OIM 11g r2 Exchange connector provisioning is not working

Hi,
I have created one user in oim and i have provisioned this user into AD successfully.
after that i have tried provision same user into Exchange but the user provisioning status is shows "*waiting*" and provision date also shows wrong.
Please any body help me on this issue..
Thanks,
Venu

Exchange goes to waiting status when AD is not listed in user's resource profile as Provisioned. Check whether AD is properly provisioned. It is better to always create a new process task before 'Create User' in Exchange resource object which checks whether AD is already provisioned for the user. Then this problem can be avoided.
Also when there are multiple AD resource object instances in user's resource profile and even one of that instance is in Provisioning status, Exchange goes to waiting status
Edited by: Durgaprasad on Mar 5, 2013 6:43 AM

Similar Messages

OIM 11g using too much memory and not releasing it when shutting down

Hello,
we have a problem with OIM 11g using too much memory (about 5gb) and it's not releasing it at shutdown (4gb still used).
We are using a VM with RedHat Linux 5.6. Originally we had 4gb RAM + 2gb swap file. We installed Admin Server, OAM, OIM and SOA on that machine but quickly realised we couldn't run all 4 programs at once in 6gb. AdminServer could run with 2 other products, but it was a tight fit in memory.
So we increased the RAM to 8gb (still 2gb swap file). But then our problem occured : I start the Admin Server (2.7gb total memory used), then OAM (4.6gb total memory used) and then OIM. After it started the server is now using 9.6gb of memory (~300mb of free memory) ! The problem gets even better : after I shut down everything (OIM, OAM, admin server) the "top" command show that there is still 4gb of memory used even tho nothing else is running on the server ! There is absolutely no other process (other than root stuff) running and no other users connected to the machine. After a reboot, it shows 400mb of memory used. I tried restarting the programs and it did the same thing.
Our intuition is that there might be a memory leak or some bug in OIM that might use up almost all the free memory and it's not releasing it upon shutdown. It might have been there before we increased the memory but have not noticed it since memory was already tight.
Anyone encountered the same problem ? Any idea ? Any suggestion to narrow down the problem ?
Thank you

You can adjust the memory settings for WLS by editing the setSOADomainEnv.sh file that can be found in your /middleware/user_projects/domains/<domain>/bin/ folder. There is an argument called PORT_MEM_ARGS which is used to set your Java memory arguments. This way you can decrease/increase the amount of memory used by each managed server.
I usually type "ps -ef | grep oracle" to see what processes are running by the oracle user. This way the output doesn't get cluttered with root processes.
Sunny Tsang

Exchange Connector Setup: Could not establish trust relationship for the SSL/TLS secure channel

This may be more of a cert issue than an issue with SCSM, but here goes.
I am running into something new when creating an Exchange Connector (I swear its always something with this thing. Check the screen shot:
I can get to the service in IE, however there is a cert issue. Again, see the screen shot:
So it appears that the management server does not trust my Exchange cert, nor does it trust my root cert. I added the root CA cert to the management server snapin but still nothing.
If the root cert is under Trusted Root Certification Authorities, shouldn't it trust it? I'm not sure where to go from here?
- Get on the floor, do that dinosaur

Looking at that certificate path tab, it looks like this certificate is a self-signed certificate issued by the exchange server to the exchange server. is it safe to assume this is a lab environment? it's kinda rare for that to be left as-is in a production
exchange architecture.
If it is a self signed certificate (the Issuer and subject fields on the first page will be the same), then the only wat to trust it is to add that certificate to the trusted root certificate authorities under the system certificate store.
Here is an excellent tutorial on how to add certificates to the local machine trusted root store.
If this is a production environment, get with your exchange administrator, because you might be hitting the wrong CAS server, and getting the wrong certificate as a result.m

OIM 11g upgrade and connector details

Hi,
We are planning to upgrade OIM 10g to OIM 11g. Please let me know the latest version of
1. OIM 11g
2. OID version for OIM 11g
3. HRMS version for OIM 11g
4. EBS version for OIM 11g
5. AD version for OIM 11g
6. Exchange version for OIM 11g
Thanks

1. OIM 11g : OIM 11.1.2
2. OID version for OIM 11g : OID 11.1.2
3. HRMS version for OIM 11g : 12.1.3
4. EBS version for OIM 11g: 12.1.3
5. AD version for OIM 11g: AD 2007 & 2010 are compatible
6. Exchange version for OIM 11g : Exchange 2007 & 2010 are compatible
Refer certification guide:
http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html
http://www.google.co.in/url?sa=t&rct=j&q=oim%2011.1.2%20certification%20matrix&source=web&cd=2&ved=0CCcQFjAB&url=http%3A%2F%2Fwww.oracle.com%2Ftechnetwork%2Fmiddleware%2Fid-mgmt%2Fidentity-accessmgmt-11gr2certmatrix-1714221.xls&ei=9C9QUM7PGMiI0AWdkoHgBQ&usg=AFQjCNHUGncKoQ82fVrv1k5whf5GKLssZg
regards,
GP

Exchange Connector 3.0 not processing Office 365 mailbox

Hi,
I have Service Manager 2012 SP1 configured with Exchange Connector 3.0. The mailbox to be monitored is in Office 365. everything was running fine last week until I removed the federation trust and connectors from our On-premise Exchange servers as part of
the On-premise Exchange server decommissioning process to remove the Exchange Hybrid configuration.
Now the Exchange Connector does not monitor the mailbox of the configured user in the "run as account", no new incidents are displayed when users sent an email to the run as account. No errors are logged in the Event Viewer for the Exchange Connector.
Any suggestions?

Hi,
Set up the detailed logging and then see in the Operations Manager's log what happens when the Exchange Connector is running.
Cheers,
Marat
Site: www.scutils.com Twitter:
LinkedIn:
Graveyard:

Exchange Connector / Office 365 Not matching affected user to AD user

We use Office 365 to host our email services. AD is not synchronized to office 365. We're bringing Exchange on premises soon so there isn't a lot we want to invest in that existing infrastructure. I'm using Service Manager 2012 R2.
I have the ADConnector configured, bringing in Active Directory users/groups/computers.
I've gotten the Exchange Connector running in order to retrieve emails from an "IT Services" Office 365 mailbox and automatically create tickets. Notifications back to the users are working fine.
The problem I'm having is the affected user is not being set properly when a user emails the mailbox and an incident is created. It is setting the Affected User to that user's name, but when I double click the Affected user, it brings up the "User
- <UserName>" screen. All of the information that would be coming in from AD is blank. So that association between my office 365 email address and the AD user account is not being made. Even though it says my name with
correct (username) on the incident as the affected user. And even though my email address is stored inside of AD in the e-mail field.
What am I missing in this process?
Thank you,
Mark

I ended up messing around and added a UPN to AD Domains and Trusts matching the domain of our email accounts through Office 365. I found this because similar preparation is required for AD sync to Office 365, so a proper match can be made.
So for example, if our internal domain is Contoso.Local, and our email addresses are [email protected]
I added a UPN for contosolimited.com in Active Directory Domains & Trusts. Then I changed my UPN in Active Directory Users and Computers (Account tab), to @contosolimited.com.
Now when the AD Connector ran, it set my user CI UPN (in the Extensions tab) to [email protected] I then sent an email to [email protected] and it matched my email correctly to my user CI created by the AD Connector.
Now I just have to run a script against AD to update all user UPNs to @contosolimited.com from @Contoso.local.

OIM Event handler resistered and Imported but not working

hi,
I am using OIM 11g in windows 32 bit envoirnment.
I have registered a pre precess event handle and also imported it into oim but it's not working. pls find below details.
DB Entry of MDS_PATHS Table
1 LastNameEventHandlers.xml 197 196 /tiks/LastNameEventHandlers.xml DOCUMENT 5 143 http://www.oracle.com/schema/oim/platform/kernel eventhandlers 1 1 UTF-8 3558973303 0 0
DB Entry of plugins table
2 com.holcim.hssa.eventhandler.LastNmPreProcessEventHandlers oracle.iam.platform.kernel.spi.EventHandler 1.0 LastNamePreProcessEventHandlers 1
need tio know where does the eventhandlers goes D:\ORCL_HOME\Oracle_IDM1\server\features this path or else,
but it's not working

The eventhandler
<eventhandlers xmlns="http://www.oracle.com/schema/oim/platform/kernel" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.oracle.com/schema/oim/platform/kernel orchestration-handlers.xsd">
<action-handler class="com.holcim.hssa.eventhandler.LastNmPreProcessEventHandlers" entity-type="User" operation="CREATE" name="LastNmPreProcessEventHandlers" stage="preprocess" order="FIRST" sync="TRUE"/>
</eventhandlers>
The Plugin
<oimplugins>
<plugins pluginpoint="oracle.iam.platform.kernel.spi.EventHandler">
<plugin pluginclass="com.holcim.hssa.eventhandler.LastNmPreProcessEventHandlers" version="1.0" name="LastNamePreProcessEventHandlers"/>
</plugins>
</oimplugins>
The handler
package com.holcim.hssa.eventhandler;
import java.io.PrintStream;
import java.util.HashMap;
import oracle.iam.platform.context.ContextAware;
import oracle.iam.platform.kernel.spi.PreProcessHandler;
import oracle.iam.platform.kernel.vo.*;
public class LastNmPreProcessEventHandlers
implements PreProcessHandler
public LastNmPreProcessEventHandlers()
methodName = "";
System.out.println("LastNmPreProcessEventHandlers called of NamePreProcessEventHandlers 16 ");
public boolean cancel(long arg0, long arg1, AbstractGenericOrchestration arg2)
System.out.println("cancel called");
return false;
public void compensate(long arg0, long arg1, AbstractGenericOrchestration arg2)
System.out.println("getParamaterValue called");
public EventResult execute(long processId, long eventId, Orchestration orchestration)
System.out.println("EventResult execute called of LastNmPreProcessEventHandlers 16 ");
methodName = "execute";
HashMap parameters = orchestration.getParameters();
System.out.println((new StringBuilder("Parameters ")).append(parameters).toString());
String operation = orchestration.getOperation();
System.out.println((new StringBuilder("Pre Process Operation ")).append(operation).toString());
if(operation != null && operation.equalsIgnoreCase("create"))
String firstName = getParamaterValue(parameters, "First Name");
if(firstName != null && !firstName.trim().isEmpty() && !parameters.containsKey("Middle Name"))
orchestration.addParameter("Middle Name", firstName.substring(0, 1));
return new EventResult();
public BulkEventResult execute(long arg0, long arg1, BulkOrchestration arg2)
System.out.println("BulkEventResult called of LastNmPreProcessEventHandlers 16 ");
return null;
public void initialize(HashMap arg0)
System.out.println("initialize");
private String getParamaterValue(HashMap parameters, String key)
System.out.println((new StringBuilder("getParamaterValue")).append(key).toString());
String value = (parameters.get(key) instanceof ContextAware) ? (String)((ContextAware)parameters.get(key)).getObjectValue() : (String)parameters.get(key);
return value;
private String methodName;
Also have a question where does it goes after export
D:\ORCL_HOME\Oracle_IDM1\server\features or elsewhere?

OBIEE 11g - Navigation in Parent Child Hiearchy not working

Hi All,
I have a employee parent child hierarchy and I want to show revenue for each employee in the report. I have modeled my revenue as a measure like case 4 shown in the following link
http://www.rittmanmead.com/2010/11/oracle-bi-ee-11g-parent-child-hierarchies-multiple-modeling-methods/
So for example this is my report ,
--David (30)
---Sandra (15)
-----Joe (10)
Joe'e revenue is 10, Sandra's is 5 (showing her 5 Joe's revenue) and David's is 5 (showing his 5 Sandra's revenue)
Issue :
Now what I want is to provide action link on the revenue column so that when user would click on revenue for any employee it would direct them to a detail report showing the bifurcation.
For ex, I want that when user click on 15 which is Sandra's revenue, he would be redirected to a detailed report for Sandra and similary for Joe and David
MY ISSUE IS that the navigation is NOT working for sandra and Joe. It is only working for David (who is the ancestor of sandra and Joe). When I click on 15 to see sandra's detail report, it doesn't do anything and in the bottom left corner of the browser status bar below I see an ERROR saying
(same for Joe but David work's fine)
Message: 'getLevelInfo(...)' is null or not an object
Line: 1
Char: 11142
Code: 0
URI: http://localhost:7001/analytics/res/b_mozilla/answers/selectionsmodel.js
Why is that happening? Is that because I have modeled the revenue as an measure and not attribute. Is navigation not possible in this case?
Anybody has any solution or workaround for this, it will be highly appreciated.
Thanks,
Ronny

Ok, so let me explain this in detail and give the structure of my tables and the data,
There are three tables.
1.Parent Child relationship table - pctable
2.Closure table which OBIEE creates through a script - reltable
3.Fact table which contains the revenue - facttable
This is the data
pctable
personid | managerid
David | NULL
Sandra| David
Joe|Sandra
reltable
memberkey | ancestorkey |distance |is_leaf
David|NULL|NULL|0
David|David|0|0
Sandra|Sandra|0|0
Joe|Joe|0|0
Sandra|David|1|0
Joe|Sandra|1|1
Joe|David|2|1
facttable
personid|revenue
David|5
Sandra|5
Joe|10
and my joins conditions are, I join pctable to reltable and then reltable is joined to facttable like this.
pctable.personid = reltable.ancestorkey
reltable.memberkey = facttable.personid
and then in the report, when I pull up the pchierarchy build from pctable and revenue , I get as below and like I said, when I click on Sandra to see the revenue she contributes, I am not able to navigate. Can you let me know what modifications needs to be done?
---David(20)
----Sandra(15)
------Joe(10)

OAM 11g "Failure URL" in Authoriztion policy not working?

Hi,
Per the subject, I am running OAM server 11g (11.1.1.3), with an OAM 10g Apache webgate.
In the OAM Authorization policy (protected), I have specified a full URL for the "Failure URL", to get the browser to redirect when an authorization failure occurs.
However, when I test with a user that does not have access (user authenticates ok, but doesn't have right to access the protected resource), instead of the browser being redirected, I am getting an "Oracle Access Manager Operations Error" page.
I've been trying to figure this out, and have found several threads about this, e.g.:
OAM 11g authz redirect URL not working?
But, as I said, I am using OAM 11g server, and there is no "Inconclusive URL" in the policy settings (I guess there was in 10g, but not in 11g).
I have trace logging enabled on the OAM server, and I can clearly see that the request is getting "results DENY", but there's no indication in the logs that OAM server is aware of any failure redirection URL.
I've also got a header trace, and I can see that the browser is simply being re-directed to the "/oberr.cgi...." URL, so it' not going "somewhere else".
So, does anyone know why the "Failure URL" is not working in OAM 11g in Authorization policies?
Thanks,
Jim
P.S. The URL that it's suppose to be re-directing the browser to is in the Public resources under Authorization, and as I said, I don't see the browser even attempting to go to the failure URL, either via header traces or the OAM server logs.
Edited by: jimcpl on Nov 5, 2011 8:53 PM

Hi,
Per the subject, I am running OAM server 11g (11.1.1.3), with an OAM 10g Apache webgate.
In the OAM Authorization policy (protected), I have specified a full URL for the "Failure URL", to get the browser to redirect when an authorization failure occurs.
However, when I test with a user that does not have access (user authenticates ok, but doesn't have right to access the protected resource), instead of the browser being redirected, I am getting an "Oracle Access Manager Operations Error" page.
I've been trying to figure this out, and have found several threads about this, e.g.:
OAM 11g authz redirect URL not working?
But, as I said, I am using OAM 11g server, and there is no "Inconclusive URL" in the policy settings (I guess there was in 10g, but not in 11g).
I have trace logging enabled on the OAM server, and I can clearly see that the request is getting "results DENY", but there's no indication in the logs that OAM server is aware of any failure redirection URL.
I've also got a header trace, and I can see that the browser is simply being re-directed to the "/oberr.cgi...." URL, so it' not going "somewhere else".
So, does anyone know why the "Failure URL" is not working in OAM 11g in Authorization policies?
Thanks,
Jim
P.S. The URL that it's suppose to be re-directing the browser to is in the Public resources under Authorization, and as I said, I don't see the browser even attempting to go to the failure URL, either via header traces or the OAM server logs.
Edited by: jimcpl on Nov 5, 2011 8:53 PM

ISE upgrade 1.2: Self-provisioning portal not working

Hi all,
I need help with Self-Provisioning portal flow not showing the agent installation page after upgrade from 1.1.1 to 1.2 on a couple of 3315. I've configured all the pieces as instructed by BYOD SBA guide at http://www.cisco.com/en/US/docs/solutions/SBA/February2013/Cisco_SBA_SLN_BYOD_InternalCorporateAccessDeploymentGuide-Feb2013.pdf
Screenshot of page is attached:
I've checked ise-console.log application log file and found two errors correponding to the first page:
[portal-http-84431][] SystemConsole -::c0a8a82a000000d7523c70f9::guest:- com.cisco.cpm.provisioning.exception.ProvisioningException: java.security.cert.CertificateException: Unable to initialize, java.io.IOException: DerInputStream.getLength(): lengthTag=127, too big.
[portal-http-84431][] SystemConsole -::c0a8a82a000000d7523c70f9::guest:- at com.cisco.cpm.provisioning.cert.CertProvisioningFactory.initialize(CertProvisioningFactory.java:333)
and the second (not working) one:
[portal-http-84431][] SystemConsole -:xxxxx@xxxxxxx:c0a8a82a000000d7523c70f9::guest:- java.lang.NullPointerException
[portal-http-84431][] SystemConsole -:xxxxx@xxxxxxx:c0a8a82a000000d7523c70f9::guest:- at com.cisco.cpm.provisioning.cache.FlowStateCacheManager.getFlowStateCache(FlowStateCacheManager.java:202)
Looks like something is wrong with a certification file, but I cannot find what is. I've exported and re-installed current server certificates (as instructed by upgrade guide for 1.2) and nothing changed.
Can somebody please help?
Thanks,
L

Errors When Adding Devices to My Devices Portal
Employees cannot add a device that is already added if another employee has previously added the device so that it already exists in the Cisco ISE endpoints database.
If employees are attempting to add a device that supports a native supplicant, recommend that they use that instead. That registration process will overwrite the original registration and switch ownership to the new user.
If the device is a MAC Authentication Bypass (MAB) device, such as a printer, then you must resolve ownership of the device, and if appropriate, remove the device from the endpoints database so that the new owner can successfully add the device.
For more information on self-provisioning.
http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_mydevices.html Errors When Adding Devices to My Devices Portal
Employees cannot add a device that is already added if another employee has previously added the device so that it already exists in the Cisco ISE endpoints database.
If employees are attempting to add a device that supports a native supplicant, recommend that they use that instead. That registration process will overwrite the original registration and switch ownership to the new user.
If the device is a MAC Authentication Bypass (MAB) device, such as a printer, then you must resolve ownership of the device, and if appropriate, remove the device from the endpoints database so that the new owner can successfully add the device.
For more information on self-provisioning.
http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_mydevices.html

OBI 11g Enterprise Manager (EM Website) does not work with IE8 (v8.0.6)

I am unable to login to the 11g EM website on Windows x64 2003 server. I get the below error:
Webpage error details
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; WOW64; Trident/4.0)
Timestamp: Wed, 6 Oct 2010 10:41:18 UTC
Message: Object doesn't support this property or method
Line: 4354
Char: 1
Code: 0
URI: http://YZU-1:7001/em/afr/partition/ie/default/opt/boot-11.1.1.3.0-0084.js
Any help is appreciated.
Thanks
B

Hi,
OBIEE 11g does not work with IE8.
Check this......What's wrong in OBIEE 11g
Regards,
Srikanth

[HELP] [BPEL 11g] Customized BPEL worklist app could not work on JBoss

Dear all,
We are developing the customized Human Worklist app based on BPEL HW API 11g.
The application (some jsp pages) works fine in JDeveloper 11g. However, after deploy to JBoss, it always prompt with "NoClassDefFoundError" exception, although we have already add following 7 jar files into Classpath:
${jdeveloper.home}\Middleware\wlserver_10.3\server\lib\weblogic.jar
${jdeveloper.home}\Middleware\jdeveloper\modules\oracle.jrf_11.1.1\jrf.jar
${jdeveloper.home}\Middleware\jdeveloper\modules\oracle.webservices_11.1.1\wsclient.jar
${bea.home}/AS11gR1SOA/soa/modules/oracle.soa.fabric_11.1.1/bpm-infra.jar
${bea.home}/AS11gR1SOA/soa/modules/oracle.soa.workflow_11.1.1/bpm-services.jar
xml.jar
xmlparserv2.jar
Then we manually copy many other jars (nearly 100) under Weblogic server, but it still prompt lacking of some jar file with "NoClassDefFoundError" exception.
So, does BPEL 11g support deploy HW app outside weblogic, like JBoss? If so, what we need to set at JBoss side to run our app?
Thanks a lot.

Not sure it is available yet as I have not seen any doc for 11g.
here is the 10g instructions which may provide some pointers.
http://download-east.oracle.com/docs/cd/B31017_01/web.1013/b25947/deployment_topics012.htm
cheers
James

Use Current Exchange Rate from the Exchange Rate Table itu00B4s not working

Hi Experts:
Working with manager user, Iu2019m trying to create a Goods Receipt PO through the Draw Document Wizard, but the option u201CUse Current Exchange Rate from the Exchange Rate Tableu201D it is not working, it does not bring me the USD exchange rate of today defined in the table; it brings the USD exchange rate from the base document (AP Reserve Invoice), and Iu2019m not allowed to change it. What should I do?. We are working wih SAP Business One SP01 PL06. Thanks
CLAUDIA

Hi,
There is a SAP Note related to your issue, have a look at this.
[http://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/oss_notes/sdn_oss_sbo_adm/~form/handler%7b5f4150503d3030323030363832353030303030303031393732265f4556454e543d444953504c4159265f4e4e554d3d373033303238%7d]
...For companies using the Continous Stock System feature, there are three additional scenarios in which the row Exchange Rate will be copied from the base document regardless of the calculation method chosen in the 'Draw Document Wizard':
a) Goods Receipt PO -> Goods Return.
b) Goods Return -> Goods Receipt PO.
c) AP Reserve Invoice -> Goods Receipt PO.
Hope this helps,
Son.

Exchange 5.5 portles not working

Environment: Portal 3.0.9/W2K -> IIS/W2K -> Exchange 5.5/NT
I have followed the Exchange 5.5 Portlets installation instructions and troubleshooting guide completely but the portlets still do not work. I only see the "Update Login Information" link in place of the portlet -- even after I have entered Exchange credentials numerous times.
At stage 5 of the installation when trying to log in from the externial application it did not show an inbox. It brought up another login page that was generated by the servlet and had none of the default values. Providing the same information to this page has no effect. In stage 5 it says I should see "part of an inbox"
I have checked all the logs and see nothing unusual.
I am out of ideas on what to do next.
null

John
I found that if you follow the instructions and dont put in an entry for the mailbox value then it doesnt get passed along. I put in a value for every parameter and make them visible when creating the external app. This seems to allow the passing of the params and the inbox launches. Still doesnt fix the portlets but thats another issue.
Also add the debuglevel=1 parameter to the initargs line in zone.properties, then check <server:port>/servlet/<servletalias> - should show available portlets

Exchange 2003 push notifications not working on iPhone4 running iOS 5

My Exchange 2003 push notifications are not working on my iPhone4 (iOS5). For this account I need to fetch. I know that at one point I was receiving push notifications from the Exchange 2003 account prior to upgrading to iOS 5 but unfortunately I did not actively monitor push notifications for this accout prior to upgrading to iOS 5. Push notifications work fine for other email accounts on this phone including an Exchange 2007 account. Are there any issues specific to iOS 5 and Exchange 2003 with regard to push notifications?

This is an issue that a lot of people are having... it's all on this thread.
https://discussions.apple.com/thread/4345374?start=0&tstart=0
The 'fix' that is decribed in the first post does not work. The only workaround is if you are on Wi-Fi, turn off Cellular Data and then reset the push service by turning on Airplane mode for a few seconds and then turn it back off. Seems to be an issue with the iOS talking to the new LTE CDMA chip on Verizon and Sprint iPhone 5s.

OIM 11g r2 Exchange connector provisioning is not working

Similar Messages

Maybe you are looking for