Can i able to do DBUM trusted recon without mapping User Login

Hi All,
Is is it possible to do dbum trusted reocon without mapping User Login field? , As it going to create automatically using post process event handler.
I am able to recon when i map userlogin otherwise not. But my need is userlogin shud create automatically. How can i achieve this
Any suggestions????
Regards,
user7609

This approach will be working fine with first time recon(New user creation) and you don't need to do anything extra.
But, the problem will ocur in case of update (next time recon of same user). As the userlogin is mapped with the target source and you have changed it using post process event handler. So, the same record it will consider as updatable and it will again try to update the existing user login. Yes, you can, call your event handler on update as well. So that it will update again to previous. This will be worst approach. beacause, It will process the same record always .
Again I suggest you. Better Go for transformation. which will serve your purpose. In this case you do not need to map user login from trusted source. transformation class will generate user login on pre-insert.

Similar Messages

1. Can we able to create GR for consubale without PO

Hi ,
I have two issues.
1. Can we able to create GR for consubale without PO - invoice should be done with some reference. no direct posting.
2. Can we able to create PO with Account assinment cat as "P or some other" and without WBS element ? at the time of GR i want to give WBS element.
Regars,
Anil

>
anil kumar wrote:
> Hi ,
>
> I have two issues.
>
> 1. Can we able to create GR for consubale without PO - invoice should be done with some reference. no direct posting.
>
> 2. Can we able to create PO with Account assinment cat as "P or some other" and without WBS element ? at the time of GR i want to give WBS element.
>
> Regars,
> Anil
1. If settings for automatic PO is on, yes its possible when you create GR, Po gets created automatically, or you do GR against other with movement type 501 which is without PO.
2. If you use P, then you need to enter WBS element. You can use U in combination with D = service, then you enter wbs at service entry time.
Edited by: Afshad Irani on Aug 13, 2010 11:26 AM

Can EBS show the last date and time of a user login

We have a requirement to display users their Last sucessfull login date and time. We would like to display after user have entered username/pwd i.e. Could someone guide how can we schive this ?
Thanks in Advance
Dinesh

Hi,
This is available through "Signon Audit Unsuccessful Logins" concurrent program.
How do you audit an Oracle Applications' user? [ID 395849.1]
Need A Way To Notify Users About Previous Failed Login Attempts [ID 357009.1]
Thanks,
Hussein

OIM 11g: Can't Map (De)Provisioning Dates in Custom Trusted Recon

I'm developing a custom trusted recon to reconcile users from a legacy IdM system.
The issue I'm running into is that if I map a recon attribute to (De)provisioned/(De)provisioning date in the Reconciliation Mapping, when I try to "Create Reconciliation Profile" it fails saying: "Xellerate User: Invalid Attributes [Deprovisioning Date, Provisioning Date, Deprovisioned Date, Provisioned Date]".
I'm not sure why it's rejecting these, but is there a workaround? Updating the reconciliation profile XML manually perhaps?

Have you added oimclient.jar in the CLASSPATH of Eclipse ?
http://download.oracle.com/docs/cd/E14571_01/apirefs.1111/e17334/toc.htm

Trusted Recon

Hi,
For trusted recon Where exactly i need to changes in OIM for the first time recon.

If you are using database/csv trusted recon then you can use GTC (generic technology connector) trusted recon. This is pretty simple as it does most of the configuration by itself. All you need to do is provide the connectiona and recon table parameters and map the attributes.

EBS HRMS Trusted Recon Post-Process Eventhandler

Hi Guys,
I have written a post-process eventhandler for eBs HRMS trusted recon to update user attributes.
It works fine if one record is reconciled from eBs. But when i create 2 or more records, the eventhandler executes for just one record off the two. I understand 11g recons are bulk operations.
Please help on how i can manage to update all records.
Cheers

Hi Sunny,
I have the specified the first name in the resource object --> object reconciliation. I exported RA_EBUSINESSPERSON9.xml and found that first name was missing in the mappings.
I added the mapping and imported the xml. But now when i run the recon the records are not inseted into the table. Infact i had run the weblogicDeleteMetadata.sh befoew importing the xml. But no record was deleted in MDS_PATHS. Now when i run the recon i get following exception.
[2011-06-30T03:17:45.985-07:00] [oim_server1] [ERROR] [IAM-5010000] [oracle.iam.reconciliation.impl] [tid: OIMQuartzScheduler_Worker-3] [userId: xelsysadm] [ecid: 0000J3KC5ivDc_05RzL6id1E2K6P00006C,0] [APP: oim#11.1.1.3.0] [dcid: 8fc5720b3d343e01:-4ea6126c:130d42a55d4:-7ffd-0000000000000f61] Generic Error/Information: {0}[[
oracle.iam.reconciliation.exception.ReconciliationException: Exception occurred while inserting data into table RA_EBUSINESSPERSON9 due to RA_EBUSINESSPERSON9
at oracle.iam.reconciliation.impl.ReconOperationsServiceImpl.reconEvent(ReconOperationsServiceImpl.java:285)
at oracle.iam.reconciliation.impl.ReconOperationsServiceImpl.createReconciliationEvent(ReconOperationsServiceImpl.java:189)
at oracle.iam.reconciliation.impl.ReconOperationsServiceImpl.createReconciliationEvent(ReconOperationsServiceImpl.java:212)
at oracle.iam.reconciliation.impl.ReconOperationsServiceImpl.createReconciliationEvent(ReconOperationsServiceImpl.java:201)
at Thor.API.Operations.tcReconciliationOperationsIntfEJB.createReconciliationEventx(Unknown Source)
at sun.reflect.GeneratedMethodAccessor2032.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
Please let me know what steps i need to take to make this work.
Thanks

In RoboHelp,we can't able to input japanese character in search box while english is able to type?

Hi
Our Application having multilanguage support(Localization) which using adobe RoboHelp
we can't able to input japanese character in search box while english is able to type and get result.please help us if anybody having knowledge for these issue.
Thanks,
Sunil

Hi Anybody,
Our Application developed in Adobe Air with multiple language support ,When user click on help menu, It will Open Adobe AIR's Window component which Render Adobe RoboHelp 8 's xyz.html file which shows Help detail.
In Help Window there is search functionality , When user login with english language , user can able to type english keyword in search box while in Japanese language, user cannot able to type Japanese keyword.
Also,When user login in japanese language then user also set it's region language japanese from Control panel of Window XP.
But I User cannot able to type in Seach box in help window which having . html Adobe RoboHelp File. This is whole story.
Please Reply if anybody can have good answer. i am waiting for that.
Thanks,
Sunil

Can anyone help me with a user login script on php for Oracle database?

I have a script which somehow is not working well. Can anyone give a good script (for Oracle database) for user login and validation and change password? I will be grateful
JJZ

http://www.oracle.com/technology/pub/articles/deployphp/seliverstov_deployphp.html
http://www.oracle.com/technology/tech/php/htdocs/php-oracle-tutorial.html

AD Trusted Recon not working OOTB

I am using OIM 9.1 on Oracle Application Server 10g, Java 1.4.2 provided by the Oracle Application Server, in a RedHat environment.
I require multiple trusted resources -
1. flat file
2. AD (non-SSL)
My Flat File works fine, I can reconcile users in successfully. I have imported the Trusted Recon XML from AD already, and use the fields auto-generated from AD as my Xellerate User Recon Object mapping for the flat file.
However, when I run the scheduled task, ActiveDirectoryReconTask, it gives me two issues.
1) The scheduled task won't get out of "RUNNING" mode.
2) The scheduled task throws the following NoClassDefFoundError, as shown in the logs:
========================
DEBUG,14 May 2008 15:49:57,724,[XL_INTG.ACTIVEDIRECTORY],ActiveDirectoryRecon/performOrgReconciliation Start
DEBUG,14 May 2008 15:49:57,724,[XL_INTG.ACTIVEDIRECTORY],Before Connect
DEBUG,14 May 2008 15:49:57,756,[XL_INTG.ACTIVEDIRECTORY],After Connect
DEBUG,14 May 2008 15:49:57,756,[XL_INTG.ACTIVEDIRECTORY],
********tcADUtilLDAPController ----- Starting internal ldap search with SEARCH CONTROLS
DEBUG,14 May 2008 15:49:57,756,[XL_INTG.ACTIVEDIRECTORY],Before Searching
DEBUG,14 May 2008 15:49:57,762,[XL_INTG.ACTIVEDIRECTORY],After Searching
DEBUG,14 May 2008 15:49:57,768,[XL_INTG.ACTIVEDIRECTORY],ActiveDirectoryRecon/performOrgReconciliation: Org attributes are: {name=name: test, instancetype=instanceType: 4, ou=ou: test, usncreated=uSNCreated: 50129, usnchanged=uSNChanged: 50129, objectclass=objectClass: top, organizationalUnit, distinguishedname=distinguishedName: OU=test,DC=lab,DC=com, objectcategory=objectCategory: CN=Organizational-Unit,CN=Schema,CN=Configuration,DC=lab,DC=com, objectguid=objectGUID: [B@a6a14b, whencreated=whenCreated: 20080428182832.0Z, whenchanged=whenChanged: 20080428182832.0Z}
DEBUG,14 May 2008 15:49:57,768,[XL_INTG.ACTIVEDIRECTORY],ActiveDirectoryRecon/getHashtableFromAttributes
DEBUG,14 May 2008 15:49:57,769,[XL_INTG.ACTIVEDIRECTORY],ActiveDirectoryRecon/getHashtableFromAttributes: dn :OU=test,DC=lab,DC=com
DEBUG,14 May 2008 15:49:57,769,[XL_INTG.ACTIVEDIRECTORY],Class tcADUtilDAPController :: getUsrParentOrg() :: usrDN :: OU=test,DC=lab,DC=com
08/05/14 15:49:57 Exception in thread "QuartzWorkerThread-2" java.lang.NoClassDefFoundError: netscape/ldap/LDAPDN
08/05/14 15:49:57      at com.thortech.xl.integration.ActiveDirectory.tcADUtilLDAPController.getUsrParentOrg(Unknown Source)
08/05/14 15:49:57      at com.thortech.xl.schedule.tasks.ActiveDirectoryRecon.getHashtableFromAttributes(Unknown Source)
08/05/14 15:49:57      at com.thortech.xl.schedule.tasks.ActiveDirectoryRecon.getOrgHashtableFromAttributes(Unknown Source)
08/05/14 15:49:57      at com.thortech.xl.schedule.tasks.ActiveDirectoryRecon.performOrgReconciliation(Unknown Source)
08/05/14 15:49:57      at com.thortech.xl.schedule.tasks.ActiveDirectoryRecon.performReconciliationFirst(Unknown Source)
08/05/14 15:49:57      at com.thortech.xl.schedule.tasks.ActiveDirectoryReconTask.execute(Unknown Source)
08/05/14 15:49:57      at com.thortech.xl.scheduler.tasks.SchedulerBaseTask.run(Unknown Source)
08/05/14 15:49:57      at com.thortech.xl.scheduler.core.quartz.QuartzWrapper$TaskExecutionAction.run(Unknown Source)
08/05/14 15:49:57      at Thor.API.Security.LoginHandler.oracleLoginSession.runAs(Unknown Source)
08/05/14 15:49:57      at com.thortech.xl.scheduler.core.quartz.QuartzWrapper.execute(Unknown Source)
08/05/14 15:49:57      at org.quartz.core.JobRunShell.run(JobRunShell.java:178)
========================
The error that is consistent is
08/05/14 15:49:57 Exception in thread "QuartzWorkerThread-2" java.lang.NoClassDefFoundError: netscape/ldap/LDAPDN
I am able to provision to this same AD Instance.
I've included all the relevant information below...
The scheduled task fields are as follows:
DeleteRecon:     false
FieldLookupCode:     Lookup.ADReconciliation.FieldMap
MaintainHierarchy:     true
Object:     AD User
Server:     ADITResource
TransformLookupCode:     Lookup.ADReconciliation.TransformationMap
UseFieldMapping:     true
UseTransformMapping:     false
XellerateOrg:     Xellerate Users
XellerateObject:     Xellerate User
GroupObject:     AD Group
MultiValueAttributes:     memberOf
StartRecord:     1
BatchSize:     2
NumberOfBatches:     All Available
My IT Resource is as follows:
AD Sync installed (yes/no):     no
ADDisableAttr Lookup Definition:     Lookup.ADProvisioning.DisableAttrLookup
ADGroup LookUp Definition:     Lookup.ADReconliation.GroupLookup
Admin FQDN:     [email protected]
Admin Login:     oimadmin
Admin Password:     *******
AtMap ADUser:     AtMap.AD
AtMap Group:     AtMap.ADGroup
Custom Attribute Name:
CustomizedReconQuery:
Last Modified Time Stamp:     0
Last Modified Time Stamp Group:
OIM User UDF:
Root Context:     OU=test,DC=lab,DC=com
SSL Port Number:     636
Server Address:     x.x.x.x
Target Locale: Country     US
Target Locale: Language     en
Use Disable Attr:     false
Use SSL:     false
My IT Resource Type Definition is as follows:
ADDisableAttr Lookup Definition:     Lookup.ADProvisioning.DisableAttrLookup
Use Disable Attr:     false
Target Locale: Language     en
Target Locale: Country     US
Server Address:
Root Context:
Admin FQDN:
Admin Password:          1
Use SSL:     false
SSL Port Number:     636
Admin Login:
AtMap ADUser:     AtMap.AD
AtMap Group:     AtMap.ADGroup
Last Modified Time Stamp:     0
Last Modified Time Stamp Group:     0
ADGroup LookUp Definition:     Lookup.ADReconliation.GroupLookup
CustomizedReconQuery:
AD Sync installed (yes/no):     no
Custom Attribute Name:
OIM User UDF:
My questions are:
1. Has anyone run into this issue, or know what the origin of this issue is? It looks like it's not picking up a class file. However, I have the LDAP jar downloaded, provisioning works fine.
3. How can I get my scheduled task to get out of RUNNING mode and actually stop? The "Last Stop Time" doesn't update, and the only time I can re-run the task is by bouncing the server.
Thanks for your help.
Message was edited by:
sake
Message was edited by:
sake

The problem that you are having is because the ldapsdk-4.17.jar is not in your third party directory.
To quote the deployment guide for the connector:
"You can search for and download the ldapsdk-4.17.jar file from the Internet and copy it into the OIM_home/xellerate/ThirdParty directory."
(Not the most clear and straightforward language but at least it is mentioned.)
You can get the SDK here: http://www.mozilla.org/directory/javasdk.html
I thought the 9.0.1.4 version was supposed to have transitioned over to pure JNDI but it seems like the connector stills uses some things in the old lib. Oracle also used to distribute the old Netscape build of this component as a part of the connector but it seems like someone (probably the Oracle lawyers) disliked this practice.
Good luck!
/M

OIM 11gR1 - Trusted Recon UserID Generation

Hi,
We are using 11gR1 OIM and trusted reconciling users from feed files using GTC. We are supposed to generate UserID and email for the users. From googling I understood I would not able to write a PreProcess Event Handler. How can I achieve this?

you should have a post process handler as pre-process not supported for Trusted recon in 11g.
http://fusionsecurity.blogspot.in/2011/09/oim-11g-event-handler-example.html

Urgent: Please help: Trusted recon - Sun LDAP - timeout

Hi Experts,
I am doing trusted reconciliation with sun ldap using oim 11.1.1.5 bp4.
LDAP system has around 3 lakh users. so i am planned to do trusted recon in 5 or 6 intervals to get around 50K records each time.
i tested for 1000 users - no timeout is happening and all users are created perfectly using trusted recon
when i run for 25K users, i am getting timeout excception below,
1. It is searching and listing the users, (please chck time)
recon.schedule.tasks.tcTskIPlanetUserReconciliation : countRecord() : Before search time: Tue Oct 09 13:24:41 KST 2012
recon.schedule.tasks.tcTskIPlanetUserReconciliation : countRecord() : TotalRecords from LDAP: 22882
recon.schedule.tasks.tcTskIPlanetUserReconciliation : countRecord() : After search time: Tue Oct 09 15:54:42 KST 2012
2. Timeout exception
recon.schedule.tasks.tcTskIPlanetUserReconciliation : pagingBatchingReconciliation() : The searchBase is: ou=XX,ou=XX,o=XX
pagingBatchingReconciliation() : Problem searching directory: javax.naming.TimeLimitExceededException: [LDAP: error code 3 - Timelimit Exceeded]; Remaining name: ou=XX,ou=XX,o=XX
In iPlanet User Truseted Recon I gave,
Abandoned connection timeout - 108000 (seconds)
Connection pooling supported - false
Connection wait timeout - 60 (seconds)
LDAP Connection TimeOut - 3000 (seconds)
Inactive connection timeout - 60 (seconds)
Above parameters are good for more than 25K users?
Please help me...
Thanks..

They look good...
Try to use Connection pooling too if possible...
Abandoned connection timeout - 108000 (seconds)
Connection pooling supported - true
Connection wait timeout - 60 (seconds) --> Increase it to say 90 (seconds)
LDAP Connection TimeOut - 3000 (seconds) --->
Inactive connection timeout - 60 (seconds) --> Increase it to 600 (As the default value in the LDAP Server IT Resource Type Definition)
Alternatively You can rather break your chunks in 20000 records because you are able to fetch 22882 records successfully....

One fundamental question: When users gets ceated in IDM from trusted recon

I have a very basic question which I am not able to understand.
When user accounts gets created in IDM from trusted recon, then the trusted recon resource object is not displayed in resource profile page of the user account. If we want to see whether the user account was created through trusted source or by manually by admin, then where can we see that?
This information is stored anywhere in IDM DB which will distinguish user accounts created through trusted recon and those created manually in IDM?
Please let me know if you are not able to understand my question.
Thanks,
Kalpana.

You may be able to use the USR_CREATEBY field in the database. For an admin created user this should contain the USR_KEY value of the admin who created the user. I think for a reconciliation created user it may contain the USR_KEY of the OIMINTERNAL user.

DBUM Trusted Resource reconciliation fails

I'm trying to set up a trusted resource reconciliation job.
I currently have it set up like this : http://i.imgur.com/uUh4X.jpg
Also, I set up the configuration lookup definition (using OIM Design Console). In my case its: u01/oracle/product/fmw/1111/wls1/iam/server/ConnectorDefaultDirectory/DBUser_9.1.0.4.0/config/DBUMReconQuery.properties
When I run the job however I get following error messages in OIM log: Message     java.io.FileNotFoundException: Enter a value (No such file or directory)
I assume I'm missing something. Any suggestions?
Fullstacktrace of exception:
Message Level     1
Relationship ID     0
Component     wls_oim1
Module     OIMCP.DBUM
Host     xxx.xxx.xxx
Host IP Address     xx.xx.xx.xx
User     oiminternal
Thread ID     OIMQuartzScheduler_Worker-8
ECID     18ad5d5d71213dc9:57db12c3:13662eb5848:-8000-0000000000000002
Message     java.io.FileNotFoundException: Enter a value (No such file or directory)
Supplemental Detail     at java.io.FileInputStream.open(Native Method)
at java.io.FileInputStream.<init>(FileInputStream.java:106)
at java.io.FileInputStream.<init>(FileInputStream.java:66)
at oracle.iam.connectors.dbum.common.db.util.QueryBuilder.loadQuery(Unknown Source)
at oracle.iam.connectors.dbum.common.db.util.QueryBuilder.getSqlQuery(Unknown Source)
at oracle.iam.connectors.dbum.tasks.DBUMReconTask.execute(Unknown Source)
at com.thortech.xl.scheduler.tasks.SchedulerBaseTask.execute(SchedulerBaseTask.java:384)
at oracle.iam.scheduler.vo.TaskSupport.executeJob(TaskSupport.java:145)
at sun.reflect.GeneratedMethodAccessor3868.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.iam.scheduler.impl.quartz.QuartzJob.execute(QuartzJob.java:196)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:529)

Hi steven,
I am also facing same problem while doing trusted recon using DBUM connector. Can i know the procedure to resolve it, what changes need to do in apache config?
ASAP
Regards
SK
Edited by: user7609 on Jul 11, 2012 4:08 PM

OIM Event Handler Triggers on Manual Entry but not for Trusted Recons

Hi,
I'm having some trouble getting my plugin to trigger upon a reconciliation. I've developed a plugin to modify some Xellerate User attributes on the OIM Profile.
- I've created a custom package with some java classes that retrieve attributes being passed in, manipulates the data, and returns the data through an EventResult
- I have system.out commands in my BulkEventResult function to see when this function is triggered
- My Plugin.xml calls this java class, which has a plugin point of oracle.iam.platform.kernel.spi.EventHandler
- I've uploaded the plugin (development) by putting the plugin.zip in the /server/plugin folder
- I've created an event handler that calls the plugin class upon an operation = "MODIFY". It also contains entity-type="User", stage="postprocess", order="FIRST", sync="TRUE"
- I've imported this using the weblogic import utility, setting OIMMetadata, and loaded the file to /custom/iam-data/EventHandler.xml
Upon testing, I am able to see my system.out debug statements in the logs, and can see the data actually changing when I am logged into OIM making changes directly on the system.
I am unable to see any of this come through when I run a trusted OID reconciliation against the same user, manipulating the same fields.
From what I've read, all I needed to do was put the code in the BulkEventResult function. However, none of my debug statements are being triggered, causing me to believe that this event handler is not even being triggered upon a trusted recon.
Does anyone have any ideas why this is, or if I have a configuration somewhere that is incorrect?
Any help is very welcome!

Everyone,
Thanks for your help.
I found out the root of my issue: it was that my OPERATION was set to "MODIFY" in my EventHandler XML. It should have been "ANY". After I did this, it started to work.
As for registering plug-ins, you can actually drop the plugin zip file on the Oracle_IDM1/server/plugin directory for testing purposes, then re-import the EventHandler.XML you created.
I also found a few strange behaviors-
- If the order was too large (for example, 1000), it wouldn't trigger until the second time I updated it. I lowered the number to 50 and it kicked off every time.
- There is no purge cache needed when I re-imported the xml file after uploading the .jar again

Not getting all the attributes value from Trusted Recon in eventhandler

Hi,
I am not getting the values of all the attributes in hashmap from Trusted recon in eventhandler.
Following is the hashmap value I am getting :
Parameter Hashmap value is {re_key=1869, Email=[email protected], Role=Full-Time, act_key=22, User Login=TUser43, Xellerate Type=End-User, Last Name=User43, First Name=Test}
Please let me know how to get all the attributes value in eventhandler. I need to take some decisions based on these attributes.
Thanks

You should be getting all the values in the recon event.
To get the current user states for all the records in the bulk event use this:
Identity[] currentUserStates = (Identity[]) eventDataHashMap.get("CURRENT_USER");
Now when you are looping through your bulkParametersp[], you can use the same get from the currentUserStates:
Identity currentUser = null;
currentUser = currentUserStates[counter];
Now if the attribute is not in your hashmap, you can use:
currentUserState.getAttributes().get(attribute)
-Kevini

Can i able to do DBUM trusted recon without mapping User Login

Similar Messages

Maybe you are looking for