ODSEE 11.1.1.5 to OUD 11.1.2.3 migration - need a good document for this

Similar Questions

• userPassword length

  Hello

  I know that maybe that's a simple question but not able to find any document for this.

  I want to know what is the max char I have to attribute "userPassword"? We run ODSEE 11.1.1.7.2 version on SLES11.

  If you know a link to document for the above please send me as well.

  Thank you

  Hello

  From a schematic point of view, it is possible to limit the length of the maximum value for a given attribute by specifying the length max {} however, right now, this constraint is not enforced

  by the Department diagram check engine.

  Sylvain

  Please mark this answer as correct or helpful, when it is appropriate to make it easier for others to find

• Sun DS 5.2 is compatible with OUD 11 GR 2 PS1 replication Gateway?

  Hello

  It is possible to synchronize a master Sun DS 5.2 with OUD 11 GR 2 PS1 uses a replication OUD gateway?

  If not, is it possible to configure replication between Sun DS 5.2 and ODSEE 11 GR 2 and then synchronize GR 11, 2 with OUD ODSEE through the gateway of replication OUD?

  Thank you.

  Thanks Sylvain!

  Richard

• Clarification: OUD entry get deleted when IOM user is deleted

  Hello

  We have activated the LDAP synchronization between IOM and the OUD (One way IOM-> OUD). We are 11 GR 2 PS2 and OUD 11gR2PS2

  When we create the user to the IOM, the user gets synchronized to the OUD.

  But what happens when the user is deleted? The entrance in OUD gets permanently deleted (no entry exists) or the record exist?

  Please provide details

  Thank you

  Yes, it should get deleted in OUD. Do you see a difference in behavior?

  This process copies the user IOM (add, modify, delete) changes for Oracle Internet Directory (OID) via Oracle Virtual Directory (OVD)

  https://identitydemystified.WordPress.com/2012/02/17/OIM-LDAP-sync/

  ~ J

• The OID of the Migration of OUD, hitting the problem with the attribute pwdhistory OUD

  The OID of the Migration of OUD, hitting the problem with the attribute pwdhistory OUD

  I use sync DIP at the end of migration of data from OID for target OUD. Everything seems great so far, I have found that pwdhistory being migrated is not being validated by OUD password policy

  I do import ldif for OUD and find this pwdhistory field is populated with the same OID value. When I reset password in OUD-DOHAD with the word in the history of password,.

  Expected Behavior: Error Message from the OUD "" LDAP: error code 20 - already the value of specified password exists in the user input " "

  Course Behavior: OUD is what allows to reset the password in the password history

  Also found that when I try again with the same password, then it throws the error 20 code. OUD replaces the old values in pwdhistory after the password resets and written new values with stamp of password.

  It is a Blocker for us for migration in the history of password, I would like to join the forum and check if someone had the same problem and how they managed it?

  Thank you

  Satya

  Support of Oracle confirmed that DIO history for the OUD password migration is not supported. The OID and OUD records and validates the pwdhistory differently

• Application of ID ODSEE connector Patch

  Hello everyone

  We use the connector 11.1.1.6 LDAP in IOM 11.2.2 version. The target is SunOne, and we use it in the format ODSEE.

  Now, we see a problem where even if the user is disabled in the target and if we run "LDAP Trusted réconciliation" the user is not be disabled in IOM. All of the required attributes - enabledAttribute, enabledValue and disabledValue enabledWhenNoAttribute are all correctly.

  After a search, my colleague told me that there is a patch for this bug. Can someone tell me the number of bug or patch of this solution or any other information that is useful to me?

  Thanking you in advance.

  Sandeep

  Not very sure but just check if last BP solves your problem.

  Bundle Patch number: 11.1.2.2.5

  My Patch Support Oracle number: Patch: 19718347 (Release Date: January 20, 2015). It is a Suite Bundle Patch with IOM OPatch Version # 19787058.

  ~ J

  Please check the response as useful or correct when it is appropriate to make it easier for others to find

• WLST Script to create the domain weblogic for IOM and OAM

  Hello

  I intend to set up PS3 IOM - OAM in the new environment. We intend to perform the installation in silent mode. Does anyone have example WLST to create the domain weblogic for IOM or OAM?

  Thank you

  Here is an example of OUD. I post this one since it's the simplest and shortest, but it is the same for OAM and IOM except that the script is much longer because they ask a lot more questions. You will need to export the variables used or replace them with the appropriate values for your system.

  wait-<>

  the value of timeout 600

  spawn ${OUD_BASE}/${WLS_NAME}/common/bin/config.sh mode = console

  # Create a WebLogic domain

  wait {}

  {"Enter the index number to select GOLD *" {send "1\n"}}

  # Choose the components of the Weblogic Platform

  wait {}

  {"Enter the index number to select GOLD *" {send "1\n"}}

  # | ___Oracle directory Services Manager - 11.1.2.3.0 [Oracle_OUD1] [3]

  wait {}

  {"Enter number exactly as it appears in the media *" {send "3\n"}}

  wait {}

  {"Enter number exactly as it appears in the media *" {send "n"}}

  # Change the domain information

  wait {}

  "" Enter the value of * "{send" ${OUD_DOMAIN_NAME} \n "}}"

  wait {}

  {"Enter the number of the option to select GOLD *" {send "n\n"}}

  # Select the target area for this domain directory

  wait {}

  {'Enter' new target location GOLD * {send "${OUD_BASE} / user_projects/domains\n"}}

  wait {}

  {'Enter' new target location GOLD * {send "n\n"}}

  # Configure password and username administrator

  wait {}

  {"Enter the number of the option to select GOLD *" {send "2\n"}}

  wait {}

  "" Enter new * "{send" ${WLS_PASS} \n "}}"

  wait {}

  {"Enter the number of the option to select GOLD *" {send "3\n"}}

  wait {}

  "" Enter new * "{send" ${WLS_PASS} \n "}}"

  wait {}

  {"Enter the number of the option to select GOLD *" {send "n\n"}}

  # Configuration mode field-> 1 | Development mode

  wait {}

  {"Enter the index number to select GOLD *" {send "1\n"}}

  # Java SDK selection

  wait {}

  {"Enter the index number to select GOLD *" {send "2\n"}}

  wait {}

  {'Enter' new JVM Directory GOLD * {send "${JAVA_HOME} \n"}}

  wait {}

  {'Enter' new JVM Directory GOLD * {send "n\n"}}

  # Select Optional Configuration

  wait {}

  {"Enter the index number to select GOLD *" {send "1\n"}}

  wait {}

  {"Enter the index number to select GOLD *" {send "n"}}

  # Configure the Administration Server

  # Change "Listen port.

  wait {}

  {"Enter the number of the option to select GOLD *" {send "3\n"}}

  wait {}

  "" Enter the value of * "{send" ${ODSM_PORT} \n "}}"

  # Change 'SSL enabled.

  wait {}

  {"Enter the number of the option to select GOLD *" {send "4\n"}}

  wait {}

  {"Enter the index number to select GOLD *" {send "1\n"}}

  # Change 'SSL listening Port.

  wait {}

  {"Enter the number of the option to select GOLD *" {send "4\n"}}

  wait {}

  "" Enter the value of * "{send" ${ODSM_SPORT} \n "}}"

  # Then

  wait {}

  {"Enter the number of the option to select GOLD *" {send "n\n"}}

  # wait for install

  wait {}

  {"Successfully created * field *" {send "\n"}}

  EXPRESSIONS OF FOLKLORE

• ODS 11 g ds5BeginReplicaAcceptUpdates

  Hello

  ODS 11 g 11.1.1.7.0 on solaris10_x64 platform. 1.6.0_45 Java, tomcat 6.0_35 to DSCC.

  I'm in the process of construction of the new directory servers. I serve it built okay and I can configure replication. Seems to be running into a problem with references after initialization.

  Warning this configuration server will refer updates customer for replica $SUFFIX indefinitely

  Documentation, it seems that I have to do something in the sense of:

  ldapmodify h 389 - D cn = Server Pei manager w-

  DN: cn = replica, cn = "$SUFFIX", cn = tree of mapping, cn = config

  ChangeType: modify

  Add: ds5BeginReplicaAcceptUpdates

  ds5BeginReplicaAcceptUpdates: start

  However, any command ldapmodify I try to deliver fails.

  Attempt to use SSL I get

  Failed to initialize SSL: error-8174 (security library: bad database.) even though I am specifying the database correctly.

  ldapsearch seems to work correctly with a minimum of options.

  Is there another method of definition of this attribute or otherwise allowing updates?

  See you soon

  Hello

  I guess that you are referring to the doc below:

  
  10265: this server will refer updates customer for replica name indefinitely

  Cause:

  This provider has recently been initialized for this replica. As a preventive measure, it comes to updates of the client to ensure that it is updated by all teachers on the topology, with all the missing changes before starting to accept updates.

  Solution:

  The server will not start accepting updates customer until you add or replace the attribute ds5BeginReplicaAcceptUpdates inside thecn = replica entry for this replica with the value Start. Before making the change, check that the server is updated in terms of replication and it missed any changes previously native to this server before it has been initialized.

  Regarding ldapmodify question. Do you use the ldapmodify supplied with Solaris or one that comes with ODSEE (in dsrk/dsee7/bin)?

  Did you try to make this change on the plaintext LDAP port (389)?

  You rprovide the eaxct could you order of cause and the error you got?

  Sylvain

  ------

  When closing a thread as answered don't forget to mark the messages correct and useful to make it easier for others to find their

• Change after the addition of custom attribute

  Hello

  I use OIM R2 PS1 and the commissioning of OUD user via the connector.

  Depending on the condition, I added a new custom attribute "HomePhone". However, the value of attribute for this attribute is only pushed for the newly created user. For a user (prior to adding the custom attribute), the attribute values runs not more than on the side of the OUD.

  Is there a planner that I need to run?

  Thank you, John

  Hello

  I'm sure that you have not finished the second part of the extension of connector - "Configurations to achieve synchronization app downstream." However, you mentioned that you don't see a problem with the new user, however if you update the value of the attribute, it does not flow down to OUD, as older users.

  Please go through the link: extend the functionality of the connector

  The steps would be - creating new tasks within the definition of processes, mapping, etc..

  Thank you.

• The step of INSTALLATION fails when you use IAM Deployment Wizard

  Hello

  I am making an enterprise deployment by using the IDMLCM tool by following the Enterprise for Oracle Identity and Access Management Deployment Guide (http://docs.oracle.com/cd/E40329_01/doc.1112/e48618/toc.htm).

  I completed the PREVERIFY step on each node (iamhost1, iamhost2, webhost1, webhost2) successfully but did not step in the INSTALLATION when you run the following command on the first node (iamhost1):

  runIAMDeployment.sh - $IDMLCM_HOME/provisioning/bin/provisioning.rsp - ignoreSysPrereqs true - target responsefile install

  I can't understand the reason according to the runIAMDeployment - install.log.

  Help, please.

  Thank you and best regards.

  Here is the log:

  ……………

  [2014-08 - 07T 07: 30:06.545 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [] [runIAMDeployment-install] [tid: 10] [ecid: 0000KUhe6KcD ^ a05zzK6yW1Jsfds000001, 0] start the installation process for Identity Management Suite...

  [2014-08 - 07T 07: 30:06.594 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [] [runIAMDeployment-install] [tid: 10] [ecid: 0000KUhe6KcD ^ a05zzK6yW1Jsfds000001, 0] [logStatus] STATE = BUILD_ERROR! TIMESTAMP = 2014-08-07 07:30:06 CST! TARGET = install! CATEGORY = BUILD_ERROR! DOMAIN = NONE! Host name = iamhost1! PRODUCTFAMILY = orchestration. PRODUCT = orchestration. TASK = canPhaseStartOnThisHost! TaskID = orchestration.orchestration.BUILD_ERROR. Install.canPhaseStartOnThisHost! MESSAGE = installation phase has failed on this host: iamhost1. To re - run this phase on this host, run first install cleanup and restoration-install. ! DETAIL = installation phase has failed on this host: iamhost1. To re - run this phase on this host, run first install cleanup and restoration-install. ! BUILDFILE=/U02/Oracle/middleware/Oracle_IDMLCM1/provisioning/IDM-provisioning-build/IDM-orchestration-build.XML! LINENUMBER = 97!

  [2014-08 - 07T 07: 30:06.596 + 08:00] [runIAMDeployment - install] [ERROR] [FAPROV-00298] [runIAMDeployment - install] [tid: 10] [ecid: 0000KUhe6KcD ^ a05zzK6yW1Jsfds000001, 0] year Error occurred: []

  The installation phase has failed on this host: iamhost1. To re - run this phase on this host, run first install cleanup and restoration-install.

  at oracle.apps.fnd.provisioning.ant.taskdefs.CanPhaseStartOnThisHostTask.checkIfPhaseCanStartOnCurrentHost(CanPhaseStartOnThisHostTask.java:190)

  at oracle.apps.fnd.provisioning.ant.taskdefs.CanPhaseStartOnThisHostTask.checkIfPhaseCanStart(CanPhaseStartOnThisHostTask.java:218)

  at oracle.apps.fnd.provisioning.ant.taskdefs.CanPhaseStartOnThisHostTask.eval(CanPhaseStartOnThisHostTask.java:73)

  at oracle.apps.fnd.provisioning.ant.taskdefs.CanPhaseStartOnThisHostTask.executeTask(CanPhaseStartOnThisHostTask.java:61)

  at oracle.apps.fnd.provisioning.ant.taskdefs.BaseProvisioningTask.execute(BaseProvisioningTask.java:106)

  at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:288)

  at sun.reflect.GeneratedMethodAccessor1.invoke (unknown Source)

  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

  at java.lang.reflect.Method.invoke(Method.java:597)

  at org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:106)

  at org.apache.tools.ant.Task.perform(Task.java:348)

  at org.apache.tools.ant.taskdefs.Sequential.execute(Sequential.java:62)

  at net.sf.antcontrib.logic.IfTask.execute(IfTask.java:217)

  at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)

  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

  at java.lang.reflect.Method.invoke(Method.java:597)

  at org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:106)

  at org.apache.tools.ant.TaskAdapter.execute(TaskAdapter.java:154)

  at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:288)

  at sun.reflect.GeneratedMethodAccessor1.invoke (unknown Source)

  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

  at java.lang.reflect.Method.invoke(Method.java:597)

  at org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:106)

  at org.apache.tools.ant.Task.perform(Task.java:348)

  at org.apache.tools.ant.Target.execute(Target.java:357)

  at org.apache.tools.ant.Target.performTasks(Target.java:385)

  at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1337)

  at org.apache.tools.ant.Project.executeTarget(Project.java:1307)

  at org.apache.tools.ant.helper.DefaultExecutor.executeTargets(DefaultExecutor.java:41)

  at org.apache.tools.ant.Project.executeTargets(Project.java:1191)

  at org.apache.tools.ant.Main.runBuild(Main.java:758)

  at org.apache.tools.ant.Main.startAnt(Main.java:218)

  at org.apache.tools.ant.launch.Launcher.run(Launcher.java:257)

  at org.apache.tools.ant.launch.Launcher.main(Launcher.java:104)

  ]]

  [2014-08 - 07T 07: 30:06.663 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [] [runIAMDeployment-install] [tid: 10] [ecid: 0000KUhe6KcD ^ a05zzK6yW1Jsfds000001, 0] [logStatus] STATE = BUILD_ERROR! TIMESTAMP = 2014-08-07 07:30:06 CST! TARGET = listener-journal-status-in-error! CATEGORY = install! DOMAIN = NONE! Host name = iamhost1! PRODUCTFAMILY = orchestration. PRODUCT = orchestration. TASK = install! TaskID = orchestration.orchestration.None.Listener - journal-status-in - error.NONE! MESSAGE = ERROR! DETAIL = installation phase has failed on this host: iamhost1. To re - run this phase on this host, run first install cleanup and restoration-install. ! BUILDFILE=/U02/Oracle/middleware/Oracle_IDMLCM1/provisioning/provisioning-build/listener-build.XML! LINENUMBER = 65!

  [2014-08 - 07T 07: 30:06.664 + 08:00] [runIAMDeployment - install] [ERROR] [] [runIAMDeployment-install] [tid: 10] [ecid: 0000KUhe6KcD ^ a05zzK6yW1Jsfds000001, 0] the installation phase has failed on this host: iamhost1. To re - run this phase on this host, run first install cleanup and restoration-install.

  [2014-08 - 07T 07: 30:06.670 + 08:00] [runIAMDeployment - install] [ERROR] [] [runIAMDeployment-install] [tid: 10] [ecid: 0000KUhe6KcD ^ a05zzK6yW1Jsfds000001, 0] BUILD FAILED []

  /U02/Oracle/middleware/Oracle_IDMLCM1/provisioning/IDM-provisioning-build/IDM-orchestration-build.XML:97: the installation phase has failed on this host: iamhost1. To re - run this phase on this host, run first install cleanup and restoration-install.

  ………………

  $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

  I made some change and do it again and this time I got the error "installation OUD failed.". Any suggestion?

  --------------------

  [2014-08 - 07T 12: 44:52.652 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [] [runIAMDeployment-install] [tid: 12] [ecid: 0000KUimAkgD ^ a05zzK6yW1JskGa000003, 0] [exec] Starting Oracle Universal Installer...

  [2014-08 - 07T 12: 44:52.655 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [] [runIAMDeployment-install] [tid: 12] [ecid: 0000KUimAkgD ^ a05zzK6yW1JskGa000003, 0] [exec]

  [2014-08 - 07T 12: 44:52.656 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [] [runIAMDeployment-install] [tid: 12] [ecid: 0000KUimAkgD ^ a05zzK6yW1JskGa000003, 0] [exec] check if the CPU speed is greater than 300 MHz.    Real MHz 2693 spent

  [2014-08 - 07T 12: 44:52.657 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [] [runIAMDeployment-install] [tid: 12] [ecid: 0000KUimAkgD ^ a05zzK6yW1JskGa000003, 0] [exec] space Temp checking: must be greater than 150 MB.   Real 1502 MB passed

  [2014-08 - 07T 12: 44:52.658 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [] [runIAMDeployment-install] [tid: 12] [ecid: 0000KUimAkgD ^ a05zzK6yW1JskGa000003, 0] [exec] checking swap space: 511 MB of available space, 512 MB required.    Failure of < < < <

  [2014-08 - 07T 12: 44:52.659 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [] [runIAMDeployment-install] [tid: 12] [ecid: 0000KUimAkgD ^ a05zzK6yW1JskGa000003, 0] [exec]

  [2014-08 - 07T 12: 44:52.661 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [] [runIAMDeployment-install] [tid: 12] [ecid: 0000KUimAkgD ^ a05zzK6yW1JskGa000003, 0] [exec] some requirement checks failed. You must meet these conditions before

  [2014-08 - 07T 12: 44:52.662 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [] [runIAMDeployment-install] [tid: 12] [ecid: 0000KUimAkgD ^ a05zzK6yW1JskGa000003, 0] [exec]

  [2014-08 - 07T 12: 44:52.663 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [] [runIAMDeployment-install] [tid: 12] [ecid: 0000KUimAkgD ^ a05zzK6yW1JskGa000003, 0] [exec] to continue installation.

  [2014-08 - 07T 12: 44:52.665 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [] [runIAMDeployment-install] [tid: 12] [ecid: 0000KUimAkgD ^ a05zzK6yW1JskGa000003, 0] [exec]

  [2014-08 - 07T 12: 44:52.666 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [] [runIAMDeployment-install] [tid: 12] [ecid: 0000KUimAkgD ^ a05zzK6yW1JskGa000003, 0] [exec]

  [2014-08 - 07T 12: 44:52.667 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [] [runIAMDeployment-install] [tid: 12] [ecid: 0000KUimAkgD ^ a05zzK6yW1JskGa000003, 0] [exec] output Oracle Universal Installer, journal for this session can be found at /u02/oracle/product/11.1.2.2.0/idmtop/products/dir/oraInventory/logs/installActions2014-08-07_12-44-52PM.log

  [2014-08 - 07T 12: 44:52.694 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [] [runIAMDeployment-install] [tid: 10] [ecid: 0000KUim3M7D ^ a05zzK6yW1JskGa000001, 0] [logStatus] STATE = BUILD_ERROR! TIMESTAMP = 2014-08-07 12:44:52 CST! TARGET = listener-journal-status-in-error! Category = Run.Oui! DOMAIN = NONE! Host name = iamhost1! PRODUCTFAMILY = orchestration. PRODUCT = orchestration. Task = Run.Oui! TaskID = orchestration.orchestration.None.Listener - journal-status-in - error.NONE! MESSAGE = ERROR! DETAIL = exec returned: 255! BUILDFILE=/U02/Oracle/product/11.1.2.2.0/idmlcm/Oracle_IDMLCM1/provisioning/provisioning-build/listener-build.XML! LINENUMBER = 65!

  [2014-08 - 07T 12: 44:52.696 + 08:00] [runIAMDeployment - install] [ERROR] [] [runIAMDeployment-install] [tid: 10] [ecid: 0000KUim3M7D ^ a05zzK6yW1JskGa000001, 0] exec returned: 255

  [2014-08 - 07T 12: 44:52.702 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [] [runIAMDeployment-install] [tid: 10] [ecid: 0000KUim3M7D ^ a05zzK6yW1JskGa000001, 0] [logStatus] STATE = BUILD_ERROR! TIMESTAMP = 2014-08-07 12:44:52 CST! TARGET = install idm! CATEGORY = OUD! DOMAIN = NONE! Host name = iamhost1! PRODUCTFAMILY = orchestration. PRODUCT = orchestration. TASK = installation OUD! TaskID = orchestration.orchestration.None.Install - idm.NONE! MESSAGE =! DETAIL = OUD installation does not succeed. ! BUILDFILE=/U02/Oracle/product/11.1.2.2.0/idmlcm/Oracle_IDMLCM1/provisioning/provisioning-build/common-Misc-build.XML! LINENUMBER = 108!

  [2014-08 - 07T 12: 44:52.708 + 08:00] [runIAMDeployment - install] [ERROR] [] [runIAMDeployment-install] [tid: 10] [ecid: 0000KUim3M7D ^ a05zzK6yW1JskGa000001, 0] OUD installation is unsuccessful.

  [2014-08 - 07T 12: 44:52.719 + 08:00] [runIAMDeployment - install] [ERROR] [] [runIAMDeployment-install] [tid: 10] [ecid: 0000KUim3M7D ^ a05zzK6yW1JskGa000001, 0] BUILD FAILED []

  /U02/Oracle/product/11.1.2.2.0/idmlcm/Oracle_IDMLCM1/provisioning/IDM-provisioning-build/IDM-orchestration-build.XML:102: the following error occurred during the execution of this line:

  /U02/Oracle/product/11.1.2.2.0/idmlcm/Oracle_IDMLCM1/provisioning/IDM-provisioning-build/IDM-orchestration-build.XML:416: the following error occurred during the execution of this line:

  /U02/Oracle/product/11.1.2.2.0/idmlcm/Oracle_IDMLCM1/provisioning/IDM-provisioning-build/IDM-orchestration-build.XML:528: the following error occurred during the execution of this line:

  /U02/Oracle/product/11.1.2.2.0/idmlcm/Oracle_IDMLCM1/provisioning/IDM-provisioning-build/IDM-orchestration-build.XML:530: the following error occurred during the execution of this line:

  /U02/Oracle/product/11.1.2.2.0/idmlcm/Oracle_IDMLCM1/provisioning/IDM-provisioning-build/IDM-orchestration-build.XML:541: the following error occurred during the execution of this line:

  /U02/Oracle/product/11.1.2.2.0/idmlcm/Oracle_IDMLCM1/provisioning/IDM-provisioning-build/Oud-build.XML:62: the following error occurred during the execution of this line:

  /U02/Oracle/product/11.1.2.2.0/idmlcm/Oracle_IDMLCM1/provisioning/IDM-provisioning-build/Oud-build.XML:519: the following error occurred during the execution of this line:

  /U02/Oracle/product/11.1.2.2.0/idmlcm/Oracle_IDMLCM1/provisioning/provisioning-build/common-Misc-build.XML:110: installation of the OUD is unsuccessful.

  Total duration: 31 seconds

  ]]

  [2014-08 - 07T 12: 44:52.742 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [FAPROV-01281] [runIAMDeployment - install] [tid: 13] [ecid: 0000KUimAm6D ^ a05zzK6yW1JskGa000004, 0] token of guard of phase of creation in closing bracket.

  [2014-08 - 07T 12: 44:52.744 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [FAPROV-01073] [runIAMDeployment - install] [tid: 13] [ecid: 0000KUimAm6D ^ a05zzK6yW1JskGa000004, 0] [arg: u02/oracle/product/11.1.2.2.0/idmlcm/Oracle_IDMLCM1/provisioning/phaseguards/install-iamhost1-FAILED.grd] changing permissions recursively for u02/oracle/product/11.1.2.2.0/idmlcm/Oracle_IDMLCM1/provisioning/phaseguards/install-iamhost1-FAILED.grd. This may take some time...

  [2014-08 - 07T 12: 44:52.748 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [FAPROV-01074] [runIAMDeployment - install] [tid: 13] [ecid: 0000KUimAm6D ^ a05zzK6yW1JskGa000004, 0] Permissons changed.

  [2014-08 - 07T 12: 44:52.749 + 08:00] [runIAMDeployment - install] [NOTIFICATION] [FAPROV-01197] [runIAMDeployment - install] [tid: 13] [ecid: 0000KUimAm6D ^ a05zzK6yW1JskGa000004, 0] wrote guard phase file /u02/oracle/product/11.1.2.2.0/idmlcm/Oracle_IDMLCM1/provisioning/phaseguards/install-iamhost1-FAILED.grd

  Apparently, the OUD Installer fails on:

  Check the swap space: 511 MB of available space, 512 MB required.  Failed

  Check your swapspace and try again.

• Keystore password

  After execution of oud-installation by selecting the choice to create a self-signed certificate, I'm guessing that this cert goes into INSTANCE/config/keystore

  What is the password for this key file? At no time I was invited for one and none of the defaults work (changeit, Climat, password, password Directory Manager)

  Advice would be appreciated! Thank you

  Hello

  Some passwords are generated during installation and are stored in /OUD/config/in files of pins and correspond to the respective store.

  They can be used (and changed) with keytool as described in configuration security between Clients and servers - 11 g Release 2 (11.1.2)

  Sylvain

• Managing Director and structures not dishes user/group

  Hello, I am trying to build a directory structure with several containers under an organization allowing to memorize the different portions of userdata and group data (i.e. not only UO = unit of organization and people = group, but also a few UO like them). Server software is 7u2 OUCS release. Users in 'other' containers are filled in LDAP (ODSEE 11) by replication, filling the same attributes as a freshly created account by DA has.
  
  The delegated administration interface and other parts of the software accept this and work well with this configuration, the user information display, which allows connections and so forth - with the exception of attempts to change the user accounts in the containers of spare in the DA (add/remove application solutions, change quotas, etc.). First of all, I checked that it is not a LDAP problem - I use both ldapmodify command line and a GUI LDAPBrowser to edit the entries with no hiccups.
  
  I followed him that when you try to save the account information for the accounts in non-standard containers, the DA try always to use a path hardcoded (i.e. uid = username, ou = people, o = DOMAINNAME, dc = DOMAIN, dc = NAME) despite the fact that the user account is (and DA displays of) uid = USER name, or = morePeople, o = DOMAINNAME dc = DOMAIN, dc = NAME.
  
  Eventually, this "hard code" follows DA configuration in WEB-INF/classes/sun/comm/cli/server/servlet/serverconfig.properties that the list of parts of the LDAP structure:
  
  #############################################################################
  #
  # Ldap configuration.
  # List of hosts from ldap. Form is < ldaphost >: < PortNumber >. (By default the port = 389)
  # Add additional hosts with ldaphost - < number >
  # Schema type is '1' or '2 '.
  # Reconnect interval is in seconds
  # Group and people container is dn of dn (for example ou = people) Organization
  #
  #############################################################################
  ldaphost-1 = oucsldap01:389
  ldaphost-2 = oucsldap02:389
  ldaphost-suffix = dc = DOMAIN, dc = NAME
  ldaphost-dcsuffix = dc = DOMAIN, dc = NAME
  ldaphost-maxcount = 50
  ldaphost-schematype = 2
  ldaphost-reconnectinterval = 60
  peoplecontainer ldaphost = or = People
  groupcontainer ldaphost = or = Groups
  ldaphost-orgadminrole = cn = Admin role organization
  #####
  
  While the root of organization dn is not explicit here (and shouldn't be), the container of default people is... I could guess a logical programming error like this: indeed, the 'or = People' container should be used by default when you create a user through the DA; as likely a mistake, it could also be used when editing existing users - instead of their full DN/existing parent DN.
  
  Issues related to the:
  
  (1) anyone have a working configuration with several containers of user/group in an organization like this? Would you care to share details and solutions, if he had to?
  
  (2) I think that the 'field/organization shared hosting' mode might help here - at least it is planned to have several LDAP trees with their Managing Directors as a single e-mail domain. Before I go and reconfigure everything, I'd like to hear if there are stories of success with this route? It is a good solution (or solution) for this config?
  
  Thank you
  Jim Klimov

  I wanted to follow that reconfigure the directory structure according to domain hosting, with branches for SIE-synchronized accounts as one of the organizations which share the domain secondary and manually created accounts only OUCS being in another subsidiary organization. This method works for messaging components and the DA, as user ID are in OU = people in their organization. A little unfortunately, SIE config seems to allow only a single branch of target Department and set up groups (CN) here as well. Well, for our needs change the attributes of the user and application solutions via DA, that's enough. Sometimes, there are misfires (cannot save changes), but they are intermittent and more difficult to debug trace. usually disappear with the restart of the web container DA. Department LDAP instances are configured with plugins to apply the uniqueness of uid in the entire organization and the uniqueness of the values of the email messaging address attributes (mail, mailAlternateAddress, mailEqiuvalentAddress) in order to avoid setbacks between user accounts in different branches.

  Also, we had a problem with the calendar server after migrating LDAP entries: since our deployment used the nsUniqueID for identification of calendar user, relocation of entries (as we did) generated new values for new entries and users got new databases empty caledar. It wasn't a major problem on this POC and latest releases OUCS with a davUniqueID attribute must be specifically immune to this problem. However, for the other trodding this way I can suggest that they export the LDAP database in LDIF, including unique identifiers, re-create the suffixes if necessary (the Organization SIE in Department target should be a separate suffix of LDAP database), edit the LDIF entry path and import the LDIF anew. This would erase the old LDAP data and should add nsUniqueIDs old entries moved unlike (recreation via ldapadd) or relocation via a ldapmodrdn.

  We also hit a problem with DA refusing to return the list of accounts (that returns 0 or 25 empty entries in a table). LDAP logs showed that the Protocol LDAP side everything is ok, and expected responses amount was. Boss research often produced good food with a subset of users in da end, we linked the problem to binary EIS encoded base64 attributes (dspswuserlink and al.; some of these values as output garbaged commadmin queries in a terminal) and created an LDAP ACI, which forbade all our DA-admin user to read, to search compare these attributes. This solved the problem for us. I wonder if a more generic solution is possible, to apply this ACI not to a user explicitly named admin, but to all users with administrator privileges of DA (by group or role? what channel to cover them all in advance)? Or, perhaps, no one except the user account of EIS should see these attributes SIE?

  Hope this report helps others who are experimenting at the forefront of this road to integration of messaging

  Jim Klimov

• can we use OID 11 GR 1 material with the OAM/OIM 11 g 2

  Hello
  I install IdM 11 GR 2. As OID is not equipped with this pack. so can we use/install the OID that comes with the IdM 11 GR 1 material.
  
  Or y at - it another option as the OUD.
  
  We can integrate the OUD 11 GR 2 with the OIM/OAM 11 g 2 to manage users/groups. ? If so, please share any document for it.
  
  Please suggest the best option because we learn OIM/OIM 11 GR 2.
  
  Thank you
  Harry
  
  Published by: Harry-Harry on January 28, 2013 12:59 AM
  
  Published by: Harry-Harry on January 28, 2013 01:10

  Hello
  OID 11.1.1.5.0 + can support IDM11gR2. Please see the matrix below IDM products certification.

  http://www.Oracle.com/technetwork/middleware/ID-Mgmt/identity-accessmgmt-11gr2certmatrix-1714221.xls

  Kind regards
  Kishore

• Return of OUD to ODSEE data migration

  Hi guys,.

  I work with one of my clients on the migration of a bunch of parameters ODSEE of OUD. During deployment, we arrived at the front door running and everything was fine runnign as it should.

  For some unknown reason, however, the ODSEE suddenly began to refuse updates, and we therefore found ourselves in a scenario where the OUD had data more specific that would be rejected by the ODSEE through the gateway of the replication.

  We wanted to reset the ODSEE with the OUD data form, but that there is the ds2oud tool and the export of substances on the side of ODSEE, y at - it an option or a tool for generating a LDIF friendly ODSEE?

  Thank you very much

  Olivier. /.

  A more information: currently there is no tool to adjust entries OUD reimport them in Department and keep the replication metadata.

  An option would still be to export entries to OUD (export-ldif) and use the-e option to filter the attributes of replication metadata specific oud.

  OUD exposes the entryUUID. Which equals ODSEE nsUniqueId, but the format of the value is slightly different, so the nsUniqueId will need to be adapted with a script.

  Sylvain

  ------

  When closing a thread as answered don't forget to mark the messages correct and useful to make it easier for others to find their

• ODSEE DPS vs OUD DPS

  Hello

  As Oracle push to upgrade OUD, could you please let me know how DPS of OUD stands against DPS in ODSEE. It contains all the features from the previous version? Any suggestions?

  In our facility, we have widely most of the features than those offered by ODSEE.

  Thank you, Pamela

  Hello

  DPS connection manager is OUD network groups. See understanding Oracle unified directory Concepts and Architecture - 11 g Release 2 (11.1.2)

  Load Balancing is available here: http://docs.oracle.com/cd/E37116_01/admin.111210/e22648/proxy_functionality.htm#solLOAD-BAL_BLOCK

  Pools of connections match the properties of the elements of LDAP Server workflow documented here: http://docs.oracle.com/cd/E37116_01/admin.111210/e22648/proxy_config.htm#solCONFIGURING-AN-LDAP-PROXY

  HTH

  Sylvain