Upgrade of OIM 9101 to OIM 9102

I upgraded the OIM 9.1.0.1865.28 to 9102 following the OIM 9012 release doc
Upgraded my Oracle DB & Weblogic
I manually deployed XIMDD & I can see it in weblogic.
I don't see the Xellerate webapp in the Weblogic Deployments
any help with this?

Thanks Gyan . The previous Version was: 9.1.0.1860.16
SQL>select XSD_CODE, XSD_VALUE from xsd;
XSD_CODE     XSD_VALUE
XL_BUILD_NUMBER     *9.1.0.1865.28*
XL_ENCRYPTED     TRUE
DB_KEY_VERIFICATION_CLEAR_TEXT     XIM
DB_KEY_VERIFICATION_CIPHER_TEXT     e7+D6TI8o6XD3y93QNttJA==
XL_BUILD     1865.28
XL_PATCH_BASE     *9.1.0.2*
XL_PATCHLEVEL     0
XL_BRANCH_NAME     OIM_9.1.0.0.0_GENERIC
XL_ADE_LABEL     OIM_9.1.0.0.0_GENERIC_090522.1300

Similar Messages

Upgrade OIM 9101 To 9102

Hi Experts
i started upgrading OIM 9101 to 9102 but during running command oim_db_upg_9101_to_9102.cmd i hav doubt abt directory DIRECTORY_IN_WHICH_DB_UPGRADE_ZIP_FILE_IS_EXTRACTED ... which directory it is?
Please Let me Know.
Adv Thanx

"Validating the given inputs...."
i am geeting following Error
The system cannot find the path specified.
FINDSTR: Cannot open d:\patch1\db\oracle\log\check_service.txt
"ERROR ==> Database "orcl" is not running. Please check and try again"
I checked "orcl" itd Running
c:\PATCH\db\oracle\Scripts\LOG>
Edited by: OracleIdM on Jun 11, 2010 2:06 AM

OIM 9101 with Weblogic 10.3.0 - basic query

Hi All
I am trying to install OIM 9101 with Weblogic 10.3.0 and Oracle DB 11.1.0.6 on Windows 2003 (64-bit) and Sun JDK 1.6.0_10 (Oracle certified configuration).
The problem is that my weblogic fails to start-up as soon as I enter the weblogic user-name on the command prompt. It says that the weblogic is not able to use some binary to pick-up the userID. This may be some issue related to Win 64bit environment.
To overcome this issue, I hard coded the userID and password for weblogic in Weblogic's SetDomainEnv.cmd file.
I want to know whether including the userID and password in the weblogic's file can result in OIM installation failure.
Please help.

I personally don't think your OIM installation will fail because of that as OIM installation only execute some of the WLS configuration script to install OIM applications into WLS.

Importing User attributes from OIM 9101 to 11g

hi all,
I need to import/create all the User attributes(UDFs) present in the OIM 9101 version to OIM 11g. Is there any way this can be achieved using deployment manager? Looking to avoid creating all of them manually again,as that would be a time consuming/error prone task.
Looking forward to your replies.
Thanks,
Anuj.

Hi,
I think, you better create it manually in OIM11g and higher environments. The UDF import in 11g is unstable..some times it works..and some times it disappears..and when you try to create UDF after import, It will make your life hell.
I really had very bad experience with OIM 11g UDF export/import.
Regards,
J

Does OIM 9101 Support SUSE 10.2?

Hi,
Does OIM 9101 Support SUSE 10.2 Kernel Version: 2.6.16.60-0.21?
Regards,
Sunny

I have deployed on 9101 on SLES 10.2 with no issues.
I dont have the specific kernel version handy, but I doubt you would see any issues.

OIM to Multiple OIM

Hi Experts
I have a question related to use of SPML for OIM - OIM integration as mentioned in this documentation :-
http://download.oracle.com/docs/cd/E10391_01/doc.910/e10360/appa_oim.htm
Can we employ SPML for reconciliation / provisioning from one OIM to n OIM instances?
Regards

hi Rajiv
this means that we can achieve provisioning from 1 to n instances?
let me elaborate the requirement. we have geographically distributed locations of our client, the client has already established a domain through a directory service and is currently managing users through domain controllers at all locations.
there is one hub site and n other sites.
the users for each location are segregated by OU. At each location, the domain controller administrator can edit the profile of users of their respective OUs. they can also create new users/groups in their OUs.
all this information is synced through replication across domain.
now they would like to shift to OIM for all user management processes.
one model is to have OIM deployed at hub and all user managers at n locations access central OIM and the changes are propagated through directory service replication.
however, the client requires distributed access so that in time of loss of connectivity between hun and a site, the site user manager is able to manage users of his location. once the connectivity is restored, the site sync with the hub.
can u suggest any design for this scenario?
regards

OIM Groups Issues - Groups migrated from OIM 9101 to 9102

Hi,
I migrated the OIM groups from the old system (9101) to the newy built OIM version 9102.
I have a user created called TESTW - it has the GROUP_System_Adminitators (custom OIM Group).
This group has SYSTEM ADMINISTRATOR (Delivered) as the member group.
Also, GROUP_System_Adminitators has menu options for Users Search.
However, this user is unable to search Users. He is able to see the User > Search menu.
Once a string is placed and click on search, no users are found (though OIM has 50k users).
Am I missing something here? Please assist.
TiA. I will assign points.
Regards
Vijay Chinnasamy

Go to Organization > Manage > Search organizations > Selct org in which 50K users have been created > Select ADMINISTRATIVE GROUP (Drop Down)
Assignyour custom group here and try to logic with auser who is part of that custom group
And what do you mean by following statement:
TiA. I will assign points.

OIM DB error while upgrading from OIM-R1 to OIM-R2

Hi All,
When we were trying to upgrade a environment from OIM 11g R1 (11.1.1.5) to 11g R2 PS1 (11.1.2.1), and while upgrading the OIM schemas ( Section 6.3.8 in the document http://docs.oracle.com/cd/E27559_01/doc.1112/e28183/oim_up.htm#BABFHBFD) the OIM schema upgrade was failing and in the logs we were seeing the error mentioned below.
Let us know if anyone has worked/faced this issue while upgrading the OIM to R2.
CREATE OR REPLACE VIEW ADMIN_ROLE_MEMBERSHIP_VW
AS (
SELECT arm_org.*,
        ac.ACT_NAME,
        ac.PARENT_KEY,
        ac.ACT_CUST_TYPE
   FROM (
         SELECT arm.MEMBERSHIP_ID,
arm.ROLE_ID,
arm.USER_ID,
arm.SCOPE_ID as ROOT_KEY,
arm.INCLUDE_HIERARCHY,
arm.SCOPE_ID,
'UN-EXPANDED' as HIERARCHY_DETAILS
           FROM ADMIN_ROLE_MEMBERSHIP arm
         UNION ALL -- much better, and current table structure and query will always ensure unique values
         SELECT arm.MEMBERSHIP_ID,
arm.ROLE_ID,
arm.USER_ID,
oh.PARENT_ACT_KEY as ROOT_KEY,
arm.INCLUDE_HIERARCHY,
oh.CHILD_ACT_KEY as SCOPE_ID,
'EXPANDED' as HIERARCHY_DETAILS
           FROM ADMIN_ROLE_MEMBERSHIP arm, ORG_HIERARCHY oh
          WHERE arm.SCOPE_ID=oh.PARENT_ACT_KEY
            AND arm.INCLUDE_HIERARCHY=1
          ) arm_org,
        ACT ac
WHERE ac.ACT_KEY = arm_org.SCOPE_ID)
[2013-09-11T18:28:25.119-07:00] [OIM] [INCIDENT_ERROR] [UPGCMP-00924] [upgrade.OIM.OIM1] [tid: 13] [ecid: 0000K4FlzhH3n3N6yJaeMG1ICHRX000004,0] SQL error [{0}]
[2013-09-11T18:28:25.120-07:00] [OIM] [INCIDENT_ERROR] [] [upgrade.OIM.OIM1] [tid: 13] [ecid: 0000K4FlzhH3n3N6yJaeMG1ICHRX000004,0] Cause: JDBC error while executing query
[2013-09-11T18:28:25.120-07:00] [OIM] [INCIDENT_ERROR] [] [upgrade.OIM.OIM1] [tid: 13] [ecid: 0000K4FlzhH3n3N6yJaeMG1ICHRX000004,0] Action: Make sure DB is reachable and configured properly
[2013-09-11T18:28:25.120-07:00] [OIM] [INCIDENT_ERROR] [] [upgrade.OIM.OIM1] [tid: 13] [ecid: 0000K4FlzhH3n3N6yJaeMG1ICHRX000004,0] [[
java.sql.SQLSyntaxErrorException: ORA-00942: table or view does not exist
        at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:462)
        at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:405)
        at oracle.jdbc.driver.T4C8Oall.processError(T4C8Oall.java:931)
        at oracle.jdbc.driver.T4CTTIfun.receive(T4CTTIfun.java:481)
        at oracle.jdbc.driver.T4CTTIfun.doRPC(T4CTTIfun.java:205)
        at oracle.jdbc.driver.T4C8Oall.doOALL(T4C8Oall.java:548)
        at oracle.jdbc.driver.T4CStatement.doOall8(T4CStatement.java:202)
        at oracle.jdbc.driver.T4CStatement.executeForRows(T4CStatement.java:1110)
        at oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout(OracleStatement.java:1488)
        at oracle.jdbc.driver.OracleStatement.executeUpdateInternal(OracleStatement.java:2147)
        at oracle.jdbc.driver.OracleStatement.executeUpdate(OracleStatement.java:2091)
        at oracle.jdbc.driver.OracleStatementWrapper.executeUpdate(OracleStatementWrapper.java:320)
        at oracle.iam.update.plugin.oim.SchemaUpgrader.loadScript(SchemaUpgrader.java:245)
        at oracle.iam.update.plugin.oim.SchemaUpgrader.loadStoredProcedures(SchemaUpgrader.java:190)
        at oracle.iam.update.plugin.oim.SchemaUpgrader.doUpgrade(SchemaUpgrader.java:108)
        at oracle.iam.update.plugin.oim.OIMSchemaUpgradePlugin.upgrade(OIMSchemaUpgradePlugin.java:292)
        at oracle.ias.update.plugin.Plugin.upgrade(Plugin.java:358)
        at oracle.ias.update.plan.PlanStep.upgrade(PlanStep.java:292)
        at oracle.ias.update.UpgradeDriver.doUpgrades(UpgradeDriver.java:465)
        at oracle.ias.update.gui.UAUpgradeThread.run(UAUpgradeThread.java:41)

Hi,
The correct upgrade path is: 11.1.1.5.0 -> 11.1.2.0 -> 11.1.2.1

Replicating the app functionality from OIM 10g to OIM 11gR2

Hi,
I have a resource object with an object form and a process form and approval, provisioning configured in OIM 10g design console. Provisioning is manual provisioning assigned to a particular group based on a task assignment adapter. For replicating the same in OIM 11gR2 i followed the following steps.
1. Created a Resource object in Design console.
2. Created a dummy IT Resource ( Since while creating app instance it is having IT Resource as Mandatory field. * Is there any way to skip this as i do not have any IT resource in my original app as it is going for manual provisioning?)*
3. Created a process form in Design Console with the same fields as present in my 10g app process form.
4. Now i need to Create an app instance and select the created resource object and IT resoource. Also i need to create a form associated with the app instance in which i will add the fields as present in the object form in my 10g app. ( Here i am not understanding how data will flow from object form to process form since there is no data flow mapping here)
5. Other steps like creating the SOA composite with human tasks and deploying it and after that creating approval policies is pretty much clear.
Please clarify whether the steps are correct and also the queries which i have posted in between. Thanks in advance.
Regards,
Durgaprasad
Edited by: Durgaprasad on Jan 17, 2013 3:38 AM

Thanks Gyanprakash. Wll disconnected resource trigger our custom approval process if we select the resource name properly in scope in operational level approval policy. Have you tried a disconnected resource with your custom approval process. Because i read the following lines in admin guide
Oracle Identity Manager supports provisioning of disconnected resources by using the SOA worklist for manual provisioning of disconnected resources. After the role-based provisioning decision or SOA request approval is complete and the corresponding application instance is determined to be a disconnected application instance, a new SOA workflow is started. This new SOA workflow is assigned to the manual provisioning administrator.
So i thought disconnected app instance will have its own approval process configured during the creation and it will route accordingly. So just wanted to clarify how to make disconnected app instance to trigger our approval. will approval policay take care of it as i am going to select the name of the disconnected app in the scope field.

OIM 11g installation: oim-config.xml was not found in MDS Repository

Hi,
I just installed Oracle Identity Manager 11g (the latest version) on out test system. The installation worked fine. I can start the admin server as well as the soa_server. But when I start the oim_server1, the deployment of oim fails with the following error message:
####<Aug 18, 2010 3:33:22 PM CEST> <Error> <Deployer> <oim11g> <oim_server1> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1282138402834> <BEA-149205> <Failed to initialize the application 'oim [Version=11.1.1.3.0]' due to error oracle.iam.platform.utils.OIMAppInitializationException:
OIM application intialization failed because of the following reasons:
oim-config.xml was not found in MDS Repository.
Unable to find keystore "default-keystore.jks" in <DOMAIN_HOME>/config/fmwconfig/.
Unable to find keystore ".xldatabasekey" in <DOMAIN_HOME>/config/fmwconfig/.
Password for OIMSchemaPassword is not seeded in CSF.
Password for xell is not seeded in CSF.
Password for DataBaseKey is not seeded in CSF.
Password for JMSKey is not seeded in CSF.
Password for .xldatabasekey is not seeded in CSF.
Password for default-keystore.jks is not seeded in CSF.
Password for SOAAdminPassword is not seeded in CSF.
oracle.iam.platform.utils.OIMAppInitializationException:
OIM application intialization failed because of the following reasons:
oim-config.xml was not found in MDS Repository.
Unable to find keystore "default-keystore.jks" in <DOMAIN_HOME>/config/fmwconfig/.
Unable to find keystore ".xldatabasekey" in <DOMAIN_HOME>/config/fmwconfig/.
Password for OIMSchemaPassword is not seeded in CSF.
Password for xell is not seeded in CSF.
Password for DataBaseKey is not seeded in CSF.
Password for JMSKey is not seeded in CSF.
Password for .xldatabasekey is not seeded in CSF.
Password for default-keystore.jks is not seeded in CSF.
Password for SOAAdminPassword is not seeded in CSF.
at oracle.iam.platform.utils.OIMAppInitializationListener.preStart(OIMAppInitializationListener.java:145)
at weblogic.application.internal.flow.BaseLifecycleFlow$PreStartAction.run(BaseLifecycleFlow.java:282)
Has anybody seen this error before or knows how to fix it? Thanks for your help in advance!
Best regards
Tom

This also solved my issue. If you can backup the .xldatabasekey file before you reinstall this will allow the OIM application to read the OIM database. I was successfully able to run rm -Rf and wipe my entire Middleware directory. Then I reinstalled ALL of OIM and SOA back to the same VM. I saved the .xldatabasekey file before hand and dropped it right back to the same folder before I ran the rm -Rf command later after the OIM Domain was installed. Finally, as mentioned above, I logged into EM and found that I needed to add the .xldatabasekey "password" and simply used the same password that I entered during the OIM configure steps for the keystore. Remember the .xldatabasekey password IS NOT the xelsysadm password, but the KEYSTORE password. They are different. I am now able to log into OIM and I can see all the pre-existing users. Thanks for the help!

OIM 11G R2: OIM server configuration failed.

Hi,
oim server configuration failed because of below error. Please check the logs.kindly suggest a solution to fix it.
isJVMVendorIBM:false
updateMLSLocale:ORACLE_HOME :/home/oracle/app/Oracle/Middleware/Oracle_IDM1
updateMLSLocale:LOCALE_PROPERTIES_FILE :/home/oracle/app/Oracle/Middleware/Oracle_IDM1/inventory/Scripts/ext/jlib/oim/OIMLocales.properties
java.lang.Exception: Exception occured while encrypting the configuration and database
    at oracle.as.install.oim.config.util.EncryptConfigurationAndDB.encryptConfigurationAndDatbase(EncryptConfigurationAndDB.java:240)
    at oracle.as.install.oim.config.OIMConfigManager.encryptDB(OIMConfigManager.java:1467)
    at oracle.as.install.oim.config.OIMConfigManager.configureOIM(OIMConfigManager.java:1111)
    at oracle.as.install.oim.config.OIMConfigManager.doExecute(OIMConfigManager.java:659)
    at oracle.as.install.engine.modules.configuration.client.ConfigAction.execute(ConfigAction.java:375)
    at oracle.as.install.engine.modules.configuration.action.TaskPerformer.run(TaskPerformer.java:88)
    at oracle.as.install.engine.modules.configuration.action.TaskPerformer.startConfigAction(TaskPerformer.java:105)
    at oracle.as.install.engine.modules.configuration.action.ActionRequest.perform(ActionRequest.java:15)
    at oracle.as.install.engine.modules.configuration.action.RequestQueue.perform(RequestQueue.java:96)
    at oracle.as.install.engine.modules.configuration.standard.StandardConfigActionManager.start(StandardConfigActionManager.java:186)
    at oracle.as.install.engine.modules.configuration.boot.ConfigurationExtension.kickstart(ConfigurationExtension.java:81)
    at oracle.as.install.engine.modules.configuration.ConfigurationModule.run(ConfigurationModule.java:86)
    at java.lang.Thread.run(Thread.java:745)
Caused by: java.lang.Exception: Exception occured while encrypting the database
    at oracle.as.install.oim.config.util.EncryptDataBase.encryptDBContent(EncryptDataBase.java:160)
    at oracle.as.install.oim.config.util.EncryptConfigurationAndDB.encryptConfigurationAndDatbase(EncryptConfigurationAndDB.java:231)
    ... 12 more
Caused by: java.lang.Exception: Exception occured in updateMLSLocale method while updating Locale to OIM DB
    at oracle.as.install.oim.config.util.EncryptDataBase.updateMLSLocale(EncryptDataBase.java:319)
    at oracle.as.install.oim.config.util.EncryptDataBase.encryptDBContent(EncryptDataBase.java:125)
    ... 13 more
Caused by: java.sql.SQLIntegrityConstraintViolationException: ORA-00001: unique constraint (DEV_OIM.UK_MLS_LOCALE_MLS_LOCALE_CODE) violated
    at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:462)
    at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:405)
    at oracle.jdbc.driver.T4C8Oall.processError(T4C8Oall.java:931)
    at oracle.jdbc.driver.T4CTTIfun.receive(T4CTTIfun.java:481)
    at oracle.jdbc.driver.T4CTTIfun.doRPC(T4CTTIfun.java:205)
    at oracle.jdbc.driver.T4C8Oall.doOALL(T4C8Oall.java:548)
    at oracle.jdbc.driver.T4CPreparedStatement.doOall8(T4CPreparedStatement.java:217)
    at oracle.jdbc.driver.T4CPreparedStatement.executeForRows(T4CPreparedStatement.java:1115)
    at oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout(OracleStatement.java:1488)
    at oracle.jdbc.driver.OraclePreparedStatement.executeInternal(OraclePreparedStatement.java:3769)
    at oracle.jdbc.driver.OraclePreparedStatement.executeUpdate(OraclePreparedStatement.java:3904)
    at oracle.jdbc.driver.OraclePreparedStatementWrapper.executeUpdate(OraclePreparedStatementWrapper.java:1512)
    at oracle.as.install.oim.config.util.EncryptDataBase.updateMLSLocale(EncryptDataBase.java:311)
    ... 14 more
Thanks.

Remove below configuration and try again
highest approver title

Provisioning OIM user using OIM APIS

Hi All,
Could anyone help me out on how to provision a User using OIM APIS.
Thanks and Regards,
Vaasu.

public class GetGroups {
tcUtilityFactory utilFactory = null;
tcSignatureMessage moSignature = null;
tcUserOperationsIntf moUserUtility = null;
tcResultSet userResultSet,userSet = null;
ConfigurationClient.ComplexSetting myConfig = ConfigurationClient.getComplexSettingByPath("Discovery.CoreServer");
final Hashtable env = myConfig.getAllSettings();
Map v = new HashMap();
public void UserGroups(String userid) {
try {
System.out.println(" I am in TRY");
moSignature = tcCryptoUtil.sign("xelsysadm", "PrivateKey");
utilFactory = new tcUtilityFactory(env, moSignature);
moUserUtility =
(tcUserOperationsIntf) utilFactory.getUtility("Thor.API.Operations.tcUserOperationsIntf");
v.put("Users.User ID", userid);
userSet = moUserUtility.findAllUsers(v);
long user_key = userSet.getLongValue("Users.Key");
System.out.println( " Group Name " + grpName );
} catch(Exception e){
e.getMessage();
Like that
moobjIntf =
*(tcObjectOperationsIntf) utilFactory.getUtility("Thor.API.Operations.tcObjectOperationsIntf");*
Map objmap =new HashMap(0;
objmap.put("Objects.Name", "AD User") \\ just hardcoding this AD User you can pass it as variable also
tcResultSet moResultSet = moobjIntf.findObjects(objmap);
long obj_key = moResultSet.getLongValue("Objects.Key");

OIM Group Permissions(OIM User access rights)

Is it possible to set the permissions for an OIM group (ie AD Admins) to have access to Enable, Disable, and Revoke the resources on the Resource Profile page for a user– without giving them write access to the User Detail page.
And secondly, could it be restricted enough to only allow them to do those actions on a specific resource (ie AD User) and not other resources (ie OID, etc).
Please let me know asap if have any idea..
Thanks..

My suggestion would be request based Enable/Disable/Revoke. You can code an approval task to validate submission of the request based on a group membership and either allow the process to continue or reject the request. Once you give someone access to manage users and access to the menu item, they will have access to all the drop downs for that user. You will need to test the permissions. You can give the group update writes to specific objects, and only read only to others and see if this meets your requirements.
-Kevin

Migrating from OIM 903 to OIM 9.1

Hi All,
does anyone know of a migration guide for this?
Thanx
Fred

If you are going to redevelop the view layer of your project, I would definitely look into using ADF Faces and JSF instead of Struts.
The ADF Faces components will give you a much richer UI and behavior out of the box. JSF is also much more future proof then Struts.
Struts was completely redone in Struts 2.0 and JDeveloper currently doesn't support Struts 2.0.
JSF on the other hand is the standard Web framework in Java EE - and is supported in both JDev 10.1.3 and JDev 11.
You should be able to take the model project from 10.1.2 and upgrade it to 10.1.3 without changes, and then you can stick a new JSF based UI on top of it.

OIM upgrade from 9101 to 9102

Hi All
I am planning to upgrade OIM 9101 to 9102.
Please suggest me what docs should I follow and what BP of 9102 should I apply to achieve a stable configuration.
Thanks

hi
you have to apply a patch with release number 9.1.0.1865.28 to upgrade from 9101 to 9102.
you can get the patch from oracle metalink . Use the readme guidelines to upgrade the instance.
It is highly recommended to take the backup of the OIM database , Xellerate home and Application server as kevin mnetioned above.
Regards
Shashidhar

Upgrade of OIM 9101 to OIM 9102

Similar Messages

Maybe you are looking for