OIM 11g R2 -AD Provisioning -Connector Server side Error

Hi,
Following error is thrown on the connector server side when we attempt to provision an AD resource:
11/15/2012 7:28:50 PM <VERBOSE>: Class-> ActiveDirectoryConnector, Method -> TranslateObjectClass, Message -> Returning the object class: ObjectClass: __ACCOUNT__ and exiting the method
11/15/2012 7:28:50 PM <INFORMATION>: Class-> ActiveDirectoryConnector, Method -> Create, Message -> Committing the changes and creating the directory entry.
11/15/2012 7:28:50 PM <ERROR>: Class-> ActiveDirectoryConnector Method -> Create, Message -> Encountered Excetion: Access is denied.
11/15/2012 7:28:50 PM <ERROR>: Class-> ActiveDirectoryConnector Method -> Create, Message -> Stack Trace: at System.DirectoryServices.Interop.UnsafeNativeMethods.IAds.SetInfo()
     at System.DirectoryServices.DirectoryEntry.CommitChanges()
     at Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryConnector.Create(ObjectClass oclass, ICollection`1 attributes, OperationOptions options) in c:\ADE\aime_oimcp\idc\bundles\dotnet\ActiveDirectory\ActiveDirectoryConnector\ActiveDirectoryConnector.cs:line 256
     ConnectorServer.exe Error: 0 : Org.IdentityConnectors.Framework.Common.Exceptions.ConnectorException: Access is denied.
     at Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryConnector.Create(ObjectClass oclass, ICollection`1 attributes, OperationOptions options) in c:\ADE\aime_oimcp\idc\bundles\dotnet\ActiveDirectory\ActiveDirectoryConnector\ActiveDirectoryConnector.cs:line 368
     at Org.IdentityConnectors.Framework.Impl.Api.Local.Operations.CreateImpl.Create(ObjectClass oclass, ICollection`1 attributes, OperationOptions options) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\ApiLocalOperations.cs:line 388
     at Org.IdentityConnectors.Framework.Impl.Api.Local.Operations.ConnectorAPIOperationRunnerProxy.Invoke(Object proxy, MethodInfo method, Object[] args) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\ApiLocalOperations.cs:line 244
     at ___proxy1.Create(ObjectClass , ICollection`1 , OperationOptions )
     at Org.IdentityConnectors.Framework.Impl.Server.ConnectionProcessor.ProcessOperationRequest(OperationRequest request) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\Server.cs:line 609
Am i missing any connector side configurations here?
Thanks

please perform these tests,
1- check if the reconciliation is working with the same user provided in the connector configurations?
2- check if the user reconciled can be updated modified through the IDM Admin console?
after this
check that you are providing the proper OU for the user to be provisioned?
check the the Resource History and see where it is failing maybe some required information is missing.
have you applied the patch 14190610 for AD connector?

Similar Messages

When trying to login in OIM 11g after providing credentials, it gives internal error 500.

When trying to login in OIM 11g after providing credentials, it gives internal error 500.

please note: 500 error is the most difficult HTTP error to troubleshoot , because it is very generic. It could be because of many things.
So, if you could provide us the OIM diagnostic logs when you receive it, it will help as to be helpful.
thx in advance,
Thiago Leoncio.
thiagoleoncio

Oim 11g can not install connector

Hi All,
i have installed oim 11G.
trying to install the dbum connector,
according to the manual, I have copied all the installation files and directories to OIM_HOME/server/ConnectorDefaultDirectory
but when I press the install connector on the oim admin console, the window opens ...but i can not see any connector in the LOV ,
meaning i can not install the connector, even tried bouncing the WL and OIM , not much help.
does any of you know of some error alike? / solution ?
(with v9 of oim I did nit have any problem with the same) .
Cheers
S.

Off-course it works, make sure the folder structure is correct.
*/ConnectorDefaultDirectory/<Connector-Installation-Media-Parent-Folder>/*
Now all the connector folder should be directly in there like configuration, lib etc

OIM 11g R2 -AD Provisioning Error

Hi,
We have configured AD connector server. When we try to provision the user with AD account we get:
Target Class = oracle.iam.connectors.icfcommon.prov.ICProvisioningManager
<Nov 14, 2012 10:05:40 PM PST> <Error> <ORACLE.IAM.CONNECTORS.ICFCOMMON.PROV.ICPROVISIONINGMANAGER> <BEA-000000> <oracle.iam.connectors.icfcommon.prov.ICProvisioningManager : createObject : Error while creating user
java.lang.IllegalArgumentException: Parameter 'name' must not be blank.
at org.identityconnectors.common.Assertions.blankCheck(Assertions.java:90)
at oracle.iam.connectors.icfcommon.service.oim9.OIM9Configuration.getConfiguration(OIM9Configuration.java:139)
I can see that all the mandatory fields are pre-populated except the Unique ID attribute -is this could be the issue, if yes then how do we handle this. I can see there are no events logged at the connector server end for this provisioning process attempt.
We have reconciled Groups, Organization successfully using connector server.
Can anyone help on this asap..!
Thanks

Unique ID attribute is ObjectGUID which I think would be autogenerated. I can see that my user id , OU and other mandatory attributes are populated on the process form, but still I am facing this issue.
it is throwing this error soon after CREATEOBJECT is invoked.
Thanks again

OIM 11g - Modification of GTC Connector not working

Hi,
We're using OIM 11.1.1.5.2, with the 9.1.0.5 Database Application Tables connector.
Sometime ago we created the connector from the OIM advanced administrative console to run Full Reconciliation, because at that moment the users table did not have a field with the timestamp of the update for each user. Now, we're using a date field that was unused before as the modification date field, we even created a trigger on the target database to make sure all modifications are recorded.
We went to the OIM advance administrative console again, manage connector, searched for our connector, then "Edit Parameters" and changed the "Timestamp Attribute" attribute to the date field, and we changed "Reconciliation Type" to "Incremental" on the same page. After that we saved the changes and the compilation of the connector ended without errors. I'm pretty sure it was modified because i had to re attach all prepopulate adapters and create are custom process task...
The problem is, we ran the reconciliation after that, and it still runs the full recon. OIM still generates events for all users. Is there anything else we should do to change the reconciliation type? Are there any files needed to be edited or any table or lookup to make sure it changed? I couldn't find the place were the reconciliation query is kept for this connector.
Thanks.

Anyone's got any idea? I'll be happy with finding out which table or xml on the mds keeps the connector parameters, i know it has to get it somewhere because i doubt it is hardcoded on the jar when i create the connector.
But i still can't find the place were they're stored, and even though i can see the timestamp attribute on the edit connector page, when i run the recon, the incrementalReconAttribute is null.
APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: driver - Value: oracle.jdbc.driver.OracleDriver
APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: url - Value: jdbc:oracle:thin:@idmgr11g:1521:mrdb
APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: username - Value: test1
APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: password - Value: *******
APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: customizedQueries - Value:
APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: useNativeQuery - Value: false
APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: parentContainerName - Value: TEST1
APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/convertCSVToArraylist entered.
APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/convertCSVToArraylist: providerParams: TEST2
APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/convertCSVToArraylist left.
APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: childContainerTableNames - Value: [TEST2]
APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: parentContainerUniqueKey - Value:
*APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: incrementalReconAttribute - Value:*
APP: oim#11.1.1.3.0] [SRC_METHOD: debug] Class/Method: DBReconTransportProvider/initialize - Data: dbDateFormat - Value: yyyy/MM/dd HH:mm:ss z

"RABAX" occurs on server side error while testing asynchoronous web service

I got error while testing asynchronous web service in WS navigator. I have created asynchronouse web service using RFC. Then I configured it in SOAMANAGER. When I tested it, got error "RABAX occurs on server side". Also I got dump in ST22. It is 'UNCHAUGHT_EXCEPTION - CX_SOAP_SEQ_SCD_ERROR'.
I have tested for synchronous web service it works fine. I found a difference in both web service WSDL file for below parameters value -
commit
blocking
transaction
wsrm
I tried different way .. but no solution .. Plz suggest if someone have any idea.....Its very helpfull....

your problem:
Missing class: oracle.tip.adapter.jms.JmsManagedConnectionFactory
Dependent class: oracle.tip.adapter.fw.wsdl.WSDLUtils
Loader: oracle.bpel.common:10.1.3
Code-Source: /oraclesoa/oraclesoa/product/10.1.3.1/OracleAS_1/bpel/lib/orabpel.jar
Configuration: <code-source> in /oraclesoa/oraclesoa/product/10.1.3.1/OracleAS_1/j2ee/home/config/server.xml
It happens when server is custom installed, try to reinstall it as full version and problem should disappear otherwise your need another full installation to retrieve and replace orabpel.jar file from (or maybe more)

Server-side error including webservice

Hi,
I'm struggling with the webservice functionality on the
server-side.
At the top of my main.asc-file I have this line:
load("webservices/WebServices.asc");
That puts the following in my administration console:
"WebServices Loaded successfully."
However, when someone connects to the media server and it
tries to initialize and use this webservice using this code:
MyService = new WebService("uri.to.wsdl.file");
I get the following error in the administration console:
Sending error message: C:\Program Files\Adobe\Flash Media
Server 3\scriptlib\webservices\XMLSchema.asc: line 110:
ReferenceError: document is not defined
Failed to execute method (XML.onData).
I've tried googling it and that gave this result, but the
solution suggested here didn't work:
Link
to other forum
This is not caused by the webservice itself, since other
flash and .Net applications can use it without any problems.
Everything also works just fine when I run everything off my local
workstation, but as soon as I put the stuff on the server the error
message appears (and, yes, I've changed all references to the
webservice to be the one on the server instead of the local
workstation ;))
What is causing this? Why do I get an error from Adobe's own
code?

Sorry... I take back what I said about it not being the
webservice. It seemed it was the webservice after all... but not in
the way you'd think.
It seems that the webservice handling on server-side AS can't
handle webmethods that return complex types. I had two methods that
returned DataTable-objects (.Net-objects). As soon as I removed
those the webservice calls worked just the way they should again.
All the webmethods in the webservice now only return primitive
types.
This still seems like a bug in Adobe's webservice classes,
though. A consumer of a webservice should be able to handle complex
types.

Server side error checking

How do I check for alpha numeric charcters on the server side. Page is JSP.
I have a string username and want to check to ensure that all characters are alphanumeric

if you are using Java 1.4, you can use regular expressions. Conditions and terms apply. Consult your local API docs for details.

OIM 11g Peoplesoft Roles provisioning issue

Hi All,
We have configured Peoplesoft Connector 9.1.1.6 to provision roles to Peoplesoft through access policy. We are not able to provision multiple roles into Peoplesoft. It just provisions first role to user in peoplesoft and errors when provisioning the other role. The role names are matching in peoplesoft and OIM, pulled into the lookup.
Error on Server :
Running CREATEUSER
Target Class = oracle.iam.connectors.psft.usermgmt.integration.PSFTUMUserProvisi
onManager
PSProperties not loaded from file. Couldn't find file: pstools.properties
<Dec 19, 2011 1:26:54 PM EST> <Warning> <PSFTUM> <BEA-000000> <oracle.iam.connec
tors.psft.usermgmt.integration.PSFTUMUserProvisionManager : createUser : Exclusi
on List Attribute lookup not initialized>
Running MODIFYUSERROLE
Target Class = oracle.iam.connectors.psft.usermgmt.integration.PSFTUMUserProvisi
onManager
PSProperties not loaded from file. Couldn't find file: pstools.properties
Running MODIFYUSERROLE
Target Class = oracle.iam.connectors.psft.usermgmt.integration.PSFTUMUserProvisi
onManager
PSProperties not loaded from file. Couldn't find file: pstools.properties
<Dec 19, 2011 1:26:57 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <=============
=======================================>
<Dec 19, 2011 1:26:57 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <oracle.iam.co
nnectors.psft.usermgmt.integration.PSFTUMUserProxyProvisionManager : modifyUserR
ole : Unable to Save user profile>
<Dec 19, 2011 1:26:57 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <=============
=======================================
>
<Dec 19, 2011 1:26:57 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <=============
=======================================>
<Dec 19, 2011 1:26:57 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <oracle.iam.co
nnectors.psft.usermgmt.integration.PSFTUMUserProxyProvisionManager : errorHandle
r : The value entered in the field does not match one of the allowable values.
You can see the allowable values by pressing the Prompt button or hyperlink.>
<Dec 19, 2011 1:26:57 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <=============
=======================================
>
<Dec 19, 2011 1:26:57 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <=============
=======================================>
<Dec 19, 2011 1:26:57 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <oracle.iam.co
nnectors.psft.usermgmt.integration.PSFTUMUserProxyProvisionManager : errorHandle
r : An error occurred while changing the value of the field.>
<Dec 19, 2011 1:26:57 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <=============
=======================================
>
<Dec 19, 2011 1:26:57 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <=============
=======================================>
<Dec 19, 2011 1:26:57 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <oracle.iam.co
nnectors.psft.usermgmt.integration.PSFTUMUserProxyProvisionManager : errorHandle
r : An error occurred while changing the value of the field.>
<Dec 19, 2011 1:26:57 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <=============
=======================================
>
Running MODIFYUSERROLE
Target Class = oracle.iam.connectors.psft.usermgmt.integration.PSFTUMUserProvisi
onManager
PSProperties not loaded from file. Couldn't find file: pstools.properties
<Dec 19, 2011 1:26:58 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <=============
=======================================>
<Dec 19, 2011 1:26:58 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <oracle.iam.co
nnectors.psft.usermgmt.integration.PSFTUMUserProxyProvisionManager : modifyUserR
ole : Unable to Save user profile>
<Dec 19, 2011 1:26:58 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <=============
=======================================
>
<Dec 19, 2011 1:26:58 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <=============
=======================================>
<Dec 19, 2011 1:26:58 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <oracle.iam.co
nnectors.psft.usermgmt.integration.PSFTUMUserProxyProvisionManager : errorHandle
r : The value entered in the field does not match one of the allowable values.
You can see the allowable values by pressing the Prompt button or hyperlink.>
<Dec 19, 2011 1:26:58 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <=============
=======================================
>
<Dec 19, 2011 1:26:58 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <=============
=======================================>
<Dec 19, 2011 1:26:58 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <oracle.iam.co
nnectors.psft.usermgmt.integration.PSFTUMUserProxyProvisionManager : errorHandle
r : An error occurred while changing the value of the field.>
<Dec 19, 2011 1:26:58 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <=============
=======================================
>
<Dec 19, 2011 1:26:58 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <=============
=======================================>
<Dec 19, 2011 1:26:58 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <oracle.iam.co
nnectors.psft.usermgmt.integration.PSFTUMUserProxyProvisionManager : errorHandle
r : The value entered in the field does not match one of the allowable values.
You can see the allowable values by pressing the Prompt button or hyperlink.>
<Dec 19, 2011 1:26:58 PM EST> <Error> <OIMCP.PSFTUM> <BEA-000000> <=============
=======================================
Any pointers would be appreciated.
Regards,
Ashok

Hi All,
Any pointer.
Regards,
Ashok

OIM 11g R2 - AD provisioning based on Role and Access Policy

Hi, for Active Direcotry integration i used some prepopulation plugin for populationg resource form (based on http://fusionsecurity.blogspot.sk/2013/01/populating-request-attributes-in-oim.html).
It's work fine - requested account was fully provisioned.
Can i use this plugins for Role based provisioning?
I try to create access policy and associated role but when attached the role to the user and run Evaluate User Policies Job, account can't be provisioned.
In diagnostic.log i found.....
[oracle.iam.platform.kernel.impl] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] Immediate consequences are returned with event - InitiatePolicyEvaluationAndProvisioning
[oracle.iam.platform.kernel.impl] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] Next Waiting child process is ..........6380 sync = false
[oracle.iam.platform.kernel.impl] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] First Waiting child process is ..........6380
[oracle.iam.platform.kernel.impl] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] Kernel executing default validation with process id, event id, entity and operation 6,380.0.Resource.ACCESS_POLICY_BASED_PROVISION
[oracle.iam.platform.kernel.impl] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] Kernel completed the child orchestration - 6380.6379
[oracle.iam.platform.kernel.dao] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] Inserting records for orchestration cleanup
[oracle.iam.platform.kernel.impl] [.....] [userId: oiminternal] [.....] [APP: oim#11.1.2.0.0] Completed orchestration with action result - 113

Hi, all
I try to fill Access policy Process Form. Account request was created and provisioned when field AD Server and Organization Name was filled in, but pre-population plugin doesn't fired
The question is.... How can i use pre-population plugin for populating request dataset used with request generated by access policy....
Is it possible to use plugins for requests generated based on access policy?
a.

OIM 11g R2 Auto Provisioning Issue

I have reconciled around 9K records into OIM and ran the evaluate user policies to provision them to LDAP.
Around 8.5K records got provisioned to LDAP, but the others are not getting provisioned.
I tried running the retry failed orchestrations and the orchestration cleanup and a few more got provisioned.
Now there are around 300 records which still need to get provisioned. I tried running the evaluate policies again but it is no working.
Am I missing something that should be done?
Please suggest what can be done to resolve this

please make sure that all the required fields / attributes that are needed for the provisioning are filled for the users not getting provisioned. Also check the status of the Account to be provisioned for any unprovisioned user does it state "provisioning"? if so check its history and try to find out the reason.

Showing server side error in Flex

Hi all..
I have a RPC call which consists of a staging process which
throws custom error messages at different stages. I want to show
these error messages at the flex side. How this is possible? i
tried using event.fault.faultString... but it doesn't gave my error
message which i gave out at the server. Please help me out in this
issue. am kinda stuck.
Thanks In Advance

Hi Vyshak,
Let your RPC method return a string that is you error message
if the method returns void before -- an empty string means
everthing is okay. If the RPC method returns an object before, you
can add a field called errText or something to the returning
object.
Jeffrey

WHere i can see the Server side Errors in WAS

Hi,
I'm creating a java application.where i wrote Jsp,Servlet,Sessionbeans.I'm getting runtime Exception.Like in Weblogic/Tomcat, In WAS where I can see the console so that I can see the Error messages.
Or will it create any Log file If so Where it will be created.Plz Suggest me how can we view the error message or log message.
THanx

Hi Lakshmi,
depends on the version you are on.
EP5: See /thread/23766 [original link is broken]
EP6SP2: See /thread/25694 [original link is broken]
EP6 NW04: See /thread/19070 [original link is broken]
Best regards
Detlev

Steps to enable Automatic provisioning in OIM 11g

Hi,
I am trying to configure my OIM 11g to automatically provision the resource into OID.
I am able to do the provisioning manually but as per my requirement, when I register the user details in OIM the record must be created in OID automatically.
Can u please mention the steps I must follow for the same.
Regards

Hi Pk
I Checked the task "System Validation" status for the Resource.It was Pending as told I selected Auto Save in the process definition of the resource in design console.
Now my resource gets provisioned but only when I attach user to the Role created by me. By default user gets attached to the All Users Role.
What configuration changes should i make so that the user on creation gets attached to custom Role created by me.
Regards

OIM 11g R2 installation Issue. OIM Schema creation failed using RCU 11.1.2

I have been trying to install OIM 11g R2 on a Windows server 2008 R2 64 Bit and have been encountering the following error during the OIM schema creation. The other schemas, such as Metadata, SOA, user messaging services and other associated schema creation was successful. But, the OIM schema creation was taking more than 2 minutes and finally it fails with the below error.
RCU-6130: Action failed
RCU-6135: Error while trying to execute java action.
Components used:
OS: Windows Server 2008 R2 64 Bit
DBS: 11gR2 (11.2.0.1)
RCU: 11.1.2
The first error occured was ora-12637 packet receive failed followed by Table or View does not exist. I could not fetch much information from the oim and rcu.log.
I have set the processes, open_cursors and session_cached_cursors as suggested in the preinstallation step of OIM 11g R2 installation.
Any pointers on this will be highly appreciated.
Thanks,
Srini

Copy the msvcr71.dll file from rcuHome\jdk\jre\bin inside rcu installer and paste it in C:\Windows\SysWOW64.
Try running the rcu again with the new user i.e. instead of DEV_OIM, run it with DEV_OIM1.
Or drop the DEV_OIM user first and then use the same user.

OIM 11g R2 -AD Provisioning -Connector Server side Error

Similar Messages

Maybe you are looking for