CA Identity Manager Connector Guides › Connectors Guide › Connecting to Endpoints › Oracle Connector › Connector Specific Features › Suspend Operation Locks User Accounts

Suspend Operation Locks User Accounts

After suspending an Oracle account from the User Console, the user account status shows both Suspended and Locked.

The Oracle connector considers both Suspend and Lock as one operation. The Oracle account cannot be suspended and unlocked nor can it be active and locked.

Resume Operation Resumes and Unlocks Suspended User Accounts

When performing a Resume operation on a Suspended account, the Oracle Connector both resumes and unlocks the account.

Enable the Fix for Oracle Bug 6376915

The Oracle bug 6376915 causes high water (HW) enqueue contention when the database is busy handling large objects (LOB) and the database is configured to use automatic segments space management (ASSM).

This bug causes performance and scalability problems with CA software, including CA Identity Manager and CA CloudMinder.

The fix for this problem introduces a mandatory event. Set this new event to make the ASSM architecture allocate LOB chunks more efficiently.

This bug was introduced in Oracle 10.2.0.3. It was fixed in both Oracle 10.2.0.4 and Oracle 11.1.0.7. However, the fix is not enabled by default.

The steps in this procedure assume that spfile is used for configuration.

Follow these steps:

1. Enter the following command:

   ALTER SYSTEM SET EVENT='44951 TRACE NAME CONTEXT FOREVER, LEVEL 1024' scope=spfile;
   

2. Restart the database.
3. To test the fix, use the following measures:
   • Use Bulk Loader to measure the task throughput in CA Identity Manager and CA CloudMinder.
   • Measure the wait time for HW enqueue contention.

Oracle Etautil Conventions

Use the following Oracle conventions in your etautil commands:

• The endpoint type name (eTNamespaceName) is Oracle Server
• The endpoint type prefix is ORA. Therefore, the Oracle class names are:
  • eTORADirectory for an endpoint
  • eTORAPolicyContainerName for an account template container
  • eTORAPolicy for an account template

Oracle Account Templates

The Oracle Default Policy automatically sets the user name and password to the global user account ID and the authentication type to LOCAL.

Well-Known Attribute %ENDPOINT_DESCRIPTION%

This applies to the following connectors: Windows, Oracle RDBMS, Siebel, UNIX NIS, MS SQL Server, and OpenVMS.

These endpoint types do not define the endpoint description in the eTDescription attribute. This means that until recently, you could not search on the endpoint description. In addition, the search screen did not display the endpoint description.

You can now use the new well-known attribute %ENDPOINT_DESCRIPTION% for the affected connectors.

The DefaultEndpointSearch role definition has been updated, to allow the Default Endpoint Search screen to use the new well-known attribute. If you are upgrading from an older version of CA Identity Manager, import this modified screen after upgrading. For more information, see the Environment Changes section in your Upgrade Guide.