IOM 11.1.1.5: BI Publisher

Similar Questions

• Issue of reconciliation of target

  My requirement is that I have to perform * target * reconciliation.
  I had a target system which reconciles the IOM data, suppose if the account is it in the target system and the same account isn't here by IOM in this case I need to create an account to IOM. is it possible to create the user account in the IOM?
  
  Please provide your suggestion
  
  Published by: user11150369 on Sep 4, 2009 09:38

  It is not the reconciliation of target. He trusted reconciliation in IOM

  http://download.Oracle.com/docs/CD/E11223_01/doc.910/e11217/processes.htm#sthref78

• Publish all in assessing the IOM Deployment Manager tool

  Hi friends,

  Whenever I try to open the deployment (of IOM Import/Export utility) Manager in any browser, I get error.

  Tried to check the java version & I don't see any problems there.

  Can someone help me with this?

  OIM 11g R1 (11.1.1.5) - Version

  Kind regards

  CVM

  Please check your security settings for java.  Must be an application called "Configure Java".  On the Security tab, set it to medium security.  In the lower section under the list of Site exceptions, add your server URL, without the port.  Example "http://myserver.com".

  -Kevin

• IOM - BI publisher integration process

  Please give me the steps to integrate BI publisher with OIM 11 g.

  http://Srini-bellamkonda.blogspot.com/2012/11/integrate-OIM-11gr2-bi-Publisher.html

  Give it a try by following the above steps the url.

• clarification of the role of admin Help Desk in IOM

  Hello

  I have granted few users with the role help desk Admin, I got the below list of permissions of the document oracle.

  

  When the user tried to change the attribute of the user (name, first name etc...), he went for approval. But in the list above permission to the role of assistance, there is no mention of user to change access rights.

  How is the user was able to edit the attribute name? Is this regular behavior?  I see the admin role Viewer user has permission to modify user (attribute-level security) .

  Help Desk role inherits permissions of other admin roles (display of use / other role)?

  What is meant by request or direct exploitation?

  What is meant by scope organization permissions?

  Please provide details?

  Thank you

  Yes, you need to use in the same way, as described in the link button change user below. You must create a sandbox, apply EL expression and publish the sandbox.

  Oracle security solutions: IOM 11 GR 2 - show elements and hide the user interface based on a role

  The wink below shows the similar expression you need to set for users of the system of administration.

  

  The other activity in relation to the Helpdesk will work as it is. He expression will only hide the button change for all users except Admins system (xelsysadm). We have working in one of the previos project. This should work for you as well.

  ~ J

• Authentication of BI Publisher using IDM

  Hello

  I need authenticate users who connect in BI Publisher using IDM. The IDM and BI are installed on different areas and WebLogic servers. Here's what I've tried so far:

  1 created the custom authentication provider and it deployed in weblogic.

  2. as the passwords are stored in db are encrypted I need a way to decipher the password comes from the db. I use following code to decrypt the pass:

  String decryptedPass = tcCryptoUtil.decrypt(encryptedPass, "DBSecretKey");
  

  The code itself works fine in Eclipse. To make this work, I have included in the classpath:

  • all pots that are located in $IDM_HOME\modules\oracle.jps_11.1.1
  • oimclient.jar
  • In the run configuration added after the VM arguments (here is the domain IDM configurations):

  -Doracle.security.jps.config=D:\oracle\middleware\user_projects\domains\zus_domain\config\fmwconfig\jps-config.xml -DDOMAIN_HOME=D:\oracle\middleware\user_projects\domains\zus_domain
  

  Now, to make it work in WebLogic BI, I've added all the jars to the classpath in the setWLSEnv.cmd file:

  set JPS_DIR=D:\oracle\middleware\Oracle_IDM1\modules\oracle.jps_11.1.1
  set CLASSPATH=%CLASSPATH%;%JPS_DIR%\jacc-spi.jar;%JPS_DIR%\jps-api.jar;%JPS_DIR%\jps-az-api.jar;%JPS_DIR%\jps-az-common.jar;...
  

  Now when I try to authenticate:

  1 authenticator successfully retireves password stored in db.

  2. when I try to decrypt it using above code I get following error:

  ####<2015-04-09 10:01:34 CEST> <Error> <XELLERATE.ACCOUNTMANAGEMENT> <PSosinski> <AdminServer> 
  <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> 
  <<WLS Kernel>> <> <3759beab00426ccc:-3fe7b1ed:14c9d2d88c6:-8000-0000000000000017> <1428566494604> 
  <BEA-000000> <Class/Method: tcDefaultDBEncryptionImpl/initKeyStore encounter some problems: {1}
  java.lang.NullPointerException
    at com.thortech.xl.crypto.tcCryptoHelper.loadKeyStore(tcCryptoHelper.java:87)
    at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.initKeyStore(tcDefaultDBEncryptionImpl.java:67)
    at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.getCipher(tcDefaultDBEncryptionImpl.java:96)
    at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.encrypt(tcDefaultDBEncryptionImpl.java:193)
    at com.thortech.xl.crypto.tcCryptoUtil.encrypt(tcCryptoUtil.java:118)
    at com.thortech.xl.crypto.tcCryptoUtil.encrypt(tcCryptoUtil.java:275)
    at oracle.iam.platform.auth.impl.Authenticator.encrypt(Authenticator.java:185)
    at oracle.iam.platform.auth.impl.Authenticator.authenticateWithPassword(Authenticator.java:160)
    at oracle.iam.platform.auth.impl.Authenticator.authenticate(Authenticator.java:133)
    at oracle.iam.platform.auth.providers.wls.OIMAuthLoginModule.login(OIMAuthLoginModule.java:44)
    at com.bea.common.security.internal.service.LoginModuleWrapper$1.run(LoginModuleWrapper.java:110)
    at com.bea.common.security.internal.service.LoginModuleWrapper.login(LoginModuleWrapper.java:106)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
    at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
    at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683)
    at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
    at javax.security.auth.login.LoginContext.login(LoginContext.java:579)
    at com.bea.common.security.internal.service.JAASLoginServiceImpl.login(JAASLoginServiceImpl.java:113)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
    at $Proxy39.login(Unknown Source)
    at weblogic.security.service.internal.WLSJAASLoginServiceImpl$ServiceImpl.login(WLSJAASLoginServiceImpl.java:89)
    at com.bea.common.security.internal.service.JAASAuthenticationServiceImpl.authenticate(JAASAuthenticationServiceImpl.java:82)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
    at $Proxy57.authenticate(Unknown Source)
    at weblogic.security.service.WLSJAASAuthenticationServiceWrapper.authenticate(WLSJAASAuthenticationServiceWrapper.java:40)
    at weblogic.security.service.PrincipalAuthenticator.authenticate(PrincipalAuthenticator.java:348)
    at weblogic.servlet.security.internal.SecurityModule.checkAuthenticate(SecurityModule.java:251)
    at weblogic.servlet.security.internal.SecurityModule.checkAuthenticate(SecurityModule.java:200)
    at weblogic.servlet.security.internal.FormSecurityModule.processJSecurityCheck(FormSecurityModule.java:258)
    at weblogic.servlet.security.internal.FormSecurityModule.checkUserPerm(FormSecurityModule.java:213)
    at weblogic.servlet.security.internal.FormSecurityModule.checkAccess(FormSecurityModule.java:96)
    at weblogic.servlet.security.internal.ChainedSecurityModule.checkAccess(ChainedSecurityModule.java:79)
    at weblogic.servlet.security.internal.ServletSecurityManager.checkAccess(ServletSecurityManager.java:82)
    at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2213)
    at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2183)
    at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1454)
    at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
    at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
  > 
  

  Note, I did not provide HSD config or DOMAIN_HOME in the authenticator (to oppose the execution of the code in eclipse), run from the other area (probably not a good idea to change DOMAIN_HOME).

  Now the questions:

  1. advice on how to create the custom authenticator and make it work? IT seems that is missing a dependency. How do I provide all dependencies?

  2. perhaps there is already an authenticator can I download/use? I tried to copy OIMAutheticator that comes with the installation of the IDM. When I deployed in WebLogic BI it did not work properly (exceptions of mass).

  I was unable to run my custom authenticator who used libraries of IDM to authenticate in the domain BI Publisher. So I ended up with 2 different solutions and both work:

  1. I created another external application (jar file) used only to decrypt the passwords comes from idm using jdbc. Then I call the pot of my previously set authenticator - DDOMAIN_HOME pointing to IDM. In this way, the service of IDM is not required to run.

  2 OimClient is capable of recovering passwords of idm in regular form. Follow this link to learn more: Oracle stack: OIM 11 g R1: Getting IOM decrypted password for user

  Also be sure to create appropriate inside Enterprise Manager groups and their assigned custom roles as authenticators custom work only on WlsGroupImpl, WlsUserImpl.

• IOM audit report - missing attributes

  We run OIM 11 g R2 BP06 (under the production deployment). I work with the audit and report functions, as it is a requirement of the customer.

  According to the documentation of audit - 11 g Release 2 (11.1.2) Configuration, the UPA table contains all snapshots and changes made to the XML format. It works very well: if I update the name, phone number, never attribute, I see that change stored in the table of the UPA. The 'Audit Messages task question' will work then and dénormalisée delta of the XML in the UPA_FIELDS table, which is part of the table used by the BEEP report.

  However, it seems that some attributes are never denormalized (in UPA_FIELDS). This is for example the case for the phone number, display name. Modification of these attributes will be visible on the standard audit report.

  The question is: How do I configure IOM (I assume that the task "Question Audit Messages Task") If multiple attributes are denormalized in UPA_FIELDS and changes get visible in the reports?

  Thank you

  Didier.

  I found the answer on support (which is down this morning) in the present note:

  -The list of attributes that need to generate Audit records in the Table UPA_FIELDS (Doc ID 1401055.1)

  also, which refer to a bug, do not yet resolved and with no workaround:

  - BUG: 13626801 -all THE ATTRIBUTES do NOT COME to the TABLE of UPA_FIELDS

  In other words, it's a known :-(limitation

  The solution I see is to try to generate a report of BI Publisher UPA table directly AND XML-based. Not sure if this is possible.

  I thank me for the good support :-)

  Didier.

• IOM notification framework

  Hello
  I'm stuck at a certain point, as I am new to this.i tried framework of notification IOM, in which there is a process where we create for notification Solver java code and then save it to the IOM as plugin... in this java code must implement the oracle.iam.notification.impl.NotificationEventResolverinterface, I know not what jar file I should add in my class for this interface.please help path
  
  Kind regards
  Tushar

  It is in OIMServer.jar

  location:- server/apps/oim.ear/APP-INF/lib

  Thank you
  Patricia

  Published by: chick Patricia on 5 June 2013 05:51

• Created by IOM 11.1.1 Organization program

  Hi all
  
  We must programmatically create an organization to IOM. Can us someone guide how this can be done. I tried to insert a line directly in the Organization of data table, but the manually inserted organization does not appear on the list or in the interface of the IOM. So is there any other tabels, which need to be filled, or any provision in IOM api to create an organization.
  
  Thank you.
  
  --
  UZ

  Do not insert values directly in dB that you need to update several dependent tables in case you start to do this way. Check this thread for api available create an organization

  Establishment of organizations using the API, OIM 11 G

  Published by: khadija on 28 January 2013 01:20

• Can't remove the Manager field in AD by IOM 9.1

  Hello
  I'm removing the Manager for a user in the AD profile without changing the Manager ID in the profile of the IOM. I get error when I try to change the attribute Manager replacing a string NULL below.
  
  LDAP: code error 21-00000057: LdapErr: IDDM-OC090B8A, comment: error in the conversion of attribute operation, data 0, v1db1)
  
  
  I get the same error, even if I'm changing the Manager field in AD without changing the Manager field in the IOM.
  
  I try with the code below.
  
  BasicAttributes a = new BasicAttributes();
  at.put("Manager","");
  context.modifyAttribute(UserDN,2,at);
  
  What could be the reason for this error? Please help guys.
  
  Published by: User_OIM on December 27, 2012 19:06

  Create so first BasicAttribute object and then pass it inside the method could

  BasicAttributes a = new BasicAttributes();
  BasicAttribute ba = new BasicAttribute("manager");
  at.put (BA);
  context.modifyAttribute(UserDN,3,at);

• Error starting IOM server: IO exception

  Hello Experts,
  
  When starting oim_server1, I get the following error
  
  <>< WARNING > < JDBC > < BEA-001129 > < receipt exception
  creating connection to pool 'oimOperationsDB': IO error: network Ada
  pter could not establish the connection >
  
  Running list server, but does not
  
  FYI-in the weblogic administration console I see IOM server in running, but after goin to deployments in the oim_server1, I find that the IOM and IOM and OIM wsm psm metadata is in a failed State.
  
  Database also works very well, no problems in the database right now.
  
  Please suggest all steps as am a beginner.
  
  Kind regards.
  
  Published by: 958122 on November 20, 2012 22:37

  http://docs.Oracle.com/CD/E21764_01/doc.1111/e14308/handlinglcm.htm#CIAEHFFB
  http://docs.Oracle.com/CD/E21764_01/doc.1111/e14308/handlinglcm.htm#CIAEGICA

• Can't Ping IOM of Peoplesoft

  Hello
  
  IOM 11 GR 2
  
  Installed and configured Peoplesoft ER 11.1.1.5 connector
  When you try to ping from peoplesoft. We see the following error in IOM
  
  < 7 November 2012 12:43:31 PM CST > < error > < XELLERATE. ACCOUNTMANAGEMENT > < BEA-000000 > < class/method: tcDefaultSignatureImpl/initKeyStore some problems: access denied (context oracle.security.jps.service.credstore.CredentialAccessPermission = SYSTEM, mapName = IOM, keyName = default - read keystore.jks)
  java.security.AccessControlException: access denied (context oracle.security.jps.service.credstore.CredentialAccessPermission = SYSTEM, mapName = IOM, keyName = default - read keystore.jks)
  at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
  
  As stated in this link everything to connect on OIM 11 g using the private key error do we need to add entries of war PeopleSoftListener file in system-jazn-"Data.xml"? If yes what system-jazn-"Data.xml" we need to change. As this file exist in several locations.
  
  Pls Help
  
  Published by: 915071 on November 8, 2012 02:35

  How do you deployed the listener? You must deploy the listener through the ant script as mentioned in the guide of the connector. As a result, it ensure that the jazn.xml file that is updated with all grant them permissions to connect to the IOM of peoplesoft.

• .... Tables of IOM and SOA for new application roles

  Hello experts of the IOM, please help me. I need the list of database tables that updated when we submit the new roles demand. I need the updated tables by SOA and IOM during the presentation of the request and approval.
  
  Enjoy your great help.
  
  Thank you
  
  Published by: Jyothi on October 23, 2012 03:52

  As long as I can remember (may be a few others) is updated tables:
  IOM scheme: req, orc, usg, ugp, usr
  SOA-Infra SCHEMA: WFTASK, WFTASKHISTORY

  Kind regards
  GP

• Issue while deploying code that uses the api of the IOM: OIMClient

  We strive to deploy a war file with some java code that is interfaced with the IOM by using the api OIMClient. Note that we have all necessary spring pots and it works great on Tomcat. Our production env is on weblogic and when deploy us the file. War on weblogic deploys it fine. But when we test some web pages, we get the following error:
  
  Root cause]] of ServletException.
  java.lang.NoClassDefFoundError: org/springframework/jndi/JndiTemplate
  to oracle.iam.platform.OIMClient. < init > (OIMClient.java:83)
  ......
  Truncated. check the log file full stacktrace
  >
  
  
  The class file is available in a container called Spring framework with the same package structure: org.springframework.jndi.jnditemplate. I wonder why he cannot find the definition for this class. I also tried to delete these jars to war file and adding them to the lib dir field. I always find myself with the same exception.
  
  Appreciate all the help I can get.
  
  Published by: 958829 on Sep 12, 2012 23:01

  try to add the jar of spring separately to help:->-> deployments weblogic console add jars

• BI publisher

  Hi all
  
  
  I have a requirement of IOM 11.1.1.5 Audit logs. Someone tell me what is the Certified version of BI publisher for IOM 11.1.1.5
  
  
  
  Thank you
  Kumar

  See BEEP-OIM 11 g