OIM AD connector upgrade

Hello everyone,
We have to upgrade AD connector from 9.1.0.1 to 9.1.1. Oracle does not support the upgrade from 9.1.0.1 to 9.1.1 and does not support connector deinstallation!
We tried to install the connector on top of the existing one but installation fails on the 2nd step (deployment manager). Does it mean we have to reinstall OIM in a fresh environment and copy our customization and install connector v9.1.1?
Thanks for your help

Thanks, Sunny. Just wanted to clarify whether you mean:
1- install the connector on top of the existing one then redo all connector customizations or
2- Reinstall OIM, install the new connector, import customizations and redo connector customizations.
The in-place upgrade in the first option failed. Is it the expected result or it can be done?

Similar Messages

OIM 9.1 Upgrade scripts

Can anybody please let me know if OIM 9.1 upgrade scripts are available, if yes can you please point me to the same.
Thanks

We pushed the full configuration of our dev environment to our QA environment so we had it for reference.
On the database, we exported the database so we could get back to our old config, if we needed to. We also made a backup of the application server. Then we dropped the database user and tablespace for OIM, and removed the OC4J_OIM home from our app server. We also renamed the old Xellerate home.
OIM 9.1 has some new DB & AS patch requirements, so we installed all the patches to be compliant with the instal guide. We then ran the 9.1 database prep routine, created a new OC4J home on the ap server, and installed 9.1 as a completely clean new install.
Once installed, we did an immediate db export to save our clean install configuration. I highly recommend keeping the clean install export around, in a dev environment it is critical to be able to roll back and start clean. That a another story for another day.
Then we installed the latest version of all our connectors we could find on Metalink. Took another backup (db export) and started to re-create our environment by copying in our jars and re-creating all the adapters, custom fields, forms and process task. This sounds like a big task, but with the QA system available for reference, its went far smother than we thought it would. Rebuilding teaches you a lot about your system and gives you a chance to get rid of those "I wish I had done this a little different" issues that seem to always be in any system.
All this considered, I am glad there weren't any upgrade scripts. We cleaned up our system during the conversion process. We probably would have take the automated approach, if it was available, but the conversion process was the right thing for us to do.
KC

OID connector upgrade

I have a situation here, where I have a OIM 9.1.0.2 server version using OID connector 9.0.4.1 to provision to a 10.1.4.3 OID server. I tried to upgrade the connector to the 9.0.4.11, but got a error during deployment, with the error 'connector deployment failed'. Opened up a suppor ticket, and got the response that this is something that is being worked on.
Question to the forum, have anyone done a connector upgrade successfully, and if so, what are the things to look out for.
Any help will be appreciated.

Oracle support do not have any documented process to accomplish this. There is a enhancement request that is being worked on, and we are not sure when support will have a resolution for this.
I was wondering if anyone of you have done this before and and if so, what are the steps that was followed.
thanks.

Connector upgrade steps

What are the steps to upgrade the connector. I took the backup of DB and OIM .

Just to add on to what Martin said, I would mention that previously we did not had any steps in the documentation for Connector Upgrade, but as this was impacting the dynamic behavior of the connector usage, so now we have this requirement as a mandate for any connector release. If you have a look at the recent releases of any connector pack then you will find a section as -'Upgrading the connector'.
For most of the new patch-sets this will be an upgrade from the version released last with reference to the current patchset. So if you want to upgrade from an very older version to the current release then this is just not possible and it will be mentioned in the connector docs as well.
So you would not be able to upgrade to this 9.1 version of AD from an older version. Also remember that all 9.1 releases of any connector pack is a total re-visit to the connector architecture. So in all the cases you will find that any CP doesn't support upgrade to 9.1 release. I hope it helps.
Thanks
Sunny

AD Connector upgrade from v9.1.0 to v9.1.1.4

Hi all,
I need to upgrade the Active Directory Connector from v9.1.0 to v9.1.1.4. I have read the connector upgrade documentation and the upgrade path is the following:
1- v9.1.0 to v9.1.0.1 (upgrade)
2- v9.1.0.1 to v9.1.1 (full installation)
3- v9.1.1 to v9.1.1.1 (upgrade)
4- v9.1.1.1 to v9.1.1.4 (upgrade)
The problem is that the step 2, upgrading from v9.1.0.1 to v.9.1.1 requires a full installation, does that mean that I'll loose all the customizations in the connector? I know that direct upgrade from release 9.1.0.1 to v9.1.1 is not supported, but is there any work around to upgrade the connector without performing the full install and loosing the customizations? Please, any help will be appreciated.
Thank you in advance.

That's tricky because their are usually huge changes between two connector versions if Oracle says that it cannot be upgraded.
In other words you would require study of these changes and try to simulate it by yourself in your Dev. Or identify the customizations in your past environment and then redo (as you suggested yourself). The second option is a bit difficult but clean.
Thanks
Sunny

OIM AD connector- Groups added natively in AD getting deleted

We are facing this issue with the OIM Ad connector- 11.1.1.5.0. The scenario is :
1. OIM user get created
2. OIM provisions user to AD and adds user to 2 groups ( 1 and 2)
3. AD Administrator logs into the AD directly and adds 3 groups to the user ( Group3,Group4 and Group5)
4. OIM admin goes to the resources tab and adds Group6 to the user from within OIM AD resource
Shouldn't we see that the user account on AD be a member of group1,group2,group3,group4,group5 and group6. This is the expected behavior
What we are seeing on the account is that only group1,group2 and group6 are visible.
I understand the the groups - Group3,Group4 and Group5 will not be visible on the resource form unless we do a recon but OIM should not be DELETING groups added natively on AD
Any help on this issue will be appreciated

Thanks everyone. I do agree that the behavior should be such that all 6 groups should be visible on the user on the target (AD) system. However, we are seeing that the groups added natively within AD are getting deleted and OIM is "truing up" the user account with the groups that are added within the process form , i.e. the scenario described above. OIM is actually deleting the groups that were added manually on AD.
If I do trigger a target recon, then I can see that all the groups are reflected on the user within OIM. However running this task every hour or rather every time I need to add an entitlement on a user is not a feasible solution,would you agree?. Also this is a limitation that cannot be placed on a helpdesk person. Rather , if this is the only solution , it should be a functionality of the connector.
Please note that the connector deployed is v11.1.1.5.0 and NOT the 9.1.1.7. The 9.x connector did behave as expected , i.e it did not delete any groups. However the new ICF based connector is deleting groups. Is there a setting within the connector configuration to turn on/off this functionality?
This is what I see in the connector server logs
<VERBOSE>: Class-> ActiveDirectoryUtils, Method -> GetDnFromPath, Message -> Exiting the method. Returning the value = CN=TEST6,CN=Users,DC=OIM,DC=Test,DC=com
<VERBOSE>: Class-> CustomAttributeHandlers, Method -> UpdateDeFromCa_OpAtt_Groups, Message -> DirectoryEntry path = LDAP://xx.xx.xx.xxx/CN=Print,DC=OIM,DC=Test,DC=com. Removing: CN=TEST6,CN=Users,DC=OIM,DC=Test,DC=com from the property: member
"PRINT" is the group that was added natively on AD.

OIM GTC Connector

Hi All,
I have a requirement where I need to provision and reconcile into multiple flat files and metadata in each of them may differ.
So I was planning to create custom GTC connector each for provisioning and reconciliation respectively.
Can anyone please suggest me the best possible solution for this.
Is Oracle planning to launch a connector for flat file in near future which can help in such scenarios?

I have tried using default GTC connector for reconciliation (without trusted source reconciliation). I have three fields in the file UserName,FirstName,LastName and have mapped them to account profile for OIM, a reconciliation rule has been created which looks for equality of User Id in both OIM and flat file. The User ID is present in both flat file and OIM and is same.
I have done configuration on both OIM 9100 and also on OIM 9101.
It is working in OIM 9100 but not on 9101 and giving me null pointer exception. Any idea why it is not working on 9101.
When I have a new entry in flat file that exists in OIM the connector link the two and creates the resource form. But when I try to update/delete any existing value in flat file it is showing me a strange behaviour.
For update it links the same profile again to different resource form (basically it link the account using "one entity match found" however it should be "one process match found")and for delete it is not working. I am assuming that it is not able to call process tasks.
Can anyone tell me why it is doing so. My reconciliation rule is working fine.

OIM DBUM connector error

Hi All,
I have instlalled the OIM DBUM connector for Oracle databse. I have provided all the parametrs except connectionproperties column while configuring the itresource for the connector.when trying to run the schedulers OOTB to populate lookups synchronized with target iam getting the following error.please help me out.
oracle.iam.connectors.icfcommon.exceptions.OIMException: Thor.API.Exceptions.tcAPIException: Row index out of bounds
thanks.

Hi Ketan,
I have installed DBUM *11.1.1.6* on OIM *11.1.1.5* locally.
in the connector guide i followed below steps.
1. Sec:2.2.1 Installing the Connector in Oracle Identity Manager
2. Sec:2.3 Postinstallation
Section 2.3.1, "Postinstallation on Oracle Identity Manager"
Section 2.3.1.1, "Configuring the Target System As a Trusted Source"-notdone
Section 2.3.1.2, "Changing to the Required Input Locale" -----left it with default values
Section 2.3.1.3, "Clearing Content Related to Connector Resource Bundles from the
Server Cache"
Section 2.3.1.4, "Creating the Administrator Account on Oracle Database Vault"-----not done
Section 2.3.1.5, "Setting up the Lookup Definition for Connection Pooling"---not done
Section 2.3.1.6, "Enabling Logging for Oracle Identity Manager"
Section 2.3.2 Configuring the IT Resource for the Target System
In this we have a parameter text field called Connection Properties ----I left it blank and dont know what needs to be filled.
Remaining parameters are set
Database Name-IP of DB machine
DB Type
JDBC Driver
JDBC URL
Login Password
Login User
I could see connector installation success message. But when I am trying to run the scheduled jobs configured to populate the lookups , getting the above mentioned error.
Thanks.
Section 2.3.2, "Configuring the IT Resource for the Target System"
Section 2.3.3, "Configuring the Connector to Support Multiple Versions of the
Target System"------------------->not done
Edited by: Powerlad on Sep 2, 2012 11:55 PM

Documentation for OIM AD Connector

Hi,
Can any one suggest any documentation for OIM AD Connector which gives steps to develop adapters and so on

OIM Connector Guide for AD - > http://download.oracle.com/docs/cd/E10150_01/doc.904/e10158/toc.htm
OIM Connector Framework Guide -> http://download.oracle.com/docs/cd/E10150_01/doc.904/e10178/toc.htm
Maynot have a great deal of details, but something to start off with.
Rgds, Ajay

OIM - OID11g Connector Logging

Hi All,
I have updated the logging.xml as below to enable the logging for OIM -OID Connector 11.1.1.5.0 but I can't see anything in the file (File is created but it has no logs):
<log_handler name='oid-handler' level='TRACE:32' class='oracle.core.ojdl.logging.ODLHandlerFactory'>
<property name='logreader:' value='off'/>
<property name='path' value='/u01/oracle/iam_middleware/user_projects/domains/IAMdomain/oidconnector.log'/>
<property name='format' value='ODL-Text'/>
<property name='useThreadName' value='true'/>
<property name='locale' value='en'/>
<property name='maxFileSize' value='5242880'/>
<property name='maxLogSize' value='52428800'/>
<property name='encoding' value='UTF-8'/>
</log_handler>
<logger name="OIMCP.OID" level="TRACE:32" useParentHandlers="false">
<handler name="oid-handler"/>
<handler name="console-handler"/>
</logger>
Please help.
Thanks
Sunny

Firstly I would normally manage OIM 11g logging through Oracle Enterprise Manager rather than directly in a logging.xml file, with log information appearing in the OIM server diagnostic log rather than a dedicated log file as you have done. That is not to say what you are doing is wrong (I cannot comment as I have never managed OIM 11g logging in this way.)
The other thing that may be wrong is the logger you are using. You have logger OIMCP.OID. For my OIM11g OID connector logging I am using the standard logger of XL_INTG.OID.

OIM PoepleSoft Connector

Hi All,
I am installing OIM - PeopleSoft connector for Employee Reeconciliation. As part of Target System Configuration for Full Reconciliation(Trusted Source) i performed all the steps specified in Connector documentation on Target System. Summary of the steps is Full publish of Person Data in PeopleSoft as xml files and feeding these xml as initial data load to OIM. After running the process scheduler for Data Publish of PERSON_BASIC_FULLSYNC message i dont see any xml files being generated. Rather it only gives me one log file and a .trc file. The log file says the process has ran successfully. But no expected out.
Any one who previously performed these steps successfully please share your experience and pointer would be appreciated
PeopleSoft HRMS 8.8
People Tools : 8.9.26
OIM 11g.
Connector : 9.1.1.6
Connector Documnetation Followed : http://download.oracle.com/docs/cd/E11223_01/doc.910/e11205/deploy.htm#BIHFHICC
Regards,
Ashok

i'm face the same problem, have u soloved this problem . can u share me with it ?

Has the thunderbolt display had its magsafe connector upgraded

Has the thunderbolt display had its magsafe connector upgraded and if so is there a backward compatible adapter for the older magsafe connectors?

The web page for the Thunderbolt Display says it still comes with the MagSafe to MagSafe 2 Converter, so I would say the attached connector is still the original MagSafe.

OIM Siebel Connector Real-Time

Hi All
I am using the direct provisioning for the OIM Siebel Connector.
Can I make this provisioning process to be a real time without human intervention ?
At the current time, I am adding an LDAP resource and Siebel resource to each user manually to start the provisioning process. Is there anyway to automate this process to remove the human intervention ?
Thanks

You can create a schedule task to initiate provisioning through APIs
Or
Use Access Policy. Whenever user will get created into OIM, he will get Siebel Resource

OIM Database Connectors version upgrade

Hi,
I need to upgrade the OIM DB User Management Connector from release 9.0.4.1 to 9.0.4.4. and the OIM Database Application Table Connector from release 9.0.4.1 to 9.1.0.1. Any one knows which patches should be applied for these upgrades? I can't find any documentation regarding this.
Thank you.
Regards.

First of all have a look at the read me which comes along with the connector patch and see if the upgrade you are trying to achieve is supported or not. For example:
The *4 Deploying the Patch Set* section in the latest release *9.0.4.5* of the DB User Management Connector clearly says the following:
Note:
Direct upgrade to release 9.0.4.5 from release 9.0.4.3 or earlier releases is not supported.
Same applies to DB App Tables Connector as well. See and confirm it by yourself because I don't have those versions of the connector.
Thanks
Sunny

AD Connector upgrade

Hello,
If I upgrade my existing Active Directory Connector, will I loose my Custom tasks.
I want to understand what all will be impacted. I also have Exchange integrated with OIM.
Currently I am using 11.1.1.5 version and want to upgrade to 11.1.1.6.
Thanks
sjit

read this:
Managing Connector Lifecycle - 11g Release 1 (11.1.1)

OIM AD connector upgrade

Similar Messages

Maybe you are looking for