OIM Provision Users to diffrent OU's

I was trying to see how we could provsion users to diffrent OU's . As of now when I try to create users and they are being provisioned into default User container. I was trying to find out where exactly will it be pulling up the OU information from. (I belive it is from the adapter file.)So that I can change the same so that users will be populated to different OU's accordingly.

What user user637654 recommended is what is supported out of the box.
In many cases it simply isn't enough to meet the requirements. In that case you need to create a custom AD create user task. We have done this for a number of customers and the main problem is usually to find the transform between the information that you have available (information about the user from your trusted source) and the OU location in AD.
One option if you have requested based provisioning is to include the OU on the object form and let the requester pick the OU. Not always appropriate but can sometimes be a viable option.
Hope this helps
/M

Similar Messages

How to provision users to diffrent OU in OIM 11g(OIM configured with LDAPS)

HI All,
we have a requirment to create users in diffrent OU in OID based on the type of the user.
During user creation, if we select usertype as Employee then user should be created under OU=EMployee,dc=domain,dc=com, if we select usertype as Contractor then user should be created under OU=Contractors,dc=domain,dc=com. how do i configure this? i treid modifiying LDAP container rules, but it dint work, can you please help me on this.
Thanks

In addition to setting LDAP container rules, i had to create an eventhandler and use another field (locality name for example) to make this work. If you have more than one ldap container there is bug in OIM code becuase of which some containers don't get set. Meaning if you have one user type mapped to unique ldap container you will be fine with the suggestion above. If you have multiple user types mapped to one ldap container, and you have many such combinations some ldap containers don't get set. the following code worked for me:
     if (userRole != null) {
          if (userRole.equalsIgnoreCase("Full-Time Employee") ||
                                        userRole.equalsIgnoreCase("Part-Time Employee") ||
                                        userRole.equalsIgnoreCase("Consultant") ||
                                        userRole.equalsIgnoreCase("Internal System Accounts")) {
          userType = "Internal";
          } else if (userRole != null && userRole.equalsIgnoreCase("OIM System Accounts")) {
          userType = "System";
          } else {
          userType = "External";
     orchestration.addParameter("Locality Name", userType);
Hope this helps,
Prasad.

How can OIM provision users with same Display Name in AD?

I can create users with same First Name, Middle Name and Last Name (same Display Name) in OIM if they have different UserId.
But I can not provision two users with same Display Name to one Organization Unit in AD, the resource provisioning shows
Status: Rejected
Response: AD user already exists
Can AD be configured to create users with same Display Name (different UserId) in one OU, or would I have to create logic in OIM to modify the display name so it gets accepted by AD?
Thanks!

Thanks Nitesh. Also, I can create the user with same DN in different OU's, not in same OU.
I agree once we determine that same cn exists in one OU , I can modify the display name by appending a number at the end or something. I understand the logic but I need more details on how to specify this logic in the pre-pop adapter, can you please share more details.
Thanks a lot!

Unable to provision users in OIM 11.1.1.3 using DBUM connector 9.1.0.4.

Hi,
I installed OIM 11.1.1.3 and i am able to access it.
Now i am trying to provision an user to a database table using "User Database Management connector". I worked on it by using version 9.1.0.4, but i failed to provision the users.
I am getting an error message that "Error occurs while initializing parameters in initutil".
Can anybody please help me how to solve this issue.
Thanks,
SRI.

Thank you for your reply.
I am trying to test for provisioning users, could you please suggest me the version for the AD or any other connector that is used to deploy with the OIM 11.1.1.3.
Thanks,
SRI.
Edited by: Sri Kishore on Aug 25, 2010 11:29 PM

Can't Provision user from OIM to AD (manaul provis

can't Provision user from OIM to AD (manual provisioning ) failed with Error
the following is connector server log
==========================================
DateTime=2012-07-18T08:39:32.8713100Z
ConnectorServer.exe Error: 0 : System.ArgumentNullException: Value cannot be null.
Parameter name: Parameter 'uid' must not be null.
at Org.IdentityConnectors.Common.Assertions.NullCheck(Object o, String param)
at Org.IdentityConnectors.Framework.Impl.Api.Local.Operations.UpdateImpl.ValidateInput(ObjectClass objclass, Uid uid, ICollection`1 attrs, Boolean isDelta) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\ApiLocalOperations.cs:line 1568
at Org.IdentityConnectors.Framework.Impl.Api.Local.Operations.UpdateImpl.Update(ObjectClass objclass, Uid uid, ICollection`1 replaceAttributes, OperationOptions options) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\ApiLocalOperations.cs:line 1365
at Org.IdentityConnectors.Framework.Impl.Api.Local.Operations.ConnectorAPIOperationRunnerProxy.Invoke(Object proxy, MethodInfo method, Object[] args) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\ApiLocalOperations.cs:line 244
at ___proxy1.Update(ObjectClass , Uid , ICollection`1 , OperationOptions )
at Org.IdentityConnectors.Framework.Impl.Server.ConnectionProcessor.ProcessOperationRequest(OperationRequest request) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\Server.cs:line 609
DateTime=2012-07-18T08:39:37.8558126Z
1- iam using OIM 11.1.1.5 / applied patch p13704894_111150
2- this the target system LDAP on Windows Server 2008 R2 Entrprise version 6.1(7601) , Service Pack 1
3- and the connector server and connector version , activedirectory-11.1.1.5.0 , Connector_Server_111150
i noticed that for any user i create on OIM objectGUID is 0 , i can read groups and organizations from LDAP with no errors
please support

This issue is coming because your object guid is not getting synchronized properly. Login to design console and open AD User form. Go to pre-populate tab. Open prepop adapter for User Principal name. Here bydefault IT resource name passed is Active Directory whereas you should have your IT server name which I think bydefault is AD Server. In the Mapto section select Process data and qualifier field will have AD server. Click on save button. Save your form.
Retry your test case now. This will resolve your problem.
regards,
GP

Provisioning: Users from OIM to Active Directory

Dear Experts!
I am trying to setup provisionig from OIM to AD. I just want to provision Users from OIM to AD.
I am going through this documentation/tutorial:
http://download.oracle.com/docs/cd/E11223_01/doc.910/e11197/deploy.htm#insertedID0
i also read this:
http://www.oracle.com/technology/obe/fusion_middleware/im1014/oim/ad_provision/prov2ad.htm
But it just won't work. The provisioned resource get's always status rejected in the (To-Do List --> Open Tasks).
Then i tried to test the connection to AD using this documentation:
http://download.oracle.com/docs/cd/E11223_01/doc.910/e11197/testing.htm
And i get this error in the console:
http://img689.imageshack.us/img689/3190/errorq.png
The IT resource: ADITResource looks like this:
Remote Manager Prov Script Path:
Admin FQDN: [email protected]
Use SSL: no
Remote Manager Prov Lookup: AtMap.AD.RemoteScriptlookUp
Target Locale TimeZone: GMT
Port Number: +636+
AtMap ADUser: AtMap.AD
ADGroup LookUp Definition: Lookup.ADReconciliation.GroupLookup
isUserDeleteLeafNode: no
Allow Password Provisioning: no
UPN Domain: domain-test.local
AtMap ADGroup: AtMap.ADGroup
ADAM LockoutThreshold Value: +5+
isADAM: no
Admin Password: *********
Invert Display Name: no
Root Context: dc=domain-test,dc=local
Server Address: testing-server.domain-test.local
Could be the problem that i don't use SSL? I don't set Passwords in AD, i have read that then i don't need SSL...?
I am new to OIM, so your response is greatly appreciated!
Thank you very much in advance!

Hello again Raj!
Thank you for your answer. You have always good ideas...
*1) Whats the response that you are getting from AD for this operation. Check this as following:*
Go to Users->UserABC->(Resource Profile from Drop down)->(Click your particular resource instance)->(Select the rejected task precisely "Create User")_
I get this on the Task Name - Create User:
Status:Rejected
Response: Please Select the Organization or Container Name from Organization Name Lookup
Response Description: Please Select the Organization or Container Name from Organization Name Lookup
But i can't get to populate the Organization Name on the user form, because there are no values available.
Under Error Details there is nothing.
*2) If your IT resource parameters are incorrect, you will get a connection error in logs. Your port information is correct, it has to be Port->389 and Use SSL-no*
I have created a new IT resource without SSL. Just to test the connection to AD. It works because I get “Successfully established connection to the AD_Test_without_SSL.”
Bellow is my NEW configuration for the IT Resource.
IT Resource Name:* AD_Test_without_SSL
IT Resource Type:* AD Server
ADAM LockoutThreshold Value:* 5
ADGroup LookUp Definition:* Lookup.ADReconciliation.GroupLookup
Admin FQDN:* [email protected]
Admin Password:* *********
Allow Password Provisioning:* no
AtMap ADGroup:* AtMap.ADGroup
AtMap ADUser:* AtMap.AD
Invert Display Name:* no
isADAM:* no
isUserDeleteLeafNode:* no
Port Number:* 389
Remote Manager Prov Lookup:* AtMap.AD.RemoteScriptlookUp
Remote Manager Prov Script Path:*
Root Context:* dc=domain-test,dc=local
Server Address:* testing-server.domain-test.local
Target Locale TimeZone:* GMT
UPN Domain:* domain-test.local
Use SSL:* no

Unparseable Date when Provisioning User from OIM to EBS HR

Hi expert,
I'm integrating E-Business Application using 'Oracle EBS HR Foundation User Management Connector version 9.1.0.4.0
with OIM version 11.1.1.5.0 (plus BP06) and I also set value of 'Manage HR record' to 'Yes'.
While provisioning user to EBS. It has some error occur about 'Unparseable date: "2013-05-24 00:00:00" '
############ ERROR ###########
[OIMCP.EBSUM] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: da74dbf2fbfe8d95:7819efa0:13eca22628a:-8000-0000000000012282,0] [APP: oim#11.1.1.3.0] oracle.iam.connectors.ebs.usermgmt.integration.EBSUserManagement : updatePerson
[2013-05-24T09:50:36.911+07:00] [wls_oim1] [ERROR] [] [OIMCP.EBSUM] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: da74dbf2fbfe8d95:7819efa0:13eca22628a:-8000-0000000000012282,0] [APP: oim#11.1.1.3.0] Failed to create employee
[2013-05-24T09:50:36.912+07:00] [wls_oim1] [ERROR] [] [OIMCP.EBSUM] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: da74dbf2fbfe8d95:7819efa0:13eca22628a:-8000-0000000000012282,0] [APP: oim#11.1.1.3.0] Description : Unparseable date: "2013-05-24 00:00:00"
[2013-05-24T09:50:36.912+07:00] [wls_oim1] [ERROR] [] [OIMCP.EBSUM] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: da74dbf2fbfe8d95:7819efa0:13eca22628a:-8000-0000000000012282,0] [APP: oim#11.1.1.3.0] java.text.ParseException: Unparseable date: "2013-05-24 00:00:00"
May it has some bug?
Thanks
Noraset.

Could you please write down what you have given in ITResource?
May be you are giving some wrong value in IT Resource.
Have you made chnages to OID Prov Lookup. If no check this link :
Re: Problem with OID Connector
And give a try !

Problem in provisioning user from oim to active directory using ssl

hi,
problem in provisioning user from oim to active directory using ssl i am getting following error while provisioning user to AD.
15:18:12,984 ERROR [ADCS] Communication Errorsimple bind failed: 172.16.30.35:636
15:18:12,984 ERROR [ADCS] The error occured in tcADUtilLDAPController::connectTo
AvailableAD():simple bind failed: 172.16.30.35:636
15:18:13,015 ERROR [SERVER] Class/Method: tcProperties/tcProperties encounter so
me problems: Must set a query before executing
com.thortech.xl.dataaccess.tcDataSetException: Must set a query before executing
at com.thortech.xl.dataaccess.tcDataSet.checkExecute(Unknown Source)
at com.thortech.xl.dataaccess.tcDataSet.executeQuery(Unknown Source)
at com.thortech.xl.dataobj.tcDataSet.executeQuery(Unknown Source)
at com.thortech.xl.dataaccess.tcDataSet.executeQuery(Unknown Source)
at com.thortech.xl.dataobj.tcDataSet.executeQuery(Unknown Source)
at com.thortech.xl.dataobj.util.tcProperties.<init>(Unknown Source)
at com.thortech.xl.dataobj.util.tcProperties.initialize(Unknown Source)
at Thor.API.tcUtilityFactory.getLocalUtility(Unknown Source)
at Thor.API.tcUtilityFactory.getUtility(Unknown Source)
at com.thortech.xl.integration.ActiveDirectory.tcADUtilLDAPController.co
nnectToAvailableNextAD(Unknown Source)
at com.thortech.xl.integration.ActiveDirectory.tcADUtilLDAPController.se
archResultPageEnum(Unknown Source)
at com.thortech.xl.schedule.tasks.ADLookupRecon.performReconciliation(Un
known Source)
at com.thortech.xl.schedule.tasks.ADLookupReconTask.execute(Unknown Sour
ce)
at com.thortech.xl.scheduler.tasks.SchedulerBaseTask.run(Unknown Source)
at com.thortech.xl.scheduler.core.quartz.QuartzWrapper$TaskExecutionActi
on.run(Unknown Source)
at Thor.API.Security.LoginHandler.jbossLoginSession.runAs(Unknown Source
at com.thortech.xl.scheduler.core.quartz.QuartzWrapper.execute(Unknown S
ource)
at org.quartz.core.JobRunShell.run(JobRunShell.java:203)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.j
ava:520)
can any one help.
Thanks and Regards,
praveen,

Are you able to connect to AD over SSL through some LDAP Browser ?
Check the validity of Certificate ?
Does your certificate appear in the list ?

OIM Provisioning - Error during OID Create User Task

Hi,
I am getting the following error during OIM Provisioning to OID (Create User Task).
I added few more attributes to the OID_USR form and then to the "OID User" Process Definition.
Also, I added the Code/Decode Key Values in AttrName.Prov.Map.OID.
DEBUG,08 Dec 2010 21:19:04,547,[XELLERATE.SERVER],Class/Method: tcDataBase/readPartialStatement entered.
ERROR,08 Dec 2010 21:19:04,555,[XELLERATE.ADAPTERS],Class/Method: tcAdapterMappingUtility/getRunTimeVariable Mappings encounter some problems: No data available for variable having key = 350
ERROR,08 Dec 2010 21:19:04,555,[XELLERATE.ADAPTERS],Class/Method: tcAdapterMappingUtility/getRunTimeVariable Mappings encounter some problems: No data available for variable having key = 350
java.lang.Exception: No data available for variable having key = 350
Earlier, before adding these attributes, the OID Create User Task was working. So I belive this is from the newly added attributes.
Questions:
- How to identity the attribute with this key? It looks like some of the attribute values that it gets during Run Time is not populated correctly. Any suggestions?
- "key = 350"- Is there a database table that this gets stored? SPD? or anything else?
Regards
Vijay Chinnasamy

@Keviin,
I added 13 new attributes and corresponding "* Updated" Tasks.
For all these, ProcessInstanceKey is mapped to Process Data -> Process Instance.
I am going to validate the mappings again. Also, I noticed, some of the fields that I am prepopulating is not populated.
Regards
Vijay Chinnasamy

Provisioning users to AD groups in OIM 11gR2

I could use some advice on how to resolve this issue I am having.
Using the Active Directory connector (11.1.1.5) in our OIM 11gR2 development environment I can successfully provision OIM users to our AD resource. I have successfully run the org and group lookup recons, and provisioned users do go into the correction ou in AD.
However when I select which groups a user should be a member of in the ADUSERC child form (via the lookup), the user is not provisioned with the correct group membership in AD.
A separate issue is how to map the objectClass in AD in the ProvAttrMap; could anyone point me in the direction of how to go about that?
Thanks

The ObjectClass should be configured in this lookup Lookup.Configuration.ActiveDirectory
Check below
http://docs.oracle.com/cd/E22999_01/doc.111/e20347/extnd_func.htm#sthref221
4.6 Configuring the Connector for User-Defined Object Classes

URGENT: Provision users on Electronic devices like Mobile in OIM

Hi all,
How to provisioning users on Electronic devices like Mobile in OIM. Do we have connectors/adapters/forms to Provisioning it?
Regards,
Karthick

You need to implement a disconnected resource for this. No OOTB connector.

Provisioning user to AD failing after upgrading AD Connector

Hello,
I am facing issue while provisioning user to AD after i upgraded AD connector from 9.1.1.5 to 9.1.1.7, upgradtion successfull message was shown & when i tried to provision a user to AD it shows CreateUser task is rejected & following is the response shown
Response: com.thortech.xl.integration.ActiveDirectory.tcUtilADTasks.createADorADAMUser(java.lang.String, bool
Response Description: Unknown response received .
Error Details
Setting task status... "com.thortech.xl.integration.ActiveDirectory.tcUtilADTasks.createADorADAMUser(java.lang.String, bool" does not correspond to a known Response Code. Using "UNKNOWN".
Above response means its not able to find CreateAD which creates user in AD ?
Thanks,
Rahul
Edited by: Rahul Shah on Jun 12, 2012 9:52 PM

1- Follow the Postupgrade Steps mentioned in the connector documentation.
2- Check if connector has been upgraded successfully and also verify active version from OIM Database table - CIH
3- Check the jar file modified date in OIM database table i.e. oimhome_jars; it should be same as connector modified date in DB table CIH.
4- Modified date in previous step is not correct then upload the jar file using Uploadjar utility available under <Middleware>/Oracle_IDM1/server/bin/
5- Restart OIM and test the provisioning.
Thanks,
Hardew

OIM provisioning error to Siebel

I am using the Siebel User Management connector to provision users to the Siebel CRM application. I am getting an error when provisioning users, however it is not showing up in the logs as an error. Siebel is set to DEBUG in the log file. The on screen error is the following:
Response: erroneous handlers
Response Description: Unknown response received
Error details: Setting task status... "erroneous handlers" does not correspond to a known Response Code. Using "UNKNOWN".
I have followed the instructions in the Siebel User Management connector documentation. The Siebel environment uses DB authentication so we are only trying to provision a user directly to the Siebel database.
*DEBUG,12 Jan 2011 15:17:00,348,[XELLERATE.PREPAREDSTATEMENT],Class/Method: tcDataBase/writeStatement: Param (string/clob): 4 is set to Setting task status... "erroneous handlers" does not correspond to a known Response Code. Using "UNKNOWN".*
DEBUG,12 Jan 2011 15:17:00,348,[XELLERATE.PREPAREDSTATEMENT],Class/Method: tcDataBase/writeStatement: Param (Timestamp): 5 is set to 2011-01-12 15:17:00.347
DEBUG,12 Jan 2011 15:17:00,348,[XELLERATE.PREPAREDSTATEMENT],Class/Method: tcDataBase/writeStatement: Param (ByteArray): 6 is set to java.io.ByteArrayInputStream@299552d
INFO,12 Jan 2011 15:17:00,350,[XELLERATE.PERFORMANCE],Query: DB: 2
DEBUG,12 Jan 2011 15:17:00,350,[XELLERATE.AUDITOR],Class/Method: AuditEngine/getAuditEngine entered.
DEBUG,12 Jan 2011 15:17:00,350,[XELLERATE.SERVER],Class/Method: tcDataBase/readPartialStatement entered.
Has anyone encountered anything like this? Thanks for your help.
OIM 9.1.0
Siebel 8.1.1
Siebel User Management Connector 9.0.4

Hi,
Are you able to resolve this issue. I am facing a similar issue.
Your guidance, will be handy.
Regards
Karan

Error on writing a connector using WSIF to provision users.

Hello All,
I am writing a connector to provision users using WSIF. Everything works great through my IDE (eclipse on Windows XP), but when I drop the jar, map the adapter (using OIM 9.0.3, RH4, and weblogic 8.1 SP6) and invoke a process task I get the following error:
The WSIFDefaultMapper class exists in the wsif.jar file and as far as I can tell, only one instance of that class file exists (did a grep on all jar files).
Any pointers will be appreciated.
java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
Caused by: org.apache.wsif.WSIFException: Unable to create new mapper; nested exception is:
java.lang.ClassNotFoundException: org.apache.wsif.mapping.WSIFDefaultMapper
at org.apache.wsif.mapping.WSIFMapperFactory.newMapper(WSIFMapperFactory.java:107)
at org.apache.wsif.mapping.WSIFMapperFactory.newMapper(WSIFMapperFactory.java:52)
at org.apache.wsif.base.WSIFServiceImpl.overrideMapper(WSIFServiceImpl.java:1106)
at org.apache.wsif.base.WSIFServiceImpl.init(WSIFServiceImpl.java:938)
at org.apache.wsif.base.WSIFServiceImpl.<init>(WSIFServiceImpl.java:299)
at org.apache.wsif.base.WSIFServiceFactoryImpl.getService(WSIFServiceFactoryImpl.java:274)
at com.netapp.webservice.DynamicInvoker.invokeMethod(DynamicInvoker.java:213)
at com.netapp.webservice.DynamicInvoker.WSIF(DynamicInvoker.java:130)
... 56 more
Caused by: java.lang.ClassNotFoundException: org.apache.wsif.mapping.WSIFDefaultMapper
at weblogic.utils.classloaders.GenericClassLoader.findClass(GenericClassLoader.java:199)
at weblogic.utils.classloaders.ChangeAwareClassLoader.findClass(ChangeAwareClassLoader.java:61)
at java.lang.ClassLoader.loadClass(ClassLoader.java:289)
at java.lang.ClassLoader.loadClass(ClassLoader.java:235)
at weblogic.utils.classloaders.GenericClassLoader.loadClass(GenericClassLoader.java:224)
at weblogic.utils.classloaders.ChangeAwareClassLoader.loadClass(ChangeAwareClassLoader.java:41)
at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:302)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:219)
at org.apache.wsif.mapping.WSIFMapperFactory.newMapper(WSIFMapperFactory.java:100)
... 63 more
com.thortech.xl.dataobj.util.tcAdapterTaskException: Unable to create new mapper; nested exception is:
java.lang.ClassNotFoundException: org.apache.wsif.mapping.WSIFDefaultMapper
at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpNTAPSERVICENOW.INSERT(adpNTAPSERVICENOW.java:108)
at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpNTAPSERVICENOW.implementation(adpNTAPSERVICENOW.java:50)
at com.thortech.xl.client.events.tcBaseEvent.run(Unknown Source)
at com.thortech.xl.dataobj.tcDataObj.runEvent(Unknown Source)
at com.thortech.xl.dataobj.tcScheduleItem.runMilestoneEvent(Unknown Source)
at com.thortech.xl.dataobj.tcScheduleItem.eventPostInsert(Unknown Source)
at com.thortech.xl.dataobj.tcDataObj.insert(Unknown Source)
Thanks,
Sunny
Edited by: user11989584 on Dec 1, 2009 4:36 PM

I have narrowed this down to the following (some of this is a repetition, I am copying and pasting my post from a WSIF forum):
I am using wsif wsif-2.0.1_IB3 to connect to a webservice to create user accounts. Everything works great in Eclipse.
When I deployed my jars (application jars, wsif and dependencies) to weblogic 8.1 sp6 and generate a task through OIM that calls this adapter, I run into the following error:
org.apache.wsif.WSIFException: Unable to create new mapper; nested exception is:
java.lang.ClassNotFoundException: org.apache.wsif.mapping.WSIFDefaultMapper
Caused by: java.lang.ClassNotFoundException: org.apache.wsif.mapping.WSIFDefaultMapper
at weblogic.utils.classloaders.GenericClassLoader.findClass(GenericClassLoader.java:199)
at weblogic.utils.classloaders.ChangeAwareClassLoader.findClass(ChangeAwareClassLoader.java:61)
at java.lang.ClassLoader.loadClass(ClassLoader.java:289)
at java.lang.ClassLoader.loadClass(ClassLoader.java:235)
at weblogic.utils.classloaders.GenericClassLoader.loadClass(GenericClassLoader.java:224)
at weblogic.utils.classloaders.ChangeAwareClassLoader.loadClass(ChangeAwareClassLoader.java:41)
at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:302)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:219)
at org.apache.wsif.mapping.WSIFMapperFactory.newMapper(WSIFMapperFactory.java:100)
The WSIFMapperFactory.class exists in wsif.jar file and makes a call to newMapper but is unable to load org.apache.wsif.mapping.WSIFDefaultMapper that is in the same wsif.jar file.
public static WSIFMapper newMapper() throws WSIFException {
return newMapper(false);
The line that it fails on is Class c = Class.forName(mapperClassNameBuffer.toString(), true, Thread.currentThread().getContextClassLoader());
from the following code snippet in WSIFMapperFactory.class file
try {
Class c =
Class.forName(
mapperClassNameBuffer.toString(),
true,
Thread.currentThread().getContextClassLoader());
return (WSIFMapper) c.newInstance();
} catch (ClassNotFoundException cnf) {
throw new WSIFException("Unable to create new mapper", cnf);
} catch (Exception e) {
throw new WSIFException("Unable to create new mapper", e);
Any ideas on how to fix this?
I modified some of the WSIF code to try using the following:
Class c = Thread.currentThread().getContextClassLoader().loadClass(mapperClassNameBuffer.toString()); but it had the same effect.
Again, the same code path works great standalone in Eclipse.
Any help/pointers would be appreciated.

Question on LDAPSync Post Enable Provision Users to LDAP task

Hi All,
Can you please clarify my doubt on
I created a user "testaccount" in OIM and via ldapsync, it gets created in OID.
Now, I manaully deleted that user "testaccount" in OID and wants to recreate the user account again in OID. Will this schedule task "LDAPSync Post Enable Provision Users to LDAP" solve my purpose or not?
Regards,
Sunny

I would not expect the account to be re-created. As far as OIM concerned it is in OID, as it was reconciled from OID, and OIM has a record of it's DN and GUID. If OIM later sees the account as disappeared it just treats this as an operation error, and does not update itself to say the account is deleted.
Have you run the LDAP Sync user deletion reconciliation job? If so it should have deleted the user in OIM. You can then create a new user with the same name (but different logon unless you set the system property to allow logon re-use), to create a new OID account.
If you do want to create the same user in OID without deleting and recreating the OIM user, via this post-create scheduled it is possible, but involves messing about with the OIM user record in the database to cleat out its old DN and GUID. In that way OIM thinks the user is not in LDAP and should try to recreate.

OIM Provision Users to diffrent OU's

Similar Messages

Maybe you are looking for