GBA 5.2 user attributes

Similar Questions

• SRA-store outside the Active Directory user attributes

  Is it possible to be able to store a custom user attribute, such as Mobile phone number, outside the Active Directory?

  I would like to be able to use it on the the email (an email/SMS gateway) 2nd factor authentication process.

  I would like to avoid duty or anything else in AD store or having to expose the unit to SonicWALL SRA.

  It's something that we do now with our Barracuda SSLVPN device I'm looking to replace it with this.

  You can configure a different email for OTP by user.  In admin console click on users > local users.  Change the user you want, and then click the tab linking strategies.  Fill in the email address: field.

• Installation of IOM broken after the creation of user attribute

  Hi all
  
  I tried to create a new user with a list of values attribute. I guess that I pointed out some of the values incorrectly I got an error message from the application of IOM. Now, however, I am not able to connect to the application of IOM even after restart of IOM. The error I get in the console is as follows:
  
  < 12 January 2012 13:06:21 SAST > < error > < oracle.iam.identity.usermgmt.impl > < ARA-3051235 > < an error occurred when searching for the user attributes.
  oracle.iam.configservice.exception.InvalidLookupException: an exception occurred when retrieving the values of look-up: the look-up 123 code is not valid.
  at oracle.iam.configservice.impl.EntityUtil.getAttribute(EntityUtil.java:666)
  at oracle.iam.configservice.impl.EntityUtil.getAttributes(EntityUtil.java:743)
  at oracle.iam.configservice.impl.EntityUtil.getAttributes(EntityUtil.java:780)
  at oracle.iam.configservice.impl.RDBMSDAO.getAttributes(RDBMSDAO.java:1158)
  at oracle.iam.configservice.impl.ConfigManagerImpl.getAttributes(ConfigManagerImpl.java:784)
  at oracle.iam.identity.usermgmt.impl.UserManagerImpl.hasUnsearchableAttributes(UserManagerImpl.java:4819)
  at oracle.iam.identity.usermgmt.impl.UserManagerImpl.search(UserManagerImpl.java:1607)
  at oracle.iam.identity.usermgmt.impl.UserDetailsProviderImpl.getUserDetails(UserDetailsProviderImpl.java:125)
  at oracle.iam.platform.auth.impl.util.AuthenticationContextUtilForEJB.setUserPreferences(AuthenticationContextUtilForEJB.java:137)
  at oracle.iam.platform.auth.impl.util.AuthenticationContextUtilForEJB.setAuthenticationContextInEJB(AuthenticationContextUtilForEJB.java:93)
  at oracle.iam.scheduler.api.SchedulerServiceEJB.startx (unknown Source)
  at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  at java.lang.reflect.Method.invoke(Method.java:597)
  at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.jee.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:37)
  at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
  at com.bea.core.repackaged.springframework.jee.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:50)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
  to $Proxy250.startx (Unknown Source)
  at oracle.iam.scheduler.api.SchedulerService_lp8yuv_SchedulerServiceRemoteImpl.__WL_invoke (unknown Source)
  at weblogic.ejb.container.internal.SessionRemoteMethodInvoker.invoke(SessionRemoteMethodInvoker.java:40)
  at oracle.iam.scheduler.api.SchedulerService_lp8yuv_SchedulerServiceRemoteImpl.startx (unknown Source)
  at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  at java.lang.reflect.Method.invoke(Method.java:597)
  at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:85)
  to $Proxy179.startx (Unknown Source)
  at oracle.iam.scheduler.api.SchedulerServiceDelegate.start (unknown Source)
  at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  at java.lang.reflect.Method.invoke(Method.java:597)
  to Thor.API.Base.SecurityInvocationHandler$ 1.run(SecurityInvocationHandler.java:68)
  at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
  at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
  at weblogic.security.Security.runAs(Security.java:41)
  at Thor.API.Security.LoginHandler.weblogicLoginSession.runAs (weblogicLoginSession.java:52)
  at Thor.API.Base.SecurityInvocationHandler.invoke (SecurityInvocationHandler.java:79)
  to $Proxy249.start (Unknown Source)
  at oracle.iam.scheduler.webapp.SchedulerStartupServlet.startScheduler(SchedulerStartupServlet.java:99)
  at oracle.iam.scheduler.webapp.SchedulerStartupServlet.init(SchedulerStartupServlet.java:46)
  to weblogic.servlet.internal.StubSecurityHelper$ ServletInitAction.run (StubSecurityHelper.java:283)
  at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
  at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
  at weblogic.servlet.internal.StubSecurityHelper.createServlet(StubSecurityHelper.java:64)
  at weblogic.servlet.internal.StubLifecycleHelper.createOneInstance(StubLifecycleHelper.java:58)
  to weblogic.servlet.internal.StubLifecycleHelper. < init > (StubLifecycleHelper.java:48)
  at weblogic.servlet.internal.ServletStubImpl.prepareServlet(ServletStubImpl.java:539)
  at weblogic.servlet.internal.WebAppServletContext.preloadServlet(WebAppServletContext.java:1985)
  at weblogic.servlet.internal.WebAppServletContext.loadServletsOnStartup(WebAppServletContext.java:1959)
  at weblogic.servlet.internal.WebAppServletContext.preloadResources(WebAppServletContext.java:1878)
  at weblogic.servlet.internal.WebAppServletContext.start(WebAppServletContext.java:3153)
  at weblogic.servlet.internal.WebAppModule.startContexts(WebAppModule.java:1508)
  at weblogic.servlet.internal.WebAppModule.start(WebAppModule.java:482)
  to weblogic.application.internal.flow.ModuleStateDriver$ 3.next(ModuleStateDriver.java:425)
  at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:52)
  at weblogic.application.internal.flow.ModuleStateDriver.start(ModuleStateDriver.java:119)
  at weblogic.application.internal.flow.ScopedModuleDriver.start(ScopedModuleDriver.java:200)
  at weblogic.application.internal.flow.ModuleListenerInvoker.start(ModuleListenerInvoker.java:247)
  to weblogic.application.internal.flow.ModuleStateDriver$ 3.next(ModuleStateDriver.java:425)
  at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:52)
  at weblogic.application.internal.flow.ModuleStateDriver.start(ModuleStateDriver.java:119)
  at weblogic.application.internal.flow.StartModulesFlow.activate(StartModulesFlow.java:27)
  to weblogic.application.internal.BaseDeployment$ 2.next(BaseDeployment.java:636)
  at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:52)
  at weblogic.application.internal.BaseDeployment.activate(BaseDeployment.java:205)
  at weblogic.application.internal.EarDeployment.activate(EarDeployment.java:58)
  at weblogic.application.internal.DeploymentStateChecker.activate(DeploymentStateChecker.java:161)
  at weblogic.deploy.internal.targetserver.AppContainerInvoker.activate(AppContainerInvoker.java:79)
  at weblogic.deploy.internal.targetserver.BasicDeployment.activate(BasicDeployment.java:184)
  at weblogic.deploy.internal.targetserver.BasicDeployment.activateFromServerLifecycle(BasicDeployment.java:361)
  to weblogic.management.deploy.internal.DeploymentAdapter$ 1.doActivate(DeploymentAdapter.java:51)
  at weblogic.management.deploy.internal.DeploymentAdapter.activate(DeploymentAdapter.java:200)
  to weblogic.management.deploy.internal.AppTransition$ 2.transitionApp(AppTransition.java:30)
  at weblogic.management.deploy.internal.ConfiguredDeployments.transitionApps(ConfiguredDeployments.java:261)
  at weblogic.management.deploy.internal.ConfiguredDeployments.transitionApps(ConfiguredDeployments.java:220)
  at weblogic.management.deploy.internal.ConfiguredDeployments.activate(ConfiguredDeployments.java:169)
  at weblogic.management.deploy.internal.ConfiguredDeployments.deploy(ConfiguredDeployments.java:123)
  at weblogic.management.deploy.internal.DeploymentServerService.resume(DeploymentServerService.java:180)
  at weblogic.management.deploy.internal.DeploymentServerService.start(DeploymentServerService.java:96)
  at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
  at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
  at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
  < 12 January 2012 13:06:21 SAST > < error > < oracle.iam.platform.auth.impl > < ARA-0060010 > < mapping plugin loading error
  oracle.iam.platform.utils.userpreferences.UserDetailsException: invalid number of users 0 entries returned for user ID OIMINTERNAL.
  at oracle.iam.identity.usermgmt.impl.UserDetailsProviderImpl.getUserDetails(UserDetailsProviderImpl.java:135)
  at oracle.iam.platform.auth.impl.util.AuthenticationContextUtilForEJB.setUserPreferences(AuthenticationContextUtilForEJB.java:137)
  at oracle.iam.platform.auth.impl.util.AuthenticationContextUtilForEJB.setAuthenticationContextInEJB(AuthenticationContextUtilForEJB.java:93)
  at oracle.iam.scheduler.api.SchedulerServiceEJB.startx (unknown Source)
  at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  at java.lang.reflect.Method.invoke(Method.java:597)
  at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.jee.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:37)
  at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
  at com.bea.core.repackaged.springframework.jee.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:50)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
  to $Proxy250.startx (Unknown Source)
  at oracle.iam.scheduler.api.SchedulerService_lp8yuv_SchedulerServiceRemoteImpl.__WL_invoke (unknown Source)
  at weblogic.ejb.container.internal.SessionRemoteMethodInvoker.invoke(SessionRemoteMethodInvoker.java:40)
  at oracle.iam.scheduler.api.SchedulerService_lp8yuv_SchedulerServiceRemoteImpl.startx (unknown Source)
  at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  at java.lang.reflect.Method.invoke(Method.java:597)
  at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:85)
  to $Proxy179.startx (Unknown Source)
  at oracle.iam.scheduler.api.SchedulerServiceDelegate.start (unknown Source)
  at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  at java.lang.reflect.Method.invoke(Method.java:597)
  to Thor.API.Base.SecurityInvocationHandler$ 1.run(SecurityInvocationHandler.java:68)
  at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
  at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
  at weblogic.security.Security.runAs(Security.java:41)
  at Thor.API.Security.LoginHandler.weblogicLoginSession.runAs (weblogicLoginSession.java:52)
  at Thor.API.Base.SecurityInvocationHandler.invoke (SecurityInvocationHandler.java:79)
  to $Proxy249.start (Unknown Source)
  at oracle.iam.scheduler.webapp.SchedulerStartupServlet.startScheduler(SchedulerStartupServlet.java:99)
  at oracle.iam.scheduler.webapp.SchedulerStartupServlet.init(SchedulerStartupServlet.java:46)
  to weblogic.servlet.internal.StubSecurityHelper$ ServletInitAction.run (StubSecurityHelper.java:283)
  at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
  at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
  at weblogic.servlet.internal.StubSecurityHelper.createServlet(StubSecurityHelper.java:64)
  at weblogic.servlet.internal.StubLifecycleHelper.createOneInstance(StubLifecycleHelper.java:58)
  to weblogic.servlet.internal.StubLifecycleHelper. < init > (StubLifecycleHelper.java:48)
  at weblogic.servlet.internal.ServletStubImpl.prepareServlet(ServletStubImpl.java:539)
  at weblogic.servlet.internal.WebAppServletContext.preloadServlet(WebAppServletContext.java:1985)
  at weblogic.servlet.internal.WebAppServletContext.loadServletsOnStartup(WebAppServletContext.java:1959)
  at weblogic.servlet.internal.WebAppServletContext.preloadResources(WebAppServletContext.java:1878)
  at weblogic.servlet.internal.WebAppServletContext.start(WebAppServletContext.java:3153)
  at weblogic.servlet.internal.WebAppModule.startContexts(WebAppModule.java:1508)
  at weblogic.servlet.internal.WebAppModule.start(WebAppModule.java:482)
  to weblogic.application.internal.flow.ModuleStateDriver$ 3.next(ModuleStateDriver.java:425)
  at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:52)
  at weblogic.application.internal.flow.ModuleStateDriver.start(ModuleStateDriver.java:119)
  at weblogic.application.internal.flow.ScopedModuleDriver.start(ScopedModuleDriver.java:200)
  at weblogic.application.internal.flow.ModuleListenerInvoker.start(ModuleListenerInvoker.java:247)
  to weblogic.application.internal.flow.ModuleStateDriver$ 3.next(ModuleStateDriver.java:425)
  at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:52)
  at weblogic.application.internal.flow.ModuleStateDriver.start(ModuleStateDriver.java:119)
  at weblogic.application.internal.flow.StartModulesFlow.activate(StartModulesFlow.java:27)
  to weblogic.application.internal.BaseDeployment$ 2.next(BaseDeployment.java:636)
  at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:52)
  at weblogic.application.internal.BaseDeployment.activate(BaseDeployment.java:205)
  at weblogic.application.internal.EarDeployment.activate(EarDeployment.java:58)
  at weblogic.application.internal.DeploymentStateChecker.activate(DeploymentStateChecker.java:161)
  at weblogic.deploy.internal.targetserver.AppContainerInvoker.activate(AppContainerInvoker.java:79)
  at weblogic.deploy.internal.targetserver.BasicDeployment.activate(BasicDeployment.java:184)
  at weblogic.deploy.internal.targetserver.BasicDeployment.activateFromServerLifecycle(BasicDeployment.java:361)
  to weblogic.management.deploy.internal.DeploymentAdapter$ 1.doActivate(DeploymentAdapter.java:51)
  at weblogic.management.deploy.internal.DeploymentAdapter.activate(DeploymentAdapter.java:200)
  to weblogic.management.deploy.internal.AppTransition$ 2.transitionApp(AppTransition.java:30)
  at weblogic.management.deploy.internal.ConfiguredDeployments.transitionApps(ConfiguredDeployments.java:261)
  at weblogic.management.deploy.internal.ConfiguredDeployments.transitionApps(ConfiguredDeployments.java:220)
  at weblogic.management.deploy.internal.ConfiguredDeployments.activate(ConfiguredDeployments.java:169)
  at weblogic.management.deploy.internal.ConfiguredDeployments.deploy(ConfiguredDeployments.java:123)
  at weblogic.management.deploy.internal.DeploymentServerService.resume(DeploymentServerService.java:180)
  at weblogic.management.deploy.internal.DeploymentServerService.start(DeploymentServerService.java:96)
  at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
  at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
  at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
  >
  
  Any help will be appreciated. I need this resolved as soon as POSSIBLE...
  
  Thank you
  user10233157

  user10233157 wrote:
  Yes Mary

  :-) can connect in Console Design? If so, recreate the search.

  -Marie

• MAR for VPN GBA 4.2 users

  Hello

  I use ACS 4.2 in my setup. We have my company VPN users. Authentication of the identity of the VPN users are currently happenning by ACS and AD. I want users to connect to VPN should be used that company provided laptop computer. That's why I want to impliment MAR who will verify the name of the computer in AD and if the computer name is in the computer to ad group then only his user ID and the password will be validated and based on this validation, the user will be allowed to access network resources. Currently I do not have any server certificate and users can connect to any cmputer VPN (Home computer), just using their login and password.

  All the paper I described x client about 802. 1 with the authentication of certificate through Mar.

  Please help me to achieve this requiremnet. I want without any certificate when a user wants to connect to the VPN its system name is validated through ACS & AD Group, then after username password verification will occure.

  Please help me...

  Satya,

  You cannot apply the MAR for a scenario of remote access since MARCH in the realm of GBA is for customers who are destined for switches using a supplicant and dot1x. In this case using a vpn client and an ASA, you can deploy a DAP policy in which you can search for a specific registry key on the workstations that belong to your network.

  You can ask the same questions in the forums VPN, but this is the configuration for DAP deployment guide:

  http://www.Cisco.com/en/us/products/ps6120/products_white_paper09186a00809fcf38.shtml

  Thank you

  Tarik

• IOS/PIX RADIUS (01/09/00) on VPN 3002 user attribute

  Hi all

  I have a client VPN HW 3002, build an IPSec VPN to a VPN 3015 concentrator. An ACS (3.3) server is used for the external RADIUS authentication. There is a user configured on the HW 3002 client and server ACS (RADIUS). It authenticates successfully during the construction of the IPSec tunnel. Everything works fine, but I would like to use a separate ACL for that user to limit access to the network. Is it possible to use the IOS/PIX RADIUS attribute (01/09/00) for the download of ACL for this HW 3002 customer?

  I want the user configured for purposes of authentication (on the customer of HW 3002) to download an ACL to restrict access to the network.

  As always, thanks for your help.

  -Mike

  This should help you:

  http://www.Cisco.com/en/us/Tech/tk59/technologies_configuration_example09186a0080094eac.shtml

• Plugin and vCO AD user attributes

  Hi @ all.

  I'm trying to get the attributes of the user within a workflow orchastrator of AD. But it seems, that the attributes are not read by the plugin or do I have an error in the script?

  Thanks in advance.

  The Script:

  System.log ("= all attributes =");

  var attributes = User.allAttributes;

  for each {(attrib in attributes)

  System.log ("attribute:" + attrib.name + "(" + User.getAttribute (attrib.name) + ")" "");

  }

  System.log ("= end task =");

  The journal:

  [13:32:56.233 2014-03-10] [I] = all attributes =.

  [13:32:56.234 2014-03-10] [I] = end task =.

  Please see this thread: allAttribute - he is discussing the same thing. Christophe & I have both provided feedback here.

• Do search by defined user attributes - 11G Release2

  Hi all
  
  I have an attribute defined by the user in the name of UserReconKey, one I use the below query to search for the IOM, but when trying to get the value of the result, I get the exception Thor.API.Exceptions.tcColumnNotFoundException, how can I get my user defined the value of the attribute? Any help is greatly appreciated...
  
  tcUserOperationsIntf = userOp
  Platform.getService (tcUserOperationsIntf.class);
  
  Map searchAttr = new HashMap();
  searchAttr.put ("Users.Email", email);
  String [] returnColumns =
  New String() {"Users.Email', 'UserReconKey'};
  tcResultSet usersFound = null;
  
  try {}
  usersFound = userOp.findUsersFiltered (searchAttr, returnColumns);
  
  for (int i = 0; i < usersFound.getTotalRowCount (); i ++) {}
  usersFound.goToRow (i);
  String _userReconKey =
  usersFound.getStringValue ("UserReconKey");
  
  }
  
  BR
  Aliye

  You can try 11g API as well for the user as the search below:

  Import oracle.iam.identity.usermgmt.api.UserManager;
  Import oracle.iam.identity.usermgmt.api.UserManagerConstants;
  Import oracle.iam.identity.usermgmt.vo.User;
  Import oracle.iam.platform.entitymgr.vo.SearchCriteria;

  HashMap settings = null;
  Set attrNames = null;
  Criteria of SearchCriteria = null;

  criteria = new SearchCriteria (new SearchCriteria ("User Login", "TESTUSER", SearchCriteria.Operator.EQUAL), new SearchCriteria("Status","Active",SearchCriteria.Operator.EQUAL), SearchCriteria.Operator.AND);

  parameters = new HashMap ();
  Parameters.put ("STARTROWOPTIONAL", 0);
  Parameters.put ("ENDROWOPTIONAL",-1);
  UserManager um = Platform.getService (UserManager.class);
  List of users of = um.search (null, parameters);
  for (int i = 0; he's)<>
  UU = users.get (i) of the user;

  System.out.println (uu. GetAttribute (UserManagerConstants.AttributeName.USER_LOGIN. GetId()));
  }

  print UU (user object) directly and you will be the attribute name in the knowledge

• OIM 11 g: updated AD on the modification of user attributes.

  Hello
  
  I have configured IOM with the connector AD and I am able to provide user AD resources and get the users appears in AD.
  I would like to than the IOM as the master of the data, and so for every change in the profile to the IOM, I want to get these values automatically reflected in the AD user profile.
  
  By default, the account enable / disable, and the password are pushed to the announcement of the IOM (using the AD 11.1.1.5 adapter).
  
  Please advise on these options,

  First create update tasks in the process definition for all the attributes you want to change in AD. This update tasks update AD IOM data. Then add edit tasks for any attribute. These tasks will bring together form user IOM data to process the form. Also add that these edit tasks in the research of USR_PROCESS_TRIGGERS so that these tasks can be fired automatically each time that no matter what attribute is changed.

  Kind regards
  GP

• Form process for editing user attributes

  Hi all

  In OIM 11 g 2, fields on the forms of process are not visible even though we pre-fill the map associated with this field and there is no auto only fill button as well. I can see the value in changing the account. Is there a way to show the value in the form of courses before the disposition of the account.

  Kind regards

  Nitin NIBAS

  Only if you switched off your automatic backup for the process definition.  This will prevent all the autodeploiement to perform well because it will stay in the State of Validation of the system because the form has not been registered.  You will need to open each instance and save it, or have a process that will save the contents of the form and enable the commissioning complete.

  -Kevin

• ACS 5.2 - Support for RADIUS attributes per user

  Hi all

  Does anyone know if it is possible to configure the RADIUS attributes on a per user in GBA 5.2 basis?

  That was possible under ACS 4.x, however, that I can't seem to find reference if ACS5.2 supports.

  Thank you

  Leon

  You can do this by setting by using attributes and then by substution attribute.

  You can see an example of it to set an internal user attribute to use as the value for the field address-IP-box

  This is just an example and can be applied also to any attribute RADIUS in which set an attribute of the user of the same type. Values can also be taken from an external identity as AD store

• Getting the values for the attributes of the user in IOM

  Hello

  I have it here is the snippet of code that retrieves the values for all the attributes user OIM 11g. But this code returns the exception of null pointer for attributes with null values. I also put if condition to check for null pointer exception, but always the null value is thrown in the newspapers whenever this code snippet is executed in the event handler.

  Any thoughts?

  private Map getUser(String userKey) {
    Map users = new HashMap();
    User user = null;
    UserManager userManager = (UserManager) Platform
    .getService(UserManager.class);
    try {
    user = userManager.getDetails(userKey, null, false);
    logger.log(ODLLevel.FINE, "User: {0}",new Object[] { user });
  
    } catch (NoSuchUserException e) {
    logger.log(ODLLevel.ERROR, e.getMessage(), e);
    } catch (UserLookupException e) {
    logger.log(ODLLevel.ERROR, e.getMessage(), e);
    }
    Set AttrNames = user.getAttributeNames();
    logger.log(ODLLevel.FINE, "User Attributes: {0}",new Object[] { AttrNames });
  
    Iterator itr = AttrNames.iterator();
    while (itr.hasNext()) {
    try {
    String AttrNAme = itr.next().toString();
    logger.log(ODLLevel.FINE,"Current Attribute is : {0}::",new Object[]{AttrNAme});
    if( user.getAttribute(AttrNAme).toString()!=null && user.getAttribute(AttrNAme).toString().length()!=0){
    String AttrValue = user.getAttribute(AttrNAme).toString();
    logger.log(ODLLevel.FINE,"Attribute: {0} and Value: {1}",new Object[]{AttrNAme,AttrValue});
    users.put(AttrNAme, AttrValue);
    }
    } catch (Exception e) {
    logger.log(ODLLevel.ERROR, e.getMessage(), e);
    }
    }
    return users;
    }
  

  TIA

  A call to ToString on null will give you the exception. You should check that the value is not null before calling toString() on it.

  In addition, you must perform an additional control on the user object that you receive after your try catch block. If the user object is null, then there is no need to run code on the user object.

• Attributes to Active Directory user in the ADF code

  Jdev Version: 11.1.1.7.0

  We are required to remove e-mail from Active Directory for the logged in user information and send an automatic e-mail. Security context exposes ADF LDAP user attributes?

  Is it possible to get the attributes of user without making a LDAP search again and instead of the connected in the context of the user?

  AFAIK you hand o get the attributes.

  This blog could help anything on the Fusion Middleware: retrieve the profile identity store modules

  And this blog Oracle Fusion Middleware security: two or three things you need to know about the API of the user role /

  Timo

• User customized user AD process defintiion confidently attribute map

  Hello

  I created 2 custom attributes in the form shape design console desinger UD_ADUSER and made the active version.

  (2) went to the resource object and added the reconciliation AD and AD user Trusted user mapping field and clicked on create a profile reconciliation.

  (3) went to the process definition and added cards filed for the definition of user AD process

  But when I go to the AD user confidence and try to create the field mapping, I'm not able to see custom fields created in the column "user attribute"?

  

  I have to do something else?

  Thank you

  The attributes of user show what UDF you have on the form user rather then the form of resources (AD in your case). The fields for which you want to map from your announcement of confidence, they are born on the user as UDF?

  -Marie

• Pass the attribute in the Description of the User Interaction

  When you add an item to the user interaction to the schema, is there a mechanism to allow me to set the text of description (Overview tab) such that it includes a workflow attribute?

  Yep in the interaction user attributes just add the workflow attribute.

  

  Then, under general description presentation add ${local_parameter_name}

  

• Error occurred in retrieving the provided user bindDN.The user must have attribute/s firstName, lastName, email BindDN.

  When I go through the wizard and setting to the top of my base and bind DN, I get the following error. What Miss me? Error saving configuration of the directory. Error occurred in retrieving the provided user bindDN.The user must have attribute/s firstName, lastName, email BindDN.

  The usename you use AD administrator (IE CN = admin) must have the required attributes with non-empty values - firstName, lastName, email.

  When HW connect to AD with bindDN he added that makes the system user who applies the required properties.

  These properties are required for each user that needs to be added/synchronized to the workspace of horizon.

  To correct this error, you must go to AD and adds these admin user attributes.