OIM 11g R2 - Trusted User Recon 'Reconciliation Insert Received' not trigge

Hi,
We have recently upgrade OIM 10g to 11g R2. One thing which we use to depend on in 10g was the 'Reconciliation Insert Received' to trigger of other tasks. This does not seem to work in OIM 11g R2? Is there a way to fix this?

This turned out to be an Oracle bug.
Bug 9539918 - BOTH MANAGER ID FIELD AND ORG UNIT FIELD IS DISPLAYED WITH ORG UNIT VALUE
This has been fixed in9.1.2.4 version of the connector. Patch11656991
Sunny
Edited by: Sunny on Mar 15, 2011 1:47 PM

Similar Messages

OIM 11g: SAP HRMS User Recon gives error

Hello,
I am using the SAP ER (Employee Reconciliation) connector, version Version: 9.1.2.2. I have upgraded to bundle patch 3 (BP3).
Connectivity to SAP works. I have run the manager recon, org recon and it brought in values.
When I try to reconcile users (using limited reconciliation) from IDOCS, it finds the user, creates a reconciliation event but ignores it. On querying the recon event the reason given for not linking is "Data Validation Failed"
[2011-03-09T11:00:53.088-08:00] [oim1] [NOTIFICATION] [IAM-5010000] [oracle.iam.reconciliation.impl] [tid: OIMQuartzScheduler_Worker-1] [userId: xelsysadm] [ecid: 0000IuRuoQM9d_w_wD0FyW1DTwVJ00000Q,0] [APP: oim#11.1.1.3.0] [dcid: c4ab19921fd287b5:377e40a5:12e9be68f89:-7ffa-0000000000000354] [arg: ignoreEvent Input Data : {Personnel Number=00011070, Street=1775 Milmont Dr, Postal Code=95035, Organization=Xellerate Users, Employee Type=Full-Time, Org Unit=10000037, Country=US, Middle Name=V, Cost Center=, User ID=00011070, City=Milpitas, Group=1, User Type=End-User, Manager ID=10000037, Status=Active, User Created From HRMS=1, Telephone Number=4081233339, District=Cnt#1, Position=00000026, Sub Group=FS, Last Name=Khan, First Name=Salman}] Generic Error/Information: ignoreEvent Input Data : {Personnel Number=00011070, Street=1775 Milmont Dr, Postal Code=95035, Organization=Xellerate Users, Employee Type=Full-Time, Org Unit=10000037, Country=US, Middle Name=V, Cost Center=, User ID=00011070, City=Milpitas, Group=1, User Type=End-User, Manager ID=10000037, Status=Active, User Created From HRMS=1, Telephone Number=4081233339, District=Cnt#1, Position=00000026, Sub Group=FS, Last Name=Khan, First Name=Salman}
On Re-evaluating the event, I see a different error in the logs:
[2011-03-09T13:47:38.646-08:00] [oim1] [ERROR] [IAM-5010006] [oracle.iam.reconciliation.impl] [tid: [ACTIVE].ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: 0000IuS_iIo9d_w_wD0FyW1DTxCO0001JD,0] [APP: oim#11.1.1.3.0] [dcid: c4ab19921fd287b5:75438372:12e9c1335ee:-7ffa-0000000000002728] The following exception occurred: {0}[[
oracle.iam.reconciliation.exception.InvalidEventException: Invalid ManagerLogin : 10000037
at oracle.iam.reconciliation.impl.UserHandler.getOrchestrationParams(UserHandler.java:713)
at oracle.iam.reconciliation.impl.UserHandler.create(UserHandler.java:150)
at oracle.iam.reconciliation.impl.UserHandler.applyRule(UserHandler.java:90)
at oracle.iam.reconciliation.impl.UserHandler.process(UserHandler.java:65)
at oracle.iam.reconciliation.impl.ActionEngine.processEvent(ActionEngine.java:193)
at oracle.iam.reconciliation.impl.ActionEngine.processEvent(ActionEngine.java:155)
at oracle.iam.reconciliation.impl.ActionEngine.execute(ActionEngine.java:92)
at oracle.iam.reconciliation.impl.ActionTask.execute(ActionTask.java:73)
at oracle.iam.platform.async.impl.TaskExecutor.executeUnmanagedTask(TaskExecutor.java:100)
at oracle.iam.platform.async.impl.TaskExecutor.execute(TaskExecutor.java:70)
at oracle.iam.platform.async.messaging.MessageReceiver.onMessage(MessageReceiver.java:68)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy467.onMessage(Unknown Source)
at weblogic.ejb.container.internal.MDListener.execute(MDListener.java:466)
at weblogic.ejb.container.internal.MDListener.transactionalOnMessage(MDListener.java:371)
at weblogic.ejb.container.internal.MDListener.onMessage(MDListener.java:328)
at weblogic.jms.client.JMSSession.onMessage(JMSSession.java:4659)
at weblogic.jms.client.JMSSession.execute(JMSSession.java:4345)
at weblogic.jms.client.JMSSession.executeMessage(JMSSession.java:3822)
at weblogic.jms.client.JMSSession.access$000(JMSSession.java:115)
at weblogic.jms.client.JMSSession$UseForRunnable.run(JMSSession.java:5170)
at weblogic.work.SelfTuningWorkManagerImpl$WorkAdapterImpl.run(SelfTuningWorkManagerImpl.java:528)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
"Invalid ManagerLogin : 10000037" 10000037 is the org number in the lookup and its corresponding personnel number 00016901 is not being picked up.
There is a known bug that if a user with that personnel number (i.e 00016901) does not exist in OIM 11g then OIM will not insert the record (bug 9688099), so to work around this, I added that personnel number to a user in OIM (USR_UDF_PERSONNEL_NUMBER). Still the same.
Has anyone seen a similar error? Any ideas on what I could be missing? Troubleshooting tips?
Has anyone implemented this version of the connector?
Regards,
Sunny
Edited by: Sunny on Mar 10, 2011 1:50 PM

This turned out to be an Oracle bug.
Bug 9539918 - BOTH MANAGER ID FIELD AND ORG UNIT FIELD IS DISPLAYED WITH ORG UNIT VALUE
This has been fixed in9.1.2.4 version of the connector. Patch11656991
Sunny
Edited by: Sunny on Mar 15, 2011 1:47 PM

OIM 11g: SAP HRMS User Recon

I am using the SAP ER connector, version 9.1.2.4. I have upgraded OIM to bundle patch 4.
My IT Resource is as follows:
App server host: "IP address"
Client logon: 050
Connection Count: 1
Gateway host: "IP address"
Gateway service:3300
Group Name: PUBLIC
Language: en
Message Server: SAPHRQ
Password: *******
Peak limit: 10
Pool capacity: 3
Program ID: IDOCLISTEN
R3 Name: HRQ
Repository destination: BCE
SNC lib:
SNC mode: no
SNC my name:
SNC partner name:
SNC qop:
Server name: SERVER
System number: 00
Unicode mode: yes
User logon: OIMUSER
I have run job SAP HRMS User Recon. As a result, I have error:
[2011-04-27T22:50:18.703+03:00] [oim_server1] [ERROR] [] [OIMCP.SAPH] [tid: OIMQuartzScheduler_Worker-6] [userId: xelsysadm] [ecid: 0000IyOWgf_8TsYjLpvH8A1Di76b00000g,0] [APP: oim#11.1.1.3.0] [dcid: 31adce849313fcc5:100e79e1:12f987dc80e:-7ffd-000000000000003c] ====================================================
[2011-04-27T22:50:18.703+03:00] [oim_server1] [ERROR] [] [OIMCP.SAPH] [tid: OIMQuartzScheduler_Worker-6] [userId: xelsysadm] [ecid: 0000IyOWgf_8TsYjLpvH8A1Di76b00000g,0] [APP: oim#11.1.1.3.0] [dcid: 31adce849313fcc5:100e79e1:12f987dc80e:-7ffd-000000000000003c] oracle.iam.connectors.common.dao.OIMUtil : createTrustedReconEvent() : oracle.iam.platform.utils.SuperRuntimeException: java.sql.SQLException: Invalid character encountered in
[2011-04-27T22:50:18.703+03:00] [oim_server1] [ERROR] [] [OIMCP.SAPH] [tid: OIMQuartzScheduler_Worker-6] [userId: xelsysadm] [ecid: 0000IyOWgf_8TsYjLpvH8A1Di76b00000g,0] [APP: oim#11.1.1.3.0] [dcid: 31adce849313fcc5:100e79e1:12f987dc80e:-7ffd-000000000000003c] ====================================================[[
<Apr 27, 2011 10:50:18 PM EEST> <Error> <oracle.iam.reconciliation.impl> <IAM-5010000> <Generic Error/Information: {0}
oracle.iam.platform.utils.SuperRuntimeException: java.sql.SQLException: Invalid character encountered in
at oracle.iam.reconciliation.dao.event.EventMgmtDao.ignoreEventUsrDataMatch(EventMgmtDao.java:449)
at oracle.iam.reconciliation.impl.ReconOperationsServiceImpl.ignoreEvent(ReconOperationsServiceImpl.java:383)
at oracle.iam.reconciliation.impl.ReconOperationsServiceImpl.ignoreEvent(ReconOperationsServiceImpl.java:346)
at Thor.API.Operations.tcReconciliationOperationsIntfEJB.ignoreEventx(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.jee.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:37)
at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
at com.bea.core.repackaged.springframework.jee.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:50)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy327.ignoreEventx(Unknown Source)
at Thor.API.Operations.tcReconciliationOperationsIntfEJB_troehf_tcReconciliationOperationsIntfRemoteImpl.ignoreEventx(tcReconciliationOperationsIntfEJB_troehf_tcReconciliationOperationsIntfRemoteImpl.java:2494)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:84)
at $Proxy164.ignoreEventx(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:198)
at $Proxy323.ignoreEventx(Unknown Source)
at Thor.API.Operations.tcReconciliationOperationsIntfDelegate.ignoreEvent(Unknown Source)
at oracle.iam.connectors.common.dao.OIMUtil.createTrustedReconEvent(Unknown Source)
at oracle.iam.connectors.sap.common.parser.HRMDAParser.reconcileUser(Unknown Source)
at oracle.iam.connectors.sap.common.parser.HRMDAParser.parse(Unknown Source)
at oracle.iam.connectors.sap.hrms.tasks.SAPHRMSUserRecon.execute(Unknown Source)
at com.thortech.xl.scheduler.tasks.SchedulerBaseTask.execute(SchedulerBaseTask.java:385)
at oracle.iam.scheduler.vo.TaskSupport.executeJob(TaskSupport.java:144)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.iam.scheduler.impl.quartz.QuartzJob.execute(QuartzJob.java:164)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:529)
Caused By: java.sql.SQLException: Invalid character encountered in
at oracle.jdbc.driver.SQLStateMapping.newSQLException(SQLStateMapping.java:70)
at oracle.jdbc.driver.DatabaseError.newSQLException(DatabaseError.java:133)
at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:199)
at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:263)
at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:271)
at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:445)
at oracle.sql.CharacterSet.failUTFConversion(CharacterSet.java:2706)
at oracle.sql.CharacterSetAL32UTF8.toString(CharacterSetAL32UTF8.java:192)
at oracle.sql.CHAR.getString(CHAR.java:234)
at oracle.jdbc.oracore.OracleTypeCHAR.pickle81(OracleTypeCHAR.java:258)
at oracle.jdbc.oracore.OracleTypeCOLLECTION.pickle81(OracleTypeCOLLECTION.java:310)
at oracle.jdbc.oracore.OracleTypeADT.pickle81(OracleTypeADT.java:1637)
at oracle.jdbc.oracore.OracleTypeADT.linearize(OracleTypeADT.java:1256)
at oracle.sql.ArrayDescriptor.toBytes(ArrayDescriptor.java:683)
at oracle.sql.ARRAY.toBytes(ARRAY.java:632)
at oracle.jdbc.driver.OraclePreparedStatement.setArrayCritical(OraclePreparedStatement.java:5576)
at oracle.jdbc.driver.OraclePreparedStatement.setARRAYInternal(OraclePreparedStatement.java:5535)
at oracle.jdbc.driver.OraclePreparedStatement.setObjectCritical(OraclePreparedStatement.java:7959)
at oracle.jdbc.driver.OraclePreparedStatement.setObjectInternal(OraclePreparedStatement.java:7547)
at oracle.jdbc.driver.OraclePreparedStatement.setObjectInternal(OraclePreparedStatement.java:8212)
at oracle.jdbc.driver.OracleCallableStatement.setObject(OracleCallableStatement.java:5005)
at oracle.jdbc.driver.OracleCallableStatementWrapper.setObject(OracleCallableStatementWrapper.java:202)
at weblogic.jdbc.wrapper.CallableStatement.setObject(CallableStatement.java:964)
at oracle.iam.reconciliation.dao.event.EventMgmtDao.ignoreEventUsrDataMatch(EventMgmtDao.java:438)
at oracle.iam.reconciliation.impl.ReconOperationsServiceImpl.ignoreEvent(ReconOperationsServiceImpl.java:383)
at oracle.iam.reconciliation.impl.ReconOperationsServiceImpl.ignoreEvent(ReconOperationsServiceImpl.java:346)
at Thor.API.Operations.tcReconciliationOperationsIntfEJB.ignoreEventx(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.jee.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:37)
at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
at com.bea.core.repackaged.springframework.jee.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:50)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy327.ignoreEventx(Unknown Source)
at Thor.API.Operations.tcReconciliationOperationsIntfEJB_troehf_tcReconciliationOperationsIntfRemoteImpl.ignoreEventx(tcReconciliationOperationsIntfEJB_troehf_tcReconciliationOperationsIntfRemoteImpl.java:2494)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:84)
at $Proxy164.ignoreEventx(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:198)
at $Proxy323.ignoreEventx(Unknown Source)
at Thor.API.Operations.tcReconciliationOperationsIntfDelegate.ignoreEvent(Unknown Source)
at oracle.iam.connectors.common.dao.OIMUtil.createTrustedReconEvent(Unknown Source)
at oracle.iam.connectors.sap.common.parser.HRMDAParser.reconcileUser(Unknown Source)
at oracle.iam.connectors.sap.common.parser.HRMDAParser.parse(Unknown Source)
at oracle.iam.connectors.sap.hrms.tasks.SAPHRMSUserRecon.execute(Unknown Source)
at com.thortech.xl.scheduler.tasks.SchedulerBaseTask.execute(SchedulerBaseTask.java:384)
at oracle.iam.scheduler.vo.TaskSupport.executeJob(TaskSupport.java:144)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.iam.scheduler.impl.quartz.QuartzJob.execute(QuartzJob.java:164)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:529)
<Apr 27, 2011 10:50:18 PM EEST> <Error> <OIMCP.SAPH> <BEA-000000> <====================================================>
<Apr 27, 2011 10:50:18 PM EEST> <Error> <OIMCP.SAPH> <BEA-000000> <oracle.iam.connectors.common.dao.OIMUtil : createTrustedReconEvent() : oracle.iam.platform.utils.SuperRuntimeException: java.sql.SQLException: Invalid character encountered in>
<Apr 27, 2011 10:50:18 PM EEST> <Error> <OIMCP.SAPH> <BEA-000000> <====================================================
Has anyone seen a similar error?

Hey,
I see the same issue and need to make this change as well, where are these settings? I couldn't find them in the setDomainEnv or setSOADomainEnv.
Thanks

OIM 11g R1 - Add user to group after AD Reconciliation

Hi,
i want to add all reconcilated users from AD to OIM to a special role in oim, after a AD reconciliation.
By default, all users get the role ALL_USERS. I want to add a futher role, for example ALL_AD_USERS.
How to do this?
Edited by: 960944 on Jan 15, 2013 5:11 AM

I assume that here you are talking about AD TRUSTED RECONCILIATION and you don't have any other TRUSTED Reconciliation and this is the only way to bring users into OIM, then you can create a role and attach a membership rule say "Organization doesn't contain ZZZZ". It will satisfy all the users
CONS: Here you won't be able to distinguish between users which are creating through Admin Console or from AD Trusted or from some other Trusted Recon.
Now if you want only those users who are coming from AD then Add a task on Reconciliation Insert/Update Received and add user into Role using APIs.

OIM 11g R2: Delete User UDF fields

Hi all,
I installed and configured OIM 11g R2. In this environment I created an UDF for User entity.
Here the steps that I followed:
- created a sanbox
- opened User Form
- added a custom field named "MyCustomField". The type field is Text.
Now, due to a mistake during UDF creation, I have to delete it.
I found this post (OIM 11gR2 - Unable to remove UDF which describe how to delete an UDF field.
The post gives these instructions:
- export the sandbox
- remove UDF occurences in xml files
- import the sanbox
I followed the instructions and at the and I checked the result: the UDF field does not exist in the User form, but the associated database field still exits in database.
My question is: how I can delete the database filed without create database inconsistency?
Thanks in advance,
Daniele

Hi Nayan,
I tried to export Users.xml using Depolyment Manager Export, but I the export failed whit this error.
[2012-10-09T10:03:37.366+02:00] [oim_server1] [ERROR] [] [XELLERATE.WEBAPP] [tid: [ACTIVE].ExecuteThread: '7' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: fc578f2854422d44:67bee673:13a2720c2c5:-8000-0000000000015853,0] [APP: oim#11.1.2.0.0] Class/Method: LoadDeploymentUtility/handleExportData encounter some problems: invalid character in name[[
Thor.API.Exceptions.tcAPIException: invalid character in name
at com.thortech.xl.ejb.beansimpl.tcExportOperationsBean.getExportXML(tcExportOperationsBean.java:245)
at Thor.API.Operations.tcExportOperationsIntfEJB.getExportXMLx(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
Caused by: oracle.xml.parser.v2.XMLDOMException: invalid character in name
at oracle.xml.util.XMLUtil.validateName(XMLUtil.java:464)
at oracle.xml.parser.v2.XMLDocument.createElement(XMLDocument.java:877)
at com.thortech.xl.ddm.repositories.api.impl.APIRepository.getElementforHashMapAttribute(APIRepository.java:552)
at com.thortech.xl.ddm.engine.visitor.ExportVisitor.visitStarted(ExportVisitor.java:126)
at com.thortech.xl.ddm.engine.data.datatypes.SchemaInstance.traverse(SchemaInstance.java:252)
at com.thortech.xl.ejb.beansimpl.tcExportOperationsBean.export(tcExportOperationsBean.java:281)
at com.thortech.xl.ejb.beansimpl.tcExportOperationsBean.getExportXML(tcExportOperationsBean.java:235)
... 120 more
]]Do you have any other suggestions?
Thanks,
Daniele

OIM 11g R2 - Change User Container

Hello,
I need to change the ldap user container in OIM 11g R2. I need to change it from cn=users1,cn=oracleAccounts,dc=mycompany,dc=com to cn=users2,cn=oracleAccounts,dc=mycompany,dc=com. I am using OUD as the directory for LDAP sync. How do I do this?
Thanks.

you need to modify the /db/LDAPContainerRules.xml to achieve this. Export it from MDS , modify it and then import it again. Restart OIM and then try.
Regards,
Sunny

OIM11gR2 DBAT User recon - custom UDF value not visible in User detail page

Hi,
I have configured DBAT connector for OIM11gR2 for user recon.
Have created and mapped few custom UDFs in the GTC.
User is created successfully in OIM, and has all the values correctly in USR table for all the custom UDFS.
But when i search a user in OIM, i can not see the value of custom UDF, even though it is in the database.
I have created and activated a sandbox and also added the custom UDF in the user details page using the Design option of ADF.
Is there something I am missing related to display of custom attribute and its value on the USer details page.
Kindly suggest.
Regards

Yes, your UDF should be available under Manage Users->UserVo1. It is working fine with our env. make sure you have the latest version of R2 release, because Beta release had an issue for same. You can create aonther UDF and and try gain.
verify same with below doc
http://docs.oracle.com/cd/E27559_01/doc.1112/e28183/oim_up.htm#BABEGECJ

OIM 11g DBAT connector - user update not working after target recon

Hi,
I have configured a resource (XSVR3) with the DBAT 9.1.0.5.0 connector to do provisioning and target recon to and from the same custom database table, following the example found on the connector guide. Now what happens is the following:
- if I first provision the resource to the user everything works fine
- if a resource is first assigned to a user as a result of a target recon, the connector then fails at propagating to the table any changes I make in the process form, returning the following error:
<8-gen-2013 16.44.16 CET> <Error> <OIMCP.DATC> <BEA-000000> <Class/Method: DBFacade/updateParentRecord encounter some problems: Empty parent row cannot be updated. Please ensure to run reconciliation task to bring the systems in sync.>
<8-gen-2013 16.44.16 CET> <Error> <OIMCP.DATC> <BEA-000000> <Class/Method: DBProvisioningTransportProvider/sendData encounter some problems: DB_UPDATE_EMPTY_RECORD_ERROR
com.thortech.xl.gc.exception.DBException: DB_UPDATE_EMPTY_RECORD_ERROR
at com.thortech.xl.gc.impl.common.DBFacade.updateParentRecord(Unknown Source)
at com.thortech.xl.gc.impl.prov.DBProvisioningTransportProvider.sendData(Unknown Source)
It looks like the connector is unable to find the record that needs to be updated. I've looked into the process form table of the resource on the DB (called UD_XSVR3), and I noticed that records resulting from target reconciliation have a null in the UD_XSVR3_ID column, while records resulting from a direct provisioning have the username in the same column. Updating manually the column in the first kind of records fixes the issue, but I need to know if/what have I missed in the connector configuration.
thanks in advance
Alex
Edited by: Prorad on Jan 9, 2013 3:02 AM

Hi, Prorad,
We are having same issue. What's the resolution for the issue? Any hints will be great.
Thanks,
Vincent

OIM Iplanet Trusted user Recon

HI,
While doing trusted recon for iplanet user i am getting following error
23:47:39,148 INFO [STDOUT] Done getting IT Resource parameters
23:47:39,164 ERROR [APIS] Class/Method: tcLookupOperationsBean/getLookupValuesFilteredData encounter some problems: The LookupCode 'AttrName.Prov.Recon.iPlanet' does not exist.
23:47:39,164 ERROR [SJSDS] tcUtilAttributeNameMap -> ---- > getTargetAttrMapping() :tcInvalidLookupException: null
23:47:39,164 INFO [STDOUT] tcTskIPlanetUserReconciliation[RO=iPlanet User] --> getFieldMappings(): entered
23:47:39,164 FATAL [SJSDS] tcTskIPlanetUserReconciliation[RO=iPlanet User] --> init(): Init Failed
23:47:39,164 INFO [STDOUT] tcTskIPlanetUserReconciliation[RO=iPlanet User] --> execute(): Entered
23:47:39,164 FATAL [SJSDS] tcTskIPlanetUserReconciliation[RO=iPlanet User] --> execute(): Variables not initialized properly. Terminating !!!!!!!!
Please help me to solve it out
Edited by: Anil Bansal on Apr 8, 2010 9:55 AM

Hi Suren,
But i think there is no lookup for this name in iplanet lookups...
There are 2 lookup's for this one is AttrName.Recon.Map.iPlanet for User Attribute Mapping for Recon.
And another one is AttrName.Prov.Map.iPlanet for User Attribute Mapping for Provisioning. As for recon it must use the AttrName.Recon.Map.iPlanet lookup.
whats can be the resaons for showing
23:47:39,164 FATAL [SJSDS] tcTskIPlanetUserReconciliation[RO=iPlanet User] --> init(): Init Failed??
Thanks,
AB
Edited by: Anil Bansal on Apr 8, 2010 10:19 AM

OIM 11G R2 Provisioning User to Oracle DB

Hello Experts,
I'm working on OIM 11gr2 and I installed DBAT 9.1.0.5.0
User-->Accounts-->RequestAccounts--> catalog-->add to cart --> checkout ...
When i was executed Checkout in catalog why no content for details ？ User can't Provisioning to DB.
Have you any ideas?
Thanks!

I appreciate your feedback very much.
My operation steps are as follows：
1) install DBAT 9.1.05
2)create connector "Database Application Tables Provisioning"
3)The system automatically created IT resources and Application Instances
4)Create Sandbox and activate it
5)edit Application Instances, create Form
6) Publish Sandbox
7)Run "Catalog Synchronization Job"
8)login /identity
9)create user
10)request acttouts
11) catalog-->add to cart --> checkout !

OIM 11g - Limiting support users to assign roles to correct users

We have OIM 11.1.1.5.0 and support a couple of third party organizations with delegated administration.
Admins in OrgA have an admin role AdminRoleA which allows them to assign UserRoleA to their users. Similarly, admins in OrgB are given AdminRoleB that gives them the ability to assign UserRoleB to their users.
We have support groups that can help these organizations. I have defined the Support role to inherit from AdminRoleA and AdminRoleB. The problem that I'm finding is that the support user can assign UserRoleB to a user in the other organization OrgA.
I could probably solve this by writing custom code in a validation handler but I just wondered if I was missing something and should have configured these roles and auth policies differently.
Thanks.

Thanks, I was afraid of having to do mess with the backend like that. What if I removed the the "all users" role from people I didn't want to have that access? How would that affect the user?
EDIT- It appears as though you cannot revoke that role. I guess I had never tried to do it before.
Edited by: 970312 on Jan 28, 2013 7:52 PM

OIM 11g - Reset End-User Password by Helpdesk

Hi,
Help Desk Administrators can search the "End Users" and can "Reset the Password". I have to customize the "Reset Password Menu" which is having two options to reset the password.
1. Manually Change the Password
2. Auto generate the Password (Randomly Generated)
Here i have to disable the option of selecting the "Manually Change the Password". So that the HelpDesk Administrators can select only one option which "Auto Generate the Password".
Urgent Help, highly appreciated.
Thanks,
Sandeep D
Edited by: user13476138 on Jun 7, 2011 2:29 AM
Edited by: user13476138 on Jun 7, 2011 2:29 AM

I think I remember (if I am not wrong) it is the xlWebApp.war/tiles/changePasswordTiles.jsp file. Actually, most of the JSP files are in this place (folder). One thing yuo should be aware of is when you change JSP file. You have to recomplie the war file using patch_your_app_server.sh (patch_your_app_server.bat for Windows) under xellerate/setup folder. Becarefull this will change your configuration files back to original (OOTB) so besure to back up your custom configuration files and put them back after that.

OIM 11g - Email Notifications configured in human task is not working

Hi,
My requirement is to send email to the assignee whenever a request is assigned to the user. I created a custom bpel workflow and configured email notiifcation in the human task for the status 'assign'. I have configured Email driver with following properties:
Sender Addresses = <[email protected]>
Default Sender Address = <[email protected]>
Outgoing Mail Server = <Exchange server host>
Outgoing Mail Server Port = 25
Outgoing Mail Server Security = none
Outgoing Default From Addr = <[email protected]>
I have also set the Notification Mode to 'Email' in Workflow Notification Properties.
However when a request is assigned to the user, email notifications are not sent.
I do not see any errors in the logs. In Enterprise Manager console I navigated to SOA Infrastructure Home > Human Workflow Engine > Notification Management and I could see outgoing email notifications corresponding to the workflow instance with the status showing 'Sent'.
Also the Exchange server that is being used has already been tested for provisioning emails from OIM and it works fine for provisioning.
Any pointers/troubleshooting tip to resolve this issue is greatly appreciated.
Regards
Deepa

Hi,
My requirement is to send email to the assignee whenever a request is assigned to the user. I created a custom bpel workflow and configured email notiifcation in the human task for the status 'assign'. I have configured Email driver with following properties:
Sender Addresses = <[email protected]>
Default Sender Address = <[email protected]>
Outgoing Mail Server = <Exchange server host>
Outgoing Mail Server Port = 25
Outgoing Mail Server Security = none
Outgoing Default From Addr = <[email protected]>
I have also set the Notification Mode to 'Email' in Workflow Notification Properties.
However when a request is assigned to the user, email notifications are not sent.
I do not see any errors in the logs. In Enterprise Manager console I navigated to SOA Infrastructure Home > Human Workflow Engine > Notification Management and I could see outgoing email notifications corresponding to the workflow instance with the status showing 'Sent'.
Also the Exchange server that is being used has already been tested for provisioning emails from OIM and it works fine for provisioning.
Any pointers/troubleshooting tip to resolve this issue is greatly appreciated.
Regards
Deepa

SJSDS recon issue with oim 11g

I got the following logging message while reconciling SJSDS (sun directory server) with oim 11g. All the recon statuses were success (group, role, user, trusted user), but no data was from SJSDS.
Did anyone has any idea about it?
Thanks
John
[2011-06-19T10:01:47.352-05:00] [oim_server1] [NOTIFICATION] [IAM-0080013] [oracle.iam.platform.kernel.impl] [tid: [ACTIVE].ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 0000J2cQzfw5qYWFLzfP8A1DzNVx0000A0,0] [APP: oim#11.1.1.3.0] [arg: 194] [arg: 0] [arg: JobDetails] [arg: UPDATE] Kernel executing default validation with process id, event id, entity and operation 194.0.JobDetails.UPDATE
[2011-06-19T10:01:47.376-05:00] [oim_server1] [NOTIFICATION] [IAM-1020024] [oracle.iam.scheduler.impl.quartz] [tid: [ACTIVE].ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 0000J2cQzfw5qYWFLzfP8A1DzNVx0000A0,0] [APP: oim#11.1.1.3.0] [arg: 194.242.JobDetails.UPDATE.entityId=null] Execute default action handler with 194.242.JobDetails.UPDATE.entityId=null
[2011-06-19T10:01:47.447-05:00] [oim_server1] [NOTIFICATION] [] [oracle.iam.platform.kernel.dao] [tid: [ACTIVE].ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 0000J2cQzfw5qYWFLzfP8A1DzNVx0000A0,0] [APP: oim#11.1.1.3.0] Inserting records for orchestration cleanup
[2011-06-19T10:01:47.475-05:00] [oim_server1] [NOTIFICATION] [IAM-0080046] [oracle.iam.platform.kernel.impl] [tid: [ACTIVE].ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 0000J2cQzfw5qYWFLzfP8A1DzNVx0000A0,0] [APP: oim#11.1.1.3.0] [arg: Done] Completed orchestration with action result - Done
[2011-06-19T10:01:47.705-05:00] [oim_server1] [NOTIFICATION] [] [oracle.iam.platform.authz.impl] [tid: [ACTIVE].ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 0000J2cQzfw5qYWFLzfP8A1DzNVx0000A0,0] [APP: oim#11.1.1.3.0] [[
*---Stack Trace Begins[[This is not an exception. For debugging purposes]]---*
oracle.iam.platform.authz.impl.OESAuthzServiceImpl.doCheckAccess(OESAuthzServiceImpl.java:212) oracle.iam.platform.authz.impl.OESAuthzServiceImpl.hasAccess(OESAuthzServiceImpl.java:190)
oracle.iam.platform.authz.impl.OESAuthzServiceImpl.hasAccess(OESAuthzServiceImpl.java:182)
oracle.iam.platform.authz.impl.AuthorizationServiceImpl.hasAccess(AuthorizationServiceImpl.java:173)
oracle.iam.scheduler.impl.util.SchedulerAccessUtils.checkOperationAccess(SchedulerAccessUtils.java:22)
oracle.iam.features.scheduler.agentry.operations.LookupActor.prepare(LookupActor.java:1555)
oracle.iam.features.scheduler.agentry.operations.LookupActor.refresh(LookupActor.java:2969)
oracle.iam.features.scheduler.agentry.operations.LookupActor.receiveEvent(LookupActor.java:2807)
oracle.iam.consoles.faces.mvc.canonic.Model.handleIntent(Model.java:922)
oracle.iam.consoles.faces.mvc.canonic.Controller.doHandleIntent(Controller.java:528)
oracle.iam.consoles.faces.mvc.canonic.Controller.doSelectAction(Controller.java:203)
oracle.iam.consoles.faces.event.NavigationListener.processAction(NavigationListener.java:97)
... 34 lines skipped..
oracle.iam.platform.auth.web.PwdMgmtNavigationFilter.doFilter(PwdMgmtNavigationFilter.java:115)
... weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
oracle.iam.platform.auth.web.OIMAuthContextFilter.doFilter(OIMAuthContextFilter.java:100)
... 15 lines skipped..
weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
---Stack Tracefor this call Ends---
]]

As the log says thats not an exception. Anyway why dont you enable the connector logs and see what does the connector complaint about. Refer the Enable Logging section in the connector PDF
Thanks
SRS

OIM 11g R2 - User random password Generation

Hi All,
In my case users are getting created in OIM using Trusted source reconciliation and need to populate a random password for each user.
Please suggest me which of the following methods is better and why?
Method 1: Created a post Event Handler and populate password attribute. This case I created a custom Post event handler and populated password attribute and is success but the password stored in database is plain text and so not able login to Adminconsole with same password. So, how to encrypte password and then store in DB?
Method 2: Create entity adapter and attach to user form using Data object manager
Or, please suggest me any other best way.
Thanks in advance.

Hi,
Users are being created thru trusted source recon and password is not automatically getting populated. I verified it, by checking USR_PASSWORD attribute in USR table and it is empty.

OIM 11g R2 - Trusted User Recon 'Reconciliation Insert Received' not trigge

Similar Messages

Maybe you are looking for