Xellerate provisioning problems

When I configure the xml files, do I have to assign a different resource name to each of them (e.g. AD Server, AD User, AD Group)?
I configured the connector so the user provisioning from the OIM console took place in the AD. However, only the Name field is provisioned. How can I define the field mapping? I cannot edit it from the design console.
Another problem: I assigned the OID and AD resources to the organization Xellerate users. Then I create a user that belongs to that organization. To provision the user in both OID and AD do I always have to select these resources formally?

OK, I got it fixed. The instructions said to use an appid of ######.* and I was using #####.com.mycompany.* which, of course, isn't the same.
I also needed to remove the bundle id from plist and the target and just put in any string I wanted. I'll worry about that all appids are the same later...

Similar Messages

User provisioning problem from OIM 10g to Siebel CRM

Hi Team,
I am facing User provisioning problem from OIM 10g to Siebel CRM.Please find the log details.
Running Get Attribute Mapping
Running Siebel Create User
<com.siebel.common.common.CSSException>
<Error><ErrorCode>8716601</ErrorCode> <ErrMsg>Socket had incorrect word size: 0.(SBL-JCA-00313)</ErrMsg></Error>
</com.siebel.common.common.CSSException>
        at com.siebel.om.conmgr.Connection.readPacket(Connection.java:550)
        at com.siebel.om.conmgr.Connection.run(Connection.java:286)
        at java.lang.Thread.run(Thread.java:619)
[CMGR FATAL] Error: <com.siebel.common.common.CSSException>
<Error><ErrorCode>8716601</ErrorCode> <ErrMsg>Socket had incorrect word size: 0.(SBL-JCA-00313)</ErrMsg></Error>
</com.siebel.common.common.CSSException> connection:1
<com.siebel.common.common.CSSException>
<Error><ErrorCode>8716601</ErrorCode> <ErrMsg>Socket had incorrect word size: 0.(SBL-JCA-00313)</ErrMsg></Error>
</com.siebel.common.common.CSSException>
        at com.siebel.om.conmgr.Connection.readPacket(Connection.java:550)
        at com.siebel.om.conmgr.Connection.run(Connection.java:286)
        at java.lang.Thread.run(Thread.java:619)
[CMGR FATAL] Error: <com.siebel.common.common.CSSException>
<Error><ErrorCode>8716601</ErrorCode> <ErrMsg>Socket had incorrect word size: 0.(SBL-JCA-00313)</ErrMsg></Error>
</com.siebel.common.common.CSSException> connection:1ERROR,22 Aug 2013 12:58:27,689,[XL_INTG.SIEBEL],====================================================
ERROR,22 Aug 2013 12:58:27,689,[XL_INTG.SIEBEL],com.thortech.xl.integration.siebel.utils.SiebelConnection : createSiebelConnection() : Siebel Connection Exception:Could not open a session in 4 attempts. {1}(SBL-JCA-00200)
ERROR,22 Aug 2013 12:58:27,689,[XL_INTG.SIEBEL],====================================================
ERROR,22 Aug 2013 12:58:27,689,[XL_INTG.SIEBEL],====================================================
ERROR,22 Aug 2013 12:58:27,689,[XL_INTG.SIEBEL],com.thortech.xl.integration.siebel.proxy.SiebelProxyEmployeeProvisionManager : createSiebelConnection() : BaseException: Siebel Connection JDB Exception: Could not open a session in 4 attempts. {1}(SBL-JCA-00200)
ERROR,22 Aug 2013 12:58:27,689,[XL_INTG.SIEBEL],====================================================
ERROR,22 Aug 2013 12:58:27,689,[XL_INTG.SIEBEL],====================================================
ERROR,22 Aug 2013 12:58:27,689,[XL_INTG.SIEBEL],com.thortech.xl.integration.siebel.provision.SiebelUtilEmployeeProvisionManager : createEmployee() : BaseException: Siebel Connection JDB Exception: Could not open a session in 4 attempts. {1}(SBL-JCA-00200)
ERROR,22 Aug 2013 12:58:27,689,[XL_INTG.SIEBEL],====================================================
Regards,
Ravi.

Hi
I facing the same error message as yours, using OIM 11g R2
Are you able solve it ?
Please share
Many Thanks !!!

CUCM 10 Self Provisioning Problem with TAGs on Universal Device Template

Hi friends.
I've been provisioning IP Phone by Self Povisioning. The phones were provisioned almost perfectly. I notice the TAGs that i filed up on Device Template (look above), are not "translated" on Device Phone.
Universal Device Template
The Tags on Universal Line Template comes perfectly to Line Description.
Had you ever seen something like this?
Kind Regards
Fernando Penteado

Hi folks. I could identify the problem with Variable and TAG. In order to Self Provisioning works fine, we need to mark Owner User on Universal Device Template.
Look that.
Thanks

ISE 1.1.3 provisioning problem for the first DOT1x connection

Hello all,
I am wondering how a wired dot1x client can get the NAC agent downloaded for its very first connection from ISE ?
Should the Agent be installed before the first connection ?
I'have set up ISE 1.1.3 for provisioning (files have been downloaded from cisco website) (upgrade mandatory)
I have an AuthZ rule for a correct posture assessment
and
another AuthZ rule for an unknown posture assessment that triggers a posture remediation (file download)
(in that order)
NAC agent is properly configured ( FQDN...), the users gets and nothing happen !
no NAC upgrade
no NAC assessment.
Any idea ?
Does it take a while for the new agent to be downloaded ?
Best regards.
V.

In order to troubleshoot the NAC agent problem, we need to check couples of things.like
1.)Ensure that the discovery host address on the Cisco NAC agent or Mac OS X agent is pointing to the Cisco ISE FQDN. (Right-click on the NAC agent icon,
choose Properties, and check the discovery host.)
2.) Ensure that the access switch allows Swiss communication between Cisco ISE and the end client machine. Limited access ACL applied for the session should allow Swiss ports:
permit tcp any host 80.0.80.2 eq 8905 --> This is for posture
communication between NAC agent and ISE (Swiss ports)
permit udp any host 80.0.80.2 eq 8905 --> This is for posture
communication between NAC agent and ISE (Swiss ports)
deny ip any any
3.)If the agent login dialog still does not appear, it could be a certificate issue. Ensure that the certificate that is used for Swiss communication on the end client is in the Cisco ISE certificate trusted list.
4.) Ensure that the default gateway is reachable from the client machine.
As per your confirmation, I am going to close the case for this specific inquiry. We strive to provide you with excellent service. Please feel free to reach out to me or any member of the SAC team if we can be of any further assistance or if you have any other related questions in the future. We value your input and look forward to serving you moving forward.

Xellerate Provisioning of Oracle Users

I am having a problem when i am trying to provisioning a user account to oracle db. After entering the required information and giving the user a database role of 'DBA', the user creation process completes successfully. However, when i try to login to oracle using the user account and password, it gives me a oracle invalid login and password error?
can someone provide me with some information where to look at for this problematic behavior?
Also, I want to include some email notification to the DB account user on approval and also to the administrators for provisioning related activities? Can someone point me to any documentation on how to do email notifications in OIM?
This is a client requirement and some quick help will be really helpful.

Couple of questions before I can exactly answer your query:
1.) Did you write a custom connector to create a user in oracle ? If yes, Are you catching the exceptions in your code? Usually insufficient privileges (by bind username and password for IT resource) is the issue for non-creation of accounts in oracle. If you are using thin client
Is it of the format : create user p identified by x;
where p & x are your variables ?
2.) To integrate a pre-populated values there are 2 ways:
a.) Give a default value on your form (but the problem is that everybody will have the same values)....which can be changed at your object form level.
b.) If you need to create a pre-populate adapter, go to adapter factory and create one adapter of type pre-populate. You may create a varaiable called value and in the utility task - create the step as set value=return value,
c.) Use this pre-populate task to take the value from your object form and sink it into Process Definition. And then run your custom connector.
3.) To check if your code is giving errors, you may change log level to debug and then check your console.log file to see if any error occurs.
4.) To put an email definition: You need to create a email definition and then go to your task in Process definition and jump to Notification Tab. Select your email there and register it with a Return Code of Success or Failure. That should work it out. You may include requestor information or manager information in your email by the combo box given in the definition screen.
5,) There should be no need to change a password before trying it through sql plus. It should work directly if a create user statement has been executed properly.
Hope this helps.
Rajnish Bhatia

OIM (Xellerate) Provisioning Functionality with Web Services

Hi,
Has anyone had any experience with needing to issue user provisioning requests to Oracle Identity Manager (formally Xellerate) using web services?
I envision that it would most likely involve using SPML as the standard communication protocol within the SOAP messages.
From my readings, the current version of OIM does not offer web services as one of its interfaces, but I'd like to check if anyone has already done this themselves?
Any help is appreciated.
Thanks.

If you have made some custom connector using internal oim api, you can made your own web service interface but outside of OIM infrastructure.
We have made some custom connector test directly from Eclipse, before integrate it inside OIM, so if you want to provide a web service interface to publish some OIM funtionality should be possible do it using OIM API.
using generic connector let you use only a SPML webservice for provisioning resources, your webservice must parse the SPML message and then run your own logic, however you must login to OIM and then assign the resource to the user using the connector, There is not a web service interface to do it outside OIM infrastructure.

Cisco SPA112 provisioning problem: FXS_Port_Power_Limit

Hi,
We have problems provisioning specific parameter in a SPA112: FXS_Port_Power_Limit. Here is a part of our XML:
<Force_G729a_Code ua="na">*02729</Force_G729a_Code>
<FXS_Port_Power_Limit ua="na">4</FXS_Port_Power_Limit>
<FXS_Port_Input_Gain ua="na">+2</FXS_Port_Input_Gain>
<FXS_Port_Output_Gain ua="na">+2</FXS_Port_Output_Gain>
The parameter "FXS_Port_Power_Limit" is not provisioning the XML parameter (in the example: 4). It keeps the default value (3). Other parameters in the same section like FXS_Port_Input_Gain and FXS_Port_Output_Gain gets the XML value correctly.
Thanks for your advice,
Alejandro.

I looked at the spc file for this model and don't see that parameter.
http://software.cisco.com/download/release.html?mdfid=283998771&softwareid=282562500&release=1.3.1&relind=AVAILABLE&rellifecycle=&reltype=latest

Provisioning Problems with Beta 7

I read the other thread on this and tried those things.
I'm still having problems deploying with Beta 7.
I followed the instructions on the dev site (the pdf).
I generated a new generic wildcard AppID called ##########.com.mycompany.*
Then I generated 3 new provisioning profiles for my three apps .
All three provisioning profiles now have the same wildcard
app id (which makes me uncomfortable but thats what the doc says to do)
In my project/getinfo/build I have "iPhone Developer" in the Code
signing entity under "Any iPhone OS Device".
In the code Signing Provisioning Profile I chose the profile I made
for my first application.
In target/myapplication/getinfo under properties under identifier I have
##########.com.mycompany.*
In info.plist under Bundle Identifier I have ##########.com.mycompany.*
Build and go gives me the unexpected error error from Organizer.
(0xE800..01)
So I'm obviously doing something wrong. I see the provisioning profile
(I'm only trying the first one at the moment) in the organizer and it is checked.
One thing that confuses my is that on the portal all three of my profiles
now have the same ########### prefix. This doesn't seem correct as how
am I going to differentiate between them in the future (for uploading, etc)?
Help! Thanks!

OK, I got it fixed. The instructions said to use an appid of ######.* and I was using #####.com.mycompany.* which, of course, isn't the same.
I also needed to remove the bundle id from plist and the target and just put in any string I wanted. I'll worry about that all appids are the same later...

User records auto provisioning problem!

My problem is:
I configured a access policy and a group. Upon user created the record is to be provision to OID and the record state is pre-provision.
I can let it go through by manually clicking. How can I let it do this automatically without human operation?
Thanks!

What do you mean by pre-provision ?
I think it is stuck in System Validation
Have you checked Auto Save on Process Defn of this resource. If no then check that and try provisioning again.

OIM Provisioning problem with EBS

I use connector to test provisioning function with EBS, and it works.
Besides,there have 2 CreateUser storedprocedure in EBS, and one for SSO(we
can set GUID value when create user). I found the connector used
the non-SSO storedprocedure. The question is can I modify the config files(
attributemapping_prov.properties, config.properties,storeprocedures.properties)
to utilize the SSO storedprocedure to finish the create operation during provisioning
(I want to specify GUID by myself when create EBS' user through OIM)?
I just tried my opinion, but the logs prompt SQLException.I do not know why?What should I do?
Any suggestions will be helpful.
Thanks!

You could definitely write your own connector. We faced a similar problem and solved it by writing our own EBS Connector.
I haven't explored the exact capabilities of the standard EBS connector so you might be able to do this by configuration. My general experience is that it is often better to bite the bullet and create your own connector rather than wasting time trying to get the out of the box connectors to do advanced operations.
It looks like the config files are more for defining the type and number of attributes that is used during user creation rather than control which stored procedure should be called.
Good luck
/M

SPA 112/122 FW 1.1.0 (011) provisioning problem

I have problem with provisionig Cisco SPA 112/122 after upgrade FW to 1.1.0 (011).
Is there any solution or just we should not use this FW?
We use provisioning by entering url to
Profile Rule: http://prov.802.cz/prov.xml
set short times and Submit, but nothing happens :-(
After downgrade FW to 1.0.1 (022) provisionign work with no problem.
Thanks for your advice
Tomas

We have identified some provisioning issues and those are fixed in the upcoming release which should be out on cisco.com in the next 2 weeks. Thank you.

Xcode Distribution Provisioning problems..

Hi, I have recently upgraded my machine and upgraded to Xcode 4.
I am having problems with the distribution provisioning. Its strange. When I create the Developer provisioning profile, I can happily add my devices.
When I create the Distribution provision, the devices are greyed out and cant be selected. When I switch to add hoc, the option to add devices becomes available.
I'd really appreciate some help on this please, many thanks.
Alex

I assumed this to be the issue as when I drag a Developer provision into xcode it works fine but the Distribution provision doesnt.
Please see further images...
and

OIM 11.1.2 AD Provisioning problem

I added custom fields for AD resource. Reconciliation and create(create a new user into the target system with the custom attributes) operations works successful.
I try to update custom attributes and not update into the target system.
Thanks.

The custom attributes is created in AD Form not in USR definition.
I already added the attribute in the provisioning lookup.
I tried your procedure and it did not work
In the Resource History not displays the Task of the extended attribute.
The logs no displays any errors.
Thanks.

Provisioning problem for AD and SAP ABAP Systems

Hi,
We're using IDM 7.20 SP3 and successfully run he Initial Load for AD, NW 7.30 and ERP 6.0 Systems successfully.
But, when I add the priviledge of systems to a new user created via IDM UI, It is not provisioned successfully.
Job Log show the following errors:
[http://imageshack.us/photo/my-images/69/idmerror1.png/|http://imageshack.us/photo/my-images/69/idmerror1.png/]
The detail log is as follow:
JOB: Update context info
Provisioned entries - Successes: 1 Failures:0
MSKey AuditID Status Info
9910 682 OK AALASARLI1
JOB: SYNC
Provisioned entries - Successes: 1 Failures:0
MSKey AuditID Status Info
9910 682 OK 1608
JOB: Set task to error state
Provisioned entries - Successes: 0 Failures:1
MSKey AuditID Status Info
9910 682 FAIL uSkip Called to skip entry
JOB: Skip pending operation
Provisioned entries - Successes: 1 Failures:0
MSKey AuditID Status Info
9910 683 OK not-existing-mskey
JOB: Trigger notification: assignment failure
Messages Warning Executing sap_core_getSkippedOK() got RuntimeException - org.mozilla.javascript.EvaluatorException: uSelect(select top 1 avalue from idmv_value_basic_active where attrname='MX_ATTRIBUTE_VALUE' and mskey=not-existing-mskey) got exception com.microsoft.sqlserver.jdbc.SQLServerException: Incorrect syntax near the keyword 'not'. HINT: Check line 20 in the script sap_core_getSkippedOK
Provisioned entries - Successes: 0 Failures:1
MSKey AuditID Status Info
9910 683 FAIL Failed running function in string "$FUNCTION.sap_setContextVariable(NOTIFICATION_SUBJECT;Assignment failed!!<SKIPPEDOK>=$FUNCTION.sap_core_getSkippedOK()$$;<UIUSER_DISPLAYNAME>=$FUNCTION.sap_getDisplayName(manager)$$)$$". Marking entry as failed. Exceptio
any idea?

Hi,
The entries created when I updated a user (person) and add a priviledge, following entries created in audit table
Task_name     Provision_status     mcmv_mskey     Message     mcmv_ProvStatus     mcmv_taskid     mcmv_privatetask     IDStore
Modify Identity     OK     1608     NULL     1100     2578     0     2
Provisioning     Failed     9911     uSkip Called to skip entry     1101     601     0     2
Pending Operation Failed     Failed     9911     Failed running function in string "$FUNCTION.sap_setContextVariable(NOTIFICATION_SUBJECT;Assignment failed!!<SKIPPEDOK>=$FUNCTION.sap_core_getSkippedOK()$$;<UIUSER_DISPLAYNAME>=$FUNCTION.sap_getDisplayName(manager)$$)$$". Marking entry as failed. Exceptio     1101     898     0     2

ARQ: Default Role Provisioning Problem in Access Request???

Hi,
This Business Scenario is very common to have default role(s) assigned to a User at the back end system. So I have the same requirement. In achieving this, I followed below thread here:
MSMP Issue - GRC 10
I have also followed the note#1616092 for configuring the Default Roles.
I have performed below activities:
1. Param#2009 = YES
2. Param#2010 = 001
3. Param#2011 = REQUEST
4. Param#2013 = SYSTEM
5. Param#2038 = YES
6. Imported a test role and NO ROLE OWNER is maintained.
7.In NWBC->-AM->RM, I maintained a test role as a default.
Now when I raise a request, application is successfully adding the default role to the request. However, the problem I am facing is that, one Manager approves the request, it is getting failed.
The Audit Log says that, the STAGE is "Completed" but I could also see "No Agent Found, Cancelling path XYZ (in stage no. 002- GRAC_ROLEOWNER)
May I know what I am missing here? Why I am getting error and how can I resolve it?
Please advise.
Regards,
Faisal

Hi Faisal,
sorry for late resposne I was away traveling.
default roles are being added by default to access request
Yes, these roles are added to the access request.
FN: OK
and this roles are following your normal paths which I guess assumes manager and role owner.
How such roles (not having role owner) will follow the normal path Manager->Role Owner if we are enabling routing (Rule ID: GRAC_MSMP_ROUTE_NO_ROLEOWNER) at manager stage level? Can you please help me understand this?
FN: OK If you enable routing it will go to routing path. I have understood your post as you put in question the behavior of default roles and my point was - they act exacly the same like regular roles.
- request is going to detour path
Does it answer my question?
FN: My point was default roles like all other will go to detur path (assuming you setup it globaly)
Deafault roles can have separate path (in my case) where only supervisor is approving it.
Instead of "GRAC_MSMP_ROUTE_NO_ROLEOWNER" I believe we can have our own rule to have a separate path for such default roles based upon business requirement. Correct me, if required.
FN; correct
It was design in way that initiator rule based on role crtivality is sending this rule to separate path without role owner.
Again, I believe you have enabled your custom rule here to achieve your business requirement instead standard rule id.
correct
If you do not have separate path - this role like any other will follow standard path you have.
Here, I had used a stage called "ZNO_STAGE_PATH" for routing the system line item, which does not have any owner. I used the same path ID for "GRAC_MSMP_ROUTE_NO_ROLEOWNER"Rule ID and it is working fine as of now.
FN: good
My question is that, do you think if I don't use "ZNO_STAGE_PATH" as Path ID for "GRAC_MSMP_ROUTE_NO_ROLEOWNER" Rule ID, should it follow the standard Manager->Role Owner path and these default roles get approved and assigned automatically?
FN: You should use the path ZNO_STAGE_PATH as path ID for routing rule.
If the role does not have role owner it will not allow you the even get to Role Onwer stage - request will be detured.
My point from the begining was - instead of using the routing rule - in our case we used separate path for default roles without role owner:) only consisted with manager stage. Again your approach is different but also will work.
Then which Path ID should I use for "GRAC_MSMP_ROUTE_NO_ROLEOWNER" Rule ID, as it is mandatory?
Should I use my current path for New/Change Account where at Manager level this was routed due to non availability of role owner?
Are you asking for default roles?
Please advise.
Regards,
Faisal

Xellerate provisioning problems

Similar Messages

Maybe you are looking for