Trusted Resource Reconciliation Concept

Hi All
please pardon my ignorance if it turns out to be a basic question but i want to know that if we want to make our Oracle Database as Trusted Source and configure a GTC to do trusted source reconciliation, should we first have to populate the Organisation in the OIM database of the organisations are created along with reconciliation if they do not already exist?
for example if our existing Oracle database has following information of users
User ID
First Name
Last Name
Password
Employ Type
User Type
Organisation
where the organisations in this database do not exist in OIM database....will the reconciliation work?
and if not that how can we add the existing organisation in the OIM database?
Best Regards

If Organization of Database doesn't exist in OIM then it will through error. You can just create one custom sch task which will read the value from Organization column and will create Organization in OIM. You'll have to run the sch task before running the trusted recon.
How to create a new schedule task from java code

Similar Messages

DBUM Trusted Resource reconciliation fails

I'm trying to set up a trusted resource reconciliation job.
I currently have it set up like this : http://i.imgur.com/uUh4X.jpg
Also, I set up the configuration lookup definition (using OIM Design Console). In my case its: u01/oracle/product/fmw/1111/wls1/iam/server/ConnectorDefaultDirectory/DBUser_9.1.0.4.0/config/DBUMReconQuery.properties
When I run the job however I get following error messages in OIM log: Message     java.io.FileNotFoundException: Enter a value (No such file or directory)
I assume I'm missing something. Any suggestions?
Fullstacktrace of exception:
Message Level     1
Relationship ID     0
Component     wls_oim1
Module     OIMCP.DBUM
Host     xxx.xxx.xxx
Host IP Address     xx.xx.xx.xx
User     oiminternal
Thread ID     OIMQuartzScheduler_Worker-8
ECID     18ad5d5d71213dc9:57db12c3:13662eb5848:-8000-0000000000000002
Message     java.io.FileNotFoundException: Enter a value (No such file or directory)
Supplemental Detail     at java.io.FileInputStream.open(Native Method)
at java.io.FileInputStream.<init>(FileInputStream.java:106)
at java.io.FileInputStream.<init>(FileInputStream.java:66)
at oracle.iam.connectors.dbum.common.db.util.QueryBuilder.loadQuery(Unknown Source)
at oracle.iam.connectors.dbum.common.db.util.QueryBuilder.getSqlQuery(Unknown Source)
at oracle.iam.connectors.dbum.tasks.DBUMReconTask.execute(Unknown Source)
at com.thortech.xl.scheduler.tasks.SchedulerBaseTask.execute(SchedulerBaseTask.java:384)
at oracle.iam.scheduler.vo.TaskSupport.executeJob(TaskSupport.java:145)
at sun.reflect.GeneratedMethodAccessor3868.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.iam.scheduler.impl.quartz.QuartzJob.execute(QuartzJob.java:196)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:529)

Hi steven,
I am also facing same problem while doing trusted recon using DBUM connector. Can i know the procedure to resolve it, what changes need to do in apache config?
ASAP
Regards
SK
Edited by: user7609 on Jul 11, 2012 4:08 PM

More than one trusted resource for OIM 9.1.0.2

Hi all,
I just heard that in OIM 9.1.0.2 it is possible to have more than one trusted source, as it is not necessary to configure it to Xellerate User Resource Object. Is that correct?
To configure OID Connector as Trusted Source on OIM 9.1.0.2 do I have to import its XML file?
Regards
Hossam

From what i recall, the OID connector does not come with a second object for the trusted one. I think it comes with the Xellerate User object updated.
To make a new trusted resource, create the resource object, check the trusted source box. On the recon fields, add in all your recon fields you want to use. On the recon action rules tab, set your rule for match not found to create a user, and entity match to link to user. Create a reconciliation rule for this object and the xellerate user object. Create a provisioning process defintion with no additional tasks. On the reconciliation field mappings tab, map all your recon fields to OIM user fields. You'll want to create any entity adapters/event handlers needed to provide required fields such as User Type, and User Role, and Organization and so on.
Now when you get a recon event for this object, it will be a trusted object and can create new users for you and update the OIM profile.
-Kevin

Using Xellerate User as trusted Resource Object - 11G Release 2

Hi all,
I want you use Xellerate User as trusted Resource Object for trusted reconciliation. From design console I try to add my custom attributes to this RO, but when I try to save I get error that it is not permmited.Is this a kinda bug or in Release 2 something has changed and I must define new trusted RO? Any help is strongly appreciated..
BR,
Aliye

There is a checkbox "Trusted Source" on the Resource profile. You can select this check box if you want to use the resource object for trusted user reconciliation. By default, this check box is not selected. It is selected by default only for the Xellerate User resource object. Since Xellerate User resource object is OOTB and very critical, it is recommended to use a different dedicated resource for simply used as Trusted Resource Object....
Details can be found in *11.9.4 Resource Objects Form*
http://docs.oracle.com/cd/E21764_01/doc.1111/e14309/resmgt.htm#CBBFAIEC

Difference between Targeted vs. Trusted source reconciliation?

Hello!
Can someone please explain to me in a “for dummies sort of way” or “by example” what is the difference between
Trusted source reconciliation and Targeted resource reconciliation??
I found this explanation on Oracle, but I still don't understand the difference:
Targeted resource reconciliation:
occurs when the audit criteria reconciles the resource request or change against the actual resource provisioned insuring access or the lack thereof in a ad hoc query bases.
Trusted source reconciliation:
occurs when the audit criteria reconciles from a primary point of truth validating the resource access status against corporate policy.
Thank you very much

Trusted Source:
Trusted sources are identified as your source of truth for employee information. It is a store of user information that hopefully will contain your entire employee list. The best example would be payroll. The information from payroll should be accurate for all employees, and also contain personal data that might be required. Your trusted source will map to a single user identity in OIM, which is the Xellerate User. When you perform a trusted reconciliation against this target, it will create your Xellerate User object for each user which is the unique identity within OIM. Also, when performing reconciliations against a trusted source, this is the only time a reconciliation event triggers an update to a field. You can propogate changes from a trusted reconciliation onto your targets by creating triggers.
Target Reconciliation:
Now that you have your unique identity, this Xellerate User can have user accounts that the end user will actually use. They can have multiple targets linked to their trusted profile (Xellerate User). So when you perform a target recon, it will match that target entity to the Xellerate User identity creating a 1 to many relationship. For every 1 Xellerate User object, you can have multiple target objects, but not the other way around. When you perform the target reconciliation for updates, there are no triggered changes to the process form. It is all an immediate change and you cannot have a trigger on these fields, wheras the trusted source will trigger a change that can be propagated to the targets.
So you can think of it as Trusted is an identity or person, and Target is a user account or object that is actually used by the identity.
-Kevin

Error while creating GTC for trusted source reconciliation in OIM11g

Hi,
I got an exception while trying to create GTC for Trusted source Reconciliation in OIM11g
Class/Method: CreateGenConnectorAction/imageScreen encounter some problems: Provider Exception[[
java.lang.Exception: Provider Exception
at com.thortech.xl.webclient.actions.CreateConnectorAction.getGenericAdapter(CreateConnectorAction.java:2265)
at com.thortech.xl.webclient.actions.CreateConnectorAction.imageScreen(CreateConnectorAction.java:1196)
at com.thortech.xl.webclient.actions.CreateConnectorAction.goNext(CreateConnectorAction.java:521)
at sun.reflect.GeneratedMethodAccessor4673.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:600)
at org.apache.struts.actions.DispatchAction.dispatchMethod(DispatchAction.java:269)
at com.thortech.xl.webclient.actions.tcLookupDispatchAction.execute(tcLookupDispatchAction.java:133)
at com.thortech.xl.webclient.actions.tcActionBase.execute(tcActionBase.java:894)
at com.thortech.xl.webclient.actions.tcAction.execute(tcAction.java:213)
at com.thortech.xl.webclient.actions.CreateConnectorAction.execute(CreateConnectorAction.java:135)
at org.apache.struts.chain.commands.servlet.ExecuteAction.execute(ExecuteAction.java:58)
at org.apache.struts.chain.commands.AbstractExecuteAction.execute(AbstractExecuteAction.java:67)
at org.apache.struts.chain.commands.ActionCommandBase.execute(ActionCommandBase.java:51)
at org.apache.commons.chain.impl.ChainBase.execute(ChainBase.java:191)
at org.apache.commons.chain.generic.LookupCommand.execute(LookupCommand.java:305)
at org.apache.commons.chain.impl.ChainBase.execute(ChainBase.java:191)
at org.apache.struts.chain.ComposableRequestProcessor.process(ComposableRequestProcessor.java:283)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1913)
at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:462)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300)
at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at com.thortech.xl.webclient.security.XSSFilter.doFilter(XSSFilter.java:103)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at com.thortech.xl.webclient.security.CSRFFilter.doFilter(CSRFFilter.java:61)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.iam.platform.auth.web.PwdMgmtNavigationFilter.doFilter(PwdMgmtNavigationFilter.java:115)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.iam.platform.auth.web.OIMAuthContextFilter.doFilter(OIMAuthContextFilter.java:100)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.dms.wls.DMSServletFilter.doFilter(DMSServletFilter.java:330)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.doIt(WebAppServletContext.java:3684)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3650)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2268)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1446)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
Caused by: java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:48)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:600)
at com.thortech.xl.gc.util.ProviderFacade.getProvider(ProviderFacade.java:344)
at com.thortech.xl.webclient.actions.CreateConnectorAction.getGenericAdapter(CreateConnectorAction.java:2201)
... 47 more
Caused by: java.lang.NullPointerException
at com.thortech.util.logging.Logger.isDebugEnabled(Logger.java:599)
at com.thortech.xl.gc.impl.recon.SharedDriveReconTransportProvider.initialize(SharedDriveReconTransportProvider.java:106)
... 53 more
Thanks & Regards,
Prasad

Most likely you are hitting below bug
Bug 14271576 - OIM BETA : CONNECTOR LOGS ARE NOT GETTING UPDATED IN 11G R2 [preferrred fix ...]
or
Bug 13605443 - NULL POINTER EXCEPTIONS IN OIM SERVER DURING RECONCILIATION USING GTC CONNECTOR
Thanks Deepak

OIM-OID trusted source reconciliation failure

Hi All,
I am running trusted source reconciliation on OID to create users on OIM, i have followed all the steps mentioned in the OID document to run TSR, when i check the logs i saw these error messages ... it says attributes ,Organization Name and Manager Login missing......
..... please guide...
[2011-06-15T15:41:10.052+05:30] [oim_server1] [ERROR] [IAM-3020003] [oracle.iam.configservice.impl] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 0000J2Im7Vo5UcnMwmrY6G1Dy7II0000J8,0] [APP: oim#11.1.1.3.0] [dcid: 599ab6c29ce1f3ca:30cd79de:130928baf6b:-7ffd-00000000000004dd] [arg: Organization Name] The attribute Organization Name does not exist!
[2011-06-15T15:41:10.052+05:30] [oim_server1] [WARNING] [] [oracle.iam.identity.usermgmt.impl] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 0000J2Im7Vo5UcnMwmrY6G1Dy7II0000J8,0] [APP: oim#11.1.1.3.0] [dcid: 599ab6c29ce1f3ca:30cd79de:130928baf6b:-7ffd-00000000000004dd] [[
oracle.iam.configservice.exception.NoSuchAttributeException: Organization Name
     at oracle.iam.configservice.impl.EntityUtil.getAttribute(EntityUtil.java:504)
     at oracle.iam.configservice.impl.RDBMSDAO.getAttribute(RDBMSDAO.java:1035)
     at oracle.iam.configservice.impl.ConfigManagerImpl.getAttribute(ConfigManagerImpl.java:625)
     at oracle.iam.identity.usermgmt.impl.UserManagerImpl.search(UserManagerImpl.java:1698)
     at oracle.iam.identity.usermgmt.api.UserManagerEJB.searchx(Unknown Source)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
     at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
     at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at com.bea.core.repackaged.springframework.jee.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:37)
     at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
     at com.bea.core.repackaged.springframework.jee.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:50)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
     at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
     at $Proxy327.searchx(Unknown Source)
     at oracle.iam.identity.usermgmt.api.UserManager_nimav7_UserManagerRemoteImpl.searchx(UserManager_nimav7_UserManagerRemoteImpl.java:799)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:84)
     at $Proxy185.searchx(Unknown Source)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
     at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:198)
     at $Proxy309.searchx(Unknown Source)
     at oracle.iam.identity.usermgmt.api.UserManagerDelegate.search(Unknown Source)
     at oracle.iam.identitytaskflow.backing.taskflows.advsearch.AdvancedSearchView.processQuery(AdvancedSearchView.java:577)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at com.sun.el.parser.AstValue.invoke(AstValue.java:157)
     at com.sun.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:283)
     at org.apache.myfaces.trinidad.component.UIXComponentBase.broadcastToMethodExpression(UIXComponentBase.java:1303)
     at oracle.adf.view.rich.component.UIXQuery.broadcast(UIXQuery.java:115)
     at oracle.adf.view.rich.component.fragment.UIXRegion.broadcast(UIXRegion.java:148)
     at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:97)
     at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$1.run(ContextSwitchingComponent.java:91)
     at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:309)
     at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:94)
     at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:91)
     at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.broadcastEvents(LifecycleImpl.java:812)
     at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._executePhase(LifecycleImpl.java:292)
     at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:177)
     at javax.faces.webapp.FacesServlet.service(FacesServlet.java:265)
     at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
     at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
     at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300)
     at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:27)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
     at oracle.help.web.rich.OHWFilter.doFilter(Unknown Source)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
     at oracle.adf.model.servlet.ADFBindingFilter.doFilter(ADFBindingFilter.java:191)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
     at oracle.adfinternal.view.faces.webapp.rich.RegistrationFilter.doFilter(RegistrationFilter.java:97)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:421)
     at oracle.adfinternal.view.faces.activedata.AdsFilter.doFilter(AdsFilter.java:60)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:421)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:247)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:157)
     at org.apache.myfaces.trinidad.webapp.TrinidadFilter.doFilter(TrinidadFilter.java:92)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
     at oracle.iam.platform.auth.web.PwdMgmtNavigationFilter.doFilter(PwdMgmtNavigationFilter.java:116)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
     at oracle.iam.platform.auth.web.OIMAuthContextFilter.doFilter(OIMAuthContextFilter.java:101)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
     at oracle.adf.library.webapp.LibraryFilter.doFilter(LibraryFilter.java:160)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
     at oracle.dms.wls.DMSServletFilter.doFilter(DMSServletFilter.java:330)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
     at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.doIt(WebAppServletContext.java:3684)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3650)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
     at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
     at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2268)
     at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
     at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1446)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
[2011-06-15T15:41:10.052+05:30] [oim_server1] [ERROR] [IAM-3020003] [oracle.iam.configservice.impl] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 0000J2Im7Vo5UcnMwmrY6G1Dy7II0000J8,0] [APP: oim#11.1.1.3.0] [dcid: 599ab6c29ce1f3ca:30cd79de:130928baf6b:-7ffd-00000000000004dd] [arg: Manager Login] The attribute Manager Login does not exist!
[2011-06-15T15:41:10.052+05:30] [oim_server1] [WARNING] [] [oracle.iam.identity.usermgmt.impl] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 0000J2Im7Vo5UcnMwmrY6G1Dy7II0000J8,0] [APP: oim#11.1.1.3.0] [dcid: 599ab6c29ce1f3ca:30cd79de:130928baf6b:-7ffd-00000000000004dd] [[
oracle.iam.configservice.exception.NoSuchAttributeException: Manager Login
     at oracle.iam.configservice.impl.EntityUtil.getAttribute(EntityUtil.java:504)
     at oracle.iam.configservice.impl.RDBMSDAO.getAttribute(RDBMSDAO.java:1035)
     at oracle.iam.configservice.impl.ConfigManagerImpl.getAttribute(ConfigManagerImpl.java:625)
     at oracle.iam.identity.usermgmt.impl.UserManagerImpl.search(UserManagerImpl.java:1698)
     at oracle.iam.identity.usermgmt.api.UserManagerEJB.searchx(Unknown Source)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
     at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
     at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at com.bea.core.repackaged.springframework.jee.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:37)
     at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
     at com.bea.core.repackaged.springframework.jee.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:50)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
     at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
     at $Proxy327.searchx(Unknown Source)
     at oracle.iam.identity.usermgmt.api.UserManager_nimav7_UserManagerRemoteImpl.searchx(UserManager_nimav7_UserManagerRemoteImpl.java:799)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:84)
     at $Proxy185.searchx(Unknown Source)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
     at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:198)
     at $Proxy309.searchx(Unknown Source)
     at oracle.iam.identity.usermgmt.api.UserManagerDelegate.search(Unknown Source)
     at oracle.iam.identitytaskflow.backing.taskflows.advsearch.AdvancedSearchView.processQuery(AdvancedSearchView.java:577)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at com.sun.el.parser.AstValue.invoke(AstValue.java:157)
     at com.sun.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:283)
     at org.apache.myfaces.trinidad.component.UIXComponentBase.broadcastToMethodExpression(UIXComponentBase.java:1303)
     at oracle.adf.view.rich.component.UIXQuery.broadcast(UIXQuery.java:115)
     at oracle.adf.view.rich.component.fragment.UIXRegion.broadcast(UIXRegion.java:148)
     at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:97)
     at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$1.run(ContextSwitchingComponent.java:91)
     at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:309)
     at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:94)
     at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:91)
     at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.broadcastEvents(LifecycleImpl.java:812)
     at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._executePhase(LifecycleImpl.java:292)
     at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:177)
     at javax.faces.webapp.FacesServlet.service(FacesServlet.java:265)
     at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
     at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
     at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300)
     at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:27)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
     at oracle.help.web.rich.OHWFilter.doFilter(Unknown Source)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
     at oracle.adf.model.servlet.ADFBindingFilter.doFilter(ADFBindingFilter.java:191)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
     at oracle.adfinternal.view.faces.webapp.rich.RegistrationFilter.doFilter(RegistrationFilter.java:97)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:421)
     at oracle.adfinternal.view.faces.activedata.AdsFilter.doFilter(AdsFilter.java:60)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:421)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:247)
     at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:157)
     at org.apache.myfaces.trinidad.webapp.TrinidadFilter.doFilter(TrinidadFilter.java:92)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
     at oracle.iam.platform.auth.web.PwdMgmtNavigationFilter.doFilter(PwdMgmtNavigationFilter.java:116)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
     at oracle.iam.platform.auth.web.OIMAuthContextFilter.doFilter(OIMAuthContextFilter.java:101)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
     at oracle.adf.library.webapp.LibraryFilter.doFilter(LibraryFilter.java:160)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
     at oracle.dms.wls.DMSServletFilter.doFilter(DMSServletFilter.java:330)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
     at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.doIt(WebAppServletContext.java:3684)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3650)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
     at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
     at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2268)
     at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
     at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1446)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)

You need to provide a default Organization for reconciliation that exists within OIM, and not the Org from OID because that will be a dn of some sort. As for the manager, try unmapping this for the recon mapping values. Then set your filter to recon only one user and test it out. For your manager login, check what value is actually coming from OID and that it matches to the user login field in OIM before mapping it back in your recon fields.
-Kevin

OIM: trusted source reconciliation - user deletion

Hello,
I am working on a test scenario with Oracle Identity Manager 9.1.0.1.
I have succesfully setup trusted source reconciliation with Oracle 10g Database using the "Database Application Tables Release 9.1.0 connector".
In the DB resides a HR table with users.
When the data in the HR table is edited and updated everything works fine it get's reconciled to OIM.
But when a user get's deleted from the Database HR table. The user isn't deleted in OIM
How is that possbile?
Your response is greatly appreciated!
Thank you very much in advance!

OK i have now managed the problem with the first unparsable error syntax.
According to here (http://download.oracle.com/docs/cd/E11223_01/doc.910/e11194/create.htm):
Database Date Format parameter for reconciliation:
Enter the same value that you enter for the Source Date Format parameter.
I entered the settings bellow and it works.
Database Date Format: DD-MMM-YY
Source Date Format: DD-MMM-YY
Another problem:+_
Now i have a problem with the "hire end" date, because if a user is still employed, there is a null value in the Oracle 10g DB.
And i get Unparsable date: "" error
Please help.

Delay with GTC as Trusted Source Reconciliation

Hi Everyone,
I'm using OIM 9.1.0.2 with Websphere 6.5.1
I have a GTC as Trusted Source Reconciliation when the GTC schedule is run, the log shows step by step how the user is created and provisioned to AD and Exchange. There aren't any error in the log. But when I check if the user was created, I detect that the user wasn't created, but it appers in Reconcilliation Manager in the Design Console with status "Event Received". Around 10 minutes later the status changes to "Event Linked" and in this moment the user appers in OIM.
Any idea for this?
How can I resolve it?
Thanks,
Ariel

Thanks for your response.
I'm reconciling 1 user, because I'm testing the development.
I have Access Policy for provisioning AD and Exchange.
But the log shows all processes for creating an user, but the user appers around 10 minutes later.
I did a deploy to a Vitual Machine with OIM 9.1.0.2 and JBoss and the user is created in the moment that the reconcilliation is run.
Thanks,
Ariel

OIM - AD Trusted Resource/Resource Object

I need to populate samAccountName in the Xellerate User object for Exchange Mailbox linking bc our Xellerate User User Id is a EmpID not samAccountName.
So I've added AD as a Trusted Resource. Great, I can populate samAccountName in OIM. However, my problem now is that I need AD to show up as a Resource Object under a User's Resource Profile. When AD is a Trusted Resource, the associated user object doesn't appear in the Resource Profile since there is not process form.
Is there any way to over come this?

In the end, I just created another AD User Resource Object called AD User Trusted and used that object for trusted resource/recons and used the origianl AD User object for the non trusted resouce/recons.
Works, just as I wanted. I have a AD resource associated to my users profile and I also have samAccountName populated in the Xellerate User object.

Error during trusted source reconciliation

Hi,
I'm facing some issue using Database Applications Table connector (DBAT_91050).
I've correctly installed the connector and created a simple table in a database schema (first name, last name, emp_id, role (everything as varchar2)).
Then I've created a generic connector for a trusted source and made the mapping.
When I try to run the job to reconcile my source I receive the following error:
Caused By: org.xml.sax.SAXParseException: cvc-minLength-valid: Value '' with length = '0' is not facet-valid with respect to minLength '1' for type 'matchingRuleType'.
at org.apache.xerces.util.ErrorHandlerWrapper.createSAXParseException(Unknown Source)
at org.apache.xerces.util.ErrorHandlerWrapper.error(Unknown Source)
at org.apache.xerces.impl.XMLErrorReporter.reportError(Unknown Source)
at org.apache.xerces.impl.XMLErrorReporter.reportError(Unknown Source)
at org.apache.xerces.impl.XMLErrorReporter.reportError(Unknown Source)
at org.apache.xerces.impl.xs.XMLSchemaValidator$XSIErrorReporter.reportError(Unknown Source)
at org.apache.xerces.impl.xs.XMLSchemaValidator.reportSchemaError(Unknown Source)
at org.apache.xerces.impl.xs.XMLSchemaValidator.elementLocallyValidType(Unknown Source)
at org.apache.xerces.impl.xs.XMLSchemaValidator.processElementContent(Unknown Source)
at org.apache.xerces.impl.xs.XMLSchemaValidator.handleEndElement(Unknown Source)
at org.apache.xerces.impl.xs.XMLSchemaValidator.endElement(Unknown Source)
at org.apache.xerces.jaxp.validation.ValidatorHandlerImpl.endElement(Unknown Source)
at com.sun.xml.bind.v2.runtime.unmarshaller.ValidatingUnmarshaller.endElement(ValidatingUnmarshaller.java:106)
at com.sun.xml.bind.v2.runtime.unmarshaller.InterningXmlVisitor.endElement(InterningXmlVisitor.java:81)
at com.sun.xml.bind.v2.runtime.unmarshaller.SAXConnector.endElement(SAXConnector.java:158)
at com.sun.xml.bind.unmarshaller.DOMScanner.visit(DOMScanner.java:255)
at com.sun.xml.bind.unmarshaller.DOMScanner.visit(DOMScanner.java:281)
at com.sun.xml.bind.unmarshaller.DOMScanner.visit(DOMScanner.java:250)
at com.sun.xml.bind.unmarshaller.DOMScanner.visit(DOMScanner.java:281)
at com.sun.xml.bind.unmarshaller.DOMScanner.visit(DOMScanner.java:250)
at com.sun.xml.bind.unmarshaller.DOMScanner.scan(DOMScanner.java:127)
I've already read Re: Trusted source Object Reconciliation Mapping for act_key - 11g Realease2 but I'm not able to apply the solution to my case.
No rules and no transformations are applied during the map.
Thank you.

Hi,
I did as you suggested, but I didn't get some point:
- Then see whether User ID is marked as "Key for reconciliation"...
Is the USERID an attribute of my table? I've mapped a field called idemp with "Employee Number" and I've set this as Key for reconciliation.
Is this correct?
- Open up the Recon Rule for TEST_GTC...
In my reconciliation rules tab there are only 4 rules:
DBUM Oracle Target recon
MySQL Oracle Target recon
Oracle DB Trusted
MySQL DB Trusted
and for each of them both checkboxes are checked.
Do the table show more rules or the one I'm interested in is "Oracle DB Trusted"?
I've created the reconciliation profile but I can't see any new table in my DEV_OIM schema.
Performing "select table_name from user_tables where table_name like 'RA%HR%'" (my Resource is called HR_CONN)) only one row is returned: RA_HR_CONN_GTC
The table is empty and appears like:
RECON_TABLE_KEY NOT NULL NUMBER(19)
RE_KEY NUMBER(19)
RECON_CHGLOGATTR_IDXLST VARCHAR2(256 CHAR)
RA_LAST_NAME VARCHAR2(150 CHAR)
RA_ROLE VARCHAR2(255 CHAR)
RA_NAME VARCHAR2(150 CHAR)
RA_AGE VARCHAR2(256 CHAR)
RA_IDEMP VARCHAR2(80 CHAR)
RA_MIDDLE_NAME VARCHAR2(80 CHAR)
Thank you.

OIM Database Tables Trusted source reconciliation error

Hello everyone!
I am new in OIM. For a practice I have decided to implement databasetable trusted reconciliation. I have did according to the documentation except STATUS Reconciliation:
http://download.oracle.com/docs/cd/E11223_01/doc.910/e11194/app_sample.htm#CJFHIHHM
In the table I inserted one user. Next I started manually reconciliation task. An user creation ended successfully. But when I start manually reconciliation task next time status of this task hanged in “Running” and in server log I got an error:
21:46:12,351 ERROR [APIS] Class/Method: tcReconciliationOperationsBean/ignoreEventData encounter some problems: {1}
java.lang.NullPointerException
at com.thortech.xl.dataobj.util.tcReconciliationUtil.isUserIdentical(Unknown Source)
at com.thortech.xl.dataobj.util.tcReconciliationUtil.ignoreEvent(Unknown Source)
at com.thortech.xl.ejb.beansimpl.tcReconciliationOperationsBean.ignoreEventData(Unknown Source)
at com.thortech.xl.ejb.beansimpl.tcReconciliationOperationsBean.ignoreEvent(Unknown Source)
at com.thortech.xl.ejb.beans.tcReconciliationOperationsSession.ignoreEvent(Unknown Source)
As I didn’t modify the user in the table I expect that reconciliation finished with nothing to do. But there are an error.
Have any ideas which case this behavior? And how can I fix it?
Edited by: user11136777 on Jun 8, 2010 7:14 PM

Hi,
Can you tell me what is Reconciliation Rule, Object Action Rule and what are you getting Recon Manager screen in Design Console.
Regards
Alabhay Goel

11g GC DBAT Trusted Source Reconciliation with custom attributes fails

Hi All,
We are working on OIM 11g and we are using the GTC Database Tables connector to reconcile from an HR application that exposes the data in some views. When we add a custom attribute in User object (HR_ROLE_CODE) and map it in the connector the reconciliation fails with the following error:
intUserKey_in = 1
intBatchKey_in = 80
strTargetTableName_in = RA_MERGERDEVDBEMPGTC46
strRequiredAttributesList_in = RECON_USR_LOGIN,RECON_LASTNAME,RECON_STATUS
strValidateAttributesList_in = RECON_USR_LOGIN,RECON_USR_EMAIL,RECON_ACT_KEY,RECON_USR_TYPE,RECON_USR_EMP_TYPE,RECON_USR_START_DATE,RECON_USR_END_DATE
strOIMVldtAttributeColList_in = USR_LOGIN,USR_EMAIL,ACT_KEY,USR_TYPE,USR_EMP_TYPE,USR_START_DATE,USR_END_DATE
strMatchingRule_in = (((USR.USR_LOGIN=RA_MERGERDEVDBEMPGTC46.RECON_USR_LOGIN)))
strNoMatchFoundRule_in = Create User
strUserMatchedRule_in = Establish Link
strUsersMatchedRule_in = None
intEventAssignUsrGrpKey_in = 0
strmappedAttributesList_in = RECON_USR_LOGIN,RECON_ROLECODE,RECON_FATHERSNAME,RECON_LASTNAME,RECON_ACT_KEY,RECON_FIRSTNAME,RECON_USR_EMP_TYPE,RECON_USR_TYPE,RECON_USR_PASSWORD
stroimAttributeTableColList_in = USR_LOGIN,HR_ROLE_CODE,USR_MIDDLE_NAME,USR_LAST_NAME,ACT_KEY,USR_FIRST_NAME,USR_EMP_TYPE,USR_TYPE,USR_PASSWORD
strReconciliationType_in = User
strReconMLSTableName_in = RA_MLS_MERGERDEVDBEMPGTC46
strReconMLSColNames_in =
strOimMLSColNames_in =
strDefaultLocale_in = el
strAllLocates_in = el
intReturnCode_out = null
strErrMsg_out = null
SEVERE: Γενικό σφάλμα/πληροφορίες: {0}
oracle.iam.platform.utils.SuperRuntimeException: -9: Attribute field (HR_ROLE_CODE) does not exist in table USR.
     at oracle.iam.reconciliation.dao.ReconActionDao.executeBulkUserMatchCRUD(ReconActionDao.java:697)
     at oracle.iam.reconciliation.impl.UserHandler.executeBulkCUD(UserHandler.java:568)
     at oracle.iam.reconciliation.impl.BaseEntityTypeHandler.process(BaseEntityTypeHandler.java:34)
     at oracle.iam.reconciliation.impl.ActionEngine.processBatch(ActionEngine.java:129)
     at oracle.iam.reconciliation.impl.ActionEngine.execute(ActionEngine.java:90)
     at oracle.iam.reconciliation.impl.ActionTask.execute(ActionTask.java:73)
     at oracle.iam.platform.async.impl.TaskExecutor.executeUnmanagedTask(TaskExecutor.java:100)
     at oracle.iam.platform.async.impl.TaskExecutor.execute(TaskExecutor.java:70)
     at oracle.iam.platform.async.messaging.MessageReceiver.onMessage(MessageReceiver.java:68)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
     at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
     at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
     at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
     at $Proxy488.onMessage(Unknown Source)
     at weblogic.ejb.container.internal.MDListener.execute(MDListener.java:466)
     at weblogic.ejb.container.internal.MDListener.transactionalOnMessage(MDListener.java:371)
     at weblogic.ejb.container.internal.MDListener.onMessage(MDListener.java:328)
     at weblogic.jms.client.JMSSession.onMessage(JMSSession.java:4659)
     at weblogic.jms.client.JMSSession.execute(JMSSession.java:4345)
     at weblogic.jms.client.JMSSession.executeMessage(JMSSession.java:3822)
     at weblogic.jms.client.JMSSession.access$000(JMSSession.java:115)
     at weblogic.jms.client.JMSSession$UseForRunnable.run(JMSSession.java:5170)
     at weblogic.work.SelfTuningWorkManagerImpl$WorkAdapterImpl.run(SelfTuningWorkManagerImpl.java:528)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
The attribute exists in USR table with name: USR_UDF_HR_ROLE_CODE but the connector maps it as HR_ROLE_CODE (line: stroimAttributeTableColList_in = ....)
Can anyone help on this?
Thanks in advance,
Kostas

Thanks for the answer Rajiv,
I tried to run the utility to download/upload a custom resource bundle but after the parameters that I provide the utility does nothing. It looks like it cannot find the specified path/file lathough i tried both windows and unix style.
It does not display ay message of success or failure, also I do not know how can I verify that the bundle has been upload successfully.

How to control user updates during trusted/target reconciliation

Hi All,
I am new bie to OIM.
Currently working on OIM 11g R2.
1. I have user type called 'blind' which is updated by OIM admin.
2. when I do a trusted/taget recon, I should not update user whose oim user type is 'blind'.
Note: User type 'blind' is updated by OIM admin. There is no user type called 'blind' in target system while doing trusted system all users will be in status 'alive' or 'dead'.
Kindly suggest how we can add OIM filter to prevent 'blind' user accounts from being overwritten by trusted reconciliation.
Appreciate your response

Hi GP,
Thank you for the response. Please excuse me for using the terms Live,Dead,Blind.
But we are not receiving the user Type "blind" from the reconciliation data. We receive only the two states either "live" (active) or dead (disable). Blind is the User status which we set as OIM user type manually and we do not want this blind type user get updated by the reconciliation engine. More over this reconciliation is a GTC reconciliation from CSV feed.
Please correct me if the recon is of type target reconciliation can I write a Pre-Process Event Handler which will
a) Get the list of users in OIM whose type if blind
b) compare the data with the recon data available through event handler, then skip the change.
Is this possible.
Regards
Srinivas

LDAP resource Reconciliation - forever stuck in pending

I have an LDAP resource. I did an initial "Load from Resource" and all users were imported into IDM.
Now, when I do a reconcialtion, it never finishes. It stays stuck in "Pending" and (sometimes) after a 48+ hours, it goes into "failed" status.
They are about 5000 users in the LDAP server. We are using IDM 7.1 running on Sun AS 9.0 PE on RH Linux AS4. There are 2x app servers, using a single back-end DB.
I have sent the following trace file to Sun support and waiting for a solution.
com.waveset.adapter.LDAPResourceAdapterBase
=====================================
20080421 17:26:12.379 httpWorkerThread-443-0(0x01683e80) LDAPResourceAdapterBase#setSslProvider() Entry no args
20080421 17:26:12.380 httpWorkerThread-443-0(0x01683e80) LDAPResourceAdapterBase#setSslProvider() Info The Sun JSSE provider has alre ady been registered.
20080421 17:26:12.380 httpWorkerThread-443-0(0x01683e80) LDAPResourceAdapterBase#setSslProvider() Exit void
20080421 17:26:12.405 httpWorkerThread-443-0(0x01683e80) LDAPResourceAdapterBase#setSslProvider() Entry no args
20080421 17:26:12.405 httpWorkerThread-443-0(0x01683e80) LDAPResourceAdapterBase#setSslProvider() Exit void
20080421 17:26:12.575 httpWorkerThread-443-0(0x01683e80) LDAPResourceAdapterBase#setSslProvider() Entry no args
20080421 17:26:12.576 httpWorkerThread-443-0(0x01683e80) LDAPResourceAdapterBase#setSslProvider() Exit void
20080421 17:26:12.638 httpWorkerThread-443-0(0x01683e80) LDAPResourceAdapterBase#setSslProvider() Entry no args
20080421 17:26:12.638 httpWorkerThread-443-0(0x01683e80) LDAPResourceAdapterBase#setSslProvider() Exit void
com.waveset.adapter.LDAPResourceAdapter
=================================
20080421 17:46:50.420 httpWorkerThread-443-0(0x00397d4e) LDAPResourceAdapter#getAccountActivator() Entry no args
20080421 17:46:50.423 httpWorkerThread-443-0(0x00397d4e) ActionOnUser#initActionOnUser() Entry no args
20080421 17:46:50.423 httpWorkerThread-443-0(0x00397d4e) ResourceAdapterBase#getResAttrValActionOnUser() Entry no args
20080421 17:46:50.423 httpWorkerThread-443-0(0x00397d4e) ResourceAdapterBase#getOptionalStringResAttrVal() Data ldapActivation== null
20080421 17:46:50.423 httpWorkerThread-443-0(0x00397d4e) LDAPResourceAdapter#getAccountActivator() Exit returned= com.waveset.adapter.u til.ActionOnUserNotSupported
20080421 17:46:50.423 httpWorkerThread-443-0(0x00397d4e) LDAPResourceAdapter#getAccountActivator() Entry no args
20080421 17:46:50.423 httpWorkerThread-443-0(0x00397d4e) ActionOnUser#initActionOnUser() Entry no args
20080421 17:46:50.423 httpWorkerThread-443-0(0x00397d4e) ActionOnUser#initActionOnUser() Exit returned= com.waveset.adapter.util.Action OnUserNotSupported

Hi Snowdog,
I am getting the same exception while reconciling accounts using an LDAP Resource Adapter. I am using Sun IDM 8.0.0.1. Please provide me an update on how you got this issue resolved, whether SUN provided an hotfix or not or you had bypassed it with you Custom code.Quick response appreciated.
Find below the exception found in the TraceLog
20081002 09:49:38.227 Thread-291(0x002beffd) LDAPResourceAdapter#getAccountActivator() Exit returned= com.waveset.adapter.util.ActionOnUserNotSupported
20081002 09:49:38.227 reconcile.cn=N003C0,ou=Applications,o=Enterprise@Enterprise ADAM(0x00ef4eb7) LDAPResourceAdapter#getAccountActivator() Entry no args
20081002 09:49:38.227 reconcile.cn=N003C0,ou=Applications,o=Enterprise@Enterprise ADAM(0x00ef4eb7) ActionOnUser#initActionOnUser() Entry no args
20081002 09:49:38.227 reconcile.cn=N003C0,ou=Applications,o=Enterprise@Enterprise ADAM(0x00ef4eb7) ActionOnUser#initActionOnUser() Exit returned= com.waveset.adapter.util.ActionOnUserNotSupported
20081002 09:49:38.227 reconcile.cn=N003C0,ou=Applications,o=Enterprise@Enterprise ADAM(0x00ef4eb7) LDAPResourceAdapter#getAccountActivator() Exit returned= com.waveset.adapter.util.ActionOnUserNotSupported
20081002 09:49:38.274 Thread-292(0x010134ba) LDAPResourceAdapter#getAccountActivator() Entry no args
20081002 09:49:38.274 Thread-292(0x010134ba) ActionOnUser#initActionOnUser() Entry no args
20081002 09:49:38.274 Thread-292(0x010134ba) ResourceAdapterBase#getResAttrValActionOnUser() Entry no args
20081002 09:49:38.274 Thread-292(0x010134ba) ResourceAdapterBase#getOptionalStringResAttrVal() Data ldapActivation== null
20081002 09:49:38.274 Thread-292(0x010134ba) LDAPResourceAdapter#getAccountActivator() Exit returned= com.waveset.adapter.util.ActionOnUserNotSupported
20081002 09:49:38.274 reconcile.cn=N003D3,ou=Applications,o=Enterprise@Enterprise ADAM(0x002309f5) LDAPResourceAdapter#getAccountActivator() Entry no args
20081002 09:49:38.274 reconcile.cn=N003D3,ou=Applications,o=Enterprise@Enterprise ADAM(0x002309f5) ActionOnUser#initActionOnUser() Entry no args
20081002 09:49:38.274 reconcile.cn=N003D3,ou=Applications,o=Enterprise@Enterprise ADAM(0x002309f5) ActionOnUser#initActionOnUser() Exit returned= com.waveset.adapter.util.ActionOnUserNotSupported
20081002 09:49:38.274 reconcile.cn=N003D3,ou=Applications,o=Enterprise@Enterprise ADAM(0x002309f5) LDAPResourceAdapter#getAccountActivator() Exit returned= com.waveset.adapter.util.ActionOnUserNotSupported
20081002 09:49:38.476 Thread-293(0x00ec7a0b) LDAPResourceAdapter#getAccountActivator() Entry no args
20081002 09:49:38.491 Thread-293(0x00ec7a0b) ActionOnUser#initActionOnUser() Entry no args
20081002 09:49:38.491 Thread-293(0x00ec7a0b) ResourceAdapterBase#getResAttrValActionOnUser() Entry no args
20081002 09:49:38.491 Thread-293(0x00ec7a0b) ResourceAdapterBase#getOptionalStringResAttrVal() Data ldapActivation== null
20081002 09:49:38.491 Thread-293(0x00ec7a0b) LDAPResourceAdapter#getAccountActivator() Exit returned= com.waveset.adapter.util.ActionOnUserNotSupported
Thanks and Regards,
Thani.

Trusted Resource Reconciliation Concept

Similar Messages

Maybe you are looking for