Thursday, June 14, 2012

Unable to Open the Directory Server via OIM web console-OIM 11G

If you are facing this problem where you are unable to open the IT Resource detail for Directory Server via the OIM web console and clicking on that will direct you to the System Error occured page then follow the below steps:

  1. Query the table SVP and see that all the entries are not encrypted properly.
  2. Now update the table entries with 'NULL' values with respect to the 'Directory Server' IT Resource only.
  3. Now go back to the OIM console and then try accessing the IT Resource 'Directory Server'. 
  4. Now you should be able to open the IT Resource detail and update it accordingly.
This happens when you try to play around with the encrption keys for the database and then try to configure the sync again.

Cheers,
Vishnu

LDAP Sync Configuration- OIM 11G

Once you install OIM along with the LDAP sync enabled :

1. Start WLST
cd $MW_HOME/oracle_common/common/bin
./wlst.sh
2. Connect to Admin Server
connect(‘weblogic’,'welcome1′,’t3://localhost:7001′)  — Here weblogic is admin user name of weblogic domain, localhost is server name on which Admin Server is running and 7001 is admin server port is running
3. To list adapters for OIM
listAdapters(contextName=’oim’)
You should see output like
_______
Adapter Name : oid1
Adapter Type : LDAP 
Adapter Name : CHANGELOG_oid1
Adapter Type : LDAP

_______

4.  To get adapter details for adapter oid1
 getAdapterDetails(adapterName=’oid1′, contextName=’oim’)
______
wls:/ohsdomain/domainRuntime> getAdapterDetails(adapterName=’oid1′, contextName=’oim’)
DETAILS OF ADAPTER :  oid1
Adapter Type                : LDAP
Name                        : oid
Virtual NameSpace           : dc=com
Remote NameSpace            : dc=com
LDAP Host                   : [localhost : 389]
Secure                      : false
Bind DN                     : cn=orcladmin
Pass Credentials            : Always
Max size of Connection Pool : 10
________
5. To modify BindDN to oimLDAP user created during OIM-OAM integration
Update username and password in adapter oid1
modifyLDAPAdapter(adapterName=’oid1′,attribute=’BindDN’, value=’cn=orcladminuser,cn=SystemUsers,dc=com’, contextName=’oim’)
modifyLDAPAdapter(adapterName=’oid1′,attribute=’BindPassword’, value=’asULikeIT′, contextName=’oim’)
Update username and password in adapter CHANGELOG_oid1
modifyLDAPAdapter(adapterName=’CHANGELOG_oid1′,attribute=’BindDN’, value=’cn=oimLDAP,cn=SystemUsers,dc=com’, contextName=’oim’)
modifyLDAPAdapter(adapterName=’CHANGELOG_oid1′,attribute=’BindPassword’, value=’welcome1′, contextName=’oim’)
 Note: Realm (Domain Name) in OID in above command is “dc=com” , change this value as per your setting.

For any help on the WLST commands just type
help('OracleLibOVDConfig').
 
This will list all the LDSP Sync related commands to manage the LDAP sync adapters. 
)

The following link will be very handy too: