SPML handlers for IDM 8.0

What are the differences among the 3 spml handlers - rpcrouter2, openspml2 and spespml?
I am using SPE of IDM 8.0. In this case, do I use only the spespml handler in handling all my spml requests? Or I can use a mix of all 3? Which request/operations will required spespml specifically?
Thanks,
See

You can edit %wshome%\user\userHeader.jsp to include a referance to a custom CSS file.
<link type="text/css" rel="stylesheet" href="<%= p.encodeURL("styles/endUserCustomStyle.css") %>">Then create %wshome%\styles\endUserCustomStyle.css and add this for custom banner:
div#userLoginFormDiv {
background:transparent url(../images/other/user_header_image.jpg) no-repeat scroll 0 0;
}

Similar Messages

SPML URL for Sun IdM Server

How to find SPML URL for Sun IdM Server?
I'm trying to configure 'New Provisioning Server Connection' from Sun Role Manager (Vaau's RBACx) Admin and this requires SPML URL.
Please help me,
Thanks

Hi All,
I'm working on the integration between Sun Identity Manager 7.1 and Sun Role Manager 4.1. When I import users from idm to role manager, i had this error:
15:04:51,093 ERROR [WavesetIAMSolution] SPML request returned a failure - com.waveset.exception.ItemNotFound: Configuration:listUsernames
15:04:51,093 ERROR [IAMJobExecutor] Failed to execute iam job 'import_user':
com.vaau.rbacx.iam.RbacxIAMException: com.waveset.exception.ItemNotFound: Configuration:listUsernames
     at com.vaau.rbacx.iam.sun.WavesetIAMSolution.listUsernames(WavesetIAMSolution.java:1474)
     at com.vaau.rbacx.iam.sun.WavesetIAMSolution.readUsers(WavesetIAMSolution.java:1049)
     at com.vaau.rbacx.iam.service.impl.RbacxIAMServiceImpl.importUsers(RbacxIAMServiceImpl.java:71)
     at sun.reflect.GeneratedMethodAccessor698.invoke(Unknown Source)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
     at java.lang.reflect.Method.invoke(Unknown Source)
     at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
     at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
     at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
     at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
     at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
     at $Proxy25.importUsers(Unknown Source)
     at com.vaau.rbacx.scheduling.executor.iam.IAMJobExecutor.execute(IAMJobExecutor.java:78)
     at com.vaau.rbacx.scheduling.manager.providers.quartz.jobs.AbstractQuartzJob.execute(AbstractQuartzJob.java:68)
     at org.quartz.core.JobRunShell.run(JobRunShell.java:203)
     at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:520)
Any help is greatly appreciated!
Thanks.

Error while installing Oracle Ultra Search on DB for IDM

Dear All,
I need to install IDM-101401 on HPUX B.11.31 Itanium machine. i installed database (10201) and applied Patchset_10204. as a pre-requisite now i am trying to install Oracle Ultra Search (on the same oracle_home) from companion directory of DB10201 Disk1. i amended oraparam.ini to support B.11.31 before running installer.
After 83% of installation progress, below error is thrown.
installActions2011-11-15_07-54-45AM.log
INFO: 11/15/11 7:58:04 AM GMT04:00: Starting install Install Phase 1 of component Oracle Ultra Search Server Rdbms+
INFO: Calling Action fileActions10.2.0.3.0 copyFile
+     selectedNodes = null+
+     source = /u01/app/oracle/product/OID/UAT2OIDDB/ultrasearch/webapp/ultrasearch_admin.ear+
+     destination = /u01/app/oracle/product/OID/UAT2OIDDB/oc4j/j2ee/oc4j_applications/applications/ultrasearch_admin.ear+
+     permissions = null+
+     owner = null+
+     group = null+
SEVERE: Abnormal program termination. An internal error has occured. Please provide the following files to Oracle Support :
+"/u01/app/oracle/oraInventory/logs/installActions2011-11-15_07-54-45AM.log"+
+"/u01/app/oracle/oraInventory/logs/oraInstall2011-11-15_07-54-45AM.err"+
+"/u01/app/oracle/oraInventory/logs/oraInstall2011-11-15_07-54-45AM.out"+
INFO: User Selected: Yes/OK
by seeing above error, i tried copying ultrasearch_admin.ear file manually and tried but no luck.
LOGS_
oraInstall2011-11-15_07-54-45AM.err
Exception java.lang.NoSuchMethodError: oracle.sysman.oii.oiix.OiixFileOps.getExplicitLibPerms()Ljava/lang/String; occurred..
java.lang.NoSuchMethodError: oracle.sysman.oii.oiix.OiixFileOps.getExplicitLibPerms()Ljava/lang/String;
+     at copyActionHelper.copyFile(copyActionHelper.java:1664)+
+     at copyActionHelper.copyFileFromStream(copyActionHelper.java:722)+
+     at copyActionHelperux.commonCopyFileAction(copyActionHelperux.java:502)+
+     at copyActionHelperux.installCopyFileAction(copyActionHelperux.java:186)+
+     at sscopyFileux.installAction(sscopyFileux.java:84)+
+     at oracle.sysman.oii.oiis.OiisCompActions.doActionWithException(OiisCompActions.java:2063)+
+     at oracle.sysman.oii.oiis.OiisCompActions.doActionImpl(OiisCompActions.java:1720)+
+     at oracle.sysman.oii.oiis.OiisCompActions.doAction(OiisCompActions.java:927)+
+     at Components.oracle.isearch.rdbms.v10_2_0_1_0.CompActions.doAction(Unknown Source)+
+     at Components.oracle.isearch.rdbms.v10_2_0_1_0.CompInstallPhase1.doActionP1copyFile6(Unknown Source)+
+     at Components.oracle.isearch.rdbms.v10_2_0_1_0.CompInstallPhase1.stateChangeActions(Unknown Source)+
+     at Components.oracle.isearch.rdbms.v10_2_0_1_0.CompActions.stateChangeActions(Unknown Source)+
+     at oracle.sysman.oii.oiif.oiifw.OiifwInstallPhaseWCCE$OiifwComponentIP1WCCE.performStateChangeActions(OiifwInstallPhaseWCCE.java:1611)+
+     at oracle.sysman.oii.oiif.oiifw.OiifwInstallPhaseWCCE$OiifwComponentInstallPhaseWCCE.doOperation(OiifwInstallPhaseWCCE.java:1056)+
+     at oracle.sysman.oii.oiif.oiifw.OiifwInstallPhaseWCCE$OiifwComponentIP1WCCE.doOperation(OiifwInstallPhaseWCCE.java:1580)+
+     at oracle.sysman.oii.oiif.oiifb.OiifbCondIterator.iterate(OiifbCondIterator.java:171)+
+     at oracle.sysman.oii.oiif.oiifw.OiifwInstallPhaseWCCE.doOperation(OiifwInstallPhaseWCCE.java:588)+
+     at oracle.sysman.oii.oiif.oiifb.OiifbCondIterator.iterate(OiifbCondIterator.java:171)+
+     at oracle.sysman.oii.oiif.oiifw.OiifwActionsPhaseWCDE.doOperation(OiifwActionsPhaseWCDE.java:606)+
+     at oracle.sysman.oii.oiif.oiifb.OiifbLinearIterator.iterate(OiifbLinearIterator.java:147)+
+     at oracle.sysman.oii.oiic.OiicInstallSession$OiicSelCompsInstall.doOperation(OiicInstallSession.java:3772)+
+     at oracle.sysman.oii.oiif.oiifb.OiifbCondIterator.iterate(OiifbCondIterator.java:171)+
+     at oracle.sysman.oii.oiic.OiicPullSession.doOperation(OiicPullSession.java:1273)+
+     at oracle.sysman.oii.oiic.OiicSessionWrapper.doOperation(OiicSessionWrapper.java:289)+
+     at oracle.sysman.oii.oiic.OiicInstaller.run(OiicInstaller.java:546)+
+     at oracle.sysman.oii.oiic.OiicInstaller.runInstaller(OiicInstaller.java:929)+
+     at oracle.sysman.oii.oiic.OiicInstaller.main(OiicInstaller.java:866)+
Please help me in this.
few doubts
Is it possible to go ahead for IDM installation without having ultra search enabled in database?
any other way around that i can have ultra search?
after applying patchset on basic version(10201) i am installing ultra search from basic version (as patchset doesnt have companion dir) on upgraded version(10204) causing this issue?
Thanks,

my guess was correct. the issue was last point.
After applying patchset on basic version(10201) i am installing ultra search from basic version (as patchset doesnt have companion dir) on upgraded version(10204) causing this issue?
it was resolved by uninstalling DB, and again installing from basic version (10201) then went to companion CD, installed ultrasearch on same oracle_home. it got installed without any issue.
then upgraded to 10204. then created DB, and enabled ultrasearch by DBCA.
let me know in case of more details required.

Problem setting up handlers for Jetty web app

Hello,
I am encountering a problem with setting up the handlers for my web application, what I want is : Having some requests handled by an HTTPServlet with doGet and doPost methods ( how can I load JSP pages from within these methods ? ) and also be able to load static content ( html, JS, CSS )
The way I'm setting it right now, I can only have one or the other, I cannot get both working.
I will explain :
    Server server = new Server(5000);
   // This is the resource handler for JS & CSS
    ResourceHandler resourceHandler = new ResourceHandler();
    resourceHandler.setResourceBase(".");
    resourceHandler.setDirectoriesListed(false);
   // This is the context handler for the HTTPServlet
    ServletContextHandler context = new ServletContextHandler(ServletContextHandler.SESSIONS);
    context.setContextPath("/");
    context.addServlet(new ServletHolder(new Main()),"/*");
   // this is the Handler list for both handlers
    HandlerList handlerList = new HandlerList();
    handlerList.setHandlers(new Handler[] { context ,resourceHandler});
     If I add them in this order, all requests will be handled by the "context" and no static resource is loaded
     If I invert the order, the index page page is loaded by the resource handler, which means, If I activate directory listings, it gives me a list of all directories, otherwise it's just a blank page
     I tried working with a WebAppContext to load JSP pages but I still had some problems with which handler should handle which requests
    server.setHandler(handlerList);
    server.start();
    server.join();
Thank you

Lync web app is designed mainly for external partners who are invited to Lync meetings. Thus, the feature cannot be achieved naturally on Lync side. You may post the issue on IIS forum to verify if this can be achieved by setting LWA directory.
Thank you for your understanding.
http://forums.iis.net/
Kent Huang
TechNet Community Support

New handlers for JDK Logging

Does anyone know of any OpenSource Handlers for JDK Logging such as a JMS Handler, JDBC Handler, SMPT Handler or Daily Rolling File Handler? I would love to use JDK instead of Log4J, but the latter supplies these handlers (appenders) out of the box.

Huh?
If you are looking for open source anyways then why not just use log4j?

How to remove event handlers for a content type currently in use?

Hi,
We had a SP 2007 solution that managed event handlers as described in
Brian Wilson's blog regarding event handlers. We then did a in-place upgrade to SP 2010. It so happend that we wanted to remove some of our old event handlers and this is where our problem started. We managed to delete event handlers
(SPEventReceiverDefinitions) for
Site and List by using the ui from Brian Wilsons feature "Manage Event Handlers" (ref the link above), but not anyone at all for
Content Types... It simply wouldn't be deleted
(remove was grayed out in the ui).
We then tried to do it by code. Below is a code snippet illustrating how we tried to delete the event handlers for content types:
using (SPWeb web = properties.Feature.Parent as SPWeb)
string targetClassName = "targetClassName.";
web.AllowUnsafeUpdates = true;
// Removing Content Type event handlers
foreach (SPContentType ct in web.ContentTypes)
for (int i = ct.EventReceivers.Count - 1; i >= 0; i--)
if (ct.EventReceivers[i].Class.StartsWith(targetClassName))
ct.EventReceivers[i].Delete();
ct.Update(true);
web.Update();
The Content Types are not sealed and are
not readonly. When debugging, we can see that the
Delete() method are called on one of the Content Types we wanted to delete event handlers for. We noted that the
ct.EventReceivers.Count remains the same, before and after Delete() is called. We did not get any exceptions when running this code.
When running the code a second time and debugging again, we see that the very same Content Type still has the very same event handler attached... As in, it wasn't deleted....
We also tried to delete the event handlers through PowerShell as described
here in the post by Per Jakobsen. However, the script did not really seem to find any EventReceivers... We tried to write the
$site.AllWebs | % {$_.Lists} | % {$_.ContentTypes} | % {$_.EventReceivers} list to file, but it was empty.. We did however get a long list when writing $site.AllWebs | % {$_.Lists} | % {$_.ContentTypes} to file. We could then in
that file see the event handler references we want to remove registered to our Content Types, as we did during code debugging earlier on. So PowerShell might still be the way to go here...
So, does anyone know if there is a way to force this delete through, either by code, PowerShell or some other means? Any help regarding this matter would be very much appreciated :)

Hi,
For your information, there's two versions (at least) exists for each content types. One is Site Content Type - exists in Root web and another is list content type. Once you add a content type to a list, a copy of the site content type is taken and stored
in the list. If you update the site content type, it may or may not affect the list conten type. So make sure you are updating the both - site content and list content type. Once you update site content type with passing paramater true to 'ct.Update(true)',
the list content types are supposed to updated too.
Thanks,
Sohel Rana
http://ranaictiu-technicalblog.blogspot.com

Number of SAP instance for IDM 7.1 IdP ? IDM 7.1 SP5 with UI also for 7.2 ?

Hello,
I've just read the SAP NW IDM Identity Provider Implementation Guide. It seems very interesting. One question though : it seems the Identity Provider must be deployed on a NW CE 7.2 system.
So we end up having a NW CE 7.1 Ehp1 for IDM UI with IDM runtime, designtime and database (all on the same server) and we must have another server or another SAP instance for the IdP with CE 7.2 ?
Will IDM 7.1 SP5 UI also be compatible with / be developed for CE 7.2 to avoid another SAP instance ?
Finally will Windows 2008 be officially certified for IDM 7.1 ?
Thanks in advance,
Hervé

Hello Petr, I think this might be a problem. Probably you would be able to do what you want to do within a portal setup, where IdM is providing content to that portal. However, the development would take place in the portal and not per se be a development in the IdM UI. As I understand it the IdM UI is configurable to some extent, but not changeable by customers.
Rgds.
Anders

OpenSSO Enterprise Login Module for IDM 7.1

I have a fully configured OpenSSO Enterprise environment running on Glassfish v2.1 and am trying to implement SSO into an IDM 7.1 environment that is also running on a Glassfish 2.1 server with a centrally managed v3.0 policy agent.
While working my way through the "Integration Guide" for IDM and OpenSSO I've come to the step where I am to change the Identity Manager Login Module Groups. We are not provisioning directly from IDM to OpenSSO but rather to the LDAP that OpenSSO authenticates with so I have not configured the OpenSSO resource adapter.
When I get to Assigning the Login Module I initially did not have the Sun OpenSSO Realm Login Module so i want back and added a custom resource called: com.waveset.adapter.SunAccessManagerRealmResourceAdapter which was available because I had put the openssoclientsdk.jar in the idm/WEB-INF/lib folder and added that to the class suffix in the JVM settings.
The Realm resource adapter appears to work as I can create a new instance and am prompted for the correct fields.
When i go back to assign the Login Module I now get a Sun Access Manager Realm Adapter in the dropdown box but cannot select it.
The question is, where do I get the custom login module that will allow IDM 7.1 to work with OpenSSO Enterprise?
Thanks, Craig

Hi ,
I am a colleague of Peter, just to straighten out our problem.
Our custom login module extends AMLoginModule and when the Access Manager instantiates the object it calls the method defined in AMLoginModule :
" public Callback[] getCallback(int index) "
This method contains a call to "AMModuleProperties.getModuleProperties(fileName);"
Our problem is, das the method is already called with filename being null, which is the cause for the Exception to be thrown.
So could anybody give us a hint what filename is supposed to be at this point? As it seems that Access Manager is lacking a property which it normally would associate with filename.
My first guess was that it is looking for <moduleName>.xml, but this file is properly located in "/etc/opt/SUNWam/config/xml" and accessible.
Any help appreciated.
Thank you in advance!

Event handlers for backbutton

Hi,
I want perform some validations when I press back button.how to find event handlers for back button,because F2
is not giving full info for back button.
Regards,
Brahmaji

Hi,
the back button is always part of toolbar buttons.
So you can open the view controller class and open the GET_TOOLBAR_BUTTONS method from that class.
In this method you see how the BACK button is defined. One of the attribute of button structure is ON_CLICK.
The value of this attribute should be the event name that is triggered when the button is clicked.
Now open the DO_HANDLE_EVENT method from the view controller class, you will have methods with prefix EH_ON
after the prefix you see the event name. If you find one that mached to the event name of the BACK button, then this is the event handler that is triggered by the BACK button.
Regards,
Steve

JCA Adapter for IDMS ?

any adapter for IDMS ?

Hey Todd,
By tooling I mean something like visual interspace, though at my end of developement, I dont need 'visual' components, but it would be good to have some stubs and service interface that are tux program specifics. A step more than CCI that resource adapter would offer.
Like hibernate, a clear layer where I access the db in terms of entities and simple pojos. Simplify the programming model.
My need is very clear, connect to Tux services, and I'm trying to understand the options, likey JOLT, WTC and now resource adapters. Is there any documentation that could compare these, in terms of programming ease, performance, pros and cons.
Ah! and compatibility and support with oracle ADF. SALT is as of now not in contention.
I'm not really fascinated with FML approach, where type safety check or parameter match is left at runtime.
The project that I'm looking at is very huge in size, lets say more than thousand services
Your guidance will be very helpful
Thanks
Allam
Edited by: user9130883 on Mar 16, 2010 12:47 PM

Do I have to configure realm policy in Access Manager for IDM SPML Request

Hi all,
I wanted to run a SPML request from my application to the IDM which is presently protected by an AM server. Somehow, I get the following error, while I run a search using SpmlClient:
org.openspml.util.SpmlException: Unsupported response content type "text/html", must be: "text/xml".
Do I have to set a policy in Sun Access manager for the realm? Guys, pls help.
Thanks,
Aneesh.

> I believe as long as you have access to the above two you can turn the CA off if you want.
Enterprise CAs are not intended to be offline. Therefore, you should not turn off them. If these root CAs issue certificates only to subordinate CAs, then you should consider to implement offline Standalone (not Enterprise) Root CAs.
> I believe the location of the CRL is detailed in the CDP which is detailed on the Certs issued but a given CA, so the client can look in the Cert and see what it states about the CDP and thereby get the list of revoked certs.
this is correct.
> to place its CDP at a location other than the default location in case it overwrites the existing CRL at the default location
no, CDP locations should be defined in the post-installation script.
> does the fully qualified X500 name of the CDP include the CA Name (and therefore be unique) and it will not over write the original
yes, LDAP URL includes CA server's NetBIOS name to differentiate between CAs.
My weblog: en-us.sysadmins.lv
PowerShell PKI Module: pspki.codeplex.com
PowerShell Cmdlet Help Editor pscmdlethelpeditor.codeplex.com
Check out new: SSL Certificate Verifier
Check out new:
PowerShell FCIV tool.

WSDL for IdM Web Service

The IdM doco states:
"Identity Manager Web services are accessed using SOAP messages for HTTP. Identity Manager supports both versions of the OASIS standard for communication with provisioning systems; the Service Provisioning Markup Language (SPML) � versions1.0 and 2.0."
I would like to create a standard Web Services Client with an IDE like Netbeans. This entails obtaining the WSDL.
Does anyone know if this exists?
There is one for the Password Rest Web Service, but not the SPML interface.
Thanks

There seems to be a sample WSDL defined in the SPML 1.0 bindings document on openspml.org at the following URL:
http://www.oasis-open.org/committees/download.php/2394/cs-pstc-spml-bindings-1.0.pdf
I didn't check the new SPML 2.0 spec to see if it includes a WSDL you could use but I think 2.0 is only available in IdM 7.0.
Hope this helps.

How to get Admin Roles using SPML in SUN IdM 7.1

Hi,
I am tring to get Roles and Admin roles using SPML in IdM 7.1.
But i am able to get the Roles of the user using the attribute "Role"; For Admin role i tried with the attributes "AdminRole", "adminRole", "AdminRoles", "adminRoles". But I am not able to get the values.
What is the attribute name where we can fetch the values of admin roles assigned to a user using SPML.
Please let me know for any queries.
Thanks and regards,
Dinesh.

Hi Dinesh,
Try using waveset.adminRoles
Thanks

How do you determine the SPML posid for identities or roles,

We are currently on 11.1.1.3.0
There are multiple SPML operations to update or delete identities or roles. And all these require us to pass in a posID (either identity:NNN or role:NNN).
My question is how does one get the posID programatically? So far the only way I know of is a manual process. To get the users posID, its displayed on the OIM admin console when viewing the details for a user. However for a role, I have had to look it up in the database table, UGP.UGP_KEY.
There are some lookup operations in the WSDL but as of 11.1.1.3.0, they are all unimplemented.
Thanks
Aspi Engineer
Putnam Investments

I raised an SR with oracle about this and their response was that the only way to do this is through the lookup methods which would be implemented in future patches.

Specific attributes for IDM implementation

I am trying to integrate webcenter with Oracle IDM environment, to do the same i required to know the specific attributes for oracle webcenter users
the input is required for the IDM team to create the schemas,
Can anybody enlighten me about the same,

Read this link and around: http://docs.oracle.com/cd/E21764_01/webcenter.1111/e12405/wcadm_security_id_store.htm#CFHJEJID
Note, that you will not integrate "WebCenter", but rather "its LDAP".

SPML handlers for IDM 8.0

Similar Messages

Maybe you are looking for