Problem Creating User in Identity Center mmc

Hi all,
anyone who had the same database problem when performing the following action:
In identity center (the mmc user interface):
- go to your identity store
- on the general tab page of that identity store click on Add User button
- provide the input parameters
- click ok
- retrieve this error ([Error Message|http://img208.imageshack.us/img208/8959/addmanagererror.png])
I must add that the Database Server I'm using is MS SQL Express 2005.

The problem has been solved, I found the following cause:
1. At first the Microsoft OLE DB Provider for ODBC Drivers was installed, this was due to the remote MS SQL connection problems we ran into.
2. I adjusted the ODBC driver as suggested by Christian R. Schmidt and it worked.
Thanks for the tip.

Similar Messages

Not able to create users in identity system -OAM

Hi all,
I am new to OAM and trying to create users from identity system -OAM.
I have logged in as 'orcladmin', who is my 'Master Administrator' and 'Master identity Administrator'.
To create the user, I click on 'User Manager' tab and then 'Create user identity' tab but I get a message saying
"*You do not have sufficient access rights*."
Same message comes up when I try to create groups also.
Please guide me on how I can give these rights to 'orcladmin'.
It will be helpfull if you can specify some links where I can learn the basic consepts of OAM(identity system and access system).
Thanks in advance
Roopa

Hi,
Before you attempt to create a user, you would need to create a workflow in OAM Identity System.
Below is the link which will get you started -
http://download.oracle.com/docs/cd/E15217_01/doc.1014/e12489/workflow.htm#BABEFGAA
-- Pramod Aravind

After Int Install OS10.5.8 on PowerPC G4 having major system problems (created user to verify) CS4 apps go non responsive

After Int Install OS10.5.8 on PowerPC G4 having major system problems (created user to verify) CS4 apps go non responsive

Ok no difference, I don't get any drive errors that seem significant or numerous, sometimes I don't get any at all, the disk always verifies and I haven't had to run a repair on it yet. I've gotton one or two drive errors, I'll save them next time I run either DU or DW.... however with permissions, there are a lot and they all fix (except: see below: Last 3: ACL errors are always there) but as I keep having to do force quits and system re boots they keep coming back; posted them below IDK if this will help you to help me, LOL... but figured it couldn't hurt, the ones below are re-occuring I know i've seen them b4. . . Don't know if this makes a difference but on initial install I had several font conflicts w/system fonts, I renamed suitcases and that error message hasn't come back . . . but do you think this could be a font issue . . . I have like 12,000 fonts of which a couple hundred are ususally always active . . . IDK it doesn't make sense to me it would be, but you never know... just a shot in the dark
I also saved my last PS crash report and it was like 100 Pages long, I've never seen one that long, I make a pdf of it and post link to my idisk, if its something that you can interpet.
Verify permissions for “Rayce”
          Reading permissions database.
          Reading the permissions database can take several minutes.
Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/DVD.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/FRSettings.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/FRSources.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/Movies.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/Music.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/Photos.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/Podcasts.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/TV.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/PrivateFrameworks/BackRow.framework/Versions/A/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/CoreServices/Menu Extras/RemoteDesktop.menu/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "Library/Internet Plug-Ins/JavaPluginCocoa.bundle/Contents/CodeResources", should be -rw-rw-r-- , they are lrw-rw-r-- .
Permissions differ on "private/var/spool/cups/cache/rss", should be drwxr-xr-x , they are drwxrwxr-x .
ACL found but not expected on "Applications/Utilities".
ACL found but not expected on "Applications".
ACL found but not expected on "Library".
Permissions verification complete
Repairing permissions for “Rayce”
          Reading permissions database.
          Reading the permissions database can take several minutes.
Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/DVD.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/FRSettings.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/FRSources.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/Movies.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/Music.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/Photos.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/Podcasts.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/CoreServices/Front Row.app/Contents/PlugIns/TV.frappliance/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/PrivateFrameworks/BackRow.framework/Versions/A/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "System/Library/CoreServices/Menu Extras/RemoteDesktop.menu/Contents/CodeResources", should be -rw-r--r-- , they are lrw-r--r-- .
Permissions differ on "Library/Internet Plug-Ins/JavaPluginCocoa.bundle/Contents/CodeResources", should be -rw-rw-r-- , they are lrw-rw-r-- .
Permissions differ on "private/var/spool/cups/cache/rss", should be drwxr-xr-x , they are drwxrwxr-x .
ACL found but not expected on "Applications/Utilities".
ACL found but not expected on "Applications".
ACL found but not expected on "Library".
Permissions repair complete

IDM 7.2 SP9 Identity Center MMC Crash

Hi,
I Installed Netweaver 7.4 AS JAVA on MS SQL with IDM 7.2 and upgraded then to SP9.
I try to create a new Task in the Identity Center and the MMC Console crashes everytime, I configured Java in the options as described in the Manual.
Do you have some ideas?
Thanks, Patrick

Hi Matt,
Ah yes I forgot to mention to OS.
I'm using Windows Server 2012 R2 (with latest updates).
Patrick
Edit: it's the same Problem as listed there:
http://scn.sap.com/message/15729491#15729491
I didn't found that before, is there a patch or anything else?

EBS 11.5.1 - Problem creating user with NO APPS user

Hi everybody.
I am working on an EBS enviroment on demand that we are trying to set up for a Colombian customer. We are trying to set up the connector between Oracle IDentity Manager and EBS and it is not working.
After some test cases we figured out that the main issues are related with the privileges that has the user that is going to interact with the EBS DB Procedures. In fact, we are trying to call this procedure:
declare
user1 varchar2(50);
owner varchar2(50);
begin
user1 := 'USERNAME';
owner := '-23432';
fnd_user_pkg.CreateUser(user1,owner);
end;
IF WE RUN THIS SENTENCE OVER APPS USER (THE EBS ADMIN USER) IT WORKS. HOWEVER when we try to use the OIM user it throws the following error:
Unable to create user USERNAME due to the following reason(s):
Oracle error -1031: ORA-01031: insufficient privileges has been detected in FND_WEB_SEC.VALIDATE_PASSWORD..
ORA-06512: at "APPS.APP_EXCEPTION", line 72
ORA-06512: at "APPS.FND_USER_PKG", line 869
ORA-06512: at "APPS.FND_USER_PKG", line 915
ORA-06512: at "APPS.FND_USER_PKG", line 1034
ORA-06512: at line 1
We already checked the FND_WEB_SEC Package (that has the VALIDATE_PASSWORD function) and it looks like the problem is when it calls the function VALIDATE_PASSWORD_JAVA wich tries to validate the password with a Java task. It looks like the OIM user doesn't have privileges to access this remote java function.
Anyone knows wich is the real problem and how can i solve it??
Many thanks for the help

Hi everybody.
I am working on an EBS enviroment on demand that we are trying to set up for a Colombian customer. We are trying to set up the connector between Oracle IDentity Manager and EBS and it is not working.
After some test cases we figured out that the main issues are related with the privileges that has the user that is going to interact with the EBS DB Procedures. In fact, we are trying to call this procedure:
declare
user1 varchar2(50);
owner varchar2(50);
begin
user1 := 'USERNAME';
owner := '-23432';
fnd_user_pkg.CreateUser(user1,owner);
end;
IF WE RUN THIS SENTENCE OVER APPS USER (THE EBS ADMIN USER) IT WORKS. HOWEVER when we try to use the OIM user it throws the following error:
Unable to create user USERNAME due to the following reason(s):
Oracle error -1031: ORA-01031: insufficient privileges has been detected in FND_WEB_SEC.VALIDATE_PASSWORD..
ORA-06512: at "APPS.APP_EXCEPTION", line 72
ORA-06512: at "APPS.FND_USER_PKG", line 869
ORA-06512: at "APPS.FND_USER_PKG", line 915
ORA-06512: at "APPS.FND_USER_PKG", line 1034
ORA-06512: at line 1
We already checked the FND_WEB_SEC Package (that has the VALIDATE_PASSWORD function) and it looks like the problem is when it calls the function VALIDATE_PASSWORD_JAVA wich tries to validate the password with a Java task. It looks like the OIM user doesn't have privileges to access this remote java function.
Anyone knows wich is the real problem and how can i solve it??
Many thanks for the help

Problem creating user running wizard

Hi,
When trying to run the initial setup of functional unit SLD wizard, I receive the "You are not authorized to create users" error message. We are only running this wizard because we are changing to local SLD from a remote SLD. I am able to create a test user as J2EE_ADMIN from both the ABAP and Java sides. However, I receive this error when running the wizard.
It is not an authorization issue for j2ee_admin as I am able to manually create users as above mentioned. I only see the error durning the wizard when the step Create SLD_DS user is running.
Does anyone have any ideas?
Regards,
Rick

This problem is resolved. I mistakenly thought the authorization issue was with the j2ee_admin user and it was actually DDIC. I corrected the authorization issues for DDIC and the process continued.
Regards,
Rick

Unable to create users in identity management of XI system

Hi
I am trying to create an user using j2ee_admin user in XI system. But I am getting the following error
Current user has user creation permissions in the UME, but cannot create users in the back-end system (data source). The original and possibly untranslated message was: "The unique ID is null and principal cannot be bound!".
Please help me why I am getting this problem and how to resolve it
Regards
Sowmya

Hi,
Please make sure that you have assigned the role of
SAP_BC_JSF_COMMUNICATION role to the user J2EE_ADMIN.
Since, it is delivered without a profile, so you must first generate a
profile otherwise it will not work properly.
Please check that the role is NOT SAP_BC_JSF_COMMUNICATION_RO (this is
a read only role and therefore the users won't be able to create the
user).
As described in the SAP Note 748195 you can assign the
assign the SAP_BC_JSF_COMMUNICATION role to the communication user.
You must restart the J2EE Engine after you change the role assignment.
Additionally, you can check consistencies on UME using SAP Note 1016283.
Best regards,
Sumanth

Problem Creating Users

Pls help, when I use the API to create users i get the following message:
++++++++++++++++++++
com.iplanet.am.sdk.AMException: Unable to find parent organization
at com.iplanet.am.sdk.AMCacheManager.getOrganizationDN(AMCacheManager.java:469)
at com.iplanet.am.sdk.AMCacheManager.getExternalAttributes(AMCacheManager.java:523)
at com.iplanet.am.sdk.AMCacheManager.getPluginAttrsAndUpdateCache(AMCacheManager.java:689)
at com.iplanet.am.sdk.AMCacheManager.getAttributes(AMCacheManager.java:776)
at com.iplanet.am.sdk.AMDirectoryManager.getAttributes(AMDirectoryManager.java:456)
at com.iplanet.am.sdk.AMObjectImpl.getAttribute(AMObjectImpl.java:231)
at com.iplanet.am.sdk.AMUserImpl.getRoleDNs(AMUserImpl.java:130)
at com.iplanet.am.sdk.AMObjectImpl.create(AMObjectImpl.java:928)
at com.iplanet.am.sdk.AMPeopleContainerImpl.createUsers(AMPeopleContainerImpl.java:175)
at com.iplanet.am.sdk.AMPeopleContainerImpl.createUsers(AMPeopleContainerImpl.java:126)
at core.OneSpaceOrgOperations.connectToOrg(OneSpaceOrgOperations.java:288)
at core.loadAllOrg.main(loadAllOrg.java:72)

Hmm, doesn't sound like it's seeing your parent Org. Have you created a top-level org and are creating users beneath it?
-J

Problem creating user in RDBMS realm Using com.bea.wlpi.rdbmsrealm.RDBMSRealm

Hi,
I am currently using WLI 2.0 SP2 installation. Here is a very unusual thing I
noticed. Can somebody tell me what is going on ???
1 : I have set up the security realm as indicated in the config.xml file. As far
as I understand, the caching realm entry has attribute pointing to the wlpiRDBMSRealm,
which is a RDBMS implementation from the WLI 2.0 SP2 distribution.
2: I start the server, open the WLS console, and create a new user through the
console. I get no error message and it seems to work fine. ( I also click on the
save it to database link, and it returns with msg that cache is refreshed ).
3: I see an entry in the fileRealm.properties file, but no record is inserted
in the WLSUSER table in the database.
Since the RDBMS realm (from WLI distribution) is defined as basic
realm implementation, should it not insert entry into the database, instead of
the file realm.
Is this a general problem ( any RDBMS realm ) or is it specific to the WLI ?
Is there anything that I have not configured here that is causing this behavior
Is it just refreshing the cache instead of inserting record in DB ?
Why should it insert entry into fileRealm.properties ?
Thanks,
Girish
[noaa1.zip]

Hi,
I turned on the caching realm through the WLS Console, (Security).
After this I get a very unusual error, which seems to be comming
from the RDBMS implementation class (from WLI 2.0 SP2 distribution).
Here is the msg that I get while WLS server boots (the WLS server boots ok, but
WLPI does not initialize) ....
Unable to initialize WebLogic Process Integrator:
SQL Exception: ResultSet not open, operation 'next' not permitted. Verify that
autocommit is OFF.
at c8e.k.j.l_(Unknown Source)
at c8e.k.j.l_(Unknown Source)
at c8e.k.j.j_(Unknown Source)
at c8e.k.n.checkIfClosed(Unknown Source)
at c8e.k.n.movePosition(Unknown Source)
at c8e.k.n.movePosition(Unknown Source)
at c8e.k.n.next(Unknown Source)
at com.bea.wlpi.rdbmsrealm.RDBMSDelegate.getGroup(RDBMSDelegate.java:425)
at com.bea.wlpi.rdbmsrealm.RDBMSRealm.getGroup(RDBMSRealm.java:235)
at weblogic.security.acl.CachingRealm.getGroup(CachingRealm.java:1120)
at weblogic.ejb20.deployer.SecurityRoleMapping.lookupPrincipal(SecurityRoleMapping.java:243)
at weblogic.ejb20.deployer.SecurityRoleMapping.getSecurityRolePrincipals(SecurityRoleMapping.java:96)
at weblogic.ejb20.deployer.SecurityRoleMapping.getSecurityRolePrincipals(SecurityRoleMapping.java:128)
at weblogic.ejb20.deployer.SecurityRoleMapping.isPrincipalInAnyRole(SecurityRoleMapping.java:174)
at weblogic.ejb20.deployer.MethodInfoImpl.checkAccess(MethodInfoImpl.java:214)
at weblogic.ejb20.internal.MethodDescriptor.checkAccess(MethodDescriptor.java:285)
at weblogic.ejb20.internal.BaseEJBObject.preInvoke(BaseEJBObject.java:90)
at weblogic.ejb20.internal.StatelessEJBObject.preInvoke(StatelessEJBObject.java:55)
at com.bea.wlpi.server.plugin.PluginManagerCfgBeanEOImpl.init(PluginManagerCfgBeanEOImpl.java:1301)
at com.bea.wlpi.server.initlistener.InitListenerBean.onMessage(InitListenerBean.java:151)
at weblogic.ejb20.internal.MDListener.execute(MDListener.java:221)
at weblogic.ejb20.internal.MDListener.onMessage(MDListener.java:175)
at weblogic.jms.client.JMSSession.onMessage(JMSSession.java:1933)
at weblogic.jms.client.JMSSession.execute(JMSSession.java:1892)
at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:137)
at weblogic.kernel.Kernel.execute(Kernel.java:250)
at weblogic.jms.client.JMSSession.pushEnvelope(JMSSession.java:1779)
at weblogic.jms.client.JMSCallback.pushEnvelope(JMSCallback.java:69)
at weblogic.jms.frontend.FESession.execute(FESession.java:1972)
<Aug 22, 2001 11:56:01 AM MDT> <Notice> <WebLogicServer> <WebLogic Server started>
at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:137)
at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:120)
--------------- nested within: ------------------
com.bea.wlpi.rdbmsrealm.RDBMSException: caught SQL exception - with nested exception:
[SQL Exception: ResultSet not open, operation 'next' not permitted. Verify that
autocommit is OFF.]
at com.bea.wlpi.rdbmsrealm.RDBMSRealm.getGroup(RDBMSRealm.java:242)
<Aug 22, 2001 11:56:01 AM MDT> <Notice> <WebLogicServer> <ListenThread listening
on port 7101>
at weblogic.security.acl.CachingRealm.getGroup(CachingRealm.java:1120)
at weblogic.ejb20.deployer.SecurityRoleMapping.lookupPrincipal(SecurityRoleMapping.java:243)
at weblogic.ejb20.deployer.SecurityRoleMapping.getSecurityRolePrincipals(SecurityRoleMapping.java:96)
at weblogic.ejb20.deployer.SecurityRoleMapping.getSecurityRolePrincipals(SecurityRoleMapping.java:128)
at weblogic.ejb20.deployer.SecurityRoleMapping.isPrincipalInAnyRole(SecurityRoleMapping.java:174)
at weblogic.ejb20.deployer.MethodInfoImpl.checkAccess(MethodInfoImpl.java:214)
at weblogic.ejb20.internal.MethodDescriptor.checkAccess(MethodDescriptor.java:285)
at weblogic.ejb20.internal.BaseEJBObject.preInvoke(BaseEJBObject.java:90)
at weblogic.ejb20.internal.StatelessEJBObject.preInvoke(StatelessEJBObject.java:55)
at com.bea.wlpi.server.plugin.PluginManagerCfgBeanEOImpl.init(PluginManagerCfgBeanEOImpl.java:1301)
at com.bea.wlpi.server.initlistener.InitListenerBean.onMessage(InitListenerBean.java:151)
at weblogic.ejb20.internal.MDListener.execute(MDListener.java:221)
at weblogic.ejb20.internal.MDListener.onMessage(MDListener.java:175)
at weblogic.jms.client.JMSSession.onMessage(JMSSession.java:1933)
at weblogic.jms.client.JMSSession.execute(JMSSession.java:1892)
at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:137)
at weblogic.kernel.Kernel.execute(Kernel.java:250)
at weblogic.jms.client.JMSSession.pushEnvelope(JMSSession.java:1779)
at weblogic.jms.client.JMSCallback.pushEnvelope(JMSCallback.java:69)
at weblogic.jms.frontend.FESession.execute(FESession.java:1972)
at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:137)
at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:120)
"Girish Gupte" <[email protected]> wrote:
>
>
>
Hi,
I am currently using WLI 2.0 SP2 installation. Here is a very unusual
thing I
noticed. Can somebody tell me what is going on ???
1 : I have set up the security realm as indicated in the config.xml file.
As far
as I understand, the caching realm entry has attribute pointing to the
wlpiRDBMSRealm,
which is a RDBMS implementation from the WLI 2.0 SP2 distribution.
2: I start the server, open the WLS console, and create a new user through
the
console. I get no error message and it seems to work fine. ( I also click
on the
save it to database link, and it returns with msg that cache is refreshed
3: I see an entry in the fileRealm.properties file, but no record is
inserted
in the WLSUSER table in the database.
Since the RDBMS realm (from WLI distribution) is defined as basic
realm implementation, should it not insert entry into the database, instead
of
the file realm.
Is this a general problem ( any RDBMS realm ) or is it specific to the
WLI ?
Is there anything that I have not configured here that is causing this
behavior
Is it just refreshing the cache instead of inserting record in DB ?
Why should it insert entry into fileRealm.properties ?
Thanks,
Girish

Problem creating user-defined metric for Database

I am logged in to EM/Grid Control as SYSMAN, any user with superadmin privileges or a 'normal' user with operator/full privileges for my database target. When I go to set up user-defined metrics for the target db I get the following warning "You will only be able to view User Defined metrics because you do not have Operator Privileges on host <db target name>". The Create button is disabled.
Can anyone offer any advise on where to identify the privilege problem?
Thanks

Well I did it with a host UDM calling a local script (which will be installed on shared drives for the development/test and production systems).
The local script cats the /var/opt/oracle/oratab file eliminating lines beginning with # or $ then takes the second argument of each line and loops through all entries using a checkit procedure. The checkit procedure determines if the appropriate log directores exist for the oracle home and does a find on the diretory looking for alert*.log and *.trc. If there are any then global variables get updated with the count and directory name.
There is an if statement before exit that checks of the count of files is greater than zero and write an appropriate em_result and em_message depending on the results.
I then created the UDM in EM to call this script and check for critical/warning thresholds.
Regards
Tim

Creating User with identical attributes

How do I create a New User who has the same Preferences and Permissions as an already existing user?
iMac Intel Mac OS X (10.4.9)

Read this:
http://Gnarlodious.com/Computer/MacOsx/CloneUser

Minor problem creating user defined reports

Hi:
I noticed that when you create a new user defined report or folder
-> right click on User Defined Rpeports and choose 'Add Folder' or 'Add Report'
the cursor focus is on the *Name field, but if you type nothing happens.
Then you click on another field (i.e.: Description, Tooltip...) and what you typed in *Name appears in the field you selected. This is not correct.
I see this on the Linux version.
Does the same happen on other operating systems?
Thanks,
Andrea

Thank you.
I am running Fedora FC4 with Sun JDK-1.5.0_06
Anyone else notices the same behaviour?
Happy new year everyone,
Andrea

OIM Provision Problem--Create User or Update User

How can we control the provision process to meet the following requirement?
If the target application exits the user, there is no need to call the createuser task, just establish a link with the user of target application. But if it is a new user, we must complete the createuser task to provision the user to target application.
At first, thanks for everyone's advice, I should restate my requirement in order to make it clear.
The provisioning scenario is as follows:
If the user exists in target application, update the user of target application. Otherwise, create the user.
Thanks!
Message was edited by:
user627209

I think it would be very helpful if you restated your exact requirements.
As a general rule it is not advisable to just map the "object already exists" adapter return code to a task status that gives the object effect of provisioned as in some cases there is a need to copy a unique object identifier back to the process form (i.e. in AD you need to have the GUID(?)) from the target system. Without the identifier the update tasks will not be able to find the object in the target system.
You could of course copy the identifier manually in another task but you have to make sure that you have done everything that you need to do to actually get object into a linked state.
Another alternative is to trigger a recon task using the APIs when you run into the "object already exists" situation.
Hope this helps
/M

Problem creating User Defined Table

I am using C# and SBO 6.5
Error Code: -1120
Error Message: "The Mete Data for this object cannot be updated,\nsince it's ref count is bigger then 0."
SAPbobsCOM.UserTablesMD m;
                    m = (SAPbobsCOM.UserTablesMD)
                              frmMain.oCompany.GetBusinessObject(SAPbobsCOM.BoObjectTypes.oUserTables);
if (m.GetByKey("CBtr")==false)
m.TableName="CBtr";
                              m.TableDescription = "TEST";
fieldadded =m.Add();
if (fieldadded !=0)
frmMain.oCompany.GetLastError(out oErrorCode,out oError);
Any help is appreciated.
Thanks,
Gopal

Hi Gopal,
Please note that GetByKey on a meta data object already makes it necessary to release the object (in your case "m").
In general you should use .NET's ReleaseCOMObject (see here:
SBO-SDK Consult : Releasing COM Object in .NET) to get rid of the "reference", but note that you most likely will have to set the object variable to null.
Alternatively setting the variable to null + a call to GC.Collect() might could do the trick, but GC.Collect() apparently works asynchronously! So, the COM object might not really have been released yet when you try to reuse the variable. GC.WaitForPendingFinalizers might work better.
Regards,
Frank

Problem in creating a user in Identity management

hi all
i work on portal 7.0 and am involved in the branding of the portal.
when i try to create an user in Identity mgt the following error message is displayed..
..current user has user creation permissions in th UME , but cannot create users in the backend systems(datasource).Original and possibly untranslated message was "no active writeable datasource found for usr craetion,check your permissions configuration".
kindly help
thanks in advance
krishna chaitanya.

Hi Chaitanya,
I think you are using a LDAP or SAP system to store users. The problem is when you are defining the datasource configuration file. This might be in *read only * mode.
You can check this by System Admin -> System Configuration -> UME Configuration ->Data Sources tab..
You check wether you data source config file is in read only mode or not. If this file is in read only mode you cannot create users from the front end
You need to create users from LDAP or SAP system what ever may be your back end.
Thanks,
Raju Bonagiri

Problem Creating User in Identity Center mmc

Similar Messages

Maybe you are looking for