IDM 6.0 error

Hi All,
I am getting the following error when i try to run the reports in IDM 6.0
java.lang.NoClassDefFoundError: javax/activation/DataSource
any idea how to solve this?

My crystal ball says you are using Tomcat, installed the java mail API and then most likely you forgot to install the "javabeans activation framework" (JAF) library.
See the Install PDF for instructions on where to get and put them.
http://java.sun.com/products/javamail/
http://java.sun.com/products/javabeans/glasgow/jaf.html
cheers,
thomas

Similar Messages

IDM 11G install error??

Hi,
I am trying to install IDM 11g 11.1.1.2 on Windows Server 2003 EE. The setup fails at "Create ASInstance". I see the following log in the install logs and out logs. Let me know if you have ever faced this issue. And if you know how to fix this one.:
OUT LOGS
opmnctl start: opmn failed to start.
SND: No such file or directory
oracle.as.provisioning.util.ConfigException:
Error creating ASInstance IDMinst_1.
Cause:
An internal operation has failed: Error in starting opmn server
Operation aborted because of a system call failure or internal error
Action:
See logs for more details.
     at oracle.as.provisioning.util.ConfigException.createConfigException(ConfigException.java:123)
     at oracle.as.provisioning.fmwadmin.ASInstanceProv._createInstance(ASInstanceProv.java:317)
     at oracle.as.provisioning.fmwadmin.ASInstanceProv.createInstance(ASInstanceProv.java:166)
     at oracle.as.provisioning.fmwadmin.ASInstanceProv.createInstanceAndComponents(ASInstanceProv.java:116)
     at oracle.as.provisioning.engine.WorkFlowExecutor._createASInstancesAndComponents(WorkFlowExecutor.java:525)
     at oracle.as.provisioning.engine.WorkFlowExecutor.executeWLSWorkFlow(WorkFlowExecutor.java:441)
     at oracle.as.provisioning.engine.Config.executeConfigWorkflow_WLS(Config.java:866)
     at oracle.as.idm.install.config.BootstrapConfigManager.doExecute(BootstrapConfigManager.java:1287)
     at oracle.as.install.engine.modules.configuration.client.ConfigAction.execute(ConfigAction.java:335)
     at oracle.as.install.engine.modules.configuration.action.TaskPerformer.run(TaskPerformer.java:87)
     at oracle.as.install.engine.modules.configuration.action.TaskPerformer.startConfigAction(TaskPerformer.java:104)
     at oracle.as.install.engine.modules.configuration.action.ActionRequest.perform(ActionRequest.java:15)
     at oracle.as.install.engine.modules.configuration.action.RequestQueue.perform(RequestQueue.java:63)
     at oracle.as.install.engine.modules.configuration.standard.StandardConfigActionManager.start(StandardConfigActionManager.java:158)
     at oracle.as.install.engine.modules.configuration.boot.ConfigurationExtension.kickstart(ConfigurationExtension.java:81)
     at oracle.as.install.engine.modules.configuration.ConfigurationModule.run(ConfigurationModule.java:83)
     at java.lang.Thread.run(Thread.java:619)
Caused by: oracle.as.management.opmn.optic.OpticException: Error in starting opmn server
Operation aborted because of a system call failure or internal error
     at oracle.as.management.opmn.optic.OpmnAdmin.executeCommand(OpmnAdmin.java:310)
     at oracle.as.management.opmn.optic.OpmnAdmin.startOpmnServer(OpmnAdmin.java:87)
     at oracle.as.provisioning.fmwadmin.ASInstanceProv._createInstance(ASInstanceProv.java:254)
     ... 15 more
progress in calculate progress2
INSTALL LOGS
[2010-11-07T13:57:46.796-07:00] [as] [ERROR] [] [oracle.as.provisioning] [tid: 20] [ecid: 0000Ikc3pqL7U8WjLxzG8A1CpkH^00000A,0] [[
oracle.as.management.opmn.optic.OpticException: Error in starting opmn server
Operation aborted because of a system call failure or internal error
     at oracle.as.management.opmn.optic.OpmnAdmin.executeCommand(OpmnAdmin.java:310)
     at oracle.as.management.opmn.optic.OpmnAdmin.startOpmnServer(OpmnAdmin.java:87)
     at oracle.as.provisioning.fmwadmin.ASInstanceProv._createInstance(ASInstanceProv.java:254)
     at oracle.as.provisioning.fmwadmin.ASInstanceProv.createInstance(ASInstanceProv.java:166)
     at oracle.as.provisioning.fmwadmin.ASInstanceProv.createInstanceAndComponents(ASInstanceProv.java:116)
     at oracle.as.provisioning.engine.WorkFlowExecutor._createASInstancesAndComponents(WorkFlowExecutor.java:525)
     at oracle.as.provisioning.engine.WorkFlowExecutor.executeWLSWorkFlow(WorkFlowExecutor.java:441)
     at oracle.as.provisioning.engine.Config.executeConfigWorkflow_WLS(Config.java:866)
     at oracle.as.idm.install.config.BootstrapConfigManager.doExecute(BootstrapConfigManager.java:1287)
     at oracle.as.install.engine.modules.configuration.client.ConfigAction.execute(ConfigAction.java:335)
     at oracle.as.install.engine.modules.configuration.action.TaskPerformer.run(TaskPerformer.java:87)
     at oracle.as.install.engine.modules.configuration.action.TaskPerformer.startConfigAction(TaskPerformer.java:104)
     at oracle.as.install.engine.modules.configuration.action.ActionRequest.perform(ActionRequest.java:15)
     at oracle.as.install.engine.modules.configuration.action.RequestQueue.perform(RequestQueue.java:63)
     at oracle.as.install.engine.modules.configuration.standard.StandardConfigActionManager.start(StandardConfigActionManager.java:158)
     at oracle.as.install.engine.modules.configuration.boot.ConfigurationExtension.kickstart(ConfigurationExtension.java:81)
     at oracle.as.install.engine.modules.configuration.ConfigurationModule.run(ConfigurationModule.java:83)
     at java.lang.Thread.run(Thread.java:619)
[2010-11-07T13:57:46.796-07:00] [as] [NOTIFICATION] [] [oracle.as.provisioning] [tid: 20] [ecid: 0000Ikc3pqL7U8WjLxzG8A1CpkH^00000A,0] Exit code from OPMNAdmin : 2
[2010-11-07T13:57:46.796-07:00] [as] [TRACE:16] [] [oracle.as.provisioning] [tid: 20] [ecid: 0000Ikc3pqL7U8WjLxzG8A1CpkH^00000A,0] [SRC_CLASS: IdMProvisioningEventListener] [SRC_METHOD: onConfigurationError] ENTRY 6473f20d-dd92-4511-b723-c2dfd9d9191f
[2010-11-07T13:57:46.875-07:00] [as] [TRACE] [] [oracle.as.provisioning] [tid: 20] [ecid: 0000Ikc3pqL7U8WjLxzG8A1CpkH^00000A,0] [SRC_CLASS: oracle.as.idm.install.config.event.IdMProvisionEventListener] [SRC_METHOD: onConfigurationError] ________________________________________________________________________________
[2010-11-07T13:57:46.875-07:00] [as] [TRACE] [] [oracle.as.provisioning] [tid: 20] [ecid: 0000Ikc3pqL7U8WjLxzG8A1CpkH^00000A,0] [SRC_CLASS: oracle.as.idm.install.config.event.IdMProvisionEventListener] [SRC_METHOD: onConfigurationError] [OOB IDM CONFIG EVENT] onConfigurationError -> configGUID 6473f20d-dd92-4511-b723-c2dfd9d9191f
[2010-11-07T13:57:46.875-07:00] [as] [TRACE] [] [oracle.as.provisioning] [tid: 20] [ecid: 0000Ikc3pqL7U8WjLxzG8A1CpkH^00000A,0] [SRC_CLASS: oracle.as.idm.install.config.event.IdMProvisionEventListener] [SRC_METHOD: onConfigurationError] [OOB IDM CONFIG EVENT] ErrorID: 35075
[2010-11-07T13:57:46.875-07:00] [as] [TRACE] [] [oracle.as.provisioning] [tid: 20] [ecid: 0000Ikc3pqL7U8WjLxzG8A1CpkH^00000A,0] [SRC_CLASS: oracle.as.idm.install.config.event.IdMProvisionEventListener] [SRC_METHOD: onConfigurationError] [OOB IDM CONFIG EVENT] Description: [[
Error creating ASInstance IDMinst_1.
Cause:
An internal operation has failed: Error in starting opmn server
Operation aborted because of a system call failure or internal error
Action:
See logs for more details.
OPMN logs error:
E:\Oracle\Middleware\IDMinst_1\config\OPMN\opmn\states\.opmndat
[2010-11-07T14:07:27][opmn][NOTIFICATION:1][675][OPMN]OPMN server ready. Request handling enabled.
[2010-11-07T14:07:27][opmn][ERROR:1][17][OPMN][code:ons-listener]69.60.111.227,6701: BIND (Unknown error)

11.1.1.2 is bad for windows...too many bugs. 11.1.1.3 is a more stable version. But 11.1.1.5 is the best. So upgrade to 11.1.1.5 and then configure the IDM suite.

Sun IDM Repositor Configuration Error: Failed to load JDBC Driver

Hi Gurus,
I am new to Java IDM and predictably failed in my first attempt to install Java IDM in a Windows machine with SQL Server 2000 SP3.
I followed the Installation document step by step and I think I din' t miss any!!.. But still I got caught by an error, here it is:
I successfully installed IDM but failed while configuring Repository. I have downloaded the JDBC driver from Microsoft for SQL Server 2000, SP3. Then after that I copied the Jar from JDBC driver folder to
%WSHOME%/bin/lib folder. After this I launched the Repository configuration setup.
I got the following error while trying to connect the waveset database with Repository type as SQL Server (JDBC Driver)
com.waveset.util.ConfigurationError: Failed to load JDBC Driver 'com.microsoft.sqlserver.jdbc.SQLServerDriver':
==> java.lang.ClassNotFoundException: com.microsoft.sqlserver.jdbc.SQLServerDriver
The Parameters that I have given for connection are:
URL: jdbc:sqlserver://127.0.0.1:1433;DatabaseName=waveset
JDBC Driver: com.microsoft.sqlserver.jdbc.SQLServerDriver
Connect as User: waveset
Connect Password: waveset
I have created the database and granted all access to user waveset.
Please help me come out of this. I tried dropping and recreating the database with a different name. Still it did not work, looks like it is a JDBC driver specific issue. Please guide me if I did anything wrong.
Appreciate any help
Thanks

Open your driver jar using winzip or something and check if the class: com.microsoft.sqlserver.jdbc.SQLServerDriver is present in the jar. I think you need to use a different class name. or your jar file is wrong. I think there are separate jars for SQL server 2000 and for SQL Server 2005.

IDM Reconciliation Pending Error

Hi all,
I am supporting IDM Application and I have an issue where the Reconciliation process for almost all the resources are in "Recon:Pending" Status and Last Reconciled date and time shows as "never".
For few resources, there seems to be no error but the process has got stopped immediately or in a second or so and therefore only few accounts have been processed but still in pending status.
For other resources, there are errors like:
Abnormal disconnect from SSH Server: Could not connect to Resource: Auth fail (OR)
ksh: sudo: not found (OR)
The wait for a response exceeded the configured timeout while fetching account from resource, etc
Can someone please help me know and understand why the Reconciliation process doesnt seem to work fine and what can be done. This is the second time I am facing the issue, last time was a month back. We had rebooted IDM webservers as part of our resolution to run the process properly as the next scheduled reconciliations also would not start.
Please help...Thanks in advance...
Priyanka.

Hello Experts,
Could you someone update the fix regarding the issue.
Thanks and Regards
Thirumal.
Edited by: Thirumalai Malai on Jun 3, 2009 4:09 AM

IDM 7.0 Error

Hello Exports,
We have completed the IDM 7.0 Installation and Configuraiton.we are in the process of running the Initial Load
During the intial load with ABAP system we received below errors
Under IDentity Center->Management -> System log
Date;Type;"Dispatcher";Job ID;"Additional info";"Text"
2009.06.02 15:49:28;Warning;"sap-idm";1809;"";"Pass skipped by script"
2009.06.02 15:49:28;Warning;"sap-idm";1809;"";"Pass skipped by initialization script"
2009.06.02 15:49:28;Warning;"sap-idm";1809;"";"Pass skipped by script"
2009.06.02 15:49:28;Warning;"sap-idm";1809;"";"Pass skipped by initialization script"
2009.06.02 15:49:27;Error;"sap-idm";1809;"modEntry failed modifying entry 'J2EE_GUEST'. IDStore returned error message: " Referenced value does not exist:Attribute: MXREF_MX_PRIVILEGE" when storing attribute 'MXREF_MX_PRIVILEGE=<PRIV:PROFILE:ABAP200:T-EP640003>'";"Exception from Mod operation:ToIDStore"
2009.06.02 15:49:27;Error;"sap-idm";1809;"";"Failed storing J2EE_GUEST"
2009.06.02 15:49:27;Error;"sap-idm";1809;"modEntry failed modifying entry 'J2EE_ADMIN'. IDStore returned error message: " Referenced value does not exist:Attribute: MXREF_MX_PRIVILEGE" when storing attribute 'MXREF_MX_PRIVILEGE=<PRIV:PROFILE:ABAP200:T-EP640002>'";"Exception from Mod operation:ToIDStore"
2009.06.02 15:49:27;Error;"sap-idm";1809;"";"Failed storing J2EE_ADMIN"
2009.06.02 15:49:25;Error;"sap-idm";1809;"sap_encryptPassword()$$) got exception - Exception:org.mozilla.javascript.JavaScriptException: java.lang.UnsupportedOperationException: java.lang.NoClassDefFoundError: javax/crypto/SunJCE_b : cannot initialize class because prior initialization attempt failed";"runFunctionsInString($FUNCTION"
2009.06.02 15:49:25;Warning;"sap-idm";1809;"mozilla.javascript.JavaScriptException: java.lang.UnsupportedOperationException: java.lang.NoClassDefFoundError: javax/crypto/SunJCE_b : cannot initialize class because prior initialization attempt failed HINT: Check line 17 in the script sap_encryptPassword";"Executing sap_encryptPassword() got JavaScriptException - org"
2009.06.02 15:49:25;Error;"sap-idm";1809;"sap_encryptPassword()$$) got exception - Exception:org.mozilla.javascript.JavaScriptException: java.lang.UnsupportedOperationException: java.lang.NoClassDefFoundError: javax/crypto/SunJCE_b : cannot initialize class because prior initialization attempt failed";"runFunctionsInString($FUNCTION"
Thanks
Thirumal

Hello Experts,
Could you someone update the fix regarding the issue.
Thanks and Regards
Thirumal.
Edited by: Thirumalai Malai on Jun 3, 2009 4:09 AM

IDM 11g Installation Error

Hello,
I was trying to install Identity Management 11g as part of our Fusion Middleware test environment but I couldn't make it through the Installation.
I'm installing IDM 11g, just Oracle Internet Directory with Oracle Directory Integration Platform, Oracle Directory Services Manager, and Fusion Middleware Control in a New WebLogic Administration Domain (not selecting Identity Federation nor Virtual Directory)
All the prerequisites are fulfilled, all the verification passed.
I'm using Weblogic 11g (10.3.1), everything over a OEL 5.2.
The error I get is in the Configuration Progress stage, in Bootstrap Domain configuration section, and in the Create Domain part.
The logs show:
oracle.as.provisioning.util.ConfigException:
Error creating Domain /u01/oracle/app/wl_10.3/user_projects/domains/IDMDomain.
Cause:
A WLST Error occured.
Action:
See logs for more details.
at oracle.as.provisioning.util.ConfigException.createConfigException(ConfigException.java:123)
at oracle.as.provisioning.weblogic.ASDomain._createDomain(ASDomain.java:2864)
at oracle.as.provisioning.weblogic.ASDomain.createDomain(ASDomain.java:2463)
at oracle.as.provisioning.engine.WorkFlowExecutor._createDomain(WorkFlowExecutor.java:631)
at oracle.as.provisioning.engine.WorkFlowExecutor.executeWLSWorkFlow(WorkFlowExecutor.java:388)
at oracle.as.provisioning.engine.Config.executeConfigWorkflow_WLS(Config.java:870)
at oracle.as.idm.install.config.BootstrapConfigManager.doExecute(BootstrapConfigManager.java:660)
at oracle.as.install.engine.modules.configuration.client.ConfigAction.execute(ConfigAction.java:335)
at oracle.as.install.engine.modules.configuration.action.TaskPerformer.run(TaskPerformer.java:87)
at oracle.as.install.engine.modules.configuration.action.TaskPerformer.startConfigAction(TaskPerformer.java:104)
at oracle.as.install.engine.modules.configuration.action.ActionRequest.perform(ActionRequest.java:15)
at oracle.as.install.engine.modules.configuration.action.RequestQueue.perform(RequestQueue.java:63)
at oracle.as.install.engine.modules.configuration.standard.StandardConfigActionManager.start(StandardConfigActionManager.java:158)
at oracle.as.install.engine.modules.configuration.boot.ConfigurationExtension.kickstart(ConfigurationExtension.java:81)
at oracle.as.install.engine.modules.configuration.ConfigurationModule.run(ConfigurationModule.java:82)
at java.lang.Thread.run(Thread.java:619)
progress in calculate progress2
I'm looking this logs:
./oraInventory/logs/oraInstall2009-07-21_07-17-11AM.out
./oraInventory/logs/install2009-07-21_07-17-11AM.log
./oraInventory/logs/install2009-07-21_07-17-11AM.out
Don't know where else to look or what this error means.
If some can help I thank you in advance.
Best regards.

I had a similar problem. The solution I used was to download a different version of 11g. Higher, I don't know what 11g (10.1.3) is. I don't think there was a version like that (I haven't seen it). Let's say your platform is x86. There are 3 downloads (at least) you could use:
1. Oracle WebLogic Server 11gR1 (10.3.1) + OEPE - Package Installer
oepe11_wls1031_linux32.bin
2. Oracle WebLogic Server 11gR1 (10.3.1) - Package Installer
wls1031_linux32.bin
3. Oracle WebLogic Server 10.3 - Package Installer
server103_linux32.bin
With #3, I had the same issue. IDM doesn't like it. I used #1. OEPE is just some eclipse plugins that you don't need to use but they are there in case you want to develop some custom plugins. #2 I assume would also work but I haven't tested it. The .1 in 10.3.1 is the key. 11g = 10.3.1. I think eventually Oracle will marry up the versions to be more clear. I'm not sure.
And yes, with #3, the verify would pass and it would happily install until the domain was created and bam big stack trace just like you posted. Use #1 or #2. If your Platform is different just substitute the _linux32 with your platform.

Request roles IdM to GRC - Error remaining name

Hi experts!
We are with a problem on Idm/GRC, when we try to change his function in
the company to another function on User Interface, for example:
-System Analyst I to System Analyst "II".
Idm sends the role to approval in the GRC, then when we try to change
the occupation of this employee, ex to "System Analyst II" (changing the
occupation) IdM Send the new request to GRC with the role and approve,
we approve, but in the backend ECC, GRC just "adds" the new role.
We need to remove the previous role look error at the attachments!
Thanks
Melkin

Hi Matt,
The WS is running ok on the GRC side, look below, "006"= approved and "009" = rejected.
Thanks
Melkin

SAP IDM 8 -- Internal Error: Something went wrong

Not what you want to see when logging in.
Based on Todor's mention, I've bypassed SSL on my IDM 8 setup. However when I login, I get this message:
I've checked the login that I used, and first it seemed that I had set an non productive password, so I reset it and tried again. Still failed. I then verified that I had the correct password by logging into the UME with these credentials. No problem there.
Here's my com.sap.idm.dev-studio-userinterface.prefs file
CLIENT_LOG_LEVEL=Info
EMSCONFIG=<?xml version\="1.0" encoding\="UTF-8" standalone\="no"?>\r\n<mx\:EMS xmlns\:mx\="http\://www.maxware.com/EMS">\r\n<mx\:EMSDEFS>\r\n<mx\:EMSDB Name\="LocalTest2008">\r\n<ConnectionString/>\r\n<AppServerIp>localhost</AppServerIp>\r\n<AppServerPort>50001</AppServerPort>\r\n<AppName>idmdevstudio</AppName>\r\n<DbAlias>jdbc/IDM_DataSource_DevStudio</DbAlias>\r\n</mx\:EMSDB>\r\n<mx\:EMSDB Name\="Test">\r\n<ConnectionString/>\r\n<AppServerIp>localhost</AppServerIp>\r\n<AppServerPort>50000</AppServerPort>\r\n<AppName>idmdevstudio</AppName>\r\n<DbAlias>jdbc/IDM_DataSource_DevStudio</DbAlias>\r\n</mx\:EMSDB>\r\n</mx\:EMSDEFS>\r\n</mx\:EMS>\r\n
ENABLE_PACKAGE_DIFF=true
ENABLE_PACKAGE_DIFF_JQUERY_LIB=C\:\\jQuery\\jquery-1.11.2.min.js
ENABLE_PACKAGE_VIEW=true
GET_GUID_FUNCTION=true
RESET_LOG_ON_RESTART=true
IS_HTTPS=false
eclipse.preferences.version=1
Any ideas on this?
Thanks,
Matt

Hi Matt, Laurent,
Just a couple of comments:
You should of cource use SSL for the Developer Studio connection to avoid sending cleartext passwords.
Yes, the user needs to be created in UME, but no specific IDM roles are needed. All authorisations are set in the IdM db. (Do not confuse Developer Studio users with IdM users.)
The initial Developer Studio user is created in the IdM db during IdM 8 installation, you only need to add it to UME.
Additional Developer Studio users are first created in UME, and then from Developer Studio, they are created in the IdM db.
The script is there just for an emergency.
Regards,
Ole K.

Error While recon

I am getting the below error while doing the Recon with AD resource.
Error while examining Identity Manager user 1234567:
com.waveset.util.WavesetException: Missing user attribute 'userDN' used in identity template for resource 'AM Active Directory'
userDN is a dynamic variable in the identity template which we are using while provisioning the account.
Can some one emplain how recon works:
Is there any role of identity template during the recon process.

Error while examining Identity Manager user 1234567:
com.waveset.util.WavesetException: Missing user
attribute 'userDN' used in identity template for
resource 'AM Active Directory'
userDN is a dynamic variable in the identity template
which we are using while provisioning the account.
Can some one emplain how recon works:
Is there any role of identity template during the
recon process.We've had similar problem two days ago. We're using dynamic Identity Template variable when creating user just like you.
After some searching, the problem was completely different and - simple. The user was not created correctly, thus account was ASSIGNED but not created. And IDM bounced this error when opening a view for this user.
So try to check, if the user is created in idm correctly. Simply try to Edit the user in the Admin interface to see if some exception/warning appears.
Are you creating the user via role or in the forms?
Ivan

ActiveSync: Update Error

Hello Again,
I am running Active sync on a Database View that is our authoritative source. Creation of new accounts (provisioning via IDM Role's) works fine when using ActiveSync. What is not working is the updating of accounts that already exist is IDM. The error I receive is below.
The questions is , Why am I seeing the below error and how can I ensure IDM will update existing users via ActiveSync. What are the mandatory field for updating existing user via ActiveSync?
Thank you.
2009-12-10T10:47:47.144-0800: result from submit (blank means no errors):
2009-12-10T10:47:47.145-0800: ID not passed to ObjectCache.getObjectIfExists
2009-12-10T10:47:47.145-0800: <?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE WavesetResult PUBLIC 'waveset.dtd' 'waveset.dtd'>
<WavesetResult>
<ResultItem type='error' status='UI_MSG_SEVERITY_ERROR'>
    <ResultError throwable='com.waveset.util.InternalError'>
      <Message>
        <Text>ID not passed to ObjectCache.getObjectIfExists</Text>
      </Message>
      <StackTrace>com.waveset.util.InternalError: ID not passed to ObjectCache.getObjectIfExists
	at com.waveset.object.ObjectCache.getObjectI
fExists(ObjectCache.java:656)
	at com.waveset.object.ObjectCache.getObjectIfExists(ObjectCache.java:612)
	at com.waveset.view.UserView
Converter.refreshRoleAssignments(UserViewConverter.java:3978)
	at com.waveset.view.UserViewConverter.refreshRoleView(UserViewConverter.java:36
88)
	at com.waveset.view.UserViewConverter.refresh(UserViewConverter.java:3550)
	at com.waveset.view.UserViewer.checkinView(UserViewer
.java:1161)
	at com.waveset.object.ViewMaster.checkinView(ViewMaster.java:763)
	at com.waveset.sync.IAPIUserImpl.processCommand(IAPIUs
erImpl.java:558)
	at com.waveset.sync.IAPIUserImpl.submitUpdate(IAPIUserImpl.java:229)
	at com.waveset.sync.IAPIUserImpl.submit(IAPIUs
erImpl.java:785)
	at com.waveset.adapter.DatabaseTableResourceAdapter.processUpdates(DatabaseTableResourceAdapter.java:2394)
	at com.w
aveset.adapter.DatabaseTableResourceAdapter.poll(DatabaseTableResourceAdapter.java:2026)
	at com.waveset.task.SARunner.doRealWork(SARunner.jav
a:343)
	at com.waveset.task.Executor.execute(Executor.java:167)
	at com.waveset.task.TaskThread.run(TaskThread.java:144)
</StackTr
ace>
    </ResultError>
</ResultItem>
</WavesetResult>
2009-12-10T10:47:47.146-0800: EMPLID: 000003335, identity: user1111, AD_ROLE: Inactive, lastname: Users, firstname: Newest, CSU_DOB: 1969-04-07 00:00:00.0, EMAIL_ADDRESS: [email protected], EFFDT: 2010-02-12 00:00:00.0
ID not passed to ObjectCache.getObjectIfExists
2009-12-10T10:47:47.146-0800: End update processing for resource IDM_VIEW
2009-12-10T10:47:47.147-0800: Completed poll for IDM_VIEW resource adapter.
2009-12-10T10:47:47.147-0800: Poll complete.
2009-12-10T10:47:47.147-0800: SARunner: loop 576
2009-12-10T10:47:47.222-0800: Started, paused until Thu Dec 10 10:47:48 PST 2009
2009-12-10T10:47:52.225-0800: Pause completed
2009-12-10T10:47:52.267-0800: PollingThank you

Here is much of the activeSync form I created. I am using a custom Java Class to determine the roles.
<Extension>
    <Form name='FRM_ASync_TESTstudent' objectLocationID='objectType=UserForm&objectName=FRM_ASync_TESTstudent&objectPath=0&isBegin=true'>
      <Field name='IAPI.cancel'>
        <Expansion>
          <s>true</s>
        </Expansion>
        <Disable>
          <not>
            <contains>
              <ref>waveset.roles</ref>
              <ref>activeSync.AD_ROLE</ref>
            </contains>
          </not>
        </Disable>
      </Field>
      <Field name='waveset.accountId'>
        <Comments>
        Sets account ID but disables field
        if ActiveSync operation is not create
                </Comments>
        <Expansion>
          <ref>activeSync.accountId</ref>
        </Expansion>
        <Disable>
          <neq>
            <ref>feedOp</ref>
            <s>create</s>
          </neq>
        </Disable>
      </Field>
      <Field name='global.firstname'>
        <Expansion>
          <ref>activeSync.firstname</ref>
        </Expansion>
        <Disable>
          <neq>
            <ref>feedOp</ref>
            <s>create</s>
          </neq>
        </Disable>
      </Field>
      <Field name='global.lastname'>
        <Expansion>
          <ref>activeSync.lastname</ref>
        </Expansion>
      </Field>
      <Field name='waveset.organization'>
        <Expansion>
          <s>Top:MyORG</s>
        </Expansion>
      </Field>
      <Field name='waveset.roles'>
        <Comments>
        Sets roles but disables field
        if ActiveSync operation is not create
                </Comments>
        <Expansion>
          <ref>activeSync.AD_ROLE</ref>
        </Expansion>
        <Disable>
          <neq>
            <ref>feedOp</ref>
            <s>create</s>
          </neq>
        </Disable>
      </Field>
      <Field name='waveset.role'>
        <Comments>
        Sets Role but disables field
        if ActiveSync operation is not create
                </Comments>
        <Expansion>
          <ref>activeSync.AD_ROLE</ref>
        </Expansion>
        <Disable>
          <neq>
            <ref>feedOp</ref>
            <s>create</s>
          </neq>
        </Disable>
      </Field>
      <Field name='waveset.password'>
        <Expansion>
        </Expansion>
        <Disable>
          <neq>
            <ref>feedOp</ref>
            <s>create</s>
          </neq>
        </Disable>
      </Field>
      <Field name='password.accounts[Lighthouse].expire'>
        <Comments>
        Sets Account to expire but disables field
        if ActiveSync operation is not create
                </Comments>
        <Expansion>
          <s>true</s>
        </Expansion>
        <Disable>
          <neq>
            <ref>feedOp</ref>
            <s>create</s>
          </neq>
        </Disable>
      </Field>
      <Field name='waveset.passwordExpiry'>
        <Comments>
        Sets PasswordExpiry but disables field
        if ActiveSync operation is not create
                </Comments>
        <Expansion>
          <new class='java.util.Date'/>
        </Expansion>
        <Disable>
          <neq>
            <ref>feedOp</ref>
            <s>create</s>
          </neq>
        </Disable>
      </Field>
/// Below is only to execute during updates to existing accounts. (Role management)
      <Field name='ExecuteONLYforASUpdates'>
        <Expansion>
          <block>
            <defvar name='finalRole'>
              <s>Empty</s>
            </defvar>
            <defvar name='IDMRole'>
              <cond>
                <contains>
                  <ref>waveset.roles</ref>
                  <s>Staff</s>
                </contains>
                <setvar name='IDMRole'>
                  <s>Staff</s>
                </setvar>
                <cond>
                  <contains>
                    <ref>waveset.roles</ref>
                    <s>Faculty</s>
                  </contains>
                  <setvar name='IDMRole'>
                    <s>Faculty</s>
                  </setvar>
                  <cond>
                    <contains>
                      <ref>waveset.roles</ref>
                      <s>Student</s>
                    </contains>
                    <setvar name='IDMRole'>
                      <s>Student</s>
                    </setvar>
                    <cond>
                      <contains>
                        <ref>waveset.roles</ref>
                        <s>Alumni</s>
                      </contains>
                      <setvar name='IDMRole'>
                        <s>Alumni</s>
                      </setvar>
                      <setvar name='IDMRole'>
                        <ref>waveset.roles[#0]</ref>
                      </setvar>
                    </cond>
                  </cond>
                </cond>
              </cond>
            </defvar>
            <defvar name='CMSRole'>
              <ref>activeSync.AD_ROLE</ref>
            </defvar>
            <defvar name='finalRole'>
              <invoke name='getProvisionRole' class='MyRoleClasses'>
                <ref>IDMRole</ref>
                <ref>CMSRole</ref>
              </invoke>
            </defvar>
          </block>
        </Expansion>
        <Disable>
          <eq>
            <ref>feedOp</ref>
            <s>create</s>
          </eq>
        </Disable>
      </Field>
      <Field name='waveset.roles'>
        <Comments>
        Sets roles but disables field
        if ActiveSync operation is not create
                </Comments>
        <Expansion>
          <append>
            <ref>waveset.roles</ref>
            <ref>finalRole</ref>
          </append>
        </Expansion>
        <Disable>
          <eq>
            <ref>feedOp</ref>
            <s>create</s>
          </eq>
        </Disable>
      </Field>
    </Form>
</Extension>

Error in Reconciliation

When I reconcile my Ldap resource to IDM, getting an error. the reconciliation status shows:
Error iterating accounts for resource ESAALDAP:
com.waveset.exception.OperationTimedOut: The wait for a response exceeded the configured timeout while listing accounts on resource '<Resource-Name>'.
Can anyone help how I can increase the wait time?..
Thanks
Bino

Hi Jesper,
I read the note and as per my understanding it was the systme behavior of SAP if we reconcile BP with JE or other documents with withholding tax this error will appear. The note does not give any workaround resolution on how to resolve that issue.
Did you guys have any idea on how to resolve or to closed the invoice transactions inc. withholding tax that was partially paid and the remaining balance was done in JE or CM?
Thanks,
Janice

ERROR:Unknown WorkItem Object with id #ID#..............

Hi,
I am getting this error while updating some user from user login interface. I m using IDM 5.0
ERROR:Unknown WorkItem Object with id #ID#..............
Please help me out

This error comes when the task instance with that ID gets terminated/finished and deleted. The solution is to restart the process you are trying to do. Also, check whether you have imported the required form in repository.

SSO (trusted authentification?) not working after update SAP BO 4.0 to SAP BO 4.1

Dear experts,
After update SAP BO 4.0 SP05 to SAP BO 4.1 SP04 we have the problem with SSO to http://<boserver>/BOE/BI.
Our environment:
SAP BO 4.1 running on AIX 6.1, integrated Tomcat7, one server (no cluster)
In fact, tomcat is able to communicate with AD, in debug mode I see
[DEBUG] Mon Aug 04 14:57:23 CEST 2014 jcsi.kerberos: ** credentials obtained .. ** messages.
BUT after starting http://bodev.vse.sk/BOE/BI logon page to BI launchpad is comming, no SSO action.
Our custom properties files:
global.properties
sso.enabled=true
trusted.auth.user.retrieval=REMOTE_USER
siteminder.enabled=false
vintela.enabled=true
idm.realm=AD.VSE.SK
idm.princ=krbbod
idm.allowS4U=true
idm.allowUnsecured=true
idm.allowNTLM=false
idm.logger.name=simple
idm.logger.props=error-log.properties
idm.keytab=/home/bodadm/keytab/krbbod.keytab
BIlaunchpad.properties
authentication.visible=true
cms.visible=true
sso.types.and.order=vintela
(last line I added after reading some discussions, but it didn't solve the problem)
After update I've generated the new TrustedPrincipal.conf and saved it into /usr/sap/sap_bobj/enterprise_xi40/aix_rs6000 (also using -Dbobj.trustedauth.home=/usr/sap/sap_bobj/enterprise_xi40/aix_rs6000 in JAVA_OPTS), but it didn't help.
Before update to 4.1, SSO was working without problems.
Can you help me?
How can I be sure, that tomcat is passing the correct username and using the shared secret from TrustedPrincipal.conf when logging to CMS? Is it possible to debug it?
Best regards,
Slavomir Kysel

Hello Raunak,
QUERY_STRING was working fine, so I saw that trusted authentification and TrustedPrincipal.conf are OK.
I activated trace log for BI launch pad and checked what's going on during SSO logging.
After some playing with parameters and reading discussions to similar problems I came to the conclusion and finally I've solved my SSO problem. Magic word is trustedVintela.
Here is my new properties files:
global.properties
#sso.enabled=true
#trusted.auth.user.retrieval=REMOTE_USER
#siteminder.enabled=false
#vintela.enabled=true
idm.realm=AD.VSE.SK
idm.princ=krbbod
idm.allowS4U=true
idm.allowUnsecured=true
idm.allowNTLM=false
idm.logger.name=simple
idm.logger.props=error-log.properties
idm.keytab=/home/bodadm/keytab/krbbod.keytab
BIlaunchpad.properties
authentication.visible=true
authentication.default=secLDAP
sso.types.and.order=trustedVintela
Legacy SSO settings in global.properties are not any more needed when using new parameter sso.types.and.order=trustedVintela in BIlaunchpad.properties.
This is working SSO configuration on our installation: SAP BO 4.1 SP04 Patch1 on AIX, authentication secLDAP, trusted authentication is enabled.
Best regards,
Slavomir Kysel

Manager attribute from AD and to AD

Hello Experts,
I am working with AD-IDM implementation.
I am facing two problems here:
1. Issue in getting Manager attribute of the users from HR system onto IDM via initial load and
2. Issue in assigning the Manager attribute to a user from IDM while creating a new user on AD
In case 1, I am simply trying to pass the manager in HR system to attribute MX_MANAGER as
in pass 'to identity store' -> MX_MANAGER = %manager%
For this, the IDM throws an error as "Entry reference value is not numeric when storing attribute MX_MANAGER=xyz"
In case 2, while creating a new identity assigning the AD privilege, I am trying to assign the manager to that new AD user. But it fails to create a user on AD as the manager attribute value comes with an error "CONSTRAINT_ATT_TYPE"
I know that the manager value on AD resides in DN format, but not sure how to resolve that to use the same for purposes.
Could you please suggest on the above issues.
FYKI - Version: IDM 7.2
Many thanks in advance!
Naveen

Hi Naveen,
In order to start writing scripts, you should know what are the tables/views to query for getting the required information.
I strongly recommend you to go through the the blog IDM SQL Basics #1: Queries against the Identity Store by Per Krabsetsve
Anyways I am writing down the sample scripts for your reference, which you can make use of.
Let me know for any further queries.
1. For getting the MSKEY of the user from MSKEYVALUE
// Main function: z_sap_getMskeyForMskeyvalue
function z_sap_getMskeyForMskeyvalue(Par)
var msKey = "";
msKey = "select distinct mcMSKEY from idmv_entry_simple where mcMSKEYVALUE='"+Par+"'";
msKey = uSelect(msKey);
return msKey;
2. For gettting the DN of the Manager with MSKey as the input to the script.
// Main function: z_sap_getManagerADDN
function z_sap_getManagerADDN(Par)
var msKey = Par;
var managerADDN = "";
managerADDN = "select avalue from idmv_value_basic where MSKEY="+Par+" and AttrName='ACCOUNTIDECAD'";
// in the above select query ACCOUNTIDECAD is my AD account attribute. In your case it is ACCOUNT<AD Rep Name>
managerADDN = uSelect(managerADDN);
return managerADDN;
All the best !!
~ Krishna.

How to use MARS for NAT Translation Analysis...

Hi All,
I was wondering if we could use MARS to do NAT logging. To be more specific, currently we are using a PUX Firewall that does dynamic nat/pat. We log NAT Translations to syslog server and if further required we search into the files to find what we want.
I was wondering if anyone had tried to send translation logs to MARS and then doing a custom report for NAT Translations (i.e. by source, destination, time etc).
Regards.

Hello Nicolas,
Use the following steps :
Step 1
Locate the File “global.properties”
Drive:\SAP BusinessObjects\Tomcat6\webapps\BOE\WEB-INF\config\custom
The following values should be present:
vintela.enabled=true
idm.realm=Domain Name (u can get the name from C:\Windows\Krb5.ini)
idm.princ=SPN User
idm.allowUnsecured=true
idm.allowNTLM=false
idm.logger.name=simple
idm.logger.props=error-log.properties
Step 2:
Locate the file “web.xml”
D:\SAP BusinessObjects\Tomcat6\webapps\dswsbobje\WEB-INF
Uncomment the Kerberos Proxy Filter and the Kerberos Filter sections to enable Kerberos SSO for Windows Active Directory (secWinAD) authentication. The following options must be specified (the rest are optional)
idm.realm = SPN user (the same as the default_realm specified in the Krb5.ini file)
idm.princ = SPN User (the same as specified for idm.princ in the global.properties)
idm.keytab = (the same as specified for idm.keytab in the global.properties )
Please note, if you are using the hardcoded password set in Tomcat's Java Options do not make any changes to the keytab lines in the web.xml
Step 3:
Backup and edit Drive:\Tomcat6\webapps\dswsbobje\WEB-INF\classes\dsws.properties by setting kerberos.sso to 'true' Restart Tomcat
KR,
MD

IDM 6.0 error

Similar Messages

Maybe you are looking for