OIM 11.1.1.3.0 install

Hello,
We installed, not configured 11.1.1.2.0 and patched with 11.1.1.3.0. Now trying to use the config.sh script to configure. We're only installing OID. We're at the part where we need to define a database schema, and we'd like to create a new one. We point at a 11.2.0.1.0 database, and it tells us that it's not supported.
"INST-5213: Database version 11.2.0.1.0 is not supported
Enter database with version equal or higher than 10.2.0.4.0 in 10g or version equal or higher than 11.1.0.7 in 11g. Refer to the certification matrix for supported versions."
The cert matrix has a row for ALL middleware products on x86 Red Hat EL 5 (UL3+) are certified with 11.2.0.1+
Anyway, isn't 11.2 higher than 11.1??
Has anyone run into this? Am I missing something?
Thanks!

We too are using OID only -- and we are in the mist of migrating to 11.1.1.2.0 and then 11.1.1.3.0. Thanks for posting the follow up about ignoring the database version error (we got the same error when installing 11.1.1.1.0). Did you complete your migration to 11.1.1.3.0?

Similar Messages

OIM 9.1.0.1 I installed it I have to apply patch

Friends,
Installed the 9.1.0.1 version of Identity Manager version of the patch I have to apply for migration to 9.1.0.+
Thank

Hi,
I can apply this patch 9547198 no need to migrate from 9.1.0.1 to 9.1.02, or first I have to apply this patch number 9547198 to 8484010 and then 9.1.0.1 to 9.1.0.2.
What happens if I apply this patch 9547198 (BP10) for which I have installed version 9.1.0.1 and this patch 9389436 (BP07) will achieve the migration to Identity Manager 9.1.0.2
Thanks.

Error while installing the OIM

hai sir,
i installed OID in fresh base vm now an trying to install OIM . by default database also installed through OID . now the issue is i want to know how to prepare xl file before starting OIM installation. what the command we use to prepare xl file ?. actually i successfully installed and run OIM. at that time i not installed OID i directly insatlled oracle data base 10g i used one command to prepare xl file . but now oracle folders are different to each other (oracle database 10g and OID ). so i get confused . please give me the command to prepare xl file, databse from OID . or elsegive any alternative to prepare xl file . please help me

Preparing the database will not be any different in this scenario. Just run the prepare_xl_db.sh/bat command from the oim installer path in command line and provide the database details you gave while installing OID.

[OIM] OIM 11 install - CFGFWK-60850: Test Failed

Hi!
I am configuring an OIM 11g instance. After I installed, I run the domain configurator and I get the following:
Component Schema=OIM Schema
Driver=oracle.jdbc.OracleDriver
URL=jdbc:oracle:thin:@192.168.91.129:1521/orcl.168.91.129
User=DEV1_OIM
Password=**********
SQL Test=select 1 from schema_version_registry where owner=(select user from dual) and mr_type='OIM' and version='11.1.1.5.0'
IO Error: The Network Adapter could not establish the connection
CFGFWK-60850: Test Failed!
I tried loggin to sqlplus with DEV1_OIM user and credentials are OK.
I don't know what is happening. I run the query using sys user and I have no results (as select user from dual returns sys and there is no schemas with that owner).

I have seen in table schema_version_registry that dev_oim has version 11.1.1.3.0, and query is looking for 11.1.1.5.0..
I used last rcu version (11.1.1.5 downloade last week). If I update the version field, the configurator wizard pass ok.. but I don't want to begin a fresh OIM setup "hardcoding"..
Do you know if there is a related problem with RCU?

Installation OIM on redhat Linux really slow

Hello,
I have a problem with the installation of OIM. When I try to install OIM on a linux server (redhat 5.0 64b) with the JRockit 64bits java 1.6.0 (jrmc 3.2.1-1.6.0) version the installer is just really slow. It takes ages for the command line installer to go to the next step.
has anyone else experienced this and found a solution?
greetings,
Bas

The machine on which OIM is to be installed has enough memory, I believe it has 8GB..
The weird thing is that the first time we ran the installer, it was just normal (== fast) but the installation failed when deploying OIM into Weblogic and we can't run the weblogic deploy script, since this also fails.. (it throws a nameError: fail on the configoim.py script) That's when we decided to try to install OIM again from scratch.. so we moved the current installation directory to another location and started the installation again. This when the problems as decribed by Bas began.. The installer is really really slow.. we waited for more then 15 minutes for it to continue to the next step.. but it didn't. We checked the machine for spiking processes but the machine was totally idle..
Does anyone know what could be the problem? Are we doing anything wrong? or are we missing something?
Edited by: SteinWelberg on 3-mrt-2010 12:38

OIM 11.1.1.5.0 - Remote Manager not working

Hi everyone,
I am working with an AD which I installed on a different machine than my OIM and I would like to install Remote Manager with my AD. I followed all the steps which are described in the documentation but when I launch RemoteManager.bat, I have the following in the console :
D:\Oracle\Middleware\Oracle_IDM1\remote_manager>"D:\Oracle\Middleware\jdk160_24\jre/bin/java" -cp .;.\lib\xlAPI.jar;.\lib\xlVO.jar;.\lib\xlScheduler.jar;.\lib\xlRemoteManager.jar;.\lib\xerces.jar;.\lib\xlDataObjects.jar;.\lib\log4j-1.2.8.jar;.\lib\xlUtils.jar;.\lib\xlLogger.jar;.\lib\xlCrypto.jar;.\lib\iam-platform-utils.jar;.lib\oimclient.jar;.\ext\spring.jar -Dlog4j.configuration=config\log.properties -DXL.HomeDir=D:/Oracle/Middleware/Oracle_IDM1/remote_manager com.thortech.xl.remotemanager.RemoteManager
19 mars 2012 14:31:02 com.thortech.util.logging.Logger info
INFO: Class/Method: RMIClientSocketFactory/static: sslEnabled : trueSSLContextAlgorithm : TLSKeyManagerFactory : SunX509KeyStore : D:\Oracle\Middleware\Oracle_IDM1\remote_manager\config\default-keystore.jksKeyStoreType : JKSTrustStore : default-keystore.jks
19 mars 2012 14:31:02 com.thortech.util.logging.Logger info
INFO: Class/Method: RMISSLServerSocketFactory/createServerSocket Remote Managerserver socket port is 12346
19 mars 2012 14:31:02 com.thortech.util.logging.Logger info
INFO: Class/Method: RMISSLClientSocketFactory/createSocket Remote Manager client socket Host is (+my ip address+) and port is 12346
I'm not sure this means Remote Manager is working cause I have a problem when I am creating the IT Ressource on OIM : connection refused to host : (+my ip address+). And when I use nmap, I can notice that port 12346 is not open.
Thanks for your help !
Thibault

Hi Thibault,
Your problem looks like a firewall problem between these servers, because you should be able to do telnet once it is up into both(SSL and NONSSL) ports, default 12346 and 12345.
What I normally do is:
DEBUG,20 Mar 2012 09:17:10,170,[XELLERATE.REMOTEMANAGER],Class/Method: RemoteMan
ager/RemoteManager: Binding Remote Manager to: rmi://TLEONCIO:12346/RManager
...DONE
Allow unsafe renegotiation: false
Allow legacy hello messages: true
Is initial handshake: true
Is secure renegotiation: false
RMI TCP Connection(3)-OIM-IP, setSoTimeout(7200000) called
RMI Scheduler(0), called close()
RMI Scheduler(0), called closeInternal(true)
RMI Scheduler(0), SEND TLSv1 ALERT: warning, description = close_notify
Padded plaintext before ENCRYPTION: len = 18
0000: 01 00 CF D4 CD 02 55 6E CA 00 E5 08 E8 EC 5C 19 ......Un......\.
0010: 81 4E .N
RMI Scheduler(0), WRITE: TLSv1 Alert, length = 18
[Raw read]: length = 5
[Raw write]: length = 23
0000: 00001: 5 1035 01 00 120 3 .....
[Raw read]: length = 18
0000: EA 35 E7 8F 7F DB C0 01 000C 1 68 2A 24D EA 35 E 71C 8 F0B 7F 8DB0 C
0 DF 5 A0C 68 2A .54..D. ...h*M....Z
0010: F4 29 ......5 .)
RMI TCP Connection(2)-THIAGO_REMOTEMANAGER_IP, READ: TLSv1 Alert, length = 18
Padded plaintext after DECRYPTION: len = 18
....0..h*M0
000010: 01 : 10C0 0 BCF D 840 DF CD 02 5 A55 6 EF4 29 C
..A 00 E5. 08 E8 EC.Z 5C .)1
9 ......Un......\.
0010: 81 4E .N
RMI TCP Connection(2)-THIAGO_REMOTEMANAGER_IP, RECV TLSv1 ALERT: warning, close_notify
RMI TCP Connection(2)-THIAGO_REMOTEMANAGER_IP, called closeInternal(false)
RMI TCP Connection(2)-THIAGO_REMOTEMANAGER_IP, SEND TLSv1 ALERT: warning, description = c
lose_notify
Padded plaintext before ENCRYPTION: len = 18
0000: 01 00 E1 43 9E 6C 4E BF 97 10 03 BA 29 1A 01 EA ...C.lN.....)...
0010: 08 30 .0
RMI TCP Connection(2)-THIAGO_REMOTEMANAGER_IP, WRITE: TLSv1 Alert, length = 18
[Raw write]: length = 23
0000: 15 03 01 00 12 0A F7 B7 14 70 18 A0 2C 05 E3 21 .........p..,..!
0010: 4E D0 27 26 FE 6E F3 N.'&.n.
RMI TCP Connection(2)-THIAGO_REMOTEMANAGER_IP, called close()
RMI TCP Connection(2)-THIAGO_REMOTEMANAGER_IP, called closeInternal(true)
RMI TCP Connection(2)-THIAGO_REMOTEMANAGER_IP, called close()
RMI TCP Connection(2)-THIAGO_REMOTEMANAGER_IP, called closeInternal(true)
I write into Telnet command and into telnet connection I write one command called +'EHLO something'+ to write and check a message from OIM-Server to RM-Server using SSL_port
-->telnet THIAGO_REMOTEMANAGER_IP 12345
[oracle@xxxxx~]$ telnet THIAGO_REMOTEMANAGER_IP 12345
Trying THIAGO_REMOTEMANAGER_IP...
Connected to THIAGO_REMOTEMANAGER_IP (192.xxx.xxx.xxx).
Escape character is '^]'.
EHLO THIAGO
then you will see something like this:
[Raw read]: length = 5
0000: 45 48 4C 4F 20 EHLO ****
RMI TCP Connection(3)-OIM-IP, receive SSL message
RMI TCP Connection(3)-OIM-IP, WRITE: TLSv1 true, length = 2
[Raw write]: length = 7
0000: 15 03 01 00 02 02 0A .......
RMI TCP Connection(3)-OIM-IP, called closeSocket()
RMI TCP Connection(3)-OIM-IP, called close()
RMI TCP Connection(3)-OIM-IP, called closeInternal(true)
but as I said, first the telnet should be ok. If not, take a look into your firewall rules and let us know.
I hope this helps,
Thiago Leoncio

Error when installing Oracle Identity Management 11.1.1.6

Hi all.
I'm new on OIM 11g world. When I install OIM that guided by Documentation. But I usually get an error on Extend JRF phase, the error message on log is:
Action:
See logs for more details.
Step Extend JRF failed
Error Extending Targets With JRF Template.
Cause:
WLST Error. Problem invoking WLST - Traceback (innermost last):
File "/tmp/tmp1340370226976.py", line 8, in ?
File "/home/oracle/Oracle/Middleware/Oracle_IDM1/../oracle_common/common/wlst/oracle-jrf-config.py", line 80, in applyJRF
File "/home/oracle/Oracle/Middleware/Oracle_IDM1/../oracle_common/common/wlst/oracle-jrf-config.py", line 142, in jrf_applyJRFOnline
WLSTException: JRF component or service with type "AppDeployment" and name "DMS Application#11.1.1.1.0" is not found.I've tried to delete Domain, re-run the runInstaller script, but it's not work.
Can you help me to understand this error?
Any suggestion is appreciated
Cuong Pham

WLST is a scripting tool that create and manage OIMDomain. It llooks like it's trying to invoke some Jython files(eg:/home/oracle/Oracle/Middleware/Oracle_IDM1/../oracle_common/common/wlst/oracle-jrf-config.py). For some reason it's not finding AppDeployment configuration. THis, probably, will create or manage OIMDomain thru WebLogic. Are you running in GUI mode or silent mode? I will suggest you try to install in silent mode and see if this error will happen.
Question: Are you installing it and configuring this Managed Server in cluster?
I hope this helps,
Thiago Leoncio.

OIM 11g R2 PS1 - Bugs fixed info required

Hi ,
I have OIM 11g R2 with BP 06 installed on my system and want upgrade to latest version so that majority of bug fixes are incorporated. As both BP07 and PS1 are in market.
While checking for BP7 fixes we noticed that there are certain fixes that we really require in our application like:
Bug:16315001 : GTC mapping image on migration to other environment is not displayed.
Bug:16506870 : De-provisioning of user accounts via the Set User De-provisioned Date scheduled job fails.
Bug:16347855 : Users are able to submit a request for modify account although nothing is modified on the form fields.
But while checking for release notes of PS1 (11.1.2.1) i did not notice any such fixes, rather there were some certification exception fixes ,new menu called "Certification" in Sysadmin Console and Introduced new menu called "Inbox" in Identity/Self Service Console
So my question is that to apply above fixes we need install the BP7 patch separately, considering PS1 is not a cumulative one and then install PS1
Thanks,
Puneet

Hi,
Check out: http://www.iamidm.com/2013/05/oim-11g-r2-ps1-certification-tab-in.html
Regards,
Chinni

OIM 11g - AD Organization Recon "missing expression" error

Hi,
I've got an environment with a OIM 11.1.1.5.2 installed with MSAD user management connector version 9.1.1.
Provisioning to Active Directory works just fine out of the box, however, we've run into a problem with the Organization Reconciliation Job (not the organization lookup reconciliation).
Every time i run the "AD Organization Recon" schedule task, the job ends succesfully and events are created for each AD org, but these events do not have any value on the "current status" field and no OIM organization is created.
Checking the logs, i can find the following error for each organization discovered for the connector:
[2012-04-04T10:06:19.647-03:00] [WLS_OIM1] [NOTIFICATION] [IAM-5010000] [oracle.iam.reconciliation.dao] [tid: [ACTIVE].ExecuteThread: '4' for
queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: 58f980760a5e54af:-129c6f98:1367872b8db:-8000-0000000000000002,0
] [APP: oim#11.1.1.3.0] Generic Information: Insert into recon_org_match(act_key, re_key, rom_rowver) (SELECT act.act_key, RA_XELLERATE_ORG.r
e_key, '0' FROM act, RA_XELLERATE_ORG WHERE RA_XELLERATE_ORG.re_key = 99 and act.act_status != 'Deleted' AND )
[2012-04-04T10:06:19.648-03:00] [WLS_OIM1] [NOTIFICATION] [IAM-5010006] [oracle.iam.reconciliation.impl] [tid: [ACTIVE].ExecuteThread: '4' fo
r queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: 58f980760a5e54af:-129c6f98:1367872b8db:-8000-0000000000000002,
0] [APP: oim#11.1.1.3.0] The following exception occurred: {0}[[
oracle.iam.platform.utils.SuperRuntimeException: java.sql.SQLSyntaxErrorException: ORA-00936: missing expression
at oracle.iam.reconciliation.dao.ReconActionDao.executeOrgMatch(ReconActionDao.java:1370)
at oracle.iam.reconciliation.impl.OrganizationHandler.executeSingleEventMatch(OrganizationHandler.java:34)
at oracle.iam.reconciliation.impl.EntityTypeHandler.process(EntityTypeHandler.java:38)
at oracle.iam.reconciliation.impl.ActionEngine.processEvent(ActionEngine.java:209)
This is not the first time this happens to us, just a month ago in a different environment, and working with OIM 11.1.1.5, we found the same problem. After reviewing everything we could thought of, we exported the Xellerate Organization.xml file from mds and found this:
<?xml version='1.0' encoding='UTF-8'?>
<reconConfig xmlns="http://www.oracle.com/schema/oim/recon/profile">
<generalconfig mode="CHANGELOG" createEntityUsingSPFlag="true" dateFormat="yyyy/MM/dd hh:mm:ss z" ownerMatchingRuleWhereClause="" entitytype="Organization" version="1.0" trustedSrcFlag="false" accountPostProcessingRequiredFlag="true" sequentialProcessingFlag="false" batchSize="-1" retryInterval="30" maxRetryCount="5" defaultProfileFlag="true" name="Xellerate Organization"/>
<singlevaluedreconeventdata>
<formInfo ostKey="0" sdkKey="2" objKey="3" latestFormVersion="0" activeFormVersion="0" objorderFor="O" objname="Xellerate Organization" sdkformName="ACT"/>
<matchingruleWhereClause>*((ACT.ACT_NAME=RA_XELLERATE_ORG.RECON_ORGANIZATIONSORGB111A46A))*</matchingruleWhereClause>
<reconFields>
<reconAttr>
We found that after adding the same rule on the element "matchingruleWhereClause" to the element "ownerMatchingRuleWhereClause" the reconciliation started working. At the time we thought that maybe we had modified some property on the design console and messed up the profile, or some bug that would be patched on 11.1.1.5.2, but now that we have a brand new patched installation we face the exact same situation.
Is this a common problem in 11.1.1.5? Is manually editing the xellerate organization profile supported? Maybe we are doing something wrong, but we've followed all OIM and AD connector guides, there's nothing there that says that we need to configure rules on the xellerate orgs resource before trying recon. We can reconcile using this workaround, but we do not want to move forward without knowing if something could go wrong down the line.
Thanks.

Hi guys,
I'm experiencing the same problem? Does any one have any suggestions?
Thanks in advance...

Clarifications on OIM Design Console 11.1.1.5 Installation

I have the OIM Server 11.1.1.5 installed and configured on OL (Oracle Linux) 5.7 64bit. The Next step is to install and confiure the OIM Design Console.
I have read the 11.1.1.5 doc. The OIM Console runs on Windows only. But I have noticed that some posts claimed the 11g console can run on the both of Windows and Linux.
OIM Design Console
Is that true? If yes, please point the doc for the installation and configuration on the Linux.
If not, what are the minimum requirements to run OIM Console 11.1.1.5 on the Windows?
I looked over the 11.1.1.5 doc http://docs.oracle.com/cd/E21764_01/install.1111/e12002/oidonly.htm#CDDIDCIC
I have:
WLS not a mandatory;
SOA not a mandatoty;
IAM 11.1.1.5 a mandatory;
The 11.1.1.5 doc states that OIM manager has to be configured prior to configuring of OIM Console. I read this as the RCU schemas relevant. Do I have to install a new RCU schema DB in the local Windows just for the OIM Console configuration? Or I can use the SAME RCU Schema DB for the OIM Server on the OL.
Thanks a lot for the help.

If you have already installed OIM 11.1.1.5 on linux machine just do below to configure design console
1. goto IDM_HOME/bin/ run config.sh
2. In the configuration wizard, select ‘Design Console’ checkbox ONLY.
3. next screen, enter the OIM server host and port name
4 generate wlfullclient.jar and Copy the ‘$WL_HOME/server/lib/wlfullclient.jar’ to ‘IDM_HOME/designconsole/ext’ (find below instruction given for generation of wlfullclient.jar)
5. now goto IDM_HOME/designconsole-> run xlclient.sh and you will have design console in unix
If you want your design console in windows do below
1.copy entire folder "designconsole" from linux to Windows machine
2. Now, in your local windows machine, edit the file ‘$DC_HOME/designconsole/xlclient.cmd’ ($DC_HOME is the folder where you copied the ‘designconsole’ folder) to change the following values:
* "@loc\java\bin\java" - '@loc' points to your JDK installation
* "-DXL.HomeDir=@loc" - '@loc' will be $DC_HOME/designconsole
* "config\@auth_config" - '@auth_config' will be authwl.conf
creation of wlfullclient.jar
- Change directories to the server/lib directory.
cd WL_HOME/server/lib
- Use the following command to create wlfullclient.jar in the server/lib directory:
java -jar wljarbuilder.jar
--nayan

Help needed in OIM 11g with respect to Target Recon

Hi Experts,
I have OIM 11.1.1.5.0 installed with AD Connector configured. We have 3 AD instances, so we have cloned the full AD Connector to "A_AD_RO User", "B_AD_RO User" and "C_AD_RO User" resourced with separate-separate Process defn, scheduled task, lookups and IT resource
When I am doing target recon based on "emailID" as key from respective ID, the reconciliation events gets generated and I can see the event in Recon Manager with "No Match Found", even though the user with valid email id is present in the OIM.
Once I do re-evaluate of reconciled user, the user target gets linked with the correct user.
Problem: Everytime, I need to go to Recon Manager, and manually click on "Reevaluate Event", then only the target AD is getting linked to user.
How to set it automatically?
Has anyone faced this kind of issue?
Any suggestion which I can apply to skip "Reevaluate Event" manually to link user with target.
Regards,
J
Edited by: J_IDM on Mar 19, 2012 6:35 AM

A few things to check.
On the resource object, reconciliation tab. Check the recon action rules. The Entity Match is the one that matches a user to the target data if the user does not have an instance on their profile.
Check your reconciliation rules. Make sure that you have a rule for each resource, and that it is in an active state. Also make sure the rule is a valid matching rule.
For each resource workflow, there are configuration lookups. You must be VERY careful when cloning a resource to go through every lookup that is duplicated and make sure the values are all for the new resources.
It sounds like you used the same adapters for every instance. This will cause a problem because there are hard coded form values in the adapter, so you will need to change those to have an input so you can specify the value for each instance. Otherwise, every provisioning task will look for the objectguid from the original workflow.
There are lots of updates you must perform to make sure they work correctly during a clone.
Once you have done all these, try and run your recons again, and make sure you wait till the recon completes so it processes the events in the correct bulk amounts.
-Kevin

Error occured in OIM client running

Hai all,
Am new to OIM . I completed basic installation java,jboss, oracle database, OIM server and OIM client . All the thing are running sucessfully except OIM client. It is also installed sucessfully but after entering the user name and password it showing an error . can any one please help me out from this error please . its urgent for me.

Hi,
First, make sure you have configured the client application and it can reach the OIM server side. For example, open the file [OIM_CLIENT_HOME_DIR]\xlclient\Config\xlConfig.xml.
Review the value of the <CoreServer> and <MultiCastAddress> elements.
Also, see the OIM console output to see what exception is being raised when you try to log in. Or you can open the xel.log file at [OIM_HOME_DIR]\xellerate\logs
Renato.

OIM91 Weblogic Install: Cannot Install because already installed

I am attempting to install OIM 9.1 with Java 142_15 for Weblogic 8.1 SP6 server.
When I get to the server input information, after I press next, it gives the following error:
"Oracle identity Manager Installer has found that Oracle Identity Manager is already installed on specified BEA Weblogic."
Here is what our env looks like:
We have 1 instance of OIM on JBoss (we have since removed)
We are installing into a brand new DB.
We have never installed OIM on Weblogic before
The Weblogic server being installed on is brand new
Any help would be appreciated.
Thanks-

Also, see Note:457067.1
Bug No. 5568196
When a environment variable with string 'Xellerate' is set on a machine, the
OIM 9011 installer will fail to install OIM. A message is shown that OIM is
already installed and installer will not move forward beyond the screen where
admin server, managed server names and ports are entered (incase of
weblogic).
This should either be documented or the check shouldn't be made during the
installation.

Documentation(how to) for provisioning AD --OIM-- DB

Hello all,
Where i can find some "how to" about provisioning AD<--OIM-->DB? I need to install this resource , but i don't know how ? I didn't find (more difficult to me) a kind of "how to" about OIM-->DB provisioning.
Thanks a lot.

I was told that there is going to be (or potentially just has been) an OIM 9.1 training in Munich this spring.
The core problem is that it is simply not possible to train someone on something as complex as OIM in just a few days so the basic bootcamp training has to focus on the basic principles and shield the user from all the evil details. The issue with this approach is that when the user gets back to the implementation project they are now seen as experts that should be able to resolve anything as they have attended the training.
Find reconciliation in the fact that you now have a very marketable skill :)
If OIM implementation was easy you would have to find a new job

OAM-OIM 11g r2 integration is failing

Hi,
Following is my configuration,
1. I have OIM 11g r2 and OAM 11gr2 installed on different weblogic domains.
2. OIM synchronized with OUD LDAP
3. I followed the steps described in http://docs.oracle.com/cd/E27559_01/integration.1112/e27123/oim.htm
4. After the integration, I'm not able to login to the Oracle Access Manager console. Though my authentication is successful, I'm getting authorization error.
As per the doc, oamadmin user (member of oamadministrator group) should be able to login to the console. On weblogic console -> security realms screen, I can see oudauthenticator (authenticates against OUD LDAP) created by the idmconfig tool (tool used for the integration). On the same screen, if I open oamadmin user profile, I don't see any group membershiip information for this user. I also created Administrator group in my LDAP and assigned oamadmin as a member, but in vain. My guess is, since oam server is not recognizing user's role, it's giving an authorization error.
The documentation mainly talks about using OID as LDAP between OIM and OAM, though it claims other LDAPs are also supported. If anyone has successfully integrated, what do you see in oamadmin user profile, especially in the group membership attribute. Any other ideas/workarounds are greatly appreciated.
Thanks, Nishanth

I successfully did this into my VMWare and oamadmin user has there:
[oracle@thiagoleoncioVM ~]$ ldapsearch -D cn=orcladmin -w **** -b "dc=leoncio,dc=thiago" -L -s sub -v orclmtuid=*oaamadmin* memberOf
filter pattern: orclmtuid=*oaamadmin*
returning: memberOf
filter is: (orclmtuid=*oaamadmin*)
dn: cn=oaamadmin,cn=Users,dc=leoncio,dc=thiago
memberof: cn=oaamcsrgroup,cn=groups,dc=leoncio,dc=thiago
memberof: cn=oaamcsrmanagergroup,cn=groups,dc=leoncio,dc=thiago
memberof: cn=oaamenvadmingroup,cn=groups,dc=leoncio,dc=thiago
memberof: cn=oaaminvestigationmanagergroup,cn=groups,dc=leoncio,dc=thiago
memberof: cn=oaaminvestigatorgroup,cn=groups,dc=leoncio,dc=thiago
memberof: cn=oaamruleadministratorgroup,cn=groups,dc=leoncio,dc=thiago
memberof: cn=oaamsoapservicesgroup,cn=groups,dc=leoncio,dc=thiago
1 matches
I hope this information helps you with your issue then you should be able to see what is missing there,
Thiago Leoncio.

OIM 11.1.1.3.0 install

Similar Messages

Maybe you are looking for