OIM single use password loop

We are provisioning users in Sun JDS LDAP using OIM 11g. We have an issue when a user changes their password in OIM. I wonder if anyone has any suggestions of how to fix it as I can't believe that we're the only ones to come across it?
If the user changes their password in OIM the code that our consultant has written will push that password change down to LDAP. There is a password policy in LDAP that states that if the password was changed by an administrator, not the user themselves, then the password is single use and needs to be changed. This causes our (home grown) login code to redirect the user back to OIM to change their password and so end up in a loop they cannot get out of.
We talked to the LDAP admin team about changing the policy but they don't want to do that as it's a security risk (admin remembers the password he assigned to the user ...).
Is this normal? Any workarounds?
Would this work differently when we move to OAM?

I would have done it in this way: Assuming you have decent knowledge of using existing components of OOTB connector for re-usability. Also I have never tried this, its just an approach which could possibly work.
- The only way for an end user to change its own password in OIM is via self-service which means the tcUtilityFactory would be instantiated by the user itself. If that is the case then you can obtain the User ID in the pre-insert entity adapters/plugin. Now when the password reset operation is being done, you can check the User ID of the Logged In user and the Target User and take a decision whether it was the user itself or some other admin.
- If it was some other admin then you can set the Force Password Change at next Logon check-box in the User Profile to true.
- Now modify the Change User Password task to use the IT Resource connection credentials if that check box is selected to create a connection OR use the credentials form the Process Form if that check box is not selected.
This way the connection to the LDAP would be done via the user itself if it was a self-service password reset and your LDAP Policy would have no complaints.
Assumption The user has the permissions to establish a JNDI connection with SDS and modify its own account which I am sure would be there.
Thanks
SRS

Similar Messages

  • ITunes stuck in infinite podcast password loop!

    I have run into a very troublesome bug with podcasts that has unfortunately made iTunes completely unusable.
    Here's what happens:
    1. A few days ago, I subscribed to a podcast that requires a paid subscription ("http://novamnetwork.com/podcasts/malloy/malloy-lo.xml").
    2. I tried to get the latest episode from that podcast.
    3. It presented me with a password dialog, saying "To access this site, you need to log in to area "Nova-M Radio Premium Access" on novamnetwork.com".
    4. I pressed "cancel".
    5. The password dialog came up again.
    6. Repeat steps 4 - 5 ad infinitum.
    The trouble is, now every time I launch iTunes, it immediately resumes this behavior. There's no way to use iTunes because the UI locks into this password loop as soon as it launches, and every time the dialog is up, the rest of the UI is disabled. To make things worse, reinstalling iTunes doesn't change anything.
    I'm sure that if I deleted my database it would stop, but I'd rather not do that...
    Help! I want -- no, strike that -- I need -- my iTunes back!
    Thanks to anyone who can help ...
    R
    PowerBook G4 17 Mac OS X (10.4.9)
    MacBook . Intel Core Duo Mac OS X (10.4.9)

    Hello there, markwco10.
    The following Knowledge Base article offers some great, in-depth instruction on troubleshooting the issue you're having with your iOS device:
    iOS: Not responding or does not turn on
    http://support.apple.com/kb/TS3281
    If a single application is not responding or stops responding when it opens, you can force it to close.
    If the device is unresponsive or if certain controls aren't working as expected,  restart your device.
    If the device remains unresponsive or does not turn on (or power on),  reset your device.
    If there is no video or if the screen remains black, verify that the device has enough charge to turn on:
    If you are using an iPad, ensure that it's connected to the USB Power Adapter supplied with the device.
    Let it charge for at least twenty minutes, then see if it starts normally.
    If there is no image on the screen, press the Sleep/Wake button to attempt to wake the device.
    If the screen displays a red battery icon, continue charging the device until the battery is fully charged. Learn more about charging iPhone and iPod touch, or iPad.
    If the above steps do not resolve the issue, or the if the screen remains black or shows a persistent Apple logo, try restoring with iTunes:
    Connect the device to your computer and open iTunes.
    If the device appears in iTunes, select and click Restore on the Summary pane. Learn more about restoring iOS software.
    If the device doesn't appear in iTunes, try to force the device into recovery mode, and then restore it.
    If the above steps do not resolve the issue, contact Apple.
    Thanks for reaching out to Apple Support Communities.
    Cheers,
    Pedro.

  • Questions about parallel and series sturcture in SCTL (single clock timed loop) in FPGA VI

      I am using LV 8.2.
      I have wriiten a FPGA VI, in this VI, there are 3 filters inside the SCTL (single clock timed loop) (I use the shift register to be the effect of unit delay). Would I save the resources of the FPGA used (such as slices and LUT) in the compliation report if I use 3 SCTL ( 1 SCTL contain 1 filter)  and cascade them in series?
      Thank you! 

    Sorry, I am afraid that you have misunderstood my meaning.
    Here is the method you suggested before:
      I mean I use the shift registers attached in the while loop, not in the SCTL. The number of shift registers used will not be decreased when we increase the number of SCTL in the second plate of the flat sequence structure.  Totally , there are 6 pairs shift registers for 3 filters (1 filter needs 2 pairs). I mean I put the calculation parts, such as b0*x[n]+b1*x[n-1]+b2*x[n-2] inside the SCTL ( the operations of multiplication and add). Instead of putting 3 filters numeric operation part in one SCTL. will we reduce the resources used if we use 1 SCTL to do the operation parts of 1 filter? As the code inside each SCTL will be reduced.
      Maybe you tell me if such approach will reduce the reosources used? Or there is no difference?
      Thank you!

  • How do I get an XY Chart to display properly while using embedded loop

    s to periodically read multiple channels of similar data? (multi-Y versus specified time) The plot just becomes a point or a single plot of all values taken at one scanning of all channels. I want multiple plots over time updated at the time of scanning.I have also stored my data in a daily text file that is tab delimited. The text files consists of a row of text column headers, a blank row and then rows of data. The data rows are mixed data types. The first column is a date/time such as Mar 1, 2002 12:01 pm. The remaining columns are numeric data. I can't seem to get my data to plot properly in an XY chart from memory and am having problems parsing the data with mixed data types in the data r
    ows. The format I am using works great for viewing the history files in Excel.
    When I plot the data, I either get a single point or a a series of points for a single reading of all channels or I get a line connecting all data for that single scan reading. What am I doing wrong? At this point, I don't care if I read the data from the file to plot it or if I can just get Labview to plot correctly as the data is gathered without going to the history file.
    As noted in the summary question, I have embedded loops in my applicaiton. I have a while-loop that determines the scan rate and keeps the program running until it is turned off. Inside of that, I have a for-loop (in a subVI) which scans all my data channels.
    Thanks for your help.

    s to periodically read multiple channels of similar data? (multi-Y versus specified time) The plot just becomes a point or a single plot of all values taken at one scanning of all channels. I want multiple plots over time updated at the time of scanning.XY plots expect a cluster containing two 1D arrays for the X and Y
    coordinates of the individual points. If you want multiple plots you can
    supply an array of these clusters but you have to resupply the "x" array
    for each of them.
    Hope that helps,
    Rudolf
    Adrien wrote:
    : How do I get an XY Chart to display properly while using embedded
    : loops to periodically read multiple channels of similar data? (multi-Y
    : versus specified time) The plot just becomes a point or a single plot
    : of all values taken at one scanning of all channels. I want multiple
    : plots over time updated at the time of scanning.
    : I have also stored my data in a daily text file that is tab delimited.
    : The text files consists of a row of text column headers, a blan
    k row
    : and then rows of data. The data rows are mixed data types. The first
    : column is a date/time such as Mar 1, 2002 12:01 pm. The remaining
    : columns are numeric data. I can't seem to get my data to plot
    : properly in an XY chart from memory and am having problems parsing the
    : data with mixed data types in the data rows. The format I am using
    : works great for viewing the history files in Excel.
    : When I plot the data, I either get a single point or a a series of
    : points for a single reading of all channels or I get a line connecting
    : all data for that single scan reading. What am I doing wrong? At
    : this point, I don't care if I read the data from the file to plot it
    : or if I can just get Labview to plot correctly as the data is gathered
    : without going to the history file.
    : As noted in the summary question, I have embedded loops in my
    : applicaiton. I have a while-loop that determines the scan rate and
    : keeps the program running until it is turned off. Inside of
    that, I
    : have a for-loop (in a subVI) which scans all my data channels.
    : Thanks for your help.

  • Will using for loop decrease the performance

    Hi,
    Will using for loop with a query decrease the performance.
    for r_row in (select * from table) Loop
    end loop.
    This is done inside another for loop, most of the cases it returns only one value.
    will it decrease the peformance of the procedure.
    kindly advice.......
    Regards,
    Balu

    user575682 wrote:
    Will using for loop with a query decrease the performance.
    for r_row in (select * from table) Loop
    end loop.
    This is done inside another for loop, most of the cases it returns only one value.
    will it decrease the peformance of the procedure.Perhaps it is better to understand just what this PL/SQL loop construct does.
    PL/SQL is two languages. It is PL (programming logic code) like Pascal or C or Java. You can use a 2nd language inside it called SQL. The PL engine is clever enough to recognise when the 2nd language is used. And it compiles all the stuff that is needed for the PL engine to call the SQL engine, pass data to the SQL engine and get data back, etc. (compare this with the complexity of using the SQL language in Pascal or C or Java).
    So what does that loop do? The PL engine recognises the SQL SELECT statement. It creates an implicit cursor by calling the SQL engine to parse it (hopefully a soft parse) and then execute it.
    As part of the PL loop, the PL engine now calls the SQL engine to fetch the data (rows) from the cursor. With 10g and later, the PL engine is smart enough to use implicit bulk processing.
    Prior to 10g it used to fetch a row from the SQL engine, do the loop, fetch the next row, do the loop, etc. This means if there is a 1000 rows to fetch, it will call the SQL engine a 1000 times.
    With 10g and later it will fetch a 100 rows, store that in an internal buffer and then do the loop a 100 times. With a 1000 rows to fetch, it now only requires 10 bulk fetches instead of a 1000 single row fetches.
    These fetches require a context switch - as the PL engine has to step out and into the SQL engine and back, to fetch a row. This is an overhead and thus can become slow the more context switching there is.
    And this is the basics for this loop (and most other cursor loops) construct in PL/SQL.
    The ideal is to reduce the number of context switches. This is an overhead that can impact on performance.
    What about using a loop within a loop. Also "bad". This uses the outer loop to fetch data. This data is then used to drive the fetch in the inner or nested loop. So the outside loop pulls data from the SQL engine into PL variables. The inside loop pushes that very same data back to the SQL engine.
    Why? It would have been a lot faster no to pull and push that data between the loops using PL.
    It will be a lot faster doing it via SQL only. Write both loops as a single SQL statement and have the SQL engine directly drive these loops itself. This is called a JOIN in SQL. And the SQL engine can do it not only faster, but it has some froody algorithms that can be used that are even faster than a nested loop process (called merge joins, hash joins, etc).
    Bottom line. Maximise SQL. Minimise PL.*
    Do as much of your data crunching in SQL as possible. SQL is the best and fastest "place" to process data. Not PL (or Pascal/C/Java).

  • Ringtone Creation Password Loop

    I am trying to create ringtones from music purchased on iTunes but I get stuck in a password loop that just asks for the password over and over. I have updated versions of everything, and have triple checked that I am using the same account that I used to purchase the music (I only have one iTunes account).
    Has anyone else had this problem? What else have I not tried/checked??
    Thanks in advance for any help anyone can provide.

    Hey there,
    Sometimes this happens if the terms and conditions of the iTunes store agreement have changed and you haven't yet agreed to the new terms. In iTunes (at the top of the application window) click Store and go down to Sign Out. Then quit the iTunes application, wait a second or two, and open it back up. Click Store and go down to Sign In. Enter your Apple ID and password as prompted. If there are new terms you'll be prompted to agree to them at that point. Regardless of whether you're provided this option, now that you've refreshed your account's connection to iTunes, see if you can make your Ringtone.
    Hope this is helpful
    CG

  • Sir i am using datasocket read ,i am communicating with java but my problem is that bcz im using while loop to see if value has changed my labview consumes all the processors time ,sir i want a event like thing so that while loop is not in continuous loop

    sir i have given lot of effort but i am not able to solve my problem either with notifiers or with occurence fn,probably i do not know how to use these synchronisation tools.

    sir i am using datasocket read ,i am communicating with java but my problem is that bcz im using while loop to see if value has changed my labview consumes all the processors time ,sir i want a event like thing so that while loop is not in continuous loopHi Sam,
    I want to pass along a couple of tips that will get you more and better response on this list.
    1) There is an un-written rule that says more "stars" is better than just one star. Giving a one star rating will probably eliminate that responder from individuals that are willing to anser your question.
    2) If someone gives you an answer that meets your needs, reply to that answer and say that it worked.
    3) If someone suggests that you look at an example, DO IT! LV comes with a wonderful set of examples that demonstate almost all of the core functionality of LV. Familiarity with all of the LV examples will get you through about 80% of the Certified LabVIEW Developer exam.
    4) If you have a question first search the examples for something tha
    t may help you. If you can not find an example that is exactly what you want, find one that is close and post a question along the lines of "I want to do something similar to example X, how can I modify it to do Y".
    5) Some of the greatest LabVIEW minds offer there services and advice for free on this exchange. If you treat them good, they can get you through almost every challenge that can be encountered in LV.
    6) If English is not your native language, post your question in the language you favor. There is probably someone around that can help. "We're big, we're bad, we're international!"
    Trying to help,
    Welcome to the forum!
    Ben
    Ben Rayner
    I am currently active on.. MainStream Preppers
    Rayner's Ridge is under construction

  • Does anyone use MIDI loops in Logic Pro to compose music?

    Seriously, if anyone out there uses the MIDI loops to compose music in Logic, how the heck do you do it? Especially if you are also using audio loops, it seems almost impossible to me. The chord transpositions that you get from the chord track are not even to the right pitch, and the transposition behavior is different according to whether you drag the loops into the arrange area before or after putting the changes in the Chord track. The signature track is no better, as it doesn't seem to affect audio loops. So how do you get the bass loops etc. to play in the keys you want them to without going through extraordinary contortions? I looked at one of the Logic Pro books, and it said to transpose by using the transpose function in the inspector, but that only lets you transpose by octaves! Do you really go in and edit the loops by hand to transpose each note?
    Any pointers on this would be greatly appreciated.

    kent swearingen wrote:
    I looked at one of the Logic Pro books, and it said to transpose by using the transpose function in the inspector, but that only lets you transpose by octaves!
    Put the mouse pointer on top of the transpose number, which is zero, hold down the left mouse button and drag up or down to transpose by steps. At the beginning of either the getting started or Logic manual there's an explanation of the different types of mouse/key behavior, if you're not used to using Logic it's a good idea to go over these.
    Also, Logic does not always use simplified Mac conventions (thank the stars for that), as a result you have a lot more variety of data input, it varies according to the task at hand.

  • GB won't open- This is what I get... Path does not exist: /Library/Audio/Apple Loops Index  st: /Library/Audio/Apple Loops Index w/out this directory you cannot use the Loop Browser

    Path does not exist: /Library/Audio/Apple Loops Index  st: /Library/Audio/Apple Loops Index w/out this directory you cannot use the Loop Browser.  Then I get this message...
    Instrument Library Invalid
    GarageBand Ecpects a valid instrument foledr in /Libraty/Application Support/GarageBand
    Please choose a valid instrument Library folder or quit and re-install GB
    Any solutions?

    Is this a new installation of GarageBand or has it worked before on the same computer?
    Or have you transferrred your GarageBand from a different computer?
    The error message is saying, that your GarageBand installation is incomplete. There are essential foldrs missing in your system library. 
    Check, if indeed both folders are missing or if only the permissions are set incorrectly.
    Your system library (the folder "System" directly on your system drive) should have the following folders inside the folder "Audio", and they need to be readable by the system and by administrators.
    And in the folder /Library/Application Support there should be the Instrument Library.
    If these folders do not exist (or no longer exist), restore them from your backup-  If your GarageBand version is a new installation, the application may not hve been downloaded or installed completely, then reinstall GarageBand.
    What is your GarageBAnd version, and how did you install it originally?
    Regards
    Léonie

  • How do I remove an iCloud account without using password?

    How do I remove an iCloud account without using password?

    There is no way if Find my iPhone is turned on. You must know the Apple ID and password. This is Activation Lock, an antitheft feature of iOS 7. See: http://support.apple.com/kb/HT5818

  • Just replaced my iphone 4 with new 4.  restore from icloud is hung on an app I no longer use (password probably expired) how can i get the restore to move on to the next app

    just replaced my iphone 4 with new 4.  restore from icloud is hung on an app I no longer use (password probably expired) how can i get the restore to move on to the next app

    Read another post in the forum about this and it appears this app also installs a profile with a proxy service that you will have to try and delete as well. Check that out.

  • How can I tell if my software licence is a Family Pack or Single use?

    I need to work out which licence I have as my daughter has a Mac Book.  Her school provided her with iWork but take it off when she leaves in a month or so.  If I have the Family Pack I can load Pages, Keynote etc, but not if I only have Single use.

    If you still have the box or electronic receipt you could call your closest Apple Store and give them the serial # or model # and they can check it. Do you remember what you paid? Also, there are no longer any Family Packs with Lion, but I see your sig says Snow Leopard.

  • How do i sweep two voltage at the same time by using for loop ?

    Hello, Can anyone help me on this topic ?
    My problem is to sweep Vds and Vgs as same time vs Id in MOSFET by using for loop. I also use the Agilent power supply source. Let me tell a litle bit about what i'm doing. For different value of Vds, i will get Vgs vs Id curve. (The x axis is Vgs, the y-axis is Id).
    I started to create two for-loop, the inner to sweep Vgs, and the outer one to sweep Vds. My problem is don't know how to connect all the wire in  the for loop.
    In the for loop i saw N, i icon. Suppose I have the two variable for Vgs such as Vgs start and Vgs_stop. Should the Vgs_start( or Vgs_stop) be connected to N or leave it in the for_loop ?
     for example: I want to sweep Vgs from 0(for Vgs_start)  to  5(Vgs_strop) V, and the step increment is .5V how do i connect these variables in the for loop ?
    Thank you for your time
    Ti Nguyen

    It is easier to use a while loop.  Dennis beat me to the punch.  Here is my solution:
    You can remove the flat sequence structure if you use Error In and Error Out to ensure the execution flow will occur in the proper order.  Be sure to include the delay time in the loop so that your vi doesn't hog all the CPU time.
    Message Edited by tbob on 10-17-2005 01:00 PM
    - tbob
    Inventor of the WORM Global
    Attachments:
    RampVoltage.PNG ‏8 KB

  • OIM 11g using too much memory and not releasing it when shutting down

    Hello,
    we have a problem with OIM 11g using too much memory (about 5gb) and it's not releasing it at shutdown (4gb still used).
    We are using a VM with RedHat Linux 5.6. Originally we had 4gb RAM + 2gb swap file. We installed Admin Server, OAM, OIM and SOA on that machine but quickly realised we couldn't run all 4 programs at once in 6gb. AdminServer could run with 2 other products, but it was a tight fit in memory.
    So we increased the RAM to 8gb (still 2gb swap file). But then our problem occured : I start the Admin Server (2.7gb total memory used), then OAM (4.6gb total memory used) and then OIM. After it started the server is now using 9.6gb of memory (~300mb of free memory) ! The problem gets even better : after I shut down everything (OIM, OAM, admin server) the "top" command show that there is still 4gb of memory used even tho nothing else is running on the server ! There is absolutely no other process (other than root stuff) running and no other users connected to the machine. After a reboot, it shows 400mb of memory used. I tried restarting the programs and it did the same thing.
    Our intuition is that there might be a memory leak or some bug in OIM that might use up almost all the free memory and it's not releasing it upon shutdown. It might have been there before we increased the memory but have not noticed it since memory was already tight.
    Anyone encountered the same problem ? Any idea ? Any suggestion to narrow down the problem ?
    Thank you

    You can adjust the memory settings for WLS by editing the setSOADomainEnv.sh file that can be found in your /middleware/user_projects/domains/<domain>/bin/ folder. There is an argument called PORT_MEM_ARGS which is used to set your Java memory arguments. This way you can decrease/increase the amount of memory used by each managed server.
    I usually type "ps -ef | grep oracle" to see what processes are running by the oracle user. This way the output doesn't get cluttered with root processes.
    Sunny Tsang

  • How to use a loop for a object

    Hi, All
    I have a procedure that needs a collection to pass in. The pass_in collection has multiple records with multiple fields, so I guess I need a loop for each record.
    How to assign each record of multiple fields to each corresponding local variables?
    Thanks In advance
    T_Object is a table object
    T_ProfileInfo is a collection
    procedure P_Updateprofile(UserId in number, NewProfileInfo in T_ProfileInfo) as
    V_B_ID number;
    V_A_ID number;
    V_Profile      T_ProfileInfo;     
    begin
         V_Profile := NewProfileInfo;
         --use the loop for each records
    FORALL i IN V_Profile.FIRST..V_Profile.LAST
    -- assign each value to the local variables
    -- I got error here. ideally I want to assign each record to the local variables
         select B_ID, A_ID
         into V_B_ID, V_A_ID
         from table(V_Profile(i));
         -- insert the record into the table
         INSERT INTO PROFILE
         VALUES (UserId, V_B_ID, V_A_ID);
         commit;
    end;

    You don't say which version of the database you are using. Oracle extended the collections functionality in 9.2....
    Cheers, APC
    SQL> CREATE OR REPLACE PACKAGE t1_utl AS
      2      TYPE rt_t1 IS TABLE OF t1%ROWTYPE;
      3      FUNCTION gen_t1 (p1 IN NUMBER) RETURN rt_t1;
      4      PROCEDURE pop_t1 (t1rows IN rt_t1);
      5  END t1_utl;
      6  /
    Package created.
    SQL> CREATE OR REPLACE PACKAGE BODY t1_utl AS
      2      FUNCTION gen_t1 (p1 IN NUMBER) RETURN rt_t1
      3      IS 
      4          CURSOR cur (pn NUMBER) IS
      5              SELECT a12.NEXTVAL, col1, col2, rownum AS rn, substr(col3,30), sysdate
      6              FROM t2
      7              WHERE rownum <= pn;
      8          return_value rt_t1;
      9      BEGIN
    10          OPEN cur(p1);
    11          LOOP
    12              FETCH cur BULK COLLECT INTO return_value LIMIT 100;
    13              EXIT WHEN cur%NOTFOUND;
    14          END LOOP;
    15          RETURN return_value;
    16      END gen_t1;
    17      PROCEDURE pop_t1 (t1rows IN rt_t1) IS
    18      BEGIN
    19          FORALL indx IN t1rows.FIRST .. t1rows.LAST
    20              INSERT INTO t1
    21                VALUES t1rows (indx);
    22      END pop_t1;
    23  END t1_utl;
    24  /
    Package body created.
    SQL> SELECT * FROM t1
      2  /
    no rows selected
    SQL> DECLARE
      2      x t1_utl.rt_t1;
      3  BEGIN
      4      x := t1_utl.gen_t1(2);
      5      t1_utl.pop_t1(x);
      6  END;
      7  /
    PL/SQL procedure successfully completed.
    SQL> SELECT * FROM t1
      2  /
          COL1       COL2       COL3       COL4 COLA
    COLD
            56     165765      87979          1
    11-AUG-04
            57       3128    8217220          2
    11-AUG-04
    SQL>

Maybe you are looking for

  • Outlook 2003 has stopped working on windows 7

    Hi, so I started to get this error today, yestarday everything was finne: Problem signature:   Problem Event Name: APPCRASH Application Name: OUTLOOK.EXE   Application Version: 11.0.5510.0   Application Timestamp: 3f1380f0 Fault Module Name: StackHas

  • Mac air or Mac Pro

    I want to know if mac aitr or mac pro is ok for my needs I wil used mainly for photoshop and final cut Regards Luis

  • How do I download my past orders of Acrobat Pro 8.0 and Premium Elements 7.0?

    I have a new system and need to reload my software previously purchased.  I have logged into my account and there is no record of my orders.  I have the serial numbers, just not the link to download.

  • The song name doesn't match to itunes.

    Ever since i've update my itunes, i've encountered this problem. I change the song name and artist info by right-clicking the song and then clicking 'get info', but after i sync and take out my iphone 4s, the song name change doesn't appear on my pho

  • Premiere Pro CS5 won't import mov file?

    Mac Mini OSX 10.6.8 2.4GHz Duo Core Intel 8GB RAM: Quicktime 10.0(128) I have serveral MOV files that a Camera Crew shot raw footage then recaptured to MOV for me but now I found out that I can't import these files into Premiere CS5, I get a codec mi