7 Replies Latest reply: Nov 16, 2012 12:47 AM by IDM_newbie RSS

    OIM 11gR2 : AD tarhet recon account not linked

    IDM_newbie
      Hello Experts,

      I ran AD user target recon for a single user. The event is getting generated and the user details are being fetched successfully but when i open the Accounts tab (after searching for the reconciled user) in Self Service console, i am not able to see the AD account being linked to this user. Over there no record is getting displayed.
      Kindly Help.
        • 1. Re: OIM 11gR2 : AD tarhet recon account not linked
          Kevin Pinsky
          Did you click the Create Reconciliation Profile on the resource object reconciliation tab?

          -Kevin
          • 2. Re: OIM 11gR2 : AD tarhet recon account not linked
            Dhananjay Neeraj2
            Means Events are not getting linked automatically...

            In 10G days, we used to execute following query

            Update obj set obj_recon_sequence = 0 where obj_name='AD User'

            You may try that... After firing this query, Create Recon Profile again...
            • 3. Re: OIM 11gR2 : AD tarhet recon account not linked
              IDM_newbie
              Hello,

              I did create the reconciliation profile. Also, i have created the Application instance for AD in OIM. I ran the recon job, the data is getting fetched properly as shown by the Reconciliation Data section of the Event Details section.
              But following are the observations :

              1. In the Event section of the Event Details page Current Status is displayed as Creation Failed.

              2. In the Linked To section following values are present :
              Linked User +<user initials>+ - null
              Linked By +<nothing is displayed>+
              Linked Account ID +<nothing is displayed>+
              Account Description +<nothingis displayed>+

              Also, when i searched for the reconciled user in the OIM Web Console, i was able to find the user but upon navigating to the Accounts tab to see the accounts linked to the user i could not find any data.

              Kindly help resolve this.

              Edited by: IDM_newbie on Nov 14, 2012 9:37 PM
              • 4. Re: OIM 11gR2 : AD tarhet recon account not linked
                Gyanprakash Pandey
                Click on re-evaluate rules on evetn page and put the logs here.

                regards,
                GP
                • 5. Re: OIM 11gR2 : AD tarhet recon account not linked
                  IDM_newbie
                  I clicked on Reevaluate Event and the Current Status lable showed Data Validation Failed and the folllowing log trace showed up :

                  oracle.iam.reconciliation.exception.InvalidEventException: The reconciliation event 64,702 is already linked at oracle.iam.reconciliation.impl.AccountHandler.checkEvent(AccountHandler.java:528) at oracle.iam.reconciliation.impl.AccountHandler.applyRule(AccountHandler.java:222) at oracle.iam.reconciliation.impl.AccountHandler.process(AccountHandler.java:216) at oracle.iam.reconciliation.impl.ActionEngine.processEvent(ActionEngine.java:169) at oracle.iam.reconciliation.impl.ActionEngine.processEvent(ActionEngine.java:135) at oracle.iam.reconciliation.impl.ActionEngine.execute(ActionEngine.java:93) at oracle.iam.reconciliation.impl.ActionTask.execute(ActionTask.java:73) at oracle.iam.platform.async.impl.TaskExecutor.executeUnmanagedTask(TaskExecutor.java:99) at oracle.iam.platform.async.impl.TaskExecutor.execute(TaskExecutor.java:69) at oracle.iam.platform.async.messaging.MessageReceiver.onMessage(MessageReceiver.java:68) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310) at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182) at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149) at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89) at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed
                  • 6. Re: OIM 11gR2 : AD tarhet recon account not linked
                    Gyanprakash Pandey
                    As we can see error in your log snippet: The reconciliation event 64,702 is already linked at oracle.iam.reconciliation.impl.AccountHandler.checkEvent
                    It says event already linked. Please run a fresh recon and put error in logs. If error is same, raise SR since a similar issues was there in a connector and it was bug in oracle.

                    regards,
                    GP
                    • 7. Re: OIM 11gR2 : AD tarhet recon account not linked
                      IDM_newbie
                      Hello,

                      I again tried to recon a fresh user but this time the recon event itself did not get created. PFA the logs :

                      [2012-11-15T22:39:45.390-08:00] [oim_server1] [NOTIFICATION] [] [oracle.iam.features.scheduler.agentry.operations] [tid: [ACTIVE].ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: 2inyvop] [ecid: 80eeb34d89d5ed80:-39a102af:13b010d4ded:-8000-000000000002d89f,0] [APP: oim#11.1.2.0.0] [[
                      java.lang.NullPointerException
                           at java.io.ByteArrayInputStream.<init>(ByteArrayInputStream.java:89)
                           at oracle.iam.scheduler.vo.JobHistory.getExceptionObject(JobHistory.java:76)
                           at oracle.iam.features.scheduler.agentry.operations.LookupActor.prepare(LookupActor.java:1282)
                           at oracle.iam.features.scheduler.agentry.operations.LookupActor.refresh(LookupActor.java:3074)
                           at oracle.iam.features.scheduler.agentry.operations.LookupActor.receiveEvent(LookupActor.java:3061)
                           at oracle.iam.consoles.faces.mvc.canonic.Model.handleIntent(Model.java:975)
                           at oracle.iam.consoles.faces.mvc.canonic.Controller.doHandleIntent(Controller.java:533)
                           at oracle.iam.consoles.faces.mvc.canonic.Controller.doSelectAction(Controller.java:204)
                           at oracle.iam.consoles.faces.event.NavigationListener.processAction(NavigationListener.java:99)
                           at javax.faces.event.ActionEvent.processListener(ActionEvent.java:88)
                           at org.apache.myfaces.trinidad.component.UIXComponentBase.broadcast(UIXComponentBase.java:675)
                           at org.apache.myfaces.trinidad.component.UIXCommand.broadcast(UIXCommand.java:179)
                           at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$1.run(ContextSwitchingComponent.java:92)
                           at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:361)
                           at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:96)
                           at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:102)
                           at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$1.run(ContextSwitchingComponent.java:92)
                           at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:361)
                           at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:96)
                           at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:96)
                           at javax.faces.component.UIViewRoot.broadcastEvents(UIViewRoot.java:475)
                           at javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:756)
                           at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._invokeApplication(LifecycleImpl.java:889)
                           at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._executePhase(LifecycleImpl.java:379)
                           at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:194)
                           at javax.faces.webapp.FacesServlet.service(FacesServlet.java:265)
                           at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
                           at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
                           at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:301)
                           at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
                           at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
                           at oracle.adf.model.servlet.ADFBindingFilter.doFilter(ADFBindingFilter.java:205)
                           at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
                           at oracle.adfinternal.view.faces.webapp.rich.RegistrationFilter.doFilter(RegistrationFilter.java:106)
                           at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446)
                           at oracle.adfinternal.view.faces.activedata.AdsFilter.doFilter(AdsFilter.java:60)
                           at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446)
                           at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:271)
                           at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:177)
                           at org.apache.myfaces.trinidad.webapp.TrinidadFilter.doFilter(TrinidadFilter.java:92)
                           at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
                           at oracle.iam.platform.auth.web.OIMAuthContextFilter.doFilter(OIMAuthContextFilter.java:107)
                           at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
                           at oracle.adf.library.webapp.LibraryFilter.doFilter(LibraryFilter.java:179)
                           at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
                           at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:119)
                           at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:315)
                           at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:442)
                           at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:103)
                           at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:171)
                           at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)
                           at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
                           at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:139)
                           at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
                           at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
                           at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
                           at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3730)
                           at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3696)
                           at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
                           at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
                           at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2273)
                           at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2179)
                           at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1490)
                           at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
                           at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)

                      ]]