| Oracle® Identity Manager Release Notes Release 9.0.3 Part Number B32458-02 |
|
| View PDF |
| Oracle® Identity Manager Release Notes Release 9.0.3 Part Number B32458-02 |
|
| View PDF |
Release Notes
Release 9.0.3
B32458-02
March 2007
This document contains release notes for Oracle Identity Manager Release 9.0.3 and includes the following topics:
Notes:
Oracle Identity Manager was previously known as Oracle Xellerate Identity Provisioning.
Oracle Identity Manager Connectors, which were previously referred to as resource adapters, are no longer bundled with Oracle Identity Manager. Oracle Identity Manager Connectors are now distributed several times a year in the Oracle Identity Manager Connector Pack, independent from Oracle Identity Manager.
See Also:
The following documentation, located on your installation media, for detailed information on Oracle Identity Manager:Release 9.0.3 includes the following new functionality:
Release 9.0.3 includes Generic Technology Connector functionality allowing you to create and manage custom connectors independent of the APIs that a target system supports and the data repository type and schema in which a target system stores identity data. Refer to the Oracle Identity Manager Generic Technology Connector Administrator's Guide for complete information.
Release 9.0.3 expands Oracle Identity Manager globalization support by including localized translations for the following new languages:
Chinese Simplified
Chinese Traditional
German
Italian
Korean
Portuguese (Brazilian)
Spanish
Refer to the Oracle Identity Manager Globalization Guide for complete information on Oracle Identity Manager globalization support.
Release 9.0.3 supports newer versions of application servers, specifically:
WebSphere 5.1.1.12
WebLogic 8.1 with Service Pack 6 (SP6)
JBoss 4.0.3 with SP1
Refer to Certified Application Servers for a complete list of the certified application servers for Release 9.0.3.
Release 9.0.3 includes a new Reconciliation Archival utility that allows you to perform the following tasks for both Oracle and SQL Server databases:
Archive all data or specified from the active reconciliation tables to the archive reconciliation tables
Delete data from the archive reconciliation tables
Delete data from the active reconciliation tables
Refer to the Oracle Identity Manager Best Practices Guide for more information about the Reconciliation Archival utility.
Release 9.0.3 supports Crystal Reports integration that allows you to create Crystal Report versions of Oracle Identity Manager reports. Refer to the Oracle Identity Manager Integration Guide for Crystal Reports for more information about integrating Crystal Reports with Oracle Identity Manager.
Release 9.0.3 supports integration with Oracle Application Server (OracleAS) Single Sign-On. Release 9.0.3 is certified for OracleAS Single Sign-On 10g 10.1.4.0.1 for both ASCII and non-ASCII character logins.
Release 9.0.3 supports both clustered and non-clustered Oracle Application Server environments. Refer to the Oracle Identity Manager Installation Guide for Oracle Application Server for more information on deploying Oracle Identity Manager in Oracle Application Server clusters.
Release 9.0.3 includes a new feature that allows you to set the password for the Oracle Identity Manager Administrator during installation.
Release 9.0.3 includes multiple User Profile Auditing enhancements, including:
A new flag named XL.SendAuditJMSMessage to hold JMS messages from the User Profile Auditing queue.
User Profile Audit engine enhanced to recreate the initial snapshot if audit is created for a user and no initial snapshot is present.
Refer to the Oracle Identity Manager Audit Report Developer's Guide for complete information.
The Oracle Identity Manager installer program for WebLogic was improved in Release 9.0.3 to configure multiple WebLogic configuration settings for production environments by default, including JDBC Connection Pool and JMS Queue settings.
Refer to the Oracle Identity Manager Installation Guide for WebLogic for more information.
This section identifies components certified with Release 9.0.3 and contains the following topics:
Release 9.0.3 is certified for the following application servers:
WebSphere 5.1.1.12
WebLogic 8.1 with Service Pack 6 (SP6)
JBoss 4.0.3 with SP1
Oracle Application Server SOA Suite 10g (10.1.3.1.0)
Note:
When you run the Oracle SOA Suite installer program you must choose the Advanced Install option and choose only the J2EE Server and Web Server option on the Select Installation Type screen. No other installation type will support Release 9.0.3—you must choose the J2EE Server and Web Server option.The Release 9.0.3 Oracle Identity Manager server is certified for the following operating systems:
Red Hat Linux AS 4.3
Windows 2003 R2
Note:
For information about additional certified operating systems for Release 9.0.3, refer to the Oracle Identity Management Certification Information on the Oracle Technology Network Web site at:Release 9.0.3 is certified for the following databases:
Oracle 9i Enterprise Edition Releases:
9.2.0.7
9.2.0.8
Oracle 10g Enterprise Edition Releases:
10.1.0.5
10.2.0.1
10.2.0.2
10.2.0.2 with RAC
Release 9.0.3 is certified for the following languages:
English
Japanese
French
Chinese Simplified
Chinese Traditional
German
Italian
Korean
Portuguese (Brazilian)
Spanish
Note:
Refer to the Oracle Identity Manager Globalization Guide for complete information on Oracle Identity Manager globalization support.Release 9.0.3 is certified for the following JDKs for each certified application server:
Release 9.0.3 is certified for the configurations listed in Table 2. All configurations are certified for clustered and non-clustered environments.
Table 2 Release 9.0.3 Certified Configurations
| Application Server | Operating System | Database | Languages |
|---|---|---|---|
|
WebSphere |
Red Hat Linux |
Oracle |
All Oracle Identity Manager Certified Languages. |
|
JBoss |
Red Hat Linux |
Oracle |
All Oracle Identity Manager Certified Languages. |
|
|
Windows |
Oracle |
All Oracle Identity Manager Certified Languages. |
|
Oracle Application Server |
Red Hat Linux |
Oracle |
All Oracle Identity Manager Certified Languages. |
|
|
Windows |
Oracle |
All Oracle Identity Manager Certified Languages. |
|
WebLogic |
Red Hat Linux |
Oracle |
All Oracle Identity Manager Certified Languages. |
|
|
Windows |
Oracle |
All Oracle Identity Manager Certified Languages. |
Note:
For information about additional certified configurations for Release 9.0.3, refer to the Oracle Identity Management Certification Information on the Oracle Technology Network Web site at:The Release 9.0.3 Oracle Identity Manager Design Console is certified on all versions of Windows 2003 and Windows XP.
The Release 9.0.3 Oracle Identity Manager Remote Manager is certified on the following operating systems:
Red Hat Linux AS 4.3
Windows 2003 R2
Note:
For information about additional Remote Manager certified operating systems for Release 9.0.3, refer to the Oracle Identity Management Certification Information on the Oracle Technology Network Web site at:Release 9.0.3 is certified for Single Sign-On with the following components:
Oracle Access Manager 10.1.4.0.1 (formerly known as Oracle COREid) using ASCII character logins and non-ASCII character logins.
Note:
Single Sign-On with Oracle Access Manager 10.1.4.0.1 for non-ASCII character logins requires an Oracle Access Manager patch. Contact your Oracle support representative and reference Bug 5552617 to acquire the appropriate Oracle Access Manager patch.OracleAS Single Sign-On 10g 10.1.4.0.1 for ASCII and non-ASCII character logins
RSA ClearTrust 5.5 for ASCII character logins only
See Also:
The Oracle Identity Manager Best Practices Guide for additional information about configuring Single Sign-On for Oracle Identity Manager with Oracle Access Manager and OracleAS Single Sign-On.Release 9.0.3 is certified for Microsoft Internet Explorer 6.0 with SP2.
This section describes known issues for Release 9.0.3. If a suitable workaround exists for a known issue, it is listed with the description of the issue to provide a temporary solution. This section contains the following topics:
This section describes known issues related to the installation of Release 9.0.3 components. This section contains the following topics:
Installer Program Does Not Verify WebLogic Server Name (Bug 5389372)
Installation Fails When The Database User Name Includes Special Characters (Bug 5563636)
Design Console's xlclient.cmd Executable Does Not Launch if Paths Include a Space (Bug 5853425)
The Oracle Identity Manager installer program does not verify the application server name when installing on WebLogic and the installation is successful regardless if you enter the incorrect WebLogic server name.
For example, you want to install Oracle Identity Manager on a WebLogic server named myWebLogic. On the installer's Weblogic Application Server Information page, you enter the IP address for myWeblogic, but incorrectly enter yourWebLogic as the name for the myWebLogic server. The installer program installs Oracle Identity Manager on myWebLogic despite the incorrect server name. To avoid this issue, double-check the name of the WebLogic server you enter when installing Oracle Identity Manager.
Clicking the Cancel button while the Oracle Identity Manager server is installing displays the error message: The current operation cannot be cancelled.
You can ignore this error message. Clicking the Cancel button does stop the Oracle Identity Manager server installation process.
The Oracle Identity Manager installer program fails when you specify a string that includes any of the following special characters for the database user name:
Asterisks (*)
Commas (,)
Hyphens (-)
Apostrophes or single quotations (')
Double quotations (")
To avoid this issue, be sure you specify a database user name that meets the following requirements:
All characters are alphanumeric
The first character is a letter
The string does not contain any special characters
When installing Oracle Identity Manager on a WebLogic application server, entering an incorrect path to the WebLogic Domain directory will terminate the installation and the following error message appears:
You do not have write permission on <incorrect path to WebLogic Domain directory>. Make sure that you have a write permission on it and start installation process again.
To avoid this issue, double-check the path you enter for the WebLogic Domain directory is correct and does not contain any typographic errors.
This section describes known issues related to the general runtime operation of Release 9.0.3, including known issues for Oracle Identity Manager server and known issues for the Administrative and User Console not related to reporting. This section contains the following topics:
Stack Overflow Exception Thrown When Importing an XML File (Bug 5350771)
Pending Approvals Cannot be Filtered by Requester Name (Bug 5365516)
URL for Administrative and User Console Calendar Icon May Appear Twice in Windows 2003 (Bug 5330984)
Cannot Delete a Group That is A Process Owner for an Attestation Process (Bug 5469706)
Errors When Modifying Settings and Assignments for Internal System Seeded Users (Bug 5357781)
Groups with Data Object Permissions on Form Not Exported with Resource (Bug 5345276)
Resource Dependency Relationships Are Reversed After Export (Bug 5345236)
Null Pointer Exception Thrown When Running the purgecache.bat Utility (Bug 5388849)
Single Sign-On Login Fails When "Force to set questions at startup" is TRUE (Bug 5565798)
When you import an XML file, a stack overflow exception may be thrown if the import operation changes the organizational hierarchy. You can safely ignore this exception.
After installing Release 9.0.3 on WebSphere 5.1.1.12 and starting the application server, a benign exception warning message appears in the WebSphere log regarding the following:
J2CA0007W: An exception occurred while invoking method setsetMcfPassword on com.ibm.ejs.jms.JMSManagedQueueSessionFactory
This is a known WebSphere exception warning message and can safely be ignored. Refer to IBM's WebSphere Application Server support Web site for more information.
When replicating session data, the JBoss application server may fail and generate the following exception in a clustered configuration:
16:43:07,296 ERROR [JBossCacheManager] processSessionRepl: failed with exception: java.util.ConcurrentModificationException 16:43:07,296 WARN [InstantSnapshotManager] Failed to replicate sessionID:GzUYJdxlSLVxS7ssRtvWwQ**.tqx00
If you attempt to use the Requester filter to refine the results in the Pending Approvals page, a message displays indicating the search did not return any results. You can only use the Requester filter to refine results by the requester ID and not by requester first name or last name.
The URL for the calendar icon in the Administrative and User Console may appear twice on Windows 2003 platforms.
In the Administrative and User Console, searching based on the Date Type User Defined Field may return all records instead of just the records matching the specified dates. Using character string input as search criteria may also return all records. To avoid these issues, be sure to use the following date format: YYYY-MM-DD.
If an Attestation process has a group as its Process Owner, that group cannot be deleted. Attempting to delete the group will display a System Error page. To avoid this issue, modify the attestation process definition and assign a different group as the process owner group. You can delete the original group after assigning a different process owner group.
All dates in the Administrative and User Console must be edited using the calendar icon associated with the Date field. Do not edit dates directly by entering text in a Date field, instead, use that field's calendar icon to edit the date value.
Do not modify any settings or assignments for internal system seeded users. If you attempt to modify any settings or assignments for internal system seeded users you may encounter errors.
When you export a resource, groups with Data Object permissions on that form are not exported with the resource.
Resource dependency relationships are reversed after exporting a resource using the Administrative and User Console's Deployment Manager. For example, Resource-Y depends on Resource-X. After exporting Resource-Y, Resource-X is not displayed as a dependency. However, after exporting Resource-X, Resource-Y is displayed as its dependency.
After a Single Sign-On session time out, clicking Restart in the Administrative and User Console's Deployment Manager or WorkFlow Visualizer windows may cause a "Client-Side error occurred" error message to appear. If this message appears, close the browser and access the Administrative and User Console using a new browser window.
When you run the purgecache.bat utility, the following exception is thrown:
java.lang.NullPointerException
at
com.opensymphony.oscache.base.AbstractCacheAdministrator
.finalizeListeners(Abs
tractCacheAdministrator.java:323)
at
com.opensymphony.oscache.general.GeneralCacheAdministrator
.destroy(GeneralCacheAdministrator.java:168)
at net.sf.hibernate.cache.OSCache.destroy(OSCache.java:59)
at
net.sf.hibernate.cache.ReadWriteCache.destroy(ReadWriteCache.java:215)
at
net.sf.hibernate.impl.SessionFactoryImpl.close(SessionFactoryImpl.java:542)
This exception can be safely ignored.
After running a report in the Administrative and User Console and clicking the Export CSV button to export the report data to Comma Separated Value format, a File Download window appears. In Internet Explorer version 6.0.2800, clicking on the Open button in the File Download window may display the same File Download window again. Click the Open button on the second File Download window to open the CSV file. This issue does not occur with Internet Explorer version 6.0.2900 and higher.
The Administrative and User console does not support password reset questions in Single Sign-On mode. When the "Force to set questions at startup" flag is set to TRUE, login fails. To avoid this issue, perform the following steps:
Log in to the Design Console as xelsysadm.
Search for the system configuration parameter "Force to set questions at startup", set it to FALSE, and save the change.
You cannot disable organizations that have child, suborganizations without first removing the suborganizations. Release 9.0.3 contains a known issue where disabling an organization with a suborganization is permitted and no message is displayed. The organization is disabled regardless if it has suborganizations and no message appears to alert you if the organization has suborganizations.
Each application server exhibits different behavior when a database connection is lost during execution. While JBoss can automatically reestablish database connection, WebLogic and WebSphere cannot. For WebLogic, you can define settings for testing reserved connections, in which case the connections are established automatically. For WebSphere, you must configure your database for high-availability.
When connecting to the Administrative and User Console on Oracle Application Servers, do not use the IP address of the machine hosting the Oracle Application Server in the URL, as you may encounter errors. Instead, be sure to use the fully-qualified domain name of the machine hosting the Oracle Application Server in the URL for the Administrative and User Console, for example:
http://localhost:7777/xlWebApp
Release 9.0.3 contains the following known issues for users that were created with the same user ID as a previously deleted user, regardless if the user ID reuse property is enabled:
those users cannot Create Request (Bug 5740274)
those users cannot be assigned as a proxy (Bug 5741955)
the Oracle Identity Manager Administrator cannot unlock those users after they have been locked-out as a result of multiple login attempts with incorrect passwords (Bug 5741957)
reports may not generate information for those users, but instead will generate information for the deleted user with same ID (Bug 5741951)
In Windows Server 2003 Service Pack 1 (SP1) environments, you may receive a System Error in the Administrative and User Console if you click the Back button after receiving the Illegal Script tag or Characters error message. This is a known issue (believed to be caused by patch MS03-048) in Windows Server 2003 SP1.
After installing Release 9.0.3 on Oracle Application Server and then starting Oracle Application Server, benign warning messages regarding files with the same name but that are not identical may appear in the Oracle Application Server log file. These warning messages are benign and can safely be ignored.
Export using the Administrative and User Console's Deployment Manager may experience problems when Internet Explorer is configured to use Microsoft Virtual Machine. To reset the default Virtual Machine, perform the following:
Download and install the Sun JRE 1.4.2_xx from the following Web site: http://java.sun.com/.
Select Tools from the Internet Explorer menu.
Select Internet Options.
Select the Advanced tab.
Scroll down to Java (Sun).
Check Use Java 2v1.4.2_xx for <applet>.
Scroll down to Microsoft VM.
Uncheck Java console enabled and Java logging enabled.
Restart the computer.
Note:
JRE 1.4.2 is not required to run the Oracle Identity Manager Administrative and User Console—it is only required to run the Deployment Manager.If you are running JBoss on Linux and the Linux kernel supports IPv6, you may encounter the following exception:
IP_MULTICAST_IF: java.net.SocketException: bad argument for IP_MULTICAST_IF: address not bound to any interface at java.net.PlainDatagramSocketImpl.socketSetOption(Native Method) at java.net.PlainDatagramSocketImpl.setOption(PlainDatagramSocketImpl.java:295)
This exception is caused by versions of Sun Microsystem's JDK, up to and including JDK 5. If you do not need IPv6 support, you can avoid this exception by disabling IPv6 support in the JVM by adding -Djava.net.preferIPv4Stack=true to the <XL_HOME>/bin/xlStartServer.sh java command used to start JBoss.
This section describes known issues related to tasks performed using the Release 9.0.3 Design Console—it does not contain known issues related to the installation of the Design Console or its translated text. This section contains the following topics:
Invoking FVC Utility on WebSphere May Display "Realm/Cell is Null" Error (Bug 5563654)
Form Designer Feature Does Not Support Special Characters for Column Name (Bug 5373011)
Design Console's xlclient.cmd Executable Does Not Launch if Paths Include a Space (Bug 5853425)
Default Tasks Not Added to Resource Object After Changing its Process Definition Type (Bug 5637994)
When attempting to use the FVC utility in WebSphere deployments, a dialog box with the error message Realm/cell is Null may appear. You can safely close the dialog box and ignore the error message to continue.
To avoid this issue entirely, change the properties in the <WEBSPHERE_HOME>\AppClient\properties\sas.client.props to the following:
Note:
<WEBSPHERE_HOME> represents the location where WebSphere is installed.Change the preceding values to the following:
Com.ibm.CORBA.loginSource = properties
Com.ibm.CORBA.loginTimeout = 300
Com.ibm.CORBA.securityEnabled = true
Com.ibm.CORBA.loginUserid = xelsysadm
Com.ibm.CORBA.loginPassword = xelsysadm
The Form Designer feature in the Design Console will not save entries that contain any the following special characters in the Column Name:
; / % = | + , \ ' " < >
The xlclient.cmd executable that launches the Design Console will fail if directory paths in the executable contain spaces. You will have a space in a directory path in xlclient.cmd if you installed the Design Console in a location that contains a space, for example, C:\Program Files\OIM\xlclient\java.
Also, you will have a space in a directory path in xlclient.cmd if while installing the Design Console you chose to use a JRE other than the one bundled with the Design Console and the path to that JRE includes a space, for example, C:\Program Files\Java\j2re1.4.2_12.
To avoid this issue, do not install the Design Console into a directory path that includes a space and do not specify a JRE using a directory path that includes a space. Another way to avoid this issue is to add double quotation marks (") to the paths in the xlclient.cmd executable that include spaces. For example:
Use the following approach if you install the Design Console into a directory path that includes a space:
"C:\Program Files\OIM\xlclient\java"\bin\java %DEBUG_OPTS% ^ -DXL.ExtendedErrorOptions=TRUE -DXL.HomeDir="C:\Program Files\OIM\xlclient" ^ -Djava.security.policy=config\xl.policy ^ -Dlog4j.configuration=config\log.properties ^ -Djava.security.manager -Djava.security.auth.login.config=config\auth.conf ^ com.thortech.xl.client.base.tcAppWindow -server server
Use the following approach if you specified a JRE to use and the path to the JRE includes a space:
"C:\Program Files\Java\j2re1.4.2_12"\bin\java %DEBUG_OPTS% ^
-DXL.ExtendedErrorOptions=TRUE -DXL.HomeDir=C:\oracle\xlclient ^
-Djava.security.policy=config\xl.policy ^
-Dlog4j.configuration=config\log.properties ^
-Djava.security.manager
-Djava.security.auth.login.config=config\auth.conf ^
com.thortech.xl.client.base.tcAppWindow -server server
In the Design Console, after changing the Process Definition type for a Resource Object from Approval to Provisioning, or from Provisioning to Approval, the Resource Object is not updated with the default tasks associated with each type of Process Definition. To avoid this issue, do not change the Process Definition type after setting it initially.
Attempting to delete User Defined Fields in the Design Console when the Required and Visible properties are set to true causes an error message to appear. To avoid this issue, delete the properties first, and then delete the User Defined Column.
The Rule Designer feature in the Design Console cannot save multiple rules simultaneously. To avoid this issue, save each rule individually before creating additional rules.
Toolbars in the Creating New Task window may become disabled after adding Eventhandlers or Adapters from the Integration tab when using the same Create New Task window for a second time to add a task (by clicking the New Form icon). To avoid this issue, be sure to close the Creating New Task window before creating another new task.
This section describes known issues related to reporting functionality in Release 9.0.3. This section contains the following topics:
Various Filters Are Inactive During Historical Report Queries (Bug 5355907)
Group Membership History Report Does Not Distinguish Between Active and Deleted Groups (Bug 5249535)
Group Membership History Report May Not Display Some Sectional Header Values (Bug 5243112)
Resource Access List Report Shows Data for Deleted Users (Bug 5472481)
When using the Administrative and User Console to query Historical Reports, various filters are inactive, including filtering by user First, Middle, and Last Name; Employee Type; and Email. Using these filters will not refine the query results.
When you run a Group Membership History report, the report results do not distinguish between active and deleted groups.
When you run a Group Membership History report, the report results may not display some sectional header values for deleted groups.
The Resource Access List report may return data for deleted users.
In the Administrative and User Console, clicking the Resource Name Lookup icon on the Input Parameters page for various reports will display a Lookup window. This Lookup window incorrectly displays Organization resources in addition to User resources for the following reports:
Resource Access List
Entitlement Summary
Resource Access List History
Resource Password Expiration
Ignore the Organization resources listed in the Lookup window. Running these reports for Organization resources will return no data.
This section describes known issues in Release 9.0.3 related only to globalization or translation. This section contains the following topics:
Installer Programs for Non-English Languages May Contain Some English Text (Bug 5232751)
Notes in the Administrative and User Console's Task Details Page Not Localized (Bug 5856579)
Cannot Export Reports to CSV for Multibyte Languages on WebSphere (Bug 5760558)
Some Information in Workflow Visualizer May be Displayed as Square Characters (Bug 5704436)
Inconsistent Ordering of Names in Columns of Some Reports in Non-English Environments (Bug 5557974)
Deployment Manager Import and Export Features Includes an Untranslatable String (Bug 5501127)
After completing the Design Console installation for Oracle Application Server in non-English languages for Release 9.0.3, a pop-up window in the installer program may give the impression that the ejb.jar and oc4jclient.jar files are automatically copied to the appropriate Design Console directory.
You are required to copy the following files manually, as the installer program does not copy these files automatically:
Copy the <ORACLE_HOME>\j2ee\home\lib\ejb.jar file on the Oracle Application Server system to the <XL_DC_HOME>\xlclient\ext directory on the Design Console system.
Copy the <ORACLE_HOME>\j2ee\home\oc4jclient.jar file on the Oracle Application Server system to the <XL_DC_HOME>\xlclient\ext directory on the Design Console system.
Note:
This required manual step is also documented in the Oracle Identity Manager Installation Guide for Oracle Application Server.The Release 9.0.3 installer programs for non-English languages may contain some untranslated text that appears in English.
In Japanese environments, the Design Console's Request Submitted page does not display the Boolean Type User Defined Field check box. If the User Defined Field enables the Boolean Type, the Requested Submitted page displays the number 1 instead of the check box. If the Boolean Type is not enabled, the Requested Submitted page displays a blank space.
In the Administrative and User Console, if the Deployment Manager's Export and Import windows or the Workflow Visualizer window are open and the session times out, the text in these windows may appear in the language of the default locale of the system where the Oracle Identity Manager server is installed. After closing the session timeout window and clicking any of the Administrative and User Console menu options, the Oracle Identity Manager Logout page appears and may also be displayed in the language of the default locale of the system where the Oracle Identity Manager server is installed.
In the Administrative and User Console, some text in the Notes field on the Task Details page may appear in English in non-English environments. Task instances that have the following names may encounter this issue:
Reconciliation Update Received
Reconciliation Insert Received
Reconciliation Delete Received
In the Administrative and User Console's Task Details page, text in the Notes field appears in the language that it is entered in—the Notes text is not displayed according to the browser locale.
Release 9.0.3 requires that you use only English characters for the following:
Installation paths and directory names (Bug 5397854)
Host names (Bug 5360993)
Email IDs (Bug 5397105)
If used, external certificate names and certificate content (Bug 5387397)
The Administrative and User Console requires that you use only English characters for the Email Address fields on the Create/Edit User, Account Profile, and Self-Registration pages. When installing the Remote Manager, you must also use only English characters for the Service Name on the Configuration page (Bug 5460100).
Refer to the Oracle Identity Manager Globalization Guide for complete information on the character restrictions for various components and attributes.
Due to a limitation in WebSphere, you cannot export report data to CSV format for multibyte character languages such as Japanese or Chinese.
In Windows environments, some information may appear as box characters in the Administrative and User Console's Workflow Visualizer due to a known limitation with Java Applets and globalized characters. The browser's JVM displays only those characters that are in the current locale of the system where Oracle Identity Manager is installed. Globalized characters appear correctly in applets only if you set the browser to the same locale of the system where Oracle Identity Manager is installed.
In some reports in non-English environments, the ordering of first and last names does not depend on the browser locale of the logged in user. Table 3 lists the reports and their columns where ordering of first and last names may appear incorrectly:
Table 3 Reports and Columns That May Display Incorrect Ordering of Names
| Report | Column Name |
|---|---|
|
Policy List |
Created By |
|
Policy Detail |
Created By |
|
Attestation Requests By Process |
Reviewer |
|
Attestation Process List |
Owner, Reviewer |
|
User Resource Access |
Manager Name |
|
Group Membership |
Group Created By |
|
Group Membership History |
Group Created By |
|
User Membership History |
Manager Name |
|
User Resource Access History |
Manager Name |
In non-English environments, the following reports require that the given input and filter parameters use only English values:
Entitlement Summary report
Input parameter: Account Status
Filter parameter: Account Status
Group Membership History report
Input Parameter: Membership Status
Filter Parameter: Membership Status
User Membership History report
Input Parameter: Membership Status
Filter Parameter: Membership Status
For example, searching on Account Status in the Entitlement Summary report in non-English environments and using a translated version of the status Active will return nothing. You must use the English value Active.
In the Administrative and User Console, the sorting functionality on the Group Detail >> Menu Items and Group Detail >> Menu Items >> Assign Menu Items pages sorts values based on the English values in the database and not the translated values on the screen.
The Administrative and User Console's Deployment Manager import and export features use the Java AWT file dialog that shows the string All Files (*.*) in the dialog filter. The All Files (*.*) string is not translated for any locale and remains in English. This limitation is caused by the Java implementation and the string cannot be translated. Refer to the Sun Microsystems bug report for Bug ID 4152317 at the following url for more information:
After a successful archive with the Reconciliation Archival utility, the name of its log files for some non-English environments may not include the time stamp. For example, you may see a log file that looks something like Arch_Recon____15_56.log instead of Arch_Recon_Wed_31_2007_03_31.log.
Release 9.0.3 resolves the known issues from previous releases listed in Table 4:
Table 4 Issues Resolved by Release 9.0.3
| Bug # | Description |
|---|---|
|
5609444 |
Check-box options on the Step 2: Select Resources page of the Administrative and User Console were sometimes automatically selected. |
|
5526331 |
Could not import files using the Administrative and User Console's Deployment Manager feature after clicking Add on the New Groups menu. |
|
5466097 |
The following exception appeared in some WebSphere configurations when auditing User Profile data:
|
|
5520230 |
In the Design Console, the Form Description label for User Defined Forms and the IT Resource Name in the Lookup Field were not translated through the Resource Bundle mechanism for non-English environments |
|
5593553 |
Benign warning message related to changing permission for the del_xl_dir.sh script appeared when installing Oracle Identity Manager from the distribution media (CD-ROM) in to a UNIX or Linux environment. |
|
5651385 |
Oracle Identity Manager installer program could not resolve host name of the machine running the WebSphere Deployment Manager (NDM-HOST) during installation. |
|
5711021 |
Using the Enable or Disable buttons on the Resource Provisioning Details page in the Administrative and User Console caused the task to execute twice. |
|
5638110 |
Proxies to users started immediately after being assigned, despite specified start date. |
|
5594856 |
Group Names sometimes appeared multiple times in the Administrative and User Console's Organization Detail>>Administrative Groups>>Assign page. |
|
5594414 |
The Administrative and User Console allowed you to modify the name of an Organization or User Group and save the changes without being prompted regardless if the new name was identical and a duplicate of an existing Organization or User Group. |
|
5572115 |
Could not log in to the Administrative and User Console after exceeding the maximum number of log in attempts, changing the existing password after clicking Forgot Password, and then attempting to log in with the new password. |
|
5572014 |
Design Console's Reconciliation Manager form allowed users to be created without a first name. |
|
5532345 |
The Oracle Identity Manager installer program failed when installing on WebLogic application servers if a directory named weblogic81 was not in the <BEA_HOME> directory, where <BEA_HOME> represents the directory where WebLogic was installed. |
|
5455223 |
The Illegal Script tag or Characters error message appeared in the Administrative and User Console when attempting to Provision New Resources and multiple Administrative and User Console browsers that have different language settings are open. |
|
5747625 |
User Profile Audit engine did not process offline messages. |
Refer to the Oracle Identity Manager API Usage Guide for information on new or modified APIs in Release 9.0.3.
Our goal is to make Oracle products, services, and supporting documentation accessible, with good usability, to the disabled community. To that end, our documentation includes features that make information available to users of assistive technology. This documentation is available in HTML format, and contains markup to facilitate access by the disabled community. Accessibility standards will continue to evolve over time, and Oracle is actively engaged with other market-leading technology vendors to address technical obstacles so that our documentation can be accessible to all of our customers. For more information, visit the Oracle Accessibility Program Web site at
http://www.oracle.com/accessibility/
Accessibility of Code Examples in Documentation
Screen readers may not always correctly read the code examples in this document. The conventions for writing code require that closing braces should appear on an otherwise empty line; however, some screen readers may not always read a line of text that consists solely of a bracket or brace.
Accessibility of Links to External Web Sites in Documentation
This documentation may contain links to Web sites of other companies or organizations that Oracle does not own or control. Oracle neither evaluates nor makes any representations regarding the accessibility of these Web sites.
TTY Access to Oracle Support Services
Oracle provides dedicated Text Telephone (TTY) access to Oracle Support Services within the United States of America 24 hours a day, seven days a week. For TTY support, call 800.446.2398.
Oracle Identity Manager Release Notes Release 9.0.3
B32458-02
Copyright © 1991, 2007, Oracle. All rights reserved.
The Programs (which include both the software and documentation) contain proprietary information; they are provided under a license agreement containing restrictions on use and disclosure and are also protected by copyright, patent, and other intellectual and industrial property laws. Reverse engineering, disassembly, or decompilation of the Programs, except to the extent required to obtain interoperability with other independently created software or as specified by law, is prohibited.
The information contained in this document is subject to change without notice. If you find any problems in the documentation, please report them to us in writing. This document is not warranted to be error-free. Except as may be expressly permitted in your license agreement for these Programs, no part of these Programs may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose.
If the Programs are delivered to the United States Government or anyone licensing or using the Programs on behalf of the United States Government, the following notice is applicable:
U.S. GOVERNMENT RIGHTS Programs, software, databases, and related documentation and technical data delivered to U.S. Government customers are "commercial computer software" or "commercial technical data" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the Programs, including documentation and technical data, shall be subject to the licensing restrictions set forth in the applicable Oracle license agreement, and, to the extent applicable, the additional rights set forth in FAR 52.227-19, Commercial Computer Software—Restricted Rights (June 1987). Oracle USA, Inc., 500 Oracle Parkway, Redwood City, CA 94065
The Programs are not intended for use in any nuclear, aviation, mass transit, medical, or other inherently dangerous applications. It shall be the licensee's responsibility to take all appropriate fail-safe, backup, redundancy and other measures to ensure the safe use of such applications if the Programs are used for such purposes, and we disclaim liability for any damages caused by such use of the Programs.
Oracle, JD Edwards, and PeopleSoft are registered trademarks of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners.
The Programs may provide links to Web sites and access to content, products, and services from third parties. Oracle is not responsible for the availability of, or any content provided on, third-party Web sites. You bear all risks associated with the use of such content. If you choose to purchase any products or services from a third party, the relationship is directly between you and the third party. Oracle is not responsible for: (a) the quality of third-party products or services; or (b) fulfilling any of the terms of the agreement with the third party, including delivery of products or services and warranty obligations related to purchased products or services. Oracle is not responsible for any loss or damage of any sort that you may incur from dealing with any third party.
