Issue with provisioning

Using access policies we are provisioning accounts to AD, Ebiz, GoogleApp, Skillsoft & SchoolMAX. The accounts are provisioned.
But the resource profile shows the Resources iin provisioning state with status of
Ebiz, GoogleApp, Skillsoft create account task showing account already exists.
Recently we migrated from Devl to Staging.
I even restarted the environment once.
Staging is a setup of weblogic clustering.
Ex,For GoogleApps, the createUser task is called twice. First time its successful.
But the second time, it fails with the error - Entity already exists.
Many adapters are called twice.
Any help would be really great.
Thanks,
Gopal

We use Oracle EBS HRMS as trusted resource & bring the data using EBS ER connector.
Then we provision to EBS FND_USER table using EBR UM connector.
Yep, what you said is exactly correct, I cant see the execution of an adapter
twice, unless the user is created twice. But Im seeing.
Running GETRANDOMPASSWORD
Target Class = com.company.company.utilities.RandomPassword
Generating Random Password
Running SETVALUEFORLOCORGIDFIELD
Target Class = com.company.company.utilities.ReturnLocOrgid
Running GETUSERID
Target Class = com.company.company.utilities.GenerateUserID
Stageq Test
User ID :Stageq.Test
Checking for Duplicate User ID...
Creating New User...
Exiting...
Running GENERATEEMAIL
Target Class = com.thortech.xl.util.adapters.tcUtilStringOperations
DEBUG: setDebug: JavaMail version 1.4ea
.Running GETRANDOMPASSWORD
Target Class = com.company.company.utilities.RandomPassword
Generating Random Password
Running SETVALUEFORLOCORGIDFIELD
Target Class = com.company.company.utilities.ReturnLocOrgid
Running GETUSERID
Target Class = com.company.company.utilities.GenerateUserID
Stageq Test
User ID :Stageq.Test
Checking for Duplicate User ID...
Creating New User...
Exiting...
Running GENERATEEMAIL
Target Class = com.thortech.xl.util.adapters.tcUtilStringOperations
DEBUG: setDebug: JavaMail version 1.4ea
Also, when I do manual provision to these resource, its all done perfectly.
Only when its automated, it behaves this way.
Is there anything/config in OIM that retries any task??
I know we have 'Retry Period in Minutes' for tasks in Process Def.
But thats not configured for any resource.
Thanks,
Gopal

Similar Messages

Issues with offline provisioning in OIM 11G

We are facing an issue with OIM 11G where we are trying to provision few resources via offline provisioning. Ths issue is that when I do a provisioning/disable/enable on the resource the status of the resource says something like "provisioning in queue/Disable in queue/Enable in queue". This is not happenning all the time but seems to be consistent when I repeatedly disable/enable the resource. Once the status of hte resource remains "in queue" it is never changed back to the actual status which says provisioned/disabled/enabled. Can anyone provide me an insight of what is happenning here and how the offline events are processed within OIM? Is there any way to get the status of the resource back to normal? Please let me know.
Thanks!

Check
http://docs.oracle.com/cd/E14899_01/doc.9102/e14761/offline_prov.htm
Configuring the Remove Failed Off-line Messages Scheduled Task
Configure the Remove Failed Off-line Messages scheduled task to schedule deletion of failed requests from the OPS table. While configuring this scheduled task, set a value for the Remove Failed Messages Older Than (days) attribute.
Regards
Shashank

Provisioning issues with password changes

I have installed and configured IDM7.1+sp3 with our AS Java portal. Most features seems to work OK, except:
1.1. Changing fullname, display name, address, etc work - but salutation or title info doesn't display correctly (only when language independant).
1.2. Can lock the user - but not unlock.
1.3. Can change password (self service or via Management tab) - but password "disappears" and user can't login again via the UI or directly thru the LogonGUI.
1.4. If the user's password expires, he gets prompted to change it - this change works fine.
After "devouring" all the documentation I could fine... I read in the Release Notes the following:
2.1. Users are authenticated by the SAP NetWeaver AS Java (and not by the Identity Center). The password policy of the Identity Center is not used.
      = enabling or disabling "password provisioning" in the Password Policy tab makes no difference then?
2.2 The login task does no longer exist since the authentication is done by the SAP NetWeaver AS Java (UME).
      = ok I get this part...
2.3 Change of password is handled by SAP NetWeaver AS Java (UME) and the change password task is no longer available.
      = so the Password Reset tab is also "pointless"?
2.4 A user's MSKEYVALUE is used as the UME logon ID.
      = right
2.5 Password reset is handled by SAP NetWeaver AS Java. See SAP NetWeaver Identity Management Identity Center Implementation Guide u2013 Self-service password reset for details
      = (what should I do with this?) I did get this working but stopped with some error about the "encrypt password".
My SAP landscape is pretty standard (no custom fields/attributes) - so the IDM Provisioning framework should work "out of the box" - in my understanding...
Any ideas?
Sorry about the multiple postings - issue with proxy server. Pls ignore/remove the extras.

Hi.
I try to give some answers based on my experience below:
1.1. Changing fullname, display name, address, etc work - but salutation or title info doesn't display correctly (only when language independant).
>> Have you checked that the user has correct language set in Java UME? Also check that in Presentation page of the corresponding Attribute the Display name parameter is set with corresponding languages used.
1.2. Can lock the user - but not unlock.
>> Can you see any errors e.g. in Job Log? Would help to solve the issue
1.3. Can change password (self service or via Management tab) - but password "disappears" and user can't login again via the UI or directly thru the LogonGUI.
>> The reason might be the encryption of the password. Typically the UI should take care of the encrypting the password into MX_ENCRYPTED_PASSWORD attribute, especially when you're implementing tasks like Self Service Password Reset. I've noticed that when I disabled the Enable Password Provisioning option for the Identity Store, I got rid of the error regarding attribute MX_ENCRYPTED_PASSWORD and UI automatic encryption started to work. (In my case two way pwd provisioning is not needed) Otherwise if you have issues with encrypted password in your custom tasks, check whether the value is encrypted and use java script to encrypt the password when reading the value form the UI field and saving it to MX_ENCRYPTED_PASSWORD attribute, if applicable.
Hopefully this helps you even a bit.
Br. Jukka

Issues with Approval Task IN IDM 7.1

Hi,
I have been facing issues with Approval task.
Firstly,
I have created an Approval task with 'Mskeyvalue' and 'Mxref_mx_privilege' as attributes.
I am having a problem in the Approvers workflow UI where, we see these approvals.
It not only displays the requested privilege,but also the already provisioned privileges of the enduser to the approver.
He will not be able to recognize which privilege has been requested.
Is this an already known issue which has been sorted out in recently updated patches?
If not can you suggest me a solution for this.
Secondly,
The privilege requested by the end-user is getting provisioned to the backend,even before it is Approved.
Since Provisioning tasks are mapped through repository,privileges are getting provisioned as soon as
an entry is made into the Identity Stores.
But,Ideally the requested privilege should not be proviosioned to the backend until it is approved by the Approver.
Is this an already known isuue which has been sorted out in recently updated patches?
If not can you suggest me a solution for this.
Thanks and Regards,
Joel
Edited by: Joel Sundararajan Davis on Jul 16, 2009 11:04 AM

Joel,
I'm afraid the approval process is not quite this simple. You are correct, if you have provisioning setup on the repository for a privilege it will be assigned immediately. The approval task as you are using it works as an 'interrupt' to a process - nothing more.
There is an entry type called pending value that you would need to leverage in order to have privileges requested route for approval. This pending value object is created by default for role requests in 7.1, but I'm not sure how to create a pending value for a privilege.
Which brings to mind a question - is there a reason you want users to request privileges instead of roles? In general I think the security model is setup so that users are assigned roles which contain one or more privileges.
If you do choose to use a role instead of privilege, simply set the attribute MX_APPROVAL_TASK to the id of the approval task you want to use and the system will do the rest. The display you referenced in the first part of your question will always display the current values of the attributes you select for the user, so don't try to display the roles there - just display the user id, name, whatever else is helpful and when the approver clicks on the user id they will get the approval details which will include the requested role.
Also, please note that if you would like to assign a role directly anywhere (bypass approvals) you can use the switch: {direct_reference=1}
-Geoff

Issue with LCM while migrating planning application in the cluster Env.

Hi,
Having issues with LCM while migrating the planning application in the cluster Env. In LCM we get below error and the application is up and running. Please let me know if anyone else has faced the same issue before in cluster environment. We have done migration using LCM on the single server and it works fine. It just that the cluster environment is an issue.
Error on Shared Service screen:
Post execution failed for - WebPlugin.importArtifacts.doImport. Unable to connect to "ApplicationName", ensure that the application is up and running.
Error on network:
“java.net.SocketTimeoutException: Read timed out”
ERROR - Zip error. The exception is -
java.net.SocketException: Connection reset by peer: socket write error
at java.net.SocketOutputStream.socketWrite0(Native Method)
at java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:92)
at java.net.SocketOutputStream.write(SocketOutputStream.java:136)
at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)

Hi,
First of all, if your environment for source and target are same then you will have all the users and groups in shared services, in that case you just have to provision the users for this new application so that your security will get migrated when you migrate the from the source application. If the environs are different, then you have to migrate the users and groups first and provision them before importing the security using LCM.
Coming back to the process of importing the artifacts in the target application using LCM, you have to place the migrated file in the @admin native directory in Oracle/Middleware/epmsystem1.
Open shared services console->File system and you will see the your file name under that.
Select the file and you will see all your exported artifacts. Select all if you want to do complete migration to target.
Follow the steps, select the target application to which you want to migrate and execute migration.
Open the application and you will see all your artifacts migrated to the target.
If you face any error during migration it will be seen in the migration report..
Thanks,
Sourabh

Workspace Login issue with IR

I installed IR services and workspace connected with oracle database.
EPM system version is 11.1.1.3
When I created a new user provisioned with IR administrator role, I could only login once.
If I log off and relogin, workspace prompt that "adf.jsp" error "CDS.mode not found".
Anyone who can help me? Thanks.
I found that when I logined with a new user, a user perference file has been created in security, when relogin next time following error prompted.
Error Loading Adf 'http://hyperion:19000/workspace/browse/dyn?page=/modules/com/hyperion/tools/cds/repository/bpm/mode/Adf.jsp&instance=16&serverName=Workspace&bpmDesignerInstallerRelativeUri=%2Fwebstart%2Fstartup.jsp&jawsScriptInstallerRelativeUri=%2FAccessibilityIRScripts%2FAccessibilityIRScriptsSetup.exe&resizeContentInterval=2000' for module with id : cds.mode
There was some communication error. Response is : http://hyperion:19000/workspace/browse/dyn <?xml version="1.0" encoding="UTF-8"?>
<Application>
<BpmModule id="cds.mode">
<BpmContent/>
</BpmModule>
<Resources>
<Script><![CDATA[
BpmImport("com.hyperion.tools.cds.HSRoleVars");
var rRoleVars = com.hyperion.tools.cds.HSRoleVars;
rRoleVars.addRole(0, false);
rRoleVars.addRole(1, false);
rRoleVars.addRole(2, false);
rRoleVars.addRole(3, false);
rRoleVars.addRole(4, true);
rRoleVars.addRole(5, true);
rRoleVars.addRole(6, false);
rRoleVars.addRole(7, false);
rRoleVars.addRole(8, false);
rRoleVars.addRole(9, false);
rRoleVars.addRole(10, false);
rRoleVars.addRole(11, true);
rRoleVars.addRole(12, true);
rRoleVars.addRole(13, true);
rRoleVars.addRole(14, true);
rRoleVars.addRole(15, false);
rRoleVars.addRole(16, false);
rRoleVars.addRole(17, false);
rRoleVars.addRole(18, false);
rRoleVars.addRole(19, false);
rRoleVars.addRole(20, false);
rRoleVars.addRole(21, true);
rRoleVars.addRole(22, true);
rRoleVars.addRole(23, true);
rRoleVars.addRole(24, true);
rRoleVars.addRole(25, true);
rRoleVars.addRole(26, false);
rRoleVars.addRole(27, false);
rRoleVars.addRole(28, false);
rRoleVars.addRole(29, true);
rRoleVars.addRole(30, true);
rRoleVars.addRole(31, true);
rRoleVars.addRole(32, false);
rRoleVars.addRole(33, true);
rRoleVars.addRole(34, true);
rRoleVars.addRole(35, false);
rRoleVars.addRole(36, false);
rRoleVars.addRole(37, false);
BpmImport("com.hyperion.tools.cds.util.HSConstants");
BpmImport("com.hyperion.tools.cds.bindows.HSBaseContainerHandler");
* Handler associated with the open Application module
com.hyperion.tools.cds.repository.bpm.mode.Handler = function()
if (_biInPrototype)
return;
com.hyperion.tools.cds.bindows.HSBaseContainerHandler.call(this);
BpmImport("com.hyperion.tools.cds.util.HSCallback");
BpmImport("com.hyperion.tools.cds.data.HSNetwork");
BpmImport("com.hyperion.tools.cds.data.HSNode");
BpmImport("com.hyperion.tools.cds.data.HSNodeType");
BpmImport("com.hyperion.tools.cds.CDSCommand");
BpmImport("com.hyperion.tools.cds.repository.HSFileDialog");
BpmExtend(com.hyperion.tools.cds.repository.bpm.mode.Handler, com.hyperion.tools.cds.bindows.HSBaseContainerHandler, "com.hyperion.tools.cds.repository.bpm.mode.Handler");
c.ENUMERATEDAPPS_LIST = new Array();
c.ENUMERATEDAPPS_MENUDATA = new Array();
c.NAVIGATEID_MAPPINGS = {'exploreanotation':'bpm.mnit_ToolsViewerAnotationExplorer','answers':'bpm.mnit_ToolsViewerAnswers','dashboards':'bpm.mnit_ToolsViewerDashboards','delivers':'bpm.mnit_ToolsViewerDelivers','publisher':'bpm.mnit_ToolsViewerPublisher','scorecards':'bpm.mnit_ToolsViewerScorecards','metrics':'bpm.mnit_ToolsViewerMetrics','adminGeneral':'bpm.mnit_ToolsAdministerGeneral','adminAuthProperties':'bpm.mnit_ToolsAdministerAuthProperties','adminUserManagement':'bpm.mnit_ToolsAdministerUserManagement','adminPhysicalResources':'bpm.mnit_ToolsAdministerPhysicalResources','adminMimeTypes':'bpm.mnit_ToolsAdministerMimeTypes','adminNotifications':'bpm.mnit_ToolsAdministerNotifications','adminSmartcuts':'bpm.mnit_ToolsAdministerSmartcuts','adminRowLevelSecurity':'bpm.mnit_ToolsAdministerRowLevelSecurity','adminUsageTracking':'bpm.mnit_ToolsAdministerUsageTracking','adminEventTracking':'bpm.mnit_ToolsAdministerEventTracking','adminDimLibrary':'bpm.mnit_ToolsAdministerDimLibrary','adminAppLibrary':'bpm.mnit_ToolsAdministerAppLibrary','adminDataSync':'bpm.mnit_ToolsAdministerDataSync','adminAppUpgrade':'bpm.mnit_ToolsAdministerAppUpgrade','batchScheduler':'bpm.mnit_ToolsScheduleBatchScheduler','viewjob':'bpm.mnit_ToolsScheduleViewJobStatus','viewjob':'bpm.mnit_ToolsScheduleViewJobStatus','manageevents':'bpm.mnit_ToolsScheduleManageEvents','showparameters':'bpm.mnit_ToolsScheduleShowParameters','jobnotifications':'bpm.mnit_ToolsScheduleJobNotifications','jobqueue':'bpm.mnit_ToolsScheduleJobQueue','consolidate':'bpm.mnit_ToolsScheduleConsolidatedJobStatusList','schedJobConsole':'bpm.mnit_ToolsScheduleJobConsole','syncMetadata':'bpm.mnit_ToolsChangeManagementSynchronizeMetadata','datamodelUpdates':'bpm.mnit_ToolsChangeManagementDataModelUpdates','javascriptUpdates':'bpm.mnit_ToolsChangeManagementJavascriptUpdates','genericUpdates':'bpm.mnit_ToolsChangeManagementGenericUpdates','showTaskList':'bpm.mnit_ToolsChangeManagementShowTaskList','taskStatus':'bpm.mnit_ToolsChangeManagementShowTaskStatus','ioc':'bpm.mnit_ToolsChangeManagementShowImpactOfChange','adminConsolidationSystemMessages':'bpm.mnit_AdminConsolidationSystemMessages','adminConsolidationUsersOnSystem':'bpm.mnit_AdminConsolidationUsersOnSystem','adminConsolidationManageServersAndApp':'bpm.mnit_AdminConsolidationManageServersAndApp','adminClassicAppsConsolidation':'bpm.mnit_AdminClassicAppsConsolidation','adminClassicAppsPlanning':'bpm.mnit_AdminClassicAppsPlanning','adminChangeOwner':'bpm.mnit_ToolsAdministerChangeOwner'} ;
* Initialize default values for member variables.
p.initializeDefaults = function()
com.hyperion.tools.cds.bindows.HSBaseContainerHandler.prototype._initializeDefaults.call(this);
if (0)
this._rstTabAlignment = bpm.common.StartupContainerHandler.TAB_ALIGNMENT_TOP;
else
this._rstTabAlignment = bpm.common.StartupContainerHandler.TAB_ALIGNMENT_BOTTOM;
this._iResizeContentInterval =
2000;
var rstContextPath = gContextManager.getContext(this.getModule().getContext()).getPath();
// Remove last backslash.
this._rstContextPath = rstContextPath.substring(0, rstContextPath.length - 1);
this._rCdsStringBundle = BpmStringBundle.getStringBundle("cds");
this.newDocCount = 0;
if (false)
this.getModule().getConfig()['bpm.logoff'] = 'false';
bpm.common.Utils.setUser("test");
com.hyperion.tools.cds.rNetwork = new com.hyperion.tools.cds.data.HSNetwork();
com.hyperion.tools.cds.rNetwork.addServer(
"Workspace",
gModuleManager.getStartupContextPath(),
null,
new com.hyperion.tools.cds.util.HSCallback(
function(rThrowable)
bpm.common.MessageDialog.showDetailsDialog(
rThrowable.getMessageChain(),
rThrowable.getDetailChain(),
null,
BiOptionPane.getImageFromOptionType("error"));
null,
null),
new com.hyperion.tools.cds.util.HSCallback(
function(rstMessage, rLogger)
if (rLogger.isDebug())
rLogger.debug(rstMessage);
null,
bpm.common.Logger.getLogger("com.hyperion.tools.cds.data")));
this._rstSelectedTheme = "BpmTadpole";
* Initialize default values for member variables.
p.initializeActions = function()
com.hyperion.tools.cds.bindows.HSBaseContainerHandler.prototype._initializeActions.call(this);
var rModule = this.getModule();
var rContent = rModule.getContent();
var actionBar = rModule.getActionBarDef();
actionBar.setId("cds.mode.actionBar");
var cmds = this.getModule().getCommands();
var cmdNewDoc = new BpmCommand();
cmdNewDoc.setId("cds.mode.cmdNewDoc");
cmdNewDoc.setEnabled(true);
cmdNewDoc.setParentModule(this.getModule());
cmds.add(cmdNewDoc);
var cmdNewPP = new BpmCommand();
cmdNewPP.setId("cds.mode.cmdNewPP");
cmdNewPP.setEnabled(true);
cmdNewPP.setParentModule(this.getModule());
cmds.add(cmdNewPP);
var cmdNewWP = new BpmCommand();
cmdNewWP.setId("cds.mode.cmdNewWP");
cmdNewWP.setEnabled(true);
cmdNewWP.setParentModule(this.getModule());
cmds.add(cmdNewWP);
var cmdOpenDoc = new BpmCommand();
cmdOpenDoc.setId("cds.mode.cmdOpenDoc");
cmdOpenDoc.setEnabled(true);
cmdOpenDoc.setParentModule(this.getModule());
cmds.add(cmdOpenDoc);
var cmdSubscriptions = new BpmCommand();
cmdSubscriptions.setId("cds.mode.cmdSubscriptions");
cmdSubscriptions.setEnabled(true);
cmdSubscriptions.setParentModule(this.getModule());
cmds.add(cmdSubscriptions);
var cmdManagePersonalPages = new BpmCommand();
cmdManagePersonalPages.setId("cds.mode.cmdManagePersonalPages");
cmdManagePersonalPages.setEnabled(true);
cmdManagePersonalPages.setParentModule(this.getModule());
cmds.add(cmdManagePersonalPages);
var toolBar = new BpmToolBar();
toolBar.setId("cds.mode.tlb");
this.getModule().setToolBarDef(toolBar);
var rToolBarButtonHome = new BiToolBarButton();
rToolBarButtonHome.setId("cds.mode.tlbt_Home");
rToolBarButtonHome.setToolTipText("Home");
rToolBarButtonHome.setEnabled(true);
rToolBarButtonHome.setIcon(new BiImage(this._rstContextPath + "/images/com/hyperion/tools/cds/repository/bpm/TB_Home.gif"));
toolBar.add(rToolBarButtonHome);
var newDocButton = new BiToolBarButton();
newDocButton.setId("cds.mode.tlbt_NewDoc");
newDocButton.setToolTipText("New Document");
newDocButton.setEnabled(true);
newDocButton.setIcon(new BiImage(this._rstContextPath + "/images/com/hyperion/tools/cds/repository/bpm/TB_New.gif"));
newDocButton.setCommand(cmdNewDoc);
toolBar.add(newDocButton);
var openButton = new BiToolBarButton();
openButton.setId("cds.mode.tlbt_Open");
openButton.setToolTipText("Open Document");
openButton.setEnabled(true);
openButton.setIcon(new BiImage(this._rstContextPath + "/images/com/hyperion/tools/cds/repository/bpm/TB_Open.gif"));
openButton.setCommand(cmdOpenDoc);
toolBar.add(openButton);
var explorerModeButton = new BiToolBarButton();
explorerModeButton.setId("cds.mode.tlbt_ExploreMode");
explorerModeButton.setEnabled(true);
explorerModeButton.setText("Explore");
explorerModeButton.setToolTipText("Explore");
explorerModeButton.setIcon(new BiImage(this._rstContextPath + "/images/com/hyperion/tools/cds/repository/bpm/TB_Explore.gif"));
toolBar.add(explorerModeButton);
var rstPath = gModuleManager.getStartupContextPath();var rItem = null;var rNavMenu = application.getComponentById(bpm.common.Constants.MENU_ID_NAV);var rMenuButton = null;var rMenu0=rNavMenu;rItem = new BpmMenuItem();rItem.setId('bpm.mnit_NavWorkspacePages');rItem.setText('Workspace Pages\nw');rMenu0.add(rItem);var rMenu1 = new BpmMenu();rMenu1.setId('bpm.mnu_NavWorkspacePages');rItem.setSubMenu(rMenu1);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_NavWorkspacePagesPersonal');rItem.setText('My Workspace Pages\nm');rMenu1.add(rItem);var rMenu2 = new BpmMenu();rMenu2.setId('bpm.mnu_NavWorkspacePagesPersonal');rItem.setSubMenu(rMenu2);var rNavWorkspacePagesPersonalSubMenu=rMenu2;rMenu2.addEventListener(bpm.common.Constants.EVENT_BEFORESHOW,this._buildWorkspacePagesSubMenu,this);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_NavWorkspacePagesCorporate');rItem.setText('Shared Workspace Pages\ns');rMenu1.add(rItem);var rMenu2 = new BpmMenu();rMenu2.setId('bpm.mnu_NavWorkspacePagesCorporate');rItem.setSubMenu(rMenu2);var rNavWorkspacePagesCorporateSubMenu=rMenu2;rMenu2.addEventListener(bpm.common.Constants.EVENT_BEFORESHOW,this._buildWorkspacePagesSubMenu,this);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsViewerExplorer');rItem.setText('Explore\ne');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_ExploreMode.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu0.add(rItem);rItem = new BpmMenuSeparator();rItem.setId('bpm.mnit_Nav_Separator2');rMenu0.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsAdminister');rItem.setText('Administer\na');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_AdministerMode.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu0.add(rItem);var rMenu1 = new BpmMenu();rMenu1.setId('bpm.mnu_ToolsAdminister');rItem.setSubMenu(rMenu1);var administerSubMenu=rMenu1;rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsAdministerGeneral');rItem.setText('General\ng');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_AdministerModeGeneral.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsAdministerAuthProperties');rItem.setText('Authentication\na');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_AdministerModeAuthentication.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsAdministerUserManagement');rItem.setText('Shared Services Console\ns');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_AdministerModeUserManagement.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);var rUserManagementMenu=rItem;rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsAdministerLaunchCMC');rItem.setText('Configuration Console\nf');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_AdministerModeLaunchCMC.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsViewerAnotationExplorer');rItem.setText('Annotations\ni');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_ExploreMode.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsAdministerPhysicalResources');rItem.setText('Physical Resources\nh');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_AdministerModePhysicalResources.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsAdministerMimeTypes');rItem.setText('Mime Types\ny');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_AdministerModeMimeTypes.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsAdministerNotifications');rItem.setText('Notifications\nn');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_AdministerModeNotifications.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsAdministerRowLevelSecurity');rItem.setText('Row Level Security\nr');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_AdministerModeRowLevelSecurity.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsAdministerUsageTracking');rItem.setText('Usage Tracking\nu');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_AdministerModeUsageTracking.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsAdministerEventTracking');rItem.setText('Event Tracking\ne');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_AdministerModeEventTracking.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsAdministerChangeOwner');rItem.setText('Change Ownership\nw');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_AdministerModeChangeOwner.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuSeparator();rItem.setId('bpm.mnit_CalcMgrSeparator');rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsAdministerCalculationManager');rItem.setText(BpmStringBundle.getString('calcmgr-global','MItem_CalculationManager'));rItem.setIcon(new BiImage(rstPath + '/../calcmgr/themes/common/images/CT_AdminCalcManager.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rItem.setBefore('bpm.mnit_ToolsAdministerAppUpgrade');rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsSchedule');rItem.setText('Schedule\ns');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_ScheduleMode.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu0.add(rItem);var rMenu1 = new BpmMenu();rMenu1.setId('bpm.mnu_ToolsSchedule');rItem.setSubMenu(rMenu1);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsScheduleJobQueue');rItem.setText('Job Queue\nq');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_ScheduleModeJobsQueue.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsScheduleJobNotifications');rItem.setText('Job Notifications\no');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_ScheduleModeJobNotifications.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsScheduleShowParameters');rItem.setText('Show Parameters\ns');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_ScheduleModeShowParameters.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsScheduleViewJobStatus');rItem.setText('Jobs Running\nj');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_ScheduleModeJobsRunning.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsScheduleManageEvents');rItem.setText('Manage Events\na');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_ScheduleModeManageEvents.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsScheduleConsolidatedJobStatusList');rItem.setText('Consolidated Job Status\nc');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_ScheduleModeConsolidatedJobStatusList.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuSeparator();rItem.setId('bpm.mnit_Nav_Separator3');rMenu0.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_IManager');rItem.setText('Impact Manager\ni');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_ChangeManagementMode.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rItem.setBefore('bpm.mnit_Nav_Separator3');rMenu0.add(rItem);var rMenu1 = new BpmMenu();rMenu1.setId('bpm.mnu_IManager');rItem.setSubMenu(rMenu1);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsChangeManagementSynchronizeMetadata');rItem.setText('Synchronize Metadata\ns');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_ChangeManagementModeSynchronizeMetadata.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsChangeManagementDataModelUpdates');rItem.setText('Update Data Models\nd');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_ChangeManagementModeDataModelUpdate.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsChangeManagementJavascriptUpdates');rItem.setText('JavaScript Update\nj');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_ChangeManagementModeJavascriptUpdates.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsChangeManagementGenericUpdates');rItem.setText('Custom Update\nc');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_ChangeManagementModeGenericUpdates.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsChangeManagementShowTaskStatus');rItem.setText('Show Task Status\nt');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_ChangeManagementModeJobStatus.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsChangeManagementShowTaskList');rItem.setText('Manage Task List\nm');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_ChangeManagementModeShowTaskList.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsChangeManagementShowImpactOfChange');rItem.setText('Show Impact of Change\ni');rItem.setIcon(new BiImage(rstPath + '/images/com/hyperion/tools/cds/repository/bpm/CT_ChangeManagementModeImpactOfChange.gif',com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_WIDTH,com.hyperion.tools.cds.repository.bpm.mode.Handler.MENU_IMAGE_HEIGHT));rMenu1.add(rItem);rMenuButton = new BpmMenuButton();rMenuButton.setId('bpm.mnbt_File');actionBar.add(rMenuButton);var rMenu0 = new BpmMenu();rMenu0.setId('bpm.mnu_File');rMenuButton.setSubMenu(rMenu0);rMenu0.addEventListener(bpm.common.Constants.EVENT_BEFORESHOW,this.displayFileNewMenu,this);rMenu0.setBefore('bpm.mnit_FileClose');rItem = new BpmMenuItem();rItem.setId('bpm.mnit_FileNew');rItem.setText('New\nn');rMenu0.add(rItem);var rMenu1 = new BpmMenu();rMenu1.setId('bpm.mnu_New');rItem.setSubMenu(rMenu1);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_FileNewDocument');rItem.setText('Document...\nd\nCtrl+N');rItem.setCommand(cmdNewDoc);rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_FileNewPP');rItem.setText('Personal Page...\np\nCtrl+Shift+P');rItem.setCommand(cmdNewPP);rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_WorkspacePage');rItem.setText('Workspace Page...\nw\nCtrl+Shift+W');rItem.setCommand(cmdNewWP);rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_FileOpen');rItem.setText('Open\no');rMenu0.add(rItem);var rMenu1 = new BpmMenu();rMenu1.setId('bpm.mnu_Open');rItem.setSubMenu(rMenu1);rMenu1.addEventListener(bpm.common.Constants.EVENT_BEFORESHOW,this.onActionFavoritesOpen,this);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_FileOpenDocument');rItem.setText('Document...\nd\nCtrl+O');rItem.setCommand(cmdOpenDoc);rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsWorkspacePages');rItem.setText('Workspace Pages\nw');rMenu1.add(rItem);var rOpenWorkspacePagesMenuItem=rItem;var rMenu2 = new BpmMenu();rMenu2.setId('bpm.mnu_ToolsWorkspacePages');rItem.setSubMenu(rMenu2);var rOpenWorkspacePagesSubMenu=rMenu2;rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsWorkspacePagesPersonal');rItem.setText('My Workspace Pages\nm');rMenu2.add(rItem);var rOpenWorkspacePagesPersonalMenuItem=rItem;var rMenu3 = new BpmMenu();rMenu3.setId('bpm.mnu_ToolsWorkspacePagesPersonal');rItem.setSubMenu(rMenu3);var rOpenWorkspacePagesPersonalSubMenu=rMenu3;rMenu3.addEventListener(bpm.common.Constants.EVENT_BEFORESHOW,this._buildWorkspacePagesSubMenu,this);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsWorkspacePagesCorporate');rItem.setText('Shared Workspace Pages\ns');rMenu2.add(rItem);var rMenu3 = new BpmMenu();rMenu3.setId('bpm.mnu_ToolsWorkspacePagesCorporate');rItem.setSubMenu(rMenu3);var rOpenWorkspacePagesCorporateSubMenu=rMenu3;rMenu3.addEventListener(bpm.common.Constants.EVENT_BEFORESHOW,this._buildWorkspacePagesSubMenu,this);rItem = new BpmMenuSeparator();rItem.setId('bpm.mnit_FileURLLauncherSeparator');rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_File_URLLauncher');rItem.setText('URL...\nu');rMenu1.add(rItem);rMenuButton = new BpmMenuButton();rMenuButton.setId('bpm.mnbt_Favorites');rMenuButton.setText('Favorites\nr');rMenuButton.setBefore('bpm.mnbt_Help');actionBar.add(rMenuButton);var rMenu0 = new BpmMenu();rMenu0.setId('bpm.mnu_Favorites');rMenuButton.setSubMenu(rMenu0);rMenu0.addEventListener(bpm.common.Constants.EVENT_BEFORESHOW,this.onActionFavorites,this);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_FavoriteAdd');rItem.setText('Add to Favorites\na');rMenu0.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_FavoritesManager');rItem.setText('Manage Favorites...\nf');rMenu0.add(rItem);rItem = new BpmMenuSeparator();rItem.setId('bpm.sep_FavoritesManager');rMenu0.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsPersonalizeSubscriptions');rItem.setText('Show Subscribed Items\ns');rItem.setCommand(cmdSubscriptions);rMenu0.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsPersonalizeManagePages');rItem.setText('Manage Personal Pages\nm');rItem.setCommand(cmdManagePersonalPages);rMenu0.add(rItem);rItem = new BpmMenuSeparator();rItem.setId('bpm.sep_FavoritesManager2');rMenu0.add(rItem);rMenuButton = new BpmMenuButton();rMenuButton.setId('bpm.mnbt_Tools');rMenuButton.setText('Tools\nt');rMenuButton.setBefore('bpm.mnbt_Help');actionBar.add(rMenuButton);var rMenu0 = new BpmMenu();rMenu0.setId('bpm.mnu_Tools');rMenuButton.setSubMenu(rMenu0);rItem = new BpmMenuItem();rItem.setId('bpm.mnit_ToolsAdvancedSearch');rItem.setText('Advanced Search...\na');rMenu0.add(rItem);rItem = new BpmMenuSeparator();rItem.setId('bpm.mnit_ToolsLinksSeparator');rMenu0.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnu_ToolsInstall');rItem.setText('Install\ni');rMenu0.add(rItem);var rMenu1 = new BpmMenu();rMenu1.setId('bpm.mnu_ToolsInstall');rItem.setSubMenu(rMenu1);rItem = new BpmMenuItem();rItem.setId('bpm.mnu_ToolsInstallQueryAndReportingClient');rItem.setText('Interactive Reporting Web Client\ni');rMenu1.add(rItem);rItem = new BpmMenuItem();rItem.setId('bpm.mnu_ToolsInstallSmartView');rItem.setText('Smart View\ns');rMenu1.add(rItem);this._rNavAppMenuItemHashtable = new Object();this._rNavAppMenuHashtable = new Object();rNavWorkspacePagesPersonalSubMenu.setUserData(new Array(rNavWorkspacePagesPersonalSubMenu, this._loadWorkspacePagesPersonalList));rNavWorkspacePagesCorporateSubMenu.setUserData(new Array(rNavWorkspacePagesCorporateSubMenu, this._loadWorkspacePagesCorporateList));application.getAdf().getXmlResourceParser()._addObject(administerSubMenu, bpm.common.Constants.MENU_ID_TOOLS_ADMINISTER);application.getAdf().getXmlResourceParser()._addObject(rUserManagementMenu, bpm.common.Constants.MENUITEM_ID_NAV_ADMINISTER_USER_MANAGEMENT);rUserManagementMenu.setEnabled(com.hyperion.tools.cds.HSRoleVars.hasRole(com.hyperion.tools.cds.HSRoleVars.ROLE_CAN_PROVISION_USERS));rNavMenu.add(this.createOpenItemsMenuItem());this.createOpenI

It sounds like a issue with FireFox and Workspace.
LiveCycle Workspace 9.0 - End User Issues
** New for LiveCycle ES2 SP1 ** Problem logging into Workspace 9.0 using Firefox 3.6.x in Windows
When you log into Workspace 9.0 using the Firefox 3.6.x web browser in Windows, you are unable to enter text in the User ID or Password fields. The current workaround is to select another window (or empty area on the desktop), reselect the web browser to reset the focus, and then enter text in the User ID or Password fields.
You can see it in the release notes at http://help.adobe.com/en_US/livecycle/9.0/releasenotes.html#EndUserIssues.
Hope that helps!
...Gil

Issue with Active Directory User Target Recon

Hi ,
I am facing an issue with Active Directory User Target Recon
My environment is OIM 11g R2 with BP03 patch applied
AD Connector is activedirectory-11.1.1.5 with bundle patch 14190610 applied
In my Target there are around 28000 users out of which 14000 have AD account (includes Provisioned,Revoked,Disabled accounts)
When i am running Active Directory User Target Recon i am not putting any filter cleared the batch start and batch size parameters and ran the recon job .Job ran successfully but it stopped after processing around 3000 users only.
Retried the job two three times but every time it is stopping after processing some users but not processing all the users.
Checked the log file oimdiagnostic logs and Connector server logs cannot see any errors in it.
Checked the user profile of users processed can see AD account provisioned for users
My query is why this job is not processing allthe users.Please point if i am missing some thing .
thanks in advance

Check the connector server load when you are running the recon. Last time I checked the connector, the way it was written is that it loads all the users from AD into the connector server memory and then sends them to OIM. So if the number was huge, then the connector server errored out and did not send data to OIM. We then did recon based on OUs to load/link all the users into OIM. Check the connector server system logs and check for memory usage etc.
-Bikash

Paper Size issues with CreatePDF Desktop Printer

Are there any known paper size issues with PDFs created using Acrobat.com's CreatePDF Desktop Printer?
I've performed limited testing with a trial subscription, in preparation for a rollout to several clients.
Standard paper size in this country is A4, not Letter. The desktop printer was created manually on a Windows XP system following the instructions in document cpsid_86984. MS Word was then used to print a Word document to the virtual printer. Paper Size in Word's Page Setup was correctly set to A4. However the resultant PDF file was Letter size, causing the top of each page to be truncated.
I then looked at the Properties of the printer, and found that it was using an "HP Color LaserJet PS" driver (self-chosen by the printer install procedure). Its Paper Size was also set to A4. Word does override some printer driver settings, but in this case both the application and the printer were set to A4, so there should have been no issue.
On a hunch, I then changed the CreatePDF printer driver to a Xerox Phaser, as suggested in the above Adobe document for other versions of Windows. (Couldn't find the recommended "Xerox Phaser 6120 PS", so chose the 1235 PS model instead.) After confirming that it too was set for A4, I repeated the test using the same Word document. This time the result was fine.
While I seem to have solved the issue on this occasion, I have not been able to do sufficient testing with a 5-PDF trial, and wish to avoid similar problems with the future live users, all of which use Word and A4 paper. Any information or recommendations would be appreciated. Also, is there any information available on the service's sensitivity to different printer drivers used with the CreatePDF's printer definition? And can we assume that the alternative "Upload and Convert" procedure correctly selects output paper size from the settings of an uploaded document?
PS - The newly-revised doc cpsid_86984 still seems to need further revising. Vista and Windows 7 instructions have now been split. I tried the new Vista instructions on a Vista SP2 PC and found that step 6 appears to be out of place - there was no provision to enter Adobe ID and password at this stage. It appears that, as with XP and Win7, one must configure the printer after it is installed (and not just if changing the ID or password, as stated in the document).

Thank you, Rebecca.
The plot thickens a little, given that it was the same unaltered Word document that first created a letter-size PDF, but correctly created an A4-size PDF after the driver was changed from the HP Color Laser PS to a Xerox Phaser. I thought that the answer may lie in your comment that "it'll get complicated if there is a particular driver selected in the process of manually installing the PDF desktop printer". But that HP driver was not (consciously) selected - it became part of the printer definition when the manual install instructions were followed.
However I haven't yet had a chance to try a different XP system, and given that you haven't been able to reproduce the issue (thank you for trying), I will assume for the time being that it might have been a spurious problem that won't recur. I'll take your point about using the installer, though when the opportunity arises I might try to satisfy my cursed curiosity by experimenting further with the manual install. If I come up with anything of interest, I'll post again.

Issue with deleting a group using Request APIs in OIM 11g R1

Hi,
I am facing an issue with Request Based provisioning in OIM 11g R1.
I am currently testing a scenario where i have imported a data set for 'Modify Provisioned Resource' and am able to add a group/entitlement to an already provisioned resource by using the following code :
        RequestBeneficiaryEntityAttribute childEntityAttribute= new RequestBeneficiaryEntityAttribute();
        childEntityAttribute.setName("AD User Group Details");
        childEntityAttribute.setType(TYPE.String);
        List<RequestBeneficiaryEntityAttribute> childEntityAttributeList=new ArrayList<RequestBeneficiaryEntityAttribute>();
        RequestBeneficiaryEntityAttribute attr = new RequestBeneficiaryEntityAttribute("Group Name", <group>,                                                                       RequestBeneficiaryEntityAttribute.TYPE.String);
        childEntityAttributeList.add(attr);
        childEntityAttribute.setChildAttributes(childEntityAttributeList);
        childEntityAttribute.setAction(RequestBeneficiaryEntityAttribute.ACTION.Add);
        beneficiaryEntityAttributeList = new ArrayList<RequestBeneficiaryEntityAttribute>();
        beneficiaryEntityAttributeList.add(childEntityAttribute);
        beneficiarytEntity.setEntityData(beneficiaryEntityAttributeList);
This works fine for adding a group but if i try to remove a group by changing the action to Delete in the same code, the request fails. The only change made is in the following line:
childEntityAttribute.setAction(RequestBeneficiaryEntityAttribute.ACTION.Delete);
Could you please suggest where can this possibly be wrong.
Thanks for your time and help

Hi BB,
I am trying to follow up your response.
You are suggestng to use prepopulate adapter for to populate respource object name, that means We have to just use an sql query from obj tabke to get the resource object name. right ?? it could be like below, what should I have entity-type value here ??
<AttributeReference name="Field1" attr-ref="act_key"
available-in-bulk="false" type="Long" length="20" widget="ENTITY" required="true"
entity-type="????"/>
<PrePopulationAdapter name="prepopulateResurceObject"
classname="my.sample.package.prepopulateResurceObject" />
</AttributeReference>
<AttributeReference name="Field2" attr-ref="Field2" type="String" length="256" widget="lookup-query"
available-in-bulk="true" required="true">
<lookupQuery lookup-query="select lkv_encoded as Value,lkv_decoded as Description from lkv lkv,lku lku
where lkv.lku_key=lku.lku_key and lku_type_string_key='Lookup.xxx.BO.Field2'
and instr(lkv_encoded,concat('$Form data.Field1', '~'))>0" display-field="Description" save-field="Value" />
</AttributeReference>
Then I need think about the 'Lookup.xxx.BO.Field2' format.
Could you please let me know if my understanding is correct?? What is the entity-type value of the first attribute reference value?
Thanks for your all help.

Has anyone had issues with Planning security refreshing in Essbase

I am on Planning version 9.3.0.1 and we are having issues with planning users being able to use an essbase connection to pull data from smartview. They are able to see data in web forms in planning but they get #no access when they try to connect to the same data in smartview.
Has anyone else experieced this issue.

If user works when you provision individually its because they were set in the environment in EAS.
group has to have all the access needed (bug in orig). css file open a ticket for the file name. example user needs calc access you setup calc but bug in system is not also giving user read and write access. Thus you can individually add this to the group in provisioning area in shared services. in EAS goto File open- editors create/run script with
alter user 'userID' Add application_access_type Planning;
alter user 'userID' add application_access_type Essbase; to add user to the environment if error you need to refresh eas first then run maxl script for planning you also need to go to workspace and select any of your dimensions all your groups ...edit .. migrate identities.. to get group/Users in planning wether adding or removing users. when you do planning changes you need to do database and security filters refresh.

OIM integration with OpenDJ : Issue with OU Reconciliation

Hi All,
I am trying to integrate OIM and OpenDJ for provisioning of users.I am facing issues with OU reconciliation. I had performed the following steps.
1. Copied OID 11.1.1.5 connector binaries under OIM_HOME\server\ConnectorDefaultDirectory.
2. Installed connector by choosing DSEE server from the list.
3. Create IT Rsource and Application instance.
4. Modified Lookup.LDAP.Configuration based on OpenDJ schema.
5. Modified "LDAP Connector OU Lookup Reconciliation" scheduled task parameters for IT resource name and executed it. it executes successfully without any errors but the OU from OpenDJ are not populated into the organization lookup( Lookup.LDAP.Organization - this is the Lookup name value specified in the scheduled task ).
6. I had enabled the connector logs for debugging, as per logs when the scheduled job is ran I can see the organizationunits from OpenDj in the logs. Even the logs states that scheduled task was executes successfully.
Please suggest why the lookup name is not being populated by the organizations. Please provide any suggestions or steps to debug this furthur.
For example, below lines from the logs shows the organization(ou=Internal) from OpenDJ.
[2013-01-13T01:55:16.040-08:00] [oim_server1] [TRACE] [] [ORG.IDENTITYCONNECTORS.LDAP.CONNECTOROBJECTUTIL] [tid: Thread-322] [userId: oiminternal] [ecid: 0000JkmuRveFg4Uay5R_6G1GwaZX000001,1:28786] [SRC_CLASS: com.thortech.util.logging.Logger] [APP: oim#11.1.2.0.0] [SRC_METHOD: debug] org.identityconnectors.ldap.ConnectorObjectUtil : createConnectorObject : ENTRY createConnectorObject(ldapGroups=org.identityconnectors.ldap.LdapConnection@1773f6bb,posixRefAttrs=ObjectClass: OU,posixGroups=org.identityconnectors.ldap.GroupHelper@22244683,roles=org.identityconnectors.ldap.EDIRRolesHelper@7b9153f7,parentDN=o=sca,rdnAttributes=ou=Internal,ou=External,ou=spe: null:null:{entryuuid=entryUUID: 873193ec-b60d-35fb-b7e2-f8da3c50aa8e, ou=ou: Internal, objectclass=objectClass: organizationalUnit, top},rdnAttributeType=[__NAME__, __UID__, objectClass, Organisation Unit Name, ou],value=true)
[2013-01-13T01:55:16.041-08:00] [oim_server1] [TRACE] [] [ORG.IDENTITYCONNECTORS.LDAP.LDAPENTRY] [tid: Thread-322] [userId: oiminternal] [ecid: 0000JkmuRveFg4Uay5R_6G1GwaZX000001,1:28786] [SRC_CLASS: com.thortech.util.logging.Logger] [APP: oim#11.1.2.0.0] [SRC_METHOD: debug] org.identityconnectors.ldap.LdapEntry : create : ENTRY create(baseDN=o=sca,*result=ou=Internal,ou=External,ou=spe*: null:null:{entryuuid=entryUUID: 873193ec-b60d-35fb-b7e2-f8da3c50aa8e, ou=ou: Internal, objectclass=objectClass: organizationalUnit, top})
[2013-01-13T01:55:16.041-08:00] [oim_server1] [TRACE] [] [ORG.IDENTITYCONNECTORS.LDAP.LDAPENTRY] [tid: Thread-322] [userId: oiminternal] [ecid: 0000JkmuRveFg4Uay5R_6G1GwaZX000001,1:28786] [SRC_CLASS: com.thortech.util.logging.Logger] [APP: oim#11.1.2.0.0] [SRC_METHOD: debug] org.identityconnectors.ldap.LdapEntry : create : RETURN create(baseDN=o=sca,result=ou=Internal,ou=External,ou=spe: null:null:{entryuuid=entryUUID: 873193ec-b60d-35fb-b7e2-f8da3c50aa8e, ou=ou: Internal, objectclass=objectClass: organizationalUnit, top}) returns: org.identityconnectors.ldap.LdapEntry$SearchResultBased@73366019
Thanks,
Anumolu.
Edited by: Anumolu111 on Jan 13, 2013 4:14 AM

Hi All,
I am trying to integrate OIM and OpenDJ for provisioning of users.I am facing issues with OU reconciliation. I had performed the following steps.
1. Copied OID 11.1.1.5 connector binaries under OIM_HOME\server\ConnectorDefaultDirectory.
2. Installed connector by choosing DSEE server from the list.
3. Create IT Rsource and Application instance.
4. Modified Lookup.LDAP.Configuration based on OpenDJ schema.
5. Modified "LDAP Connector OU Lookup Reconciliation" scheduled task parameters for IT resource name and executed it. it executes successfully without any errors but the OU from OpenDJ are not populated into the organization lookup( Lookup.LDAP.Organization - this is the Lookup name value specified in the scheduled task ).
6. I had enabled the connector logs for debugging, as per logs when the scheduled job is ran I can see the organizationunits from OpenDj in the logs. Even the logs states that scheduled task was executes successfully.
Please suggest why the lookup name is not being populated by the organizations. Please provide any suggestions or steps to debug this furthur.
For example, below lines from the logs shows the organization(ou=Internal) from OpenDJ.
[2013-01-13T01:55:16.040-08:00] [oim_server1] [TRACE] [] [ORG.IDENTITYCONNECTORS.LDAP.CONNECTOROBJECTUTIL] [tid: Thread-322] [userId: oiminternal] [ecid: 0000JkmuRveFg4Uay5R_6G1GwaZX000001,1:28786] [SRC_CLASS: com.thortech.util.logging.Logger] [APP: oim#11.1.2.0.0] [SRC_METHOD: debug] org.identityconnectors.ldap.ConnectorObjectUtil : createConnectorObject : ENTRY createConnectorObject(ldapGroups=org.identityconnectors.ldap.LdapConnection@1773f6bb,posixRefAttrs=ObjectClass: OU,posixGroups=org.identityconnectors.ldap.GroupHelper@22244683,roles=org.identityconnectors.ldap.EDIRRolesHelper@7b9153f7,parentDN=o=sca,rdnAttributes=ou=Internal,ou=External,ou=spe: null:null:{entryuuid=entryUUID: 873193ec-b60d-35fb-b7e2-f8da3c50aa8e, ou=ou: Internal, objectclass=objectClass: organizationalUnit, top},rdnAttributeType=[__NAME__, __UID__, objectClass, Organisation Unit Name, ou],value=true)
[2013-01-13T01:55:16.041-08:00] [oim_server1] [TRACE] [] [ORG.IDENTITYCONNECTORS.LDAP.LDAPENTRY] [tid: Thread-322] [userId: oiminternal] [ecid: 0000JkmuRveFg4Uay5R_6G1GwaZX000001,1:28786] [SRC_CLASS: com.thortech.util.logging.Logger] [APP: oim#11.1.2.0.0] [SRC_METHOD: debug] org.identityconnectors.ldap.LdapEntry : create : ENTRY create(baseDN=o=sca,*result=ou=Internal,ou=External,ou=spe*: null:null:{entryuuid=entryUUID: 873193ec-b60d-35fb-b7e2-f8da3c50aa8e, ou=ou: Internal, objectclass=objectClass: organizationalUnit, top})
[2013-01-13T01:55:16.041-08:00] [oim_server1] [TRACE] [] [ORG.IDENTITYCONNECTORS.LDAP.LDAPENTRY] [tid: Thread-322] [userId: oiminternal] [ecid: 0000JkmuRveFg4Uay5R_6G1GwaZX000001,1:28786] [SRC_CLASS: com.thortech.util.logging.Logger] [APP: oim#11.1.2.0.0] [SRC_METHOD: debug] org.identityconnectors.ldap.LdapEntry : create : RETURN create(baseDN=o=sca,result=ou=Internal,ou=External,ou=spe: null:null:{entryuuid=entryUUID: 873193ec-b60d-35fb-b7e2-f8da3c50aa8e, ou=ou: Internal, objectclass=objectClass: organizationalUnit, top}) returns: org.identityconnectors.ldap.LdapEntry$SearchResultBased@73366019
Thanks,
Anumolu.
Edited by: Anumolu111 on Jan 13, 2013 4:14 AM

Issues with HBR Web Launcher

I am using EPM 11.1.2.1 and when trying to log into HBR Web launcher, the following error is Displayed:
"Error logging into Business Rules. The repository has not been configured or you are not authorized to use Busines Rules."
However, I am trying to log in with admin user and it is already provisioned at HSS with HBR Rules.

what is the exact error message? Is it
"An error occurred: Login Failed. Please login again.
Error Message:Error logging in to Business Rules. The repository has not been configured or you are not authorized to use Business Rules.
Complete Detail: Detail:Error instantiating implementation class Error instantiating implementation class {0} Detail:null "
It is an issue with the properties file then you would see something like the following in the easserver.log in <MIDDLEWARE_HOME>\user_projects\domains\EPMSystem\servers\EssbaseAdminServices0\logs
[EssbaseAdminServices0] [WARNING] [ESSEAS-35502] [oracle.epm.essbase.eas] [tid: 21] [userId: <anonymous>] [ecid: 0000JZ9GXZtFg4WFLzYROA1G4g0R00001M,0] [APP: EAS#11.1.2.0] Version mismatch: server version is 11.1.2
Cheers
John
http://john-goodwin.blogspot.com/
Edited by: JohnGoodwin on Jul 27, 2012 5:31 PM

Intel vPro with wired 802.1x issue with domain name

Hello guys,
this issue is may not related to SCCM directly, but intel forums are really poor so i´d like to ask here...
The Case: We are currently provisioning our vPro chips with SCCM SP2 R3 and almost everthing worked as expected (Provisioning OK, OOB Console OK, PowerControl OK even TLS and Kerberos are working. But there is an issue with the 802.1x authentication. It
seems the vPro chips are not using the correct domain name. Lets say our DNS domain name is
vpro.com and the NETBIOS Name is coprvro . There are no child or other domains. vPro chips are presenting now
vpro\COMPUTERNAME$iME instead of vpro.com oder corpvro
so the Radius Server (Windows Server 2008 R2 - NPS) is saying ReasonCode 7 "...domain is not existing...". AuthenticationType and EAP Type are correct. Usually user- and computeraccounts are using
corpvro as domain name.

Hi Dan,
thank you for your reply. I've already done this in the second place using the SDK and winrm ($8021XProfileInstance.GetProperty("Domain")). I've no idea were SCCM is getting this domain name from. Its cutting off the top level domain extension,
may be SCCM is assuming that this equals the NETBIOS domain name but that is not the case. This is only a guess, in detail I need to know in fact on what basis SCCM is choosing the domain name, then i can fix this...
Intels SCS putting the correct NETBIOS domain name in the amt config, used certificates are the same...

Subscription issue with DPS app

We have an app in the Newstand that has an issue with subscriptions.
When a user taps on the subscription tile in the library, or if they tap the "Subscribe" button in order to download the folio, and after going through the subscription prompts, a status indicator at the top of the screen just spins and states "Purchasing Subscription..."
I have read in this support forum that Apple will reject an app for this "hanging" subscription issue.
I created a Shared Secret in iTunes Connect that I plugged it into the proper Application Account details page under the Account Administration tab in the DPS Dashboard.
I have the Apple product ID entered in the "Free subscription product ID" field in the DPS App Builder.
Am I missing something?
Much thanks for any advice.

It turns out not all Product IDs are created equal.
When you create the app ID in the iOS Provisioning Portal, you specify a Product ID.
When you set up in-app purchases in iTunes Connect, the same Product ID is used.
When you package up everything to send to Apple, you specify the same Product ID in the DPS App Builder.
However, the Product ID specified in the Folio Producer MUST BE DIFFERENT in order for the subscription confirmation and notification to operate correctly.
My problem was created by my using the same Product ID in the Folio Producer that I had used in iTunes Connect and the DPS App Builder.
In order to change the ID in the Folio Producer panel, you need to click on the Update button and input a different ID.
When users launch your app, they will see two copies of your folio. The version they already had and the updated version. They can download the update and the subscription button and tile should work.
When users archive the old version of your app it will disappear altogether off their iPads.
Note: this is in addition to creating a Shared Secret in iTunes Connect and plugging it into the proper field in the DPS Account Information Details page.
Credit for this solution goes to Vinod Tanwar, DPS Technical Support Consultant.
tom

Issue with binary submission

I have upgraded our app using Viewer Builder 1.5 and submitted the app to Apple. I have received this message from the iTunes Store:
Dear Developer,
We have discovered one or more issues with your recent binary submission for "[app name]". Before your app can be reviewed, the following issues must be corrected:
Invalid Code Signing Entitlements - The signature for your app bundle contains entitlement values that are not supported. For the com.apple.developer.ubiquity-container-identifiers entitlement, the first value in the array must consist of the prefix provided by Apple in the provisioning profile followed by a bundle identifier suffix. The bundle identifier must match the bundle identifier for one of your apps or another app that you are permitted to use as the iCloud container identifier.
Specifically, value "EH4Y8L86T7.*" for key "com.apple.developer.ubiquity-container-identifiers" in viewer is not supported.
Invalid Code Signing Entitlements - The signature for your app bundle contains entitlement values that are not supported.
Specifically, value "EH4Y8L86T7.*" for key "com.apple.developer.ubiquity-kvstore-identifier" in viewer is not supported.
Once these issues have been corrected, go to the Version Details page and click Ready to Upload Binary. Continue through the submission process until the app status is Waiting for Upload and then use Application Loader to upload the corrected binary.
Regards,
The iTunes Store Team
Do you know what this means? Did I do anything wrong?
On Apple's iOS Provisioning Portal, under App IDs there is an option to enable iCloud. Should I have not enabled that?
Thanks,
Mike

You should not enable the iCloud option. The Viewer Builder now creates viewers that store folios in the caches directory, not the Documents directory. Files cannot be backed up from the caches directory, so Apple rejected the app. Re-configure your App ID with iCloud deselected and re-create your mobileprovision files -- you should be able to use your same p12 certificates -- and then submit the app again.
For what it's worth, I accidentally submitted one app with iCloud turned on and one with it turned off, and Apple approved both.

Issue with provisioning

Similar Messages

Maybe you are looking for