Disable OIM users

Hi,
i created users in OIM and provisioned them to OID. now when i disable any user in OIM... what will be the effect on the target account in OID. IS there any attribute in OID which will tell if the user is enabled or disabled.

Well its an OOTB behavior that as and when the user in OIM gets disabled, all the resources provisioned to the user automatically gets Disabled.You can try it out and check the resource status, it should show as Disabled. Additionally you can also check that Disable User task must have been called over there.
Now to check that the user is disabled or not. Like in AD there appears a cross sign on the user account and an attribute userAccountControl shows up as 512. So see id there is similar logic in OID as well. Some attribute like orclIsEnabled but not sure.
Thanks
Sunny

Similar Messages

Disable OIM users AND ENABLE THEM MANUALLY IN OID.......

Hi,
I've OIM connected to OID.
When i disable a user in OIM, the orclisenabled attribute for that user is set to DISABLED
Now when i manually change DISABLED to ENABLED in OID, and run the target recon task, the user in OIM remains disabled and when i check resource profile, the OID user resource is ENABLED.
This should not happen. I want the case, when I manually ENABLE the disabled user in OID,and run recon task, the user should again get disabled in OID
Is it possible to realise this condition?

i have pasted the code above in notepad and saved it with extnsion .jar and copied it to the location oim/xellerate/javatasks/
when i add task to the adapter and select the jar file it as API source, it gives and error:
09:26:18,244 ERROR [ADAPTERS] Class/Method: tcRemoteFileDiscovery/getClasses enc
ounter some problems: error in opening zip file
java.util.zip.ZipException: error in opening zip file
at java.util.zip.ZipFile.open(Native Method)
at java.util.zip.ZipFile.<init>(ZipFile.java:114)
at java.util.jar.JarFile.<init>(JarFile.java:133)
at java.util.jar.JarFile.<init>(JarFile.java:70)
at com.thortech.xl.dataobj.util.tcRemoteFileDiscovery.getClasses(Unknown
Source)
at com.thortech.xl.dataobj.tcADP.getClasses(Unknown Source)
at com.thortech.xl.ejb.databeansimpl.tcADPBean.getClasses(Unknown Source
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.jboss.invocation.Invocation.performCall(Invocation.java:359)
at org.jboss.ejb.StatefulSessionContainer$ContainerInterceptor.invoke(St
atefulSessionContainer.java:598)
at org.jboss.ejb.plugins.SecurityInterceptor.invoke(SecurityInterceptor.
java:168)
at org.jboss.resource.connectionmanager.CachedConnectionInterceptor.invo
ke(CachedConnectionInterceptor.java:158)
at org.jboss.ejb.plugins.StatefulSessionInstanceInterceptor.invoke(State
fulSessionInstanceInterceptor.java:333)
at org.jboss.ejb.plugins.CallValidationInterceptor.invoke(CallValidation
Interceptor.java:63)
at org.jboss.ejb.plugins.AbstractTxInterceptor.invokeNext(AbstractTxInte
rceptor.java:121)
at org.jboss.ejb.plugins.TxInterceptorCMT.runWithTransactions(TxIntercep
torCMT.java:350)
at org.jboss.ejb.plugins.TxInterceptorCMT.invoke(TxInterceptorCMT.java:1
81)
at org.jboss.ejb.plugins.LogInterceptor.invoke(LogInterceptor.java:205)
at org.jboss.ejb.plugins.ProxyFactoryFinderInterceptor.invoke(ProxyFacto
ryFinderInterceptor.java:138)
at org.jboss.ejb.SessionContainer.internalInvoke(SessionContainer.java:6
48)
at org.jboss.ejb.Container.invoke(Container.java:960)
at sun.reflect.GeneratedMethodAccessor128.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatch
er.java:155)
at org.jboss.mx.server.Invocation.dispatch(Invocation.java:94)
at org.jboss.mx.server.Invocation.invoke(Invocation.java:86)
at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.
java:264)
at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:659)
at org.jboss.invocation.unified.server.UnifiedInvoker.invoke(UnifiedInvo
ker.java:231)
at sun.reflect.GeneratedMethodAccessor137.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatch
er.java:155)
at org.jboss.mx.server.Invocation.dispatch(Invocation.java:94)
at org.jboss.mx.server.Invocation.invoke(Invocation.java:86)
at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.
java:264)
at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:659)
at javax.management.MBeanServerInvocationHandler.invoke(MBeanServerInvoc
ationHandler.java:288)
at $Proxy14.invoke(Unknown Source)
at org.jboss.remoting.ServerInvoker.invoke(ServerInvoker.java:809)
at org.jboss.remoting.transport.socket.ServerThread.processInvocation(Se
rverThread.java:608)
at org.jboss.remoting.transport.socket.ServerThread.dorun(ServerThread.j
ava:420)
at org.jboss.remoting.transport.socket.ServerThread.run(ServerThread.jav
a:173)
09:26:18,260 ERROR [ADAPTERS] Class/Method: tcADP/getClasses encounter some prob
lems: {1}
java.lang.NullPointerException
at com.thortech.xl.dataobj.util.tcSortUtil.sortAscending(Unknown Source)
at com.thortech.xl.dataobj.util.tcRemoteFileDiscovery.getClasses(Unknown
Source)
at com.thortech.xl.dataobj.tcADP.getClasses(Unknown Source)
at com.thortech.xl.ejb.databeansimpl.tcADPBean.getClasses(Unknown Source
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.jboss.invocation.Invocation.performCall(Invocation.java:359)
at org.jboss.ejb.StatefulSessionContainer$ContainerInterceptor.invoke(St
atefulSessionContainer.java:598)
at org.jboss.ejb.plugins.SecurityInterceptor.invoke(SecurityInterceptor.
java:168)
at org.jboss.resource.connectionmanager.CachedConnectionInterceptor.invo
ke(CachedConnectionInterceptor.java:158)
at org.jboss.ejb.plugins.StatefulSessionInstanceInterceptor.invoke(State
fulSessionInstanceInterceptor.java:333)
at org.jboss.ejb.plugins.CallValidationInterceptor.invoke(CallValidation
Interceptor.java:63)
at org.jboss.ejb.plugins.AbstractTxInterceptor.invokeNext(AbstractTxInte
rceptor.java:121)
at org.jboss.ejb.plugins.TxInterceptorCMT.runWithTransactions(TxIntercep
torCMT.java:350)
at org.jboss.ejb.plugins.TxInterceptorCMT.invoke(TxInterceptorCMT.java:1
81)
at org.jboss.ejb.plugins.LogInterceptor.invoke(LogInterceptor.java:205)
at org.jboss.ejb.plugins.ProxyFactoryFinderInterceptor.invoke(ProxyFacto
ryFinderInterceptor.java:138)
at org.jboss.ejb.SessionContainer.internalInvoke(SessionContainer.java:6
48)
at org.jboss.ejb.Container.invoke(Container.java:960)
at sun.reflect.GeneratedMethodAccessor128.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatch
er.java:155)
at org.jboss.mx.server.Invocation.dispatch(Invocation.java:94)
at org.jboss.mx.server.Invocation.invoke(Invocation.java:86)
at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.
java:264)
at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:659)
at org.jboss.invocation.unified.server.UnifiedInvoker.invoke(UnifiedInvo
ker.java:231)
at sun.reflect.GeneratedMethodAccessor137.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.jboss.mx.interceptor.ReflectedDispatcher.invoke(ReflectedDispatch
er.java:155)
at org.jboss.mx.server.Invocation.dispatch(Invocation.java:94)
at org.jboss.mx.server.Invocation.invoke(Invocation.java:86)
at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.
java:264)
at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:659)
at javax.management.MBeanServerInvocationHandler.invoke(MBeanServerInvoc
ationHandler.java:288)
at $Proxy14.invoke(Unknown Source)
at org.jboss.remoting.ServerInvoker.invoke(ServerInvoker.java:809)
at org.jboss.remoting.transport.socket.ServerThread.processInvocation(Se
rverThread.java:608)
at org.jboss.remoting.transport.socket.ServerThread.dorun(ServerThread.j
ava:420)
at org.jboss.remoting.transport.socket.ServerThread.run(ServerThread.jav
a:173)
what could be the reason. do i need to make some adjustments in package or class name or it could be anything. i did as exactly above.

Disabling OIM User

Hello Experts,
this is our problem:
- we disable an OIM user (so his Resources results disabled)
- we do a change in disabled user's attributes
- the disabled resources still have provisioning events, and the change done in OIM user is transmitted to target systems
Why a change on disabled user's attributes is still provisioned also if user's resources are disabled??
Thanks in advance,
Best Regards
AT

Thanks for your answer,
I examined the ProcessDefinition for SAP ECC resource, I found the standard adapter "SAPU Modify User" that is invoked during the update process. Its class seems to be oracle.iam.connectors.sap.usermgmt.integration.SAPUMUtilUserProvisionManager from SAP.jar, but are you sure that is a good idea to modify a standard class?
Anyway I don't know the path to get SAP.jar...
Could you suggest me some tutorial?
Sorry but I'm a newbe..
Thanks and Best Regards,
AT

[OIM 9.1.0.2] Access Policy being evaluated to an OIM user disabled.

Hi Gurus,
I have an Access Policy being evaluated and provisioning resource (AD) to an OIM user disabled.
Any tip on what I should take a look?
Thanks in advance.

Hi all,
I have configured out the XL.EvaluateMembershipForInactiveUser System Property as TRUE, but the membership rule does not get evaluated for disabled users. So the user still remain into the group. I have restarted the OIM.
I need to active the Evaluate User Policies schedule task for this configuration be effective. Or should I do something more?
Thanks a lot.

Disables AD User account in OIM 9.1 still user can access its account

The following issue is happing on OIM Version: 9.1.0.1866.25
When disabling a single AD resource, it will appear on IdM in status as Disabled, even though it remains accessible by the user. No change of password occurs.
Where should I check and how can I fix that.
Kind Regards,
Silviu

What task is attached to Disable of user? Ideally we have an adapter attached to disable user who disables user in target AD system when fired. Login to design console, open you process definition and open disable user task to see what adapter is attached.
regards,
GP
Edited by: Gyanprakash Pandey on Feb 2, 2012 4:33 AM

Disable OID User account after 90 days of inactivity - OIM

Hello there,
I have a requirement where I have to disable a users account if he/she has not logged in since last 90 days into our environment(OID). The users are authenticated via OAM when they are logging in. Does anybody has any idea which attribute in which object class in OID needs to be checked for the last login attempt made by the user and what is the datatype of the same? Is it a date that I can compare after making a initial LDAP context to OID and pointing to each single user?
Really need a solution for this. Please respond.
Many Thanks,
- oidm.

Check the schema description at:
http://download.oracle.com/docs/cd/B28196_01/idmanage.1014/b25348/schema.htm#CFHCGFCC
You create a code that runs daily, check for the last login dates and, if is older than 90 days, you disable the OID user.

OIM 10g: Best practice for updating OIM user status from target recon?

We have a requirement, where we need to trigger one or more updates to the OIM user record (including status) based on values pulled in from a target resource recon from an LDAP. For example, if an LDAP attribute "disable-flag=123456" then we want to disable the OIM user. Other LDAP attributes may trigger other OIM user attribute changes.
I think I need to write a custom adapter to handle "recon insert received" and "recon update received" events from the target recon, but wanted to check with the community to see if this was the right approach. Would post-insert/post-update event handlers be a better choice?

Thanks Nishith. That's along the lines of what I was thinking. The only issue in my case is that I might need to update additional custom attributes on the OIM User in addition to enable/disable. Because of that requirement, my thought was to call the API directly from my task adapter to do the attribute updates in addition to the enable/disable. Does this seem like a sound approach?

OIM Cannot uncomplete a completed task. OIM User Enable

Hey Guys,
I try to Enabled a Disabled user using the OIM user interface.
When doing it I have an error coming back:
DOBJ.SCHTM_INVALID_COMPLETED_CHANGE
Cannot uncomplete a completed task.
The logs shows:
ERROR,08 Mar 2011 13:28:45,806,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/updateDataSetValuePost encounter some problems: Adapter Execution Error: updateDataObjFieldValuePost: error updating usr_disabled
ERROR,08 Mar 2011 13:28:45,807,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/updateUserInfo encounter some problems: Adapter Execution Error: error updating Disabled
Any idea where this can come from ?

Hi
If you will simply disable or enable user on OIM user profile, it won't give any error, if it is not attached with any resource object.
I think, provisioning process has been attached with this user and you are going to enable, and one of the resource object is already enabled or data inconsistent.
Will you provide user details for resource object and code?

Disable Create User Process Task

Hi,
I am provisioning resource through code using OIM Client API, however i need to disable "Create User" Process Task so that it does not execute at the time of resource provisioning. We need to produce affect similar to target reconciliation. How can it be disabled?
UZ

In the design console, go to respective process definition , go to the Create user task and uncheck the "Required for Completion" box and check the Conditional box.
Hope this will work.

Is there a way to disable OIM entity adapters while doing batch upload ?

Hi experts,
I have an adpater to generate UserID from a sequence based on user-type for creation of OIM users thru web UI.
I have attached this to Users form in data object manager.
We also have a 3-step batch bulk procedure from CSV file which checks data enterd, generates pword email etc etc and builds CSV file with records to be inserted.
In the 3rd step, scheduled task runs with CSV file as input and creates users in OIM DB.
The problem is the entity adapters are also getting triggerd which generate another UserID for each user created.
This leads to loss in sequence numbers.
Is there any way of disabling this ?? We need to have both in place, but this conflict should not arise ..
Please advice.
Regards,
Chetan

Even if i check the value of that UDF and execute the code to generate UserID based on that value,the function still has to return a value right ??Attach entity adapter at Post Insert.
Create UDF with Default value "CSV".
Add one more parameter in your java class which is responsible for generating userid.
You can directly map UDF with Class Parameter.
if (UDF == CSV){
Don't Generate
else {
Generate with your logic
And if that function is getting called for every user record in the CSV file, then i cant return a dummy value for it as well .You can use update User API of tcUserOperations

Disabling Xellerate Users

My situation is as follows:
1. I have a trusted recon setup between OIM and Oracle Ebus Employee Records. (Works great)
2. I have the status of the Employee Record from Ebiz reconciled into a UDF on the Xellerate user
3. When the value of the UDF (for discussion's sake) is Leave of Absence (normally it is Active for a normal employee that is a current hire) I want to disable the corresponding Xellerate User record so that I can trigger the disable events in all of that Xellerate User's resources.
4. The disable process task in each resource's provisioning process will be basically create a random pwd and send it to the app. (Already works when I manually disable each resource from the OIM Web Console)
So #3 above is what I need help on. If I can have the Xellerate User disabled based on a reconciled field value then OIM can then auto disable all of the user's provisioned resources which will call my pwd generator task which would send a random pwd to each resource effectively disabling the user in each of his provisioned resources when he goes on Leave of Absence.

One simple way to implement this is to put some code in an event handler that you attach on update on the USR form that checks the "Leave of Absence" value.
If you prefer to run this at a specific time instead of "at change" you can package it in a scheduled task that either checks all users or just the users that have been updated since last run (USR table has the USR_UPDATE field, could potentially be gotten with APIs as well)
Hope this helps
/M

We have a long list of disabled/deleted users in AD Somehow, they are still appeared as active user in Sharepoint Online. How do we get rid of those list? Hope you can advice. Thanks.

we have a long list of disabled/deleted users in AD
Somehow, they are still appeared as active user in Sharepoint Online.
How do we get rid of those list?
Hope you can advice. Thanks.

SharePoint does not remove users from SharePoint permissions just because they were deleted/disabled in AD. This is to maintain referential integrity. In fact, when you delete a user from SharePoint, that user remains in the SharePoint content database,
just marked as deleted.
They do not have access to SharePoint given their account is deleted/disabled. But as far as automatically managing this, I'm not aware of a tool. On-prem there is Metalogix ControlPoint which does a great job of this, I haven't explored the O365 options.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Error while trying to provision OIM user to Active Directory using SSL

Hi All,
I am able to see the users through LDAP browser using SSL but am getting the following error while trying to provision OIM users to AD using SSL.
I am using Microsoft Active Directory connector type 9.11.
Response: Connection Error encountered
Response Description: Error encountered while connecting to target system
I did some testing using "Diagnostic Dashboard" and the following are the results.
Test Name: Target System SSL Trust Verification: Passed
Test Name: Test Basic Connectivity: Failed
Exceptions:
ITResource information values are not correct. Enter the correct values.
java.lang.reflect.InvocationTargetException
javax.naming.CommunicationException: simple bind failed:
unable to find valid certification path to requested target.Test Name: Test Provisioning:Failed
Note: Without SLL all the above tests got Passed.
Can anybody help me out from this issue.
Thanks in advance.
Pradeep Kumar.

I am able to connect to AD using 636 port number from LDAP browser and as the following test got Passed i think that my certificatee should be correct.
Test Name: Target System SSL Trust Verification.
Input Parameters
Target System: idm.orademo.com
Port: 636 Certificate Store
Location: /usr/java/jdk1.6.0_14/jre/lib/security/cacerts
Result : Passed
ITResource Values:
ADAM LockoutThreshold Value
ADGroup LookUp Definition     Lookup.ADReconciliation.GroupLookup
Admin FQDN     cn=Administrator,cn=Users,dc=orademo,dc=com
Admin Password     *******
Allow Password Provisioning     yes
AtMap ADGroup     AtMap.ADGroup
AtMap ADUser     AtMap.AD
Invert Display Name     no
Port Number     636
Remote Manager Prov Lookup     AtMap.AD.RemoteScriptlookUp
Remote Manager Prov Script Path
Root Context     dc=orademo,dc=com
Server Address     idm.orademo.com
Target Locale: TimeZone     GMT
UPN Domain     orademo.com
Use SSL     yes
isADAM     no
isLookupDN     no
isUserDeleteLeafNode     no
Thansk & Regards,
Pradeep Kumar.

Problems while provisioning OIM user to AD

Hello,
My OIM version is 9.1.0.1 & AD version is 9.1.1.4
I want to provision OIM user to AD,so before provisioning i ran AD Group Lookup Recon &
AD Organization Lookup Recon .
When i tried to provision AD User to OIM user ,status=provisioning where System Validation was
completed & create user was rejected & there was no response description.
Following is the error which i got on console : java.lang.reflect.InvocationTargetException
Thanks & Regards
Rahul Shah

IT Resource Parameters :
ADAM LockoutThreshold Value     5
ADGroup LookUp Definition     Lookup.ADReconciliation.GroupLookup
Admin FQDN     CN=Administrator,CN=Users,DC=proservdemo,DC=com
Admin Password     *******
Allow Password Provisioning     yes
AtMap ADGroup     AtMap.ADGroup
AtMap ADUser     AtMap.AD
Invert Display Name     no
Port Number     389
Remote Manager Prov Lookup     AtMap.AD.RemoteScriptlookUp
Remote Manager Prov Script Path
Root Context     DC=proservdemo,DC=com
Server Address     IP Address
Target Locale: TimeZone     GMT
UPN Domain     proservdemo.com
Use SSL     no
isADAM     no
isUserDeleteLeafNode     no
& here is the exception which i see on console :
Running GETINVERTDISPLAYNAMEVALUE
Target Class = java.lang.String
Running CONCATFIRSTANDLAST
Target Class = com.thortech.xl.util.adapters.tcUtilStringOperations
Running GETINVERTDISPLAYNAMEVALUE
Target Class = java.lang.String
Running CONCATFIRSTANDLAST
Target Class = com.thortech.xl.util.adapters.tcUtilStringOperations
Running CONCATDOMAIN
Target Class = com.thortech.xl.util.adapters.tcUtilStringOperations
Running CONCATUSERLOGINWITHDOMAIN
Target Class = com.thortech.xl.util.adapters.tcUtilStringOperations
MessageDateFieldBean, localName='messageDateField': oracle.cabo.image: Initializ
ing image cache: D:\Oracle\OIM\xellerate\OIMApplications\WLXellerateFull.ear\xlW
ebApp.war\cabo\images\cache\ ...
MessageDateFieldBean, localName='messageDateField': oracle.cabo.image: Loading i
mage 0 of 3 from image cache: D:\Oracle\OIM\xellerate\OIMApplications\WLXellerat
eFull.ear\xlWebApp.war\cabo\images\cache\
MessageDateFieldBean, localName='messageDateField': oracle.cabo.image: Finished
initializing image cache: D:\Oracle\OIM\xellerate\OIMApplications\WLXellerateFul
l.ear\xlWebApp.war\cabo\images\cache\
Running ISADAM
Target Class = java.lang.String
Running Get Attribute Map
Running AD Create User
java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpADCSCREATEUSER.ADCREATEUSER(adpADCSCREATEUSER.java:224)
at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpADCSCREATEUSER.implementation(adpADCSCREATEUSER.java:91)
at com.thortech.xl.client.events.tcBaseEvent.run(Unknown Source)
at com.thortech.xl.dataobj.tcDataObj.runEvent(Unknown Source)
at com.thortech.xl.dataobj.tcScheduleItem.runMilestoneEvent(Unknown Source)
at com.thortech.xl.dataobj.tcScheduleItem.eventPostInsert(Unknown Source)
at com.thortech.xl.dataobj.tcDataObj.insert(Unknown Source)
at com.thortech.xl.dataobj.tcDataObj.save(Unknown Source)
at com.thortech.xl.dataobj.tcORC.insertNonConditionalMilestones(UnknownSource)
at com.thortech.xl.dataobj.tcORC.completeSystemValidationMilestone(Unknown Source)
at com.thortech.xl.dataobj.tcOrderItemInfo.completeCarrierBaseMilestone(Unknown Source)
at com.thortech.xl.dataobj.tcOrderItemInfo.eventPostInsert(Unknown Source)
at com.thortech.xl.dataobj.tcUDProcess.eventPostInsert(Unknown Source)
at com.thortech.xl.dataobj.tcDataObj.insert(Unknown Source)
at com.thortech.xl.dataobj.tcDataObj.save(Unknown Source)
at com.thortech.xl.dataobj.tcTableDataObj.save(Unknown Source)
at com.thortech.xl.ejb.beansimpl.tcFormInstanceOperationsBean.setProcessFormData(Unknown Source)
at com.thortech.xl.ejb.beansimpl.tcFormInstanceOperationsBean.setProcessFormData(Unknown Source)
at com.thortech.xl.ejb.beans.tcFormInstanceOperationsSession.setProcessFormData(Unknown Source)
at com.thortech.xl.ejb.beans.tcFormInstanceOperations_2j82mm_EOImpl.setProcessFormData(tcFormInstanceOperations_2j82mm_EOImpl.java:1245)
at Thor.API.Operations.tcFormInstanceOperationsClient.setProcessFormData(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at Thor.API.Base.SecurityInvocationHandler$1.run(Unknown Source)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
at weblogic.security.Security.runAs(Security.java:41)
at Thor.API.Security.LoginHandler.weblogicLoginSession.runAs(Unknown Source)
at Thor.API.Base.SecurityInvocationHandler.invoke(Unknown Source)
at $Proxy68.setProcessFormData(Unknown Source)
at com.thortech.xl.webclient.actions.DirectProvisionUserAction.handleVerifyProcessData(Unknown Source)
at com.thortech.xl.webclient.actions.DirectProvisionUserAction.goNext(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.apache.struts.actions.DispatchAction.dispatchMethod(DispatchAction.java:280)
at com.thortech.xl.webclient.actions.tcLookupDispatchAction.execute(Unknown Source)
at com.thortech.xl.webclient.actions.tcActionBase.execute(Unknown Source)
at com.thortech.xl.webclient.actions.tcAction.execute(Unknown Source)
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:484)
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:274)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:525)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300)
at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at com.thortech.xl.webclient.security.SecurityFilter.doFilter(Unknown Source)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.doIt(WebAppServletContext.java:3684)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3650)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2268)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1446)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
Caused by: java.lang.NullPointerException
at com.thortech.xl.integration.ActiveDirectory.tcUtilADTasks.createUser(Unknown Source)
... 68 more
com.thortech.xl.dataobj.util.tcAdapterTaskException
at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpADCSCREATEUSER.ADCREATEUSER(adpADCSCREATEUSER.java:230)
at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpADCSCREATEUSER.implementation(adpADCSCREATEUSER.java:91)
at com.thortech.xl.client.events.tcBaseEvent.run(Unknown Source)
at com.thortech.xl.dataobj.tcDataObj.runEvent(Unknown Source)
at com.thortech.xl.dataobj.tcScheduleItem.runMilestoneEvent(Unknown Source)
at com.thortech.xl.dataobj.tcScheduleItem.eventPostInsert(Unknown Source)
at com.thortech.xl.dataobj.tcDataObj.insert(Unknown Source)
at com.thortech.xl.dataobj.tcDataObj.save(Unknown Source)
at com.thortech.xl.dataobj.tcORC.insertNonConditionalMilestones(UnknownSource)
at com.thortech.xl.dataobj.tcORC.completeSystemValidationMilestone(Unknown Source)
at com.thortech.xl.dataobj.tcOrderItemInfo.completeCarrierBaseMilestone(Unknown Source)
at com.thortech.xl.dataobj.tcOrderItemInfo.eventPostInsert(Unknown Source)
at com.thortech.xl.dataobj.tcUDProcess.eventPostInsert(Unknown Source)
at com.thortech.xl.dataobj.tcDataObj.insert(Unknown Source)
at com.thortech.xl.dataobj.tcDataObj.save(Unknown Source)
at com.thortech.xl.dataobj.tcTableDataObj.save(Unknown Source)
at com.thortech.xl.ejb.beansimpl.tcFormInstanceOperationsBean.setProcessFormData(Unknown Source)
at com.thortech.xl.ejb.beansimpl.tcFormInstanceOperationsBean.setProcessFormData(Unknown Source)
at com.thortech.xl.ejb.beans.tcFormInstanceOperationsSession.setProcessFormData(Unknown Source)
at com.thortech.xl.ejb.beans.tcFormInstanceOperations_2j82mm_EOImpl.setProcessFormData(tcFormInstanceOperations_2j82mm_EOImpl.java:1245)
at Thor.API.Operations.tcFormInstanceOperationsClient.setProcessFormData(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at Thor.API.Base.SecurityInvocationHandler$1.run(Unknown Source)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
at weblogic.security.Security.runAs(Security.java:41)
at Thor.API.Security.LoginHandler.weblogicLoginSession.runAs(Unknown Source)
at Thor.API.Base.SecurityInvocationHandler.invoke(Unknown Source)
at $Proxy68.setProcessFormData(Unknown Source)
at com.thortech.xl.webclient.actions.DirectProvisionUserAction.handleVerifyProcessData(Unknown Source)
at com.thortech.xl.webclient.actions.DirectProvisionUserAction.goNext(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.apache.struts.actions.DispatchAction.dispatchMethod(DispatchAction.java:280)
at com.thortech.xl.webclient.actions.tcLookupDispatchAction.execute(Unknown Source)
at com.thortech.xl.webclient.actions.tcActionBase.execute(Unknown Source)
at com.thortech.xl.webclient.actions.tcAction.execute(Unknown Source)
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:484)
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:274)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:525)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300)
at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at com.thortech.xl.webclient.security.SecurityFilter.doFilter(Unknown Source)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.doIt(WebAppServletContext.java:3684)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3650)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2268)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1446)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
& is AD version 9.1.1.4 compatible with OIM 9.1.0.1
Thanks & regards
Rahul Shah

Delete oimGroup membership of the oim user using Script (oim 9.1).

Hi All,
I want to remove oim users' particular oim group membership, Is there any problem, if I use the following script to delete user group information from USg table?
delete from usg where usr_key in (select usr_key from usr where usr_login in ('xxx','yyy')) and ugp_key=31
Note: In our case, No policies,membershiprules are assigned to this oim group (we defined gruops only) and env is oim 9.1.
Can any one confirm this. Or if there is nay problem, please let us know.
Thanks.
Edited by: user13285646 on Jul 28, 2011 11:01 PM

Thanks Rajiv.

Disable OIM users

Similar Messages

Maybe you are looking for