Doubts in OIM

Hi,
I'm a new user to OIM.I'm in a very basic level in OIM.So can u tell me the meaning for some of the terms used in OIM..
What is meant by Reconciliation?What is the use of it?
What is meant by Adapter?For what it is used,why do we need to integrate it to the task?
What is the Auto Pre-Populate in process Definition form in OIM Client?
What is meant by Data Sink in Data Flow(Data Flow-Add Field Map-Data Sink)?

Hi,
I will recommend to read design console guide and tool reference guide in documentation section of OIM.It will give you some insight of what you are looking for.For now let me explain you terms that you asked for.
1.Reconciliation :Reconciliation is a process by which you synchronize your target system and OIM.It can be of two type one is trusted source recon and second is target source recon.Trusted source recon where you sync the identity in OIM which means creating/updating/deleting OIM user from trusted source.Trusted source can be database,AD,OID or any thing.Traget recon is the process where you synchronize OIM identity access to various resource or target system.
2. Adapter: Adapter is the java code use to connect and modify the details in target system.
3.Auto-Pre-pop- In process form if you want to populate few field automatically then you click on auto-pre-pop.For that you will have to create a adapter of type pre-pop and write your logic to populate the particular field in process form.
4.Data-Sink.If you have both resource form and process form and you want data to flow from object form to process form then you need to use data sink where you do one to one mapping.Resource form is the one which is used for request and presented to requester to fill out the information.
Please let me know if you need any more info.
Regards
Nitesh

Similar Messages

  • Doubt about OIM

    Hi all,
    I've integrated OIM with Oracle LDAP by OID connector,and created user accounts through OIM,then provisioned these user accounts to LDAP.Now,I want to know,when i retrieve users on OIM admin console,can OIM make use of
    LDAP to achieve query?Why ask this,because I know OIM has its own repository which is assigned when install.Who
    can give me some interpretation?
    Thanks.

    Hi, there are many different products in the identity management sector of oracle.
    There is Oracle Identity Management infrastructure.
    This combines products by oracle to host an internet directory. OID=Oracle internet directory)
    A Directory where user, group information are stored and you can use ldap to access these information.
    To store the information a database optimized for querying information is needed (So a database is part of oracle identity management infrastructure)
    When you have created your identity store you can let your applications authenticate and authorize their users against your ldap storage(OID)
    OIM is not an identity store used to provision user identities to other systems, with a small workflow enginge and a lot of auditing features need for compliance reasons.
    i.e. If you have a HR System and a member of the hr department enters the information of a new employee, that needs an account in the company mail system, SAP system and in your OID to be able to use the applications based on the users stored in OID.
    So then u can use oim to read the HR System user accounts and let OIM create the mail store, the SAP account and the oid account for you.
    All actions are audited and can be restricted with an approval workflow.
    When the user leaves your company and the account is disabled or deleted in the hr system, oim takes care and disables or deletes the account in the mail system, in the sap system and in the oid.
    Hope this makes Identity Management by Oracle a little bit clearer.

  • Verify SAP HR connector connection with SAP Target system - OIM 11.1.2

    Hi All,
    We are using SAP ER 9.1.2 connector and configured as follows,
    1) Installed SAP ER connector from Admin console (In oim db Common.jar, SAPCommon.jar and SAPER.jar files are created)
    2) The connector guide says to copy sapjco3.jar and sapidoc3.jar shud be placed into Oracle_home/Xellerate/ThirdParty folder. As we r using OIM 11.1.2 placed it in Oracle_IDM1/server/ThirdParty folder. Also Uploaded Thirdparty file into oim db using UploadJars.sh.
    3) copied libsapjco3.so file into /usr/local/jco directory and added the same path to LD_LIBRARY_PATH environment varialble
    4) Restarted OIM server
    5) To check if SAPJCo is correctly installed, ran below command
    java –jar JCO_DIRECTORY/sapjco3.jar
    java –classpath JCO_DIRECTORY/sapjco3.jar com.sap.conn.jco.rt.About
    Doubt: In OIM 11.1.2 we upload files into oim db. So, how does running files in ThirdParty folder verifies SAPJCo installation.
    6) Configured SAP HR IT resource parameters as given by our SAP application team.
    7) Now Ran "SAP HRMS Employee Type Recon" scheduled job and facing below error,
         "oracle.iam.connectors.sap.common.util.SAPUtil : getJCOFunction() : Connect to message server host failed[[
         Connection parameters: TYPE=B DEST=10.60.1.83 MSHOST=FUSION-ECCQA.hdfcsldm.com GROUP=PUBLIC R3NAME=FPQ PCS=1
         ERROR service 'sapmsFPQ' unknown
         TIME Tue Apr 16 18:20:20 2013
         RELEASE 720
         COMPONENT NI (network interface)
         VERSION 40
         RC -3
         MODULE niuxi.c
         LINE 1814
         DETAIL NiPGetServByName: 'sapmsFPQ' not found
         SYSTEM CALL getaddrinfo
         COUNTER 1 "
    Please help me in configuring SAP connector
    Thanks in advance

    Hi.
    Have you solved this? I'm getting the same error and documentation is not clear.
    It says to add an entry to /etc/service (in my case there's a service using the same tcp port) and the copy a .ini file to "root" directory, which I understand is "/" in a linux system.
    Thank you.
    Alex

  • Problem OIM OID Ldap Sync Configuration in 11g.

    Hi Team,
    I am doing OIM and OID LDAP Sync configuration There It is failed in "Configuration Process" Step.
    and also in weblogic OIM Maganaged server in ADMIN mode not in running mode.
    please find the both logs.
    *********************************Weblogic Logs**********************************************
    Enter username to boot WebLogic server:weblogic
    Enter password to boot WebLogic server:
    <28-Sep-2012 14:07:44 o'clock BST> <Info> <Management> <BEA-141107> <Version: We
    bLogic Server 10.3.5.0 Fri Apr 1 20:20:06 PDT 2011 1398638 >
    <28-Sep-2012 14:07:47 o'clock BST> <Notice> <WebLogicServer> <BEA-000365> <Serve
    r state changed to STARTING>
    <28-Sep-2012 14:07:47 o'clock BST> <Info> <WorkManager> <BEA-002900> <Initializi
    ng self-tuning thread pool>
    <28-Sep-2012 14:07:48 o'clock BST> <Notice> <Log Management> <BEA-170019> <The s
    erver log file E:\Oracle\Middleware\user_projects\domains\IAM_domain\servers\oim
    server1\logs\oimserver1.log is opened. All server side log events will be writ
    ten to this file.>
    28-Sep-2012 14:07:56 oracle.security.am.common.nap.util.NAPLogger log
    SEVERE: Failed to communicate with any of configured Access Server, ensure that
    it is up and running.
    <28-Sep-2012 14:07:57 o'clock BST> <Notice> <Security> <BEA-090082> <Security in
    itializing using security realm myrealm.>
    <28-Sep-2012 14:08:04 o'clock BST> <Notice> <WebLogicServer> <BEA-000365> <Serve
    r state changed to STANDBY>
    <28-Sep-2012 14:08:04 o'clock BST> <Notice> <WebLogicServer> <BEA-000365> <Serve
    r state changed to STARTING>
    <28-Sep-2012 14:08:20 o'clock BST> <Warning> <oracle.jps.upgrade> <JPS-06003> <C
    annot migrate credential folder/key ADF/anonymous#oimBpelCredKey.Reason oracle.s
    ecurity.jps.service.credstore.CredentialAlreadyExistsException: JPS-01007: The c
    redential with map ADF and key anonymous#oimBpelCredKey already exists..>
    <28-Sep-2012 14:08:21 o'clock BST> <Warning> <oracle.adf.share.ADFContext> <BEA-
    000000> <Automatically initializing a DefaultContext for getCurrent.
    Caller should ensure that a DefaultContext is proper for this use.
    Memory leaks and/or unexpected behaviour may occur if the automatic initializati
    on is performed improperly.
    This message may be avoided by performing initADFContext before using getCurrent
    To see the stack trace for thread that is initializing this, set the logging lev
    el of oracle.adf.share.ADFContext to FINEST>
    <28-Sep-2012 14:08:24 o'clock BST> <Error> <Deployer> <BEA-149205> <Failed to in
    itialize the application 'oim [Version=11.1.1.3.0]' due to error oracle.iam.plat
    form.utils.OIMAppInitializationException:
    OIM application intialization failed because of the following reasons:
    oim-config.xml was not found in MDS Repository.
    Unable to find keystore ".xldatabasekey" in <DOMAIN_HOME>/config/fmwconfig/.
    Password for OIMSchemaPassword is not seeded in CSF.
    Password for xell is not seeded in CSF.
    Password for DataBaseKey is not seeded in CSF.
    Password for JMSKey is not seeded in CSF.
    Password for .xldatabasekey is not seeded in CSF.
    Password for default-keystore.jks is not seeded in CSF.
    Password for SOAAdminPassword is not seeded in CSF.
    oracle.iam.platform.utils.OIMAppInitializationException:
    OIM application intialization failed because of the following reasons:
    oim-config.xml was not found in MDS Repository.
    Unable to find keystore ".xldatabasekey" in <DOMAIN_HOME>/config/fmwconfig/.
    Password for OIMSchemaPassword is not seeded in CSF.
    Password for xell is not seeded in CSF.
    Password for DataBaseKey is not seeded in CSF.
    Password for JMSKey is not seeded in CSF.
    Password for .xldatabasekey is not seeded in CSF.
    Password for default-keystore.jks is not seeded in CSF.
    Password for SOAAdminPassword is not seeded in CSF.
    at oracle.iam.platform.utils.OIMAppInitializationListener.preStart(OIMAp
    pInitializationListener.java:145)
    at weblogic.application.internal.flow.BaseLifecycleFlow$PreStartAction.r
    un(BaseLifecycleFlow.java:282)
    at weblogic.security.acl.internal.AuthenticatedSubject.doAs(Authenticate
    dSubject.java:321)
    at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:
    120)
    at weblogic.application.internal.flow.BaseLifecycleFlow$LifecycleListene
    rAction.invoke(BaseLifecycleFlow.java:199)
    Truncated. see log file for complete stacktrace
    Caused By: oracle.iam.platform.utils.OIMAppInitializationException:
    OIM application intialization failed because of the following reasons:
    oim-config.xml was not found in MDS Repository.
    Unable to find keystore ".xldatabasekey" in <DOMAIN_HOME>/config/fmwconfig/.
    Password for OIMSchemaPassword is not seeded in CSF.
    Password for xell is not seeded in CSF.
    Password for DataBaseKey is not seeded in CSF.
    Password for JMSKey is not seeded in CSF.
    Password for .xldatabasekey is not seeded in CSF.
    Password for default-keystore.jks is not seeded in CSF.
    Password for SOAAdminPassword is not seeded in CSF.
    at oracle.iam.platform.utils.OIMAppInitializationListener.preStart(OIMAp
    pInitializationListener.java:145)
    at weblogic.application.internal.flow.BaseLifecycleFlow$PreStartAction.r
    un(BaseLifecycleFlow.java:282)
    at weblogic.security.acl.internal.AuthenticatedSubject.doAs(Authenticate
    dSubject.java:321)
    at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:
    120)
    at weblogic.application.internal.flow.BaseLifecycleFlow$LifecycleListene
    rAction.invoke(BaseLifecycleFlow.java:199)
    Truncated. see log file for complete stacktrace
    >
    <28-Sep-2012 14:08:24 o'clock BST> <Warning> <Munger> <BEA-2156203> <A version a
    ttribute was not found in element application in the deployment descriptor in E:
    \Oracle\Middleware\Oracle_IDM1\server\apps\spml-xsd.ear/META-INF/application.xml
    . A version attribute is required, but this version of the Weblogic Server will
    assume that the JEE5 is used. Future versions of the Weblogic Server will reject
    descriptors that do not specify the JEE version.>
    <28-Sep-2012 14:08:24 o'clock BST> <Warning> <Munger> <BEA-2156203> <A version a
    ttribute was not found in element application in the deployment descriptor in E:
    \Oracle\Middleware\user_projects\domains\IAM_domain\servers\oim_server1\tmp\_WL_
    user\spml-xsd\s8d2b9/META-INF/application.xml. A version attribute is required,
    but this version of the Weblogic Server will assume that the JEE5 is used. Futur
    e versions of the Weblogic Server will reject descriptors that do not specify th
    e JEE version.>
    <28-Sep-2012 14:08:24 o'clock BST> <Emergency> <Deployer> <BEA-149259> <Server '
    oim_server1' in cluster 'OIM_Cluster' is being brought up in administration stat
    e due to failed deployments.>
    Loading xalan.jar for XPathAPI.
    14:08:30 INFO [[STANDBY] ExecuteThread: '2' for queue: 'weblogic.kernel.Default
    (self-tuning)'] -
    ----------------- NEXAWEB SERVER LICENSE ------------------
    - Customer ID : 122
    - License type : Enterprise
    - Max unique IPs : unlimited
    - Max XUL sessions : unlimited
    - Max CPUs/server : unlimited
    - Clustering allowed : true
    - Expiration date : none
    Nexaweb Technologies Inc.(C)2000-2004. All Rights Reserved.
    Nexaweb Technologies Inc.
    10 Canal Park
    Cambridge, MA 02141
    Tel: 617.577.8100. Email: [email protected]
    14:08:31 INFO [[STANDBY] ExecuteThread: '2' for queue: 'weblogic.kernel.Default
    (self-tuning)'] - Clustering is OFF.
    14:08:31 INFO [[STANDBY] ExecuteThread: '2' for queue: 'weblogic.kernel.Default
    (self-tuning)'] - Servlet Engine: WebLogic Server 10.3.5.0 Fri Apr 1 20:20:06 PD
    T 2011 1398638 Oracle WebLogic Server Module Dependencies 10.3 Thu Mar 3 14:37:5
    2 PST 2011 Oracle WebLogic Server on JRockit Virtual Edition Module Dependencies
    10.3 Thu Feb 3 16:30:47 EST 2011
    14:08:31 INFO [[STANDBY] ExecuteThread: '2' for queue: 'weblogic.kernel.Default
    (self-tuning)'] - Servlet API Version: 2.5
    14:08:31 INFO [[STANDBY] ExecuteThread: '2' for queue: 'weblogic.kernel.Default
    (self-tuning)'] - Nexaweb Server Info = Nexaweb Server 3.3.1072
    14:08:31 INFO [[STANDBY] ExecuteThread: '2' for queue: 'weblogic.kernel.Default
    (self-tuning)'] - Nexaweb Server initialized successfully.
    <28-Sep-2012 14:08:34 o'clock BST> <Notice> <Log Management> <BEA-170027> <The S
    erver has established connection with the Domain level Diagnostic Service succes
    sfully.>
    <28-Sep-2012 14:08:34 o'clock BST> <Notice> <Cluster> <BEA-000197> <Listening fo
    r announcements from cluster using unicast cluster messaging>
    <28-Sep-2012 14:08:34 o'clock BST> <Notice> <Cluster> <BEA-000133> <Waiting to s
    ynchronize with other running members of OIM_Cluster.>
    <28-Sep-2012 14:09:04 o'clock BST> <Notice> <Server> <BEA-002613> <Channel "Defa
    ult[2]" is now listening on 127.0.0.1:14000 for protocols iiop, t3, CLUSTER-BROA
    DCAST, ldap, snmp, http.>
    <28-Sep-2012 14:09:04 o'clock BST> <Notice> <Server> <BEA-002613> <Channel "Defa
    ult[3]" is now listening on 0:0:0:0:0:0:0:1:14000 for protocols iiop, t3, CLUSTE
    R-BROADCAST, ldap, snmp, http.>
    <28-Sep-2012 14:09:04 o'clock BST> <Notice> <Server> <BEA-002613> <Channel "Defa
    ult[1]" is now listening on fe80:0:0:0:0:5efe:a2f:f22a:14000 for protocols iiop,
    t3, CLUSTER-BROADCAST, ldap, snmp, http.>
    <28-Sep-2012 14:09:04 o'clock BST> <Warning> <Server> <BEA-002611> <Hostname "UK
    SHWTOAP03A.skandia.co.uk", maps to multiple IP addresses: 10.47.242.42, 0:0:0:0:
    0:0:0:1>
    <28-Sep-2012 14:09:04 o'clock BST> <Notice> <Server> <BEA-002613> <Channel "Defa
    ult" is now listening on 10.47.242.42:14000 for protocols iiop, t3, CLUSTER-BROA
    DCAST, ldap, snmp, http.>
    <28-Sep-2012 14:09:04 o'clock BST> <Notice> <WebLogicServer> <BEA-000330> <Start
    ed WebLogic Managed Server "oim_server1" for domain "IAM_domain" running in Prod
    uction Mode>
    <28-Sep-2012 14:09:04 o'clock BST> <Notice> <WebLogicServer> <BEA-000365> <Serve
    r state changed to ADMIN>
    <28-Sep-2012 14:09:04 o'clock BST> <Notice> <WebLogicServer> <BEA-000360> <Serve
    r started in ADMIN mode>
    **********************************OIM OID Ldap Sync Configuration Logs****************************
    [2012-09-28T14:49:11.171+01:00] [as] [NOTIFICATION] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [[
    [OIM_CONFIG] Updating Ldap Sync Configuration
    [2012-09-28T14:49:11.171+01:00] [as] [TRACE:16] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [SRC_CLASS: LdapSync] [SRC_METHOD: configurationLdap] ENTRY
    [2012-09-28T14:49:11.171+01:00] [as] [TRACE] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [SRC_CLASS: oracle.as.install.oim.config.util.LdapSync] [SRC_METHOD: configurationLdap] Create the Database connection
    [2012-09-28T14:49:11.171+01:00] [as] [TRACE:16] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [SRC_CLASS: LdapSync] [SRC_METHOD: createDBConnection] ENTRY
    [2012-09-28T14:49:11.296+01:00] [as] [TRACE] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [SRC_CLASS: oracle.as.install.oim.config.util.LdapSync] [SRC_METHOD: configurationLdap] isLIBOVD:true
    [2012-09-28T14:49:11.312+01:00] [as] [TRACE:16] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [SRC_CLASS: LdapSync] [SRC_METHOD: closeDBConnection] ENTRY
    [2012-09-28T14:49:11.312+01:00] [as] [TRACE:16] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [SRC_CLASS: LdapSync] [SRC_METHOD: closeDBConnection] RETURN
    [2012-09-28T14:49:11.312+01:00] [as] [TRACE:16] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [SRC_CLASS: LdapSync] [SRC_METHOD: configurationLdap] RETURN
    [2012-09-28T14:49:11.312+01:00] [as] [NOTIFICATION] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [[
    Updated LDAP Server Details in mds schema
    [2012-09-28T14:49:11.312+01:00] [as] [TRACE:16] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [SRC_CLASS: LdapSync] [SRC_METHOD: configurationLdap] RETURN
    [2012-09-28T14:49:11.812+01:00] [as] [NOTIFICATION] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [OIM_CONFIG] Updated LDAPContainerRules.xml.
    [2012-09-28T14:49:11.812+01:00] [as] [TRACE:16] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [SRC_CLASS: mdsMetadata] [SRC_METHOD: loadEventhandler] RETURN
    [2012-09-28T14:49:14.687+01:00] [as] [NOTIFICATION] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [[
    [OIM_CONFIG] Created jobs using seedSchedulerData. Log location C:\Program Files\Oracle\Inventory\logs
    [2012-09-28T14:49:14.687+01:00] [as] [ERROR] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] File not found[[
    java.io.FileNotFoundException: File not found
         at java.util.zip.ZipFile.open(Native Method)
         at java.util.zip.ZipFile.<init>(ZipFile.java:117)
         at java.util.jar.JarFile.<init>(JarFile.java:135)
         at java.util.jar.JarFile.<init>(JarFile.java:72)
         at oracle.as.install.oim.config.util.RoleSODJarUtil.updateFile(RoleSODJarUtil.java:32)
         at oracle.as.install.oim.config.OIMConfigManager.configureOIM(OIMConfigManager.java:783)
         at oracle.as.install.oim.config.OIMConfigManager.doExecute(OIMConfigManager.java:538)
         at oracle.as.install.engine.modules.configuration.client.ConfigAction.execute(ConfigAction.java:335)
         at oracle.as.install.engine.modules.configuration.action.TaskPerformer.run(TaskPerformer.java:87)
         at oracle.as.install.engine.modules.configuration.action.TaskPerformer.startConfigAction(TaskPerformer.java:104)
         at oracle.as.install.engine.modules.configuration.action.ActionRequest.perform(ActionRequest.java:15)
         at oracle.as.install.engine.modules.configuration.action.RequestQueue.perform(RequestQueue.java:63)
         at oracle.as.install.engine.modules.configuration.standard.StandardConfigActionManager.start(StandardConfigActionManager.java:158)
         at oracle.as.install.engine.modules.configuration.boot.ConfigurationExtension.kickstart(ConfigurationExtension.java:81)
         at oracle.as.install.engine.modules.configuration.ConfigurationModule.run(ConfigurationModule.java:83)
         at java.lang.Thread.run(Thread.java:662)
    [2012-09-28T14:49:14.687+01:00] [as] [NOTIFICATION] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] [[
    [OIM_CONFIG] Failed configuration step Configure OIM Server
    [2012-09-28T14:49:14.702+01:00] [as] [ERROR] [] [oracle.as.install.engine.modules.configuration.standard.StandardConfigActionManager] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] One or More configurations failed. Exiting
    [2012-09-28T14:49:14.702+01:00] [as] [NOTIFICATION] [] [oracle.as.install.engine.modules.statistics] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] Install Adapter: Mark End for:CONFIG
    [2012-09-28T14:49:14.702+01:00] [as] [NOTIFICATION] [] [oracle.as.install.engine.modules.statistics] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] Install Adapter: Mark End for:INTERVIEW
    [2012-09-28T14:49:14.702+01:00] [as] [NOTIFICATION] [] [oracle.as.install.engine.modules.statistics] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] Install Adapter: Mark End for:INSTALL
    [2012-09-28T14:49:14.702+01:00] [as] [NOTIFICATION] [] [oracle.as.install.engine.modules.statistics] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] Install Adapter: Mark End for:COPY
    [2012-09-28T14:49:14.702+01:00] [as] [NOTIFICATION] [] [oracle.as.install.engine.modules.statistics] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] Install Adapter: Mark End for:LINK
    [2012-09-28T14:49:14.765+01:00] [as] [NOTIFICATION] [] [oracle.as.install.engine] [tid: 12] [ecid: 0000JcD8obD9pYjpp0_AiY1GPQHh000003,0] Setting valueOf(IS CONFIGURATION SUCCESSFUL) to:false. Value obtained from:USER
    [2012-09-28T15:11:21.461+01:00] [as] [NOTIFICATION] [] [oracle.as.install.engine] [tid: 11] [ecid: 0000JcD2jfD9pYjpp0_AiY1GPQHh000002,0] Setting valueOf(IS CONFIGURATION SUCCESSFUL) to:false. Value obtained from:USER
    [2012-09-28T15:11:27.914+01:00] [as] [NOTIFICATION] [] [oracle.as.install.engine] [tid: 11] [ecid: 0000JcD2jfD9pYjpp0_AiY1GPQHh000002,0] Setting valueOf(IS CONFIGURATION SUCCESSFUL) to:false. Value obtained from:USER
    Regards,
    Ravi.

    Your log files too give some hint... Please verify whether following files like .xldatabasekey are present in your environment:-
    OIM application intialization failed because of the following reasons:
    oim-config.xml was not found in MDS Repository.
    Unable to find keystore ".xldatabasekey" in <DOMAIN_HOME>/config/fmwconfig/.
    Password for OIMSchemaPassword is not seeded in CSF.
    Password for xell is not seeded in CSF.
    Password for DataBaseKey is not seeded in CSF.
    Password for JMSKey is not seeded in CSF.
    Password for .xldatabasekey is not seeded in CSF.
    Password for default-keystore.jks is not seeded in CSF.
    Password for SOAAdminPassword is not seeded in CSF.
    I doubt whether OIM is properly installed in your environment otherwise .xldatabasekey would have been present in <DOMAIN_HOME>/config/fmwconfig..
    Also, as far as Weblogic starting in ADMIN mode is concerned, you may try to do the following...
    ps -eaf| grep AdminServer
    Kill the process
    Then remove the lok file. i.e. Lock files...
    rm -rf /home/oracle/Oracle/Middleware/user_projects/domains/oimdomain/servers/oim_server1/tmp/*oim_server1.lok*
    rm -rf /home/oracle/Oracle/Middleware/user_projects/domains/oimdomain/servers/soa_server1/tmp/*soa_server1.lok*
    rm -rf /home/oracle/Oracle/Middleware/user_projects/domains/oimdomain/servers/AdminServer/tmp/*AdminServer.lok*
    After that
    Take the backup of /home/oracle/Oracle/Middleware/user_projects/domains/<DOMAIN_HOME>/servers/AdminServer/data/ldap/ldapfiles (I mean CUT this folder and save it in Backup folder..
    Share the result with us....

  • OIM task Scheduler

    Hi guys,
    I have few doubts regarding OIM task scheduler:
    1) I have defined a class to run using task schedler everyday. I like to set the status of task scheduler to COMPLETED or FAILED after each run. How can I achieve this?
    2) Or I should not catch any exceptions in my code. So that it marks the task scheduler status as FAILED?
    I have gone through below link about status of task scheduler but can't make out anything:
    http://download.oracle.com/docs/cd/B31081_01/idmgr/b25940/oimadm.htm#CIADIAEJ

    Hi,
    I think that the BaseScheduledTask sets that status itself when it finishes its run. I've used "getStatusString" to set the task status during the reconciliation process.
    By the way, if the Scheduled status is not NONE or INACTIVE when it finishes the job, I think OIM won't let you start again the Scheduled task (someone correct me if I'm wrong, plz, at least it happens when it Stucks on "Running").
    In my case, "NONE" is the status that I get when the scheduled failed, and "INACTIVE" when succeed. So maybe you should try to throw the exception and see what happens.
    Regards,

  • Get IT Resouce  details in OIM 11g class

    Hi All,
    I'm new to OIM 11g and I need to get IT Resource Details in event handler code.In Earlier oim 9x version,I used to get this by using
    Hashtable hashtable = tcUtilXellerateOperations.getITAssetProperties(dataProvider, itResourceName);
    Same need to know in OIM 11g
    one more doubt,In oim 11g assets Event hanlder xml is like below and Postprocess-hanlder defined.
    <?xml version='1.0' encoding='UTF-8'?>
    <eventhandlers xmlns="http://www.oracle.com/schema/oim/platform/kernel" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.oracle.com/schema/oim/platform/kernel orchestration-handlers.xsd">
    *<postprocess-handler* class="oracle.iam.assets.eventhandlers.ContractorIDPostProcEventHandler" entity-type="User" operation="CREATE" name="ContractorIDPostProcEventHandler" stage="postprocess" sync="TRUE" order="100"/>
    </eventhandlers>
    in a blog http://fusionsecurity.blogspot.in/2011/09/oim-11g-event-handler-example.html, action-handler mentioned.
    <?xml version="1.0" encoding="UTF-8"?>
    <eventhandlers xmlns="http://www.oracle.com/schema/oim/platform/kernel" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.oracle.com/schema/oim/platform/kernel orchestration-handlers.xsd">
    *<action-handler* class="oracle.iam.demo.eventhandlers.UserDirectorEventHandler" entity-type="User" operation="CREATE" name="UserDirectorUpdate" stage="postprocess" order="1000" sync="FALSE"/>
    </eventhandlers>
    Which one we need to use while developing event handler.
    Thanks in advance
    Regards,
    Krish

    I'm new to OIM 11g and I need to get IT Resource Details in event handler code.In Earlier oim 9x version,I used to get this by using
    Hashtable hashtable = tcUtilXellerateOperations.getITAssetProperties(dataProvider, itResourceName);
    Same need to know in OIM 11gThis might help
    Thor.API.Operations.tcITResourceInstanceOperationsIntf itr = Platform.getService(Thor.API.Operations.tcITResourceInstanceOperationsIntf.class);
    HashMap hashmap = new HashMap();
    hashmap.put("IT Resources.Name", itresourcename);
    tcResultSet rss = itr.findITResourceInstances(hashmap);
    Long ll = rss.getLongValue("IT Resource.Key");
    System.out.println("IT Resource key***************** "+ ll);
    tcResultSet itResourceParams = itr.getITResourceInstanceParameters(ll);
    int count = itResourceParams.getRowCount();
    for(int i=0; i<count; i++)
    itResourceParams.goToRow(i);
    System.out.println("Parameter Name:::::: "+ itResourceParams.getStringValue("IT Resources Type Parameter.Name"));
    System.out.println("Parameter Value:::::: "+ itResourceParams.getStringValue("IT Resource.Parameter.Value"));
    //Compare the IT Resource parameter name and get the parameter value

  • OIM 11g error while running the scheduler

    Hi All,
    we have created on few custom schedulers to carry out trustetd recon and doing the create , modify and delete operations on OIM entities. all were running fine earlier. Now we started facing the below error while running any scheduler. Please find the OIM diagonostic logs below.
    scheduler status is not changing to running and scheduler logs and events r also not getting generated. please find the logs below.
    2012-09-04T11:03:38.355+05:30] [oim_server1] [NOTIFICATION] [IAM-0080006] [oracle.iam.platform.kernel.impl] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 11d1def534ea1be0:5b04d370:1398fc0c0cc:-8000-0000000000000067,0] [APP: oim#11.1.1.3.0] Orchestration process moved to failed stage, and the corresponding error is - {0}[[
    oracle.iam.platform.kernel.EventFailedException: Operation - UNSCHEDULE that is submitted as part of the orchestration is not supported.
    Completed orchestration with action result - oracle.iam.platform.kernel.EventFailedException: Operation - UNSCHEDULE that is submitted as part of the orchestration is not supported.
    [2012-09-04T11:03:38.430+05:30] [oim_server1] [NOTIFICATION] [IAM-1010010] [oracle.iam.platform.authz.impl] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 11d1def534ea1be0:5b04d370:1398fc0c0cc:-8000-0000000000000067,0] [APP: oim#11.1.1.3.0] ********** Entering the Authorization Segment with parameters:: LoggedInUserId = 1, target resourceID = null, Feature = SCHEDULER, Action = JOB_MODIFY **********
    [2012-09-04T11:03:38.430+05:30] [oim_server1] [NOTIFICATION] [IAM-1010029] [oracle.iam.platform.authz.impl] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 11d1def534ea1be0:5b04d370:1398fc0c0cc:-8000-0000000000000067,0] [APP: oim#11.1.1.3.0] OES Results found in cache with Key F: SCHEDULERS: 1P: JOB_MODIFYOESDefinition
    [2012-09-04T11:03:38.431+05:30] [oim_server1] [NOTIFICATION] [IAM-1010021] [oracle.iam.platform.authz.impl] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 11d1def534ea1be0:5b04d370:1398fc0c0cc:-8000-0000000000000067,0] [APP: oim#11.1.1.3.0] Validating the Internal Obligations: [InternalObligation: name: noop, values: [true], convertToObligation: false, InternalObligation: name: noop, values: [true], convertToObligation: false]
    [2012-09-04T11:03:38.431+05:30] [oim_server1] [NOTIFICATION] [IAM-1010022] [oracle.iam.platform.authz.impl] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 11d1def534ea1be0:5b04d370:1398fc0c0cc:-8000-0000000000000067,0] [APP: oim#11.1.1.3.0] ---------- The list of Internal Obligation is satisfied, returning TRUE ----------
    [2012-09-04T11:03:38.431+05:30] [oim_server1] [NOTIFICATION] [IAM-1010026] [oracle.iam.platform.authz.impl] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 11d1def534ea1be0:5b04d370:1398fc0c0cc:-8000-0000000000000067,0] [APP: oim#11.1.1.3.0] ********** Exiting the Authorization Segment with result Decision :PERMIT[[
    Obligations from policy: **********
    [2012-09-04T11:03:38.598+05:30] [oim_server1] [NOTIFICATION] [IAM-0080013] [oracle.iam.platform.kernel.impl] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 11d1def534ea1be0:5b04d370:1398fc0c0cc:-8000-0000000000000067,0] [APP: oim#11.1.1.3.0] Kernel executing default validation with process id, event id, entity and operation 709,251.0.JobDetails.UPDATE
    [2012-09-04T11:03:38.875+05:30] [oim_server1] [NOTIFICATION] [IAM-0080014] [oracle.iam.platform.kernel.impl] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 11d1def534ea1be0:5b04d370:1398fc0c0cc:-8000-0000000000000067,0] [APP: oim#11.1.1.3.0] Kernel executing default action handler with process id, event id, entity and operation 709,251.2,295,568.JobDetails.UPDATE.entityId=null
    [2012-09-04T11:03:38.875+05:30] [oim_server1] [NOTIFICATION] [IAM-0080001] [oracle.iam.platform.kernel.impl] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 11d1def534ea1be0:5b04d370:1398fc0c0cc:-8000-0000000000000067,0] [APP: oim#11.1.1.3.0] An error occurred while executing the kernel event handler.[[
    oracle.iam.platform.kernel.EventFailedException: Operation - UPDATE that is submitted as part of the orchestration is not supported.
         at oracle.iam.platform.kernel.impl.EntityDefaultActionHandler.execute(EntityDefaultActionHandler.java:53)
    thanks.

    I got one similar issue before. In my case was with event handler. It was a sintax issue.
    Example:
    I wrote this: <action-handler Class="...
    instead of this: <action-handler class="...
    So, in your case III suggest you to check if have any plugin invalid syntax and re-import your schedule task plugin.
    <oimplugins xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <plugins pluginpoint=.....
    <plugin pluginclass= .....
    </plugin>
    Let me know if you have any doubt.
    I hope this helps,
    Thiago Leoncio.

  • DB disk space problem with upgradation from oim 9.1 to oim 11.1.1.5

    Hi All,
    Aim: we have to upgrade oim9.1 to oim 11g, with new data cente ( we are doing this in DEV env)
    constraint: DB diskSpace is 30 GB
    As part of upgradation, we have to import the existing oim 9.1 Db to new DB, Here we faced the size problem, our Dev DB data size is 100GB (which is going to import into new DB), but new DB disk space is 30GB only.
    Which tables, do we need to truncate, so that It should not effect upgradtion( we should not miss, oim objects other than User/log inforamtion)?
    Do OIm11g(11.1.1.5.0) has any constraints over DB size with 30 GB?
    Please suggest me.
    Thanks.

    The UPA tables are audit related. I doubt you could truncate any of the others and not affect something else.
    -Kevin

  • Request Administrator isuse in OIM 11g

    I assignd one OIM user (12345) to role as "Request Administrator" and trying to search all the requests raised in OIM.
    I am not able to see all requests .It shows the requests only raised for 12345 user or raised by 12345 user but not other users request.
    Please let me know the reason.
    Thanks for help.

    user123456 wrote:
    What do you mean by Claim/acquire the task?There's a small button on top of the page in OIM UI which you can click to acquire the task to your self from some else.
    There must be some Role in OIM 11g who can manage all the tasks/requests irrespective of whether it's created by them or assign by them.I doubt if that's simple, why want one single role to manage everything while you are assigning it to some other? Assign it to this role always then!
    Do you have any idea about such kind of Role?No
    Thanks !!

  • Sending email to user using the notification template in OIM 11g

    Hi all
    I have created a Notification Template using web console in OIM 11g.
    Iam able to access the contents from notification template in my java code.
    But iam not able to find the correct api's to send email to user using the notification template
    (like tcEmailNotificationUtil using this class we can connect to email template created in design console and creating IT resourse we can send email to user using the method sendEmail).
    Waiting for your help and pointers
    Thanks and Regards
    Bipin patil

    Thanks GP!.
    But i have the same doubt here.
    "The Notification Event is defined through a XML file that must be loaded into MDS database." - in which path and in what name it should be.
    Because under /metadata/iam-features-notification, i couldnt see any event Xml present. I thought atleast we could see the existing OOB notification template's event xml files.
    Please let me know if you are aware.
    Thanks,
    Amudha

  • How to implement approval on password reset from OIM 9.1

    I am having an requirement where i need to implement Manager Approval on user's every password reset from OIM 9.1.02.
    Please help me out with your suggestions.
    Thanks,
    Kanav

    The thread was help full rajiv but i am still having some issue in the approch to follow:
    As per the thread we cannot use the Entity Adapter because:
    If you are thinking of using Entity Adapter on User form then it is not possible because whenever you change any value on User form, that will be updated in USR table without any Approval.
    So, if we go with the below appoach:
    *Event Handler Way:*
    Create Event Handler.
    You'll get OLD and NEW Values of that field.
    Capture those values and raise request for thsi Dummy RO with your code
    And use Error Handler to show Custom Message to Administrator that "Request Has Been Initiated for User Profile Modification".
    but i am having below doubts:
    1. If we are not having the Entiry Adapter then where we will do the mapping of fields that have been taken n the adapter?
    2. And how can i get the old value of the filed?

  • OIM 11g Entity Adapters

    Hi all,
    I have developed an Entity Adapter using Oracle Identity Manager Design Console which generates different account user ids against a user defined field on Process Form.
    Here I'll provide more details about my scenario.
    SCENARIO*
    a. OIM version: 11.1.1.5.0
    b. Process Form fields (Siebel Process Form):
    - User ID
    - First Name
    - Last Name
    .... [any other out of the box Siebel Connector field]
    - Anonymous Flag (this is a user defined field on Siebel Process Form)
    c. Entity Adapter
    - this adapter has an input variable which is Process Form user defined field "+Anonymous Flag+"
    - if "+Anonymous Flag+" is checked (true) then the adapter sets the return value to "*Anonymous*"
    - else if "+Anonymous Flag+" is uncheked (false) then the adapter sets the return value to "*NOT Anonymous*"
    - the adapter return variable is mapped to Process Form "+User ID+"
    - NOTE: the adapter return values are only for testing pourpose. In the future, the adapter should return two different syntax for User ID.
    For example in case of Anonymous Flag checked, account User ID should be +<surname>+ + "+_+" + +<name>+ + +<random_number>+; while in case of Anonymous Flag unchecked, account User ID should be <+company_name+> + <+random_number+>
    d. Access Policies
    - an access policy "+AP_for_Anonymous+" linked with a role "+ROLE_for_Anonymous+" that sets "+Anonymous Flag+" to checked (true)
    - an access policy "+AP_for_NOT_Anonymous+" linked with a role "+ROLE_for_NON_Anonymous+" that sets "+Anonymous Flag+" to unchecked (false)
    RESULTS*
    Assigning one of roles "+ROLE_for_Anonymous+" or "+ROLE_for_NON_Anonymous+", on Process Form, user defined field "+Anonymous Flag+" is valorized correctly, but Entity Adapter doesn't seems to work. In fact Process Form User ID remains empty.
    QUESTIONS*
    1. Are Entity Adapters associated with accounts supported in OIM 11g? I found a couple of posts that assert that Entity Adapters don't exist in OIM 11g (Event handlers are not getting invoked in oim 11g. or that state Entity Adapters are not supported with the User Form (Issue in adapters mapping in OIM 11g About this I found Entity Adapter Oracle documentation (http://docs.oracle.com/cd/E21764_01/doc.1111/e14309/creadp.htm#BABDHECI)
    2. If Entity Adapters are not applicabile to my scenario, can I use Event Handlers? If yes, what are the entity types that I can specify in event handler metadata xml file? For "event handler metadata xml file" I mean the following
    <action-handler class="com.test.sample" entity-type=????? operation="CREATE" name="Sample" stage="postprocess" order="1007" sync="TRUE"/>3. If Entity Adapters are not applicabile to my scenario, what are the operations that I can specify in event handler metadata xml file?
    Thank for your help,
    Daniele

    Entity Adapter still exist in 11g. Yes, you can use Event Handler .
    But why don't you use Process task/prepopulate adapter for your scenario. Try below
    1. You have some condition on which role is assigned. Based on same condition populate this Anonymous/ Not Anonymous(true/false) at user profile.
    2. write a pre-populate adapter to generate User ID. pass parameters Anonymous flag along with other user profile attribute(first name, last name..etc.) . Here based on flag you will be able to decide User ID.
    3. attach this pre-populate with process form.
    4. already you have two access policy which is fine. just edit both and remove the Anonymous flag value else can leave it as it is.
    Note: for populating Anonymous flag on user profile create a new UDF and try to populate in trusted recon.else write post process event handler for same which will execute before access policy. I mean the order of evethandler should be between 1003 to 1008
    If you have doubt let me know
    --nayan                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               

  • OIM 11g - Modification of GTC Connector not working

    Hi,
    We're using OIM 11.1.1.5.2, with the 9.1.0.5 Database Application Tables connector.
    Sometime ago we created the connector from the OIM advanced administrative console to run Full Reconciliation, because at that moment the users table did not have a field with the timestamp of the update for each user. Now, we're using a date field that was unused before as the modification date field, we even created a trigger on the target database to make sure all modifications are recorded.
    We went to the OIM advance administrative console again, manage connector, searched for our connector, then "Edit Parameters" and changed the "Timestamp Attribute" attribute to the date field, and we changed "Reconciliation Type" to "Incremental" on the same page. After that we saved the changes and the compilation of the connector ended without errors. I'm pretty sure it was modified because i had to re attach all prepopulate adapters and create are custom process task...
    The problem is, we ran the reconciliation after that, and it still runs the full recon. OIM still generates events for all users. Is there anything else we should do to change the reconciliation type? Are there any files needed to be edited or any table or lookup to make sure it changed? I couldn't find the place were the reconciliation query is kept for this connector.
    Thanks.

    Anyone's got any idea? I'll be happy with finding out which table or xml on the mds keeps the connector parameters, i know it has to get it somewhere because i doubt it is hardcoded on the jar when i create the connector.
    But i still can't find the place were they're stored, and even though i can see the timestamp attribute on the edit connector page, when i run the recon, the incrementalReconAttribute is null.
    APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: driver - Value: oracle.jdbc.driver.OracleDriver
    APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: url - Value: jdbc:oracle:thin:@idmgr11g:1521:mrdb
    APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: username - Value: test1
    APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: password - Value: *******
    APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: customizedQueries - Value:
    APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: useNativeQuery - Value: false
    APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: parentContainerName - Value: TEST1
    APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/convertCSVToArraylist entered.
    APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/convertCSVToArraylist: providerParams: TEST2
    APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/convertCSVToArraylist left.
    APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: childContainerTableNames - Value: [TEST2]
    APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: parentContainerUniqueKey - Value:
    *APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: incrementalReconAttribute - Value:*
    APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: dbDateFormat - Value: yyyy/MM/dd HH:mm:ss z

  • NameNotFoundException while reconciling OIM  from ldap

    Hi experts, please help me to resolve this OIM sync issue.
    When I ran LDAPConfigPostSetup.sh to reconcile OIM from OID all most all ldap entries are entered into OIM except few which are under cn=OracleContext. I am getting around 20 below messages :
    wls_oim1-diagnostic.log:javax.naming.NameNotFoundException: [LDAP: error code 32 - LDAP Error 32 : No Such Object]; remaining name 'cn=OracleDASConfiguration, cn=Groups,cn=OracleContext.
    In my ldap, the Distinguished Name is -- cn=OracleDASConfiguration, cn=Groups,cn=OracleContext,dc=example,dc=com.
    But few of them have been successfully synced with OIM and I see bunch of the roles in OIM console like :
    cn=iASAdmins,cn=Groups,cn=OracleContext,dc=example,dc=com
    cn=IAS & User Mgmt Application Admins,cn=OracleContext,dc=example,dc=com
    and many more.
    Kindly anybody help me why bunch of them have been successfully reconciled and some gave error. I do not think I need to udpate any xml file in this regard.
    thank you for your time.
    Jyothi

    When in doubt, please try to use the default values as much as possible...
    Hope it is development environment you are working on...
    I am pasting some of the default values.... in ldapconfig.props
    # OIMAdmin User Login
    # e.g.: OIMAdminUser=xelsysadm
    OIMAdminUser=
    So give xelsysadm.
    # Admin user name to connect to OID
    # e.g.: OIDAdminUsername=cn=orcladmin
    OIDAdminUsername=
    So give cn=orcladmin
    # Search base
    # e.g.: OIDSearchBase=dc=company,dc=com
    OIDSearchBase=
    So give dc=company,dc=com
    Hope you have kept the back up file.. Restore it and put all the default values as it is... cn=orcladmin is the super-most OID Admin just like xelsysadm is the super most OIM admin..
    Also as far as obUserAccountControl is concerned, you can find this attribute mentioned in Oracle_IDM1\idmtools\templates\oid in oam_user_write_acl.ldif and idm_xelsysadmin_user.ldif...
    Hopefully this information is helpful.

  • Not able to create users in OID through OIM

    HI,
    I am creating users in OIM and provisioning them to OID. The create user is working fine but provisioning is not working.
    The create user task is getting rejected with error message as :
    Response: Target Unavailable Error
    Response Description: Target server not available
    In the weblogic console its showing error as:
    INFO,24 Feb 2010 18:42:13,140,[XL_INTG.OID], Parameter Variables passed into co
    m.thortech.xl.integration.OID.tcUtilOIDUserOperations:createUser(S,S,S,S,S): are
    sContainerDN = ou=AGI(ENI UK Ltd),o=Shippers,dc=xoserve-apps,dc=com, sFirstName
    = testuser17, sLastName = testuser17, sUserDNParam = TESTUSER17,
    INFO,24 Feb 2010 18:42:13,156,[XL_INTG.OID],com.thortech.xl.integration.OID.uti
    l.tcUtilLDAPOperations : connectToAvailableOID() : SSL option is not selected in
    ITResource
    ERROR,24 Feb 2010 18:42:16,156,[XL_INTG.OID],===================================
    =================
    ERROR,24 Feb 2010 18:42:16,156,[XL_INTG.OID], ERROR in OID:connectToAvailableOID
    () CommunicationExceptionUnable to create Initial LDAP Context
    ERROR,24 Feb 2010 18:42:16,156,[XL_INTG.OID],===================================
    =================
    ERROR,24 Feb 2010 18:42:16,156,[XL_INTG.OID],===================================
    =================
    ERROR,24 Feb 2010 18:42:16,156,[XL_INTG.OID],10.224.29.51:389
    ERROR,24 Feb 2010 18:42:16,156,[XL_INTG.OID],===================================
    ERROR,24 Feb 2010 18:42:16,171,[XL_INTG.OID],com.thortech.xl.integration.OID.uti
    l.tcUtilLDAPOperations : disconnectFromLDAP() : : Unable to close LDAP Context.
    The context was probably not created, since it is null
    ERROR,24 Feb 2010 18:42:16,171,[XL_INTG.OID],===================================
    =================
    ERROR,24 Feb 2010 18:42:16,171,[XL_INTG.OID],===================================
    =================
    ERROR,24 Feb 2010 18:42:16,171,[XL_INTG.OID], ERROR in com.thortech.xl.integrati
    on.OID.tcUtilOIDUserOperations:createUser(S,S,S,S,S) NoInitialContextExceptionEr
    ror while connecting to target
    ERROR,24 Feb 2010 18:42:16,171,[XL_INTG.OID],===================================
    =================
    ERROR,24 Feb 2010 18:42:16,171,[XL_INTG.OID],===================================
    =================
    ERROR,24 Feb 2010 18:42:16,171,[XL_INTG.OID],com.thortech.xl.integration.OID.uti
    l.tcUtilLDAPOperations: Unable to close LDAP Context. The context was probably n
    ot created, since it is null
    ERROR,24 Feb 2010 18:42:16,171,[XL_INTG.OID],===================================
    =================
    Please help.
    Thanks in advance.

    Thank a zillion to both of you...
    It was connection problem. Somebody changed my OID's IP address.
    Now my users are getting provisioned.
    One more doubt how to give points to both of you. I dont know how to give points in this forum.

Maybe you are looking for

  • Adding DVD File to Library - File Name Changes

    When I add a DVD file name to my library, iTunes changes the name of the file. How do I retain the name of the file that is in my iTunes sub-directory?

  • Adobe Air Problem with SQL Lite

    Hi I am facing a strange, weired error.. and i am hating it SQLError: 'Error #3132: Data type mismatch.', details:'could not convert text value to numeric value.', operation:'execute', detailID:'2300' here is my code: stmt = new SQLStatement(); stmt.

  • Finding Driver report for adobe form

    Hi Guru's , I have a interface and form developed already. There must be a report that is also present that should run this form. Is it possible to find the Driver Prog using the Form name or interface name ? Please Help me out here. *URGENT* Thanks

  • Frame rate issue with AVCHD and CS4

    I've been using a Canon HG20 recently and the whole experience of AVCHD has been a nightmare. I finally have a computer that can handle playing the native files in the Premiere timeline but it looks like there's a problem with the frame rate. It was

  • How to create a blur between 2 objects

    I am trying to create a design showing a globe with an outline of Australia in the background with a map of Australia in the foreground with a blur between the 2 maps. I want to create an effect as if the continent was lifted up and off the planet an