SAP IDM 7.2 SP09 initial load jobs error

Hello IDM experts
We are getting below error while loaidng initial jobs in IDM 7.2 SP09
java.lang.Throwable: java.lang.ExceptionInInitializerError: JCO.classInitialize(): Could not load middleware layer 'com.sap.mw.jco.rfc.MiddlewareRFC'JCO.nativeInit(): Could not initialize dynamic link library sapjcorfc [C:\Windows\System32\sapjcorfc.dll: Can't find dependent libraries]. java.library.path [C:\Program Files (x86)\Java\jre1.8.0_40\bin;C:\Windows\Sun\Java\bin;C:\Windows\system32;C:\Windows;C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft Visual Studio 9.0\Common7\IDE\PrivateAssemblies\;C:\j2sdk1.4.2_17-x64\bin\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;;.]
Could you please help us
Thanks
Krishna Gompa

Hi Krishna,
Seems to be something wrong with the JCO installation.
Check this: scn.sap.com/thread/2071966
Regards,
Ole K.

Similar Messages

GRC-IDM initial load job not enriching one system's privs

Hi GRC Experts,
We have integrated IDM 7.1 and GRC 5.3 and tested provisioning to one target system in DEV; this worked perfectly; when testing a similar configuration in Quality, we were setting up the system, and had to run the IDM-GRC Initial Load job in order to enrich the imported privileges for use with GRC AC 5.3; in the Quality system, instead of just connecting to 1 target system, we have connected to 5 ABAP systemes, ECC, PI, POSDM, BW & SRM; for some strange reason when performing the GRC-IDM Initial load job 4 of the target system's privileges get enriched, while the ECC system's privileges aren't getting enriched; I would say through random sampling all ECC profiles are getting enriched but none of the ECC privileges are getting enriched; why could this be happening? we've tried running the ECC Initial Load job and then the GRC-IDM initial load job about 8-10 times but with no luck; the set of privileges we're investigating are still not enriched; we also ran the GRC CUP role load job, also selecting the option to over-write all existing roles in the system; via this method the CUP roles have been refreshed twice so far, but running the GRC-IDM initial load job even after refreshing the ECC system's privileges in CUP has had no effect whatsoever, all ECC privileges are still left to be enriched, but strangely enough the ECC Profiles have been enriched.
Any clues as to why this could be happening? We've checked and re-checked and there is no filtering or delta being applied to any of the passes, so it really makes no sense. Is there something we should be doing apart from what we've already done? Would greatly appreciate your help with this!
Thanks a lot in advance!
Best regards,
Sandeep

What you could do is simply add the attributes by a background job to the privileges. This works fine in most cases. You need to be sure that GRC knows the role and then it is fine. The load only adds those 2 privileges and does nothing of any deeper complexity.
MX_AC_ROLEID = <rolename>
MX_APPLICATION_ID = <system name>

Filter condition in ABAP Initial Load Job

Hi,
   The ECC Initial Load JOb for IDM has been failing continuously because of 'Out of Memory' Exception
Error Description - Unhandled Error in DSERuntime - Exception:java.lang.OutOfMemoryError
   All the FROM PASSES except the "ReadAbapUsers" pass has been running successfully. We believe this could be because of the huge number of Users and User-Role Assignments(2,61,000) present in ECC System.
   Hence we thought of breaking down this process(ReadAbapUsers) into smaller chunks.i.e., fetch all the users with loginuid starting with 1; then 2; then 3 and so on... But we are not sure of the way to implement this. Please suggest an alternative.
Regrads,
Joel

Hi, I dont know if you have resolved this already or not.. but have you considered increasing the heap size ?
-->
Reading stuff from an ABAP system can return a lot entries. The
roles/entries are returned in one big lump of data, and the runtime needs to
have enough space on the heap for this.
Solution
The maximum heap size can be set in the dispatcher prop file.
Locate the the correct dispatcher prop file.
This file is a java properties file. It will be called
"Dispatcher_Service_<dispatchername>.prop" i.e. if the dispatcher name
is "test", the file name will be "Dispatcher_Service_test.prop"
Locate the section
    additional Java options
Set the maximum heap size to the desired size.
i.e To increase the maximum heap size to 512 Mb, set
JAVAOPTIONS=-Xmx512M
You can set more than one java option here, but if you do so, you also
have to set
MXDISPATCHER_EXECSTRING=1
Also note that increasing the heap size has a performance impact. We
therefore do not recommend doing this for the main dispatchers. Instead,
create a separate dispatcher for running large jobs, and do this change
only for this dispatcher.
See SAP Note 1347301

Importing Data from an ABAP system - JOB Initial Load - IDM 8.0

Hello all,
I got the error during the execution initial load job:
Value not legal for this attribute:Attribute: MX_USERTYPE" when storing attribute 'MX_USERTYPE=A'
Value not legal for this attribute:Attribute: MX_DATEFORMAT" when storing attribute 'MX_DATEFORMAT=1'
I have executed the job read value help content before start initial load job.
Could anyone explain if this attribute should be created manually in mxi_AttrValueHelp table before run the initial job?
Thanks

Hello Rafael,
There is a possibility that you have encountered a problem that we had with the language translations for the attribute values.
I would like to ask you to check one file content: could you try to open the language translations file: this should be located under ICCORE -> Database Schema -> SQL-Server -> 9-language-data.sql
There is a chance that this file is "broken". If so - we have fixed this specific problem in the Designtime Component patch 2 (now 3 is also available) - so you would need to update to this one.
You could also take a look at the table for the attribute values help - via executing "select * from mxi_attrvaluehelp".
Kind Regards,
Rali
SAP Identity Management Development

ABAP - CUA : Initial load : too many records in the CUA?

We are running :
SP03 for IDENT. CENTER DESIGNTIME 7.1 Patch 0
SP03 for IDENTITY CENTER RUNTIME 7.1 Patch 1
SP03 for NW IDM IC UIS 7.00 Patch 1
We have connected our customer's CUA system to IdM : we created an Identity Store called 'SAP_Master', created the CUA repository, defined the required attributes as defined in the guide 'IDM 7.1 - IdM For SAP Systems - Configuration 7-3.pdf', created the jobs based upon the templates etc. The dispatcher used has 'run provisioning jobs' disabled.
On our sandbox server, when we connect to our sandbox CUA system (CUA_YS5_200), everything is ok, the 'AS ABAP - Initial load' job with only 'ReadABAPRoles' enabled, runs fine.
On our QA system, when we connect to our 'production' CUA system (CUA_YP0_400), the 'AS ABAP - Initial load' job with
only 'ReadABAPRoles' enabled, finished with message 'could not start job, rescheduling'. Since there is a huge number of records (we looked it up in the system : 311.679 records), we decided to switch on parameter 'bootstrap job'. Now the result is that it takes forever, after half a day the job is still running. In the database, table 'sapCUA_YP0_400role' is still completely empty (no records). Therefore, it seemed interesting to connect our QA IdM system to our development CUA system (CUA_YS5_200). After a while, the exact same job has finished and table 'sapCUA_YS5_200role' contains 18.580 records.
After some additional testing, we might have discoved the cause of the issue could be that the number of records in our CUA is too big.
In the java code of the fromSAP pass there are 2 calls to the SAP system for reading the roles into Idm. The first one reads table USRSYSACT (311.000 records), the second one reads table USRSYSACTT (1.000.000 records). All these records are stored into a java hashmap - we think that 1 million records exceeds the hashmaps capability, although no java error is thrown.
When we debug the functionmodule RFC_READ_TABLE and change the rowcount to 100.000 then everything works fine. When we set the rowcount to 200.000 the java-code does not generate an error but the job in idm never
ends...
When running functionmodule RFC_READ_TABLE in the backend system the 1.000.000 records are processed in less than one minute. So apparently, the issue is related to the processing in the Java code.
Java Dispatcher heap size is set to 1024.
Anybody already came accros this issue?
Thanks & best regards,
Kevin

Installing the patch, re- importing the SAP Provisioning framework (I selected 'update') and recreating the jobs didn't yield any result.
When examining pass 'ReadABAPRoles' of Job 'AS ABAP - Initial Load' -> tab 'source', there are no scripts used .
After applying the patch we decided anyway to verify the scripts (sap_getRoles, sap_getUserRepositories) in our Identity Center after those of 'Note 1398312 - SAP NW IdM Provisioning Framework for SAP Systems' , and they are different
File size of SAP Provisioning Framework_Folder.mcc of SP3 Patch 0 and Patch 1 are also exactly the same.
Opening file SAP Provisioning Framework_Folder.mcc with Wordpad : searched for 'sap_getRoles' :
<GLOBALSCRIPT>
<SCRIPTREVISIONNUMBER/>
<SCRIPTLASTCHANGE>2009-05-07 08:00:23.54</SCRIPTLASTCHANGE>
<SCRIPTLANGUAGE>JScript</SCRIPTLANGUAGE>
<SCRIPTID>30</SCRIPTID>
<SCRIPTDEFINITION> ... string was too long to copy
paste ... </SCRIPTDEFINITION>
<SCRIPTLOCKDATE/>
<SCRIPTHASH>0940f540423630687449f52159cdb5d9</SCRIPTHASH>
<SCRIPTDESCRIPTION/>
<SCRIPTNAME>sap_getRoles</SCRIPTNAME>
<SCRIPTLOCKSTATE>0</SCRIPTLOCKSTATE>
-> Script last change 2009-05-07 08:00:23.54 -> that's no update !
So I assume the updates mentioned in Note 1398312 aren't included in SP3 Patch 1. Manually replaced the current scripts with those of the note and re- tested : no luck. Same issue.
Thanks again for the help,
Kevin

Handling password while initial load process

Dear Experts,
This is about password handling in IDM. While doing initial load, I do not want to bring passwords from my target systems (AD/SAP) into IDM.
So which password(s) the users will use to login into target systems (AD/SAP) after initial load ? What can be achieved with pass "update system privilege trigger attribute" which is available in initial load job ?
Is it something like, IDM creates a default password on initial load which is sent back to target systems(from which initial load was done) which changes the password for the target systems to this new default password ?
Can we handle this default password being sent to target systems with the help of this pass "update system privilege trigger attribute" in initial load? so that this default password is not sent to target systems ??
So if the default password is not sent back to target systems after initial load, then users will keep using their existing passwords for their login in the target systems. After that, If I need to assign UMEJAVA only privilege to the users, the password for the target systems will be changed with the default password being sent on email to the users. Since the password on AD is now changed, how the users gonna login into AD to check their emails for the
new password ?
It seems I have written a BIG query here .... sorry for that. But please let me know if any thing above does not make any sense.
Also please share your views/expertise/best practice on the same.
Many thanks in advance!
Naveen
Version: IDM 7.2

Hi Naveen,
Firstly to answer your query on what basis we decide he backend type for your UMEJAVA repository, its the business. If you want users to authenticate against AD, when they try to login to IDM UI, you have to configure the LDAP as backend and you have to choose datasource as Microsoft ADS (Deep Hierarchy) + Database (ume database).
If you want the Users to authenticate against UME database, by default ume points to UME database and you need to create the users in the UME database.
So, if you have configured AS JAVA with ADS+Database, in IDM you have to select the repository as SAP netweaver as Java (ldap backend)
In the repository constants, there is an attribute called BACKED_REPOSITORY which should be your AD repository name that is configured.
If you have a look at the AS JAVA connectors in the provisionign framework, in the create user plugin, IDM first checks for backend type. If it is LDAP backend, it just sets the JAVA account attibute, If the backend type is DB, IDM will create the user in the UME database.
Considering your system details, i would suggest you the below approach.
1. Configure your UMEJAVA with Microsoft ADS (Deep Hierarchy) + Database (ume database). For more information on how to configure your
UMEJAVA with LDAP backend refer to this link
2. So, now the users who try to login to IDM UI or any app on AS Java, will be authenticated against your active directory.
3. Perform the initial load from HR.
4. Perform the initial load from AD.
5. Perform the initial load from you AS UMEJAVA.
6. Now, all the user information/role assignment information is loaded to IDM.
7. Now lets discuss about password management. There are two things here
a. Change password (by user) - User changes password in IDM --> password changes are provisioned to AD and user can login with new password.
b .Password reset self service. - User resets password in IDM --> password changes in AD (as UME is configured to use AD)
Change password (by user)
By default the users who are successfully authenticated when they try to login to IDM UI, will get access to self-services tab. To allow users to change the password on their own, you create the corresponding ordered tasks and maintain the access control tab for selfservice.
So that when users wants to change their passwords, they can change on their own.
How IDM will provision the new password to target system is something you have to configure the logic. For example, my sandbox looks like this.
Password reset self-service.
The user can reset their password on their own if they cannot remember their password. To implement this, look at this document. http://scn.sap.com/docs/DOC-17111
Hope this helps. please let me know for any further queries.
~ Krishna.

SAP IDM Lotus Notes : Missing dll

Hello
We are trying to connect SAP IDM to Lotus Notes, and we are facing some connexion issues.
When we run Notes u2013 initial load job, we have exactly the same error log as in this forum discussion: Provisioning framework for Lotus Notes
But additionally we can not find the MXEXTPWD.DLL files, witch is supposed to be in the Identity Center installation directory (C:\ProgramFiles\SAP\IdM\Identity Center)
In the forum discussion they talk bout MXVBNote.dll and MXNotes.dll, we canu2019t find them neither.
Does anyone know in witch step the MXEXTPWD.DLL is created? Or where we can find it?
Regards
SAP Netweaver IDM 7.1 SP5
Lotus Notes Client 8.5.1
Windows Server 2003 R2
Edited by: Jeremy Baars on Mar 7, 2011 11:57 AM
Edited by: Jeremy Baars on Mar 7, 2011 12:01 PM

Hi Experts,
I'm finally able to launch VB scripts to try to connect IDM to the Notes Client.
I said TRY because the initial Load for notes is still not working.
I'm facing another error message :
Open DB Names.nsf failed : error : the prompt for password was aborted by user.
Function OpenListNotes3 : Open DB Names.nsf failed : error : the prompt for password was aborted by user.
So I tried to enable/disabled the option in the Lotus client under "File/Security/User Security/(Enter password). Tab "Security Basics". Option:Don't prompt for a password from other Notes-based programs (reduced security) without success. Of course i restarted my server each time i made changes.
I also checked several times my constants in IDM. The Id_file/user/password are correct.
My connection parameters are also correct between Lotus Client and Domino server.
Any suggestion or idea?
It looks like IDM doesn't try to fill the password and just abort it...
Thanks en regards.
Jeremy

SAP IDM with MS Active Directory (OU names in Arabic)

Dear Gurus,
With SAP IDM , we need to integrate with MS Active directory such a way that SAP IDM only fetches users who have “SAP” in one of the AD field. That means do not read entire AD but only fetches users in SAP who have “SAP” tagged in one of the AD field.
Is it possible ? We tried that in SAP LDAP connector but its not possible in LDAP connector in SAP as LDAP connector is reading through all the users in our CUA system.
Question is it possible through SAP IDM that we use some thing (maybe BAPI) to restrict users and do not read all users but only users having “SAP” in one of the AD field.
Also note that our AD has some OU's name in Arabic.
Regards,

If you want to filter this in the ADS Initial Load job then you can modify the repository LDAP Filter:
(&(objectclass=person)(orgUnit=SAP))
Replace orgUnit=SAP with your your attribute and tag.
Br,
Chris

SAP IDM 8.0 Provisioning of group privilege assignments

Hi,
I set up Active Directory as a target system. I imported the new packages for Eclipse and did the initial load for AD (System privileges were created).
When I assign the PRIV:AD:ONLY privilege to an identity, the identity gets provisioned to AD.
When I assign the PRIV:AD:ONLY privilege to a group, the group gets provisioned to AD.
So far so good.
But when I assign the group to the identity I get the error in the execution log:
Cannot obtain mskey for group privilege PRIV:GROUP:AD:CN\=MY AD GROUP\,CN\=GROUPS\, DC\=DUMMY\, DC\=COM
The CN represents my CN in the Active Directory, but, I have no PRIV:GROUP:AD privilege?
so I can not provision group assignments to AD and I used only the default packages with no modifications.
And an additional question, when does the RDS for 8.0 comes out?
Are there some predefined approval processes like in 7.2?
Thanks, Patrick

Hi Jai,
Ahhhh
Thank you! you pointed me in the right direction, I disabled a few actions in the initial load job, including "WriteGroupPrivileges".
I had to disable the following Attributes: MX_INHERIT, MX_GROUP_INHERITANCE
I got the following error:
Value not legal for this attribute:Attribute: MX_GROUP_INHERITANCE" when storing attribute 'MX_GROUP_INHERITANCE=ONE'
Thanks for the fast help!
Patrick
Edit: Do I need for every Group in IDM a privilege for the target system?

Uploading picture error HTMLUI5 - SAP IDM 8.0

Hello all,
I´ve uploaded my Picture at MY DATA form (HTMLUI5) and soon after that I got the error below:
The atribute was correctly insert in the database:
But no Picture is displayed
Any ideias? Thanks!!!

Hi Jai,
Ahhhh
Thank you! you pointed me in the right direction, I disabled a few actions in the initial load job, including "WriteGroupPrivileges".
I had to disable the following Attributes: MX_INHERIT, MX_GROUP_INHERITANCE
I got the following error:
Value not legal for this attribute:Attribute: MX_GROUP_INHERITANCE" when storing attribute 'MX_GROUP_INHERITANCE=ONE'
Thanks for the fast help!
Patrick
Edit: Do I need for every Group in IDM a privilege for the target system?

Does re-running a MDM Initial Load restart from the first record?

Is there a way to restart an Initial load? I was running a new initial materials load in my ECC system for MDM (MDM_CLNT_EXTR) which was running a very long time (5 days). The background job hit a bad piece of data and crashed.
My question is: when I re-run my initial load job, will it start over from the first record, or will it pick up from the last material/IDOC and resume processing? I would prefer not to re-process all 1.7M materials since the job was very near the end before it crashed.
Thanks,
Denis

Hello,
There are two modes which are available in Client Extractor, Initial and Delta.
If you select Initial it will start from the first record, that you mention in the selection Criteria.
In Delta mode, any new records created will be sent to MDM.
For your issue, in the initial mode, select the Material Number from and to, which have not been updated in MDM.
This is will ensure, that only the records that have not been sent.
Regards,
Abhishek

IDM: AS ABAP - Initial Load

Hi,
I have installed IDM server and completed all the initial configuration steps.
I have created repository which connects to the IDES server using the template SAP Netweaver AS ABAP (specific application server).
Now i am running initial load for that repository but nothing is happening. I cant see any job log,system log for that initial load.
I have created another blank test job , which i execute and running fine.I can see the log of that blank job.But nothing is there for the job Initial Load.
schedule rule : on demand and i am executing it by clicking on RUN NOW. If i see the status of the job it shows idle.
Can you please help me in this?
Edited by: Abhilashak on May 5, 2011 9:13 AM

First, make sure it is set to use the correct dispatcher.
Second, go to the Status area for whatever folder that job is in. It should list all jobs for that folder, and any jobs that are "queued" will be bolded.
If it is bolded (it probably will be), it means that the job is queued to run but the dispatcher isn't running it for some reason. In that case, it could be the dispatcher it is set to run on isn't configured properly... Not sure what else would cause that.
I'm talking about this status area:
http://min.us/mvjy3gm

Error when we are running the job "AS ABAP - Initial Load" for a ABAP Syste

Hi,
We are getting the below error when we are running the job "AS ABAP - Initial Load" for a ABAP System.
Pls note that we have maintained the below entry types to the Identieny Store & we are still getting the error.
Request you to help me
MX_TITLE_SUPPLEMENT
MX_SALUTATION
MX_NAME_PREFIX
MX_ACADEMIC_TITLE
Error----
runFunctionsInString($FUNCTION.sap_getHelpValKey(MX_ACADEMIC_TITLE!!)$$) got exception
org.mozilla.javascript.EvaluatorException: uSelect(select ValKey from dbo.mxi_attrvaluehelp where ValId = 'MX_ACADEMIC_TITLE' AND ValText = '') got exception java.sql.SQLException: ORA-00942: table or view does not exist
Error runFunctionsInString($FUNCTION.sap_getHelpValKey(MX_ACADEMIC_TITLE!!)$$) got exception
org.mozilla.javascript.EvaluatorException: uSelect(select ValKey from dbo.mxi_attrvaluehelp where ValId = 'MX_ACADEMIC_TITLE' AND ValText = '') got exception java.sql.SQLException: ORA-00942: table or view does not exist
Error runFunctionsInString($FUNCTION.sap_getHelpValKey(MX_NAME_PREFIX!!)$$) got exception
org.mozilla.javascript.EvaluatorException: uSelect(select ValKey from dbo.mxi_attrvaluehelp where ValId = 'MX_NAME_PREFIX' AND ValText = '') got exception java.sql.SQLException: ORA-00942: table or view does not exist
Error runFunctionsInString($FUNCTION.sap_getHelpValKey(MX_NAME_PREFIX!!)$$) got exception
org.mozilla.javascript.EvaluatorException: uSelect(select ValKey from dbo.mxi_attrvaluehelp where ValId = 'MX_NAME_PREFIX' AND ValText = '') got exception java.sql.SQLException: ORA-00942: table or view does not exist
Error runFunctionsInString($FUNCTION.sap_getHelpValKey(MX_SALUTATION!!Mr.!!EN)$$) got exception
org.mozilla.javascript.EvaluatorException: uSelect(select ValKey from dbo.mxi_attrvaluehelp where ValId = 'MX_SALUTATION' AND ValText = 'Mr.' AND ValLocale = 'EN') got exception java.sql.SQLException: ORA-00942: table or view does not exist
Error runFunctionsInString($FUNCTION.sap_getHelpValKey(MX_TITLE_SUPPLEMENT!!)$$) got exception
org.mozilla.javascript.EvaluatorException: uSelect(select ValKey from dbo.mxi_attrvaluehelp where ValId = 'MX_TITLE_SUPPLEMENT' AND ValText = '') got exception java.sql.SQLException: ORA-00942: table or view does not exist
Error runFunctionsInString($FUNCTION.sap_getHelpValKey(MX_ACADEMIC_TITLE!!)$$) got exception
org.mozilla.javascript.EvaluatorException: uSelect(select ValKey from dbo.mxi_attrvaluehelp where ValId = 'MX_ACADEMIC_TITLE' AND ValText = '') got exception java.sql.SQLException: ORA-00942: table or view does not exist
Error runFunctionsInString($FUNCTION.sap_getHelpValKey(MX_ACADEMIC_TITLE!!)$$) got exception
org.mozilla.javascript.EvaluatorException: uSelect(select ValKey from dbo.mxi_attrvaluehelp where ValId = 'MX_ACADEMIC_TITLE' AND ValText = '') got exception java.sql.SQLException: ORA-00942: table or view does not exist
Error runFunctionsInString($FUNCTION.sap_getHelpValKey(MX_NAME_PREFIX!!)$$) got exception
org.mozilla.javascript.EvaluatorException: uSelect(select ValKey from dbo.mxi_attrvaluehelp where ValId = 'MX_NAME_PREFIX' AND ValText = '') got exception java.sql.SQLException: ORA-00942: table or view does not exist
Error runFunctionsInString($FUNCTION.sap_getHelpValKey(MX_NAME_PREFIX!!)$$) got exception
org.mozilla.javascript.EvaluatorException: uSelect(select ValKey from dbo.mxi_attrvaluehelp where ValId = 'MX_NAME_PREFIX' AND ValText = '') got exception java.sql.SQLException: ORA-00942: table or view does not exist
Error runFunctionsInString($FUNCTION.sap_getHelpValKey(MX_SALUTATION!!Mr.!!EN)$$) got exception
org.mozilla.javascript.EvaluatorException: uSelect(select ValKey from dbo.mxi_attrvaluehelp where ValId = 'MX_SALUTATION' AND ValText = 'Mr.' AND ValLocale = 'EN') got exception java.sql.SQLException: ORA-00942: table or view does not exist
Error runFunctionsInString($FUNCTION.sap_getHelpValKey(MX_TITLE_SUPPLEMENT!!)$$) got exception
org.mozilla.javascript.EvaluatorException: uSelect(select ValKey from dbo.mxi_attrvaluehelp where ValId = 'MX_TITLE_SUPPLEMENT' AND ValText = '') got exception java.sql.SQLException: ORA-00942: table or view does not exist
Error putNextEntry failed storingMANJUHB
Exception from Add operation:com.sap.idm.ic.ToPassException: ToIDStore.addEntry failed storing entry 'MANJUHB'. IDStore returned error message: " Value not legal for this attribute:Attribute: MX_ACADEMIC_TITLE_2" when storing attribute 'MX_ACADEMIC_TITLE_2=$FUNCTION.sap_getHelpValKey(MX_ACADEMIC_TITLE!!)$$'
Exception from Modify operation:com.sap.idm.ic.ToPassException: ToIDStore.modEntry failed updating entry 'MANJUHB'. IDStore returned error message: "Entry does not exist" when fetching entry

The Probelm was resolved after editing the Script..... "sap_getHelpValKey.js"

Initial Load Error IDM 7.0

Hello Exports,
We have completed the IDM 7.0 Installation and Configuraiton.we are in the process of running the Initial Load
During the intial load with ABAP system we received below errors
Under IDentity Center->Management -> System log
Date;Type;"Dispatcher";Job ID;"Additional info";"Text"
2009.06.02 15:49:28;Warning;"sap-idm";1809;"";"Pass skipped by script"
2009.06.02 15:49:28;Warning;"sap-idm";1809;"";"Pass skipped by initialization script"
2009.06.02 15:49:28;Warning;"sap-idm";1809;"";"Pass skipped by script"
2009.06.02 15:49:28;Warning;"sap-idm";1809;"";"Pass skipped by initialization script"
2009.06.02 15:49:27;Error;"sap-idm";1809;"modEntry failed modifying entry 'J2EE_GUEST'. IDStore returned error message: " Referenced value does not exist:Attribute: MXREF_MX_PRIVILEGE" when storing attribute 'MXREF_MX_PRIVILEGE=<PRIV:PROFILE:ABAP200:T-EP640003>'";"Exception from Mod operation:ToIDStore"
2009.06.02 15:49:27;Error;"sap-idm";1809;"";"Failed storing J2EE_GUEST"
2009.06.02 15:49:27;Error;"sap-idm";1809;"modEntry failed modifying entry 'J2EE_ADMIN'. IDStore returned error message: " Referenced value does not exist:Attribute: MXREF_MX_PRIVILEGE" when storing attribute 'MXREF_MX_PRIVILEGE=<PRIV:PROFILE:ABAP200:T-EP640002>'";"Exception from Mod operation:ToIDStore"
2009.06.02 15:49:27;Error;"sap-idm";1809;"";"Failed storing J2EE_ADMIN"
2009.06.02 15:49:25;Error;"sap-idm";1809;"sap_encryptPassword()$$) got exception - Exception:org.mozilla.javascript.JavaScriptException: java.lang.UnsupportedOperationException: java.lang.NoClassDefFoundError: javax/crypto/SunJCE_b : cannot initialize class because prior initialization attempt failed";"runFunctionsInString($FUNCTION"
2009.06.02 15:49:25;Warning;"sap-idm";1809;"mozilla.javascript.JavaScriptException: java.lang.UnsupportedOperationException: java.lang.NoClassDefFoundError: javax/crypto/SunJCE_b : cannot initialize class because prior initialization attempt failed HINT: Check line 17 in the script sap_encryptPassword";"Executing sap_encryptPassword() got JavaScriptException - org"
2009.06.02 15:49:25;Error;"sap-idm";1809;"sap_encryptPassword()$$) got exception - Exception:org.mozilla.javascript.JavaScriptException: java.lang.UnsupportedOperationException: java.lang.NoClassDefFoundError: javax/crypto/SunJCE_b : cannot initialize class because prior initialization attempt failed";"runFunctionsInString($FUNCTION"
Thanks
Thirumal

I had the same issue with the SAP JVM 5.0 - after installing the Sun JDK 1.5.0 (current version 1.5.0_21), updating the classpaths and regenerating the dispatcher scripts, the issue was solved.

Filter on SAP ABAP Initial Loads

Hi all,
I'm trying to put a filter on the pass "ReadABAPuser" of an ABAP Initial Load. My SAP ABAP System has over 10000 users and I need only part of them.
I tried so to add "FILTER" entry (as on ReadABAProle for example) on Source tab of the pass "ReadABAPuser" with value "A*".
But seems the pass does not make attention of this FILTER and still request the full user list.
Do you have met this issue ?
Thanks for your help,
Benjamin

Hi Benjamin,
well, I've never worked with the pass attribute FILTER for the pass type "FromSAP". Therefore, I'm not sure about the following - but maybe it's a starting point for further investigation...
I believe that it works differently for different data types:
Roles: simple filter value which filters for the role name (you can use *)
Roles, if you connect to a CUA central system: not supported
Users: it seems to work with a multivalue name=value syntax.
Conclusion: I guess it is easier to filter users in the source tab of the ToPass "WriteABAPUsers".
Kind regards
Frank Buchholz

SAP IDM 7.2 SP09 initial load jobs error

Similar Messages

Maybe you are looking for