Previous Topic: AttributeLevelEncryption for User PasswordsNext Topic: setpasswd Fails on 64-bit Linux Systems


Specifying LDAP DN When Using TEWS

Symptom:

When using TEWS to call the task "CreateOracleServerAccountTemplate" you can get back the following error message:

Error Message: <code>500</code>
<description>Failed to execute CreateOracleServerAccountTemplate. ERROR
MESSAGE: com.ca.iam.model.IAMParseException: Not a valid IAM handle:
'UHGUSERS' ProcessStep::Unknown TabName: null ERRORLEVEL::Fatal</description>

The problem is that the DN TEWS is expecting is not what is in the Provisioning Directory. 

This example did not work:

eTORADirectoryName=WSDLOracle4,eTNamespaceName=Oracle Server,dc=im,dc=eta

This example is the DN that did work:

EndPoint=WSDLOracle4,Namespace=Oracle Server,Domain=im,Server=Server

Solution:

To find the mapping make sure the application server log levels are set to verbose.  Execute the Identity Manager tasks for which you need the data/paths.  The paths will be in the log file. Searching on "<" and  "insert into IM_" can be helpful for finding the paths as well as attribute values being passed by the tasks.