OIM 11g R2 - Change User Container

Hello,
I need to change the ldap user container in OIM 11g R2. I need to change it from cn=users1,cn=oracleAccounts,dc=mycompany,dc=com to cn=users2,cn=oracleAccounts,dc=mycompany,dc=com. I am using OUD as the directory for LDAP sync. How do I do this?
Thanks.

you need to modify the /db/LDAPContainerRules.xml to achieve this. Export it from MDS , modify it and then import it again. Restart OIM and then try.
Regards,
Sunny

Similar Messages

OIM 11g: SAP HRMS User Recon gives error

Hello,
I am using the SAP ER (Employee Reconciliation) connector, version Version: 9.1.2.2. I have upgraded to bundle patch 3 (BP3).
Connectivity to SAP works. I have run the manager recon, org recon and it brought in values.
When I try to reconcile users (using limited reconciliation) from IDOCS, it finds the user, creates a reconciliation event but ignores it. On querying the recon event the reason given for not linking is "Data Validation Failed"
[2011-03-09T11:00:53.088-08:00] [oim1] [NOTIFICATION] [IAM-5010000] [oracle.iam.reconciliation.impl] [tid: OIMQuartzScheduler_Worker-1] [userId: xelsysadm] [ecid: 0000IuRuoQM9d_w_wD0FyW1DTwVJ00000Q,0] [APP: oim#11.1.1.3.0] [dcid: c4ab19921fd287b5:377e40a5:12e9be68f89:-7ffa-0000000000000354] [arg: ignoreEvent Input Data : {Personnel Number=00011070, Street=1775 Milmont Dr, Postal Code=95035, Organization=Xellerate Users, Employee Type=Full-Time, Org Unit=10000037, Country=US, Middle Name=V, Cost Center=, User ID=00011070, City=Milpitas, Group=1, User Type=End-User, Manager ID=10000037, Status=Active, User Created From HRMS=1, Telephone Number=4081233339, District=Cnt#1, Position=00000026, Sub Group=FS, Last Name=Khan, First Name=Salman}] Generic Error/Information: ignoreEvent Input Data : {Personnel Number=00011070, Street=1775 Milmont Dr, Postal Code=95035, Organization=Xellerate Users, Employee Type=Full-Time, Org Unit=10000037, Country=US, Middle Name=V, Cost Center=, User ID=00011070, City=Milpitas, Group=1, User Type=End-User, Manager ID=10000037, Status=Active, User Created From HRMS=1, Telephone Number=4081233339, District=Cnt#1, Position=00000026, Sub Group=FS, Last Name=Khan, First Name=Salman}
On Re-evaluating the event, I see a different error in the logs:
[2011-03-09T13:47:38.646-08:00] [oim1] [ERROR] [IAM-5010006] [oracle.iam.reconciliation.impl] [tid: [ACTIVE].ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: 0000IuS_iIo9d_w_wD0FyW1DTxCO0001JD,0] [APP: oim#11.1.1.3.0] [dcid: c4ab19921fd287b5:75438372:12e9c1335ee:-7ffa-0000000000002728] The following exception occurred: {0}[[
oracle.iam.reconciliation.exception.InvalidEventException: Invalid ManagerLogin : 10000037
at oracle.iam.reconciliation.impl.UserHandler.getOrchestrationParams(UserHandler.java:713)
at oracle.iam.reconciliation.impl.UserHandler.create(UserHandler.java:150)
at oracle.iam.reconciliation.impl.UserHandler.applyRule(UserHandler.java:90)
at oracle.iam.reconciliation.impl.UserHandler.process(UserHandler.java:65)
at oracle.iam.reconciliation.impl.ActionEngine.processEvent(ActionEngine.java:193)
at oracle.iam.reconciliation.impl.ActionEngine.processEvent(ActionEngine.java:155)
at oracle.iam.reconciliation.impl.ActionEngine.execute(ActionEngine.java:92)
at oracle.iam.reconciliation.impl.ActionTask.execute(ActionTask.java:73)
at oracle.iam.platform.async.impl.TaskExecutor.executeUnmanagedTask(TaskExecutor.java:100)
at oracle.iam.platform.async.impl.TaskExecutor.execute(TaskExecutor.java:70)
at oracle.iam.platform.async.messaging.MessageReceiver.onMessage(MessageReceiver.java:68)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy467.onMessage(Unknown Source)
at weblogic.ejb.container.internal.MDListener.execute(MDListener.java:466)
at weblogic.ejb.container.internal.MDListener.transactionalOnMessage(MDListener.java:371)
at weblogic.ejb.container.internal.MDListener.onMessage(MDListener.java:328)
at weblogic.jms.client.JMSSession.onMessage(JMSSession.java:4659)
at weblogic.jms.client.JMSSession.execute(JMSSession.java:4345)
at weblogic.jms.client.JMSSession.executeMessage(JMSSession.java:3822)
at weblogic.jms.client.JMSSession.access$000(JMSSession.java:115)
at weblogic.jms.client.JMSSession$UseForRunnable.run(JMSSession.java:5170)
at weblogic.work.SelfTuningWorkManagerImpl$WorkAdapterImpl.run(SelfTuningWorkManagerImpl.java:528)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
"Invalid ManagerLogin : 10000037" 10000037 is the org number in the lookup and its corresponding personnel number 00016901 is not being picked up.
There is a known bug that if a user with that personnel number (i.e 00016901) does not exist in OIM 11g then OIM will not insert the record (bug 9688099), so to work around this, I added that personnel number to a user in OIM (USR_UDF_PERSONNEL_NUMBER). Still the same.
Has anyone seen a similar error? Any ideas on what I could be missing? Troubleshooting tips?
Has anyone implemented this version of the connector?
Regards,
Sunny
Edited by: Sunny on Mar 10, 2011 1:50 PM

This turned out to be an Oracle bug.
Bug 9539918 - BOTH MANAGER ID FIELD AND ORG UNIT FIELD IS DISPLAYED WITH ORG UNIT VALUE
This has been fixed in9.1.2.4 version of the connector. Patch11656991
Sunny
Edited by: Sunny on Mar 15, 2011 1:47 PM

OIM 11g R2: Delete User UDF fields

Hi all,
I installed and configured OIM 11g R2. In this environment I created an UDF for User entity.
Here the steps that I followed:
- created a sanbox
- opened User Form
- added a custom field named "MyCustomField". The type field is Text.
Now, due to a mistake during UDF creation, I have to delete it.
I found this post (OIM 11gR2 - Unable to remove UDF which describe how to delete an UDF field.
The post gives these instructions:
- export the sandbox
- remove UDF occurences in xml files
- import the sanbox
I followed the instructions and at the and I checked the result: the UDF field does not exist in the User form, but the associated database field still exits in database.
My question is: how I can delete the database filed without create database inconsistency?
Thanks in advance,
Daniele

Hi Nayan,
I tried to export Users.xml using Depolyment Manager Export, but I the export failed whit this error.
[2012-10-09T10:03:37.366+02:00] [oim_server1] [ERROR] [] [XELLERATE.WEBAPP] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: fc578f2854422d44:67bee673:13a2720c2c5:-8000-0000000000015853,0] [APP: oim#11.1.2.0.0] Class/Method: LoadDeploymentUtility/handleExportData encounter some problems: invalid character in name[[
Thor.API.Exceptions.tcAPIException: invalid character in name
at com.thortech.xl.ejb.beansimpl.tcExportOperationsBean.getExportXML(tcExportOperationsBean.java:245)
at Thor.API.Operations.tcExportOperationsIntfEJB.getExportXMLx(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
Caused by: oracle.xml.parser.v2.XMLDOMException: invalid character in name
at oracle.xml.util.XMLUtil.validateName(XMLUtil.java:464)
at oracle.xml.parser.v2.XMLDocument.createElement(XMLDocument.java:877)
at com.thortech.xl.ddm.repositories.api.impl.APIRepository.getElementforHashMapAttribute(APIRepository.java:552)
at com.thortech.xl.ddm.engine.visitor.ExportVisitor.visitStarted(ExportVisitor.java:126)
at com.thortech.xl.ddm.engine.data.datatypes.SchemaInstance.traverse(SchemaInstance.java:252)
at com.thortech.xl.ejb.beansimpl.tcExportOperationsBean.export(tcExportOperationsBean.java:281)
at com.thortech.xl.ejb.beansimpl.tcExportOperationsBean.getExportXML(tcExportOperationsBean.java:235)
... 120 more
]]Do you have any other suggestions?
Thanks,
Daniele

OIM 11g R2 - Trusted User Recon 'Reconciliation Insert Received' not trigge

Hi,
We have recently upgrade OIM 10g to 11g R2. One thing which we use to depend on in 10g was the 'Reconciliation Insert Received' to trigger of other tasks. This does not seem to work in OIM 11g R2? Is there a way to fix this?

This turned out to be an Oracle bug.
Bug 9539918 - BOTH MANAGER ID FIELD AND ORG UNIT FIELD IS DISPLAYED WITH ORG UNIT VALUE
This has been fixed in9.1.2.4 version of the connector. Patch11656991
Sunny
Edited by: Sunny on Mar 15, 2011 1:47 PM

OIM 11g: SAP HRMS User Recon

I am using the SAP ER connector, version 9.1.2.4. I have upgraded OIM to bundle patch 4.
My IT Resource is as follows:
App server host: "IP address"
Client logon: 050
Connection Count: 1
Gateway host: "IP address"
Gateway service:3300
Group Name: PUBLIC
Language: en
Message Server: SAPHRQ
Password: *******
Peak limit: 10
Pool capacity: 3
Program ID: IDOCLISTEN
R3 Name: HRQ
Repository destination: BCE
SNC lib:
SNC mode: no
SNC my name:
SNC partner name:
SNC qop:
Server name: SERVER
System number: 00
Unicode mode: yes
User logon: OIMUSER
I have run job SAP HRMS User Recon. As a result, I have error:
[2011-04-27T22:50:18.703+03:00] [oim_server1] [ERROR] [] [OIMCP.SAPH] [tid: OIMQuartzScheduler_Worker-6] [userId: xelsysadm] [ecid: 0000IyOWgf_8TsYjLpvH8A1Di76b00000g,0] [APP: oim#11.1.1.3.0] [dcid: 31adce849313fcc5:100e79e1:12f987dc80e:-7ffd-000000000000003c] ====================================================
[2011-04-27T22:50:18.703+03:00] [oim_server1] [ERROR] [] [OIMCP.SAPH] [tid: OIMQuartzScheduler_Worker-6] [userId: xelsysadm] [ecid: 0000IyOWgf_8TsYjLpvH8A1Di76b00000g,0] [APP: oim#11.1.1.3.0] [dcid: 31adce849313fcc5:100e79e1:12f987dc80e:-7ffd-000000000000003c] oracle.iam.connectors.common.dao.OIMUtil : createTrustedReconEvent() : oracle.iam.platform.utils.SuperRuntimeException: java.sql.SQLException: Invalid character encountered in
[2011-04-27T22:50:18.703+03:00] [oim_server1] [ERROR] [] [OIMCP.SAPH] [tid: OIMQuartzScheduler_Worker-6] [userId: xelsysadm] [ecid: 0000IyOWgf_8TsYjLpvH8A1Di76b00000g,0] [APP: oim#11.1.1.3.0] [dcid: 31adce849313fcc5:100e79e1:12f987dc80e:-7ffd-000000000000003c] ====================================================[[
<Apr 27, 2011 10:50:18 PM EEST> <Error> <oracle.iam.reconciliation.impl> <IAM-5010000> <Generic Error/Information: {0}
oracle.iam.platform.utils.SuperRuntimeException: java.sql.SQLException: Invalid character encountered in
at oracle.iam.reconciliation.dao.event.EventMgmtDao.ignoreEventUsrDataMatch(EventMgmtDao.java:449)
at oracle.iam.reconciliation.impl.ReconOperationsServiceImpl.ignoreEvent(ReconOperationsServiceImpl.java:383)
at oracle.iam.reconciliation.impl.ReconOperationsServiceImpl.ignoreEvent(ReconOperationsServiceImpl.java:346)
at Thor.API.Operations.tcReconciliationOperationsIntfEJB.ignoreEventx(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.jee.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:37)
at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
at com.bea.core.repackaged.springframework.jee.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:50)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy327.ignoreEventx(Unknown Source)
at Thor.API.Operations.tcReconciliationOperationsIntfEJB_troehf_tcReconciliationOperationsIntfRemoteImpl.ignoreEventx(tcReconciliationOperationsIntfEJB_troehf_tcReconciliationOperationsIntfRemoteImpl.java:2494)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:84)
at $Proxy164.ignoreEventx(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:198)
at $Proxy323.ignoreEventx(Unknown Source)
at Thor.API.Operations.tcReconciliationOperationsIntfDelegate.ignoreEvent(Unknown Source)
at oracle.iam.connectors.common.dao.OIMUtil.createTrustedReconEvent(Unknown Source)
at oracle.iam.connectors.sap.common.parser.HRMDAParser.reconcileUser(Unknown Source)
at oracle.iam.connectors.sap.common.parser.HRMDAParser.parse(Unknown Source)
at oracle.iam.connectors.sap.hrms.tasks.SAPHRMSUserRecon.execute(Unknown Source)
at com.thortech.xl.scheduler.tasks.SchedulerBaseTask.execute(SchedulerBaseTask.java:385)
at oracle.iam.scheduler.vo.TaskSupport.executeJob(TaskSupport.java:144)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.iam.scheduler.impl.quartz.QuartzJob.execute(QuartzJob.java:164)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:529)
Caused By: java.sql.SQLException: Invalid character encountered in
at oracle.jdbc.driver.SQLStateMapping.newSQLException(SQLStateMapping.java:70)
at oracle.jdbc.driver.DatabaseError.newSQLException(DatabaseError.java:133)
at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:199)
at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:263)
at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:271)
at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:445)
at oracle.sql.CharacterSet.failUTFConversion(CharacterSet.java:2706)
at oracle.sql.CharacterSetAL32UTF8.toString(CharacterSetAL32UTF8.java:192)
at oracle.sql.CHAR.getString(CHAR.java:234)
at oracle.jdbc.oracore.OracleTypeCHAR.pickle81(OracleTypeCHAR.java:258)
at oracle.jdbc.oracore.OracleTypeCOLLECTION.pickle81(OracleTypeCOLLECTION.java:310)
at oracle.jdbc.oracore.OracleTypeADT.pickle81(OracleTypeADT.java:1637)
at oracle.jdbc.oracore.OracleTypeADT.linearize(OracleTypeADT.java:1256)
at oracle.sql.ArrayDescriptor.toBytes(ArrayDescriptor.java:683)
at oracle.sql.ARRAY.toBytes(ARRAY.java:632)
at oracle.jdbc.driver.OraclePreparedStatement.setArrayCritical(OraclePreparedStatement.java:5576)
at oracle.jdbc.driver.OraclePreparedStatement.setARRAYInternal(OraclePreparedStatement.java:5535)
at oracle.jdbc.driver.OraclePreparedStatement.setObjectCritical(OraclePreparedStatement.java:7959)
at oracle.jdbc.driver.OraclePreparedStatement.setObjectInternal(OraclePreparedStatement.java:7547)
at oracle.jdbc.driver.OraclePreparedStatement.setObjectInternal(OraclePreparedStatement.java:8212)
at oracle.jdbc.driver.OracleCallableStatement.setObject(OracleCallableStatement.java:5005)
at oracle.jdbc.driver.OracleCallableStatementWrapper.setObject(OracleCallableStatementWrapper.java:202)
at weblogic.jdbc.wrapper.CallableStatement.setObject(CallableStatement.java:964)
at oracle.iam.reconciliation.dao.event.EventMgmtDao.ignoreEventUsrDataMatch(EventMgmtDao.java:438)
at oracle.iam.reconciliation.impl.ReconOperationsServiceImpl.ignoreEvent(ReconOperationsServiceImpl.java:383)
at oracle.iam.reconciliation.impl.ReconOperationsServiceImpl.ignoreEvent(ReconOperationsServiceImpl.java:346)
at Thor.API.Operations.tcReconciliationOperationsIntfEJB.ignoreEventx(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.jee.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:37)
at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
at com.bea.core.repackaged.springframework.jee.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:50)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy327.ignoreEventx(Unknown Source)
at Thor.API.Operations.tcReconciliationOperationsIntfEJB_troehf_tcReconciliationOperationsIntfRemoteImpl.ignoreEventx(tcReconciliationOperationsIntfEJB_troehf_tcReconciliationOperationsIntfRemoteImpl.java:2494)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:84)
at $Proxy164.ignoreEventx(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:198)
at $Proxy323.ignoreEventx(Unknown Source)
at Thor.API.Operations.tcReconciliationOperationsIntfDelegate.ignoreEvent(Unknown Source)
at oracle.iam.connectors.common.dao.OIMUtil.createTrustedReconEvent(Unknown Source)
at oracle.iam.connectors.sap.common.parser.HRMDAParser.reconcileUser(Unknown Source)
at oracle.iam.connectors.sap.common.parser.HRMDAParser.parse(Unknown Source)
at oracle.iam.connectors.sap.hrms.tasks.SAPHRMSUserRecon.execute(Unknown Source)
at com.thortech.xl.scheduler.tasks.SchedulerBaseTask.execute(SchedulerBaseTask.java:384)
at oracle.iam.scheduler.vo.TaskSupport.executeJob(TaskSupport.java:144)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.iam.scheduler.impl.quartz.QuartzJob.execute(QuartzJob.java:164)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:529)
<Apr 27, 2011 10:50:18 PM EEST> <Error> <OIMCP.SAPH> <BEA-000000> <====================================================>
<Apr 27, 2011 10:50:18 PM EEST> <Error> <OIMCP.SAPH> <BEA-000000> <oracle.iam.connectors.common.dao.OIMUtil : createTrustedReconEvent() : oracle.iam.platform.utils.SuperRuntimeException: java.sql.SQLException: Invalid character encountered in>
<Apr 27, 2011 10:50:18 PM EEST> <Error> <OIMCP.SAPH> <BEA-000000> <====================================================
Has anyone seen a similar error?

Hey,
I see the same issue and need to make this change as well, where are these settings? I couldn't find them in the setDomainEnv or setSOADomainEnv.
Thanks

OIM 11g R1 - Add user to group after AD Reconciliation

Hi,
i want to add all reconcilated users from AD to OIM to a special role in oim, after a AD reconciliation.
By default, all users get the role ALL_USERS. I want to add a futher role, for example ALL_AD_USERS.
How to do this?
Edited by: 960944 on Jan 15, 2013 5:11 AM

I assume that here you are talking about AD TRUSTED RECONCILIATION and you don't have any other TRUSTED Reconciliation and this is the only way to bring users into OIM, then you can create a role and attach a membership rule say "Organization doesn't contain ZZZZ". It will satisfy all the users
CONS: Here you won't be able to distinguish between users which are creating through Admin Console or from AD Trusted or from some other Trusted Recon.
Now if you want only those users who are coming from AD then Add a task on Reconciliation Insert/Update Received and add user into Role using APIs.

OIM 11G R2 Provisioning User to Oracle DB

Hello Experts,
I'm working on OIM 11gr2 and I installed DBAT 9.1.0.5.0
User-->Accounts-->RequestAccounts--> catalog-->add to cart --> checkout ...
When i was executed Checkout in catalog why no content for details ？ User can't Provisioning to DB.
Have you any ideas?
Thanks!

I appreciate your feedback very much.
My operation steps are as follows：
1) install DBAT 9.1.05
2)create connector "Database Application Tables Provisioning"
3)The system automatically created IT resources and Application Instances
4)Create Sandbox and activate it
5)edit Application Instances, create Form
6) Publish Sandbox
7)Run "Catalog Synchronization Job"
8)login /identity
9)create user
10)request acttouts
11) catalog-->add to cart --> checkout !

OIM 11g DBAT connector - user update not working after target recon

Hi,
I have configured a resource (XSVR3) with the DBAT 9.1.0.5.0 connector to do provisioning and target recon to and from the same custom database table, following the example found on the connector guide. Now what happens is the following:
- if I first provision the resource to the user everything works fine
- if a resource is first assigned to a user as a result of a target recon, the connector then fails at propagating to the table any changes I make in the process form, returning the following error:
<8-gen-2013 16.44.16 CET> <Error> <OIMCP.DATC> <BEA-000000> <Class/Method: DBFacade/updateParentRecord encounter some problems: Empty parent row cannot be updated. Please ensure to run reconciliation task to bring the systems in sync.>
<8-gen-2013 16.44.16 CET> <Error> <OIMCP.DATC> <BEA-000000> <Class/Method: DBProvisioningTransportProvider/sendData encounter some problems: DB_UPDATE_EMPTY_RECORD_ERROR
com.thortech.xl.gc.exception.DBException: DB_UPDATE_EMPTY_RECORD_ERROR
at com.thortech.xl.gc.impl.common.DBFacade.updateParentRecord(Unknown Source)
at com.thortech.xl.gc.impl.prov.DBProvisioningTransportProvider.sendData(Unknown Source)
It looks like the connector is unable to find the record that needs to be updated. I've looked into the process form table of the resource on the DB (called UD_XSVR3), and I noticed that records resulting from target reconciliation have a null in the UD_XSVR3_ID column, while records resulting from a direct provisioning have the username in the same column. Updating manually the column in the first kind of records fixes the issue, but I need to know if/what have I missed in the connector configuration.
thanks in advance
Alex
Edited by: Prorad on Jan 9, 2013 3:02 AM

Hi, Prorad,
We are having same issue. What's the resolution for the issue? Any hints will be great.
Thanks,
Vincent

OIM 11g R1 - change xelsysadm passwords

Hello,
i need to change the passwords for xelsysadm.
Where do i have to change all the passwords for xelsysadm?
- OIM
- OID (LDAP)
- Credential Store Provider in EM (sysadmin = xelsysadm)
- ???

Use Oracle Document:
http://docs.oracle.com/cd/E14571_01/doc.1111/e14308/handlinglcm.htm#CIAJCEEF

OIM 11g - Limiting support users to assign roles to correct users

We have OIM 11.1.1.5.0 and support a couple of third party organizations with delegated administration.
Admins in OrgA have an admin role AdminRoleA which allows them to assign UserRoleA to their users. Similarly, admins in OrgB are given AdminRoleB that gives them the ability to assign UserRoleB to their users.
We have support groups that can help these organizations. I have defined the Support role to inherit from AdminRoleA and AdminRoleB. The problem that I'm finding is that the support user can assign UserRoleB to a user in the other organization OrgA.
I could probably solve this by writing custom code in a validation handler but I just wondered if I was missing something and should have configured these roles and auth policies differently.
Thanks.

Thanks, I was afraid of having to do mess with the backend like that. What if I removed the the "all users" role from people I didn't want to have that access? How would that affect the user?
EDIT- It appears as though you cannot revoke that role. I guess I had never tried to do it before.
Edited by: 970312 on Jan 28, 2013 7:52 PM

OIM 11g - Reset End-User Password by Helpdesk

Hi,
Help Desk Administrators can search the "End Users" and can "Reset the Password". I have to customize the "Reset Password Menu" which is having two options to reset the password.
1. Manually Change the Password
2. Auto generate the Password (Randomly Generated)
Here i have to disable the option of selecting the "Manually Change the Password". So that the HelpDesk Administrators can select only one option which "Auto Generate the Password".
Urgent Help, highly appreciated.
Thanks,
Sandeep D
Edited by: user13476138 on Jun 7, 2011 2:29 AM
Edited by: user13476138 on Jun 7, 2011 2:29 AM

I think I remember (if I am not wrong) it is the xlWebApp.war/tiles/changePasswordTiles.jsp file. Actually, most of the JSP files are in this place (folder). One thing yuo should be aware of is when you change JSP file. You have to recomplie the war file using patch_your_app_server.sh (patch_your_app_server.bat for Windows) under xellerate/setup folder. Becarefull this will change your configuration files back to original (OOTB) so besure to back up your custom configuration files and put them back after that.

OIM 11g r2 Change UI date format

Hi Experts,
We have a requirement to display dates in DD/MM/YYYY format in the Create User, Modify User and My Information pages. Please let me know how UI date format could be changed.

I agree with Sagar...
However, changing the DefaultDateFormat will impact application wise while your requirement seems to be regarding MY information page of the identity console only. So, I won't recommend changing the Default Date Format...

OIM: How to change user search results table?

Hello,
My customer wants to change the search results table to add/delete columns or move around the existing columns. Is there a way to configure or customize this? If so how? Please let me know.
Thanks

This jsp uses the table generator.jsp which shows the data in the form of table. You have to make your own action class to do this after extending their class (provided by oracle) tcSearchUserAction.java and you can show data as per your client requirement.

Delay in the change user password OIM 11g

Hi guys,
I have a problem with OIM 11g. The user accesses the OIM to do change your password, when the message that password is changed show, the user executed log-off and try access with new password, but the new password isn't accepted.
The new password is posted to AD immediately.
Only after of some time, the new password is accepted in OIM.
I need the new password is applied as in AD. When changing the password.
Someone know resolve this issue??
Thanks

I don’t think this is possible. You can add some delay while changing target system password. But not guarantee.

OIM 11g: How to remove rule requiring unique user email addresses

Use the OIM 11g Administrative and User Console to update a user's email address to be the same as another user's address and on save you get error message:
"The user with the attribute Email and value [email protected] already exists"
In OIM 9.1 we used to be allowed duplicate email addresses.
OIM 11g wants them to be unique (refer OIM 11g User Guide table 11-2 in section "11.2 User Entity Definition" which shows the email attribute properties with unique:yes).
How do you change this to "unique:no"?
The OIM 11g Admin Guide section "14 Configuring User Attributes" describes the User.xml file in MDS but doesn't mention unique properties.
The System Properties accessed via System Management->System Configuration doesn't show anything that looks like an option to enforce email address uniqueness.
Thanks

OIM 11g does not allow duplicate email addresses. We asked Oracle about this and they responded that the feature (duplicate email addresses) was "removed from OIM 11g due to sending mail notifications, security and other related
concerns". We think we can live with this restriction and did not make an enhancement request.
The user guide does show that email address is unique:
http://download.oracle.com/docs/cd/E14571_01/doc.1111/e14316/usr_mangmnt.htm#BGBDCDCH
but there's no way to override the rule.

OIM 11g R2 - Change User Container

Similar Messages

Maybe you are looking for