Telnet using IDM Resource Actions

Hi all,
I'm provisioning users in a Win AD with their home directory in a storage system, I need to assign additional attributes such as quota so I decided to use an after creation resource action that invokes a perl script that does the telnet connection. The resource action executes the perl script but it throws an error message that reads "after creation failed on resource 'MyAD' rc=10106; stdout=null, stderr='problem creating socket: Unknown error at script.pl at line xx"
This is that line xx :
telnet->open(<IP_ADDRESS>);I can telnet storage from windows using the cmd in a normal way. Also, when a run my perl script from cmd it connects to the storage and executes the command successfully
So anyone have any idea or a pointer on this matter? Is this an IDM restriction or something like that?
Thanks in advance

Got it!
All I had to do is to pull resource environment variables in the resource action script. In my case I put SystemRoot, PATH, and PATHEXT and it worked like a charm

Similar Messages

Active Directory + Resource action to delete home directory

Hi all,
I am trying to delete home directory from the disk physically after the user is deleted from AD. I followed the link http://docs.sun.com/app/docs/doc/820-6551/bzbuc?a=view and implemented the delete resource action as mentioned in the link.
here are the steps i followed (For testing, I mentioned delete >> C:\test.txt to see if it deletes the text file)
1. Enter delete after action in the Identity Manager User Attribute column of the resource’s schema map.
2. In the Attribute Type column, select string.
3. In the Resource User Attribute column, enter IGNORE_ATTR. Leave the Required, Audit, Read Only, and Write Only columns unchecked.
4. Add this to the Deprovision Form user form after the </Include> tag:
<Field name= ’resourceAccounts.currentResourceAccounts[AD].attributes.
delete after action’>
<Expansion>
<s>AfterDelete</s>
</Expansion>
</Field>
5. Create the following XML file and import into Identity Manager. (Change file paths according to your environment.)
<?xml version=’1.0’ encoding=’UTF-8’?> <!DOCTYPE Waveset PUBLIC
’waveset.dtd’ ’waveset.dtd’>
<Waveset>
<ResourceAction name=’AfterDelete’>
<ResTypeAction restype=’Windows Active Directory’ timeout=’6000’>
<act>
echo delete >> C:\test.txt
exit
</act>
</ResTypeAction>
</ResourceAction>
</Waveset>
6. Edit the XML for the Active Directory resource and add information to the “delete after action” schema mapping. Here is an example of a complete schema mapping for this resource with the new additions. (You will be adding the views-related information.)
<AccountAttributeType id=’12’ name=’delete after action’ syntax=’string’
mapName=’IGNORE_ATTR’ mapType=’string’>
<Views>
<String>Delete</String>
</Views>
</AccountAttributeType>
To test, I deleted a user from AD and I was expecting the file c:\test.txt to be deleted as it invokes the Resource action after delete. Has anyone been successful in deleting the home directory from drive after the user is deleted. Any pointers or help
Thanks,
Ani

Hi Gaurav,
I have to implement Resource Action functionality for Solaris system. I followed the link http://download.oracle.com/docs/cd/E19225-01/820-6551/bzbuc/index.html and the first message of this thread. I am using 8.1 IDM.
But unfortunately I can’t trigger any bash commands on the resource like echo deleting of user wiht next name - $WSUSER_accountId >> /tmp/resultFile.txt.
There are any errors on log file.
Can you share your work configuration and steps to reproduce?
I have done next but Resource Action doesn’t triggered:
1. My Action:
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE Waveset PUBLIC 'waveset.dtd' 'waveset.dtd'>
<Waveset>
<ResourceAction name='AST-ResAct-SOL-AfterDelete'>
<ResTypeAction restype='Solaris' timeout='6000'>
<act>
#!/usr/bin/bash
echo deleting of user wiht next name - $WSUSER_accountId >> /tmp/resultFile.txt
exit 0
</act>
</ResTypeAction>
</ResourceAction>
</Waveset>
2. Added next line to “Deprovision Form”
<Field name='resourceAccounts.currentResourceAccounts[SOLARIS 10].attributes.delete after action'>
<Expansion>
<s>AST-ResAct-SOL-AfterDelete</s>
</Expansion>
</Field>
3. Added a new attribute mapping on the resource:
<AccountAttributeType id='12' name='delete after action' syntax='string' mapName='IGNORE_ATTR' mapType='string'>
</AccountAttributeType>
4. Assigned role (this role provisioned resource to user) to user, delete user from resource via Deprovision IDM page. But my Action commands didn’t trigger on resource.
Thanks’ in advance!

After-Delete Resource Action Fails with "the authenticity of host ..." Err

I created two Resource Actions (see below for format used). Both actions are being referenced in an Shell Script resource adapter (RA) that's used to create/delete a home directory on a Sun Solaris box. The RA also performs other setup/cleanup activities. The After-Create resource action call to ssh works. The After-Delete resource action call to ssh fails with the following error:
com.waveset.util.WavesetException: Script failed waiting for "_,)#+
(:" in response "The authenticity of host 'localhost (127.0.0.1)' can't be
established. RSA key fingerprint is db:98:c4:cf:84:0a:f9:52:12:14:7...A key
fingerprint is db:98:c4:cf:84:0a:f9:52:12:14:7e:74:23:f7:8f:df. Are you sure
you want to continue connecting (yes/no)? " com.waveset.util.WavesetException:
Script processor timed out with nothing to read and the following unprocessed
text: "The authenticity of host 'localhost (127.0.0.1)' can't be established.
RSA key fingerprint is db:98:c4:cf:84:0a:f9:52:12:14:7e:74:23:f7:8f:df. Are you sure you want to continue connecting (yes/no)? The authenticity of host 'localhost (127.0.0.1)' can't be established. RSA key fingerprint is db:98:c4:cf:84:0a:f9:52:12:14:7e:74:23:f7:8f:df. Are you sure you want to continue connecting (yes/no)? ".
By the way, we are currently using Sun Identity Manager 7.0.
Thanks in advance for your assistance.
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE ResourceAction PUBLIC 'waveset.dtd' 'waveset.dtd'>
<ResourceAction name='ResAction:myProj:Resource-After-Create'>
<ResTypeAction restype='Shell Script' timeout='20000'>
<act>
#!/bin/csh
echo "Account ID" >> /myProjFolder/.$WSUSER_accountId.txt
echo $WSUSER_accountId >> /myProjFolder/.$WSUSER_accountId.txt
ssh -l someuser localhost /myProjFolder/exe/someExecutable $WSUSER_accountId &
exit 0
</act>
</ResTypeAction>
<MemberObjectGroups>
<ObjectRef type='ObjectGroup' id='#ID#Top' name='Top'/>
</MemberObjectGroups>
</ResourceAction>
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE ResourceAction PUBLIC 'waveset.dtd' 'waveset.dtd'>
<ResourceAction name='ResAction:myProj:Resource-After-Delete'>
<ResTypeAction restype='Shell Script' timeout='20000'>
<act>
#!/bin/csh
echo "Account ID" >> /myProjFolder/.$WSUSER_accountId.txt
echo $WSUSER_accountId >> /myProjFolder/.$WSUSER_accountId.txt
ssh -l someuser localhost /myProjFolder/exe/someExecutable $WSUSER_accountId &
exit 0
</act>
</ResTypeAction>
<MemberObjectGroups>
<ObjectRef type='ObjectGroup' id='#ID#Top' name='Top'/>
</MemberObjectGroups>
</ResourceAction>

You've probably already fixed it...
Just log on in the console yourself, instead of IdM. After answering yes, key fingerprint will be added to the ~/.ssh/known_hosts, and IdM will be happy.
Milan

Problem with SubmitButton name across screens, which use the same action?

I am using multiple submit buttons in a single JSP. The problem i am using the same action across 4 screens, and excpet the 1st screen the remaingin 3 screens have BACK & Continue button, in every page the click of back button should take back to the previous screen and continue should submit the options selected to the next screen;
The problem is i m using to LookupDispatchAction to handle multiple submit buttons, and i m using this for buttons
<html:submit property="method"><bean:message key="reg.bt.back"/></html:submit>
In resource bundle reg.bt.back=Back , but i need to pass to the previous screen so how to do that
Help needed............
Thanks in Advance

why can you not store the information you require in the session?
session.setAttribute("attributename" <attribute object>);
surely that would negate you needing to pass parameters though the http?
but otherwise there are several ways to do this, first of all you could simply rewrite the URL, which i'll admit is slightly labour intensive, but it would do the job... of if you really wanted you could put hidden html values throughout your page, and populate them with the data you wish you pass in your request, as long as the hidden inputs are in the <form> there should be no issue here.
N.B. you are right, i would never suggest using JS for ANYTHING to do with sessions and submitted/retrieving data when you are using a JSP.

Addition to Resource Actions

Anyone have any ideas of even where to begin if I wanted to extend the available actions of a resource. For example add a functions such as Create Device to the menu selection for Create Group, Create Organizational Unit
Note I do not mean scripted resource actions, but additional actions as available via Right-Click pulldown in the Manage Resource Tab.
Z

Hi,
Its not possible...note that, evry resource has its own options..!
Atleast thr IDM GUI its not possible...

How to use one Assign action to create multiple context variables

Hello, everyone.
I read some tips from Oracle documentation that said:
Avoid creating many OSB context variables that are used just once within another XQuery
Context variables created using an Assign action are converted to XmlBeans and then reverted to the native XQuery format for the next XQuery. Multiple "Assign" actions can be collapsed into a single Assign action using a FLWOR expression. Intermediate values can be created using "let" statements. Avoiding redundant context variable creation eliminates overheads associated with internal data format conversions. This benefit has to be balanced against visibility of the code and reuse of the variables.
Oracle® Fusion Middleware Performance and Tuning Guide
+11g Release 1 (11.1.1)+
Part Number E10108-03
But I don't know how to do that. Can you show me ?
Thank in advance
Edited by: Doubt_Man on Aug 17, 2011 3:30 PM

if you return sequences, you can declare the return type of your xquery as xs:double*
(notice the asterix at the end)
but I have the impression that in the assign action only the first element will be assigned to the context variable
(correct me if I am wrong)
So in fact you might indeed have to transform the sequence into a element()*, or concatenate it into a CVS string - for instance using string-join
http://www.xqueryfunctions.com/xq/fn_string-join.html

MS Project Very Slow and Project Files Large when Using Shared Resource Pool

Hello,
We are using MS Project 2010 Professional in our organization and using a shared resource pool so we can easily identify resource conflicts. When we started this process many months ago the resource pool worked great. Now that we have nearly
all of our projects (~40) using the resource pool, it has become essentially unusable. Each project file that is sharing the resource pool is 12 MB or greater in file size, and most of the project files contain less than 100 lines. Saving any file
takes ~4 minutes. As a result, many of the resource managers and project managers are starting to avoid using MS Project which is undermining our original intent.
Any thoughts on what we could try to regain the usability, make the file sizes smaller, improve save times, etc.? Will MS Project Server fix all of these issues?
Thanks,
Josh

If any of your PMs renamed, moved or over-wrote their project file whilst linked to the Resource Pool or a master, then the file may well have corrupted itself or the pool or both. With 40 files, you can guarantee one or more PMs will do one of the above,
so file corruption is a when, not if (2days or 2 years or more).
For 40 projects Project Server or any solution that copies data to a database so the resource data can be consolidated is needed. Project Server is not a simple application, it's a full server and requires proper training and processes to add value. And
it needs configuring by someone who knows what they're doing!
In the mean time try unattaching all project files from the pool, then create a new blank pool and re-attach.You will also need to File, Save as to repair each project file if needed. For bad corruption save as to a .xml format then re-import to a blank
project.
Or, create a new master each time by inserting all projects into a new blank project, but deselecting the Link option. All tasks are then copied and the resource data consolidated. Record a macro to make creating this very quick and easy (provided your network
isn't too slow).
Rod Gill <a href="http://www.project-systems.co.nz/project-vba-book/index.html/">The one and only Project VBA Book</a> <a href="http://www.project-systems.co.nz/"> Rod
Gill Project Management</a>

New task assigned to user from CurrentItem:UserField using Assign task action is assigned to different user.

Hello !
I have run into "funny" problem.
I have following workflow:
User is creating item in ListA. In new form he needs to put Manager which is User Field column type. From people picker he is choosing login name Domain\jo (Two letters seems to be important here). User is resolved correctly to John Doe. Item is saved and
added to list correctly. In list view John Doe is displayed in Manager column. In view item John Doe is in Manager field. In powershell Id;#John Doe is as a Manager field value.
Now the "funny" part:
After item is added to ListA workflow is started automatically. Workflow is assigning new task to user from Manager (CurrentItem:Manager) field using Assign task action. Now the new task is assigned to different person i.e. John Dimagio with login name DOMAIN\jod
! When I am logging value to wf history of the CurrentItem:Manager field I am getting sth like i;123#DOMAIN\jod . So value is completely different and wrong.
Can someone explain why is this happening?
My guess is that using two letters login name can cause such case but why ?
Regards,

Hello !
I have run into "funny" problem.
I have following workflow:
User is creating item in ListA. In new form he needs to put Manager which is User Field column type. From people picker he is choosing login name Domain\jo (Two letters seems to be important here). User is resolved correctly to John Doe. Item is saved and
added to list correctly. In list view John Doe is displayed in Manager column. In view item John Doe is in Manager field. In powershell Id;#John Doe is as a Manager field value.
Now the "funny" part:
After item is added to ListA workflow is started automatically. Workflow is assigning new task to user from Manager (CurrentItem:Manager) field using Assign task action. Now the new task is assigned to different person i.e. John Dimagio with login name DOMAIN\jod
! When I am logging value to wf history of the CurrentItem:Manager field I am getting sth like i;123#DOMAIN\jod . So value is completely different and wrong.
Can someone explain why is this happening?
My guess is that using two letters login name can cause such case but why ?
Regards,

Premiere Pro CC not using all resources... 4k

I just put together a new workstation machine for editing 1D-C 4k files in Premiere Pro and After Effects.
Specs...
i7 3770 3.4
Gigabyte Z77 Mobo
32gb Corsair Vengance DDR3 1600 RAM
250gb Samsung SSD
4x 2TB Seagate 7200 HDDs in RAID 0 (Yes I know it isn't backed up, we have that part covered)
Nvidia Quadro K4000 (3gb vram)
Anyway, we transfered a project with all the media files to our RAID media drive.
It opened up very quickly and loaded all the media much faster then our old workstation.
Then I hit the spacebar (perview) and the problems started..
It won't play back smoothly at all,
AND it is only running the CPU at 10-20%, GPU 10-50%, ram at 25% and it is not really taxing the drives very hard either...
Why won't PP use all the resources at 100% like I have previously seen it do on other machines?
** The project we are trying to play is 2 layers of 4k .MOV footage in a 1080 timeline... with sharpening, Fast color corrector, and RGB curves.
** It also drops every fourth frame when playing back just one layer of 4k .mov footage in a 1080 timeline with NO Effects applied. (Much smoother, but still not using all resources)
What I am asking, is why would it be giving up so quickly? Before even taxing the resources very hard?

I too have a recent 1D-C project I'm editing. That 1D-C is something, yes? Most filmic images I've ever seen from a DSLR. But I digress.
I'm following a workflow closer to the one used by Philip Bloom and Shane Hurlbut. The Motion Jpeg files will not play well at all on your system. It's strictly a capture medium - not an editing one.
I converted all my 1D-C files to Prores 422 at 4K size using Mpeg Streamclip. Those files imported beautifully and edit well on my Retina Macbook Pro laptop. I usually set playback to 1/2 quality, ps.
I have had problems using CUDA, so I'm sticking to software mode. But I don't see any problem with being able to cut my film and finish on my computer.
Also - my sequence is a 4K sequence right in Premiere. I simply chose a clip and "made a sequence" from that. Why scale when I don't have to? I've exported to 1080p easily from the sequence.
If anyone finds this workflow less than ideal, I'm all ears. Thanks.

With a PDF Dynamic form using show/hide actions, how to ensure that when the completed form is saved, closed and re-opened, the form still show the fields as before it was closed?

With a PDF Dynamic form using show/hide actions, how to ensure that when the completed form is saved, closed and re-opened, the form still show the fields as before it was closed?
I have developed a form with fields hidden by default, that become visible based on box ticked or radio button selections.
My problem is that, when I close the form and re-open it, it comes back to it's default presentation, regardless of the information already recorded in the form (including in the now hidden fields.
How to correct that
Thanks in advance for any hint you can provide.

I've had the same problem. This solved it...
Go to the "Form properties..." in the File-menu. Select "Run-time" to the left and in the box "Scripting" Preserve scripting changes to form when saved: choose Automatically (Script-based state changes are saved locally in an insecure fashion. This option cannot be used for certified forms).
Hope it works for you to...

Error when using Web service Action Block.

Hi All
I am calling recursive function in my transaction.Means same transaction i am calling inside a transaction.I have used the Webservice Action block to call the transaction.
I have passed the parameters whatever is requied.
But I am getting error when i am executing the transaction:
"Error invoking Webservice Action: Status(500):Internal Server Error".
Please suggest me on this.
Thanks in advance.
Regards,
Manisha

Hi Vishal
This transaction is trying to achieve the recursive function.
I want to call the same transaction within a transaction.So i have used WebService action block to call the transaction.
I have passed the input parameters whatever required.I have given loginName and password as my server login name and password.But when i am executing the transaction, I am getting the following error:
"Internal Server Error"
If any idea please suugest me.
Thanks,
Manisha

Changes are not reflecting using af:resource for adding CSS

Hi,
I am trying to add new CSS file(say the name as customNew.css) to page template using af:resource tag, the changes are not reflected. Instead I see(using firebug) that, styles coming from different CSS file(say the name as customOld.css ) which configured on trinidad-config.xml and trinidad-skins.xml files.
I was under the impression that, the new CSS file(customNew.css) will override the old css (customOld.css). So, CSS added using af:resource tag will not override any other CSS ???
Any help will be appreciated
Thanks,
San.

Hi,
if you bring CSS to the browser through af:resource then this is not overriding any skinning definition. Skins can only changed in trinidad-config.xml file (which also can be done at runtime). Just adding a CSS file to af:resource wont do the trick here.
Frank

Can we use same SOAP ACTION in different environments?

Hi All,
I have a doubt.
Can we use same SOAP Action URL in different environments i.e suppose say Quality, Production and Pre production.And the Target URL is different in both environments.
If yest what is the impact in different environment.

Hi ,
SOAP action is nothing but operation/method in webservice .
Usually at end system end as a good practice/std they will maintain the same soap action name in all their environments,but it's always better to cross check url and soap action with end system folks before configuring in PI .
We have faced an issue in production some time back ,at target system end they upgraded their server and used new wsdl which is almost similar to existing but one of the operation they duplicated by adding few addition fields but forgot to inform PI system.Though we are using new wsdl but pointed to old soap action .Interface got failed in PROD after investigation we come to know that we are using wrong soap action
Regards
Venkat

Is telnet use local tnsnames.ora?

I was suprise that when the local tnsnames.ora of client was not correct,sqlplus at telnet can't connect to server,and when the file was modify,I can use sqlplus connect to oracle through telnet.
is telnet use local tnsnames.ora?

This is simply impossible.

Windows Client MP is using the default action account to write to the Data Warehouse

Hi,
I have recently installed SCOM 2012R2, and am in the process of migrating everthing from SCOM 2007R2.
Just after I installed the Windows Client MP (version 6.0.7250.0), I started getting this Event 11852:
OleDb Module encountered a failure 0x80004005 during execution and will post it as output data item. Unspecified error
: Cannot open database "OperationsManagerDW" requested by the login. The login failed.
Workflow name: Microsoft.Windows.Client.Win7.ComputerGroup.MemoryTrendsRAM
Instance name: Microsoft System Center Data Warehouse
Instance ID: {16781F33-F72D-033C-1DF4-65A2AFF32CA3}
Management group: 2012SCOMDEV
This is happening every 7 days and only happening on the Win7 Management pack. I checked the DW logs and found that it was using the default action acount (SCOM ACTION)to send to the DW. This account doesn't have access to the DW DB.
I assume it should be using the Data Warehouse action account. This is how the acount is setup
Can anyone tell me where I'm going wrong here? I have not had to touch the permissions for any of the other Management packs. the rest of them just work.

For this issue, you can check below link
http://blog.metasplo.it/2014/01/scom-2012-oledb-module-0x80004005.html
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"Mai Ali | My blog:
Technical | Twitter:
Mai Ali

Telnet using IDM Resource Actions

Similar Messages

Maybe you are looking for