9 Replies Latest reply: Jan 29, 2013 12:22 AM by ShelkeDarshan RSS

    Password Sync Connector Error 11gR2

    User236522
      Hi all,

      I am using following products

      IDM 11.1.2.0,

      activedirectory-11.1.1.5.0 connector with Patch P14190610_111150_Generic.

      MSFT_PSync_91150 for Password Sync.

      Please let me know that AD Password Sync Connector 9.1.1.5 can be configured with OIM *11gR2* ?

      Because I am getting error *"Password updation failed in child process "* I have used the same connector with OIM 11.1.1.5.0 (11gR1) and it was working fine. do i need to make any changes / settings in the OIM for AD Resource also?

      Thanks
        • 1. Re: Password Sync Connector Error 11gR2
          Sagar
          Try it by running on non-ssl port i.e. 389.

          Follow the connector document for the same. And let us know the result.
          • 2. Re: Password Sync Connector Error 11gR2
            Gyanprakash Pandey
            Actually Connector document doesn't specify if this connector is compatible with OIM 11G R2. You can try what sagar said, else raise SR to oracle if this release version 9115 is compatible with R2 or not.

            regards,
            GP
            • 3. Re: Password Sync Connector Error 11gR2
              User236522
              I am already using 389, i think its the issue with 11gR2 and this connector....i don't know for sure as yet...
              if any one has any information for any patch released for Microsoft Active Directory Password Synchronization Connector - MSFT_PSync_91150, with OIM 11gR2 please let me know.
              • 4. Re: Password Sync Connector Error 11gR2
                Gyanprakash Pandey
                Make useSSL to false or no. And retry.

                regards,
                GP
                • 5. Re: Password Sync Connector Error 11gR2
                  User236522
                  Already on SSL false....
                  • 6. Re: Password Sync Connector Error 11gR2
                    Nishith Nayan
                    May current version of connector has issue with R2.Many other person are facing the same issue.Better raise SR. However, set useSSL=no instead of false.

                    --nayan                                                                                                                                                                                                                                                                                                                                       
                    • 7. Re: Password Sync Connector Error 11gR2
                      User236522
                      thanks for your reply,

                      Please can you help me on the following ....

                      I have installed AD PasswordSync Connector 9.1.1.5.0 (MSFT_AD_PSync_9.1.1.5.0) with newly released patch MSFT_AD_PSync_9.1.1.5.6 (patch 14627510). I am getting error that Password updation failed in child process

                      its not making any sence as the same connector was working fine with 11gR1. I have uninstalled and reconfigured the connector but no luck.

                      Can you through some light on it?


                      what i think that there is some communication issue between IDM and AD server, I have check the communication and found no issue. is it that SSL is compulsory for this connector although its not mentioned in any of the document.

                      +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

                      ebug [10/09/12 14:09:27] Inside sgsloidi::setParameters

                      Debug [10/09/12 14:09:27] The SOAP start element is
                      Debug [10/09/12 14:09:27] <processRequest xmlns=""><sOAPElement>
                      Debug [10/09/12 14:09:27] The SOAP end element is
                      Debug [10/09/12 14:09:27] </sOAPElement></processRequest>
                      Debug [10/09/12 14:09:27] The path is
                      Debug [10/09/12 14:09:27] /spmlws/OIMProvisioning
                      Debug [10/09/12 14:09:27] End of sgsloidi::setParameters

                      Debug [10/09/12 14:09:27] Begin function sgsloidi::queryADUserAttribute()
                      Debug [10/09/12 14:09:27] Inside sgsladac c-tor
                      Debug [10/09/12 14:09:27] AD Host
                      Debug [10/09/12 14:09:27] 172.20.20.135
                      Debug [10/09/12 14:09:27]

                      Debug [10/09/12 14:09:27] AD Port
                      Debug [10/09/12 14:09:27] 389
                      Debug [10/09/12 14:09:27]

                      Debug [10/09/12 14:09:27] AD Base DN
                      Debug [10/09/12 14:09:27] DC=YYYt,DC=vvv,DC=www
                      Debug [10/09/12 14:09:27]

                      Debug [10/09/12 14:09:27] Inside ConnectToADSI
                      Debug [10/09/12 14:09:27]
                      ADSI Bind success full

                      Debug [10/09/12 14:09:27] Begin function sgsladac::searchAttrValue()
                      Debug [10/09/12 14:09:27] [Base DN : DC=yyy,DC=vvv,DC=www]; [Filter : (&(objectClass=user)(samAccountName=IDM005))]; [Attribute : samAccountName]
                      Debug [10/09/12 14:09:27] Search success with one result.
                      Debug [10/09/12 14:09:27] End function sgsladac::searchAttrValue()
                      Debug [10/09/12 14:09:27] End function sgsloidi::queryADUserAttribute()
                      Debug [10/09/12 14:09:27] Inside sgsladac destructor
                      Debug [10/09/12 14:09:27] <env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/"><env:Header/><env:Body><env:Fault><faultcode>env:Client</faultcode><faultstring>Unknown method</faultstring></env:Fault></env:Body></env:Envelope>
                      Debug [10/09/12 14:09:27] Inside sgsloidiOIMGeneralErrorHandler

                      Debug [10/09/12 14:09:27] Unable to update IDM005. There are error messages in the searchReponse. Please check log for details
                      Debug [10/09/12 14:09:27] Inside sgsladds::sgslperwriteData YOOOO
                      Debug [10/09/12 14:09:27] Inside sgsladac c-tor
                      Debug [10/09/12 14:09:27] AD Host
                      Debug [10/09/12 14:09:27] 172.20.20.135
                      Debug [10/09/12 14:09:27]

                      Debug [10/09/12 14:09:27] AD Port
                      Debug [10/09/12 14:09:27] 389
                      Debug [10/09/12 14:09:27]

                      Debug [10/09/12 14:09:27] AD Base DN
                      Debug [10/09/12 14:09:27] DC=yyy,DC=vvv,DC=www
                      Debug [10/09/12 14:09:27]

                      Debug [10/09/12 14:09:27] Only dataattribute
                      Debug [10/09/12 14:09:27] Got Registry enteries
                      Debug [10/09/12 14:09:27] contact
                      Debug [10/09/12 14:09:27] description
                      Debug [10/09/12 14:09:27] Got Entiredn

                      Debug [10/09/12 14:09:27] OU=oimpwdsyncmoetest.gov.kw,ou=OIMADPasswordSync,DC=yyy,DC=vv,DC=wwww
                      Debug [10/09/12 14:09:27] Encrypted record already exists in Datastore
                      Debug [10/09/12 14:09:27] Already Exists
                      Debug [10/09/12 14:09:27] Encrypted record already exists in Datastore
                      Debug [10/09/12 14:09:27] Already Exists
                      Debug [10/09/12 14:09:27] Inside sgsladdsSearchUser
                      Debug [10/09/12 14:09:27] Firing Search Request

                      Debug [10/09/12 14:09:27] AD search for a user objectGUID is successfull

                      Debug [10/09/12 14:09:27] Count success

                      Debug [10/09/12 14:09:27] Search result fetched
                      Debug [10/09/12 14:09:27] 0:430 6 314 420 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAn+Kii3Krv0GOKE3aE8a/vwAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAAQZgAAAAEAACAAAADVc9Vqwy5JzRFSKTMKlZcowXUmtY/Giw1nYgIz01HZQgAAAAAOgAAAAAIAACAAAADnr10j8OQlKm35BMRt7yKNNQYNeR2JRPMQrlWheBs3XUAAAAB6it/wjG20tJgo5T9euni2Jldb/agmY5RDsoKVpvLnHAkptSd4OUIIaysGAWkqfv9iK69FtzUuh+DcmgkdSLtOQAAAAGMpkx8yFJaKXwnzoCZyElCZbrzdg5f3GNj+S56lk4/UpVij9hFk5VeysObVw21NClzmGnuiBRtO+WF+LzChEUM=
                      Debug [10/09/12 14:09:27] --------------------&&&----------------

                      Debug [10/09/12 14:09:27] Inside sgsladds::sgsladdsgetData NEW Look
                      Debug [10/09/12 14:09:27] 0:430 6 314 420 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAn+Kii3Krv0GOKE3aE8a/vwAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAAQZgAAAAEAACAAAADVc9Vqwy5JzRFSKTMKlZcowXUmtY/Giw1nYgIz01HZQgAAAAAOgAAAAAIAACAAAADnr10j8OQlKm35BMRt7yKNNQYNeR2JRPMQrlWheBs3XUAAAAB6it/wjG20tJgo5T9euni2Jldb/agmY5RDsoKVpvLnHAkptSd4OUIIaysGAWkqfv9iK69FtzUuh+DcmgkdSLtOQAAAAGMpkx8yFJaKXwnzoCZyElCZbrzdg5f3GNj+S56lk4/UpVij9hFk5VeysObVw21NClzmGnuiBRtO+WF+LzChEUM=
                      Debug [10/09/12 14:09:27] Encoded Data Extracted in sgsladdsgetData

                      Debug [10/09/12 14:09:27] 430 6 314 420 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAn+Kii3Krv0GOKE3aE8a/vwAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAAQZgAAAAEAACAAAADVc9Vqwy5JzRFSKTMKlZcowXUmtY/Giw1nYgIz01HZQgAAAAAOgAAAAAIAACAAAADnr10j8OQlKm35BMRt7yKNNQYNeR2JRPMQrlWheBs3XUAAAAB6it/wjG20tJgo5T9euni2Jldb/agmY5RDsoKVpvLnHAkptSd4OUIIaysGAWkqfv9iK69FtzUuh+DcmgkdSLtOQAAAAGMpkx8yFJaKXwnzoCZyElCZbrzdg5f3GNj+S56lk4/UpVij9hFk5VeysObVw21NClzmGnuiBRtO+WF+LzChEUM=
                      Debug [10/09/12 14:09:27] Moving out sgsladdsgetData
                      Debug [10/09/12 14:09:27] Encoded Data Extracted

                      Debug [10/09/12 14:09:27] 430 6 314 420 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAn+Kii3Krv0GOKE3aE8a/vwAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAAQZgAAAAEAACAAAADVc9Vqwy5JzRFSKTMKlZcowXUmtY/Giw1nYgIz01HZQgAAAAAOgAAAAAIAACAAAADnr10j8OQlKm35BMRt7yKNNQYNeR2JRPMQrlWheBs3XUAAAAB6it/wjG20tJgo5T9euni2Jldb/agmY5RDsoKVpvLnHAkptSd4OUIIaysGAWkqfv9iK69FtzUuh+DcmgkdSLtOQAAAAGMpkx8yFJaKXwnzoCZyElCZbrzdg5f3GNj+S56lk4/UpVij9hFk5VeysObVw21NClzmGnuiBRtO+WF+LzChEUM=
                      Debug [10/09/12 14:09:27] Incrementing the MAX_RETRY LIMIT:
                      Debug [10/09/12 14:09:27] 1
                      Debug [10/09/12 14:09:27] numretries ======
                      Debug [10/09/12 14:09:27] 1
                      Debug [10/09/12 14:09:27] Inside sgslcodsupdateChild

                      Debug [10/09/12 14:09:27] 1:430 6 314 420 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAn+Kii3Krv0GOKE3aE8a/vwAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAAQZgAAAAEAACAAAADVc9Vqwy5JzRFSKTMKlZcowXUmtY/Giw1nYgIz01HZQgAAAAAOgAAAAAIAACAAAADnr10j8OQlKm35BMRt7yKNNQYNeR2JRPMQrlWheBs3XUAAAAB6it/wjG20tJgo5T9euni2Jldb/agmY5RDsoKVpvLnHAkptSd4OUIIaysGAWkqfv9iK69FtzUuh+DcmgkdSLtOQAAAAGMpkx8yFJaKXwnzoCZyElCZbrzdg5f3GNj+S56lk4/UpVij9hFk5VeysObVw21NClzmGnuiBRtO+WF+LzChEUM=
                      Debug [10/09/12 14:09:27]
                      Encrypted record data updated successfully
                      Debug [10/09/12 14:09:27] Inside sgsladac destructor
                      Debug [10/09/12 14:09:27] End of sgsloidiOIMGeneralErrorHandler

                      Debug [10/09/12 14:09:27] Password updation failed in child process
                      Debug [10/09/12 14:09:27]
                      Relaxing while processing records from datastore
                      Debug [10/09/12 14:09:29]
                      About to UNBIND datastore after processing the Records
                      Debug [10/09/12 14:09:29]
                      Deleting datastore object pointer
                      Debug [10/09/12 14:09:30] Datastore --- Connect to AD
                      Debug [10/09/12 14:09:30]
                      • 8. Re: Password Sync Connector Error 11gR2
                        NaveenThoddil
                        Hi

                        Apply The patch 14459331. This patch will solve your issue. This patch can be obtained from My Oracle Support.

                        I had the same issue. Raised an SR, they followed up with this patch and got it fixed.

                        Regards
                        • 9. Re: Password Sync Connector Error 11gR2
                          ShelkeDarshan
                          HI ALL

                          AD Password synch connector works with OIM 11gR2 Bundled Patch 2 .

                          There is no need to apply below patch 14459331 for OIM 11gR2 with Bundled Patch 2 .



                          Thanks
                          Darshan