Retrying provisioning Task error in OIM11g
Hi to all.
I'm facing a strange issue when trying to retry a provisioning task. In particular, I have connected the OIM11g to an UNIX Server. When the provisioning task is rejected (I'm trying to provision an already provisioned user login, causing SSH_USER_USEREXISTS_FAIL error), the provisioning task goes correctly in "Rejected" status. With the same user that tries to finalize the privisioning, I try to "Retry the provisioning task". But this retry fails. It says me: "Unable to retry task", and the OIM log says "<XELLERATE.APIS> <BEA-000000> <The logged in user does not have permissions to perform this operation>". But the user is the same that I used to finalize the provisioning task.
Could anyone help me? I've already tried to assign the user all the privileges to complete the retry of the task but this did not solved my issue.
Thank you all in advance.
Regards,
Giuseppe.
Hi All,
I have the same requirement so I created a custom role and addded the above Data Object permissions for the role. In the organization I had added the custom role in Administrative role list with write access but still I am getting error saying 'Logged In user does not have permissions'. Added all the permissions present in Data Object Permissions for this role but still I am getting the same error. When I add the system Administrator role as super role to my custom role then the user who belongs to the custom role is able to retry the task but I cant give this permission to this role. So please suggest me if I miss anything.
Thanks,
Rajesh
Similar Messages
-
Manual Provisioning task throwing error
In OIM 10g we have a manual provisioning task which is assigned to an user. when he tries to click Set Response he is getting 'UNKNOWN' also as one of the options with the other two options 'Complete' and 'Cancel'. Also when trying to Complete the provisioning process it throws an error as
DOBJ.SCHTM_SCH_DATA_CHANGED
Schedule data cannot be changed once it has been set.
Please let me know what might be the cause. Thanks
Regards,
DurgaprasadHi Kevin,
Thanks for your reply. I dont have a process task adapter attached to this task. I have a task assignment adapter only. Also i dont have any clue why 'UNKNOWN' option is getting displayed in the set response page.
Regards,
Durgaprasad -
How do you complete or re-attempt failed provisioning tasks
Hi All,
If a modify operation has been perfomed, and subsequent provisioning tasks failed, is there a way to get IdM to go back and attempt to complete the failed task and remaining tasks.
For example, when the MX_VALIDTO attribute changes we call an event task to determine if MX_DISABLED should be set or not. This task is a generic pass which executes some logic which evaluates other attributes. This step failed because we caused an error to be raised due to an unexpected value in one of those other attributes.
We have now modified the logic in the script and want to 're-provision' the failed task without triggering a new change on the identity.
I know about the uRetryPrivilegeAdd and uRetryPrivilegeRemove internal functions, but it seems as if these only deal with cases where privilege assignment had failed. Is there something similar that will reconcile and clean up failed task heirarchies where it is just attribute / entry modifications rather than privilege assignments.
Regards
PaulHi Paul,
Hope all is going well with your project, the two bits of code you need for this are:
Find all the failed privileges for an Identity
var sql = "SELECT MSKEY,aValue,provstatus FROM MXPV_Priv_AddStatus WHERE (MSKEY = " +V_MSKEY +" and (ProvStatus = 1001 or ProvStatus = 1101))";
sqlresult = uSelect(sql);
This will give you a load of pairs of failed MSKEY - identity and aValue - privilege, which you need to split into strings via an array and then into values, and you can then retry using
retry = uRetryPrivilegeAdd(provmskey,provavalue);
I've put the full code on http://sap-idm.blogspot.com/2011/01/retrying-failed-provisioning-tasks-in.html in case you need more information.
Good luck,
Ian Daniel -
OIM provisioning in bulk causes several provisioning tasks to be listed as
OIM 9102 Provisioning in bulk causes several provisioning tasks to be listed as "provisioning in queue" We are using offline provisioning as we had some issues running without it.
If i bring in via trusted resource, 10 or so users, the first 5 or 6 work fine, and then 1 or 2 will show some of their resources as provisioning in queue. It looks like it didn't get around to running those as I don't see errors in the log(debug on everything) if I open and save the form, they provision immediately with no trouble. I'm just trying to figure out what the hold up is, and is there a way to have it automatically retry when this happens?
Any help would be great.also each one this happens to is a different resource. on a different user. and each is stuck and system validation.
-
GOOGLE APPS PROVISIONING TASKS FAILS.
Hi all,
We are using custom connector for googleapps.While am provsioning to googleapps some of the tasks are getting rejected like "create user" task. Also while trying to update first name ,lastname ,"firstname updated","lastname updated" tasks are being rejected. This is not always happening ,only sometimes it is getting rejected.when am trying to RETRY the task then it is being completed successfully.What i found in the resource history is :
Error Details
Setting task status... "com/google/gdata/data/appsforyourdomain/provisioning/UserEntry" does not correspond to a known Response Code. Using "UNKNOWN".
I am unable to trace the logs as it is not even triggering the java code in the adaptor.Is it like it is unable to find the dependent jars like appsforyourdomainclient jar,g-data-appsforyourdomain etc jars which are placed in domain home lib folder.for ex:/orasw/oracle/middleware/user_projects/domains/base_domain/lib location. If needed,i can provide the code also.
We are in UAT AND THIS IS A SHOW STOPPER FOR US TO GO TO PRODUCTION. SO PLEASE HELPME OUT.
How can i resolve this?
THANKSIs there anything more complete?
as much as I love his (Ray Camden's) work, this cfc was last updated in 2008 and is "read only" on the google contacts api...
I need to find something that create contact groups and modify existing groups... Read Only isn't going to cut it for my purposes..
Thanks for the quick response though, it brought me to one that I hadn't found yet (even if it was incomplete, it was one I hadn't seen before) -
How to retry provisioning for pending values ?
Hi,
Our environment is IDM 7.2 SP7.
And we have couple of users whose master privilege (PRIV:ADLDS:ONLY) is in pending state for quite a long time.
I could filter those entries using mcExecState=512 in idmv_link_ext. It looks to me the reason for pending state is it's referring to some of the old notification tasks previously we had. Now those tasks are replaced by new one but i could see the old notification task is still under MX:Pending_Delete folder.
I tried using some of the internal functions (uRetry_Privilege/uIs_PrivReconcile) but that doesn't seems to fix the problem. So is there anyother way available to clean up those mcExecState=512 entries or retry provsioning with new tasks linked ?
Thanks,
KarthikThanks for reverting back immediately.
I executed the shared query and following are my observation
select * from mxp_provision where msg like 'Wait for%'
Output : No Result
So there are no tasks with msg 'Wait for%' exist in our environment.
1. Select * from mxp_provision where AuditRef=381162 (Considering 1 affected user flow)
Output: Returned 3 rows (as the old provisioning task had 2 ordered task group and a Conditional task)
Here It looks to me the provisioning flow is stuck at Conditional Task and MSG value is 'FALSE' so i tried to modify false branch in the condition and tried to make it 'skip entry' for completion but that doesn't seem to get triggered.
2. Select * From Mxp_Audit Where AuditID=381162
Output: 1 Row with ProvStatus as 1 (does ProvStatus=1 implies blocking here ?)
Do you think executing below query will remove the blocking state and can get completed ?
update mxp_audit set provstatus=1100 where auditid = 381162 -
No email notification from manual provisioning task - 11gR2
I have a disconnected application instance and I am using the standard DisconnectedProvisioning flow for provisioning - modified to assign the provisioning task to a group, using a rule which determines the group via the app. instance name.
The flow itself works as expected and the Manual Task in the flow is assigned to the correct group - the task shows up in the Inbox of the member of the group in the Self Service console
I would like to send an email to the user when the task is assigned and I have therefore configured SMTP Notification according to this http://allidm.com/blog/2012/11/configuring-smtp-notifications-in-oracle-identity-manager-11gr2/
I have confirmed that the SMTP server works as expected - I am able to send and receive message using this server.
On the Notification Tab of my Manual Task I have configured:
General:
Status: Assign / Recipient: Assignees
Status: Complete / Recipient: Initiator
Status: Error / Recipient: Owner
Advanced:
Remind Once: 0 days, 0 hours, 1 minute "After Assignment"
Encoding: UTF-8
Make Notifications Secure: False
Show worklist/workspace URL in notification: True
Make notification actionable: True
Send Task attachment: False
Group Notification Configuration: "Send individual emails"
I have redeployed my DisconnectedProvisioning flow to my SOA server a couple of times - remembering not to change the version number and to force overwriting the existing flow.
My SOA and IDM servers have been restarted as well.
When requesting the disconnected application instance using the catalog, the manual provisioning task is assigned to the correct user - however - he does not receive any email nor do I send any errors or stack traces from my SOA or IDM servers.
There must be some check box somewhere that I forgot to tick!
Does anybody have an idea - did I forget to configure something?
Kind regards,
- TomOk - so I did in fact forget to tick a check box!
After setting up UMS using this: http://docs.oracle.com/cd/E27559_01/admin.1112/e27149/notification.htm#CACCEDGF and enabling notifications via:
Enterprise Manager, SOA, soa-infra, SOA Infrastructure drop-down, SOA Administration, Workflow Config:
Notification Mode: Email
After restarting my SOA and OIM managed servers - I now receive emails as expected.
Case closed :-)
Kind regards,
- Tom -
Is there a way to generate a report of task errors? I have a "Load from Resource" task that generated errors but I don't want to go through each of the 7000+ pages to find the ~230 errors.
I have tried to create a new Task Report but it won't Save or Run.You might want to find the task and add a custom audit event on the task. If it's a default task you might be able to find it using audit log report.
-
File system task error ; Access to the path " " is denied
HI All,
I have created a simple package to copy xml files from multiple source folders to destination folder.
Folder names and paths are stored in a sql table. I use execute sql taks to get folder and path names. set the restult set to full result set in the execute sql task.
Then for each loop is used to loop through each file name. File system taks is inside the for each loop. Destination vairable and source varable were created and assigned them inthe file system task.
But I am getting an error message.
[File System Task] Error: An error occurred with the following error message: "Access to the path '\\cor\Groups\DN\Share2\Servicing \RESPONSE_FILES\Services' is denied.".
But I am able to do this if i design the package to move just one file. i.e without using variables. I get the error message only when I use variables.
Can anyone tell me how to fix this please?
Thanks
shamenHow to give the access please.
Ramu Gade
Login using a sysadmin account
Go to the folder right click security and you've the option to add new account. You should give account write access if you want to copy files to folder.
see
http://technet.microsoft.com/en-in/library/bb456988.aspx
Please Mark This As Answer if it solved your issue
Please Vote This As Helpful if it helps to solve your issue
Visakh
My MSDN Page
My Personal Blog
My Facebook Page -
Failed to load Execute Package Task error.
Hello Experts,
Excuse my newbie question.
Execute Package Task: Error: The task has failed to load. The contact information for the task is "Microsoft Corporation; Microsoft SQL Server; Microsoft corporation; All Rights Reserved http://www.microsoft.com/sql/support/default.asp:1"
We have a windows service running on our app server that deploys a package that executes other packages using execute package task. This package and rest of the packages are in the same folder at the same level under integration services
catalog. The package fails to execute with the above said error.
Execute package task is configured to run in 'in-process' mode. Changing delay validation to true/false in child packages didn't help.
ironically if the package is deployed using a console application from the app server the package gets executed just fine. I checked permissions, everything seem fine.
Is there anyway to get details of this error to understand the problem better? I am looking at reports > standard reports > all executions.
Thanks.As it turns out, the 63bit ExecPackageTask.dll was not found under "C:\Program Files\Microsoft SQL Server\110\DTS\Binn". Installing "SQL Server Data Tools" installed only 32 bit version of the component under "C:\Program Files (x86)\Microsoft SQL
Server\110\DTS\Binn".
Is there a way to get 64bit version of this component without installing "Integration Services" (to avoid possible license issues)?
Hi Jayakarthiks,
To make use of the 64-bit ExecPackageTask.dll, you also need the 64-bit SSIS runtime and 64-bit DTExec utility tool. To obtain the 64-bit SSIS runtime and tools, you have to install the SQL Server Integration Services service from your SQL Server 2012 install
media.
Reference:
http://msdn.microsoft.com/en-us/library/ms143731.aspx
Regards,
Mike Yin
If you have any feedback on our support, please click here
Mike Yin
TechNet Community Support -
Hi all,
I am having a list of files in a folder named datafiles and I am processing them one by one when I finish each one I want to move the file into a folder archive.
I am having a variable named filename and archivefilename and two fileconnections one is originalfiles and archivefiles
archivefilename=replace( @[User::filename],"datafiles","archive")
orginalfiles connection is an expression =@user:filename
archivefies connection is an expression=@user:archivefilename
the filename comes from reading the folder that contains those files
public void Main()
string[] filenames;
filenames = Directory.GetFiles(@"C:\luminis\datafiles\");
Array.Sort(filenames);
Dts.Variables["filelist"].Value = filenames;
Dts.TaskResult = (int)ScriptResults.Success;
The folder c:\luminis\archive\ exists
why I am getting this error
My filesystem task : destinationpathvariable =false
destinationconnection:archivefile
overwrite=true
operation=movefile
issourcepathvariable=false
sourceconnection=original file
why am i getting this error[File System Task] Error: An error occurred with the following error message: "Could not find a part of the path.".
sohairzakithere may be 2 problem...
1> specify a target directory only, not with the file name.
OR
2> Try using the unc,path format \\computername\sharename\
let us know your observation...
Let us TRY this | Mail me
My Blog :: http://quest4gen.blogspot.com/ -
Hi, After successfully testing connection to my source web service, while executing my web service task, I face the following error. Can anyone help me????
[Web Service Task] Error: An error occurred with the following error message: "Microsoft.SqlServer.Dts.Tasks.WebServiceTask.WebserviceTaskException: Could not load the proxy for the specified Web service. The error is: Could not load file or assembly
'iiglotg3.dll' or one of its dependencies. Access is denied..
at Microsoft.SqlServer.Dts.Tasks.WebServiceTask.WebMethodInvokerProxy.loadProxyInAppDomain()
at Microsoft.SqlServer.Dts.Tasks.WebServiceTask.WebMethodInvokerProxy.InvokeMethod(DTSWebMethodInfo methodInfo, String serviceName, Object connection)
at Microsoft.SqlServer.Dts.Tasks.WebServiceTask.WebServiceTaskUtil.Invoke(DTSWebMethodInfo methodInfo, String serviceName, Object connection, VariableDispenser taskVariableDispenser)
at Microsoft.SqlServer.Dts.Tasks.WebServiceTask.WebServiceTask.executeThread()".
Regards,
Njdeh TahmasianCould not load file or assembly 'iiglotg3.dll' or one of its dependencies.
Access is denied..
Looks like a permission issue or maybe the assembly don't exists on the server where the package is running; you should check that first.
Olaf Helper
[ Blog] [ Xing] [ MVP] -
I have an package with source , data flow and destination to execute on begin and commit.
in the below i have just used for questioning purpose with diagram removing my Data Flow task explaining my problem
on execution, i get error as
[Execute SQL Task] Error: Executing the query "COMMIT TRAN DimCompanyCode" failed with the following error: "The COMMIT TRANSACTION request has no corresponding BEGIN TRANSACTION.". Possible failure reasons: Problems with the query, "ResultSet"
property not set correctly, parameters not set correctly, or connection not established correctly.
as mentioned , i have checked the ResultSet, parameters , connection establish.. all are fine.
Kindly advice on what has to be done.
ShanmugaRajTo avoid this error, the RetainSameConnection property should set to 'True' for the Connection Manager - Application_DB.
Narsimha -
I am using the following query in Execute SQL Task
SELECT CASE(SELECT COUNT(*) FROM STG_APJ_APIW_DETAILS
WHERE source_filename = ?
AND lTRIM(RTRIM([BILLING DATE])) <> '') WHEN 0 THEN (SELECT CONVERT(VARCHAR(8), GETDATE(), 112) AS [YYYYMMDD])
ELSE
(SELECT TOP 1 [BILLING DATE] FROM STG_APJ_APIW_DETAILS
WHERE source_filename = ?
AND lTRIM(RTRIM([BILLING DATE])) <> '')
END
In parameter Mapping i have created two parameters and in result set i choose my variable.
Result set property is Single Row.
Following is the error message i received,
[Execute SQL Task] Error: Executing the query "SELECT CASE(SELECT COUNT(*) FROM STG_APJ_APIW_DETA..." failed with the following error: "Syntax error, permission violation, or other nonspecific error". Possible failure reasons: Problems
with the query, "ResultSet" property not set correctly, parameters not set correctly, or connection not established correctly.
SarvanI cant see where you've named resultset. try like below to make sure resultset has the name used in resultset tab
SELECT CASE(SELECT COUNT(*) FROM STG_APJ_APIW_DETAILS
WHERE source_filename = ?
AND lTRIM(RTRIM([BILLING DATE])) <> '') WHEN 0 THEN (SELECT CONVERT(VARCHAR(8), GETDATE(), 112))
ELSE
(SELECT TOP 1 [BILLING DATE] FROM STG_APJ_APIW_DETAILS
WHERE source_filename = ?
AND lTRIM(RTRIM([BILLING DATE])) <> '')
END AS [Billing Date]
Please Mark This As Answer if it helps to solve the issue Visakh ---------------------------- http://visakhm.blogspot.com/ https://www.facebook.com/VmBlogs -
SSIS - Using Variables in Execute SQL Task Error
The following query in my Execute SQL Task throws the following error when run - [Execute SQL Task] Error: Executing the query "SELECT @columnz = COALESCE(@columnz + ',[' + times..." failed with the following error:
"Must declare the scalar variable "@columnz".". Possible failure reasons: Problems with the query,
"ResultSet" property not set correctly, parameters not set correctly, or connection not established correctly.
Query:
drop table tmpNCPCNCDownstreamMaxUtilization3wks
select node, max(utilization) as max_Utilization, DATE
into tmpNCPCNCDownstreamMaxUtilization3wks
from stage_ncpcncdownstream_temporal
WHERE Date BETWEEN DATEADD(day, -20, GETDATE()) AND GETDATE()
group by node, date
order by node
go
alter table tmpNCPCNCDownstreamMaxUtilization3wks add Timestamp varchar(50)
go
update tmpNCPCNCDownstreamMaxUtilization3wks
set Timestamp = 'WeekOf_' + cast(left(Date, 11) as varchar)
go
--drop table tmpNCPCNC_DownstreamNodeUtilizationMaxPivot
--go
declare @columnz varchar (8000)
go
SELECT @columnz = COALESCE(@columnz + ',[' + timestamp + ']','[' + timestamp+ ']')
FROM tmpNCPCNCDownstreamMaxUtilization3wks group by timestamp order by timestamp
go
--pivot contents in @columns
declare @query varchar(8000)
SET @query ='select * into tmpNCPCNC_DownstreamNodeUtilizationMaxPivot from
(select node, timestamp, Max_Utilization from tmpNCPCNCDownstreamMaxUtilization3wks)a
pivot
sum(max_Utilization) for timestamp in('+ @columnz +')
)as p'
execute (@query)
--empty contents from NCPCNCDownstreamMaxUtilization3wks
update tmpNCPCNCDownstreamMaxUtilization3wks
set timestamp =''
truncate table tmpNCPCNC_MaxDownstreamNodeUtilzationChart3Week
--load to table to be joined to Node feature class
insert into tmpNCPCNC_MaxDownstreamNodeUtilzationChart3Week
(Node, TwoWeeksAgo, PreviousWeek, CurrentWeek)
select * from tmpNCPCNC_DownstreamNodeUtilizationMaxPivot
--calculate average utilization for all values in each record
update tmpNCPCNC_MaxDownstreamNodeUtilzationChart3Week
set average = (coalesce(twoweeksago, 0) + coalesce(previousweek, 0) + coalesce(currentweek, 0))/3
from tmpNCPCNC_MaxDownstreamNodeUtilzationChart3Week
ScottIssue is with variable @columnz.
Scope of variables is only limited to the batch and if batch is over Variable is no more accessible.
Reproduce Steps:
DECLARE @columnz int = 0
Go --Scope of @columnz ends here
SELECT @columnz -- Ends up with error
So you have to remove GO keyword. I have commented 2 of them in below:
DROP TABLE tmpNCPCNCDownstreamMaxUtilization3wks
SELECT node
,max(utilization) AS max_Utilization
,DATE
INTO tmpNCPCNCDownstreamMaxUtilization3wks
FROM stage_ncpcncdownstream_temporal
WHERE DATE BETWEEN DATEADD(day, - 20, GETDATE())
AND GETDATE()
GROUP BY node
,DATE
ORDER BY node
GO
ALTER TABLE tmpNCPCNCDownstreamMaxUtilization3wks ADD TIMESTAMP VARCHAR(50)
GO
UPDATE tmpNCPCNCDownstreamMaxUtilization3wks
SET TIMESTAMP = 'WeekOf_' + cast(left(DATE, 11) AS VARCHAR)
GO
--drop table tmpNCPCNC_DownstreamNodeUtilizationMaxPivot
--go
DECLARE @columnz VARCHAR(8000)
--GO
SELECT @columnz = COALESCE(@columnz + ',[' + TIMESTAMP + ']', '[' + TIMESTAMP + ']')
FROM tmpNCPCNCDownstreamMaxUtilization3wks
GROUP BY TIMESTAMP
ORDER BY TIMESTAMP
--GO
--pivot contents in @columns
DECLARE @query VARCHAR(8000)
SET @query = 'select * into tmpNCPCNC_DownstreamNodeUtilizationMaxPivot from
(select node, timestamp, Max_Utilization from tmpNCPCNCDownstreamMaxUtilization3wks)a
pivot
sum(max_Utilization) for timestamp in(' + @columnz + ')
)as p'
EXECUTE (@query)
--empty contents from NCPCNCDownstreamMaxUtilization3wks
UPDATE tmpNCPCNCDownstreamMaxUtilization3wks
SET TIMESTAMP = ''
TRUNCATE TABLE tmpNCPCNC_MaxDownstreamNodeUtilzationChart3Week
--load to table to be joined to Node feature class
INSERT INTO tmpNCPCNC_MaxDownstreamNodeUtilzationChart3Week (
Node
,TwoWeeksAgo
,PreviousWeek
,CurrentWeek
SELECT *
FROM tmpNCPCNC_DownstreamNodeUtilizationMaxPivot
--calculate average utilization for all values in each record
UPDATE tmpNCPCNC_MaxDownstreamNodeUtilzationChart3Week
SET average = (coalesce(twoweeksago, 0) + coalesce(previousweek, 0) + coalesce(currentweek, 0)) / 3
FROM tmpNCPCNC_MaxDownstreamNodeUtilzationChart3Week
-Vaibhav Chaudhari
Maybe you are looking for
-
In the MMC, the dispatcher stays yellow, with the status
Hi all, In My Solution Manager system, In the MMC, the dispatcher stays yellow, with the status 'Dialog Queue Info unavailable'. However, the system continues to run. Can you please help on this. Thanks suman
-
Getting Pages Files from MacBook Pro to iPad
So far, I have been e-mailing my Pages and Keynote files over to my ipad. Is there a way to get them through synching?
-
Using PS CS1 & a Canon EOS Rebel T3i. Where to get the plug-in to use camera raw?
Using PS CS1 & a Canon EOS Rebel T3i. Where to get the plug-in to use camera raw?
-
Problems with all applications after update new OS update 3.1.2
Hi, I updated my IPHONE OS today in the afternoon. I am having IPHONE 3G 8GB. Before updation all the apps was working fine now all gone I dont what to do next. I took the back up for the phone but I dont know where it kept the backup file. I am usin
-
Hi Eveyone, Tcode: MBST - What is the functions: Adopt, Adopt + Details + WM Parameters? Do you have any good example?