[OIM] Error in Direct Provisioning (with auto save form) - GTC DB App Table

Hi,
I am getting an error when setting up direct provision of a GTC DB App Conn using OIM access policy (and group membership) or through manual provisioning with prepopulate and auto save form.
Manual provisioning with prepopulate ONLY (not with auto save form) WORKS!!!
Some information about my OIM config:
- Prepopulate adapters are set up on both forms (parent and child)
- "Auto prepopulate" and "Auto save form" are set up at Process Definition
- For direct provisioning, I have created an access policy with an associated group which has a membership rule
What it is working:
- Provisioning manually, using prepopulate adapters only, not auto save form. Both tables are updated properly
- All *3 tasks are called and finished with status=Completed*: "System Validation", "Create User" and "Child Table UD_<connector child table name>_US row Inserted"
Testing direct provisioning:
- I have tested adding the resource manually with prepopulate and autosave form configured, and also through access policy/group membership. The error is the same on both tests
- The resource is displayed as provisioned and it is created an entry in the parent table of the resource, but not on child table
- I also observed that only: "System Validation" and "Create User" tasks were executed (status=Completed). But it is missing the task "Child Table UD_<connector child table name>_US row Inserted"
- The error log info displays only an error regarding to UGP table (Groups info) but I am not sure if that is the cause of entry creation on child table.
It seems the SQL stmt tries to get ugp_name (group name) using ugp_key but that has null value.
"SELECT ugp_name FROM ugp WHERE ugp_key=java.sql.SQLSyntaxErrorException: ORA-00936: missing expression"
Note: When testing manually (without auto save form), I got "SELECT ugp_name FROM ugp WHERE ugp_key=1" which it is the same SQL stmt but the value is provided.
My guess:
- It seems that error is aborting the whole execution process so "Child Table UD_<connector child table name>_US row Inserted" task does not run, even though previous tasks are finished with the status=Completed. Consequently, the entry is not created on child table.
Please, any guess or help would be very helpful. In case nothing works, I guess I will have to create and customize a "Update child Form" task as an workaround which would be called after "Create User" task.
Regards,
Hugo
My environment:
- Windows 2003, WebLogic 10.3.0.0, OIM 9.1.0.2 BL4, Oracle 10g, Java 1.6, DB App Table Connector 9.1.0.2 (from October 2009)
- Target Resource: Parent and Child Table (Oracle 10g - the same OIM DB)

An update:
I solved that error about "ORA-00936: missing expression" applying OIM 9.1.0.2 BP05. That was not impacting my issue regarding direct provisioning with auto save form and child form.
So please if anyone can confirm:
- Can I set up prepopulate adapters on child forms AND also use "auto save form" on GTC DB App Table connector?
If not, any suggestion?
Regards
Hugo

Similar Messages

OIM to OID direct provisioning to a particular OU

Hello - Can some one suggest if provisioning to a partciluar ou in OID directory is possible from OIM using configuration as oppose to coding?
let say, my DIT looks like this:
dc=abc,dc=com
o=Org-A
-     ou=unit1A
-     ou=unit2A
-     ou=unit10A
o=Org-B
-     ou=unit1B
-     ou=unit2B
-     ou=unit10B
I can provision user account to OID fine OTTB i.e. using the default connector configuration and adding them to cn=users container.
But now if I want to add user to a particular ou in OID then what is required (high level steps would be great).
Just to clarify, I want to pick the ou during user creation e.g. if I want i should be able to pick ou=unit1A or ou=unit1B.
Thank you.
Edited by: user9231583 on 09-Mar-2010 21:08
Just wanted to update the question, after testing few fields I can provision user account to either o=Org-A level or if I can create a new ou under the top node dc=abc,dc=com then I can provision the user but I am not sure what config changes are required to add user under the unit1a or unit2a? Any suggestions please.

Thanks everyone who replied but I guess I have not explained it clearly, The question is how to provision under an ou=Unit1A that is under o=Org-A.
Here is some information that I have configured that might help to point me to the right direction. I would appreciate any help. hopefully it make sense.
The process form contain Container DN field. This field is defined as LookupField in the process form.
The lookup table from which the Container DN gets the value is Lookup.OID.Organization
I have populated my Lookup.OID.Organization with the Organization units that I have created in OID; from my above example it contains values like
Code key Decode
ou=Unit1A unit1A
ou=Unit2A unit2A
ou=Unit1B unit1B
etc
The values for ldapOrgDNPrefix and ldapOrgUnitObjectClass in Lookup.OID.configuration is set as follows:
ldapOrgDNPrefix=ou
ldapOrgUnitObjectClass=organizationalUnit
When I try to provision user to these ou (unit1A or unit1B), i get "no such object" return error which makes sense since OIM is trying to add this user under ou=unit1A,dc=abc,dc=com which does not exist in OID. It should be ou=unit1A,o=org-A,dc=abc,dc=com but I am not sure how to tell that to OIM.
Just to you know:
I can provision either at the o=Org-A level by changing the values in Lookup.OID.configuration lookup table to ldapOrgDNPrefix=o and ldapOrgUnitObjectClass=organization
OR
If i create an organizational unit ou=Test under the top node i.e. dc=abc,dc=com and then change the values in Lookup.OID.configuration lookup table to ldapOrgDNPrefix=ou and ldapOrgUnitObjectClass=organizationalUnit then I can provision to ou=Test.dc=abc,dc=com
but I am not able to provision under ou=unit1A if it is under o=Org-A.
Thank you.

OIM - Users provisioned with different resource form versions

Hi !!
we are having some problems with different resource form versions and maybe you can help us.
We have two different versions of one resource form. One of them has 2 extra fields.
Some users were provisioned with that resource with the previous form version (no extra fields) and some with the new one (extra fields).
The problem is that now, if we try to edit that resource for the users with the old version, we are not able to edit or even see the information for those extra fields.
It seems that they have been associated with the old version and we need to change it in order to make them use the new one. Is that possible? How can we fix that?
Thanks in advance.

Alternatively you can manually update the form version in the OIM database.
If it is a small number of forms it might be easier to do that then to bother with fvc.
Best regards
/Martin

Create Organizations in OIM by recon with GTC Database App tables

Hello,
Does anybody know if and how you can create organizations instead of users in OIM when using the GTC DataBase Application Tables connector?
Thank you,
Ionut.

Very unlikely verging on the impossible.
I would recommend writing your own connector. As you only need a little bit of JDBC and call the createOrganization in tcOrganizationOperationsIntf wrapped in a scheduled task this should not be a big issue.
Good luck
/M

Auto Save Form with Data

Hi All ,
I have a BSP which is stateful and no MVC. My production server has a sesison timeout of 15 mins. I need to autosave my form and send this data to a Ztable. Can u help me out in solving this...
awaiting eagerly...
Regards,
Guru

Hi Guru,
user the setTimeout function to call a function that submits your form.
An example can be found at http://www.plus2net.com/javascript_tutorial/timer-set.php
Cheers
Graham Robbo

[OIM] GTC (DB App Tables) doen't refresh the OIM User Stages

The scenario is as follows: I have one table as a trusted source. I mapped it to the OIM User using the stages screen (the OIM User plus some UDF Fields) and everything works fine.
The problem arised when I need to add more UDF fields. The stages screen doens't show them, neither if I press the refresh button on the OIM User stage. The weird thing is that, for example if I make a Create User, all fields are shown and more weird, if I go directly to the provisioning process of the GTC connector, in the recon mapping these new fields appears and let me make the mappings. The strange thing is that I save this, and when I go to the GTC stages screen, the new UDF still doen's appear, neither the mappings I made in the design console.
Have this happened to anyone? I don't want to mix GTC management touching directly the Design Console, I am trying to let it clean so I can make a clean export when it happen to put the connector in other environment.
Thanks!

Hi,
I got the same problem... I added two UDF after I'had created the GTC and it didn't read them up, so I added the lines below in the xml schema in the database. After that, I could map the UDFs to the Reconciliation Staging fields.
<Field default=" " keyfield="false" type="String " required="false" size="60 " encrypted="false" order="0 " name="USR_UDF_SAMPLE1" password="false">
</Field>
<Field default=" " keyfield="false" type="String " required="false" size="15 " encrypted="false" order="0 " name="USR_UDF_SAMPLE2" password="false">
</Field>
<Field default=" " keyfield="false" type="String " required="false" size="30 " encrypted="false" order="0 " name="USR_UDF_SAMPLE3" password="false">
</Field>
I think that would exist a button to refresh OIM User Schema used by the adapter, so the UDFs can be updated.
tks.
Renato.

Auto save error msg

Something very strange has been going on recently with FCP 6. If FCP is open and I repair disk permissions I have had an error message come up saying Auto Save error can not auto save your project. Then on both occassions clips have gone certain clips have gone offline in the Timeline. Most of the footage we use is on one internal drive and all graphics etc is on another internal drive. None of these are the system disk. Is this something to do with disk utility repairing the structure of the disk and breaking the connection of the clips and FCP? What could be the Auto Save issue?

Nick's dead on about doing any sort of drive maintainence while fcp is running. That said (after quitting fcp), you might run diskutility: disk repair and Diskwarrior (if you've got it) on all your drives. You may have some sort of drive corruption or immienent drive failure.
Diskwarrior is a utility that will analyze and repair drive folder structures that the diskutility sometimes can't. Worth every penny.
http://alsoft.com/

Lightroom - metadata auto-save vs. export

Hello!
I understand that with auto-save XMP metadata on, most of an image's Lightroom changes will be auto-saved with the original photograph file whereever it may be.
However, what I don't understand is whether when you export from Lightroom (not export a catalogue/folder, but export an image/some images) whether or not the Lightroom changes (e.g. brightness contrast, saturation, etc.) are considered part of the 'metadata' referred to in the export window.
Afterall, if you are exporting JPEGs, for instance, you are rendering the final (not the original), so why would you want the Lightroom changes metadata because you can't use the Lightroom changes XMP data to go from a final to go back to an original image, can you?!
Thank you!
p.s. This article (http://regex.info/blog/lightroom-goodies/metadata-wrangler) indicates that the XMP CRS block is automatically include with the Lightroom export window, right?

When you export an image the metadata and develop settings are written to the files XMP header. However, the develop settings are for reference only i.e. they are seen but not acted upon by applications such as Bridge. For example, if you open an exported JPEG with develop adjustments into Camera Raw it will show all the sliders at zero rather than the values in XMP. The reason being that the JPEG is already fully rendered file, the develop settings in XMP cannot be undone without creating a completely new file.
Metadata and develop settings saved to XMP differs in that the file has not yet been rendered with the develop settings. So, opening the file in Camera Raw show the sliders at the same values as written into XMP.
p.s. This article (http://regex.info/blog/lightroom-goodies/metadata-wrangler) indicates that the XMP CRS block is automatically include with the Lightroom export window, right?
Yes

Smart object / Auto save bug

MacPro 1.1, OSX 10.6.8, PSCS6 Beta
Came across the following, which I think is a bug.
I have two ducuments: D_test_00042.psb and D_test_00052.psb.
Each were build using a few layers and a group "Retouch", and then converted to Smart Object. So both files contain a (different!) Smart Object called "Retouch".
If I open both files, and doubleclick the first SO, then go to the other and do the same, all works more or less as expected:
However, if I open one file, and doubleclick the SO, then close the original file (to save on system recources), thén open the second document and doubleclick the SO in it, I get a warning "The disk copy 'Retouch.psb' was altered since you last opened or saved it. Cancel / Update":
Cancel obviously won't open the second SO, Update updates the SO that's already opened (which belongs to the other document)
(History palette in the top center, shows "Update from file")
Message was edited by: Rene-) for exact workflow and screenshots

Follow up: PSCS4 (11.0.2) behaves the same, so it is probably something I never noticed before (which is surprising, since I didn't alter my workflow) and has nothing to do with Auto Save…
I'll make it a feature request then: Fix this. Use unique names 'internally' for SO's.
I want to be able to open a SO from an older document for instance to be able to copy paste from one SO to another.

Auto Save & Versions a bust ... bring back "Save As"

Having upgrading my laptop to Lion and discovering that along with Auto Save and Versions comes the elimination of the Save As command and the inability to turn these new features off I will be reinstalling Snow Leopard and definitely not upgrading our household's other machines.
The new scheme is cumbersome in it's insistence that I duplicate the document to give it a new name.
I do not like the idea that previous drafts are accessible from inside the document by anyone who might access my machine.
I do not like that new versions are created and saved without my say-so. I do not like that I am not asked to save/discard changes upon quitting.
In short, the 248 great new features provide me little reason to upgrade but the 249th and 250th features are deal-breakers. Until they can be turned off I will not use Lion.

RichBP wrote:
File>Duplicate creates a new duplicate of the changed file. You then have to go back after you've duplicated, and "revert" the file or you will have two identical changed files. If you want to leave the original untouched, and forget to "revert" before you close the file, you're original file will be lost and your original file will be identical to your new "duplicate" file.
Or you could just click the "Duplicate and Revert" button:

Why did auto-save didn't save my entire project?

Hello,
I recently had some problems with auto-save. I was working on a project when my computer
stoped working and I had to force shutting down. However, my Premiere CC is set to auto-save
every 15 minutes. When I went to see the auto-save files I didn't find my entire work. I had several
sequences previsously the one I was left with. What had happen?
thank you,
Joao.

Some versions of Premiere Pro won't start autosave until you do a manual save. What version are you using?
Did you try searching your drives for project files in the event that it went to an unexpected place?

Auto Save & OS X Server Group Folders

I just discovered that auto save enabled applications like Text Edit cannot save to /Groups directories on OS X Server.
I have two local users David and Celia that are members of the local group davidendcelia. This group has the group directory /Groups/davidandceilia. All members of the group are able to save and edit files in the group folder regardless of who created the file. This is just what is wanted. It is not possible to save a file with Text Edit into the group directory. When you try to navigate to the group directory it is not accessible.
The /Users/Shared file will work with Text Edit, but it does not allow one user to edit a file created by another user.
Is there a way to make the group folders work with auto save enabled applications?
These are the permissions on the file.
imac10:Users Jeff$ pwd
/Users
imac10:Users Jeff$ ls -l
total 0
drwxr-xr-x+ 29 Jeff   staff     986 Jan 31 15:43 Jeff
drwxrwxrwt   8 root   wheel     272 Feb 5 19:40 Shared
drwxr-xr-x+ 13 celia _amavisd 442 Feb 2 19:58 celia
drwxr-xr-x+ 20 david staff     680 Feb 2 19:45 david
imac10:Groups Jeff$ pwd
/Groups
imac10:Groups Jeff$ ls -l
total 0
drwxrwx---@ 9 root admin 306 Feb 5 19:30 davidandcelia
drwxrwx---+ 2 root admin   68 Jan 31 21:01 workgroup
imac10:Groups Jeff$ ls -l

Every search page also has an RSS feed, so doing a search for "" will get you a list of all pages sorted by last modified date (change the sort order if you like). That search page will contain your preferred RSS feed.

Will applications need to enable Lion's Auto Save feature?

After accidentally stepping on the power strip today and losing about a half hour of work (I know I know, save, save, save) I am chomping at the bit to get Lion with Auto Save. As a professional writer, if that was the only new feature it would be worth the upgrade for me. But at $30? Biggest no brainer ever. That is a truly revolutionary feature for me.
Does anybody know if applications will need to enable or program in the Auto Save functionality or if it will work with existing applications out of the box?

Apple's system wide, "you don't have to do anything but do your work" Auto Save is to Word's auto save like Ragu is to my grandpa's homemade gravy.
No, Apple didn't invent auto save (neither did Microsoft, BTW) just like they didn't invent a lot of other things they do. However, just like Time Machine did for incremental backups, Auto Save and Versions will take this concept to new levels of elegance and usability.
The fact that it's system wide and works seamlessly with Versions so that I can scroll back and easily grab previous versions of my document is what makes this revolutionary.
Linc: I don't doubt you at all (I'm sure you're right), I just hope you're wrong. Either way, it is a feature well worth even the previous $130 upgrade price, let alone the measly $30 price tag of Lion.

Auto-Save did not work... Any way to back up my project?

Hello,
I started a project this morning, a set of interviews shot on Canon 5DII. The footage is about 4 hours. One of the settings was to auto-save every 20min to maximum 5 versions. After about 14 hours of work Premiere just crashed. I got the gray screen and the message to hold down the power button of my mac. After restart I opened the project and the time-line looks exactly how I left it at the lunch brake. Since than I saw several times the auto-save performed, definitely more than 5.
Anybody experiencing same problem? Any way to back up my project? I'm desperate, tomorrow afternoon the interviews must be online on several sites.
Thank you.

That said...I have never heard of PPRo Auto saves .".saving projects all the same and to old to be used"
Neither have I.
I cannot find the thread I recall fairly recently regarding how auto-save is operating. But I believe it was demonstrated that auto-save will save even if edits have not been made. So, for example, with preferences of saves every 5 minutes to a max of 5 could produce a bunch of saves all the same. (They wou ld not be "too old," however.
Hunt recently linked to an article (http://forums.adobe.com/thread/477920?tstart=60) he put in the PE forum that includes this at the end:
* It has come to my attention that as of PrPro CS3, things have changed with Auto-Save. One does not need to do an initial Save to start Auto-Save, but if left Open, though no editing is being done, the Auto-Save will keep on overwriting the files at the set interval, say every 5 mins.. What this means is that if you leave a Project Open for 25 mins., have the number of Auto-Saves at the default of 5 and the default of every 5 mins., you will have 5 copies of the same Project file. I do not know what Adobe was thinking here, as Auto-Save should not be active, if no editing is being done. I often have a Project Open, but am working in PS, AI, or Encore, so there is no editing being done in PrPro, but there soon will be. I do not want all previous Auto-Saves being overwritten with the same exact file. With PrPro CS3 or higher, I strongly recommend that one does a lot more Save_As and Save_As_a_Copy, than in previous editions, or they might be in for a rude surprise, if they went to lunch, or just left the Project Open for a half-hour.
See that - and the moral of the story? Don't EVER go to lunch before your project is finished!

OIM 11g R2 - SOA error with Auto Approval

Hi,
I am trying to provision a resource through catalog wizard as an end user .I have created both Operational Level and Request level approval policies with Auto Approval Enabled.The RequestID is getting generated but I am getting the following error in screen
[Security:090304]Authentication Failed: User SOAAdminPassword javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User SOAAdminPassword denied
May I know where should I go and change the SOAAdmin Password ?.Thanks.

I've run into the same error with oim 11gr2 bp04:
<Mar 18, 2013 11:07:09 AM CDT> <Notice> <Stdout> <BEA-000000> <<Mar 18, 2013 11:07:09 AM CDT> <Error> <oracle.soa.services.identity>
<BEA-000000> <<oracle.tip.pc.services.identity.jps.AuthenticationServiceImpl.authenticateUser()> authentication FAILED>>
<Mar 18, 2013 11:07:09 AM CDT> <Notice> <Stdout> <BEA-000000> <<Mar 18, 2013 11:07:09 AM CDT> <Error> <oracle.soa.services.identity>
<BEA-000000> <<.> Identity Service Authentication failure.
Identity Service Authentication failure.
Either the user name or password is incorrect. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.
ORABPEL-10528
Identity Service Authentication failure.
Identity Service Authentication failure.
Either the user name or password is incorrect. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.
     at oracle.tip.pc.services.identity.jps.JpsProvider.authenticateUser(JpsProvider.java:2337)
Caused By: javax.security.auth.login.LoginException: [Security:090304]Authentication Failed: User SOAAdminPassword javax.security.auth.login.FailedLoginException:
[Security:090302]Authentication Failed: User SOAAdminPassword denied
     at oracle.security.jps.internal.jaas.module.authentication.JpsUserAuthenticationLoginModule.login(JpsUserAuthenticationLoginModule.java:71)
     ...Did you find what the issue is? I'm finding scant information about this user named "SOAAdminPassword" (who makes up these usernames :-/).

[OIM] Error in Direct Provisioning (with auto save form) - GTC DB App Table

Similar Messages

Maybe you are looking for