Skip Headers
Oracle® Identity Manager Connector Guide for Sun Java System Directory
Release 9.0.1

Part Number B31139-01
Go to Documentation Home
Home
Go to Book List
Book List
Go to Table of Contents
Contents
Go to Index
Index
Go to Feedback page
Contact Us

Go to previous page
Previous
Go to next page
Next
View PDF

3 Testing the Connector

After you deploy the connector, you must test it to ensure that it functions as expected.

This chapter contains the following sections:

Running Test Cases

This section discusses test cases that you can perform by using the troubleshooting utility.

You can use the troubleshooting utility to directly use the connector for identifying the cause of problems associated with connecting to the target system server and performing basic operations on the target system.

Before you can use the troubleshooting utility, you must set the required values in the TroubleShootIPlanet.properties file. This file is in the xellerate_home\xellerate\troubleshoot directory. The following tables describes the sections of this file.

Section Name Information
Sun Java System Directory Server Connection Parameters Connection parameters required to connect to the target system
Create User Values requited to create a user on the target system
Modify User Values required to modify a user
Delete User DN of the user to be deleted

After you specify the required values in the TroubleShootIPlanet.properties file, set the classpath for the xliIPlanet.jar file. Refer to the "Step 2: Copying the Connector Files and External Code" section for information about the location of this file.

In addition, you must set the classpath for the following JAR files:

Then, perform the following tests:

Note:

Ensure that the location of the TroubleShootIPlanet.properties and log.properties files is correctly specified.

Troubleshooting

The following table lists solutions to some commonly encountered problems associated with the connector.

Problem Description Solution
Oracle Identity Manager cannot establish a connection to the Sun Java System Directory server.

Returned Error Message:

LDAP Connection exception

Returned Error Code:

INVALID_CONNECTION_ERROR

  • Ensure that the Sun Java System Directory server is running.
  • Ensure that the Oracle Identity Manager is running (that is, the database is running).

  • Ensure that all the adapters have been compiled.

  • Examine the Oracle Identity Manager record (from the IT Resources form). Verify that the specified IP address, admin ID, and admin password are correct.

Target not available

Returned Error Message:

Connection error - unable to create Initial LDAP.

Returned Error Code

TARGET_UNAVAILABLE_ERROR

Ensure that the specified Sun Java System Directory server connection values are correct.
Authentication error

Returned Error Messages

Connection error - unable to create Initial LDAP

Returned Error Code

AUTHENTICATION_ERROR

Ensure that the specified Sun Java System Directory connection values are correct.
Oracle Identity Manager cannot create a user.

Returned Error Message:

Require information missing

Returned Error Code:

INSUFFICIENT_INFORMATION_PROVIDED

  • Ensure that the IP address, admin ID, and admin password are correct.
  • Ensure that the following information is provided:

    User Container

    User First Name

    User Last Name

    User ID

    User Password

Oracle Identity Manager cannot create a user.

Returned Error Message:

User already exists

Returned Error Code:

USER_ALREADY_EXIST

Check if a user with the assigned ID already exists in Sun Java System Directory.

Assign a new ID for this user, and try again.

Oracle Identity Manager cannot create a user.

Returned Error Message:

Connection error - unable to create Initial LDAPContext

Returned Error Code:

INVALID_NAMING_ERROR

  • Check if the given Sun Java System Directory connection values are correct.
  • Check if an attribute value violates the schema definition.

Oracle Identity Manager cannot create a user.

Returned Error Message:

User creation failed

Returned Error Code:

USER_CREATION_FAILED

Check if an attribute value violates the schema definition.
Trying to add a value to a nonexistent attribute. Therefore, the Create User operation failed.

Returned Error Message:

Attribute does not exist

Returned Error Code:

ATTRIBUTE_DOESNOT_EXIST

In the AttrName.Recon.Map.iPlanet lookup definition, check if the decode values are valid attribute names in the target system.
Trying to add an invalid value. Therefore, the Create User operation failed.

Returned Error Message:

Invalid value specified for an attribute

Returned Error Code:

INVALID_ATTR_VALUE_ERROR

Check the values entered during user creation.
Oracle Identity Manager cannot delete a user.

Returned Error Message:

User does not exist in target

Returned Error Code:

USER_DOESNOT_EXIST

The specified user ID does not exist in Sun Java System Directory.
Oracle Identity Manager cannot modify the attribute value of a user.

Returned Error Message:

Invalid attribute value or state

Returned Error Code:

INVALID_ATTR_MODIFY_ERROR

Check the specified user ID.
Trying to add a value to a nonexistent attribute. Therefore, the Modify User operation failed.

Returned Error Message:

Attribute does not exist

Returned Error Code:

ATTRIBUTE_DOESNOT_EXIST

  1. From the corresponding process task, get the value being passed for AttrName of the connector.
  2. Using the name obtained in the previous step, check in the AttrName.Recon.Map.iPlanet lookup definition if the decode value is a valid attribute name in the target.

Trying to add an invalid value. Therefore, the Modify User operation failed.

Returned Error Message:

Invalid value specified for an attribute

Returned Error Code:

INVALID_ATTR_VALUE_ERROR

Check the value specified.
Trying to add a value to an attribute that does not exist in the AttrName.Recon.Map.iPlanet lookup definition. Therefore, the Modify User operation failed.

Returned Error Message:

One or more attribute mappings are missing

Returned Error Code:

ATTR_MAPPING_NOT_FOUND

  1. From the corresponding process task, get the value being passed for AttrName of the connector.
  2. Using the name obtained in the previous step, check if an entry has been made in the AttrName.Recon.Map.iPlanet lookup definition.

Trying to add a duplicate value to an attribute

Returned Error Message:

Duplicate value

Returned Error Code:

DUPLICATE_VALUE_ERROR

Check the value specified.
Oracle Identity Manager cannot move a user from one container to another.

Returned Error Message:

Moving user to different container failed

Returned Error Code:

USER_MOVE_FAILED

Generic error. Review the log for more details.
Oracle Identity Manager cannot add a user to a security group.

Returned Error Message:

Group does not exist

Returned Error Code:

GROUP_DOESNOT_EXIST

The user security group specified does not exist in Sun Java System Directory. Check the group name.
Oracle Identity Manager cannot add a user to a group.

Returned Error Message:

User is already a member of this group

Returned Error Code:

DUPLICATE_VALUE

The user is already a member of the group.
Oracle Identity Manager cannot add a role to a user.

Returned Error Message:

Role does not exist

Returned Error Code:

ROLE_DOESNOT_EXIST

The specified role for the user in Oracle Identity Manager does not exist in Sun Java System Directory. Create the role in Sun Java System Directory.
Oracle Identity Manager cannot add a role to a user.

Returned Error Message:

Error while updating user info

Returned Error Code:

USER_UPDATE_FAILED

Generic error. Review the log for more details.
Oracle Identity Manager cannot add a role to a user.

Returned Error Message:

User has already been assigned this role

Returned Error Code:

DUPLICATE_VALUE

The user has already been assigned this role.
Oracle Identity Manager cannot remove a role assigned to a user.

Returned Error Message:

Removing Assigned role failed

Returned Error Code:

USER_DELETE_ROLE_FAILED

Generic error. Review the log for more details.
Oracle Identity Manager cannot reconcile users from Sun Java System Directory.

Returned Error Message:

javax.naming.NamingException: tcUtilLDAPOperations -> : NamingException : Unable to search LDAP

Returned Error Code:

LDAP: error code 11 - Administrative Limit Exceeded

Change the Sun Java System Directory configuration as follows:
  1. Open the Sun ONE Directory Server admin console.

  2. Select Configuration, Performance, and Client Control.

  3. Set the size limit to unlimited.

  4. Set the look-through limit to unlimited.

  5. Save the changes, and restart Sun Java System Directory.