OIM 9.1.0.2 ORA-0936 encountered when provisioning roles

Question

I've configured an Access Policy that provisions users without requiring approval to a DB through the DB connector. It also provisions them with roles: CONNECT and DBA.
The latter was achieved by making Role provisioning dependent upon User creation completion in the Access Policy. The Access Policy is also where the roles are specified.
The user is created and role provisioning fires OK, but gets rejected.
The relevant section in the log looks like this:
ERROR RMICallHandler-266 XELLERATE.DATABASE - select UD_DB_ORA_P_PRIVILEGE from UD_DB_ORA_P where UD_DB_ORA_P_KEY =
java.sql.SQLException: ORA-00936: missing expression
     at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:138)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:316)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:282)
     at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:639)
<snip>
     at java.lang.reflect.Method.invoke(Method.java:585)
     at com.evermind.server.rmi.RmiMethodCall.run(RmiMethodCall.java:53)
     at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
     at java.lang.Thread.run(Thread.java:595)
ERROR RMICallHandler-266 XELLERATE.DATABASE - Class/Method: tcDataBase/readPartialStatement encounter some problems: ORA-00936: missing expression
java.sql.SQLException: ORA-00936: missing expression
     at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:138)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:316)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:282)
     at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:639)
     at oracle.jdbc.driver.T4CStatement.doOall8(T4CStatement.java:113)
     <snip>
     at com.evermind.server.rmi.RmiMethodCall.run(RmiMethodCall.java:53)
     at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
     at java.lang.Thread.run(Thread.java:595)
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem entered.
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: event - Value: adpDBADDPRIVILEGE
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: New Status - Value: R
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: SchData - Value: Data Access Error
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: Reason - Value: Exception com.thortech.xl.dataaccess.tcDataSetException: Data Access Error was thrown in adapter "DB Add Privilege". The Adapter Response was "Data Access Error"
There is an article about this on Oracle support, which I think is relevant, it states:
CAUSE
The error is caused by the fact that the rule is based on the values of the process form which are not yet commited to the database.
The usage of the process form will be avoided when creating rules for prepopulate adapters.
SOLUTION
Create a rule based on the "Request Target Information" which is reffering attributes of the OIM target user which has to be provisioned.
Suppose an access policy is used and this is based on a specific autogroup membership, the same rule can be used when creating the rule for the prepopulate adapter.
Unfortunately, this is greek to me.
Can anyone explain how I can resolve this problem with the role provisioning?
Many thanks,
2Hugh
Edited by: 2hughg on 08-Mar-2011 09:19

Answer 1

I had a privilege provisioning task set up as well, when I removed that, the error condition went away.
2hugh