Problems using native query in Active Directory connector v 9.1

Hello,
Has anyone ran into a problem when trying to do a query with a not operator?
I want to import all users, but not computers.. so I tried the query (&(objectClass=user)(!objectclass=computer))
I tried this query directly in the active directory and it worked.
The problem is when I apply it to OIM it gives out the following error:
DEBUG,29 Oct 2008 19:48:06,337,[OIMCP.ADCS],ActiveDirectoryRecon::performReconciliation() Enter
DEBUG,29 Oct 2008 19:48:06,337,[OIMCP.ADCS],ActiveDirectoryRecon::setTaskSchedulerObjectName() Enter
INFO,29 Oct 2008 19:48:06,337,[OIMCP.ADCS],Starting Active Directory Trusted Reconciliation
DEBUG,29 Oct 2008 19:48:06,337,[OIMCP.ADCS],ActiveDirectoryRecon::setTaskSchedulerObjectName() Exit
DEBUG,29 Oct 2008 19:48:06,337,[OIMCP.ADCS],ADLookupMaps::getADFieldsArray() Enter
DEBUG,29 Oct 2008 19:48:06,337,[OIMCP.ADCS],ADLookupMaps::getADFieldsArray() Exit
DEBUG,29 Oct 2008 19:48:06,337,[OIMCP.ADCS],tcUtilAttributeNameMap::getLookupDecodeValue() Enter
DEBUG,29 Oct 2008 19:48:06,350,[OIMCP.ADCS],tcUtilAttributeNameMap::getLookupDecodeValue() Exit
DEBUG,29 Oct 2008 19:48:06,350,[OIMCP.ADCS],tcUtilAttributeNameMap::getLookupDecodeValue() Enter
DEBUG,29 Oct 2008 19:48:06,363,[OIMCP.ADCS],tcUtilAttributeNameMap::getLookupDecodeValue() Exit
DEBUG,29 Oct 2008 19:48:06,363,[OIMCP.ADCS],tcUtilAttributeNameMap::getLookupDecodeValue() Enter
DEBUG,29 Oct 2008 19:48:06,374,[OIMCP.ADCS],tcUtilAttributeNameMap::getLookupDecodeValue() Exit
DEBUG,29 Oct 2008 19:48:06,374,[OIMCP.ADCS],ADReconTaskAttrs::parseAndSetMultiValAttrs() Enter
DEBUG,29 Oct 2008 19:48:06,374,[OIMCP.ADCS],ADReconTaskAttrs::parseAndSetMultiValAttrs() Exit
DEBUG,29 Oct 2008 19:48:06,374,[OIMCP.ADCS],ActiveDirectoryRecon/performReconciliation :query (&(&(objectClass=user)(!objectclass=computer))(whenChanged>=19000101000000.0Z))
DEBUG,29 Oct 2008 19:48:06,374,[OIMCP.ADCS],tcADUtilLDAPController::searchResultPageEnum() Enter
DEBUG,29 Oct 2008 19:48:06,374,[OIMCP.ADCS],tcADUtilLDAPController::connectToAvailableAD() Enter
DEBUG,29 Oct 2008 19:48:06,374,[OIMCP.ADCS],tcADUtilLDAPController::hashTableEnvForDirContext() Enter
DEBUG,29 Oct 2008 19:48:06,374,[OIMCP.ADCS],tcADUtilLDAPController::hashTableEnvForDirContext() Exit
DEBUG,29 Oct 2008 19:48:06,374,[OIMCP.ADCS],tcADUtilLDAPController::hashTableEnvForLDAPContext() Enter
DEBUG,29 Oct 2008 19:48:06,375,[OIMCP.ADCS],tcADUtilLDAPController::hashTableEnvForLDAPContext() Exit
DEBUG,29 Oct 2008 19:48:06,375,[OIMCP.ADCS],tcADUtilLDAPController::validateCertificates() Enter
DEBUG,29 Oct 2008 19:48:06,375,[OIMCP.ADCS],tcADUtilLDAPController::validateCertificates() Exit
DEBUG,29 Oct 2008 19:48:06,375,[OIMCP.ADCS],Critical Extensions Supported
DEBUG,29 Oct 2008 19:48:06,375,[OIMCP.ADCS],tcADUtilLDAPController::invalidateSSLSession() Enter
DEBUG,29 Oct 2008 19:48:06,549,[OIMCP.ADCS],tcADUtilLDAPController::invalidateSSLSession() Exit
DEBUG,29 Oct 2008 19:48:06,989,[OIMCP.ADCS],tcADUtilLDAPController::connectToAvailableAD() Exit
ERROR,29 Oct 2008 19:48:06,989,[OIMCP.ADCS],The error occured in tcADUtilLDAPController::searchResultPageEnum():Unbalanced parenthesis
DEBUG,29 Oct 2008 19:48:06,989,[OIMCP.ADCS],tcADUtilLDAPController::disconnect() Enter
DEBUG,29 Oct 2008 19:48:06,990,[OIMCP.ADCS],tcADUtilLDAPController::disconnect() Exit
DEBUG,29 Oct 2008 19:48:06,990,[OIMCP.ADCS],tcADUtilLDAPController::searchResultPageEnum() Exit
DEBUG,29 Oct 2008 19:48:06,990,[OIMCP.ADCS],ActiveDirectoryRecon::performReconciliation() Exit
INFO,29 Oct 2008 19:48:06,990,[OIMCP.ADCS],End of Active Directory Reconciliation....
DEBUG,29 Oct 2008 19:48:06,990,[OIMCP.ADCS],ActiveDirectoryReconTask/execute End
Thanks in advance,
Tomic

Hi,
Try this and it will work.I am using it.
(&(objectClass=user)(!(objectClass=computer)))
Regards
Nitesh

Similar Messages

Using LDAP Query in Active Directory to see what users are still logged ?

any suggestions for a LDAP query that I can use in AD to see who is still logged into the network?
It would be great to distinguish who's logged in with a screen lock which means they aren't really at their PC vs what users are actually using their PCs.
Thanks in advance!

I recently posted a framework for checking all machines to see who is logged into them. You can take that and adjust it as you need.
https://social.technet.microsoft.com/Forums/en-US/fb2ef90a-ba15-41bf-8e6c-95d32256225b/how-do-i-run-this-query-from-a-text-file-list?forum=ITCG
Don't retire TechNet! -
(Don't give up yet - 13,085+ strong and growing)

Active Directory Connector Questions in 11.1.2.1

Hello All. I am new to this version of IDM and I am trying to get through the setup and config. I just installed a single instance of 11.1.2.1 with OUD, OAM, OIM. I installed the Active Directory connector for User Management and I believe I have it configured.
I followed the post at Weblogic Corner: Oracle Identity Manager: The Active Directory Connector Tutorial and got a lot of questions answered with that. First, note that I was able to follow the guide and run the lookup recon jobs as well as the user and group recon in trusted mode, then target mode to create all of the users and groups. I am also able to create a user in OIM, add an account and have that provisioned to AD.
Here are my questions if you would be so kind:
1) When I create a user in AD and I run the user recon(target), the event says "No User Match Found". I was kind of expecting it to create a new user for me. I was also expecting to schedule the recon job in target mode and not have to ever switch back to trusted mode after the first full sync. What did I miss here?
2) When I add an account to the user in OIM, the AD User form comes up with all the fields empty. Is that the way it should work? I was hoping that it would prepopulate some of the stuff from the OIM profile.
3) When I modify a field in OIM, say middle name, will that sync in the next recon run, or will the admin need to open the account, update the AD form also and submit the middle name in two places?
Thanks in advance!

1. Identity gets created in Oracle Identity Manager from an authoritative source. in case of target recon, it will just sync with the matched account in oim.
please have a look in the below link seccion 12.1.12
Managing Reconciliation - 11g Release 2 (11.1.2)
2.u can very well prepopulate filed in the process definition, even u can automate the provisioning process using role based when provissioning process.
3.there should be some tasks available for each field. no need run the recon task or modify the account in AD. it will be updated in AD using the tasks. check the connector process definition.

Active Directory Connector 9.1.1.7 for OIM 11.1.1.5.0

Hi everyone,
Do you know where I can download Active Directory Connector 9.1.1.7 on oracle website ? Cause everytime I do a search the only link I have is for downloading the most recent version (11.1.1.5.0).
Thanks a lot !
Thibault

For future generations, the connector can be found at :
http://download.oracle.com/otn/nt/ias/connectors/910/MSFT_AD_Base_9.1.1.7.0.zip

JPA using native query - distinct

Hi All,
Kindly suggest on the following,
I am facing issues on using the distinct keyword in JPA, Ful details on the following OTN thread.
JPA using native query - distinct
Any help is much appreciated
VR

Any ideas ?

Activating Windows 7 by using KMS Without the Active Directory Domain environment

Dear,
Can we able to activate the Windows 7 O/S Machines by using KMS without the Active Directory Domain environment,As our some of the Computers will not connect with AD domain, we need to setup the speprate KMS
server for this.
Thanks
Balaji K

You can point the KMS clients to the KMS host machine by opening an Elevated CMD prompt:
and running slmgr /skms to point directly to the KMS host.
You do not need a Domain controller.
Volume Licensing: Key Management Service (KMS) Client Options:
/skms <Name[:Port] | : port> [Activation ID] [Activation ID]
Set the name and/or the port for the KMS computer this machine will use. IPv6 address must be specified in
the format [hostname]:port /ckms [Activation ID]
Arnav Sharma | http://arnavsharma.net/ Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading
the thread.

Problem migrating account from one active directory domain to another. Using NetBIOS

Hello,
I'm migrating a Lion machine from one domain to another. When I try to join it to abc.example.com it joines it to 123.example.com in the list of domains. 123.example.com is the NetBIOS name of abc.example.com. This configuration does not work.
What is even more strange, is if I go into the Open Directory Utility > Active Directory to set the create mobile account settings, once I apply the settings (or even if I don't apply the settings) when I get back to the list of domains, it show BOTH abc.example.com and 123.example.com as domains I am joined to. If I remove 123.example.com it removes abc.example.com.
I've only seen this problem one other time and this was with a snow leopard machine that was not bound to AD. I upgraded it to Lion and tried to bind it, and had the exact same thing occur.
I'm certain there is a "stuck" setting somewhere that is causing this. I have had successful snow leopard > lion upgrades work, and many lion machines joined to AD so this does work normally. Just not sure whats wrong or really where to look.
The OS is fully patched and updated to the current version.
Any thoughts?

Case 1:
Here you can written pre-update event handler which will check whether minor and major org code changed or not.
If changed then first starts de-provisioning and then start provisioning.
If not changed then do nothing.
This approach will not transfer accounts from one domain to another but it will create fresh accounts and remove accounts from old domain.
Case2:
If you want to transfer accounts from one domain to another in that on pre-update you have to change OU of user on process which automatically move to another domain.
but not sure about exchange it is possible to move to another domain.
hopping that all domains under same forest otherwise same Connector Sever will not work.

How to create mailboxes under mac os x 10.6.4 either using ldapv3 or windows active directory?

hi,
i'm working on the mail server of our company. the plan is to implement the built in mail server feature of mac mini OS X 10.6.4 using either ldapv3 or preferably our existing window active directory users.
i was able to set the open directory and can view the user accounts from AD. my problem is i do not have any clear documentation or manual on how to create mailboxes using either AD accounts or MAC LDAPv3. i already checked the manual of mac os x mail service administration and have found none pertaining to this case.
i would really appreciate if someone can give me reference on how to do this. as of now im quite desperate because i have a deadline for this project.
thank you in advance for your help.

You said, "A 2014 iMac can't run either Snow Leopard or Lion." I know that. What I want to know is how I can install Lion or Snow Leopard on a peripheral hard drive, NOT on my iMac.
– Larry

Query Microsoft Active Directory info from PL/SQL

Hi,
We are developping an APEX application that would need to query information about the enterprise computers defined on the Active directory. Anyone knows it would be possible acces to this info from PL/SQL?
I ahve read that exists a package that enables manipulate COM objectes (http://download-east.oracle.com/docs/cd/B10501_01/win.920/a95499/ch3core.htm#1006978)
and I know that they exists COM interfases to Active Diretory (they are named Active Directory Service Interfaces (ADSI) ) but I have no idea if its possible to succesfully merge these 2 concepts.
Has anyone tried to query Active directory info from PL/SQL using COM components or any other method?
Thanks by advance

Why not use DBMS_LDAP? That is what APEX's (built-in) LDAP authentication module uses. And it works just fine (doing a bind call) against a MS Active Directory Server.
As for mucking about with COM from Oracle.. me no like. That ties your Oracle and PL/SQL to a specific operating system and you loose of the biggest advantages of Oracle - portability. Worse, you are at the mercy of the o/s vendor sticking to whatever standards used. In the case of Microsoft, that means mostly proprietary "standards" and very likely changes in those "standards" with every new version of the o/s - which will break your software. (personal experience talking)
Rather let Oracle deal with the o/s complexities and restrict your code to using Oracle features only, as far as possible.

Problems with db query in activity in OBPM 10GR3

I wrote the following query in the activity itself
INSERT INTO TEMP_TABLE(NAME)
VALUES (testName);
It worked fine in DEV environment.
But when I deployed the project to QA and connected to the db in QA, it gave me an error:-
---A SQL Exception has occured in Cause f SQL Excepion: java.sql.SQLException: [BEA][Oracle JDBC Driver][Oracle]ORA-00942: table or view does not exist SQLState: 42S02 SQLErrorCode: 942 Message: [BEA][Oracle JDBC Driver][Oracle]ORA-00942: table or view does not exist
Why is that?
I understand that if I use DynamicSQL.executeQuery(sentence : sqlQuery, implname : implname);
it will work even if I change to connect from DEV To QA
But if we use the query directly in the activity itself , it does not work in QA.
Why is that?
how do I fix that to work in all environments?

Hi Dan,
I did not understand you.
I do the following:-
1) Create an external resource with a generic name say TEMP_DB and give all the Oracle db credentials, username, password, SID, schema and port. This is connected.
2) Then I Catalogue this in my Catalog using Catalogue Components-->SQL.
3) I select the "Use an existing configuration" option and select my newly created external resource which I named as "TEMP_DB"
4) When I hit next, it fetches me the db information
5) In that I select the db schema name and introspect the tables in it.
6) These tables are then entered into my catalog
7) Finally I use a direct BPM query instead of using Fuego.Sql.DynamicSQL.executeQuery() in my activity itself.
So the problem is that, even if I change the External Resources config giving it a generic name, I have selected the same DEV schema name. The schema is directly introspected which I directly use in my query in my activity
as oppsed to using DynamicSQL.executeQuery() where I don't specify the schema name . I just specify the External generic resource name which is TEMP_DB.
But I don't want to use DyanamicSQL.executeQuery(). So how do I resolve this problem with using it?

How to deploy EUS using OVD with existing active directory ?

Hi,
I am new in Oracle FMW and want to explore more into it,
I have existing MS active directory with users and group policies defined there and I need to implement the solution for all users to authenticate in oracle Database (11gR2) via AD.
and after searching reading some docs I came to know that It can be done by "EUS deployment using AD and OVD".
Now I am bit confused for where to start Please guide me . My env is as follows
I have existing MS AD server (win2003) and oracle Database 11gR2 on HP unix..So Do I need another server (Win2003/2008) to install OVD or can I install OVD on existing AD server.
What exactly software required to install OVD as I have downloded software from e delivery site "Oracle Identity and Access Management 11g (11.1.1.7.0)"
Is it same or do i need to download other one?

Check this:
Installing and Configuring Oracle Virtual Directory
OIM Image: OID and OVD 11g Basic Install Steps
Oracle&reg; Fusion Middleware
Middleware Technologies : Installing Oracle Virtual Directory

Use UNC path from Active Directory to derive network home location

Good Morning
I am trying to get my Macbooks to conenct to a Windows Server 2003 home directory. I have followed the steps in the following article with no luck:
http://docs.info.apple.com/article.html?path=serveradmin/10.4/en/c7od49.html
I can bind to the Microsoft Active Directory with no problems and I can connect to the file share on the server that I want to make the network home location, but I can't get it to work automatically as I would expect it to.
We will have hundreds of users connecting that will need their home folders redirected to the network folder location.
Any help would be appreciated.
Thanks

I forgot to mention that before upgrading to 10.8.4 the login item below was present:
Item: SMB://network path
Kind: Unknown
After the upgrade:
Item: Unknown
Kind: Unknown
After restart it disappears and never returns (again, this only occurs for admins)

Problem Creating Oracle Schema in Active Directory

Hi,
I am trying to integrate oracle 9i in an Microsoft Active directory domain
I tried to integrate the db in the domain using net configuration assistant on the Oracle Client but
I get always the same error after inserting the fully name of domain controller and confirm to create the oracle schema. The error I get is:
“The Assistant is unable to create or update
the schema for the following reason:
ConfigException: Could not create Oracle schema oracle.net.config.ConfigException
You must update the schema from a computer which directly supports
your type of directory."
Also I checked every requirement to install:
-Log on as an Administrative account in the domain
-Enable active directory schema changes
-ping the whole dns domain, the fqdn of my domain controller is dc.ecm.com, I can:
ping dc.ecm.oracle
At this point I don’t know anymore what I can do.
Please help me
Thank you in advance
Fahim Ghauri

Take a look at metalink Note:361192.1
Bug 3975572 - "...Netca 10g can successfully create a schema and context in W2k but does not in W2003. This reproduces on both the domain server and a client..."

Problem use SQL query in coding report with SBO

Hi everyone!
I have problem in execute query to delete and create a report with SQL 2000 in SAP.
Try
        oForm.DataSources.DataTables.Item(0).ExecuteQuery("DELETE FROM rptReport")
Catch ex As Exception
End Try
         oForm.DataSources.DataTables.Add("TestReport")
         oForm.DataSources.DataTables.Item(0).ExecuteQuery("SELECT     Number, RefDate, Memo        into rptReport   FROM         dbo.OJDT")
         oTable = oForm.DataSources.DataTables.Item("TestReport")
This code is error. I don't know how to execute 2 this sql command. Hope everyone help me hix hix! .

/Invalid query tree [300-33]. The SQL error is 8180/
But search in SQL book hasn't got that err. Some person spoke ExecuteQuery property wasn't support Table Delete and Create, it only support simple Select... I tried to use Recordset but don't success. Can I use "Delete" and "Select ... Into..."   query another style??? Help me, please...!!!

Re: single log-on (SSO) using Windows 2000 and Active Directory

Hi Honggo,
Its possible to see all the Active Directory users in WLS6.1 by
configuring the ldap realm.
You can use any of the username/password in ldap but you still have to
login again.
However the concept of single sign on across operating system and WLS
might not work in WLS6.1. WLS 7.0 allows you to write code that
supports these kind of things better.
honggo wrote:
anybody know how to use windows 2k authentication
(implemented by Active Directory)
to support SSO in WebLogic Server?
What I mean is I want to login once and only once
in win2000 and somehow weblogic server know
who is currently logon and impose some Access Control
many regards in advance
honggo

Replying again because it didn´t seem to work last time.
Could you be more specific? What code do I have to write to achive single sing on across Windows and WLS 8.1?
Regards
Mauricio Hurtado
Banco de Mexicio

Problems using native query in Active Directory connector v 9.1

Similar Messages

Maybe you are looking for