Custom Resources - FIM MA Export failure

Hi,
I have some custom resources imported into MV and now, when running FIM-MA Export, those resources are not created.
In the sync service console (operations tab) I can see in the "export errors", this: "...No policy grants the Requestor permission to complete all changes..."
I opened the request in the portal and saw that it has no MPRs in "Applied Policy" Tab.
Although the requests created in the portal UI are succeeded (they have an
admin account and an applied MPR).
What should I do to have the "Built-In syncronization account" be able to create those custom resources?
Please note I'm a developer, not the administrator who created the resources, so walkthrough docs/articles are welcome.
Many thanks,
DD

You should create two things:
1. Set (criteria based) of all resources of your new type.
2. Management Policy Rule in FIM Portal that would grant "Built-In synchronization account" rights to manage all attributes of members of Set created in point 1.
If you found my post helpful, please give it a Helpful vote. If it answered your question, remember to mark it as an Answer.

Similar Messages

Custom resource/attribute not visible in FIM portal for non-admins

hi all
I have a problem I am not able to solve and hope somebody can help. We have created an custom Resource in the FIM portal called Customer. It is an User Resource Type and attribute type customer, data type=reference.
We have made this attribute visible in the Users Properties by editing the RCDC for Configuration for User Creation, Configuration for User Editing and Configuration for User Viewing. It is now visible for alle users in the FIM Portal.
But when an non-admin searches for an attribute in that Field, nothing shows up.... only member of the administrator set, are able to display the results.
I have added the Resource to Filter permission - Administrator Filter permission + non-administrator filter permission.
I have added the Resource to MPR - General: Users can read non-administrative configuration resources?
Can anyone help?
Best regards Andre
Andre

Hi,
To be clear,
You have create one new resource type 'Customer' and one attribute 'Customer' (Reference, binded to Person object)
Update RCDC for Person (create/edit/view) to add a picker attribute with those parameters
UsageKeywords: This is an optional string property. You can define a list of search scopes to be used in the Resource Picker by providing a list of the usage keywords that are supported by the SearchScopeConfiguration structure, where each keyword is separated by a (‘).
ResultObjectType: This is an optional string property. The resource type is used to render resources in the pop-up dialog-box list. This is used with the Filter to help the Identity Picker identify what resource type is returned by the Filter, and render the data accordingly. This property is mutually exclusive with the UsageKeywords property (see above). When the search scope is applied, this has no effect. The string that is accepted for this property is any single, valid, resource-type name, for example, Person. When the filter is expected to return multiple resource types, Resource is used.
Modify MPR "User management: Users can read attributes of their own" and "User management: Users can read selected attributes of other users" to add this new attribute
Create a new MPR to give the right of all users to view new resource 'Customer' on all attributes
Is that right?
Regards,
Sylvain

Import Wizard: Unknown export failure

Hi -
We have about 30 universes in 3.1 SP2 and I am having probelm exporting 2 of them to a .biar file. I get the Unknown export failure message in the Export View Log window. I am able to export all of the other universes, including the corresponding Test universes that created the problem ones (copy through export in Designer) and direct copies of the problem ones (copied to new folder).
The log files state:
"Type","ID","New CUID","Title","Severity Code","Severity","Details"
"CrystalEnterprise.Folder","3715","AYEywY5nSSNHoy1.hQm8NZ8","APPLICATION Universes","4","Error","Unknown export failure."
"CrystalEnterprise.MetaData.DataConnection","4874","AStHrjF7ETVNvIIvq4xffXs","APPLICATION CONN","4","Error","Unknown export failure."
"CrystalEnterprise.Universe","3600","AYtNIib.5cdHuy0oa7Mm3yA","APPLICATION UNIV48 Summary","4","Error","Unknown export failure."
"CrystalEnterprise.Universe","3599","Aeih7_KjLvpEoKViEcsfxNc","APPLICATION UNIV48","4","Error","Unknown export failure."
"CrystalEnterprise.CustomRole","6658","Aaw6myUxTcdCsXdSV0vIEyM","Admin_Access","4","Error","Unknown export failure."
"CrystalEnterprise.CustomRole","193","AVog52Tl72ZGvIReeqKndUA","Full Control","4","Error","Unknown export failure."
"CrystalEnterprise.CustomRole","6659","AXZTQBwYYptJttalHxxbYqQ","User_Access","4","Error","Unknown export failure."
Source Type: BusinessObjects Enterprise XI 3.x
System: DC38-SNR-WEB01
User: Administrator
Authentication: Enterprise
Destination Type: Business Intelligence Archive Resource (BIAR) File
BIAR file: C:\Users\joness\Desktop\test.biar
Import universes
Import custom access levels
Import universe and connection objects that the selected documents use directly, as well as any other universe and connection objects they depend on.
ID: 3715
Title: APPLICATION Universes
Details - Error: Unknown export failure.
ID: 4874
Title: APPLICATION CONN
Details - Error: Unknown export failure.
ID: 3600
Title: APPLICATION UNIV48 Summary
Details - Error: Unknown export failure.
ID: 3599
Title: APPLICATION UNIV48
Details - Error: Unknown export failure.
ID: 6658
Title: Admin_Access
Details - Error: Unknown export failure.
ID: 193
Title: Full Control
Details - Error: Unknown export failure.
ID: 6659
Title: User_Access
Details - Error: Unknown export failure.
Error! Failed to write out object IDs map to ids file.
Any idea?
Thanks in advance....

This thread is being moved from "BusinessObjects General" forum to "BusinessObjects Enterprise Administration" forum to be more in-line with the nature of the question.

FIMMA - sync engine - not reading the new custom resource from portal

I added a new custom resource in FIM portal. I added 5 attributes to it. FIMMA refresh schema is not reading the new schema. It says schema is uptodate. I tried IIS reset and even all server restarts. What am I mising?

Did you add the resource to the synchronization filter? I believe it's administration->all resources->synchronization filter. Then do the IIS reset and sync engine schema update. Only resources in that filter can be seen by the sync engine.
Mark
Mark Creekmore - BlueVault Software http://www.bluevaultsoftware.com

Portal failed to access remote resource due to network failures

Hi,
We have a portlet that allows users to upload files to a SQL Server database and make it available for other users to access. The portlet code is on our remote servers. Everything works fine in dev environment, but certain files fail in pre-prod and prod within the portal, but work fine when the code is executed outside the portal.
I keep getting this error:
Error - Portal failed to access remote resource due to network failures. Try again later or contact your portal administrator.
What could the problem be?
Thank you for your help.
Rad

If the Studio service looks good on the remote server where Studio is installed (check that
the service is started and look in the Studio logs for any warnings or errors), you should
also verify the configuration settings in the Studio remote server object. Is it properly
configured and pointing to the correct remote server?
If so, check the portal servers access to the Studio server via the port specified in the remote
server (default is 11935). You can test this by doing a telnet test on the portal server. In a cmd
prompt (Windows) or on the CLI (Unix), type 'telnet [studioserver] 11935', where "<servername> is
the name of your Studio remote server. The screen should just go blank, meaning that there is
something accepting connections on that port on the given server. (We would hope it's the Studio
app and not another service occupying that port.) If you get "Could not open connection to the host"
or some such similar result, check that the network between the portal and the Studio remote server
is open (ie, make sure there isn't any port blocking or a firewall in place that would hinder the
communication between the two servers).

How to use Custom resource in MSA 5.0

Hi All,
I need to create a Custom resource on a tileset, where i need to create a hyperlink with an image. On clicking this image(hyperlink) , the control should transfer to the other tileset.
Can anybody explain or share a code for the same?
Thanks in Advance.
Regards,
Soumya

Hi Sowmya
Custom Resources are not as such modelling objects in Mobile applications. They are the files that can be associated with interaction components and button controls, to enhance the functionality of the application.
More over, tilesets can not have custom resources. Only tile controls like buttons can be associated to the custom resources.
For your requirement, You can have one label which can actually hyperlink configured so that at runtime clicking on the label hyper link will take you the tileset which you have set as hyperlink target. For this, you can see some of the exsiting tiles which has hyperlinks (tactdeta2.vb)
Best regards
Shankar

FIM MA Export errors. There is an error executing a web service object creation.

While checking for the permission, we have figured that the Built-In Synchronization account is being deleted by an Expiration Workflow.
FIM MA Export errors. There is an error executing a web service object creation.
While checking for the permission, we have figured that the Built-in Synchronization account was deleted by an Expiration Workflow
Is there a way to restore. Thanks.

I would re-run FIM setup - I think it can re-create this account
If you found my post helpful, please give it a Helpful vote. If it answered your question, remember to mark it as an Answer.

Custom Resource Renderer not coming on Implementing Flexible UI Components

HI,
I am using the Sneak Preview NW2004s SP9 with TREX .
I have to modify the search result list as returned by the TREX using the default search, basically have to include a custom Link based on the resource name.
I am trying to run the examples from the Knowledge Management and Collaboration Developer's Guide - "How to Implement Flexible UI Components".
I deployed the par file for the sample application "Using Flexible UI Ready-Mades"
and followed the steps as outlined below:
System Administration>System Configuration>Knowledge Management -->Content Management
1) Under
User Interface->Mapping>Resource Renderer
Created a new mapping for the java class com.sap.km.ui.renderer.SimpleResourceRenderer
2) Then under
User Interface->Settings>Resource Renderer Settings
Created a duplicate of SearchResourceRenderer
and in the copy changed the Resource Renderer to the custom one(as the one mapped in previous step).
In the Search Result layout Set, i changed the Resource Renderer Name to the custom one.
Now i restarted the server.(i tried restarting after almost all the steps )
But my resource renderer is not coming after i execute the TREX Search.The list returned seems to use the default Resource Renderer.
I even tried by making an advanced copy of the Search Layout Set, changed the Resource Renderer name, updated the OTH file(search.oth), Switched on the degugging for the WdfProxy and reloaded the OTH.
Now the new layout Set is being used but still i cannot see the result as per the custom resource renderer.
Morover, if i try to print some message from the resource renderer code(Component render method), it is not printed in the default Trace file.
Please help me in identifying and resolving the problem.
Thanks,
Siddhartha

Hi Detlev,
Sorry for the delay.
We don't want to exlude the folders, we would like keep it, the problem is, instead of appearing the folder name, is displayed the error message and below the actions (details, delete, ).
At first, we thought that could have been an error in the configuration of LayoutSet, but then, we tried on other two environments, with the default LayoutSet configuration and we still get, on the three environments, the same error message.
Any idea?
Thanks and Regards,
John

OAM 10g - custom resource type issue

I've created a custom resource type, say, boolean with one operation: TRUE. Then I defined resources of type boolean in my domain: /folder, /folder/1
and /folder/2. I created a policy that sets TRUE for resources /folder, /folder/*, and the rule is some LDAP query, like ldap:///<my_suffix>??sub? (|(attr='A')(title='B')). Then when I run policy tester for a user (who I know has attribute I set in the LDAP query) and for example, resource /main/1, OAM tells me: policy name - correct name, rule - undefined, authorization - inconclusive. If anyone played with custom resource types, can you please advise? Why does it say "rule not found"?
Thanks,
-Alex

Hi Alex,
Doing the equivalent works for me - I suspect that it's a problem more with the resource syntax that the policy is protecting than with custom resource types. In my env I have:
- Policy Domain protecting resource of type boolean, resource /folder1
- Policy within the domain protecting url prefix /folder1, url pattern test/.../*, resource type boolean, resource operation TRUE
- authorisation rule (used in the Authorisation Expression for the policy) ldap:///dc=example,dc=com??sub?(|(uid=bjensen)(givenName=*ba*))
and the Access Tester shows the rule and expected results when testing url boolean:///folder1/test/whatever
Are you using the /.../* syntax in your policy?
Regards,
Colin

Changing Owner & Business Group of ASD Custom Resource

So this is a bit of an expansion of this discussion: https://communities.vmware.com/thread/500669?start=0&tstart=0
You will see that pizzle85 managed to solve his challenge of BG object ownership by using an ASD Service Catalog Request located in each Business Group's Entitlements so a member of the business group can just run the Provision required to bring the BG item under management in the business group. This is quite an effective method to solve the need. He then has a Resource Action that allows for re-"Provision" which changes owner within the business group: a necessary task because managers tend to move around a lot so they can look busy. (just kidding, I love managers--who have a sense of humor) So to change owner... just perform a "provision" again.
Apparently this is one of the best kept secrets in vRA because it has been hard to figure out, and nobody is writing about it. (I can only assume that there is some SE out there who has worked with the developers to get this capability going and it hasn't been shared widely.)
Note: I think Business Groups as a Service is something I need to plan for (vs centrally managed Business Groups) even though their future implementation might vary, so my examples here are related to that effort because I am too lazy to demonstrate a generic example. BUT... the idea is... ownership of ASD Inventory Objects (representing ANY Custom Resource) can be modified using this method. Ownership includes both the owner represented by "ME" in the Items list... and the Business Group (subtenant Reference & Label) where the item resides in inventory.
In 6.2.x, I have not found any method in the vRO plugin for vRA to be able to change ownership and business group of an ASD Custom Resource Inventory Item, but it can be accomplished via a combination of (1) ASD Service Catalog or Resource Action "Provision" capabilities and (2) REST calls through the vRA plugin service channels. (the latter uses the plugin service account authorizations/entitlements)
Consider this image...
This could represent a central management point for many business groups: where I can assign a set of resource actions allowing for automation of various business group needs, an anchor point for actions. Those in the sktest business group Support User or Manager Role would be able to see all the business groups globally if they were all provisioned in sktest. (a bucket to manage from)
This also could represent a starting point where business groups are created as real objects, returned as custom resources, and "provisioned" as inventory object items. But once there...maybe you want to move it?
Let's say we later decided, seantesting doesn't belong in sktest because we wanted to change from the "we manage it for you" model to the "manage it yourself" model. How do you move it?
Like this...
And it moves now owned by the vRA plugin service account... (which an entitled user could run Take Ownership and own it in that business group)
The service account obviously needs to be part of the destination business group and as it ends up, has to have an entitlement to any "provision" action in the business group even though the object doesn't exist there.
This is a tricky hack and this is how it works...
1. vRO workflow calls the Take Ownership Action in vRA via REST (front door process). As noted before, this has a provision attribute to the action which we know changes the owner. So we would expect that the owner would change to the user that is making the request: which is the service account. The service account becomes the owner, but this wouldn't change the Business Group.
2. So we change subtentantRef and subtenantLabel in the REST call to the business group we want to target, even though the object isn't in inventory in that business group. And Voila! The business group item representation re-provisions as a new owner in a new business group. Effectively changing the owner and moving the object from one BG to another BG using the management-method vs the self-service-method (the latter as pizzle85 did).
Again... maybe you care less about Business Groups. Maybe you would prefer self-service. It is the capability of moving a custom resource inventory representation that matters.
Here is an example of the REST call to run the "Take Ownership" action. I have a script before this that pulls in all the variables for the "Resource" I am targeting (from the BusinessGroup object ID), the action I am running (Take Ownership ID), the business group Ref and Label) and some of the properties I need for the Take Ownership action like bgName... but those are actually not necessary. (all of the "entries" are what is required per the Take Ownership request... if that request didn't require any inputs, there would be no entries... it is the top change of subtenant that allows for the BG move)
System.log("resourceRef: " + resourceRef);
System.log("resourceActionRef: " + resourceActionRef);
System.log("targetRef: " + targetRef);
System.log("targetLabel: " + targetLabel);
System.log("bgName: " + bgName);
var payload ={
"@type":"ResourceActionRequest",
"resourceRef":{"id":resourceRef},
"resourceActionRef":{"id":resourceActionRef},
"organization":{"tenantRef":"vsphere.local","tenantLabel":"vsphere.local","subtenantRef":targetRef,"subtenantLabel":targetLabel},
"state":"SUBMITTED",
"requestNumber":0,
"requestData":
{"entries":[
{"key": "provider-rYouSure","value":{"type":"boolean","value":"true"}},
{"key": "provider-bgName","value": {"type": "string","value":bgName}}]}
payload = System.getModule("org.dojotoolkit.dojo.json").serialize(payload);
System.log(payload);
Server.log(payload);
var catalogRest = cafeHost.createRestClient(vCACCAFEServicesEnum.CATALOG_SERVICE);
var response = catalogRest.post("consumer/requests",payload);
Best of luck in your Automation Efforts!
Sean

Turns out... it is likely not required as part of the request data.

Installing Multiple Custom Resource Providers - Overwriting Issue

Hi everyone!
I am working in a POC environment for WAP.
My current situation is the following:
I am experiencing what seems to be an overwriting issue since the extension of the custom resource provider installed last always appears while the extensions of previously installed custom resource providers disappear from the WAP management portals.
How would I go about installing two different custom resource providers in WAP so that their extensions may co-exist in the left navigation pane in the management portals? Although I know I can just declare multiple extensions within the same resource provider
to achieve a similar result, I would still like to know how to correctly present multiple co-existing extensions using two different custom resource providers in WAP.
Thank you!

If you are getting this only first time, you should look at all the global registrations done (like navigation view model etc.) to see if you are somehow ending calling this up twice and the dataset accumulate it. When you navigate to some other page and
comes back, the data fetch is happening again and it replaces the old duplicated dataset some how. With everything happening async, it is a bit tricky to debug this. Try to match the code with the provided samples and see if you can find something different.
One time I have seen this issue consistently happening for tenant. It was happening when I had two subscription on that tenant for the same RP, and the RP code was not filtering results based on subscription. So the same information was returned twice.

How to install custom Resource Adapter

Hi I have writen the java class for the Custome Resource adapter and I loaded the .class file into web-inf classes folder.I followed the installation steps given in the deployement document.In that I am not understanding one step i.e "Install .class file and help file into IDM" How can we do this and How to get the particular resource under Managed Resources tabe of Configure tab./its very urgent for me any kind of help is appriciable.

Ok, since it is urgent, do it the way Sun/Waveset inserts the adapters.
1.) Alter your java code to have
package com.waveset.adapter;
As your package line.
2.) Compile the adapter to a class file.
3.) Grab the idm.jar file from $WSHOME/WEB-INF/lib and copy it to e.g /tmp
4.) unjar it. jar -vxf idm.jar
5.) copy the your adapter class file to /tmp/com/waveset/adapter
6.) jar the archive. jar -cvf idm.jar /tmp/com
7.) Make a backup of the original idm.jar, and copy the new to the old position replacing the old jar-file. Bounce your app-server.
8.) Log in as configurator or an administrator with equal capabilities. And add the custom adapter using the previous procedure... although, use the adaper class path
com.waveset.adapter.YourCustomAdapter
9.) Go to debug pages and put tracing on the same class file, and tail -f the app-server std out.
10.) try to configure the adapter. Note any eventual error messages. Post error messages on the forum along with the std out log.
If your adapter code works, it should work... if not your problems are elsewhere.
Please not that this set up is not recommended for production environment and if you apply service packs etc this fix will break!

Custom Resource Provisioning Error

Hi All,
I created a custom Resource in OIM 9102. The provisioning process is straightforward it has 2 tasks System validation and create user task. The create user task is only returning a complete message and then state of the resource is set provisioned. Process form has 5 fields all are pre populated from usr form.
When provisioning the resource the system validation task is complete but the create user task is always stuck in pending state. Could some one please suggest me what I am missing here.
Karthik

Check the preceding tasks on the create user task, is there anything there? On the resource object, the depends on tab, is there any other resource defined here? Check your response codes, are you returning a response with a P as the status?
-Kevin

Problem loading JNDI custom resources after migration from WS6.1 to WS 7.0

We have a web application that uses a handful of custom resources that works fine on Sun Web Server 6.1, but after we migrate to 7.0, it fails. The error is that it cannot find the Factory class that we use to create the custom resources. If we put a .jar file in the server's classpath so it can find the Factory class, we get a perplexing error that the custom resources don't match in the config files, when they're identical.
Here are the details:
The error we get when we just do the migration without any changes is:
*WEB7021: Class [edu.umn.cidrap.admin.repository.RepositoryFactory] not found*
After we add the .jar to the server classpath, that goes away, but we get:
*WEB7018: res-type mismatch for resource [bean/UrlRepository]. res-type in server.xml [<package>.UrlRepository] does not match res-type in web.xml [<package>.UrlRepository]*
The <package> matches identically.
Any help with this would be appreciated.
Dave

Yes, it's odd.
I ran across a similar problem upgrading an application in Tomcat, from version 5 to 6. The gist of the problem there seemed to be that the class loaded into JNDI was loaded by the server's classloader while the class using it was loaded by a different classloader (one for the web app) and that, in Java, the same class loaded by different class loaders is different. Or something like that.
The solution that worked there was to make sure that Tomcat could not find the class, which I think caused it to be loaded by the web app class loader. But I'm out of my league on that and my memory is not what it should be.
I don't know if that's the case here, but the error message -- two identical classes generating a message that they're not the same -- brings up that bad memory.
Nonetheless, I'm still stumped.
Dave

Adding entries of default-catalog.xml into my custom resource catalog

Hi,
How can I add the contents of the default-catalog.xml into my own resource catalog?
Use Case:
I am creating my own resource catalog and under that catalog, I wanted to add two folders. One contains my custom links and the other folder should contain all of the
entries in the default-catalog.xml. I tried dragging my default-catalog.xml into my custom resource catalog but it is appearing as a catalog reference and not as foldrs.
How to do this?
Thanks
Webcenter 11.1.1.6

Hi.
Try to add manually in "Source" tab and not with "design drag & drop".
You only have to copy <contents> information from default-catalog to your <contents/> folder information.
In this link i share you have a custom resource catalog with two folders: http://dl.dropbox.com/u/46128268/OTN-Samples/catalog1.xml
PD: It's a PS4 resource catalog archive, it's only for your help.
Regards.

Custom Resources - FIM MA Export failure

Similar Messages

Maybe you are looking for