NOVELL FORUMS - IM: Userapp-Workflow

User Application - setting default page error

brembold — Fri, 20 Nov 2009 23:35:04 GMT

Hey all,

I just installed the newest User Application and I'm trying to set the default page for my users when they log in.

I click Administration -> page admin
Click DefaultContainerPage
CLick select default next to default shared page

I get an error saying...
IE cannot open the internet site http://IP:8080/IDM/portal/portlet/Po...aredPagePicker

Operation aborted.

Is this a known issue? How can I get this working?

Thanks.

3.7 error messages

joakim_ganse — Fri, 20 Nov 2009 13:22:59 GMT

There must be some setting I have forgot.

I'm creating a new workflow and part of that is to deploy and test it to see what errors pop up.

When running the wf all I get is this at the top of the page:
Inactive consultant account: run_script_error
Inactive consultant account: rc_system_error
Unrecoverable error during asynchronous call

I used to get the code stating what the error was about.

connecting workflow to external java program

Uwaraj — Fri, 20 Nov 2009 12:07:02 GMT

hi
In the IdM Workflow can i use it to connect to external DB and run some queries?
or can we call external java program(rmi) in workflow.

please provide me appropriate steps about the same.

its urgent..................

thanks

uwaraj.

Neptune theme

joakim_ganse — Fri, 20 Nov 2009 09:11:38 GMT

I thought I would try out the new Neptune theme witch I have to say looks really nice.

The default stuff is great but when I come to my Workflows it gives me a pop up screen that is really small at least if you are working on a laptop as I happen to be today, is it anyway to change that size?

I can live with that if it's not changeable but the if I have an object selector that I want to click and search the vault for some object It almost hides at the bottom even if I begin with the field centered on the page, that is annoying.

If this is something that I can change somehow I would really like to go with the new theme.

Attached a picture of what I mean.

Attached Images

create-user.JPG (45.9 KB)

generic/dynamic roles

afuhrmann — Thu, 19 Nov 2009 16:27:47 GMT

I want to assign a role to a user with additional data. Imagine you have an application that works with different localities like US, EMEA, ASIA etc. You have a role "customer manager". Now you want to assign the role "customer manager" to a user only for the locality EMEA.

I know I could create 3 customer manager roles like "customer manager US", "Customer manager EMEA" and "customer manager ASIA". Then assign the role "customer manager EMEA" to the user. But think about having 100 roles and 50 localities you have to create 5'000 roles!

Is there a way to assign a generic role "customer manager" to a user, specifiy the locality the role is valid for and save this information to the role assignment. The driver finally should be able to synchronize the roles assigned to the different localities.

3.7 upgrade success

joakim_ganse — Thu, 19 Nov 2009 11:48:46 GMT

Finally my 3.61 system is upgraded to 3.7.
Many of my issues was due to a faulty media and some others to rights and my inability to understand the documentation.

Just some notes for others that may stumble, they are by no means complete and may have errors but did work for me.

First of all verify your media and not only the md5 of the downloaded iso but also again if it is copied somewhere else and if it i burned to disk.
Another verify if you suspect something is wrong is to open the .jar files wit a utility such as winzip, can it be opened and extracted successfully, and can the .zip inside it be opened and extracted.

Read through the whole install manual, not only the migration part.
The migration part is mostly a document that references to selectad parts of the install manual and while it is correct it surely helps your understanding of what will happen if you read the whole manual.

If you are running eDir on windows the schema update ( at least for me ) had to be run as a local admin because the eDir restarts as that user for the schema extension and needs those rights.

Remember to delete and recreate the Role Service Driver.

You have to fully re-install using the supported versions of
software for the Application Server (in my case Jboss).

Remember to have the User Application driver stopped when starting the User Application the first time.

Right now I'm a happy camper because it works and looks good, now off to real testing.

UA 3.7 MySql error after install

idmforumuser — Thu, 19 Nov 2009 08:50:59 GMT

Hi all,

I install the JBoss+MySql on a W2k3sp2 server. When I use the JBossMySQL.exe installer everything goes oke, until I start MySql at the end. The error is something like:
warning option thread stack. unsigned value 65536 adjusted to 131072. The same error occurs when I start mysql with start-mysql.bat
After that the UA installer cannot create the tables during the install.

What goes wrong here?

Other question, how do I uninstall UA, JBoss & MySQL. Can I just delete the whole directory?

thanks

Casper

RBPM3.6.1 Provisioning API MultiStart - FlowStrategies

belaie — Wed, 18 Nov 2009 23:16:12 GMT

Novell Roles based provisioning module 3.6.1
Novell eDirectory 8.8 (newest)

I have created a PRD as "Flow Per Member" Flow strategy, that means if the recipient is a Group, the Provisionig system will create a seprate requestId for each member of the group.

When doing this operation from within RBPM 3.6.1 UA (UI), it works, ivoking the same PRD from within Provisionig API (java ua client) only creates one requestID, and that is for group, but works fine if i create explicit stringarray of all the members of this group recipients.

here is the snap_shot:

String listOfRecipients[] = {"cn=Human Resource,ou=digitalair,o=novell"};
StringArray listOfRecipientStringArray = new StringArray(listOfRecipients);

StringArray getRequestIds = multiStart("RDN_OF_THE_PRD",listOfRecipientStringA rray,"REASON");

User Application: Can UniqueID be the login attribute?

celsolima — Wed, 18 Nov 2009 21:30:17 GMT

I am setting up a tree where the uniqueID attribute will have a different value from the cn attribute in the dn. In other words each entry will look like this

Dn: cn=123456789,ou=users,o=org
uniqueID: john.doe
cn=123456789
etc

This tree will be used for an e-mail system where users will authenticate using their uniqueID which will match the first part of their e-mail address. As part of that system I also have an instance of the user application in standard mode.

After I put everything together, I noticed that in order for a user to login into the user application he/she must use the value of cn. What can I change so the attribute used is uniqueID? We need that cn value for our helpdesk, as part of identification during a helpdesk call. Besides that number will match our ERP system.

I have been looking at both the admin and design guide, but I cannot find anything pertaining to that.

Error deploying User App 3.7 on Weblogic

sirishaalla — Wed, 18 Nov 2009 16:57:04 GMT

I've deployed User App 3.7 on Weblogic 10.3 App server running on redhat linux 5.1. After loading the certificates, I started the WLS server. Now I am getting an error :

19:12:47,431 INFO [DatabaseSchemaUpdate] Checking for database schema
19:12:47,777 INFO [DatabaseSchemaUpdate] Checking schema for table AFACTIVITY....missing
19:12:48,096 INFO [DatabaseSchemaUpdate] Checking schema for table AFACTIVITYTIMERTASKS....missing
19:12:48,413 INFO [DatabaseSchemaUpdate] Checking schema for table AFBRANCH....missing
19:12:48,730 INFO [DatabaseSchemaUpdate] Checking schema for table AFCOMMENT....missing
19:12:49,050 INFO [DatabaseSchemaUpdate] Checking schema for table AFDOCUMENT....missing
19:12:49,368 INFO [DatabaseSchemaUpdate] Checking schema for table AFENGINE....missing
19:12:49,691 INFO [DatabaseSchemaUpdate] Checking schema for table AFENGINESTATE....missing
19:12:50,009 INFO [DatabaseSchemaUpdate] Checking schema for table AFMODEL....missing
19:12:50,329 INFO [DatabaseSchemaUpdate] Checking schema for table AFPROCESS....missing
19:12:50,646 INFO [DatabaseSchemaUpdate] Checking schema for table AFPROVISIONINGSTATUS....missing
19:12:50,966 INFO [DatabaseSchemaUpdate] Checking schema for table AFQUORUM....missing
19:12:51,286 INFO [DatabaseSchemaUpdate] Checking schema for table AFWORKTASK....missing
19:12:51,613 INFO [DatabaseSchemaUpdate] Checking schema for table AF_ROLE_REQUEST_STATUS....missing
19:12:51,932 INFO [DatabaseSchemaUpdate] Checking schema for table ATTESTATION_ATTESTER....missing
19:12:52,251 INFO [DatabaseSchemaUpdate] Checking schema for table ATTESTATION_ATTRIBUTE....missing
19:12:52,570 INFO [DatabaseSchemaUpdate] Checking schema for table ATTESTATION_QUESTION....missing
19:12:52,888 INFO [DatabaseSchemaUpdate] Checking schema for table ATTESTATION_REPORT....missing
19:12:53,204 INFO [DatabaseSchemaUpdate] Checking schema for table ATTESTATION_REQUEST....missing
19:12:53,519 INFO [DatabaseSchemaUpdate] Checking schema for table ATTESTATION_RESPONSE....missing
19:12:53,835 INFO [DatabaseSchemaUpdate] Checking schema for table ATTESTATION_SURVEY_QUESTION....missing
19:12:54,151 INFO [DatabaseSchemaUpdate] Checking schema for table ATTESTATION_TARGET....missing
19:12:54,467 INFO [DatabaseSchemaUpdate] Checking schema for table AUTHPROPS....missing
19:12:54,785 INFO [DatabaseSchemaUpdate] Checking schema for table DSS_APPLET_BROWSER_TYPES....missing
19:12:55,102 INFO [DatabaseSchemaUpdate] Checking schema for table DSS_APPLET_CFG....missing
19:12:55,419 INFO [DatabaseSchemaUpdate] Checking schema for table DSS_APPLET_CFG_MAP....missing
19:12:55,735 INFO [DatabaseSchemaUpdate] Checking schema for table DSS_BROWSER_TYPE....missing
19:12:56,051 INFO [DatabaseSchemaUpdate] Checking schema for table DSS_CONFIG....missing
19:12:56,367 INFO [DatabaseSchemaUpdate] Checking schema for table DSS_EXT_KEY_USAGE_RESTRICTION....missing
19:12:56,683 INFO [DatabaseSchemaUpdate] Checking schema for table DSS_USR_POLICY_SET....missing
19:12:56,999 INFO [DatabaseSchemaUpdate] Checking schema for table PORTALCATEGORY....missing
19:12:57,316 INFO [DatabaseSchemaUpdate] Checking schema for table PORTALPORTLETHANDLES....missing
19:12:57,637 INFO [DatabaseSchemaUpdate] Checking schema for table PORTALPORTLETSETTINGS....missing
19:12:57,954 INFO [DatabaseSchemaUpdate] Checking schema for table PORTALPRODUCERREGISTRY....missing
19:12:58,270 INFO [DatabaseSchemaUpdate] Checking schema for table PORTALPRODUCERS....missing
19:12:58,586 INFO [DatabaseSchemaUpdate] Checking schema for table PORTALREGISTRY....missing
19:12:58,903 INFO [DatabaseSchemaUpdate] Checking schema for table PROFILEGROUPPREFERENCES....missing
19:12:59,220 INFO [DatabaseSchemaUpdate] Checking schema for table PROFILEUSERPREFERENCES....missing
19:12:59,536 INFO [DatabaseSchemaUpdate] Checking schema for table PROVISIONING_CODE_MAP....missing
19:12:59,852 INFO [DatabaseSchemaUpdate] Checking schema for table PROVISIONING_CODE_MAP_LABEL....missing
19:13:00,170 INFO [DatabaseSchemaUpdate] Checking schema for table PROVISIONING_VIEW_VALUE....missing
19:13:00,488 INFO [DatabaseSchemaUpdate] Checking schema for table PROVISIONING_VIEW_VALUE_LABEL....missing
19:13:00,804 INFO [DatabaseSchemaUpdate] Checking schema for table SECURITYACCESSRIGHTS....missing
19:13:01,120 INFO [DatabaseSchemaUpdate] Checking schema for table SECURITYPERMISSIONMETA....missing
19:13:01,436 INFO [DatabaseSchemaUpdate] Checking schema for table SECURITYPERMISSIONS....missing
19:13:01,752 INFO [DatabaseSchemaUpdate] Checking schema for table SEC_DELPROXY_CFG....missing
19:13:02,069 INFO [DatabaseSchemaUpdate] Checking schema for table SEC_DELPROXY_SRV_CFG....missing
19:13:02,386 INFO [DatabaseSchemaUpdate] Checking schema for table SEC_SYNC_CLEANUP_QUEUE....missing
19:13:02,399 ERROR [EboPortalBootServlet] Unexpected Runtime Exception initializing servlet
java.lang.RuntimeException: com.novell.soa.common.LocalizedRuntimeException: Schema is invalid. One or more required tables are missing. Check log for messages indicating tables that were not found.

--------------------------------------------------------------------------
The schema has been created as part of the User Application install and i've verified that the schema and tables have been created and existing. Any thoughts on what is causing the error would help.

Script to fill guest page form

Diogo12 — Tue, 17 Nov 2009 17:47:20 GMT

I have a public guest page running for userapp and some of the fields are mandatory, but it happens that by mistake i made an attribute that happened to be the same value as the CN, mandatory, then in the form they both appear to be filled, but they are the same thing, so i hid one of them but i need it to have the same value as the CN that is already being filled in the form. How do i do that?

i tried get.process("cn") and get.value("cn") in the expression field for the attribute, but neither worked. Can someone help me?

Thank you.

Webservice provisioning with3.7

Chezy — Tue, 17 Nov 2009 16:29:41 GMT

Hi,

I'll appreciate any head start I can get how to build the request to set and get a request to 3.7.

I wold like to use php with soap to send requests and get status of request from the workflow engine..

I'm new to this so I need the basic examples and help.

Thanks,

Chezy Gal

UserApp for just password management

kjhurni — Tue, 17 Nov 2009 14:51:17 GMT

If I'm just using the UserApp for password management/forgotten password, I'm assuming i don't have to customize anything for the User entity in the DAL?

Is there a way to setup the UserApp for JUST password management so they can't get into the portal of IDM and do searches and things?

Or does that require that I seriously edit the DAL?

RBPM 3.7 Installation Issue On Windows Doesnt Happen On SLES

Chris Boyle — Tue, 17 Nov 2009 13:39:14 GMT

Hi all

I have an established 3.6.1 User Application built on Windows 2003
Server with eDirectory 8.8.5 and IDM 3.6.1

When I run the NrfCaseUpdate utility, it performs the following steps
� Export each instance of the attribute to an LDIF file
o nrfLocalizedNames
o nrfLocalizedDescrs
� Then the utility performs the schema upgrade and reports successes
in the NDSSchema.log
� eDirectory fails to restart but the utility reports success.
� You restart eDirectory, and then use the ice command to import the
ldif. Successes again.
� Then when you run the RBPM Module install it says the schema
isn�t extended.
� If you run the schema extension again the NDSschema log reports
that the schema matches the changes and stops processing which would
be correct if the schema was changed successfully.

I have also successfully imported the schema using install.dlm from
ndscons, which also reports success.

When you query both attributes in iManager it reports that they are
case insensitive, ie CI String. Which is what the utility is supposed to do.

The ModSchema.log shows the following:

1st time sucess, 2nd, 3rd, 4th repeat and manual import shows nothing to
do as its already done.

I'm aware that Novell support have said they try it on a VM and it
works, but I think it needs investigating. I have logged a called with
them, but if anyone has a fix in the mean time that would be good

Also what exactly does the rbpm_driver_install.exe (SchemaCheck) check?

/************************************************** **************************
Mon Nov 16 19:10:27 2009
Begin schema update for: C:\Novell\user_app_install\update-nrf-case.sch
(Note: Successfully resolved to server: .SRV-IDV-NDS.SERVICES.trustiv.TRUST)
Modifying schema attributes...
(Note: Successfully resolved to server: .SRV-IDV-NDS.SERVICES.trustiv.TRUST)
: Different from existing definition, will attempt
to modify
Syntax: Modified OK
: Different from existing definition, will
attempt to modify
Syntax: Modified OK
Schema update summary: 0 warnings and 0 errors

/************************************************** **************************
Mon Nov 16 20:29:35 2009
Begin schema update for: C:\Novell\user_app_install\update-nrf-case.sch
(Note: Successfully resolved to server: .SRV-IDV-NDS.SERVICES.trustiv.TRUST)
Modifying schema attributes...
: Modification unnecessary
: Modification unnecessary
Schema update summary: 0 warnings and 0 errors

/************************************************** **************************
Mon Nov 16 20:36:16 2009
Begin schema update for: C:\Novell\user_app_install\update-nrf-case.sch
(Note: Successfully resolved to server: .SRV-IDV-NDS.SERVICES.trustiv.TRUST)
Modifying schema attributes...
: Modification unnecessary
: Modification unnecessary
Schema update summary: 0 warnings and 0 errors

/************************************************** **************************
Mon Nov 16 21:14:34 2009
Begin schema update for: C:\Novell\user_app_install\update-nrf-case.sch
(Note: Successfully resolved to server: .SRV-IDV-NDS.SERVICES.trustiv.TRUST)
Modifying schema attributes...
: Modification unnecessary
: Modification unnecessary
Schema update summary: 0 warnings and 0 errors

Role Container Naming Collisions

bjohnsonacn — Tue, 17 Nov 2009 05:43:53 GMT

I am creating roles and role containers within both the IT level and permission level role container. I am trying to maintain the structure under each container to separate out the business units that own the roles as such:

IT Roles
- Organization Role Container
- Business Unit Role Container
- Role 1
- Role 2

Permission Roles
- Organization Role Container
- Business Unit Role container
- Role 3
- Role 4

As you can see, my role container names are the same (since they are logically separated between IT and Permission) but for some reason when I do a compare on the IT level "Organization Role Container" designer does a compare against the the other "Organization Role Container" under the permission level. Should I not be naming the role containers the same name, even though they are separated?