Automation of Sun IDM XML Code backup

Hi,
Is it possible to automate Sun IDM code backup to run everyday...
Thanx,
Deva

I guess if you have a process, shell script, .bat file or whatever than can make the IDM code backup it could be scheduled to run at whatever frequency you wish.
Are you wanting to backup the repository or the IdM installation?
I understood that the IdM code is static.. just a deployment of a .war file. Once deployed it is backed-up the next time the disk is saved to tape.
However, the IdM objects, forms, rules etc are stored in the repository database. These are quite volatile. How this is backed-up depends on the database itself. How to automate THAT is then up to you.

Similar Messages

How to delete the recon Taskresults in Sun IdM 7.1 thru automation

How to delete the recon Taskresults in Sun IdM 7.1 thru automation either thru workflows or using java programs...
We need to delete only recon Taskresults.

Hi Dinesh,
Try using waveset.adminRoles
Thanks

Exploratory Programming of the Sun IDM API

Exploratory Programming of the Sun IDM API using Rhino
Sun IDM comes with a JavaScript interpreter (Rhino) that can be invoked from the command-line. This gives developers an easy way to explore the large number of classes that comprised the product.
Let's say for example that you need the approvers of a role object in order to display them on a form. (The role view provides this information, but let's ignore this for the purpose of this example.) The role javadoc mentions two methods to get the approvers, getApproverRefs() and getApprovers(). Unfortunately they are not described clearly, and the difference between the two is not clear either.
In order to understand what these methods do and what they return, you can use the interpreter to invoke each one directly.
First start the interpreter with the 'lh.bat js' command:
lh.bat jsYou will be greeted with the javascript prompt "js>"
Then the first thing to do is to login to the application server. Copy-paste the following code into the shell interpreter.
// Java packages are prepended with the word 'Packages'
// and are imported using the 'importPackage' function
importPackage(Packages.com.waveset.util);
importPackage(Packages.com.waveset.object);
importPackage(Packages.com.waveset.security.authn);
importPackage(Packages.com.waveset.session);
importPackage(Packages.com.waveset.ui);
importPackage(Packages.java.util);
// Use arguments[0] and arguments[1] if you want to pass credentials from the command line
// Here we just use the built-in account "configurator"
var epass = new EncryptedData("configurator");
var session = SessionFactory.getSession("configurator", epass);
print("Waveset session established");Alternatively save the above code to a text file called "idm-init.js" and load the file from the interpreter.
js> load("idm-init.js")
Waveset session establishedOnce a session has been established, objects can be loaded from the repository. Enter this line at the prompt to get the role object named "testrole3"
js> var roleObject = session.getObject("Role", "testrole3");Enter the variable name at the prompt to cause the interpreter to invoke the object's 'toString' method.
js> roleObject
Role:testrole3Use a 'for' loop to print out all of the object's method and fields.
js> for (i in roleObject) { print(i) }Enter a method's name to invoke it. Let's call getApproverRefs().
js> var approvers1 = roleObject.getApproverRefs();
js> approvers1
[User:role1approver(id=#ID#1CC1759638D9AF96:182C132:10F3E8040B5:-7FBE), User:role2approver(id=#ID#1CC1759638D9AF96:182C132:10F3E8040B5:-7FB8)]
js> approvers1.get(0).getClass();
class com.waveset.object.ObjectRefNow let's check out getApprovers().
js> var approvers2 = roleObject.getApprovers();
js> approvers2
[Lcom.waveset.object.WSUser;@d3c69c
js> approvers2[0].getClass()
class com.waveset.object.WSUserSo getApproverRefs() returns a list of ObjectRef objects, while getApprover() returns an array of WSUser objects.
In summary the Sun IDM JavaScript interpreter can be used to explore the product's vast API. This article used the role class and its getApprovers() and getApproverRefs() methods as an example for exploratory programming. Other applications include automated testing and administrative scripts.
[email protected]

Yes you can customise IDM it is all available in courses and the manuals also provide some info.
As long as you can write the code you need in java or javascript you can call it from IDM: that could be an interface to you naming app.
Otherwise use the SPML interface if you want to use something else then the GUI. This is also described in the manuals.
WilfredS

Sun-acc.xml - can't auth to ejb

hi
i cannot auth successfully to the server ejb, which access is controlled by server container thru deployment descriptors. if i understand correctly, i should be able to tell the client side container to send to the server my credentials listed in sun-acc.xml. but the problem is that the realm is never picked up (always reported as "default" instead of "file" in the logs). here is the sun-acc.xml
<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE client-container SYSTEM
 "file:///C:/Sun/AppServer7/lib/dtds/sun-application-client-container_1_0.dtd">
<client-container send-password="true" >
 <target-server name="localhost" address="localhost" port="3700" />
 <client-credential realm="file" user-name="syncFes" password="abc123" />
 <log-service file="D:/TempFTP/client.log" level="FINEST"/>
</client-container> and here is the logs
<code>
細緻: No SAS context element found in service context list
2004/11/16 下午 03:04:39 com.sun.enterprise.iiop.security.SecClientRequestInterceptor setreplyStatus
細緻: Status to be set : 0
2004/11/16 下午 03:04:39 com.sun.enterprise.iiop.security.SecurityServiceImpl receivedReply
細緻: Passed status
2004/11/16 下午 03:04:39 com.sun.enterprise.iiop.security.SecClientRequestInterceptor setreplyStatus
細緻: Invoked receivedReply()
2004/11/16 下午 03:04:39 com.sun.enterprise.appclient.AppContainer preInvoke
細緻: Callback Handler:null
2004/11/16 下午 03:04:39 com.sun.enterprise.appclient.AppContainer preInvoke
資訊: ACC007: Initiating Login ...
2004/11/16 下午 03:04:39 com.sun.enterprise.security.auth.LoginContextDriver$10 run
細緻: LCD post login subject :主題：
 Principal: user1
 私人授權 Realm=default Username=user1 Password=******** TargetName = [B@7e8c4d
2004/11/16 下午 03:04:39 com.sun.enterprise.security.auth.LoginContextDriver postClientAuth
細緻: In LCD user-pass login:syncFes realm :default
2004/11/16 下午 03:04:39 com.sun.enterprise.naming.NamingManagerImpl bindObjects
細緻: Binding name:`java:comp/env/SMCPhoneBookEJB`
2004/11/16 下午 03:04:39 com.iplanet.ias.appclient.Main <init>
資訊: ACC009: Load Application Class: [hk.com.smartone.addressbook.test.TestApiClient]
2004/11/16 下午 03:04:40 com.sun.corba.ee.internal.iiop.ConnectionTable getConnection
最細緻: Connection Table GetConnection Called
2004/11/16 下午 03:04:40 com.sun.corba.ee.internal.iiop.ConnectionTable getConnection
</code>
did i miss anything in the configuration?

This looks like the usual TNSListener not running problem. I use a datasource for that and don't specify the connection details directly... Could be tested independently.
--olaf

Sun IdM newbie - netbeans question

Our Sun IdM configurator consultants have left and I'm trying to open our Development IdM project in Netbeans (just went to admin training and want to poke around). I have all the software ready on the workstation and the Sun IdM Netbeans plugin installed.
I cannot create a successfull project on my Windows XP workstation and I think I'm missing a few steps.
Here's what I did so far:
1. Checked out the code in Netbeans.
2. Ran the command "ant -verbose dist-war" and got a BUILD SUCCESSFULL message.
3. I open netbeans and browse to the IdM directory but instead of opening the project, it traverses into the next folder.
What are my next steps in order to open this in Netbeans as a project? I can copy the IdM/nbproject directory from the workstation our consultants developed the software on into the IdM directory on my workstation and Netbeans will allow me to open the project.
But to do this the correct way, what do I have to do after the build to get the nbproject and other project related directories/files into my IdM directory so I can open the folder as a Netbeans project?
Any help would be appreciated.
Thanks,
Ed

OK, OK if the policy is set to generate my troubles go away.... I thought that was gone with metaview?
Anyway, what if I'd like to choose a special Policy for creation that differs from normal operations?
CU,
Patrick.

Sun idm upgrade error

Hi All,
i am upgrading the sun idm 7.1 to 8.1. in the installation i am getting this error. any body have any idea....... thanks in adavance..
operation : addMissing
interfaces: [GenericObject:USER_PROFILE_8_1X, GenericObject:USER_PROFILE_8_4X]
Interface USER_PROFILE_8_1X already present. Skipping.
Interface USER_PROFILE_8_4X already present. Skipping.
No changes found for Configuration Object 'PeopleSoft Component Interfaces'
Found no instances of ComplianceViolation matching attribute conditions
Including file 'sample/UserUIConfigUpdater.xml'.
Problem during execution: com.waveset.util.InvalidArgument: RP_LIST_TOO_LONG

The number of inlined attributes for some repository type is more than 5. Probably it is all about attributes defined in the FindSearchAttrs tag in UserUIConfig.xml

Sun Idm with LDAP failover

Hi All,
Not sure if anyone encountered this issue.
I m using Sun Idm version 7.1 and sun one directory server 5.2 as corp ldap. I want to configure failover for ldap. I have setup master-master replication between ldaps. Now in idm on resource configuration page for ldap, I specified url of failover server. I brought down current ldap server and checked the connection. It shows successful because it picked failover one.
Now, after this stage I am not able to create/modify accounts on ldap (now running on failover) and its giving me the error "javax.naming.NameNotFoundException. [LDAP error code 32- No such object]"
Any suggestions, please provide.

Hi
Came across this issue myself (just now) and fixed it so thought I'd comment. I appreciate this post is quite old now but this might help anyone else who has this issue.
We are using IDM 8.1 and have 2 DSEE 6.3 instances - one master and one replica. In the help description for Failover Server on the LDAP resource configuration page it says:
"List all servers in the form of "ldap://ldap.example.com:389/o=LdapFailover" which follows the standard LDAP v3 URLs described in RFC 2255. Only the host, port, and dn parts of the URL are relevant in this setting."
We originally listed our second server as above and included the "/o=LdapFailover" bit on the end and we got the same error. We removed the "/o=LdapFailover" and just left "ldap://<host>:<port>" there and it all works.
Hope this helps someone.

Sun idm adapter for Enterprise Service Bus (Using MQ)

Hi
Can you please let me know if any sun idm adapter support Enterprise Service Bus (Using MQ) ?
Thanks

As answer on question 1:
No I never found any documentation from SAP that described a ESB solution. So al the knowledge must come from other vendors in your case from Sonic.
But there is hope you can use XI in a ESB way. You must only (add) configure the ESB parts. This is done by adding a service repository for example the UDDI server in combination with some BPML engine.
By adding it al together you can execute your business processes over multiple system platforms using SOAP in a synchronic way.
This is the basic concept of a ESB.
The answer to question 2.
I dont know if XI has build in support, but a know that there are free tools that can handle Canonical XML. So you can make a service your self to handle the Canonical XML documents.

Anyone has experience with sun idm data exporter /warehouse funtionality ?

Anyone has experience with sun idm data exporter /warehouse functionality. There is not much documentation about how to debug it. I created everything like in the document. Everything seems running fine. I get the following the server tasks->Run Tasks
Data Warehouse Exporter Data Warehouse Exporter Configurator executing
Prior to that i created database and 50 tables as it said in the doc.
I created accounts and modify email address. Nothing is getting to my warehouse database and i don;t know where to look for the errors. Any information is appreciated.

Hi there,
I have been looking at the source code and I think I have found the problem.
IDM determines whether to update or create a resource account
by attempting to fetch the user from the resource.
If the user exists then update, otherwise create.
In the code, if the user does not exist, the code throws the
exception: EntityDoesNotExist(1301)
The code then catches this exception
and then returns a null back to IDM,
indicating that the user does not exist.
Well, that is what the code says but this does
not match its actual behaviour....
I then decompiled the actual class (jar) files
and the code there does NOT catch the exception,
so it bubbles up to IDM, which regards it as an error.
Soo, the jar file that is on the website has a bug in it.
The source code in SVN is correct, but it appears
that the jar file was not rebuilt.
I am attempting to rebuild a new version of the jar file...
John I

Validation not working in sun idm(oracle waveset) form

I have put this validation code in my form.
<Field>
<Validation>
<cond>
<gt>6
5
</gt>
<s>zip codes must be five digits long</s>
<s>zip codes must be five digits long</s>
</cond>
</Validation>
</Field>
But on submit of form this validation code is not getting called.
It is given in sun idm docs that validation message appears in red at top of the form.
But it is not getting displayed in my case.
How to get message to display on form.
OR
how to get any message displayed on form present inside validation tag.

As requested
 <Field name=':variables.xxxWorkstationID'>
 <Display class='Text'>
 <Property name='title' value='Workstation Name'/>
 <Property name='size' value='25'/>
 <Property name='maxLength' value='25'/>
 <Property name='required' value='true'/>
 <Property name='help' value='Please provide the workstation name'/>
 </Display>
 <Derivation>
 enter your form code here
 </Derivation>
 <Validation>
 <cond>
 <not>
 <eq>
 <invoke name='callResourceMethod' class='com.waveset.ui.FormUtil'>
 <ref>:display.session</ref>
 <ref>:variables.xxxResName</ref>
 <s>validateWorkstation</s>
 <map>
 <s>Workstation</s>
 <ref>:variables.xxxWorkstationID</ref>
 </map>
 </invoke>
 0
 </eq>
 </not>
 <s>Error. The Workstation Name is not valid. Please re-enter a valid name.</s>
 </cond>
 </Validation>
</Field>

Linking a new resouce with user account in Sun IDM via activesync

Hi,
I am having a new resource which contains the user records. Now I want to link that resource to the existing and new users in Sun IDM.
I do not want to update and create user in the new resource. I just need that a link is created in Sun IDM when ever activesync runs on users account.
Please guide me how to achieve the same.
Regards,
Nitin

I'm afraid I can't share the exact code but it should be straight forward through the following:
1. define a field (call it ldapDN)
2. create a rule to user getResourceObjects to search for the user DN and return the DN to ldapDN.
3. when ldapDN is not null, expand waveset.resources and add your LDAP resource, like:
<Field name='waveset.resources'>
<Expansion>
<append>
<s>LDAP</s>
4. Then set the accountId for that resource as
<Field ........ accounts[LDAP].accountId>
<Default><s>ldapDN</s></Default>
and you should be set... hope it helps.

Patch 5 of sun iDM

Hello,
i have this error when i do the init.xml command. I try various method to patch sun idm 8.1 with this patch but it's the same error
Idea ?
[java] Updated AdminGroup:UI_ADMINGROUP_AUDITOR_ACCESS_SCAN_ADMINISTRATOR
[java] Updated AdminGroup:UI_ADMINGROUP_AUDITOR_PERIODIC_ACCESS_REVIEW_ADMINISTRATOR
[java] Updated AdminGroup:UI_ADMINGROUP_AUDITOR_ADMINISTRATOR
[java] Updated AdminGroup:UI_ADMINGROUP_DATA_WAREHOUSE_ADMIN
[java] Updated AdminGroup:UI_ADMINGROUP_DATA_WAREHOUSE_QUERY
[java] Updated AdminGroup:UI_ADMINGROUP_IDM_SCHEMA_CONFIGURATION
[java] Updated AdminGroup:UI_ADMINGROUP_PRODUCT_REGISTRATION
[java] Updated AdminGroup:UI_ADMINGROUP_DEBUG
[java] Including file 'sample/adminroles.xml'.
[java] Updated AdminRole:UI_ADMINROLE_USER
[java] Including file 'sample/admins.xml'.
[java] java.lang.NoSuchMethodError: com.waveset.object.WSUserUtil.getAllControlledObjectGroups(Lcom/waveset/object/Principal;Lcom/waveset/object/LighthouseContext;Ljava/util/Map;)Ljava/util/List;
[java] java.lang.NoSuchMethodError: com.waveset.object.WSUserUtil.getAllControlledObjectGroups(Lcom/waveset/object/Principal;Lcom/waveset/object/LighthouseContext;Ljava/util/Map;)Ljava/util/List;
[java]      at com.waveset.server.AuthCache.invalidateUserIfAuthzChanged(AuthCache.java:613)
[java]      at com.waveset.server.AuthCache.instanceChanged(AuthCache.java:564)
[java]      at com.waveset.server.ChangeNotifier$NotificationEntry.handleChange(ChangeNotifier.java:571)
[java]      at com.waveset.server.ChangeNotifier$TypeInfo.handleChange(ChangeNotifier.java:715)
[java]      at com.waveset.server.ChangeNotifier.updatePersistentObjectInfo(ChangeNotifier.java:851)
[java]      at com.waveset.server.ChangeNotifier.objectChangeDetected(ChangeNotifier.java:981)
[java]      at com.waveset.repository.ObjectChangeManager$ListenerRegistry.dispatchToListener(ObjectChangeManager.java:216)
[java]      at com.waveset.repository.ObjectChangeManager$ListenerRegistry.dispatchChange(ObjectChangeManager.java:264)
[java]      at com.waveset.repository.ObjectChangeManager.dispatchChange(ObjectChangeManager.java:761)
[java]      at com.waveset.repository.ObjectChangeManager.dispatchChange(ObjectChangeManager.java:741)
[java]      at com.waveset.repository.ServerRepository.set(ServerRepository.java:3334)
[java]      at com.waveset.session.Importer.importObject(Importer.java:2706)
[java]      at com.waveset.session.Importer.importElement(Importer.java:457)
[java]      at com.waveset.session.Importer.access$000(Importer.java:116)

Sure this is achievable : just use apache with mod_auth_ldap as the SVN frontend, and provision the LDAP directory with the standard IDM ldap adapter.
Although if you want per repository access control (authz file) you will have to either use the scripted gateway adapter or implement a dedicated adapter.

SUN IDM

Is it possible to install the Sun IDM apache tomcat web server in a different zone than the JBOSS web app container. If so can anyone provide documentation on how to do this

Hi Arjun,
Thanks for responding to my post.
The search is working as expected in all 3 environments DEV,VAL and PROD.
The search and alignment performed by the Rule where as DB connection and Saving to XLS performed by the custom JSP file.
Since search is working fine I don't think any permissions issue with AD or LDAP.
Couple of things I noticed from server.log from all environments
SEVERE|sun-appserver2.1.1|javax.enterprise.system.container.web|_
ThreadID=297;_ThreadName=httpSSLWorkerThread-9084-102;_RequestID=5efa3ecb-0ec9-4695-ab51-8049257b
9d57;|StandardWrapperValve[jsp]: PWC1406: Servlet.service() for servlet jsp threw exception
java.lang.IllegalStateException: PWC3991: getOutputStream() has already been called for this resp
onse
and
WARNING|sun-appserver2.1.1|javax.enterprise.system.stream.err|_ThreadID=78;_ThreadName=Provisioner;_RequestID=531d32b0-6d9a-4
3e-bd74-0bc9478ffdae;|org.xml.sax.SAXParseException: XML document structures must start and end within the same entity.
at org.apache.xerces.util.ErrorHandlerWrapper.createSAXParseException(Unknown Source)
This is logging when the custom jsp is executing.
getOutputStream() has already been called for this response.
I am not sure if this is the root cause, since it is logging in DEV and VAL also.
Other things I noticed are.
Yester day I conducted 10 tests and all are taking 6 min 18 sec or 6 min 19 sec or 6 min 22 sec.
Also I noticed that the number of user records exported to xls depends on the transfer rate.
For example,
if the file download transfer rate is 1.50 KB then the user records are between 1200 to 1800 where as the search user records are 16590.
if the file download transfer rate is 800 B then the user records are between 200 to 600 where as the search user records are 16590.
Not sure where to check this time value(attribute) 6 min 18 sec..
Please provide me some info where else I need to check.
Thanks,
Ravi.

How get and edit xml code of BI Publisher Report

Hi to all,
I need to do some costumization to one BI Publisher report. Investigating I found a solution to do my costumization. However this requieres edit the xml code. Can you please let me know how can I get and edit this code?
Thanks in advance
regards
Daniel

obiee / ebs .... ?
Investigating I found a solution to do my costumization. However this requieres edit the xml code.
no need edit seeded code (it's for SR)
your steps:
- get seeded code
- edit
- create custom report
Can you please let me know how can I get and edit this code?
for ebs you can look xml publisher responsibility, find by code

Error while Reading Idocs from ECC 6.0 to Sun IDM .

Hi Gurus,
We have a scenerio where we have to update the Sun IDM Server with all the changes in HR Data happening in ECC.
For that... we have
1. Created a Logical System for Sun IDM server, Port, RFC Connection (TCP/IP).
2. Assigned Partner Profiles, Distribution Model etc. for msg. type HRMD_A ;
3. We have created a Communications User used by the IDM server to connect to ECC.
Idocs are created daily and are in status 03 - Data passed to Port OK !
and on the In Sun Identity manager 8.0 we have created SAP resource adapter for ECC 6.0,
after giving resource parameters our test connection is successful.
We also changed edit synchronisation policy for the same but when we start synchronisation in IDM, it is unable to read any idocs although Idocs are generated in SAP .
Log file gives the message as "Incoming IDoc list request containing 0 documents"
We also have one more error ;
some times while doing a connection test : JCO.Server could not find server function 'åäåä¹'
while most of the times the connection is successful.
Please suggest .

Hi Gurus,
The error got resolved .
The changes in the settings i did :
SAP SIDE : Made the RFC Connection Unicode.
IDM SIDE : Checked on the "SAP Server Unicode" checkbox; while doing the HR Activ Synch Settings.
This Resolved the error.
regards
Vaibhav

Automation of Sun IDM XML Code backup

Similar Messages

Maybe you are looking for