Google Search

Tuesday, September 29, 2015

FVC (Form Version Control Utility)

Usage:

If we add new field(s) in Process Form, that field won't be available for the existing provisioned users.

Solution:

FVC (Form Version Control Utility) comes with OIM which updates the form which are associated with existing users.

Run fvcutil.sh (Linux)/fvcutil.bat (windows)

OR

Update PROCESS_FORM_TABLE set PROCESS_FORM_TABLE_VERSION =
(Select SDK_ACTIVE_VERSION from SDK where SDK_NAME='PROCESS_FORM_TABLE');
COMMIT;

NOTE:
Replace PROCESS_FORM_TABLE with actual process form i.e. "UD_XXX"

Sunday, September 13, 2015

How to checks the logs for Weblogic/SOA/OIM and OAM Servers in Linux

Server Log locations :

1. Weblogic Server : $DOMAIN_HOME/servers/Admin_server and view admin_server_diagnostic.log

2. SOA Server : $DOMAIN_HOME/servers/soa_server1 and view soa_server1_diagnostic.log

3. OIM Server : $DOMAIN_HOME/servers/oim_server1 and view oim_server1_diagnostic.log

4. OAM Server : $DOMAIN_HOME/servers/oam_server1 and view oam_server1_diagnostic.log

Configuring UMS Email Notification

This post describes how to configure UMS email notification. This is optional. The following steps assume that an email server has been set up and that Oracle Identity Management can use it to send the email notifications.

1. Log in to the Oracle Enterprise Manager Fusion Middleware Control instance that is associated with Oracle Identity Manager
2. Expand User Messaging Service.
3. Right click usermessagingdriver-email (WLS_SOA1) and select email driver properties.
4. Enter the following information:
            ⦁ OutgoingMailServer: name of the SMTP server, for example: SMTP.mycompany.com
            ⦁ OutgoingMailServerPort: port of the SMTP server, for example: 465 for SSL outgoing mail server and 25 for non-SSL
            ⦁ OutgoingMailServerSecurity: The security setting used by the SMTP server Possible values can be None/TLS/SSL. If the mail server is configured to accept SSL requests, perform these additional steps to remove DemoTrust store references from the SOA environment:


                1. Modify the MSERVER_HOME/bin/setDomainEnv.sh file to remove the DemoTrust references -Djavax.net.ssl.trustStore=WL_HOME/server/lib/DemoTrust.jks from EXTRA_JAVA_PROPERTIES.
                2. Modify the startManagedWeblogic.sh file on IDMHOST1 and IDMHOST2. Remove the weblogic.security.SSL.trustedCAKeyStore property set in JAVA_OPTIONS from this file. That is, remove the line that looks like this:
                       a. JAVA_OPTIONS="-Dweblogic.security.SSL.trustedCAKeyStore="{MW_HOME}/server/server/lib/cacerts" ${JAVA_OPTIONS}"
               3. Restart Oracle Identity Manager and the OIM and SOA managed servers.
                      ⦁ OutgoingUsername: Any valid username
                      ⦁ OutgoingPassword:
                          1. Choose Indirect Password, Create New User
                          2. Provide a unique string for Indirect Username/Key, for example: OIMEmailConfig. This will mask the password and not expose it in clear text in the configuration file.
                         3. Provide valid password for this account.
                         4. Click Apply.
5. Repeat Steps 3 and 4 for each SOA server.
6. From the Navigator Select WebLogic Domain -> DomainName.
7. From the menu, select System Mean Browser.
8. Expand Application Defined MBeans -> oracle.iam -> Server: WLS_OIM1 -> Application: oim -> IAMAppRuntimeMBean.
9. Click UMSEmailNotificationProviderMBean.
10. Enter:
              ⦁ WSUrl:
http://test.mycompany.com:80/ucs/messaging/webservice
              ⦁ Policies: Leave blank.
              ⦁ CSFKey: Notification.Provider.Key
11.  Click Apply.

Enabling The Logging in OIM 11g

Enabling The Logging in OIM 11g

Any Custom Schedule Task and Event Handlers to debug in the OIM 11g Server to enable the logging. The following way to enable the logging in Oracle Identity Manager 11g.

Pre-Requisite

Java Code Configuration

Add the following line into your java code.

Import Statement

import com.thortech.util.logging.Logger;

private Logger logger=Logger.getLogger("Logger-Name");

Configuration Of Logging
Go to the $DOMAIN_HOME/config/fmwconfig/servers/oim_server1 directory and edit the logging.xml file.

Configure The Log Handler

< log_handler name='logger Handel Name' level='FINEST' class='oracle.core.ojdl.logging.ODLHandlerFactory'>
< property name='logreader:' value='off'/>
< property name='path' value='Log File Location'/>
< property name='format' value='ODL-Text'/>
< property name='useThreadName' value='true'/>
< property name='locale' value='en'/>
< property name='maxFileSize' value='5242880'/>
< property name='maxLogSize' value='52428800'/>
< property name='encoding' value='UTF-8'/>

Include The Logger Handler Logger Configuration

< logger name="Logger-Name" level="Log Level" useParentHandlers="false">
< handler name="logger-Handel-Name"/>
< handler name="console-handler"/>
< /logger>

Oracle Identity Manager 11G Log Levels

Log Level ODL Message Type:Level

SEVERE.intValue()+100   INCIDENT_ERROR:1
SEVERE                             ERROR:1
WARNING                        WARNING:1
INFO                                  NOTIFICATION:1
CONFIG                            NOTIFICATION:16
FINE                                 TRACE:1
FINER                              TRACE:16
FINEST                            TRACE:32

The FINEST log level will give the more debug info. If you want to debug your schedule task or event handlers, please use FINEST Log level.


Also, you can change the log levels using EM console as well.

Please refer the below URL for more information on this Loggers
http://docs.oracle.com/cd/E21764_01/doc.1111/e14308/log.htm#OMADM4235