Ensure AD provisioning before Exchange

Hi,
We need to develop a workflow for Exchange provisioning in OIM11g. Use case: Requestor requests for Exchange and after necessary approvals, Exchange is provisioned. But since Exchange is dependent on AD, we need to make a check if AD is already assigned to user. If not, provision AD first followed up with Exchange. Now the issue is - When do we trigger AD provisioning? If we do it after approval is complete, Exchange will go into Waiting state (as per 10g) and it was not possible to recover from Waiting state in 10g (as per Oracle SR). Does Exchange behave similarly in v9.1.1.7 when integrated with OIM 11g? The second option that we are exploring is trigger AD provisioning via an embedded task in composite after apporval is complete but before response is sent back to OIM (that's called invoking web service, i guess. I am not too conversant with SOA terms). If we go by this option, how do we ensure that AD is indeed provisioned before Echange provisioning is triggered? If Waiting state issue does not exist and resource provisioning is auto initiated, that would be best possible scenario. What are other options possible? Please share your views.
Thanks.

On your Microsoft Exchange Connector, create another unconditional task that is marked as a preceding task for the Create Mailbox task. In this, using the oim apis, use the findObjects api to search through the user's existing resources. Find a provisioned/disabled/enabled instance of Active Directory for that user. If no instance found, return an appropriate error code. Otherwise, get the process form data information from that instance and get the object guid value. Using the APIs to set process form data on your Exchange instance process form, update the field with the object guid. This should return a completed status response code. You can also set a retry delay and counter on this task so that it will retry the task if the AD processing is still taking place.
With this task in place, your Exchange will be in a "Provisioning" state until this task completes validating that the user has a AD instance, and also is able to update the form with the object guid.
-Kevin

Similar Messages

Provision to Exchange if it's in a root domain and users in child AD: OIM

Hello,
Users are in a child domain at: dc=test,dc=mydomain,dc=com.
This is the base context value I provide for my ADITResource.
However, Exchange is installed at the root domain: dc=mydomain,dc=com.
Due to this, when I try to provision to Exchange, I get an error:
2009-08-17 13:13:54,722 DEBUG [OIMCP.MEXC] com.thortech.xl.integration.Exchange.tcExchangeTasks :
checkIfMailboxCreated : No value for homeMDB fetched
I'm guessing it can't see the mailstores since they are located a level above in the tree. When I ran reconciliation to get the mailstore names, I updated the base context temporarily to dc=mydomain,dc=com. But I can't keep it at this since then AD users will not get provisioned.
Has anyone come across a situation like this before? Is there a workaround? Can a connector talk across root/child domains?
Any suggestions would be great.
Thanks.
Edited by: user4486549 on Aug 18, 2009 12:00 PM

What I actually meant was that pre Exchange 2007 you could do the whole provisioning process of both AD and Exchange through JNDI. The RUS would automatically create the Exchange object based on the data that you put into the users AD object.
It looks to me that in Exchange 2007 you will need to create the AD account (which can be done through JNDI) and then run certain powershell which seems to be slightly more complex but not not impossible. Especially not if you have your OIM server running on a windows host which should mean that you don't have to bother with the remote connector stuff. (At least if the OIM server is in the same domain as your production domain).
Best regards
/Martin

Facing issue while provisioning to Exchange mail server in OIM 11gR2

Hi All,
I am getting following error while provisioning user in exchange.
[2013-12-19T16:04:02.634-08:00] [oim_server1] [ERROR] [] [XELLERATE.DATABASE] [tid: [ACTIVE].ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: edbbad62ee0b4f0e:5ae02d4e:14308416bb2:-8000-0000000000001313,0] [APP: oim#11.1.2.0.0] select orc_key, UD_EX_CH_VERSION from UD_EX_CH where orc_key=123[[
java.sql.SQLSyntaxErrorException: ORA-00904: "UD_EX_CH_VERSION": invalid identifier
    at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:462)
    at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:405)
    at oracle.jdbc.driver.T4C8Oall.processError(T4C8Oall.java:931)
    at oracle.jdbc.driver.T4CTTIfun.receive(T4CTTIfun.java:481)
    at oracle.jdbc.driver.T4CTTIfun.doRPC(T4CTTIfun.java:205)
    at oracle.jdbc.driver.T4C8Oall.doOALL(T4C8Oall.java:548)
    at oracle.jdbc.driver.T4CStatement.doOall8(T4CStatement.java:202)
    at oracle.jdbc.driver.T4CStatement.executeForDescribe(T4CStatement.java:942)
    at oracle.jdbc.driver.OracleStatement.executeMaybeDescribe(OracleStatement.java:1283)
    at oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout(OracleStatement.java:1441)
    at oracle.jdbc.driver.OracleStatement.executeQuery(OracleStatement.java:1690)
    at oracle.jdbc.driver.OracleStatementWrapper.executeQuery(OracleStatementWrapper.java:446)
    at weblogic.jdbc.wrapper.Statement.executeQuery(Statement.java:506)
    at com.thortech.xl.util.JDBCUtils.executeQuery(JDBCUtils.java:159)
    at com.thortech.xl.dataaccess.tcDataBase.readPartialStatement(tcDataBase.java:760)
    at com.thortech.xl.dataobj.tcDataBase.readPartialStatement(tcDataBase.java:271)
    at com.thortech.xl.dataaccess.tcDataSet.executeQuery(tcDataSet.java:935)
    at com.thortech.xl.dataobj.tcDataSet.executeQuery(tcDataSet.java:1523)
    at com.thortech.xl.dataaccess.tcDataSet.executeQuery(tcDataSet.java:903)
    at com.thortech.xl.dataobj.tcDataSet.executeQuery(tcDataSet.java:1490)
    at com.thortech.xl.ejb.beansimpl.tcFormInstanceOperationsBean.getProcessFormChildDataData(tcFormInstanceOperationsBean.java:1271)
    at com.thortech.xl.ejb.beansimpl.tcFormInstanceOperationsBean.getProcessFormChildData(tcFormInstanceOperationsBean.java:1213)
    at Thor.API.Operations.tcFormInstanceOperationsIntfEJB.getProcessFormChildDatax(Unknown Source)
    at sun.reflect.GeneratedMethodAccessor904.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:606)
    at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflectio
Regards,
Nitin Natekar

Looks like some form version changes got corrupted.
You can do following things..
1) Make a new form version using Design condole
2) Make Recon Profile Active in Resource Object.
3) In Application Instance-> Form-> Create new Form.
If its not solved, you can uninstall and install your connector again.
~J

Provisioning to Exchange 2007 failing

Hi All,
I have installed the Exchange 2007 connector to create the mailbox of the users in the Exchange 2007. This requires Remote manager as well so did the configuration of the remote manager as per the guide.
Now when i try to provision the user to Exchange 2007 after it is successfully provisioned into AD.
The users mailbox is not created.
The Exchange provisioning task performs the following tasks.
1. first it check if the mailbox is already present in the Exchange.
2. If it is not present then it execute the scripts createmailboxexchange2007.vbs script using the remote manager.
3. It then again checks if the mailbox is created.
At this check it is giving the basically the information:
"DEBUG,09 Nov 2009 14:01:19,977,[OIMCP.MEXC],com.thortech.xl.integration.Exchange.tcExchangeTasks : checkMailboxCreation : No value for homeMDB fetched
INFO,09 Nov 2009 14:01:19,978,[OIMCP.MEXC],com.thortech.xl.integration.Exchange.tcExchangeTasks : checkMailboxCreation : Unable to execute the Power Shell command"
So basically it is not able to fetch the homeMDB as it was unable to execute the Power shell command.
I am not getting any logs on the Remote manager side but i guess the remote manager is not able to execute the power shell command.
Any ideas??

I would also check if you can call the .vbs script from a stand-alone Java program and if you really want to troubleshoot, from an RMI server that you build yourself (takes 15 mins). OIM remote manager is an RMI server. One issue could be JDK permissions (http://java.sun.com/javase/6/docs/technotes/guides/security/permissions.html), the default in the JDK you're using may not allow execution of scripts.
If the permissions are ok, I can't think of anything else. Maybe the same JDK on OIM and remote manager? It shouldn't matter but it could.

Zenworks to SCCM before Exchange migration??

We are currently a Novell shop and will be moving to all Microsoft in the next year. With that said, would you recommend having SCCM in production before migrating from Groupwise to Exchange?

Totally unrelated products. The order does not matter. It could even be done in parallel.
Torsten Meringer | http://www.mssccmfaq.de

Error to provisioned with Exchange Connector

hi , i have a problem with the following enviroment :
OIM 9.1.0.1
jboss 4.2.3.GA
11g
I have to integrate exchange but I cant provision, the AD Server is local (VM Workshop), AD is provisining suscesfulling using SSL.
I have installled EXCHANGE 2003, in which when i create an user manually in AD and give it an Exchange account, then i can log and sene and receive
mails with Microsoft Outlook.
The exchange conector is MSFT_Exchange_91110 and the AD conector is MSFT_AD_Base_91100.
More details:
In the deploy conector, i follow the guide deployment steps. I installed the remote Manager (to Exchange 2003 is not necessary)but it diden´t provioned
anywhere.
In the begining of the deploy i try to reconciliate the Mail Store with the Schedule Task Exchange Mail Store Lookup Reconciliation, with the
following error:
14:32:15,514 ERROR [STDERR] Exception in thread "DefaultQuartzScheduler_Worker-1"
14:32:15,514 ERROR [STDERR] java.lang.NoSuchMethodError: com.thortech.xl.integration.ActiveDirectory.tcADUtilLDAPController.<init>
(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;ZILcom/thortech/xl/integration/ActiveDirectory/utils/ConnectorLogger;Ljava/util/H
ashMap;Ljava/util/HashMap;Lcom/thortech/xl/dataaccess/tcDataProvider;LThor/API/Operations/tcLookupOperationsIntf;)V
i think that i have configured somethin wrong, the lookup Lookup.ExchangeReconciliation.MailStore is empty, and i think that is a mandatory field.
Investigating from my System Manager of Exchange Server, i noticed that Mail Store is : "TEN/First Storage Group/Mailbox Store (TEN)",so i fill all the
fields manually with the following values:
1 code:     TEN/First Storage Group/Public Folder Store (TEN)
decode:     TEN/First Storage Group/Public Folder Store (TEN)
2 code:          Mailbox Store (TEN)/First Storage Group/(TEN)/
decode:     CN=Mailbox Store (TEN),CN=First Storage Group,CN=InformationStore,CN=TEN,
3 code:          TEN/First Storage Group/Mailbox Store (TEN)
decode:     TEN/First Storage Group/Mailbox Store (TEN)
4 code:          TEN/Mailbox Store (TEN)
decode:     CN=Mailbox Store (TEN),CN=TEN,
5 code:          TEN/First Storage Group/Mailbox Store (TEN)/
decode:     CN=Mailbox Store (ten),CN=First Storage Group,CN=ten,DC=mydomain,DC=com,
6 code:          1~Mailbox Database/First Storage Group/BLAH-DEV-MBX-01/Servers/Exchange Administrative Group/Administrative Groups/BLAH/Microsoft
     Exchange/Services/Configuration/DC=BLAHDEVAD/DC=COM
decode:     AD TBR~CN=Mailbox Database,CN=First Storage Group,CN=InformationStore,CN=BLAH-DEV-MBX-01,CN=Servers,CN=Exchange Administrative
          Group,CN=Administrative Groups,CN=BLAH,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=BLAHDEVAD,DC=COM
Nothing of that solutions worked, following the code (uncompiling de jar), the number 5 is the closest to provision, and the error is the following:
14:47:02,093 ERROR [MEXC] com.thortech.xl.integration.ActiveDirectory.tcADUtilLDAPController : connectToAvailableAD : Empty Arguments Passed in either
Root Context,Admin FQDN,Admin Password,Server Address,Port Number in the IT Resource.
14:47:02,093 ERROR [MEXC] ====================================================
14:47:02,093 ERROR [MEXC] ====================================================
14:47:02,093 ERROR [MEXC] com.thortech.xl.integration.ActiveDirectory.tcADUtilLDAPController : connectToAvailableAD : The error occured in
tcADUtilLDAPController::connectToAvailableAD():Empty Arguments Passed in either Root Context,Admin FQDN,Admin Password,Server Address,Port Number in the
IT Resource.
but the AD IT Resource is working fine with the correct Root Context,Admin FQDN,Admin Password,Server Address,Port Number!!
i Apreciate your help and sory for my English!
Thanks!!

How about the ldapbp.jar that needs to go into the third party folder? (sorry if I got the jar name wrong)
The error message indicates that OIM can't find one of the JNDi classes and that points towards a jar not being in the correct directory.
Please check that all jars are where they are supposed to be.
Best regards
/Martin

Problem with provisioning using Exchange 11.1.1.5 Connector in OIM 11gR2

Hi,
I getting following error while provisioning user to exchange server.
org.identityconnectors.framework.common.exceptions.ConnectorException: Problem while PowerShell execution Org.IdentityConnectors.Framework.Common.Exceptions.ConnectorException: No provisioning handler is installed.
Thanks,

Yes, you can try out few things suggested in below thread
Re: Exchange Provisioning
The error looks like form exchange server side but still not sure about it.
Meantime open Service Request with oracle about the same as I can see other developers are also facing same issue.

Order Infinity before exchange live?

With my exchange being scheduled to go live on 30 June, I've been going to the infinity checker daily to see when I am able to place an order.
Today was the first time that it has told me that Infinity is available 'now' on my line and I was able to successfully place an order with a scheduled installation/activation date of 26 June. Sounds terrific and I'm looking forward to it.
But my exchange isn't due to go live until 30 June - ok, only a few days later, so maybe it's ready early - but even odder, there's absolutely no sign that the cabinet I'm connected to has been upgraded. It's still the old green cabinet sitting there in spendid isolation and no sign of anything going on, or having been done, anywhere near it.
Do BT normally take orders in anticipation of the work being completed (seems unlikely to me) or am I right to be more than a little sceptical?
Solved!
Go to Solution.

Just to update this - install went smoothly on 26 June: engineer called from the cabinet and was at my home 20 minutes later. 20 minutes after that, done and dusted, including re-stapling the Master Socket cable to the skirting board for me as it had become loose. Mine was the first install for the cabinet. Since then, rock steady 37Mbps down and 8Mbps up against a forecast 40/10. The only fly in the ointment was that my wireless G adaptor wasn't up the job and I've since swapped it for an 'N' which is fine.
The cabinet IS the one advised by the checker, and even though the OR engineer told me where the new one is (down the road and around the corner as there's no electricity supply near to the old one), I STILL haven't been able to find it. It must be very well hidden. But hey-ho, it all works and I'm delighted with the result, and the process. Even got my Sainsburys gift card yesterday.

Recon & Provisioning to Exchange 2007

Hi,
I am having issues with performing Recon with Exchange 2007.
Can anyone please guide me through the configuration of Remote Manager and Exchange connector?
Cheers
Kunal Jain

You need to make sure that your remote manager is functioning properly. Install the remote manager. Copy the appropriate jar files and scripts per the exchange documentation. Create an IT resource in OIM for the remote manager. Then open the remote manager configuration section and verify it is available.
After you get successful connection, enable debug mode for the connecftor on your remote manager box, since that's where all the code will be executed. Follow your error messages and resolve them.
-Kevin

AD-EXCHANGE provisioning-deprov

Hi,
How the dependency between AD and Exchange enforced. For example, it is required that Ad is provisioned before Exchange. How this can be ascertained?
Regards,
Chhavi

Go to
Design Console > Resource Object > MS Exchange > Depends On > Select AD User there

OIM 11g r2 Exchange connector provisioning is not working

Hi,
I have created one user in oim and i have provisioned this user into AD successfully.
after that i have tried provision same user into Exchange but the user provisioning status is shows "*waiting*" and provision date also shows wrong.
Please any body help me on this issue..
Thanks,
Venu

Exchange goes to waiting status when AD is not listed in user's resource profile as Provisioned. Check whether AD is properly provisioned. It is better to always create a new process task before 'Create User' in Exchange resource object which checks whether AD is already provisioned for the user. Then this problem can be avoided.
Also when there are multiple AD resource object instances in user's resource profile and even one of that instance is in Provisioning status, Exchange goes to waiting status
Edited by: Durgaprasad on Mar 5, 2013 6:43 AM

Exchange 2010 Provisioning from OIM 11g

I am having trouble provisioning to Exchange 2010. The error I am receiving is "Empty Arguments Passed in either Root Context,Admin FQDN,Admin Password,Server Address,Port Number in the IT Resource." I don't recall setting any of these parameters as part of the Exchange IT Resource. Do these come from the AD IT Resource or some Lookup object that I have missed? During the request I only specified AD Server, Mail Store and Mail Alias.
Thanks,
Pete

Check the values in ADITResource. Yes these come from ADITResource.

OIM11gR2 - Exchange 2003 provisioning

Hi All,
I am getting teh following Error while doing accesspolicy base provisioning the exchange 2003.
But it is working when i am provisionig manually.
OIM version : 11gR2 Ps1
Websphere : 7
AD : 9.1.1.4
exchange 2003 : 9.1.1.4.0
<14-Jan-2014 16:11:33 o'clock GMT> <Error> <oracle.iam.provisioning.spi> <BEA-000000> <An error occurred in oracle.iam.provisioning.spi.DOBProvisioningUtil while populating account data and the cause of error is For input string: "".>
<14-Jan-2014 16:11:33 o'clock GMT> <Error> <oracle.iam.provisioning.util> <BEA-000000> <An error occurred in oracle.iam.provisioning.spi.DOBProvisioningMechanism/getAccountsProvisionedToUser while getting accounts provisioned to user with key 2091 and the cause of error is oracle.iam.provisioning.exception.GenericProvisioningException: An error occurred in oracle.iam.provisioning.spi.DOBProvisioningUtil while populating account data and the cause of error is For input string: ""..>
<14-Jan-2014 16:11:33 o'clock GMT> <Error> <oracle.iam> <BEA-000000> <Exception : oracle.iam.provisioning.exception.GenericProvisioningException: An error occurred in oracle.iam.provisioning.spi.DOBProvisioningMechanism/getAccountsProvisionedToUser while getting accounts provisioned to user with key 2091 and the cause of error is oracle.iam.provisioning.exception.GenericProvisioningException: An error occurred in oracle.iam.provisioning.spi.DOBProvisioningUtil while populating account data and the cause of error is For input string: ""..>
<14-Jan-2014 16:11:33 o'clock GMT> <Warning> <oracle.adf.controller.faces.lifecycle.Utils> <BEA-000000> <ADF: Adding the following JSF error message: IAM-4065016 : An error occurred in oracle.iam.provisioning.spi.DOBProvisioningMechanism/getAccountsProvisionedToUser while getting accounts provisioned to user with key 2091 and the cause of error is oracle.iam.provisioning.exception.GenericProvisioningException: An error occurred in oracle.iam.provisioning.spi.DOBProvisioningUtil while populating account data and the cause of error is For input string: ""..
oracle.iam.ui.platform.exception.OIMRuntimeException: IAM-4065016 : An error occurred in oracle.iam.provisioning.spi.DOBProvisioningMechanism/getAccountsProvisionedToUser while getting accounts provisioned to user with key 2091 and the cause of error is oracle.iam.provisioning.exception.GenericProvisioningException: An error occurred in oracle.iam.provisioning.spi.DOBProvisioningUtil while populating account data and the cause of error is For input string: ""..
        at oracle.iam.ui.platform.exception.OIMErrorHandler.reportServiceException(OIMErrorHandler.java:172)
        at oracle.iam.ui.platform.exception.OIMErrorHandler.reportException(OIMErrorHandler.java:66)
        at oracle.adf.model.binding.DCDataControl.reportException(DCDataControl.java:411)
        at oracle.adf.model.binding.DCBindingContainer.reportException(DCBindingContainer.java:416)
        at oracle.adf.model.binding.DCBindingContainer.reportException(DCBindingContainer.java:471)
        at oracle.adf.model.binding.DCIteratorBinding.reportException(DCIteratorBinding.java:403)
        at oracle.adf.model.binding.DCIteratorBinding.executeQuery(DCIteratorBinding.java:2144)
        at oracle.iam.ui.authenticated.myaccess.bean.MyAccessAccountsBean.refreshMyAccessAccountsList(MyAccessAccountsBean.java:680)
        at oracle.iam.ui.authenticated.myaccess.bean.MyAccessAccountsBean.refreshMyAccountsList(MyAccessAccountsBean.java:718)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at com.sun.el.parser.AstValue.invoke(AstValue.java:187)
        at com.sun.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:297)
        at org.apache.myfaces.trinidadinternal.taglib.util.MethodExpressionMethodBinding.invoke(MethodExpressionMethodBinding.java:53)
        at org.apache.myfaces.trinidad.component.UIXComponentBase.broadcastToMethodBinding(UIXComponentBase.java:1256)
        at org.apache.myfaces.trinidad.component.UIXCommand.broadcast(UIXCommand.java:183)
        at oracle.adf.view.rich.component.fragment.UIXRegion.broadcast(UIXRegion.java:148)
        at oracle.adf.view.rich.component.fragment.UIXRegion.broadcast(UIXRegion.java:148)
        at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:102)
        at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$1.run(ContextSwitchingComponent.java:92)
        at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:361)
        at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:96)
        at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:96)
        at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.broadcastEvents(LifecycleImpl.java:1018)
        at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._executePhase(LifecycleImpl.java:386)
        at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:194)
        at javax.faces.webapp.FacesServlet.service(FacesServlet.java:265)
        at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
        at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
        at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:301)
        at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.adf.model.servlet.ADFBindingFilter.doFilter(ADFBindingFilter.java:205)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.adf.view.page.editor.webapp.WebCenterComposerFilter.doFilter(WebCenterComposerFilter.java:117)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.adfinternal.view.faces.webapp.rich.RegistrationFilter.doFilter(RegistrationFilter.java:106)
        at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446)
        at oracle.adfinternal.view.faces.activedata.AdsFilter.doFilter(AdsFilter.java:60)
        at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446)
        at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:271)
        at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:177)
        at org.apache.myfaces.trinidad.webapp.TrinidadFilter.doFilter(TrinidadFilter.java:92)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.help.web.rich.OHWFilter.doFilter(Unknown Source)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.iam.ui.platform.servletfilter.IdentityContextFilter.doFilter(IdentityContextFilter.java:50)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.iam.platform.servletfilter.PwdMgmtNavigationFilter.doFilter(PwdMgmtNavigationFilter.java:164)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.bpel.services.workflow.client.worklist.util.WorkflowFilter.doFilter(WorkflowFilter.java:248)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.bpel.services.workflow.client.worklist.util.DisableUrlSessionFilter.doFilter(DisableUrlSessionFilter.java:70)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.adf.library.webapp.LibraryFilter.doFilter(LibraryFilter.java:179)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:119)
        at java.security.AccessController.doPrivileged(Native Method)
        at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:315)
        at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:442)
        at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:103)
        at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:171)
        at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:139)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3730)
        at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3696)
        at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
        at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
        at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2273)
        at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2179)
        at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1490)
        at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
        at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
Thank you

Hi,
I think that you have to fill mandatory attrbute in exchange form.
Please fill User Logon Name, Recipient Type, Database, Alias attributes on exchange user form while provisioning.

AD and Exchange provisioning succeeds but OIM user creation fails

Hi,
I am trying to provision exchange 2010 using exchange connector which i have customized. When i create user in OIM, AD provisoning starts ,then AD user gets created , then exchange provisioning starts & exchange gets provisioned. By the time all these happens, OIM page shows error on page and user doesn't gets created.
Now when you search user with that ID, then no user found in IDM. Where as user gets created in AD and Exchange.
Please help me in resolving the issue.
Thanks,

I get these errors in OIM logs:
ERROR,22 Oct 2012 02:11:47,817,[XELLERATE.WEBAPP],Class/Method: tcActionBase/execute encounter some problems: {1}
java.lang.NullPointerException
at com.thortech.xl.webclient.actions.tcLookupDispatchAction.execute(Unknown Source)
at com.thortech.xl.webclient.actions.tcActionBase.execute(Unknown Source)
at com.thortech.xl.webclient.actions.tcAction.execute(Unknown Source)
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:484)
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:274)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:507)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:743)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
at com.evermind.server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:64)
at com.thortech.xl.webclient.security.SecurityFilter.doFilter(Unknown Source)
at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:623)
at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:370)
at com.evermind.server.http.HttpRequestHandler.doProcessRequest(HttpRequestHandler.java:871)
at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:453)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:313)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:199)
at oracle.oc4j.network.ServerSocketReadHandler$SafeRunnable.run(ServerSocketReadHandler.java:260)
at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
at java.lang.Thread.run(Thread.java:595)
ERROR,22 Oct 2012 02:11:47,818,[XELLERATE.WEBAPP],Class/Method: tcAction/execute encounter some problems: {1}
java.lang.NullPointerException
at com.thortech.xl.webclient.actions.tcActionBase.execute(Unknown Source)
at com.thortech.xl.webclient.actions.tcAction.execute(Unknown Source)
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:484)
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:274)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:507)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:743)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
at com.evermind.server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:64)
at com.thortech.xl.webclient.security.SecurityFilter.doFilter(Unknown Source)
at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:623)
at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:370)
at com.evermind.server.http.HttpRequestHandler.doProcessRequest(HttpRequestHandler.java:871)
at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:453)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:313)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:199)
at oracle.oc4j.network.ServerSocketReadHandler$SafeRunnable.run(ServerSocketReadHandler.java:260)
at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
at java.lang.Thread.run(Thread.java:595)
WARN,22 Oct 2012 02:11:47,818,[org.apache.struts.action.RequestProcessor],Unhandled Exception thrown: class java.lang.NullPointerException

OIM and Exchange Auto Provision along with AD

Hi,
How can I configure an AD connector in OIM to automatically provision an Exchange account for a user?
At present as part of manual provisioning test, I have to assign the AD User resource and Exchange resource separately to provision a user with AD and Exchange accounts. Is there a simplest way to do it?
Please advise. Also please share if any documentation available.
Thank you!

Policy based provisioning should work fine for you.
Alternatively you can use an entity adapter or a combination of entity adapter and a policy.
Policy based provisioning is described in 11 Creating and Managing Access Policies in Identity Manager Administrative and User Console Guide (assuming that you are using 9.1).
Good luck
/M

Ensure AD provisioning before Exchange

Similar Messages

Maybe you are looking for