WebLogic hangs on Sun IDM Upgrade

Hi,
We recently upgraded our SIM set up from 5.0 SP4 - 6.0 - 7.1. Now we are facing a strange issue that weblogic application server on startup hangs indefinitely.
But if we remove the SIM deployment from config.xml then WebLogic starts instantaneously. Also adding the SIM deployment post weblogic startup works abosolutely fine.
Now the issue this needs to be done every time we start WebLogic app server.
We are using
WebLogic: 8.1.4 on SuSE Linux 9.
Please suggest how can we resolve this issue

Hello,
Could you take a thread dump at that state?
kill -3 <pid of WLS>
Whats the state of the client application
- Exception (PeerGone, No Router)
- or just hangs
Also, you could run WLS using the JRE that ships with it. AFAIK, its v1.3.1_06.
rgds
MS

Similar Messages

Sun idm upgrade error

Hi All,
i am upgrading the sun idm 7.1 to 8.1. in the installation i am getting this error. any body have any idea....... thanks in adavance..
operation : addMissing
interfaces: [GenericObject:USER_PROFILE_8_1X, GenericObject:USER_PROFILE_8_4X]
Interface USER_PROFILE_8_1X already present. Skipping.
Interface USER_PROFILE_8_4X already present. Skipping.
No changes found for Configuration Object 'PeopleSoft Component Interfaces'
Found no instances of ComplianceViolation matching attribute conditions
Including file 'sample/UserUIConfigUpdater.xml'.
Problem during execution: com.waveset.util.InvalidArgument: RP_LIST_TOO_LONG

The number of inlined attributes for some repository type is more than 5. Probably it is all about attributes defined in the FindSearchAttrs tag in UserUIConfig.xml

Getting Error IDM8.1patch11WebLogic Server com/sun/idm/idmx/txn/Transaction

I installed IDM 8.1 Patch 11 on WebLogic server. When I start the server I am getting following error. The Login page never shows up. I will appreciate if you can give me the pointer.
] Root cause of ServletException.
java.lang.NoClassDefFoundError: com/sun/idm/idmx/txn/TransactionManager
     at com.waveset.ui.LoginHelper.csrfGuardTokenEnabled(LoginHelper.java:2471)
     at com.waveset.ui.LoginHelper.handleCSRFGuardToken(LoginHelper.java:2186)
     at jsp_servlet.__login._jspService(__login.java:251)
     at weblogic.servlet.jsp.JspBase.service(JspBase.java:34)
     at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
     at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
     at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300)
     at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at com.sun.idm.profiler.instrumentation.RequestTimingFilter.doFilter(RequestTimingFilter.java:76)
     at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.doIt(WebAppServletContext.java:3684)
     at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3650)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
     at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
     at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2268)
     at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
     at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1446)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
Edited by: 842717 on Mar 8, 2011 12:16 PM

You are receiving this error because one of the fields being pulled from IdM, exceeds he column limit defined in the GLOBALUSERS database table.
I received this error before because the PRIMARYEMAIL column in the GLOBALUSERS table was defined as [PRIMARYEMAIL] [nvarchar](50).
I went into Microsoft SQL Server Management Studio and updated the field to [PRIMARYEMAIL] [nvarchar](100), and then the import worked.
Hope this helps,
Larry L. Viars | Senior Consultant
Logic Trends, Identity & Access Management Specialists

Sun IDM vs Oracle IDM

Hi Everyone,
The current version of IDM we are at is 6.0. We are thinking of the following options:
1. Upgrade Sun IDM 6.0 -- IDM 8.1
2. Migrate to latest Oracle IDM.
Could someone please let me know the pros/cons in considering one over the other options?
Thanks,

Hi,
A very interesting question but not one that can be answered easily.
As Oracle is in the process of buying Sun then the future of both products is uncertain. Sun IDM might survive or Oracle IDM might survive or the future Oracle IDM product may be a combination of both. I do not believe that we will see a resolution to this for at least 6 months. Even then it will only be an annoucement.
I also do not see an major improvements in either product until there is greater certainty of what will be the future product.
For your particular circumstance I would upgrade from Sun IDM 6.0 -- IDM 8.1. The main reasons are as follows:
- Software currency. IDM 6.0 is no longer supported.
- The upgrade is free of licencing costs.
- Improved functionaility of the latest version of Sun IDM.
- Little training is required
Migrating to Oracle IDM would not be a trivial task and would probably include significant cost eg training, licensing and potentially hardware.
I hope this helps

Using Sun IDM with Firefox 3.0.3

We just upgraded to Firefox version 3.0.3. When I try to run a report in Sun IDM, I get the following error:
There was an error while retrieving task status.
This connection has timed out. Please login again.
It works properly in IE, and previous versions of Firefox.
Does anyone know of a fix for this, and has there been any other problems with Firefox 3.0.3?
Thanks,
Jody

jweisbau wrote:
There was an error while retrieving task status.
This connection has timed out. Please login again.That error you're seeing is from the little java applet that runs when a report is generated. It's possible a new security restriction regarding applets is active in your browser.
You can still see the report by looking in Server Tasks -> All Tasks and viewing the result of the report task there.

How to delete the recon Taskresults in Sun IdM 7.1 thru automation

How to delete the recon Taskresults in Sun IdM 7.1 thru automation either thru workflows or using java programs...
We need to delete only recon Taskresults.

Hi Dinesh,
Try using waveset.adminRoles
Thanks

Error while Reading Idocs from ECC 6.0 to Sun IDM .

Hi Gurus,
We have a scenerio where we have to update the Sun IDM Server with all the changes in HR Data happening in ECC.
For that... we have
1. Created a Logical System for Sun IDM server, Port, RFC Connection (TCP/IP).
2. Assigned Partner Profiles, Distribution Model etc. for msg. type HRMD_A ;
3. We have created a Communications User used by the IDM server to connect to ECC.
Idocs are created daily and are in status 03 - Data passed to Port OK !
and on the In Sun Identity manager 8.0 we have created SAP resource adapter for ECC 6.0,
after giving resource parameters our test connection is successful.
We also changed edit synchronisation policy for the same but when we start synchronisation in IDM, it is unable to read any idocs although Idocs are generated in SAP .
Log file gives the message as "Incoming IDoc list request containing 0 documents"
We also have one more error ;
some times while doing a connection test : JCO.Server could not find server function 'åäåä¹'
while most of the times the connection is successful.
Please suggest .

Hi Gurus,
The error got resolved .
The changes in the settings i did :
SAP SIDE : Made the RFC Connection Unicode.
IDM SIDE : Checked on the "SAP Server Unicode" checkbox; while doing the HR Activ Synch Settings.
This Resolved the error.
regards
Vaibhav

SUN IDM with Windows Vista

Hello,
Has anybody tried installing SUN IDM with windows vista
I tried IDM 7.1 with vista home premium and doesnt seem to work. Curious to know if any body has success with vista
Awaiting replies
Thanks,

What error message are you getting?
Have you installed Java and an apllication servers as requested?
1) Set Up a Java Virtual Machine Software Development Kit and Java Compiler
The application requires a Java compiler and a Java Virtual Machine (JVM) to run the Java classes that perform actions within Identity Manager. Both of these can be found in a Java SDK. Download from or http://java.sun.com/javase/downloads/index_jdk5.jsp *** You should add JAVA_HOME to your list of system environment variables and to your system path. To do this, add JAVA_HOME to your system environment and JAVA_HOME\bin to your path, making sure to list it before any other Java environment variables.
2) Install Tomcat application server from official http://tomcat.apache.org/ to local hard drive. Configure Tomcat memory requirements and restart. Min: 256k

Looking for some one who can help me in SUN IDM

Hi Friends,
I am looking for some one who can help me to learn sun IDM. Off couse I will pay for your time.
I can be reached at [email protected]
Please let me know if you have some time
Thx

Hi Zebra,
I really appreciate your reply. I would like to discuss out of this forum so that no one here annoyed with our newbie questions. Please send me email as I listed earlier to discuss best ways. I send email to Andy to join us.

Movement of accounts in AD natively; How Sun IDM identity is affected

Dear Reader,
We are planning to integrate Windows Active Directory with Sun IDM 6.0 SP1. Even after integrating AD with Sun IDM there will be lots of changes to the native account like especially moving the account from one OU to another etc
Since Sun IDM identity has the distinguished name of AD account for its reference; if someone moves the AD Account natively how will that affect IDM identity.
I heard from couple of my friends that Sun IDM uses objectGUID to refer account in AD so even if the account is moved from one OU to another there will be no issue, is that right?
Will Sun IDM 6.0 SP1 work that way or this fix was introduced in the later release?
Is there any other factor involved in this which will affect the way Sun IDM works when the account is moved natively?
Any help is appreciated
Thanks in advance

We use IdM 7.1.1.11 and AD.
Sun does use the GUID once it has it. And, if the dn changes and the GUID stays the same, IdM won't care. Although in examining logs I saw that Sun asks AD first based on the GUID, then if it can't find it, reverts to the dn. We manage what OU our accounts are in via IdM. So we don't allow AD admins to move accounts around. During our initial migration, we are syncing up GUIDs, and correcting any bad OU values. Don't know if that helps, but I have some experience looking at some of this and can offer my oberservations.

Exploratory Programming of the Sun IDM API

Exploratory Programming of the Sun IDM API using Rhino
Sun IDM comes with a JavaScript interpreter (Rhino) that can be invoked from the command-line. This gives developers an easy way to explore the large number of classes that comprised the product.
Let's say for example that you need the approvers of a role object in order to display them on a form. (The role view provides this information, but let's ignore this for the purpose of this example.) The role javadoc mentions two methods to get the approvers, getApproverRefs() and getApprovers(). Unfortunately they are not described clearly, and the difference between the two is not clear either.
In order to understand what these methods do and what they return, you can use the interpreter to invoke each one directly.
First start the interpreter with the 'lh.bat js' command:
lh.bat jsYou will be greeted with the javascript prompt "js>"
Then the first thing to do is to login to the application server. Copy-paste the following code into the shell interpreter.
// Java packages are prepended with the word 'Packages'
// and are imported using the 'importPackage' function
importPackage(Packages.com.waveset.util);
importPackage(Packages.com.waveset.object);
importPackage(Packages.com.waveset.security.authn);
importPackage(Packages.com.waveset.session);
importPackage(Packages.com.waveset.ui);
importPackage(Packages.java.util);
// Use arguments[0] and arguments[1] if you want to pass credentials from the command line
// Here we just use the built-in account "configurator"
var epass = new EncryptedData("configurator");
var session = SessionFactory.getSession("configurator", epass);
print("Waveset session established");Alternatively save the above code to a text file called "idm-init.js" and load the file from the interpreter.
js> load("idm-init.js")
Waveset session establishedOnce a session has been established, objects can be loaded from the repository. Enter this line at the prompt to get the role object named "testrole3"
js> var roleObject = session.getObject("Role", "testrole3");Enter the variable name at the prompt to cause the interpreter to invoke the object's 'toString' method.
js> roleObject
Role:testrole3Use a 'for' loop to print out all of the object's method and fields.
js> for (i in roleObject) { print(i) }Enter a method's name to invoke it. Let's call getApproverRefs().
js> var approvers1 = roleObject.getApproverRefs();
js> approvers1
[User:role1approver(id=#ID#1CC1759638D9AF96:182C132:10F3E8040B5:-7FBE), User:role2approver(id=#ID#1CC1759638D9AF96:182C132:10F3E8040B5:-7FB8)]
js> approvers1.get(0).getClass();
class com.waveset.object.ObjectRefNow let's check out getApprovers().
js> var approvers2 = roleObject.getApprovers();
js> approvers2
[Lcom.waveset.object.WSUser;@d3c69c
js> approvers2[0].getClass()
class com.waveset.object.WSUserSo getApproverRefs() returns a list of ObjectRef objects, while getApprover() returns an array of WSUser objects.
In summary the Sun IDM JavaScript interpreter can be used to explore the product's vast API. This article used the role class and its getApprovers() and getApproverRefs() methods as an example for exploratory programming. Other applications include automated testing and administrative scripts.
[email protected]

Yes you can customise IDM it is all available in courses and the manuals also provide some info.
As long as you can write the code you need in java or javascript you can call it from IDM: that could be an interface to you naming app.
Otherwise use the SPML interface if you want to use something else then the GUI. This is also described in the manuals.
WilfredS

Expert pls help: Sun IDM with ldap active sync

Hi all,
Currently i am configuring Sun IDM 6.0 SP1 to active sync with Sun directory server. I have enabled Retro Change Log but yet i cant find my changeNumber in directory server. Could anyone show me a way (search?) to get what changeNumber directory server currently running?

Check the account used by IDM to access DS can search cn=changelog branch. If he is not Directory Manager, you probably need to set an ACI on that branch.
HTH

Managing LDAP groups and roles through SUN IDM

Hi Guys,
We have a requirement to build the following functionality in our Sun IDM tool.
1.     Ability to create/manage Static LDAP group.
2.     Ability to create/manage filtered LDAP group.
3.     Ability to create/manage Static LDAP roles.
4.     Ability to create/manage filtered LDAP roles.
Can anyone let us know any pointers as to how to accomplish this or any ideas for the path to follow for this.
Any reply will be appreciated.

http://myidm.blogspot.com/2009/06/how-to-create-groups-in-ldap-or-active.html

SUN IDM Role removal does not remove the set atributes

Hi,
I am using SUN IDM Roles to set a multi valued attrubute on a resource using merge with value property.
But when I remove any of the assigned role the corresponding ATTRIBUTE value is not getting removed.
Is there anything specific which needs to be done.
eg: Role1 sets attribute PRIV on resource A to "ADMIN"
Role2 sets attribute PRIV on resource A to "MANAGER"
If I assign both Role1 and Role2 the PRIV will have "ADMIN" and "MANAGER"
But if I remove Role1 still "ADMIN" is present under PRIV.
Is there any workaround for this. Please advice.
- Thanks, ARK

Try using "Authoritative Merge with Value" instead of just "Merge with Value".

Error when calling powershell from Sun IDM

Hello Experts,
In our environment we have a powershell script which takes command-line arguments as input and creates mailbox. To create a mailbox for newly on-boarded user we just need to call this script and pass the args. When i run the script from Gateway server (by physically logging into the server) it works as expected but when i call the same script from Sun IDM (using resource actions) I'm getting the following error,
The type initializer for 'InstanceContext' threw an exception
any idea to fix or troubleshoot this?
We are using Sun IDM 6.0 SP1 and exchange 2007.

Which version of the Gateway?
Are you calling the script with afterAction scriptcalls?
Adapter or connector?
I do know that the powershellcalls are supposed to have two restrictions which are truly hampering...
1.0 (which means not remote calls?) and 32 bits.
If you have any insights, please share :D
I will start coding agains this next week I think, so I guess I will see all problems then :D

WebLogic hangs on Sun IDM Upgrade

Similar Messages

Maybe you are looking for