Cannot Get AD Password Sync to Function

Question

I have install the AD Password connector s that I can syncronize passwords from AD to OIM and the otherway as well. When I change the password in OIM, it works fine. But when I try to chane it in AD, I get the following error:
Debug [05/16/12 16:30:34] Inside sgsladac destructor
Debug [05/16/12 16:30:34] Datastore --- About to Instantiate Object
Debug [05/16/12 16:30:34]
Inside sgslpascexecute
Debug [05/16/12 16:30:34] GUID outside -->
Debug [05/16/12 16:30:34] Jv1Gnn5DC0SzEn1jS11pAw==
Debug [05/16/12 16:30:34] KERMIT
Debug [05/16/12 16:30:34]
Debug [05/16/12 16:30:34] Inside sgsloidi::sgsloidiupdateOIM
Debug [05/16/12 16:30:34] Inside sgsloidi::getConfigParamters
Debug [05/16/12 16:30:34] Start getting config parameters from registry
Debug [05/16/12 16:30:34] oimhost is
Debug [05/16/12 16:30:34] oimserver.test.mydomain.local
Debug [05/16/12 16:30:34]
Debug [05/16/12 16:30:34] oimport is
Debug [05/16/12 16:30:34] 14000
Debug [05/16/12 16:30:34]
Debug [05/16/12 16:30:34] oimuserattr is
Debug [05/16/12 16:30:34] Users.User ID
Debug [05/16/12 16:30:34]
Debug [05/16/12 16:30:34] oimusessl is
Debug [05/16/12 16:30:34] N
Debug [05/16/12 16:30:34]
Debug [05/16/12 16:30:34] oimappservertype is
Debug [05/16/12 16:30:34] 1
Debug [05/16/12 16:30:34]
Debug [05/16/12 16:30:34] End of sgsloidi::getConfigParamters
Debug [05/16/12 16:30:34] Inside sgsloidi::setParameters
Debug [05/16/12 16:30:34] The SOAP start element is
Debug [05/16/12 16:30:34] <processRequest xmlns=""><sOAPElement>
Debug [05/16/12 16:30:34] The SOAP end element is
Debug [05/16/12 16:30:34] </sOAPElement></processRequest>
Debug [05/16/12 16:30:34] The path is
Debug [05/16/12 16:30:34] /spmlws/OIMProvisioning
Debug [05/16/12 16:30:34] End of sgsloidi::setParameters
Debug [05/16/12 16:30:34] Found User ID:
Debug [05/16/12 16:30:34] Users:26
Debug [05/16/12 16:30:34] <env:Envelope xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:env="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><env:Header/><env:Body env:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><m:processRequestResponse xmlns:m="http://xmlns.oracle.com/OIM/provisioning"><setPasswordResponse xmlns="urn:oasis:names:tc:SPML:2:0:password" error="customError" status="failure"><errorMessage>exception=OIMEventException;errorMessage=Method not found: 'setXelleratePasswordx(JLjava.lang.String;ZLjava.lang.String;)'; nested exception is: java.rmi.UnmarshalException: Method not found: 'setXelleratePasswordx(JLjava.lang.String;ZLjava.lang.String;)'</errorMessage></setPasswordResponse></m:processRequestResponse></env:Body></env:Envelope>
Debug [05/16/12 16:30:34] Inside sgsloidiOIMGeneralErrorHandler
Debug [05/16/12 16:30:34] Unable to update KERMIT. The OIM server rejected the setPasswordRequest. Please check the OIM server log for more details
Debug [05/16/12 16:30:34] Inside sgsladds::sgslperwriteData YOOOO
Debug [05/16/12 16:30:34] Inside sgsladac c-tor
Debug [05/16/12 16:30:34] AD Host
Debug [05/16/12 16:30:34] X.X.X.X
Debug [05/16/12 16:30:34]
Debug [05/16/12 16:30:34] AD Port
Debug [05/16/12 16:30:34] 389
Debug [05/16/12 16:30:34]
Debug [05/16/12 16:30:34] AD Base DN
Debug [05/16/12 16:30:34] dc=oimpoc,dc=mydomain,dc=local
Debug [05/16/12 16:30:34]
Debug [05/16/12 16:30:34] Only dataattribute
Debug [05/16/12 16:30:34] Got Registry enteries
Debug [05/16/12 16:30:34] contact
Debug [05/16/12 16:30:34] description
Debug [05/16/12 16:30:34] Got Entiredn
Debug [05/16/12 16:30:34] OU=oimpwdsyncoimpoc.mydomain.local,ou=psync,ou=IAM NEW USERS,dc=oimpoc,dc=mydomain,dc=local
Debug [05/16/12 16:30:34] Encrypted record already exists in Datastore
Debug [05/16/12 16:30:34] Already Exists
Debug [05/16/12 16:30:34] Encrypted record already exists in Datastore
Debug [05/16/12 16:30:34] Already Exists
Debug [05/16/12 16:30:34] Inside sgsladdsSearchUser
Debug [05/16/12 16:30:34] Firing Search Request
Debug [05/16/12 16:30:34] AD search for a user objectGUID is successfull
Debug [05/16/12 16:30:34] Adding a new node to datastore
Debug [05/16/12 16:30:34] Inside sgslutilconcatData
Debug [05/16/12 16:30:34] Entire dn is ==>
Debug [05/16/12 16:30:34] cn=KERMIT,OU=oimpwdsyncx.x.x.x,OU=oimpwdsyncoimpoc.enbridgedv06.local,ou=psync,ou=IAM NEW USERS,dc=oimpoc,dc=mydomain,dc=local
Now when I look at the documentation, I see that the error is for one of three reasons. The first is that the password does not meet password policies set on OIM. I left the settings as default and have made sure that the password I'm reseting it to does conform to this. In fact, I have even turned off the password policies on AD so that nothing on the AD interferes with this. The second issue mentioned is that it contains characters that Oracle doesn't support. I cannot get any more generic than upper case, lower case, numeric and no special characters but maybe I'm missing something here. The last one is _"the user ID of an OIM User contains characters in the non-native encoding of the Microsoft Active Directory system."_ Again, I couldn't be more generic and I'm only changing one character at a time.
Now I'm a complete n00b when it come to OIM but I do have a lot of Microsoft AD experience. So if you can answer, please use small words. ;-)
Edited by: 935038 on May 17, 2012 8:56 AM
Edited by: 935038 on May 17, 2012 8:57 AM
Edited by: 935038 on May 17, 2012 8:57 AM

Answer 1

Hi,
I have the same error with AD password sync connector (The OIM server rejected the setPasswordRequest).
But I have changed the password for account AD with the same password from OIM (and in my case tree reasons of error are false).
Can You help me please?
Thanks
Marianna