Issue in GoogleApps provisioning

Hi All,
I am facing errors while provisioning users to Googleapps. Here all the steps I followed
I have used OOTB googleApps connector googleapps-11.1.1.6.0 and have downloaded the jar files (gdata-appsforyourdomain-1.0.jar, gdata-core-1.0.jar, gdata-client-1.0.jar, google-collect-1.0-rc1.jar)
Have Installed the connector and Modified the IT resource with my Google app active domain account. Added the path for jar files and wlfullclient too
But ,when i run group lookup recon task "GoogleApps Lookup Reconciliation" i am getting error message as
org.identityconnectors.framework.common.exceptions.ConnectionFailedException: com.google.gdata.util.AuthenticationException: Error connecting with login URI
Pleas provide any helpfule pointer on this
Thanks,
RPB

Is ther any problem with using SSL connection for connecting Google Apps ?
While providing value for "connectionUrl" parameter, would it be HTTPS or HTTP url for google apps admin account.
Below is the error log :
oracle.iam.connectors.icfcommon.recon.LookupReconTask : execute : Error during execution
org.identityconnectors.framework.common.exceptions.ConnectionFailedException: com.google.gdata.util.AuthenticationException: Error connecting with login URI
at org.identityconnectors.framework.impl.serializer.CommonObjectHandlers$4.createException(CommonObjectHandlers.java:165)
at org.identityconnectors.framework.impl.serializer.CommonObjectHandlers$4.createException(CommonObjectHandlers.java:162)
at org.identityconnectors.framework.impl.serializer.CommonObjectHandlers$ThrowableHandler.deserialize(CommonObjectHandlers.java:115)
at org.identityconnectors.framework.impl.serializer.binary.BinaryObjectDecoder$InternalDecoder.readObject(BinaryObjectDecoder.java:162)
at org.identityconnectors.framework.impl.serializer.binary.BinaryObjectDecoder.readObject(BinaryObjectDecoder.java:313)
at org.identityconnectors.framework.impl.serializer.binary.BinaryObjectDecoder.readObjectField(BinaryObjectDecoder.java:417)
at org.identityconnectors.framework.impl.serializer.MessageHandlers$5.deserialize(MessageHandlers.java:155)
at org.identityconnectors.framework.impl.serializer.binary.BinaryObjectDecoder$InternalDecoder.readObject(BinaryObjectDecoder.java:162)
at org.identityconnectors.framework.impl.serializer.binary.BinaryObjectDecoder.readObject(BinaryObjectDecoder.java:313)
at org.identityconnectors.framework.impl.api.remote.RemoteFrameworkConnection.readObject(RemoteFrameworkConnection.java:153)
at org.identityconnectors.framework.impl.api.remote.RemoteOperationInvocationHandler.handleStreamResponse(RemoteOperationInvocationHandler.java:119)
at org.identityconnectors.framework.impl.api.remote.RemoteOperationInvocationHandler.invoke(RemoteOperationInvocationHandler.java:97)
at $Proxy394.search(Unknown Source)
at sun.reflect.GeneratedMethodAccessor1413.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.identityconnectors.framework.impl.api.BufferedResultsProxy$BufferedResultsHandler.run(BufferedResultsProxy.java:162)
Please provide any helpful pointer on this
Thanks,
RPB

Similar Messages

Bill Accounting issue frieght clearing provision account is not getting

Hello Experts
Subjcet: Bill Accounting issue frieght clearing provision account is not getting cleared at the time of accounting.
Error in ZIVA for invoice parking and ZIVB for invoice posting
my user tying to post the invoice through ZIVB with reference of PO number . So at the time of posting this transaction he is getting error like Balance not zero: 651.25 debits: 1,378.75 credits: 2,030.00
that difference amount stands for freight clearing - 651.25
Before that he was posted to ZIVA for Invoice parking with reference of PO
Can any body give me suggestion on the same
Thanks and Regards
vamsi

Thanks for all
my problem was resolved
regards
vamsi

MBAM Agent Key Escrow Issue After Pre-Provisioning Bitlocker in SCCM TS

Hello, I'm having an issue with MBAM key escrow now that we have moved to using pre-provisioned Bitlocker. After imaging completes the initial key escrow works properly (the MBAM Agent transmits the Numerical Password key protector to the MBAM server) however
the MBAM Agent no longer automatically changes the Numerical Password when the recovery code is revealed in the
MBAM Drive Recovery console. As far as I can tell MBAM is supposed to change this on the user's computer within 90 minutes by default and this behavior cannot be changed.
I have tested this using a previously-imaged computer that didn't use pre-provisioned Bitlocker. After revealing the recovery code in the MBAM console, the computer's Numerical Password protector was automatically changed as is expected. However
on the computers imaged with the pre-provisioned Bitlocker this does not happen.
Here are the versions of the software we're using:
SCCM 2012 R2
Windows 7 Enterprise SP1 x64
MBAM Agent v2.0.5301.1
The task sequence steps we are using consist of:
Ensure TPM is activated
Format and partition drive
Pre-provision Bitlocker, Encrypt Used Space Only mode
Apply Windows 7 image, install drivers and software, etc
Use manage-bde to set key protectors (-TPM and -RecoveryPassword)
Run the MBAM activation script
Use manage-bde to turn on Bitlocker on the drive
There are no error messages displayed and I can't see anything in the Event Viewer which would point to the root cause. The MBAM logs in Event Viewer are all Operational logs which simply state that the
'MBAM policies were applied successfully'.
Is this a known issue with pre-provisioned Bitlocker and MBAM? I haven't been able to find any information regarding this issue so any help would be greatly appreciated.
Thanks,
Justin.

According to the
MBAM TechNet documentation the client should log in the Microsoft-Windows-MBAM/Operational
section of Event Viewer. However:
The test computers do not show any error messages in the MBAM Operational log section. The only entries present are Information events
that state "The MBAM policies were applied successfully"
The test computers also don't seem to show any general Security or System Error logs related to Bitlocker or MBAM
According to the TechNet documentation listed above, when a machine has its Numerical Password reset there should be a
'RecoveryKeyReset' event logged. However on the laptop where MBAM is changing the Numerical Password I do NOT see this event (though I have confirmed with manage-bde that the recovery password was changed successfully). The only events I see
are, again, Operational logs for Information events that state "The
MBAM policies were applied successfully".
I'm not sure why there aren't any errors logged, or why that laptop isn't generating that RecoveryKeyReset event like it should. As far as I can tell there isn't any way to change what the MBAM client logs, right? I didn't see any logs in AppData or Program
Data so I have to assume everything is supposed to be logged in Event Viewer.

AE 5.1 - User provisioning issue - new user provisioned at end of request

Hi All,
re: AE 5.1 - User provisioning issue - new user provisioned at end of request when AE Config is set to NO
We have an interesting issue. An Access Enforcer Change Request was initiated with the incorrect userID (the userID did not yet exist in the system) and that Change Request flowed through and made it to the end of the path. At the end of the path, it created a new userID (since the incorrect one was entered). However, we have the following AE Config:
Auto Provisioning - Status: Auto Provsioning Type: "Auto Provision At End of Each Path"
Auto Provisioning - Change Request: Create if user does not exist: "NO"
Any ideas as to why the new userID was provisioned even though we have it set to "NO"?
We are on AE v5.1, SP4.
Thanks in advance!

Gary,
Similar kind of issue.,
The Change User BAPI works differently than we normally think.
It wipes off everything and reassign the modification.
This I figured it in one of my implementation. You try add some roles to the user it wipes off all the roles and reassign the roles along with the new requested one's.
The client is also in SP4 still they have issue.
Will that not be good, AE checks for the ID before it actually submits the request.
Thanks.
Note : The issue mentioned by you doesnt exist in AE5.2
Regards,
Muthu Kumaran KG
Edited by: Muthukumaran Krishnan Govindan on Mar 13, 2008 2:38 PM

Collection assign issue in OID provisioning environment

Hy Tom,
I am interested in LDAP with OID PROVISIONING in portal 10g application.
we create a register procedure.
however. i got an error message as ORA-06502: PL/SQL: numeric or value error: NULL index table key value.
After debuging, we found that issue result assign null value .
when we assign as
user_vals(counter2) := entry.attr(counter1).attrval(counter2);
It seems that that we can not assign entry.attr(counter1).attrval(counter2) to other var two time in procedure.
It is server configuration issue or code issue.
Thanks
Newweber
*********************** Code
PROCEDURE pre_add (     ldapplugincontext IN ODS.plugincontext,
               dn IN VARCHAR2,
               entry IN ODS.entryobj,
               rc OUT INTEGER,
               errormsg OUT VARCHAR2
IS
ret                INTEGER;
l_portal_user      wwsec_person.USER_NAME%type;
l_first_name      wwsec_person.FIRST_NAME%type;
l_last_name      wwsec_person.LAST_NAME%type;
l_email      wwsec_person.EMAIL%type;
l_work_phone      wwsec_person.WORK_PHONE%type;
l_mobile      wwsec_person.MOBILE_PHONE%type;
counter1           pls_integer;
counter2           pls_integer;
retval                pls_integer := -1;
s                integer;
user_session           DBMS_LDAP.session;
user_dn           varchar(256);
user_array           DBMS_LDAP.mod_array;
user_vals           DBMS_LDAP.string_collection;
user_binvals           DBMS_LDAP.blob_collection;
indx                number := 1;
BEGIN
l_portal_user      :=null;
l_first_name      :=null;
l_last_name      :=null;
l_email      :=null;
l_work_phone      :=null;
l_mobile      :=null;
l_description      :=null;
rc := 0;
errormsg :=null;
-- Create a mod_array
user_array := dbms_ldap.create_mod_array(entry.binattr.count + entry.attr.count);
-- Create a user_dn
user_dn := substr(dn,1,instr(dn,',',1,1))||'cn=users,dc=e-hms,dc=net';
FOR l_counter1 IN 1..entry.attr.COUNT LOOP
     FOR l_counter2 IN 1..entry.attr(l_counter1).attrval.COUNT LOOP
     ckerror('second loop get value--'|| entry.attr(l_counter1).attrname || '[' || l_counter1 || ']' ||'.val[' || l_counter2 || '] = ' ||entry.attr(l_counter1).attrval(l_counter2));
if entry.attr(l_counter1).attrval(l_counter2)     is null then
ckerror('handle null attribule ');
else
-- get value
          ckerror('get value2'||entry.attr(l_counter1).attrname);
IF entry.attr(l_counter1).attrname ='givenname' then
               l_first_name :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('givename/firstname--'||l_first_name);
     elsif entry.attr(l_counter1).attrname ='sn' then
               l_last_name :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('sn/lastname--'||l_last_name);
          elsif entry.attr(l_counter1).attrname ='mail' then
               l_email := entry.attr(l_counter1).attrval(l_counter2);
               ckerror(' email--'||l_email);
          elsif entry.attr(l_counter1).attrname ='mobile' then
               l_mobile :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('mobile--'||l_mobile);
          elsif entry.attr(l_counter1).attrname ='telephonenumber' then
               l_work_phone :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('work telphone--'||l_work_phone);
          elsif entry.attr(l_counter1).attrname ='cn' then
               l_portal_user :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('cn/username--'||l_portal_user);
          elsif entry.attr(l_counter1).attrname ='description' then
               l_description :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('description--'||l_description );
          else
          ckerror('handle other entry name--'||     entry.attr(l_counter1).attrname);
          ckerror('handle other entry--'||entry.attr(l_counter1).attrval(l_counter2) );
          end if;
end if;
ckerror('end compare at second loop');
ckerror('NULL ASSIGN ISSUE FOR 72 --'||entry.attr(counter1).attrval(counter2));
user_vals(counter2) := entry.attr(counter1).attrval(counter2);
END LOOP;
ckerror('end first loop');
--- put ldap
dbms_ldap.populate_mod_array(user_array,DBMS_LDAP.MOD_ADD, entry.attr(counter1).attrname,user_vals);
user_vals.delete;
END LOOP;
processs other (l_firstname...) vars in SQL sataement
EXCEPTION
WHEN OTHERS THEN
ckerror( 'Exception in PRE_ADD plugin. Error code is ' || TO_CHAR(SQLCODE));
ckerror( ' ' || Sqlerrm);
rc := 909;
errormsg := 'Error code:'|| rc||' exception: pre_add data';
END;

Hy Tom,
I am interested in LDAP with OID PROVISIONING in portal 10g application.
we create a register procedure.
however. i got an error message as ORA-06502: PL/SQL: numeric or value error: NULL index table key value.
After debuging, we found that issue result assign null value .
when we assign as
user_vals(counter2) := entry.attr(counter1).attrval(counter2);
It seems that that we can not assign entry.attr(counter1).attrval(counter2) to other var two time in procedure.
It is server configuration issue or code issue.
Thanks
Newweber
*********************** Code
PROCEDURE pre_add (     ldapplugincontext IN ODS.plugincontext,
               dn IN VARCHAR2,
               entry IN ODS.entryobj,
               rc OUT INTEGER,
               errormsg OUT VARCHAR2
IS
ret                INTEGER;
l_portal_user      wwsec_person.USER_NAME%type;
l_first_name      wwsec_person.FIRST_NAME%type;
l_last_name      wwsec_person.LAST_NAME%type;
l_email      wwsec_person.EMAIL%type;
l_work_phone      wwsec_person.WORK_PHONE%type;
l_mobile      wwsec_person.MOBILE_PHONE%type;
counter1           pls_integer;
counter2           pls_integer;
retval                pls_integer := -1;
s                integer;
user_session           DBMS_LDAP.session;
user_dn           varchar(256);
user_array           DBMS_LDAP.mod_array;
user_vals           DBMS_LDAP.string_collection;
user_binvals           DBMS_LDAP.blob_collection;
indx                number := 1;
BEGIN
l_portal_user      :=null;
l_first_name      :=null;
l_last_name      :=null;
l_email      :=null;
l_work_phone      :=null;
l_mobile      :=null;
l_description      :=null;
rc := 0;
errormsg :=null;
-- Create a mod_array
user_array := dbms_ldap.create_mod_array(entry.binattr.count + entry.attr.count);
-- Create a user_dn
user_dn := substr(dn,1,instr(dn,',',1,1))||'cn=users,dc=e-hms,dc=net';
FOR l_counter1 IN 1..entry.attr.COUNT LOOP
     FOR l_counter2 IN 1..entry.attr(l_counter1).attrval.COUNT LOOP
     ckerror('second loop get value--'|| entry.attr(l_counter1).attrname || '[' || l_counter1 || ']' ||'.val[' || l_counter2 || '] = ' ||entry.attr(l_counter1).attrval(l_counter2));
if entry.attr(l_counter1).attrval(l_counter2)     is null then
ckerror('handle null attribule ');
else
-- get value
          ckerror('get value2'||entry.attr(l_counter1).attrname);
IF entry.attr(l_counter1).attrname ='givenname' then
               l_first_name :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('givename/firstname--'||l_first_name);
     elsif entry.attr(l_counter1).attrname ='sn' then
               l_last_name :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('sn/lastname--'||l_last_name);
          elsif entry.attr(l_counter1).attrname ='mail' then
               l_email := entry.attr(l_counter1).attrval(l_counter2);
               ckerror(' email--'||l_email);
          elsif entry.attr(l_counter1).attrname ='mobile' then
               l_mobile :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('mobile--'||l_mobile);
          elsif entry.attr(l_counter1).attrname ='telephonenumber' then
               l_work_phone :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('work telphone--'||l_work_phone);
          elsif entry.attr(l_counter1).attrname ='cn' then
               l_portal_user :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('cn/username--'||l_portal_user);
          elsif entry.attr(l_counter1).attrname ='description' then
               l_description :=entry.attr(l_counter1).attrval(l_counter2);
               ckerror('description--'||l_description );
          else
          ckerror('handle other entry name--'||     entry.attr(l_counter1).attrname);
          ckerror('handle other entry--'||entry.attr(l_counter1).attrval(l_counter2) );
          end if;
end if;
ckerror('end compare at second loop');
ckerror('NULL ASSIGN ISSUE FOR 72 --'||entry.attr(counter1).attrval(counter2));
user_vals(counter2) := entry.attr(counter1).attrval(counter2);
END LOOP;
ckerror('end first loop');
--- put ldap
dbms_ldap.populate_mod_array(user_array,DBMS_LDAP.MOD_ADD, entry.attr(counter1).attrname,user_vals);
user_vals.delete;
END LOOP;
processs other (l_firstname...) vars in SQL sataement
EXCEPTION
WHEN OTHERS THEN
ckerror( 'Exception in PRE_ADD plugin. Error code is ' || TO_CHAR(SQLCODE));
ckerror( ' ' || Sqlerrm);
rc := 909;
errormsg := 'Error code:'|| rc||' exception: pre_add data';
END;

Issue in AD Provisioning

Hi All,
I am facing issue in provisioning users from oim to Ad using AD 11g Connector.
but in history Group Membership Insert rejected every time but all other task is working fine .
its showing error message as:
Response:Connection failed
Response Description:can not make connection to resource
Logs is:
[2013-04-18T09:25:11.077+02:00] [server_oim_QAT01] [ERROR] [] [ORACLE.IAM.CONNECTORS.ICFCOMMON.PROV.ICPROVISIONINGMANAGER] [tid: [ACTIVE].ExecuteThread: '22' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 9e99b5f79a81ee67:-18f198a4:13e12164d71:-8000-000000000000f962,0] [APP: oim#11.1.1.3.0] oracle.iam.connectors.icfcommon.prov.ICProvisioningManager : doUpdate : Error while updating user[[
org.identityconnectors.framework.common.exceptions.ConnectionFailedException: Unable to get the Directory Entry
at org.identityconnectors.framework.impl.serializer.CommonObjectHandlers$4.createException(CommonObjectHandlers.java:165)
at org.identityconnectors.framework.impl.serializer.CommonObjectHandlers$4.createException(CommonObjectHandlers.java:164)
at org.identityconnectors.framework.impl.serializer.CommonObjectHandlers$ThrowableHandler.deserialize(CommonObjectHandlers.java:115)
at org.identityconnectors.framework.impl.serializer.binary.BinaryObjectDecoder$InternalDecoder.readObject(BinaryObjectDecoder.java:162)
at org.identityconnectors.framework.impl.serializer.binary.BinaryObjectDecoder.readObject(BinaryObjectDecoder.java:313)
at org.identityconnectors.framework.impl.serializer.binary.BinaryObjectDecoder.readObjectField(BinaryObjectDecoder.java:417)
at org.identityconnectors.framework.impl.serializer.MessageHandlers$5.deserialize(MessageHandlers.java:155)
at org.identityconnectors.framework.impl.serializer.binary.BinaryObjectDecoder$InternalDecoder.readObject(BinaryObjectDecoder.java:162)
at org.identityconnectors.framework.impl.serializer.binary.BinaryObjectDecoder.readObject(BinaryObjectDecoder.java:313)
at org.identityconnectors.framework.impl.api.remote.RemoteFrameworkConnection.readObject(RemoteFrameworkConnection.java:153)
at org.identityconnectors.framework.impl.api.remote.RemoteOperationInvocationHandler.invoke(RemoteOperationInvocationHandler.java:101)
at $Proxy379.update(Unknown Source)
at sun.reflect.GeneratedMethodAccessor2077.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.identityconnectors.framework.impl.api.DelegatingTimeoutProxy.invoke(DelegatingTimeoutProxy.java:107)
at $Proxy379.update(Unknown Source)
at sun.reflect.GeneratedMethodAccessor2077.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.identityconnectors.framework.impl.api.LoggingProxy.invoke(LoggingProxy.java:76)
at $Proxy379.update(Unknown Source)
at org.identityconnectors.framework.impl.api.AbstractConnectorFacade.update(AbstractConnectorFacade.java:154)
at oracle.iam.connectors.icfcommon.prov.ICProvisioningManager.doUpdate(ICProvisioningManager.java:612)
at oracle.iam.connectors.icfcommon.prov.ICProvisioningManager.updateChildTableValues(ICProvisioningManager.java:487)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpADIDCUPDATECHILDTABLEVALUES.UPDATECHILDTABLEVALUES(adpADIDCUPDATECHILDTABLEVALUES.java:111)
at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpADIDCUPDATECHILDTABLEVALUES.implementation(adpADIDCUPDATECHILDTABLEVALUES.java:56)
at com.thortech.xl.client.events.tcBaseEvent.run(tcBaseEvent.java:196)
at com.thortech.xl.dataobj.tcDataObj.runEvent(tcDataObj.java:2492)
at com.thortech.xl.dataobj.tcScheduleItem.runMilestoneEvent(tcScheduleItem.java:2917)
at com.thortech.xl.dataobj.tcScheduleItem.eventPostInsert(tcScheduleItem.java:547)
at com.thortech.xl.dataobj.tcDataObj.insert(tcDataObj.java:602)
at com.thortech.xl.dataobj.tcDataObj.save(tcDataObj.java:474)
at com.thortech.xl.ejb.beansimpl.tcProvisioningOperationsBean.retryTasks(tcProvisioningOperationsBean.java:4042)
at Thor.API.Operations.tcProvisioningOperationsIntfEJB.retryTasksx(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.jee.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:37)
at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
at com.bea.core.repackaged.springframework.jee.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:50)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy348.retryTasksx(Unknown Source)
at Thor.API.Operations.tcProvisioningOperationsIntfEJB_4xftoh_tcProvisioningOperationsIntfRemoteImpl.__WL_invoke(Unknown Source)
at weblogic.ejb.container.internal.SessionRemoteMethodInvoker.invoke(SessionRemoteMethodInvoker.java:40)
at Thor.API.Operations.tcProvisioningOperationsIntfEJB_4xftoh_tcProvisioningOperationsIntfRemoteImpl.retryTasksx(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
please give any idea why i am getting this error its very urgent.
thanks

I would suggest you enable debugging on your connector server to see what all is occurring.
-Kevin

Delete Access Issue for a Provisioned Resource in OIM..

Thank you for the help provided for revoking the resource.I am able to revoke the resource from the User profile details.
But I have to revoke the resource from the delete access in the same way as I have done for add access for provisioning a resource(means I have to follow the proper flow from approval work flow ,the flow must go to provisioning work flow and from there GIA analyst group should be able to revoke the resource
(GIA analyst should be able to revoke the resource which has been provisioned and which is provided in the open task ).
Plz provide the way to overcome the revoking issue.

Thank you for the information you provided.I have done changes in the rule designer as per the way you told, but still I am not able to revoke the resource.Its completing the approval flow in approval details but Resource is not getting de-provisioned.Please suggest me what needs to be done.
Plz give me the clear view how to revoke the resource through delete access flow .

GoogleApps Provisioning Error

Hi All,
I am facing errors while provisioning users to Googleapps. Here all the steps I followed
1.. Created Domain in Google apps
2. Created admin user in GApps
3. Enabled Provision in googleapps
4. Downloaded the connector
5. Downloaded the jar files (gdata-appsforyourdomain-1.0.jar, gdata-core-1.0.jar, gdata-client-1.0.jar, google-collect-1.0-rc1.jar)
6. Installed the connector
7. Modified the IT resource
8. Added the path for jar files and wlfullclient too
and ater crating a usr in OIM, after adding the GooglaApps user, The status i saw is "provisioning" but not provisioned.
and the Resource History shows Response Description:     Cannot make connection to the resource
and the log shows
Thread Id: 142 Time: 2012-08-28 09:07:21.471   Class: oracle.iam.connectors.icf
common.prov.ICProvisioningManager       Method: createObject    Level: ERROR
Message: Error while creating user
org.identityconnectors.framework.common.exceptions.ConnectionFailedException: co
m.google.gdata.util.AuthenticationException: Error connecting with login URI
Suggestions please....................
Thanks
Kumar
Edited by: 915734 on Aug 28, 2012 2:55 PM
Edited by: 915734 on Aug 28, 2012 2:56 PM

Hi handat,
I tried telnet but the connection failed. BTW I am able to access Google from the browser. Could you please tell me what changes to be done in proxt settings.
Thanks
Kumar
Edited by: Kumar.kummathi on Sep 5, 2012 2:53 PM

Issue with GoogleApps calendar BIS sync.

So i've started using google calandar on my google apps account for my school to manage my schedule. I would like to be able to wirelessly sync with my google calandar and my Blackberry 9930. I have the email account added under my BIS settings and emai syncs fine. From what I understand all I need to do to get the calandar syncing is to check the calandar option under synchronization options, however this option is not there. Is there a soloution to this?
Also on my playbook I added the account as a CalDav account since I know google has discontinued activesync support. The playbook immidiately downloaded my schedule however I cannot add events on my playbook. My googleapps account is grayed out when adding events. When I set my googleapps account as the default calandar account nothing happens when I hit the add event button. What is going on?

It sounds like your new email's MX record hasn't been updated, which means, when the BlackBerry Internet Service checks the MX record, it finds your old server address. It may be that your school's IT department hasn't disabled the Exchange Server, and thus, the MX record is not updating.
*The MX record (Mail Exchanger record) is a resource record in DNS that points to the mail server.
Thanks.
-CptS
Come follow your BlackBerry Technical Team on twitter! @BlackBerryHelp
Be sure to click Kudos! for those who have helped you.Click Solution? for posts that have solved your issue(s)!

Issues with offline provisioning in OIM 11G

We are facing an issue with OIM 11G where we are trying to provision few resources via offline provisioning. Ths issue is that when I do a provisioning/disable/enable on the resource the status of the resource says something like "provisioning in queue/Disable in queue/Enable in queue". This is not happenning all the time but seems to be consistent when I repeatedly disable/enable the resource. Once the status of hte resource remains "in queue" it is never changed back to the actual status which says provisioned/disabled/enabled. Can anyone provide me an insight of what is happenning here and how the offline events are processed within OIM? Is there any way to get the status of the resource back to normal? Please let me know.
Thanks!

Check
http://docs.oracle.com/cd/E14899_01/doc.9102/e14761/offline_prov.htm
Configuring the Remove Failed Off-line Messages Scheduled Task
Configure the Remove Failed Off-line Messages scheduled task to schedule deletion of failed requests from the OPS table. While configuring this scheduled task, set a value for the Remove Failed Messages Older Than (days) attribute.
Regards
Shashank

"There is an issue to the Provision or Completion ...

Hi.
I've got that message on my account.
I would'nt be bothered execept my Broadband Talk and BTVision don't work.
My Broadband has been working since Tuesday 18th December.
I've phoned BtVision Tech Support most days and seem to be getting nowhere.
Any help would be greatful.
Colin38
Solved!
Go to Solution.

If you cannot login to that page, then your Broadband Talk number has been ceased. The BBT service is to be ceased eventually.
See
http://community.bt.com/t5/Other-BB-Queries/Broadband-Talk-Withdrawal-Updated-on-14th-Dec-2012/td-p/...
There are some useful help pages here, for BT Broadband customers only, on my personal website.
BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

Developer Application Provisioning Issues -- Only one app at a time?

_The upshot:_
You can have one and only one developer provision and developer application on the iPhone at a time otherwise you get installation errors (i.e. 0xe8000001).
_To fix:_
Use Xcode Organizer to ensure that you have one and only one application and provision installed to the iPhone that uses your developer certificate.
_To any Apple people:_
If I am wrong about any of this, please let me know. I have wasted 3-4 days over the past 2 weeks due to these issues, and any explanation would be well received! Having one and only one application and provision installed to the iPhone fixed the 0xe8000001 issues for me.
_Long winded explanation:_
It turns out that I am working on multiple iPhone applications at the same time.
Each application has a different AppID (as registered on the iPhone Developer Portal).
I have spent quite a bit of time having major issues with Developer Provisioning and application installation from within Xcode and Xcode Organizer, which led me to not be able to debug my application on a live iPhone.
I finally discovered my problem: I can only have one app and one provision on the iPhone that uses the same developer certificate.
When swapping between Xcode projects if I remove all provisions and applications using Organizer and re-add only the provision of the application I am working on, then the install errors at build time go away.
Samples of install errors that manifest themselves using the 0xe8000001 code:
Thu Aug 21 16:56:02 unknown mobileinstallationproxy[770] <Error>: entitlement 'application-identifier' has value not permitted by provisioning profile
Thu Aug 21 16:56:02 unknown mobileinstallationproxy[770] <Error>: verify_executable: Could not validate signature: e8008016
-- Taken from the Xcode Organizer Console window for my development iPhone --
These errors seem to be occurring because of an install time check against the installed provision files to verify the app, and it seems the provision from an already installed application is being used.
This is probably occurring because the main developer certificate has to be the same between the 2 applications. As the scan through the provisions is occurring, the certificate of the new app matches the certificate from the already installed app, and the provision check fails due to different App IDs.
There is one and only one developer certificate allowed per iPhone Standard program.
I hope that this helps some other people out there with their development provisioning and debug / installation errors.
--Batgar

This is why you should create a wildcard developer certificate (com.youcompany.*)...follow the directions in the program portal. Then you can then install all your apps on your phone.

Facing issue while provisioning to AD which is in multiple domain in single forest

Hi All,
I am facing issue while user provisioning to AD which is in multiple domain in single forest.I can Synchronize the OU and Groups from Global Catalog i.e. root domain,but unable to Synchronize OU and Groups from child domains.Following is depict of my domain.
Root -------   example.com
         |_______doamin1.example.com
         |_______doamin2.example.com
         |_______domain3.example.com
My global catalog is example.com where I have configure my connector.Following is the snippets of it.
Parameter
Value
ADLDSPort
BDCHostNames
Configuration Lookup
Lookup.Configuration.ActiveDirectory.Trusted
Connector Server Name
Active Directory Connector Server
Container
DC=example,DC=com
DirectoryAdminName
DWPTEST\adm
DirectoryAdminPassword
DomainName
example.com
IsADLDS
no
LDAPHostName
GlobalCatalog server name -> where my root domain is present
SyncDomainController
SyncGlobalCatalogServer
GlobalCatalog server name -> where my root domain is present
UseSSL
no
Above configuration I am using to Synch my OU and Groups using scheduler Job.Following changes I have made in connector configuration.
1. Set the value of the SearchChildDomains entry to yes in one of the following lookup definitions:
For trusted source reconciliation: Lookup.Configuration.ActiveDirectory.Trusted
For target resource reconciliation: Lookup.Configuration.ActiveDirectory
2. Specify the name of the domain controller that is hosting the Global Catalog Server as the value of the SyncGlobalCatalogServer IT resource parameter.
For provisioning purpose I am trying to find following configuration which is mentioned in connector document,but unable to locate it.
In the connector, the referral chasing option is set to All, which means that all referrals are chased when any referral is provided by the domain controller
Thanks in advance.
Regards,
Nitin Natekar

Hi All,
Thanks all for the reply.I was not getting an error,but once I changed the connector configuration,It started working. I Kept the LDAPHostName parameter blank in connector configuration.
Thanks all for reply
Regards,
Nitin Natekar

[OIM] Error in Direct Provisioning (with auto save form) - GTC DB App Table

Hi,
I am getting an error when setting up direct provision of a GTC DB App Conn using OIM access policy (and group membership) or through manual provisioning with prepopulate and auto save form.
Manual provisioning with prepopulate ONLY (not with auto save form) WORKS!!!
Some information about my OIM config:
- Prepopulate adapters are set up on both forms (parent and child)
- "Auto prepopulate" and "Auto save form" are set up at Process Definition
- For direct provisioning, I have created an access policy with an associated group which has a membership rule
What it is working:
- Provisioning manually, using prepopulate adapters only, not auto save form. Both tables are updated properly
- All *3 tasks are called and finished with status=Completed*: "System Validation", "Create User" and "Child Table UD_<connector child table name>_US row Inserted"
Testing direct provisioning:
- I have tested adding the resource manually with prepopulate and autosave form configured, and also through access policy/group membership. The error is the same on both tests
- The resource is displayed as provisioned and it is created an entry in the parent table of the resource, but not on child table
- I also observed that only: "System Validation" and "Create User" tasks were executed (status=Completed). But it is missing the task "Child Table UD_<connector child table name>_US row Inserted"
- The error log info displays only an error regarding to UGP table (Groups info) but I am not sure if that is the cause of entry creation on child table.
It seems the SQL stmt tries to get ugp_name (group name) using ugp_key but that has null value.
"SELECT ugp_name FROM ugp WHERE ugp_key=java.sql.SQLSyntaxErrorException: ORA-00936: missing expression"
Note: When testing manually (without auto save form), I got "SELECT ugp_name FROM ugp WHERE ugp_key=1" which it is the same SQL stmt but the value is provided.
My guess:
- It seems that error is aborting the whole execution process so "Child Table UD_<connector child table name>_US row Inserted" task does not run, even though previous tasks are finished with the status=Completed. Consequently, the entry is not created on child table.
Please, any guess or help would be very helpful. In case nothing works, I guess I will have to create and customize a "Update child Form" task as an workaround which would be called after "Create User" task.
Regards,
Hugo
My environment:
- Windows 2003, WebLogic 10.3.0.0, OIM 9.1.0.2 BL4, Oracle 10g, Java 1.6, DB App Table Connector 9.1.0.2 (from October 2009)
- Target Resource: Parent and Child Table (Oracle 10g - the same OIM DB)

An update:
I solved that error about "ORA-00936: missing expression" applying OIM 9.1.0.2 BP05. That was not impacting my issue regarding direct provisioning with auto save form and child form.
So please if anyone can confirm:
- Can I set up prepopulate adapters on child forms AND also use "auto save form" on GTC DB App Table connector?
If not, any suggestion?
Regards
Hugo

ISE 1.2 - CWA supplicant provisioning with anchor WLC

Hi all,
Having an issue with supplicant provisioning via CWA on an anchor controller. I am able to connect via CWA and authenticate etc no problems but when the device registration page appears it says "unable to connect to the network at this time" - the mac address is populated but the button says try again. Once I click try again it cycles back to the original guest portal login page. In the reports section the failed supplicant provisioning message is "Error while trying to determine access privileges: Fail to get hostName from session cache.".
I have tried the same policy without the anchor (ie local controller) and it works perfectly. Interestingly enough if I manually register the device first then connect to the guest portal it allows me to click register and proceed to supplicant provisioning. I have also tried the anchor setup using peap and the NSP redirect - this also works perfectly.
I can confirm ahead of time that firewalls etc are not an issue with permit IP any any between all working parts - no blocks no drops etc. The policy is the standard trustsec CWA setup with Enable self-provisioning ticked. For what it is worth I am absolutely confident with the config having deployed this before - albeit without an anchor controller.

Stephen,
I was able to work with TAC the customer account team to find a resolution. The issue is with the Anchor WLC and the session not being replicated. I was able to get around it by disabling radius accounting for the ssid on the anchor controller, but when looking at the bug it looks like an alternative fix is to disable fast ssid switching, which would cause issues with BYOD in the dual ssid world. I'm still doing testing, but the accounting change seems to have solved it. The bug ID is: CSCui38627

Issue in GoogleApps provisioning

Similar Messages

Maybe you are looking for