't help with packages in the repository.
So I would write a enhancement request for it ...
http://www.novell.com/rms
As a workaround, not a nice one of course, you can search for the package in the repository and upload it once again. It should recognize that and create just the package links to the bundle. Not nice, but it seems to be the only option for now.
Rainer

How to delete group using SPML

Hi,
While deleting the group using SPML, we should remove "Access Policies", Users, Membership Rules associated with the group. Can anyone tell me how to do this(de-associating access policies, membership rules and users with group) using SPML??
Thanks in Advance

same way you delete a non-group message.

Create,update, delete of users in OIM through user reconciliation

Hi,
I want to perform create, update and delete of users in OIM using reconciliation of users through Oracle database.
I mean, I want to user Oracle database as trusted source of user information.
Can I perform these CRUD operations by creating GTC (generic technology connector) or is there any other means of doing it?
I need detail information/document on how I can perform user reconciliation?
Answer ASAP
Thanks & Regards

User Management you have to use
http://www.oracle.com/technology/obe/fusion_middleware/im1014/oim/obe14_using_GTC_for_provisioning/integrating_oracle_identity_manager_and_oracle_database.htm
For your reference

What is the difference between using the command "dsmgmt" and the "Managed By" tab when adding users to the local administrators Account on a Read-Only Domain Controller?

When I use the
"dsmgmt" command to add a user to the local administrators account of a RODC I can actually see the user when I use the "Show Role Administrators" parameter. However, I can't see the members of the
group added to the "Managed By" tab of the RODC object in AD. Even though, the users added using
"dsmgmt" and by the "Managed By" tab can all log in locally and have admin rights to the RODC. Are there any differences between these two ways of adding users to the local administrators account?

Hi,
For groups, managedBy is an administrative convenience to designate “group admins”. Whatever principal listed in
managedBy gets permission to update a group’s membership (the actual security is updated on the group’s AD object to allow this).
In Win2008 and later managedBy also became the way you delegated local administration on an RODC, allowing branch admins to install patches, manage shares, etc. (http://technet.microsoft.com/en-us/library/cc755310(WS.10).aspx).
On the RODC, this is updating the RepairAdmin registry value within RODCRoles.
So the difference between them should be only the way they do the same thing.
For more details, please refer to the below article:
http://blogs.technet.com/b/askds/archive/2011/06/24/friday-mail-sack-wahoo-edition.aspx
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Problem in provisioning user from oim to active directory using ssl

hi,
problem in provisioning user from oim to active directory using ssl i am getting following error while provisioning user to AD.
15:18:12,984 ERROR [ADCS] Communication Errorsimple bind failed: 172.16.30.35:636
15:18:12,984 ERROR [ADCS] The error occured in tcADUtilLDAPController::connectTo
AvailableAD():simple bind failed: 172.16.30.35:636
15:18:13,015 ERROR [SERVER] Class/Method: tcProperties/tcProperties encounter so
me problems: Must set a query before executing
com.thortech.xl.dataaccess.tcDataSetException: Must set a query before executing
at com.thortech.xl.dataaccess.tcDataSet.checkExecute(Unknown Source)
at com.thortech.xl.dataaccess.tcDataSet.executeQuery(Unknown Source)
at com.thortech.xl.dataobj.tcDataSet.executeQuery(Unknown Source)
at com.thortech.xl.dataaccess.tcDataSet.executeQuery(Unknown Source)
at com.thortech.xl.dataobj.tcDataSet.executeQuery(Unknown Source)
at com.thortech.xl.dataobj.util.tcProperties.<init>(Unknown Source)
at com.thortech.xl.dataobj.util.tcProperties.initialize(Unknown Source)
at Thor.API.tcUtilityFactory.getLocalUtility(Unknown Source)
at Thor.API.tcUtilityFactory.getUtility(Unknown Source)
at com.thortech.xl.integration.ActiveDirectory.tcADUtilLDAPController.co
nnectToAvailableNextAD(Unknown Source)
at com.thortech.xl.integration.ActiveDirectory.tcADUtilLDAPController.se
archResultPageEnum(Unknown Source)
at com.thortech.xl.schedule.tasks.ADLookupRecon.performReconciliation(Un
known Source)
at com.thortech.xl.schedule.tasks.ADLookupReconTask.execute(Unknown Sour
ce)
at com.thortech.xl.scheduler.tasks.SchedulerBaseTask.run(Unknown Source)
at com.thortech.xl.scheduler.core.quartz.QuartzWrapper$TaskExecutionActi
on.run(Unknown Source)
at Thor.API.Security.LoginHandler.jbossLoginSession.runAs(Unknown Source
at com.thortech.xl.scheduler.core.quartz.QuartzWrapper.execute(Unknown S
ource)
at org.quartz.core.JobRunShell.run(JobRunShell.java:203)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.j
ava:520)
can any one help.
Thanks and Regards,
praveen,

Are you able to connect to AD over SSL through some LDAP Browser ?
Check the validity of Certificate ?
Does your certificate appear in the list ?

How to classify new and old user account from idm system using SPML

hi all,
i can use SPML code to create new user on IDM system but, i can't classifying new or old user account
any advise ? very thank you in advanced.
athikom.

Hi Vikram,
Iam not sure though, did you chekced EXIT_SAPMM06E_022 if it helps you in anyway.
Regards,
Swarna Munukoti

Adding users using XML

The examples for adding users to iFS work fine, but do I have to create an XML file for every user I want to add? I tried to create an XML file with more than one <SimpleUser> definitions, but iFS reports an "unexpected end of file" error at the position where the second User definition starts.

<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by jsacks:
Ralf,
Using the standard <object_list> tag to parse a list of simpleuser tags should work:
<HR></BLOCKQUOTE>
Included inside <objectlist> tags, it works fine. Thank you very much.
null

Adding a User to AD using JNDI

Hello,
I am trying to add a user to AD using the sample code below. However, I keep getting the following error.:
javax.naming.directory.InvalidAttributeValueException: [LDAP: error code 21 - 00000057: LdapErr: DSID-0C090B38, comment: Error in attribute conversion operation, data 0, vece
// sample codee:
               BasicAttributes attrs = new BasicAttributes();
               BasicAttribute ocs = new BasicAttribute("objectclass");
               ocs.add("top");
               ocs.add("person");
               ocs.add("organizationalPerson");
               ocs.add("user");
               attrs.put(ocs);
               BasicAttribute gn = new BasicAttribute("givenName", "test1");
               attrs.put(gn);
               BasicAttribute sn = new BasicAttribute("sn", "");
               attrs.put(sn);
               BasicAttribute cn = new BasicAttribute("cn", "test1");
               attrs.put(cn);
               BasicAttribute uac = new BasicAttribute("userAccountControl", "66048");
               attrs.put(uac);
               BasicAttribute sam = new BasicAttribute("sAMAccountName", "test1");
               attrs.put(sam);
               BasicAttribute disName = new BasicAttribute("displayName", "test1");
               attrs.put(disName);
               BasicAttribute userPrincipalName = new BasicAttribute("userPrincipalName", "[email protected]");
               attrs.put(userPrincipalName);
               BasicAttribute instanceType = new BasicAttribute("instanceType", "4");
               attrs.put(instanceType);
          ctxDC.createSubcontext("CN=test1,CN=Users,DC=Diamelle,DC=local", attrs);
               ctxDC.close();
Any ideas as to where the problem may lie?
thanks for your help.

Thanks. Adding a value for the sn attribute removes that error.
Now I am getting the following:
javax.naming.OperationNotSupportedException: [LDAP: error code 53 - 0000052D: SvcErr: DSID-031A0FC0, problem 5003 (WILL_NOT_PERFORM), data 0
Could it be that my ctxDC.createSubcontext("CN=test1,CN=Users,DC=Diamelle,DC=local", attrs); values are wrong? if so, how do I find the correct values? I am a little new working with ldap.
Thanks again for your help.

Provision OIM user to ADAM using own ProcessDefinationForm,lookups etc

Hi Friends,
I am getting problem while provision OIM user to ADAM using the AD Connector 9.1.0.1. For provision I am using my own process definition form, adapter etc (see below).
The details are
•     Created a new IT resource i.e. “ADAM IT” of type AD Server.
•     Created a new Resource i.e. “ADAM User”
•     Created a Form i.e. “UD_ADAMUSER” similar to “UD_ADUSER”
•     Created a new “AD. PARAMETERADAM” similar to “AD.PARAMETER”
•     Created a lookup definition AtMap.MYADAM (similar to AtMap.ADAM) containing mapping between above form field and ADAM server attribute. This lookup is used in created IT resource as AtMap ADUser value.
•     Created an adapter i.e. adpADAMCREATEUSER. This adapter has exactly same step as it is in adapter “adpADCSCREATEUSER”. I have used “AD.PARAMETERADAM” instead of “AD.PARAMETER”. Below are the three tasks I have created for this adapter It is similar to task “adpADCSCREATEUSER”.
o     ADAM Get Lookup Values
o     ADAM Get Attribute Map
o     ADAM Create User
•     Created a process definition of type provisioning i.e. “ADAM User” just like “AD User”
o     In this process definition I have used created “ADAM User” as object
o     “UD_ADAMUSER” as “Table Name” and
o     Create a task called “Create User” and used the created adapter and mapped the adapter variables.
When I perform the provisioning operation with the above settings, then provision is not succeeded and when I checked log I found below details….
2009-01-29 17:38:48,640 INFO [STDOUT] Running ADAM Get Lookup Values
2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilADTasks::getLookupValues() Enter
2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilADTasks::getLookupHashMap() Enter
2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilADTasks::getLookupHashMap() Exit
2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilAttributeNameMap::getIntegrationAttributes() Enter
2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilAttributeNameMap::getIntegrationAttributes() Exit
2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilADTasks::getLookupValues() Exit
2009-01-29 17:38:48,640 INFO [STDOUT] Running ADAM Get Attribute Map
2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilADTasks::getProcessHasHMapVoid() Enter
2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilADTasks::getProcessHasHMap() Enter
2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilADTasks::getProcessHasHMap() Exit
2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilAttributeNameMap::getUDFIntegrationAttributes() Enter
2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcUtilAttributeNameMap::getUDFIntegrationAttributes() Exit
2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcUtilADTasks::getProcessHasHMapVoid() Exit
2009-01-29 17:38:48,687 INFO [STDOUT] Running ADAM Create User
2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcUtilADTasks::createADAMUser() Enter
2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcUtilADTasks::checkHierarchy() Enter
2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcUtilADTasks::checkHierarchy() Exit
2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::getPath() Enter
2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::getPath() Exit
2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::connectToAvailableAD() Enter
2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::hashTableEnvForDirContext() Enter
2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::removePlus() Enter
2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::removePlus() Exit
2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::hashTableEnvForDirContext() Exit
2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::hashTableEnvForLDAPContext() Enter
2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::hashTableEnvForLDAPContext() Exit
2009-01-29 17:38:48,687 INFO [OIMCP.ADCS] SSL option is not selected in ITResource
2009-01-29 17:38:48,750 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::connectToAvailableAD() Exit
2009-01-29 17:38:48,750 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::getAttributesObject() Enter
2009-01-29 17:38:48,750 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::getAttributesObject() Exit
2009-01-29 17:38:48,750 ERROR [OIMCP.ADCS] AD User Creation Failed:null
2009-01-29 17:38:48,750 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::disconnect() Enter
2009-01-29 17:38:48,750 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::disconnect() Exit
2009-01-29 17:38:48,750 DEBUG [OIMCP.ADCS] tcUtilADTasks::createADAMUser() Exit
Any thought on why the provisioning operation failed, am I missing something? One more thing where I can find the java doc for the AD Connector 9.1.0.1?
Any help would be greatly appreciated!
Regards,
Hardew

The AD connector is built to provision one object and doesn't really do complex OU structures very well so if you need to create multiple objects your best bet is probably a custom connector using JNDI.
Good luck
/M

Im a vine user and was wanting to know how to vine with no hands so i added a gesture to use on vine and now the gesture froze on the screen and i cant control my phone anymore. Its a blue circle and i want to know how to get rid of it.

Im a vine user and was wanting to know how to vine with no hands so i added a gesture to use on vine and now the gesture froze on the screen and i cant control my phone anymore. Its a blue circle and i want to know how to get rid of it.

never mind it finally went away

Error -5002 when adding linked user defined field using DI API

Hello,
When I try to add a linked user defined field using DI API I get the error number -5002 with description:
"The field 'Related Table' should consist of 8 alphanumeric characters with no valid or default values"
I Get the error when I use the Add method.
What is the solution for this problem? I use SBO 2005 A SP1 Patch 18
The code I use is (.NET C# 2.0):
SAPbobsCOM.IUserFieldsMD uf = (SAPbobsCOM.IUserFieldsMD)company.GetBusinessObject(SAPbobsCOM.BoObjectTypes.oUserFields);
uf.Name = "S_BUCO";
uf.TableName = "OPOR";
uf.Type = SAPbobsCOM.BoFieldTypes.db_Memo;
uf.SubType = SAPbobsCOM.BoFldSubTypes.st_Link;
uf.LinkedTable = "S_BU";
uf.Description = "Description";
uf.Add()
Regards,
Jeffrey

Hi Jeffrey,
Your code above does not match the settings you are using in the UI. In particular, the type and subtype you are setting in code are not correct.
To create the UDF via code, set the field types as follows:
SAPbobsCOM.IUserFieldsMD uf = (SAPbobsCOM.IUserFieldsMD)company.GetBusinessObject(SAPbobsCOM.BoObjectTypes.oUserFields);
uf.Name = "S_BUCO";
uf.TableName = "OPOR";
uf.Type = SAPbobsCOM.BoFieldTypes.db_Alpha;
uf.EditSize = 8;
uf.LinkedTable = "S_BU";
uf.Description = "Description";
uf.Add()
There's no need to set the SubType property as you require a regular alphanumeric field.
Kind Regards,
Owen

Adding Users in OIM using SPML

Similar Messages

Maybe you are looking for