Problem in GTC - Enable/Disable user task

Hi,
I am trying to enable a user for a GTC, but I encounter the following errors while doing so:
10/08/25 02:19:23 Running GENERICADAPTER
10/08/25 02:19:23 Target Class = com.thortech.xl.gc.runtime.GCAdapterLibrary
ERROR,25 Aug 2010 02:19:23,959,[OIMCP.DATC],Class/Method: DBProvisioningTransportProvider/sendData encounter some problems: The table PS_RSTR_FMSU_VW does not exist in the target database schema oimuser
com.thortech.xl.gc.exception.DBException: The table PS_RSTR_FMSU_VW does not exist in the target database schema oimuser
at com.thortech.xl.gc.impl.common.DBFacade.getType(Unknown Source)
at com.thortech.xl.gc.impl.common.DBFacade.getSchema(Unknown Source)
at com.thortech.xl.gc.impl.prov.DBProvisioningTransportProvider.getSchema(Unknown Source)
at com.thortech.xl.gc.impl.prov.DBProvisioningTransportProvider.sendData(Unknown Source)
at com.thortech.xl.gc.runtime.GCAdapterLibrary.executeFunctionality(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpFMSUSER_GTC.GENERICADAPTER(adpFMSUSER_GTC.java:125)
at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpFMSUSER_GTC.implementation(adpFMSUSER_GTC.java:70)
at com.thortech.xl.client.events.tcBaseEvent.run(Unknown Source)
Also, the user 'oimuser' has sufficient privileges for the view 'PS_RSTR_FMSU_VW'. The data in the view is accessible and can be read when logged-in as oimuser in SQL developer.
Please help me in resolving this issue.
Regards.

Since this is a view, the user does not have Write permissions.
Regards.

Similar Messages

Active Directory User which can Create a User but not Allowed to Enable Disabled Users

Hi Guys, we have a requirement to create a User Group in Active Directory which will grant its members permission to 'Create Users' but not be allowed to 'Enable' 'Disabled Users'.
We have tried delegating control and assigning permissions by going to 'Security Tab>Advanced'.
It seems like when a group is granted permission to create users, it will also be allowed to enable, disabled users.
Kindly advise if it is possible to create a user group with permissions to 'Create Users' but not be allowed to 'Enable', 'Disabled Users'.

Hi,
According to my experience, you can assign permission with create/delete user objects. If you want to disable/enbale
a user, you must be a member of the Account Operators group, Domain Admins group, or the Enterprise Admins group in Active Directory, or you must have been delegated the appropriate authority.
In general, if you just give a user group the permission to create user objects, it cannot disable or enable user accounts. Please make sure that the permission you assigned is correct and the
user group are not the member of Account Operators group, Domain Admins group, or the Enterprise Admins group in Active Directory.
Best regards,
Susie

Updating date while enabling/Disabling user in AD

Hi All,
We are using FIM 2010 R2 SP1 and integrated with AD.
All integration is done through synch rule and no coding.
Now we have a new requirement to update date in AD while enabling and disabling user.
Kindly suggest, how it can be achieved through synch rule.
Thanks,
Mann

Hi Mann.Cool,
You can't set a date dynamically thought sync rule. Instead, I suggest you parse useraccountcontrol and set an custom attribute with value enabled/disabled.
See
http://idmgnt.wordpress.com/xpath-custom-expression/ (Check if an account is enable or not)
Once is done:
Create two new sets "Enabled users" and "Disabled users"
Create a WF with T4F Function Evaluator, to set your date attribute (http://oxfordcomputergroup.com/technology/software-tools-components )
Create the mpr
Let me know if you want more details
Regards,
Sylvain

Server2003, enable / disable user login via powershell

Hi all,
Newbie, in Africa for short time only and probably haven't done all the homework I should have.
Unix and OO background but just learning powershell.
I need to be able to enable / disable local user accounts on a local server in a school; no clusters, pretty much stand-alone. I presume if I can get the user object it has a member / method for enabling / disabling, but I don't understand how to get
the user object. In particular, I don't understand the two-character abbreviations used in front of params to queries.
If I bring up active directory users and computers, what I see is:
techna-school
Tech/na school
      Students
The users I want to enable/disable are members of the "Students" group above, and for RDP / security purposes are members of the "Learners" group. The server is not in any "official" (i.e. DNS recognized) domain, just gets
net access as a normal user via dialup and DHCP.
I'm guessing I need something kinda like the following to get at the user objects, but I haven't a clue what the "ou", "dc", or anything else needed are supposed to be as I don't have an MS server background.
$learners = [ADSI] "LDAP://ou=Learners,dc=techna-school"
Any help would be much appreciated.
Thanks,
Gary

From the sounds of it, you have domain accounts not local accounts. The difference is domain accounts can log onto any machine within your domain, whereas local accounts can only log onto the local machine they where created on. Since your users are using
thin clients, it is most liekly a domain account they are using.
For using AD cmdlets on Server 2003, you need some things in place, this article might help you
Thanks for the info and pointer.
I'm a little leery of going through that process as I don't have a test system to work on, but I appreciate the pointer; may delve into that later.
In the meantime, I've managed to get the user objects using Get-WmiObject, but an attempt to modify them via Set-WmiInstance fails:
    $learners = Get-WmiObject -query "Select Name,Disabled From Win32_UserAccount"
    foreach ($learner in $learners) {
    Set-WmiInstance -InputObject $learner -Argument @{Disabled=$True} -PutType UpdateOnly
Set-WmiInstance : Invalid Object
Seems pretty straight-forward so I suspect it is a simple error but I'm not seeing it.

Disabling User instead of deleting

I'm using OIM 9031.
I've created a custom access policy which grants user a resource (OEBS) based on his group membership.
When user is no longer a member of group, his account is deleted from assigned resource. How do I change the behavior of OIM so that user account in OEBS would be blocked instead of completely deleted?

Yes, I want the account to be reanabled after the user is a member of a group again. No idea how to change the provisioning workflow...
Maybe, I should add two new tasks, for enabling/disabling user, but then I must somehow incorporate 'enable user' task into my workflow. It may require 3rd task which checks if user account already exists (e.g. is user already provisioned the resource) and depending on response code, it may launch either create or enable task...

Moving disabled user to another OU

Hi,
I am using Oracle Identity Manager 9.1.9.1 with AD connector 9.1.1.
When a user is disabled in oim (when the Disable check box in OIM is checked), I would like the user to be automatically moved to an another OU for disabled users.
I have created a myMoveUserToDisabledUsersOUTask with an adapter task with a xl.integration.ActiveDirectorytc.UtilADTasks.moveUser method. I have mapped the variables:
Output: String: Adapter Variables: Return variable
Input: String: Literal: String: ou=DisabledUsersOU etc....
Input: String: Adapter Variables: objectGUI
?Anyone knows which constructor I should use?
In the AD User process definition, myMoveUserToDisabledUsersOUTask, I have mapped Variable Name: objectGUI to Process Data: objectGUI.
In Process Definition - AD User, Disable User task, I have
-assigned a myMoveUserToDisabledUsersOUTask in Tasks to Generate for the AD.USER_DISABLED_SUCCESSFUL response.
-assigned myMoveUserToDisabledUsersOUTask as a Dependant task for the Disable User task.
?Is this sufficient for making the Disable User task trigger the myMoveUserToDisabledUsersOUTask?
When I test it by disabling an OIM user, I get the error messages:
Invalid Duplicate in ScheduleItem. There are other instances of this milestone in this ORC.
Error while disabling process
Unable to disable the object instance
Triggering processes related to User. has encountered an error.
Anyone knows what I should do to accomplish this?
Thanks in advance!!

Hi Saggu,
thanks for your reply.
I added a Move User task to the Disable User Adapter. I map the user parameter to objectGUID and the org name parameter to the literal ou=<disabled users>, ou=<users>, dc=x, dc=y, dc=z.
However, when I disable a user that resides in 'ou=<usersou>, ou=<users>, dc=x, dc=y, dc=y I get a NamingException error: problem 5012 (DIR_ERROR)remaining name 'cn=<user>, ou=<userou>, ou=<users>' .
Seems like the Move User task does not get the correct dn for the user. I think it's strange since the Move User task has the same objectGUID variable as its input parameter as the Disable AD User task has. And the Disable AD User task finds the user successfully.
I also get the error "destination object not exists (DIR_ERROR)". So it seems like the task finds neither the user nor the destination OU path?
Thanks!

Disabling Users in OIM

Hi,
Could someone tell me why this may be happening. I'm trying to setup Diabling user in OIM to disable user in AD.. but before I even get that far, I cannot seem to be able to disable a user in OIM.
I open a user's profile click Disabled, page updates but nothing changed. No errors in the log. Clicking disable just doesn't work.
What's even stranger is I found a user who was already disabled, and that guy I can enable/disable as much as I want.
Where can I look to see what may be causing this?
Also, I noticed in some other posts I read about OIM->AD disabling, and this is something that should work OOTB... I see the Disable User tasks, but I can't figure out what would trigger it.
Alex

Figured it out. There was a Pre-Update entity adapter that set the status based off a user defined field. I guess clicking the Disable button was triggering this entity adapter and over-rulling my Disable action.

Synaptics enables / disables itself in a loop

I have GT70 2OD
Synaptics 18.1.30.4 08Oct14
Synaptics TouchPad V7.2
I recently installed the synaptic drivers and I can see that sometimes enter an enable/disable loop (I can see that is enabling and disabled both by the system tray icon and the led in the disable touchpad button below the spacebar).
Usually this flickering / loop starts on any of this two conditions:
1) Directly after at startup
2) If I press the Disable touchpad button below the spacebar
3) If I press Fn+F3
Usually the loop ends when I press the Windows key a couple of times and I manage to go the Start screnn then the flickering stops and I'm able to reenable the touchpad via
Control panel / Change mouse settings/ Device Settings/ Enable (using the keyboard to get there, since the touchpad is disabled).
Does anybody know how to fix it or why it's happening?

I upgraded the firmware to version 1516 (2014-10-15) and that solved the problem, no more enabling / disabling in a loop, no more flickering of the led.

Disabling User specific/Default Setting

In the output of CV04n selection while 'Save Layout' how is it possible to enable/disable
'User Specific' or 'Default setting'

Hi,
Did you mean Set or enable / disable? Anyways if you want to set, you can do it as follows:
1. Global: I.e. Available for all
Selection Variant: Global do not toggle the User specific box
Description: XYZ
2. User Specific: Available only for the user
Selection Variant: aaa Toggle the user specific box.
Description: uvw
If this doesn't answer your query, please explain further.
regards
C

Getting a user task list by assignee...

Hello,
I had many problems trying to get a user task list from a java file. I found a way.
I do it this way because the IWorklistService class return cero tasks with any WhereCondition... please if any one found a proper way to do this, please let me know.
I use nanoxml library.
public static ArrayList queryWorklistServiceI(ArrayList users){
// Lookup the worklist service.
IWorklistService worklist =
(IWorklistService)locator.lookupService( IWorklistService.SERVICE_NAME );
try
WhereCondition cond = new WhereCondition();
cond.append("title like '%TaskActionHandler'").append("and").append(WhereConditionHelper.whereInstancesOpen());
IInstanceHandle[] i = locator.listInstances(cond);
ArrayList tareas = new ArrayList();
for(int j=0; j<i.length;j++){
IXMLParser xmlParser = XMLParserFactory.createDefaultXMLParser();
IXMLReader xmlReader = StdXMLReader.stringReader(i[j].getAuditTrail());
xmlParser.setReader(xmlReader);
IXMLElement xml_e = (IXMLElement) xmlParser.parse();
Vector children = xml_e.getChildren();
IXMLElement task = ((IXMLElement)children.get(4)).getFirstChildNamed("details");
IXMLParser xmlParser_task = XMLParserFactory.createDefaultXMLParser();
IXMLReader xmlReader_task = StdXMLReader.stringReader(task.getContent());
xmlParser_task.setReader(xmlReader_task);
IXMLElement xml_task = (IXMLElement) xmlParser_task.parse();
xml_task = xml_task.getFirstChildNamed("part").getFirstChildNamed("task");
String asignado = "";
asignado = xml_task.getFirstChildNamed("assigneeUsers").getContent();
if(asignado==null){
asignado = xml_task.getFirstChildNamed("assigneeGroups").getContent();
boolean b = false;
for(int k=0;k<users.size()&&!b;k++){
if(((String)users.get(k)).equals(asignado))
if(b){
String id = xml_task.getFirstChildNamed("instanceId").getContent();
String titulo = xml_task.getFirstChildNamed("title").getContent();
String estado = xml_task.getFirstChildNamed("state").getContent();
String modificado = (xml_task.getFirstChildNamed("modifyDate").getContent()).substring(0,16);
String tarea_id = xml_task.getFirstChildNamed("taskId").getContent();
Vector datos = xml_task.getFirstChildNamed("payload").getFirstChildNamed("Datos").getChildren();
ArrayList datos_array = new ArrayList();
for(int k=0;k<datos.size();k++){
IXMLElement dato = (IXMLElement)datos.get(k);
Dato d = new Dato(dato.getFirstChildNamed("Nombre").getContent(),dato.getFirstChildNamed("Valor").getContent(),false,"");
datos_array.add(d);
Tarea t = new Tarea(id,titulo,estado,asignado,modificado,tarea_id,datos_array);
tareas.add(t);
return tareas;
} catch (Exception e){System.out.println(e);}
return null;

someone??

Disabling user through API call -process task-followed by an Enable User...

Hi,
I am running on OIM 9.1 BP11. I implemented a process task to disable the user based on a URS form field change.
I can confirm from the log file and the resource that the Disable user (xellerate user) happened. But the user got enabled back right away. The log file showed that a scheduled task named "Enable User After Start Date" ran and enable the user. So, I disabled that scheduled task.
Then I repeated the test again. I observed the same behavior of user being disabled and enabled again but this time, OIM called an adapter. This is what I observed in the log file:
20988 INFO,20 Oct 2010 12:21:56,519,[XELLERATE.DATABASE],DB read: select evt.ev t_key, evt.evt_name, evt.evt_package, mil.mil_name from mil mil, evt evt w here evt.evt_key = mil.evt_key and mil.mil_key=10
20989 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.DATABASE],select evt.evt_key, ev t.evt_name, evt.evt_package, mil.mil_name from mil mil, evt evt where evt. evt_key = mil.evt_key and mil.mil_key=10
20990 INFO,20 Oct 2010 12:21:56,519,[XELLERATE.PERFORMANCE],Query: DB: 0, LOAD: 0, TOTAL: 0
20991 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.SERVER],Class/Method: tcBusiness Obj/getSqlOperationFromMembers entered.
20992 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.SERVER],Class/Method: tcBusiness Obj/getSqlOperationFromMembers left.
20993 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.ADAPTERS],Class/Method: tcADPCla ssLoader/getClassLoader entered.
20994 DEBUG,20 Oct 2010 12:21:56,519,[XELLERATE.ADAPTERS],Class/Method: tcADPCla ssLoader/getClassLoader left.
20995 DEBUG,20 Oct 2010 12:21:56,520,[XELLERATE.ADAPTERS],Class/Method: tcADPCla ssLoader/findClass entered.
20996 INFO,20 Oct 2010 12:21:56,530,[XELLERATE.ADAPTERS],Adapter: Enabling the User was initiated for the task: Enable User.
20997 INFO,20 Oct 2010 12:21:56,531,[XELLERATE.JAVACLIENT],System Event Handler : Enabling the User
I did exactly the same disabling user process at another client and it worked fine. I don't understand what causes OIM to call this system Event handler to re-enable the user.
Please help.
Thanks
Khanh

Do you have any Entity Adapter or Event Handler or Trigger which enables user for some condition ?
Check your environment. If you have please remove that and try.
Does this user has and provisioned resource ? If yes, try for some other user which doesn't have resource provisioned.

How to stop triggering Enable User task

Hi ,
We have a requirement to disable three resources . After disabling if we enable the user, out of 3 resources one shud remain in disabled state. I have added a process task adapter to achieve this. But what my problem is after click enable from user profile first it will trigger Enable and then only its disabling the particular resource. I dont want the Enable user to trigger for that particular resource if I try to enable thru user profile and also ,thru resource profile if we enable that resource it shud enable.
Is there any way we can identify the resource is enabled thru user profile or resource profile?
Please help me out
Thanks

That will work when the user is enabled from the OIM user profile. But if we reconcider your usecase in which the resource should be enabled if we enable it on the resource profile. Will this work?

Enable User task is not getting triggered

Hi All
We have a provisioning workflow configured. "Enable User" task is not getting triggered while the user is enabled in OIM. Can anyone give a clue as to how to get it triggerd? Rest all the tasks are fine (Create, Disable, Delete, and other custom tasks)
Thanks,
Vinay

There is a OOTB scheduled Task "Enable After Start Date". once the user get enabled in OIM user profile. You have to run this task manually to have effect on corresponding RO for enablement. Else it will execute automatically as per scheduled time.
if the version of OIM is 11.1.1.5. There is an issue. update patch BP02. for same
--nayan

How to catch rollback in Disable user process task in Xellerat User Process

hi ...
I want to send an email to manager group of the user, once the user is disabled from the OIM (when end date is reached). I created an adapter and attached it to the ‘Changed User Disabled’ process task in the ‘xellerate user provisioning’ process and add a new row in the “Lookup.USR_PROCESS_TRIGGERS” Lookup definition. (code key: USR_DISABLED and Decode: Change User Disabled ). This adapter executes only when the user status is equal to “disabled”.
This works correctly when the OIM user disabling process execute without any errors. But sometimes while disabling the user it gives an error (“resource is not configured properly”) and rolls back everything and make the user active. But at the same time my adapter runs and sends the mail informing user is disabled but yet user is active.
My problem is how can I find or catch rolls back transaction in the “Disable User” process task (which is in “Xellerate User” process”) ??? If I can get to know that a roll back is occurred then I can send a mail to OIM administrator, informing that user disable process is failed.
Can someone please help me to find this..
Thanks in advance :)
Regards,
i.k.

Hi Rajiv,
Error occurs while disabling the user due to resource configuration problems. ( error message is : DOBJ.RESOURCE_NOTCONFIGURED_PROPERLY -- One or more provisioned resource is not configured properly) In this case i know the problem and how to solve it. But what I want to know is in any case if disable process get fail and if things get roll back again, then how can I track that situation and send a mail to OIM Admin(informing the failure) instead of sending a mail to user managers saying that user account has been disabled.
I think now my problem is clear…. Can u please help me to find this.
Regards,
i.k.

Even after enabling a disable users in essabse its not working

A user has been disabled for not logging in more than 120 days .i have moved the user from disabled usernames under security to enabled users.but the moment user logs in he is moved to disabled users names automatically what could be the problem.can any one please suggest.

I'm having exactly the same problem with my iPhone 4. Since the upgrade to IOS5, I've noticed I can no longer hear calls through the ear-piece, though using the speaker phone option works fine.
I took my phone to the Apple Store in Sydney and they advised that the problem was related to my sim card & that I should contact my telco for a replacement. I seriously didn't believe the Apple rep when she said this, but politely said thanks, went home and tried it out by swapping my sim with my wife's.
Guess what... it didn't make the slightest difference.
My wife has an iPhone 4 still running IOS4 and the ear-piece works fine. I even put my sim card into her phone and it worked fine as well. So the issue is definitely not related to the sim card.
It sounds like a common issue affecting a lot of iPhone 4 users that have upgraded to IOS5. I'm surprised Apple hasn't acknowledged this and have a patch available to correct (it doesn't sound like a hardware issue).
Anyway, looks like a trip back to the Apple store for more great suggestions.

Problem in GTC - Enable/Disable user task

Similar Messages

Maybe you are looking for