Leave a Comment:
29 comments
Hi Atul,
I had a question on OIM/OAM integration, is it possible to keep OAM and OIM in separate domains and still have the password use cases work?
Thanks
Reply@ Paul,
Though I have not tried myself but this should work as long as LDAPSync works and OIM is using same OID(LDAP) as used by OAM for authentication.
Thanks Atul.
I just tried out the 2 domain scenario and it does work.
ReplyI am sorry Atul for bugging you,
When can I expect rest of the installation process as I am closely following your steps and just finished this part.
you really making my life easy.
Thank you very much,
ReplyIDM environment admin server losses connectivity with cluster managed servers
Reply@ Mohan,
I am current busy on other project so expect next post on FA by 25/26 feb. I’ll try to be regular in march
while I was doing ‘ 17.2.5.2’ part i got error after running the following setup.
idmConfigTool.sh -configOIM input_file=oimitg.props
i am seeing following error in automation.log..
MDS DB Config- { (MDS DB Url,jdbc:oracle:thin:@infusionida01.noetix.local:1522:IDMDB) (MDS DB Schema Username,DEV_MDS) }
Mar 5, 2012 2:06:41 PM oracle.iam.sso.config.io.MsgLogger logInfo
INFO: Starting initialization of MDS resources
Mar 5, 2012 2:06:46 PM oracle.iam.sso.config.io.MsgLogger logError
SEVERE: Error uploading notification handlers to mds db
Mar 5, 2012 2:06:46 PM oracle.iam.sso.config.io.MsgLogger logError
ALL: Error uploading notification handlers to mds db
oracle.mds.exception.MDSRuntimeException: MDS-00003: error connecting to the database
Unable to start the Universal Connection Pool: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager MBean: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager: java.sql.SQLException: Invalid Universal Connection Pool configuration: java.sql.SQLException: Unable to create factory class instance with provided factory class name: java.lang.ClassNotFoundException: oracle.jdbc.pool.OracleDataSource
Error during pool creation in Universal Connection Pool Manager MBean: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager: java.sql.SQLException: Invalid Universal Connection Pool configuration: java.sql.SQLException: Unable to create factory class instance with provided factory class name: java.lang.ClassNotFoundException: oracle.jdbc.pool.OracleDataSource
at oracle.mds.internal.persistence.db.fcf.ConnectionManagerCallback.(ConnectionManagerCallback.java:77)
at oracle.mds.persistence.stores.db.DBMetadataStore.checkRepositoryCompatibility(DBMetadataStore.java:875)
at oracle.mds.persistence.stores.db.DBMetadataStore.checkCompatibility(DBMetadataStore.java:1140)
at oracle.mds.persistence.stores.db.DBMetadataStore.(DBMetadataStore.java:424)
at oracle.mds.persistence.stores.db.DBMetadataStore.(DBMetadataStore.java:376)
at oracle.iam.sso.config.MdsHandler.initialize(MdsHandler.java:94)
at oracle.iam.sso.config.MdsHandler.transferToDBStore(MdsHandler.java:132)
at oracle.iam.sso.config.OimCfgTool.importNotificationHandlers(OimCfgTool.java:155)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.idm.automation.impl.oim.handlers.OIMIntegrationHandler.invokeOIMConfigTool(OIMIntegrationHandler.java:314)
at oracle.idm.automation.impl.oim.handlers.OIMIntegrationHandler.performConfigOIMOperations(OIMIntegrationHandler.java:153)
at oracle.idm.automation.impl.oim.handlers.OIMIntegrationHandler.execute(OIMIntegrationHandler.java:127)
at oracle.idm.automation.AutomationTool.executeOIMOperation(AutomationTool.java:631)
at oracle.idm.automation.AutomationTool.configOIM(AutomationTool.java:623)
at oracle.idm.automation.AutomationTool.parseCmdLine(AutomationTool.java:223)
at oracle.idm.automation.AutomationTool.main(AutomationTool.java:133)
Caused by: java.sql.SQLException: Unable to start the Universal Connection Pool: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager MBean: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager: java.sql.SQLException: Invalid Universal Connection Pool configuration: java.sql.SQLException: Unable to create factory class instance with provided factory class name: java.lang.ClassNotFoundException: oracle.jdbc.pool.OracleDataSource
at oracle.ucp.util.UCPErrorHandler.newSQLException(UCPErrorHandler.java:488)
at oracle.ucp.util.UCPErrorHandler.throwSQLException(UCPErrorHandler.java:163)
at oracle.ucp.jdbc.PoolDataSourceImpl.startPool(PoolDataSourceImpl.java:651)
at oracle.ucp.jdbc.PoolDataSourceImpl.getConnection(PoolDataSourceImpl.java:890)
at oracle.ucp.jdbc.PoolDataSourceImpl.getConnection(PoolDataSourceImpl.java:857)
at oracle.ucp.jdbc.PoolDataSourceImpl.getConnection(PoolDataSourceImpl.java:851)
at oracle.mds.internal.persistence.db.JDBCConnectionManagerImpl.fetchConnection(JDBCConnectionManagerImpl.java:174)
at oracle.mds.internal.persistence.db.ConnectionManager.getConnection(ConnectionManager.java:347)
at oracle.mds.internal.persistence.db.fcf.ConnectionManagerCallback.(ConnectionManagerCallback.java:49)
at oracle.mds.persistence.stores.db.DBMetadataStore.checkRepositoryCompatibility(DBMetadataStore.java:875)
at oracle.mds.persistence.stores.db.DBMetadataStore.checkCompatibility(DBMetadataStore.java:1140)
at oracle.mds.persistence.stores.db.DBMetadataStore.(DBMetadataStore.java:424)
at oracle.mds.persistence.stores.db.DBMetadataStore.(DBMetadataStore.java:376)
at oracle.iam.sso.config.MdsHandler.initialize(MdsHandler.java:94)
at oracle.iam.sso.config.MdsHandler.transferToDBStore(MdsHandler.java:132)
at oracle.iam.sso.config.OimCfgTool.importNotificationHandlers(OimCfgTool.java:155)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.idm.automation.impl.oim.handlers.OIMIntegrationHandler.invokeOIMConfigTool(OIMIntegrationHandler.java:314)
at oracle.idm.automation.impl.oim.handlers.OIMIntegrationHandler.performConfigOIMOperations(OIMIntegrationHandler.java:153)
at oracle.idm.automation.impl.oim.handlers.OIMIntegrationHandler.execute(OIMIntegrationHandler.java:127)
at oracle.idm.automation.AutomationTool.executeOIMOperation(AutomationTool.java:631)
at oracle.idm.automation.AutomationTool.configOIM(AutomationTool.java:622)
… 2 more
Caused by: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager MBean: oracle.ucp.UniversalConnectionPoolException: Error during pool creation in Universal Connection Pool Manager: java.sql.SQLException: Invalid Universal Connection Pool configuration: java.sql.SQLException: Unable to create factory class instance with provided factory class name: java.lang.ClassNotFoundException: oracle.jdbc.pool.OracleDataSource
at oracle.ucp.util.UCPErrorHandler.newUniversalConnectionPoolException(UCPErrorHandler.java:368)
at oracle.ucp.util.UCPErrorHandler.throwUniversalConnectionPoolException(UCPErrorHandler.java:49)
at oracle.ucp.util.UCPErrorHandler.throwUniversalConnectionPoolException(UCPErrorHandler.java:80)
at oracle.ucp.admin.UniversalConnectionPoolManagerMBeanImpl.createConnectionPool(UniversalConnectionPoolManagerMBeanImpl.java:316)
at oracle.ucp.jdbc.PoolDataSourceImpl.startPool(PoolDataSourceImpl.java:625)
… 24 more
please let me know if I am missing anything here also find my oimitg.props like below..
LOGINURI: /${app.context}/adfAuthentication
LOGOUTURI: /oamsso/logout.html
AUTOLOGINURI: None
ACCESS_SERVER_HOST: infusionappa01.noetix.local
ACCESS_SERVER_PORT: 5575
ACCESS_GATE_ID: Webgate_IDM
COOKIE_DOMAIN: .noetix.local
COOKIE_EXPIRY_INTERVAL: 120
OAM_TRANSFER_MODE: OPEN
WEBGATE_TYPE: ohsWebgate10g
SSO_ENABLED_FLAG: true
IDSTORE_PORT: 3060
IDSTORE_HOST: infusionappa01.noetix.local
IDSTORE_DIRECTORYTYPE: OID
IDSTORE_ADMIN_USER: cn=oamLDAP,cn=Users,dc=noetix,dc=local
IDSTORE_USERSEARCHBASE: cn=Users,dc=noetix,dc=local
IDSTORE_GROUPSEARCHBASE: cn=Groups,dc=noetix,dc=local
MDS_DB_URL: jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(protocol=tcp)(host=infusionida01.noetix.local)(port=1522))(ADDRESS=(protocol=tcp)))(CONNECT_DATA=(SERVER=DEDICATED)(SERVICE_NAME=IDMDB.noetix.local)))
MDS_DB_SCHEMA_USERNAME: DEV_MDS
WLSHOST: infusionappa01.noetix.local
WLSPORT: 7001
WLSADMIN: weblogic
DOMAIN_NAME: IDMDomain
OIM_MANAGED_SERVER_NAME: oim_server1
DOMAIN_LOCATION: /d01/Oracle/Middleware/user_projects/domains/IDMDomain
@ mohan
Yes I think I had this error in past.
Please confirm that you created wlfullclient.jar on OIM before running above command
ReplyI didn’t remember that, I ran that, as I followed exactly your steps 🙂
thank you very much for your quick reply
Replyhow to create wlfullclient.jar on OIM, I think I didn’t did this step.
Replyshould I do the following steps to create that jar file
4.6.4 Creating the wlfullclient.jar File
Oracle Identity Manager uses the wlfullclient.jar library for certain operations.
Oracle does not ship this library, so you must create this library manually. Oracle
recommends creating this library under the MW_HOME/wlserver_
10.3/server/lib directory on all the machines in the application tier of your
environment. You do not need to create this library on directory tier machines such as
OIDHOST1, OIDHOST2, OVDHOST1 and OVDHOST2.
Follow these steps to create the wlfullclient.jar file:
1. Navigate to the MW_HOME/wlserver_10.3/server/lib directory
2. Set your JAVA_HOME environment variable and ensure that the JAVA_HOME/bin
directory is in your path.
3. Create the wlfullclient.jar file by running:
java -jar wljarbuilder.jar
please confirm.
ReplyHi Atul,
Thank you very much for your solution. it fixed my problem after creating wlfullclient.jar file.
even I know that you are busy with other things because of my urgent requirment I am asking you again
when can I expect rest of the fusion Installtion.
ReplyHi Atul
I am inatalling the OIM for Fusion application and following the
Oracle® Fusion Middleware
Enterprise Deployment Guide for Oracle Identity Management
(Oracle Fusion Applications Edition)
11g Release 1 (11.1.1.5.0)
E21032-01
As per guide after completing the chapter 13 SOA log giving the error
can you tell me Authentication provider are required in weblogiic domain
Reply@ Vijay,
Please share issue and error message you are hitting in SOA
Hi! Atul,
I have installed and configured the entire Identity Management 11.1.1.5.
The only steps remaining are:
Testing connection to OAM
Integrating OAM and OIM
My oamtest.jar is failing with the following error.
[8/25/12 1:10 PM][request][connect] no
[8/25/12 1:10 PM][response] Connection to access server not available
Kindly assist.
Reply@ SK,
What proxy port OAM server is running (5575 is default port for OAM), check under deployments in WebLogic console and ensure that application oam_server (or something similar) is up and running. Ensure that OAM managed server is up and running without any errors.
Hi! Atul
When I try post-install steps of 12961473 for OIM I get the following error. Kindly suggest.
E:\lapps\oracle\product\fmw\iam\server\bin>patch_weblogic.bat
else( was unexpected at this time.
E:\lapps\oracle\product\fmw\iam\server\bin>
@ SK,
BP03 is latest where as above patch is BP01 , any reason for applying old patch ?
Check if patch_weblogic.bat is one that comes with patch (check timestamp of this file) .
Raise an SR with Oracle Support
Reply[…] you integrate OAM with OIM (more here ). You see three links “Forgot Password” , “Register New […]
ReplyHi Atul,
Please help me with the below error.
I have configired IDM sucessfully but when i have installed webgate and connecting to OIM..i am getting below error in log and not able to run the schedule jobs in OIM.
Error:
This operation cannot be performed because the Scheduler Service is not in Started state.
and OIM log file:
and below is the admin log:
Oct 1, 2012 4:05:34 PM oracle.iam.platform.auth.providers.wls.OIMSignatureLoginModule login
SEVERE: oracle.iam.platform.auth.providers.wls.OIMSignatureLoginModule login() Invalid Input username/password
Oct 1, 2012 4:05:34 PM oracle.iam.platform.auth.impl.DBStore initializeDataSource
INFO: Pool data source initialized successfully
Please help with this error.
ReplyDo you have any post on OAM/OAAM integrattion? I have integrated OAM and OAAM and can see the oaam login page but everytime I try to login it keeps saying “Sorry, the identification you entered was not recognized. Please try again”
Also, I dont see any authentication requests going to my ldap which is OUD.
“OAM Tap token not found in request parameter” is also logged when I try to hit the protected resource on OHS 11g webgate.
Any help would be appreciated.
@ Anonymous,
Check http://onlineappsdba.com/index.php/2012/09/21/oim-oam-oaam-integration-using-tap-request-flow-you-must-understand/
I hope you have integrated OAM-OAAM using advanced TAP method.
Do you see request going from OAAM to OAM (check in OAM diagnostics log) ? If requests are not going from OAAM to OAM for credential validation then check properties in OAAM Admin Console related to OAM like OAM hostname, OAM port and WebGate Name etc (search for *oam* in OAAM property editor)
ReplyYes, I am using TAP scheme. OAM/OAAM versions are 11.1.2 and OHS webgate 11g.
Requests are not going to OAM server. But when i check the properties on oaam admin console, host port and webgate name seems to be correct.
What are these properties for?
oaam.uio.oam.password
oaam.uio.oam.user
They are blank in OAAM admin console.
ReplyHi Atul,
Can you please help me on the below issue :
We integrated OIM with OAM in 11gR2. While logging in to SSO application protected by OAM, We are redirecting to OIM first login screen. On that screen we are entering new password and answering challenge questions. But when we click on submit, It is not landing to SSP Application landing page. It is showing us the OAM Error page(System Error page). and on the browser we see the URL redirected upto below and failing to redirect to app home page. Here is the URL which we see in browser:
but when we close browser and login to application with new password, we are able to login. Can you please help us what could be the issue?
Thanks
Navi
Sorry. There is a typo in URL that we are seeing in browser:
Thanks,
Navi
@ Navi,
Is this just OAM & OIM or OAAM as well ? Check error in OAM managed server log file.
Hi Atul,
This is just OIM and OAM integration. we dont have OAAM integrated in this environment. Also I couldn’t see any kind of error in oam_server1.log file when I am getting this error
But i do see this in oam_server1-diagnostic.log in TRACE:32 level. In the below logs, It is looking at IAMSuiteagent on port 80. But in our environment, we created one more webgate with new host identifier(contains preferred host like IAMSuiteAgent11g) and on different port 7777 due to some issue. And we updated these details in oam.props file and oim.props file and ran IDMConfigTool.bat one more time. But I am not able to understand why it is still looking at old IAMSuiteAgent on port 80
[2013-08-30T04:22:38.898-07:00] [oam_server1] [TRACE] [] [oracle.oam.controller] [tid: [ACTIVE].ExecuteThread: ‘5’ for queue: ‘weblogic.kernel.Default (self-tuning)’] [userId: ] [ecid: ffdce911f1f8eddd:-28fef2bf:140cd70886d:-8000-000000000000172e,0] [SRC_CLASS: oracle.security.am.controller.util.CookieCacheHandler] [APP: oam_server#11.1.2.0.0] [SRC_METHOD: readFromStore] Cached Data Local Session Store data str:null
[2013-08-30T04:22:38.898-07:00] [oam_server1] [TRACE:16] [] [oracle.oam.controller] [tid: [ACTIVE].ExecuteThread: ‘5’ for queue: ‘weblogic.kernel.Default (self-tuning)’] [userId: ] [ecid: ffdce911f1f8eddd:-28fef2bf:140cd70886d:-8000-000000000000172e,0] [SRC_CLASS: oracle.security.am.controller.util.CookieBasedTransportStore] [APP: oam_server#11.1.2.0.0] [SRC_METHOD: getAttribute] ENTRY
[2013-08-30T04:22:38.898-07:00] [oam_server1] [TRACE:16] [] [oracle.oam.controller] [tid: [ACTIVE].ExecuteThread: ‘5’ for queue: ‘weblogic.kernel.Default (self-tuning)’] [userId: ] [ecid: ffdce911f1f8eddd:-28fef2bf:140cd70886d:-8000-000000000000172e,0] [SRC_CLASS: oracle.security.am.controller.util.CookieCacheHandler] [APP: oam_server#11.1.2.0.0] [SRC_METHOD: readFromStore] RETURN null
[2013-08-30T04:22:38.898-07:00] [oam_server1] [TRACE:16] [] [oracle.oam.controller] [tid: [ACTIVE].ExecuteThread: ‘5’ for queue: ‘weblogic.kernel.Default (self-tuning)’] [userId: ] [ecid: ffdce911f1f8eddd:-28fef2bf:140cd70886d:-8000-000000000000172e,0] [SRC_CLASS: oracle.security.am.controller.util.CookieCacheHandler] [APP: oam_server#11.1.2.0.0] [SRC_METHOD: addToStore] ENTRY [{stringMap=[{oam_tap_token=v2.0~OIMPartner~NEVEN0M5Nzc1OUNFRDYzQzQ0MUIyNn4wOTY1QjMyNTRBQkMyMEJCNUFFMUI1NEMwNEIxMUVFQjMxNUEzM0U2fjlDQ0NDM0E3QkYxNUExRkZGNDFERjFCNzg5Q0M1RTU1fkUzRjQ5NTE1MjM4OUM3NURBMTZCQzA5Njg4OUU4Q0U4QUM4MTg5MkYyODg2Rjc5NzVCN0YwOEY3OTQ3NjZENzNDMENFODY1Rjk2NjFFRjM3M0ZFRTc0MkU1OUNDMDRDMzNGODlBQzM1QTBCMjVEMEU4MTMwMjI4RDE0NDMzRjM3QzczODdEMEM1MDEyMTFCMEU0RkU3RDM5NDhEOTNDOUUwNEE3MDY2MkJGNENFQ0Y4OTBFMzU5RjI1QkNDREVGNEFENEVDNUI0RkRCOUZCOUVCODdERUMwOUY3N0I0RTRFNDFERkREOEI3NTJBOTYyMjY1Q0I2MUM2QTA0OEJGNjI=}{Cookie=JSESSIONID=NKKGS… OAM_REQ=invalid}{baseEvent=dap_assert_creds}{Host=oam.company.com:14100}{DAP_FLOW=DAP_OIF_INIT}{User-Agent=Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/29.0.1547.57 Safari/537.36}{Connection=keep-alive}{p_error_code=}{TAPPartnerId=OIMPartner}{Accept-Language=en-US,en;q=0.8}{authn_try_count=null}{Referer=http://sso.company.com:7777/identity/faces/firstlogin?backUrl=http%3A%2F%2Fapp.company.com%3A80%2F&_afrWindowMode=0&checksum=A696EDCC5DEF595D04F6594B30345885986C0B8BA9DD02464BB93E03AF08A5B3&_afrLoop=912448626723787&_adf.ctrl-state=dfeqzsbzc_4}{Accept-Encoding=gzip,deflate,sdch}{creationTime=0}{Accept=text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8}]}{objectMap={redirect_url=/pages/servererror.jsp, resource_id=Type: HTTP Operation: view Name: DAPResource URL: /oamTAPResponseAssertResource Host: IAMSuiteAgent Port: 80, SSORequestToken=null, IdContextClaims={}, REDIRECT_URL=Base Url: http://myportal-fqa.hotelgroup.com:80/, Length: 38, eventFlowControllerStack=ssoFlowController,, audit_context=oracle.security.jps.service.audit.AuditContext@5694bcbb, tap_req_attr={}, credential=Credentials keys:[daptoken, tap_token_body], eventStack=dap_assert_creds : is_resource_protected : }}]
Hi Atul
Any response for Navi’s question? I am also getting same error.
Reply