SPML Client Modify Request

Hi,
I am trying to assign a user in OIM to a Role or group using the spml modify request webservice.
I am creating a java procy for this webservice and then trying to invoke the same.
I am not sure how to add membership to any role , i am trying with the following code. Please let me know if any one has already done the same.
      ((BindingProvider) port).getRequestContext().put(BindingProvider.USERNAME_PROPERTY,    
                                                              OIMUSER);
      ((BindingProvider) port).getRequestContext().put(BindingProvider.PASSWORD_PROPERTY,    
                                                              OIMPW);
        ServiceHeaderType serviceHeader = new ServiceHeaderType();
        ModifyRequestType modReq = new ModifyRequestType();
        modReq.setExecutionMode(ExecutionModeType.ASYNCHRONOUS);
//        modReq.se
//        AddRequestType art = new AddRequestType();
//        art.setLocale("en");
        Identity user = new Identity();
        MultiValuedString emailString = new MultiValuedString();
        emailString.getValue().add("[email protected]");
        user.setMail(emailString);
        ProvisioningObjectType pot = new ProvisioningObjectType();
        pot.setIdentity(user);
        Member member = new Member();
        PSOIdentifierType psoType = new PSOIdentifierType();
        psoType.setID("identity:505cf0daee022a41918851fb11f1a876");
        ModificationType mod = new ModificationType();
        mod.setModificationMode(ModificationModeType.ADD);
        CapabilityDataType capability = new CapabilityDataType();
        capability.setCapabilityURI("urn:oasis:names:tc:SPML:2:0:reference");
        capability.setMustUnderstand(true);
        oracle.iam.wsschema.model.common.pso.Member modsDataMember = new oracle.iam.wsschema.model.common.pso.Member();
        List<ReferenceType> modRef = new ArrayList<ReferenceType>();
        ReferenceType type = new ReferenceType();
        type.setTypeOfReference("memberOf");
        PSOIdentifierType rolePSOID = new PSOIdentifierType();
        rolePSOID.setID("E03CB5CBC5FE7E13E0400A0ABEB47C29");
        type.setToPsoID(rolePSOID);
        modRef.add(type);
        capability.getAny().add(modRef);
        modsDataMember.setIdentityPSOID("identity:505cf0daee022a41918851fb11f1a876");
        modsDataMember.setRolePSOID("E03CB5CBC5FE7E13E0400A0ABEB47C29");
        modReq.getCapabilityData().add(capability);
        modReq.setPsoID(psoType);
        mod.setData(pot);
        modReq.getModification().add(mod);
//        pot.setMember(value);
        logger.severe("before  port.spmlAddRequest");
        ModifyResponseType response = port.spmlModifyRequest(modReq, new ServiceHeaderType());
Please help with your solutions.

Hi Pollicove,
Thanks for your response. Yes I m using VDS 7.1 SP6. I tried the same code in different system, the SPML modification is working fine which is very weird.
But now I m facing different problem with SPML search operation. I have a plain Java code acting as SPML client.
When I do search I m getting below error in the response body.
"<spml:searchResponse error="(MIC Identity store:82:ERROR:Incorrect syntax near '?'.)" requestID="A" result="urn:oasis:names:tc:SPML:1:0#success" xmlns:dsml="urn:oasis:names:tc:DSML:2:0:core" xmlns:spml="urn:oasis:names:tc:SPML:1:0"/>"
If you check the query formation in VDS, it looks like below which is the root cause of the problem,
"#1.5#C0000AC10EBD00070000002F270E32930004AAC32CBD22E0#1313655152780#com.sap.idm.vds.HeiSPMLTest.extension.main_listener_4389##com.sap.idm.vds.HeiSPMLTest.extension.main_listener_4389#######Thread[6,3,LDAP Sessions:main_listener_4389]##0#0#Debug##Plain###Together with basic template:SELECT $TOP$ mskey FROM mxi_values WHERE attr_id=(select attr_id from mxi_attributes where attrname='MSKEYVALUE' and is_id=?) AND (mskey in (SELECT mskey FROM mxi_values WHERE attr_id = (SELECT attr_id FROM mxi_attributes WHERE attrname='MX_ENTRYTYPE' and is_id=1) AND searchvalue  LIKE '*' ))#"
Not sure why the IS ID is not passed. Do you have any idea what would the reason for this behavior.
Thanks in advance.

Similar Messages

  • Extending Modify Request OIM SPML Webservice

    can you please help me with any document related to enabling OIM web serives to other applications for modifying attributes in OIM.
    Modify Request it allows only OOTB default attributes i want to extend the schema for custom attributes. please let me know if have steps for it?

    I could not find examples on the modifyRequest. SPML Attributes and LDAP Mappings, and Oracle Identity Manager Attributes does talk about custom attributes and the addRequest example seems to contain section for User Defined Field. You may want to post this question to the Identity Management (MOSC) support forum.
    Jani Rautiainen
    Fusion Applications Developer Relations
    https://blogs.oracle.com/fadevrel/

  • SPML Modify Request failure

    Hi,
    I am trying to trigger a SPML Modify request with the modification mode as Add.
    But it always returns failure with an IAM # . No specifc reason as such.
    Can any tell me as how the request identifies the User for the which the modify needs to apply , Is it purely based on PSO ID? I tried passing in the PSO Id as identity:orclguid
    What is the value we need to pass for PSO id?

    Hi ,
    I use the OOTB SPML I suppose , I am totally new to this IDM .
    We are using OIM 11g .
    We have an usecase to create user and assign role to user from an externall application into OID , for this we are using the SPML webservice.
    SPML takes the PSO Id to identify the user , So I am not able to find the attribute which I could pass on.
    More over basic question , any resource I am created from SPML webservice , it creates a request in OIM and I am not sure how I can see the same in ODSM, So is this done by connectors and we need to have anconfiguration or mapping that needs to take care of the same?
    So using SPML is the right approach to provision users to OID (create User,Grant Role to User)
    I also do not see any Distingushed Name attribute in OIM , How wil the users i create using SPML go to the exact subtree I wish to insert. I am not able to find any docs which can help me , all the docs seems to be very generic
    Thanks,
    Robin

  • RE: Workbench Request, Customizing Request , Modifiable  Request

    Hi can any body clearly explain me the Workbench Request, Customizing Request , Modifiable  Request  , and what is the difference between all these , and when we will use each of these ?

    HI ,
    1. Workbench Request:
    Whenever you create a new development a workbench request is created and you can transport this to any other client with Transport manager.
    These are related to the Development tasks
    Workbench requests contain changes to client-independent tables.
    generally Cross-Client changes & Higher level changes.
    2. Customizing Request:
    These related to the system configuration done by functional team.
    Customizing requests contain changes to client-dependent tables.
    these are mainly Client specific request (e.g. new Sales Document type) & are at Lower level as compared to Workbench requests.

  • Error while raising modify request for AD resource

    Hi,
    Getting below error in log, while raising modify request for AD resource, UI shows error while retrieving resource entity details.
    <Oct 19, 2011 2:15:45 AM CDT> <Error> <oracle.iam.requesttemplate.agentry.operations> <BEA-000000> <The "itresource-type" property is missing for attribute reference AD Remote Manager ITResource, which is of type itresource-lookup.>
    I verified the datasets for AD Remote Manager ITResource, comparing with our other environments. It is proper and we are not using AD Remote Manager ITResource anywhere.
    <AttributeReference name="AD Remote Manager ITResource" attr-ref="AD Remote Manager ITResource" type="Long" length="10" widget="itresource-lookup" required="false" available-in-bulk="true"/>
    Please let me know how to resolve this issue.
    Thanks in Advance.
    Edited by: 856226 on Oct 19, 2011 4:55 AM

    Hi,
    I think you should post this in an other forum, somewher in the Fusion stack, maybe Identy Management. This forums is ment for the Oracle database. So please post in a forum underneath https://forums.oracle.com/forums/category.jspa?categoryID=13&start=0
    Herald ten Dam
    http://htendam.wordpress.com

  • Getting error while raising modify request for AD resource in OIM11g

    Hi,
    Getting below error in log, while raising modify request for AD resource, UI shows error while retrieving resource entity details.
    <Oct 19, 2011 2:15:45 AM CDT> <Error> <oracle.iam.requesttemplate.agentry.operations> <BEA-000000> <The "itresource-type" property is missing for attribute reference AD Remote Manager ITResource, which is of type itresource-lookup.>
    I verified the datasets for AD Remote Manager ITResource, comparing with our other environments. It is proper and we are not using AD Remote Manager ITResource anywhere.
    <AttributeReference name="AD Remote Manager ITResource" attr-ref="AD Remote Manager ITResource" type="Long" length="10" widget="itresource-lookup" required="false" available-in-bulk="true"/>
    Please let me know how to resolve this issue.
    Thanks in Advance

    Hi,
    I think you should post this in an other forum, somewher in the Fusion stack, maybe Identy Management. This forums is ment for the Oracle database. So please post in a forum underneath https://forums.oracle.com/forums/category.jspa?categoryID=13&start=0
    Herald ten Dam
    http://htendam.wordpress.com

  • Large XML Publisher reports fail with client-error-request-value-too-long

    We are running BI Publisher 5.6.3 with Oracle Applications 11.5.10.2 (ATG.H RUP 5), and are having frequent failures with client-error-request-value-too-long messages on large PDF reports that cause the entire report to not print.
    The exact error message is as follows:
    lp: unable to print file: client-error-request-value-too-long
    Pasta: Error: Print failed. Command=lp -c -dPDX_B6_1LJ5200NEAST /logs/temp/pasta3262_0.tmp
    Pasta: Error: Check printCommand/ntPrintCommand in pasta.cfg
    Pasta: Error: Preprocess or Print command failed!!!
    APP-FND-00500: AFPPRN received a return code of failure from routine FDUPRN. Program exited with status 1
    Cause: AFPPRN received a return code of failure from the OSD routine FDUPRN. Program exited with status 1.
    Action: Review your concurrent request log file for more detailed information.
    I have Google'd client-error-request-value-too-long, and found it is a common CUPS issue on Linux. The popular solutions (having /var/spool/cups and /var/spool/cups/tmp) are already in place. Also, the temp files are nowhere near 2 GB (44MB).
    Has anyone had this issue with BI Publisher on Linux?

    Thanks for the link. It looks like the sysadmins have throttled cups to low to allow large bitmapped print jobs:
    grep MaxRequestSize cupsd.conf
    # MaxRequestSize: controls the maximum size of HTTP requests and print files.
    MaxRequestSize 10M
    I am trying to get a more reasonable size limit.

  • Large BI Publisher reports fail with client-error-request-value-too-long

    We are running BI Publisher 5.6.3 with Oracle Applications 11.5.10.2, and are having frequent failures with client-error-request-value-too-long messages on large PDF reports that cause the entire report to not print.
    The exact error message is as follows:
    lp: unable to print file: client-error-request-value-too-long
    Pasta: Error: Print failed. Command=lp -c -dPDX_B6_1LJ5200NEAST /logs/temp/pasta3262_0.tmp
    Pasta: Error: Check printCommand/ntPrintCommand in pasta.cfg
    Pasta: Error: Preprocess or Print command failed!!!
    APP-FND-00500: AFPPRN received a return code of failure from routine FDUPRN. Program exited with status 1
    Cause: AFPPRN received a return code of failure from the OSD routine FDUPRN. Program exited with status 1.
    Action: Review your concurrent request log file for more detailed information.
    I have Google'd client-error-request-value-too-long, and found it is a common CUPS issue on Linux. The popular solutions (having /var/spool/cups and /var/spool/cups/tmp) are already in place. Also, the temp files are nowhere near 2 GB (44MB).
    Has anyone had this issue with BI Publisher on Linux?

    The linux sysadmins set the cups max_request_size at 10 MB, which was causing this error. Once the restriction was lifted, the reports ran without error.

  • Client-error-request-value-too-long

    What is this error???? I am trying to add an Epson 1280 printer and I get this error. I have the most current driver and not sure why this isn't working.

    My flatmate had this "client-error-request-value-too-long" problem with her (powerpc) powerbook. Nearly everything I tried didn't work:
    1) Reinstalling drivers
    2) Permissions repair
    3) Resetting print system using Fixamac's Printer Setup Repair Utility
    4) Updating from 10.4.10 to 10.4.11
    5) Using the command line to try and recreate the directory: /var/spool/cups/tmp (which told me it already existed)
    6) Using Transmit (with show invisible files turned on) to browse to /var/spool/cups/ and try and recreate the tmp folder
    On the last point I couldn't change anything about the /var/spool/cups/ directory because the permissions were corrupted in some way. It keep telling me tmp already existed but I couldn't see it.
    In the end what did work was enabling and logging in as root, browsing to /var/spool/ using Transmit and deleting the cups folder and then recreating. It took a few tries to delete too, but in the end I managed to remove it.
    Of course I wouldn't actually recommend this. I'm no Unix geek so god knows what I might have broken in the process, so I'm going to reinstall her system with the Archive and Install options when I get a chance, which is what I'd recommend doing in the first place to anyone having this problem.

  • Error: "client-error-request-value-too-long" when trying to add printer

    After installing the 10.4.9 Combo update, my HP 1350 All-in-One printer was not recognized. I reinstalled the driver, but now I can't add the printer. I get the error message "client-error-request-value-too-long" when trying to add the printer. Has anyone else experienced a similar problem.
    Thanks in advance

    Well, I tried all of that and I'm still getting the error message. I've also repaired disk permissions and run Disk Warrior. When I repaired disk permissions, many HP printer items showed up in the list.

  • USB Printing - client-error-request-value-too-long

    A little while back, my iSight suddenly stopped working and so I did a full format and reinstall to 'fix' the problem. The problem wasn't 'fixed' through this action. Instead, I had to disconnect power and let the computer sit there for a bit and think about what it had done (naughty iMac). Anyway... Another USB-related problem just popped up - this time with my printer.
    The printer is a Canon IP4000 and I just installed the latest drivers to try to fix this error. The first error was something about not being able to write to the device. I thought that was stupid and would probably be fixed by deleting the printer and then reinstalling it. I have so far 'uninstalled' the printer (more or less just removed it from the printers list in the printer utility) and now I can't re-add it to the list to install it. The error reads as follows:
    An error occurred while trying to add the selected printer.
    client-error-request-value-too-long
    I have tried Google but I just don't have the time to sort through all kinds of explainations on how CUPS works on Linux (apparently, this error is related to CUPS in some way). I also tried searching the forum for the error message but found nothing. So here I am again asking for some help from those who might have seen this problem before.
    This is on a fresh install and I have tried it on newly created users to no avail.
    Thanks for any help! -Thomas

    I've recently had this error which came up because the spool folder was missing. In the terminal:
    sudo mkdir /private/var/spool
    sudo mkdir /private/var/spool/cups
    puts the proper folders in their place. Repair permissions afterwards.
    Through the cups web interface, the error is "Request entity too large"
    Panther has the same folders, but a different error comes up.
    The above cups folder has different permissions than the default. Probably the same for Tiger and Panther but just to be safe, repair permissions.

  • Modifying request before approval

    Hello Friends,
    I want to allow modification to the request before Manager Approval. Once it is approved user/admin should not be able to modify request. how to achieve this. If have any sample code snippet, then please, give me.
    Thanks and Regards
    DB

    Buddy Your requirement is little bit complex. You want to give permission to modify Request i.e. form before manager approval but after manager approval you don't want this.
    I think it wouldn't be possible because you can give access to any group level not at user level.
    Even there's no API for updating these permissions of this form. Even if you get this API, it's not going to fulfill your requirement. Because it will update permissions for group. If in the meanwhile if some other user raise request then it will work differently for him and you can see undesired results.
    So may be if you go for its action classes then you can find some way.
    All I have written as per my understanding. There may be some other way, someone can update the thread.
    Anyways it's a nice requirement which showed me OIM Limitation.

  • Client ,tranport ,request id,release

    client ,tranport ,request id,release in detail?

    Hi chandra,
                   Client ,tranport ,request id,release in detail?
    Assuming you want to know about Transport connection in detail..
    Transport connection -
    > Grouping(Neccessary objects)(It works fine for me!!)---->Object Types>Eg(Cube)--
    >Assign to a Transport Request(Truck icon).
    *The following Transport sequence * :(Only Neccessary objects)
    a)Info object catalog
    b)Application component
    c)Infocubes & ODS
    d)Transfer rules/Update rules
    e)Infopackages
    f).Multiproviders
    g).Queries/Workbooks
    h)Process chains
    Procedure:
    1. SE09 - To release the Tasks(first) followed by the Request.
    2.Ask your Basis to Import them request to the QA or Prod server.Or if you got authorization for STMS,you can import them request.(make sure u adjust import queue before attempting to import).
    3.Check in the respective Target(QA/PROD) on whether the BW Objects are transported fine.
    I guess this is what u asked for!!!!!!!!!
    cheers
    Arun

  • Problems setting up 2way SSL with option Client certs requested Not Enfor

    Hi,
    Iam having problems trying to set up 2 way SSL with the option "Clients Certs Requested But Not Enforced". I am using DefaultIdentityAsserter with my own implementation of UserNameMapper. And I have the login-config set to CLIENT-CERT in web.xml. I have tested this setup and it works when I have "Client Certs Requested and Enforced" but when I change it to "Requested and not enforced" it gives an 401 unauthorized exception.
    Any help with this will be greatly appreciated.
    Thanks
    Praveena.

    Hi Peter,
    I'm afraid not, I turned to Apple support forums, followed their advice for troubleshooting Mac Mail (obviously not relevant to you using Outlook) but It involved scanning ports checking firewalls etc, all of this was clear and I just cannot see the problem.
    I even got one of the Livechat BC guys to look into it, by setting up a dummy email address on the client's account, I think he was rather intrigued, but I'm not sure he's had much luck as he still hasn't got back to and that was over 20 hours ago.
    Can your client receive emails? I can only get my client's account receiving emails, when I try to send an email I just keep receiving an message telling me that it cannot connect to smtp!
    According to the BC fact sheet for sending and receiving emails: "By Default, email software will set the SMTP port to 25, which is the standard port for the smtp protocol. However our mail service has two alternative ports available that you can send through. 8025 or 587.
    However it's not blocked and those port settings didn't work either.
    The Apple fact sheet made mention to firewall settings possibly also blocking, but it's not relevant to me using my version of OS.
    Good luck, and please repost if you get any further.
    I am now just looking for a reason that my client's mail WONT work on Mac Mail, just so I can sound professional when I tell them the answer is "no".
    Penny

  • Modify request in productive system

    Hi expert,
    Users want to modify requests in productive system. These request are been created in development and transported in production.
    And, in fact, I would like to retransport request modified in production to development.
    No problemes for authorization but I would like to know, what configuration to do in productive system (order BEx, parameters in rsa1/ transport connection).
    I tried to create :
    - a transport request for BEx
    - object changeability : everithing changeable for query element
    But changes are not registered in the BEx transport request.
    Thanks in advance for your help.
    Daniel

    Hi Daniel,
    In your systems you have something called a Transport Route. This is a route that it says to a request where it would be transported. I think your productive system may be closed for modifications from transaction SCC1, but you allowed BEx modifications from the object changeability customizing, but this won't collect your modifications in a request, because of SCC1 customizing (and that´s correct). That's how SAP works.
    So, if you want to transport from PRD to DEV, you may need to create a new transport route from PRD to DEV, but that's not a good option, and i think basis people wouldn't be neither. Then, you should manually copy BEx modifications from PRD to DEV, and to leave the system consistent, then transport it to PRD in a request. If you want to have always the systems consistent, then you should disable object changeability to BEx objects, and always make modifications in DEV and transport them to PRD.
    Hope it helps.
    Regards,
    Diego Lombardini

Maybe you are looking for

  • No one knows what happened to my z3

    I used to live in IReland and i bought a new z3, later I traveled to Qatar where my z3 suddenly stopped working after using it in the the pool to check who missed called me and did not even submerge it , later at the same night phone stopped working,

  • [J2ME] How to launch a .jar or .class with IM profile

    Hi all, I have tried and succeded to launch a .jar file with J2SE but with J2ME IM profile, I couldn't manage do the same because the URLClassLoader is missing. Does someone knows how to do that ? Thanks,

  • Create a clinical document, attaching an external PDF

    hi all, is possible to define a clinical document from N2T6 and using it to upload a file into SAP (using KPro) and viewing it from n203 document list?

  • Can someone explain this !!

    Really it's amazing ! When I bought my E71 about 4 months ths ago ,and as I was upgrading from S40 series ,I found it a little bit slow , of couse compared to other N series like N73 it was much faster. For some issues , I decided to hard reset the d

  • Iphoto 5 is endlessesly "Loading Photos"

    I was attempting to restore Iphoto 5 from the Imac G5 restore discs after someone decided to drag it to the trash and delete it. The software appears to be installed, but when launched, it endlessly sits at "Loading Photos". I have deleted the album,