Quantcast
Channel: SCN: Message List - SAP Identity Management
Viewing all 5016 articles
Browse latest View live
↧

Dispatcher issue

September 25, 2015, 12:28 pm
$
0
0

Hello Experts,

 

I have just installed SAP IDM 7.2 SP0 on Windows 2008 server. After creation of new Identity Center, I have created a Dispatcher and tried to test it after generation of script and got below output in cmd.

 

 

Running MxDispatcher_idmdispatcher.

MxDispatcher version: 7.2.00.0 Built: 22.11.2010 18:36:12 (c) Copyright 2008 SAP

AG. All rights reserved.

Java VM: Oracle Corporation   Version: 1.8.0_60

Java home: C:\Program Files\Java\jre1.8.0_60

Java lib/ext: C:\Program Files\Java\jre1.8.0_60\lib\ext;C:\Windows\Sun\Java\lib\

ext

CLASSPATH: D:\usr\sap\IdM720\Identity Center\Java\mxdispatcher.jar;D:\usr\sap\Id

M720\Identity Center\Java\mxmcapi.jar;C:\Program Files\Microsoft JDBC Driver 4.1

for SQL Server\sqljdbc_4.1\enu\sqljdbc41.jar;C:\Program Files\Microsoft JDBC Dr

iver 4.1 for SQL Server\sqljdbc_4.1\enu;C:\Program Files\Microsoft JDBC Driver 4

.1 for SQL Server\sqljdbc_4.1\enu\sqljdbc41.jar

[25.09.2015 12:19:02-210] - MxDispatcher:Waiting for succesfull start-up of the

thread:RELOAD

[25.09.2015 12:19:02-211] - MxDispatcher:Main loop for thread:IDS_DispThread-REL

OAD-idmdispatcher

[25.09.2015 12:19:02-211] - MxDispatcher:Started thread:IDS_DispThread-RELOAD-id

mdispatcher

[25.09.2015 12:19:02-211] - MxDispatcher:THREAD BODY Execution:IDS_DispThread-RE

LOAD-idmdispatcher

[25.09.2015 12:19:02-211] - MxDispatcher:Reading main MxDispatcher configuration

...

[25.09.2015 12:19:02-215] - MxDispatcher:Global constant DISPATCHER_POLICY_TYPE

not found, using default = 0

[25.09.2015 12:19:02-217] - MxDispatcher:Global constant MX_MAX_CONCURRENT_RUNTI

ME_ENGINES not found, using default = 9999

Could you please tell me what is wrong here and how to fix it.

 

Regards,

C Kumar

↧
Search

Re: Dispatcher issue

September 25, 2015, 10:56 pm
$
0
0

Hi Kumar,

 

Are you sure you want to stick with 7.2 SP0 dispatcher and not move to latest one?

 

The logs doesn't seem like dispatcher encountered the problem. There are couple of global constants you need create for dispatchers.

 

Create an empty job and see if you were able to run successfully?

 

I haven't set up DISPATCHER_POLICY_TYPE explicitly anytime. May be its not needed in latest ones or it is automatically set when you select options in dispatcher 'policy' tab.

 

But for the other constant, you will get an better idea if you go thru below document.

 

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/1069b670-621a-2e10-9598-99d3b7d99a69?QuickLink=index&…

 

Kind regards,

Jai

↧
↧

Re: unable to delete direct assigned privileges using provisioning job

September 28, 2015, 12:27 am
$
0
0

Hi Jai,

 

In the script it is there, but i haven't pasted it here.

↧

Re: unable to delete direct assigned privileges using provisioning job

September 28, 2015, 12:34 am
$
0
0

Hi Tero,

 

First we would calculate the only and systems privileges which are assigned through IDM role and then we would assign them as directly.

 

Later we would exclude only an system priv and pass it to delete.

 

the script would pass  {D}priv1|{D}priv2|{D}priv3 in this format itself. but still it is not deleting the entries.

↧

Re: unable to delete direct assigned privileges using provisioning job

September 28, 2015, 1:08 am
$
0
0

It's a lot easier to have the "No Master Task" defined rather than include the account-privileges (*:only) in the business roles.

 

From the config that I am working on I see that we're using "{e}" operator to remove.

 

The first SPs of 7.2 didn't have fully working "No Master Task" and have once inlcuded the account-privileges to bus roles but replaced that with "No Master Task" when that worked on the newer SP.

 

regards, Tero

↧
↧

Re: SAP IDM 8.0 SP1 Error Job Log - null object returned from com.sap.idm.ic.rcp.idmmodel.McJobLog.getMcMasterJobId()

September 28, 2015, 1:32 am
$
0
0

Thank you, I updated to Eclipse Luna and now it's working again.

 

Thanks, Patrick

↧

Re: SAP IDM 8.0 SP1 Error Job Log - null object returned from com.sap.idm.ic.rcp.idmmodel.McJobLog.getMcMasterJobId()

September 28, 2015, 5:34 am
$
0
0

Patrick,

 

Please mark this as closed so future readers will know how to solve this problem.

 

Thanks!

Matt (Moderator)

↧

Re: SAP IDM 8.0 SP1 Error Job Log - null object returned from com.sap.idm.ic.rcp.idmmodel.McJobLog.getMcMasterJobId()

September 28, 2015, 6:00 am
$
0
0

HI Matt,

I already marked an answer as correct?

↧
Search

Re: SAP IDM 8.0 SP1 Error Job Log - null object returned from com.sap.idm.ic.rcp.idmmodel.McJobLog.getMcMasterJobId()

September 28, 2015, 9:14 am
$
0
0

It's showing up now.  Thanks for checking

↧
↧

Unable to reprocess the failed role

September 29, 2015, 12:16 am
$
0
0

Hello experts,

 

When ever i am trying to reprocess the failed role from the IDM standard UI receiving the below error message.

 

putNextEntry failed storingSPML.SAPUSER.

Exception from Modify operation:com.sap.idm.ic.ToPassException: Unexpected error when processing modify request Unsupported ID found null

 

Then i have checked the account attributes for that user and found that for that repository it is blank. then i have added that user id to that account attribute and then reprocessed it. Again it got failed and below is the error message.

 

putNextEntry failed storingSPML.SAPUSER.ABCD02

Exception from Add operation:com.sap.idm.ic.ToPassException: No such objectclass defined

Exception from Modify operation:com.sap.idm.ic.ToPassException: Could not update user. Cannot find group when uniqueID is null!


Can you kindly let me know which details i need to check further.


Regards,

DP

↧

Re: Unable to reprocess the failed role

September 29, 2015, 12:35 am
$
0
0

Don't add the missing ACCOUNT-attribute, reprovision the failed account-privilege.

 

(The ACCOUNT-attribute was used in earlier versions to flag that user is created to the repository and who knows what happens in the depths of stored procedures with the attribute..)

 

regards, Tero

↧

question about use cloud identity service User Registration Service API

September 29, 2015, 1:34 am
$
0
0

I want to test how to use the hana cloud identity service User Registration Service API to create user, when I send following url

https://x47bf8fc8.accounts400.ondemand.com/service/users?name_id=1196612589_qq&email=1196612589@qq.com&spCustomAttribute1=vendor_001&sp_name=S2f854794-96d6-40eb-a5fc-0420f9f26544

 

it will return 401Unauthorized   “Service provider cannot be determined for this request”,   how to give the service provider information? By the sp_name?  And from where to get the unique id for service provider?

↧

Re: IDM - GRC Integration

September 29, 2015, 3:12 am
$
0
0

Hi Madhu,

 

I understand the thread is pretty old, however I am having a similar doubt and couldnt find anything concrete.

 

Have found any answer for the question you have raised. Would be greatful if you can guide me.

 

Thank you.

Best Regards,

Umesh.

↧
↧

Re: Dispatcher issue

September 29, 2015, 8:25 am
$
0
0

Hello Jaisuryan,

 

Thanks for reply!

 

I have installed SP0 and have plan to move to SP10 (In fact I have upgraded to SP10 now).

 

You were right, It is warning only. I have created a test job and it run successfully.

 

 

 

Regards,

C Kumar

↧

Re: Dispatcher issue

September 29, 2015, 8:37 am
$
0
0

Thanks for reply Matt!

 

I got it now. Its warning only and my newly created job is running successfully.

 

I have installed SAP IDM 7.2 earlier too but this time I got different logs so I thought it might be error.

 

Could you please share what could be the probable reason for this difference.

 

Regards,

C Kumar

↧
Search

Re: question about use cloud identity service User Registration Service API

September 29, 2015, 9:16 am
↧

Re: Dispatcher issue

September 29, 2015, 9:56 am
$
0
0

Hi Kumar,

 

I'm guessing if you have different log information SOMETHING changed.

 

Probably environmental (JAVA)

 

Probably not worth investigating deeper unless the issue happens again.

 

Please don't forget to close out the thread!

 

Matt

↧
↧

Re: Dispatcher issue

September 29, 2015, 10:07 am
$
0
0

Ok Matt I will check my environment variables.

↧

ToLDAP pass to modify userprincipalname on AD

September 29, 2015, 11:39 am
$
0
0

Hi,


I tried to change userprincipalname for Ad account via IdM using ToLDAP pass. Somehow the task get error "LDAP: error code 53 - 00002016: SvcErr: DSID-031A12D2, problem 5003 (WILL_NOT_PERFORM), data 0]".


Any suggestion would be greatly appreciated.


Andy

↧

Re: ToLDAP pass to modify userprincipalname on AD

September 29, 2015, 12:30 pm
$
0
0

Andy,

 

Can you update other attributes using the same pass? Are you updating anything other than the UPN? If you have other attributes, can you disable all but one and see if the pass will complete successfully?

 

The only time I have seen WILL_NOT_PERFORM is when we try to enable a user that requires a password, but a password has not been set, so it is something that goes against AD's internal logic.

 

Jared

↧
Viewing all 5016 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>