How to provision an account on OUD LDAP using LDAP generic connector?

I'm almost a newbie regarding OIM (R2 11.1.2.0.0) and I'm trying to learn it, so I think this is definitely a newbie question (please forgive me).
At present I'm trying to provision an user from OIM to an Application Instance of Oracle Unified Directory 11gR2 (11.1.2.0.0).
I've carefully followed the path to install generic LDAP connector (ODSEE/OUD/LDAPV3 Connector 11.1.1.5.0), to create IT Resource and Application Instance and to run Lookup reconciliation jobs.
No error messages here.
Then, using OIM Self Service GUI, I've created an user and asked for "Request Accounts".
After Add to Cart and Checkout, on Cart Details in Catalog I tried to define "Container DN" as pointing to "ou=people,dc=example,dc=com" (using ODSM interface I've previously created ou "people" under the base container "dc=example,dc=com").
I've seen an Oracle example suggesting to search for "MYOUD~people", where MYOUD is the Application Instance name, but in my case the search doesn't return anything.
Same thing if I try to write "ou=people,dc=example,dc=com" into "Container DN" field.
So I've left that field blank and started provisioning anyway but on the Account tab the Status for that operation is since then stuck to "Provisioning" (that doesn't surprises me ...).
Any hints?
Which mistakes I've made? Had I forgot something?
How could I check if OUD server is correctly integrated with OIM?
I tried to check it using Design Console, too, but I'm not skilled enough with the tool.
Thanks.

After reconciliations, Lookup.LDAP.Organization displays the correct value (Code="25~ou=people,dc=example,dc=com") but for Lookup.LDAP.Group the expected value ("cn=grouptest1,dc=example,dc=com") is missing (empty list, that one is the only group I've created so far in my test environment).
By the way, after having created OU and group I didn't restarted neither OUD server nor OIM server but I don't think it's mandatory to do that and, anyway, at least the OU value is shown.
Edited by: Torun on Feb 12, 2013 8:14 PM

Similar Messages

How can I just use a generic Realtek audio driver without "Beats Audio" interfering!?

Beats audio is terrible! I just want to have a flat EQ with no stupid sound effects enabled. The only way I've been able to do this so far, is to uninstall the audio driver, and just use the generic windows one instead. But what I would like to do is use a generic Realtek audio driver, and completely remove Beats Audio from my computer.
After uninstalling the audio driver that comes with my laptop, I tried getting a standard Realtek driver from their website. But when I install that, Beats Audio reappears! This is so frustrating! How can I uninstall Beats Audio? I want it gone forever! I can see from searching these forums that this is a common problem. But none of the solutions have shown how to just use a standard Realtek driver without this Beats Audio rubbish.
Can anyone tell me how this is possible? I'll stick to the generic windows driver if I have to. But it would be nice if I could just use the Realtek drivers as they were meant to be.
Thanks

Thanks for the reply. But you've misunderstood the question. I know how to uninstall the sound driver and just use a generic Windows one instead. But what I'm actually looking to do, is install the Realtek audio driver without Beats Audio. Thanks.

How to provision multiple AD Accounts to a single User Profile in OIM

Hi,
We are using OIM 11g R2. We have implemented AD Provisioning/Reconciliation using Active Directory 11g Connector.
The correlation rule for linking AD accounts with OIM during target recon is set as “Email ID”
We have some business requirement where we want to provision multiple AD Accounts to a single User Profile in OIM.
Issue we are facing:
Suppose we have USERID1 in OIM which has email id as USERID1@ XYZ.COM .
After that we have provisioned sAMAccountName=USERID1 (Email ID as USERID1@ XYZ.COM )& sAMAccountName=USERID2 (Email ID as [email protected]) to the user User Login = USERID1 in OIM.
Both the AD User accounts can be seen as provisioned.
After we run the AD Target Recon, the target recon is failing because of “Multiple Process Matches Found” issue.
Question here is:
Is it possible to maintain/manage multiple AD Accounts (Same AD is used for all the multiple AD Accounts) to a single OIM profile user ?
Regards,
J

Hi,
We have seen its working and linking multiple accounts when we have Key field as "User ID" in the Process Defn & RO and the recon matching rule has email ID as the matching rule.
Please suggest, if we are having the above kind of rule/config...will it not cause any issue?
Regards,
J

Provision Unix accounts/roles/groups to Directory server using OIM

Hi,
I have a requirement to integrated large number of Unix servers with LDAP (OID or Sun Directory Server) for Centralized Authentication and Authorization and to provision Unix accounts/roles/groups to Directory server using OIM, I have following queries.
1. If using PAM_LDAP then what are the schema changes required in ldap to support it ?
2. Does OIM's out of box connector for OID or Sun Directory Server supports Unix accounts/roles/groups provisioning to Directory server ? If not, can it be extend ? or do I need to write a custom connector ?
3. If I use Oracle Authentication Services for OS for centralized unix account management then OIM provisioning is same as #2 or different ?
Thanks
Nitin

yes. iPlanet connector support for multivalued attribute. Go through the connector doc. It will let you know how to extend its functionality.
--nayan

How to enter an account assignment category for a material.

Hi guys:
I am facing following error prompt,please tell me how to enter an account assignment category for a material.
thanks
Account assignment mandatory for material 0000000N6451 (enter acc. ***. cat.)
Message no. ME062
Diagnosis
There is no provision for value-based inventory management for this material type in this plant. Account assignment is thus necessary.
Procedure
Please enter an account assignment category.

HI Shyam :
Go to transaction type OMS2. Check whether the material type u are using is ticked for Value update.
If not,
a. Use a different material type
b. or Use an account assignment category.
How to use B,that is hot to enter an account assignment cateogory

How to save HR data in Active Directory using ABAP i.e thru LDAP Connector

Hi All,
       Can any one please help me out how
       to save HR data in Active directory
       using LDAP Connector ?
       Please help ASAP as it is very urgent .
Thanks
Jitendra

There are 100 of such scripts are there online.
here are few tips and codes. you will get more.
https://gallery.technet.microsoft.com/scriptcenter/Feeding-data-to-Active-0227d15c
http://blogs.technet.com/b/heyscriptingguy/archive/2012/10/31/use-powershell-to-modify-existing-user-accounts-in-active-directory.aspx
http://powershell.org/wp/forums/topic/ad-import-csv-update-attributes-script/
Please mark this as answer if it helps

How to define user defined schema in LDAP

Hi guys,
I have created user defined fields in OIM through design console.
Could any one please help me in writing user defined schema in LDAP with the fileds created in OIM.
Thanks,
divya

Hi Divya
I'm a little confused about what you're asking. Does the custom schema already exist within your target LDAP server? Are you trying to work out how to pass custom attribute values through as part of an OIM provisioning operation? Which particular LDAP Server and Connector are you using?
Or are you perhaps asking how to actually create a user-defined schema extension within the LDAP directory? In this case, that will completely depend on which LDAP Server implementation you're using and you should probably refer to the product docs for that product.
Hope this helps
Cheers
Rob

TS3999 I had an icloud account setup in 2009 when I first got my family members each a mac. I let that account expire(we never used it) and I don't know how to get it off of my ical. It is not recognizing any of the information to reset the password?

I had an icloud account in 2009. We set it up as a family plan because my family had just changed from PC to Mac. We never used it and let the plan expire in 2010. My ical will not sync with my new iphone because it is linked to the family plan account that no longer exist. Because I don't remember my password, I tried resetting it. It says the personal information I entered is incorrect, but I know the information is correct...It's my birthday it asks for! Does anyone know how to get that account off of my mac without the account existing?

You were a MobileMe (not iCloud) subscriber in 2009 and this service has been terminated. However the login is an Apple ID and this never expires. What is your operating system? Do you have a MobileMe icon in System Preferences? - if so you should be able to sign out in it, but you may not have an iCloud icon to let you create an iCloud account, though you can do so if your iPhone has iOS 5 or above.
If you are getting login requests or other irritations from your MobileMe account you can go to (user)/Library/Preferences/ByHost and delete all .plist files beginning with com.apple.DotMac or com.apple.idisk, then reboot.
The minimum requirement for iCloud to let you sync your data is 10.7.5 though you can sync through iTunes (except with Mavericks).

I don't remember my old Apple ID and I closed my email account that I was using for my old Apple ID. Now, how can I change my icloud id on my Ipad. The old icloud id is still on my Ipad.

I don't remember my old Apple ID and I closed my email account that I was using for my old Apple ID. Now, how can I change my icloud id on my Ipad. The old icloud id is still on my Ipad.

ChrisJ4203,
Thank you for the help. Every app on my phone was downloaded using my old I-tunes ID. I just hope that they will re-download under my new ID because I still can't change it on my phone. In order to change to the new ID it says I have to sign out from the old ID and change to the new one. My problem is that I don't remember my password to be able to sign out from my old ID. Then the phone says it can change my password through e-mail and I agree but I never get an e-mail at my old address or the new one.
BHuyett

I have 2 iphones, 1 personal and 1 business. I thought I was supposed to have 2 separate itunes accounts. I now have a work ipad and want to only have 1 itunes account that I can use for all 3 devices. How do I cancel 1 account or just combine the 2?

I have 2 iphones, 1 personal and 1 business. I thought I was supposed to have 2 separate itunes accounts. I now have a work ipad and want to only have 1 itunes account that I can use for all 3 devices. How do I cancel 1 account or just combine the 2?

I want to be able to transfer my apps from my original itunes account that I have on my personal iphone 3 and work ipad 3 to my work iphone 4S ,as well as purchase more more apps for the work iphone with the original itunes account. Plus I need to sync all 3 of them with my work tower computer. I really appreciate you're trying to help me out.

Hi my partner used my email address and iTunes account to set up his iPhone and now both our phones have merged! Does anyone know how to separate these? Can he still use our iTunes account with a different Id or email! Please help!!

HI my partner used my apple id and email address when setting up his iPhone so when he turned on iCloud our phones merged!! How do we undo this? Can he still use my iTunes account with a different Id and can he change the email on his phone without losing information? Also iPad is linked too, the family uses this and I would like to keep my phone separate! At the moment nothing is sacred! Please help! We are not very good with computers!!

Several things here so let me attempt to clarify.
For iCloud the reason the contacts where removed from he other device is because you updated your contacts, in this case deleted them, and then iCloud updated the other device to match. By deleting the iCloud account on the device it will stop the device from using that iCloud account and therefore nothing will change on the other device. By using a seperate Apple ID you can still use the features of iCloud, Find My iPhone comes to mind, without your content (contacts, message etc.) merging with the other device
For iTunes, you cannot use two Apple IDs for one account however if you use the same account iTunes on your computer will keep the content on each device seperate very nicely. You can also configure the settings for iTunes and the App store on each device to keep the content from automatically downloading to the other device. What I meant by share apps and music is this. What happens if you find a game, lets say Minecraft, that you really like and it cost, as Mincraft cost, $6.99USD. You buy it and play for a while and then you realize that your husband really likes the game as well. If you both use the same Apple ID for iTunes he can download the $7.00ish game to his device at no additional charge. If you use seperate Apple IDs for iTunes well... it look like he will also be paying for the game to have it on his account. Same goes for Music and Movies
I hope that clears things up. Let me know if you have anymore question.

How do I make it so that the one computer that has the main itunes account on it be used on other computers, when it comes to backing up phones and not deleting data off of phone that isnt on that computer itunes becasse its all on the one main computer

how do I make it so that the one computer that has the main itunes account on it be used on other computers, when it comes to backing up phones and not deleting data off of phone that isnt on that computer itunes becasse its all on the one main computer. Baiscally the problem is that one comuter and one account has always been sued for eey persons itunes. Now if we want to be able to backup and use itunes on our own computers fro our iphones and such, how will all he data that is on our phones not be deleted once its plugged into a new computer? Also, is theere a way to get all the stuff on thw current itunes onto each computer, via differtn account name?

option discovered in preferences. Really this and any feature that moves deletes or edits a users data should as far as possible be OFF BY DEFAULT. It shouldn't by default and without the users specific say do this dangerous and unnecessary thing without even letting the user know what it's doing!!! And then cause me a few hours (as i'm new to mac) searching for the option so as to switch it off. If i hadn't noticed the status cage declaring that it was copying files then i might never have twigged that this insane thing was occurring. And if i hadn't of noticed i would have been left maintaining the contents of the folder i copied the files to, the folder which as far as i was informed and so believed was also the location of the music files i was playing. How does Apple justify this 'genius' piece of software non-design? Surely it will hurt no one if this was off by default for new users - overall at least i dare say it would cause a lot less distress in the future for the unsuspecting public at large. Thanks for the support.

How do display multiple accounts under one CalDav account?

Hello - I have a google mail account, for which I use google calendar to organize both my and my wifes calendars. We share calendars, but she has a separate google account and calendar. Using iCal, both these calendars are subscribed using separate CalDav accounts. Using the calendar function on the iphone, I subscribe to both calendars separately as well, but the interface is different.
Here's my question: I created a new calendar under my account, which I would like to share with certain people (call it 'Group cycling sessions.'). On iCal, under > Properties > 'delegation,' I can access the calendar, and by the way, access my wifes as well. However, I cannot figure out how to subscribe to this calendar on the iphone (short of using mobile me, which I am loathe to do).
Any ideas?

Google calendar colours are taken from the Google settings.
If you have another account such as the calendar on your iPhone or the Birthday Calendar, each time they are removed and re-activated, the colour will cycle to the next one Apple has chosen

Mail -- How can I change the default email account from which my messages go, without having to change it each time I draft a message? It currently assumes an email account that I rarely use. Thanks.

How can I change the default email account from which my messages go, without having to change it each time I draft a message? It currently assumes an email account that I rarely use. Thanks.

sorry, but I can't find the mail preference in the latest Yosemite OS. Do you know where I can find it?
Thank you
Don

I have two apple id's because my hotmail account is no longer active. How can I delete the old one and use or update the new one? Every time I try it won't allow me and now my iPad thinks there are two accounts and they are arguing with each other. Help!

I have two apple id's because my hotmail account is no longer active. How can I delete the old one and use or update the new one? Every time I try it won't allow me and now my iPad thinks there are two accounts and they are arguing with each other. Help!

You can't merge accounts or copy content to a different account, so anything that you bought or downloaded via the old account is tied to that account - so any updates that those apps get you will only be able to download via that account. You can change which account is logged in on the iPad via Settings > Store

How to provision an account on OUD LDAP using LDAP generic connector?

Similar Messages

Maybe you are looking for