5 Testing and Troubleshooting

After you deploy the connector, you must test it to ensure that it functions as expected. This chapter discusses the following topics related to connector testing:

5.1 Running Test Cases

You can use the testing utility to identify the cause of problems associated with connecting to the target system and performing basic operations on the target system.

To use the testing utility:

  1. Copy the contents of the test/troubleshoot directory on the installation media, to one of the following directories:

    Note:

    If a particular destination directory does not exist on the Oracle Identity Manager host computer, then create it.

    • For Oracle Identity Manager release 9.1.0.x:

      OIM_HOME/xellerate/test/troubleshoot

    • For Oracle Identity Manager release 11.1.1:

      OIM_HOME/server/test/troubleshoot

  2. Specify the required values in the config.properties file. This file is present in the following directory:

    • For Oracle Identity Manager release 9.1.0.x:

      OIM_HOME/xellerate/test/troubleshoot

    • For Oracle Identity Manager release 11.1.1:

      OIM_HOME/server/test/troubleshoot

    The following table describes the sections of this file in which you must provide information for running the tests.

    Section Information

    Oracle Internet Directory Connection Parameters

    Connection parameters required to connect to the target system

    The values that you provide are the same as those provided for the IT resources parameters. The procedure to configure the IT resource is described earlier in this guide.

    Create User Information

    Values required to create a user

    Modify User Information

    Values required to modify a user

    Delete User Information

    DN of the user to be deleted


  3. If you are using Oracle Identity Manager release 11.1.1, then copy the OIDProv.jar file from the lib directory on the installation media to a temporary directory on the Oracle Identity Manager host computer. For example, OIM_HOME/server/jars.

  4. Depending on the Oracle Identity Manager version you are using, add one of the following to the CLASSPATH environment variable:

    • For Oracle Identity Manager release 9.1.0.x:

      OIM_HOME/xellerate/JavaTasks/OIDProv.jar
      OIM_HOME/xellerate/lib/xlLogger.jar
      OIM_HOME/xellerate/ext/log4j-1.2.8.jar
      OIM_HOME/xellerate/lib/xlUtils.jar
      
    • For Oracle Identity Manager release 11.1.1:

      OIM_HOME/server/jars/OIDProv.jar
      OIM_HOME/server/lib/xlLogger.jar
      OIM_HOME/server/ext/log4j-1.2.8.jar
      OIM_HOME/server/lib/xlUtils.jar
      OIM_HOME/server/client/oimclient.jar
      OIM_HOME/server/jars/OIDRecon.jar
      OIM_HOME/designconsole/ext/spring.jar
      OIM_HOME/designconsole/ext/commons-logging.jar  
      
  5. In the following files, set the value of the DXL.HomeDir attribute to the directory in which the Design Console is installed:

    • For Oracle Identity Manager release 9.1.0.x:

      OIM_HOME\xellerate\test\troubleshoot\scripts\testcreate.bat

      OIM_HOME\xellerate\test\troubleshoot\scripts\testmodify.bat

      OIM_HOME\xellerate\test\troubleshoot\scripts\testdelete.bat

    • For Oracle Identity Manager release 11.1.1:

      OIM_HOME\server\test\troubleshoot\scripts\testcreate.bat

      OIM_HOME\server\test\troubleshoot\scripts\testmodify.bat

      OIM_HOME\server\test\troubleshoot\scripts\testdelete.bat

  6. Perform the following tests:

    Note:

    When you run a BAT file to perform the corresponding test, the global.properties file is automatically created in the same directory. You can view log details in the Troubleshoot.log file, which is created in the same directory when you run the tests.

    • Create a user by running the testcreate.bat file.

      After you run the BAT file, check if the user is created in Oracle Internet Directory with the details given in the config.properties file. If you run the BAT file from a command window, then the User_Creation_Successful message is displayed.

    • Modify the user by running the testmodify.bat file.

      After you run the BAT file, check if the user is modified in Oracle Internet Directory with the details given in the config.properties file. If you run the BAT file from a command window, the User_Modification_Successful message is displayed.

    • Delete the user by running the testdelete.bat file.

      After you run the BAT file, check if the, specified user is deleted from Oracle Internet Directory. If you run the BAT file from a command window, the User_Deletion_Successful message is displayed.

5.2 Troubleshooting

This section provides instructions for identifying and resolving some commonly encountered errors of the following types:

5.2.1 Connection Errors

The following table provides solutions to some commonly encountered connection errors.

Problem Description Solution

Oracle Identity Manager cannot establish a connection with Oracle Internet Directory.

Returned Error Message:

Connection error encountered

Returned Error Code:

INVALID_CONNECTION_ERROR

  • Ensure that Oracle Internet Directory is running.

  • Ensure that Oracle Identity Manager is running.

  • Ensure that all the adapters have been compiled.

  • Use the IT Resources form to examine the Oracle Identity Manager record. Ensure that the IP address, admin ID, and admin password are correct.

Target not available

Returned Error Message:

Target server not available

Returned Error Code:

TARGET_UNAVAILABLE_ERROR

  • Ensure that Oracle Internet Directory is running.

  • Ensure that the specified Oracle Internet Directory connection values are correct.

Authentication error

Returned Error Message:

Invalid or incorrect administrator password

Returned Error Code:

AUTHENTICATION_ERROR

Ensure that the specified Oracle Internet Directory connection password is correct.


5.2.2 Create User Errors

The following table provides solutions to some commonly encountered Create User errors.

Problem Description Solution

The Create User operation failed because an invalid value was being added.

Returned Error Message:

Invalid value specified for an attribute

Returned Error Code:

INVALID_ATTR_VALUE_ERROR

Check the values specified during user creation.

Oracle Identity Manager cannot create a user.

Returned Error Message:

Required information missing

Returned Error Code:

INSUFFICIENT_INFORMATION_PROVIDED

Ensure that the following information is provided:

  • User ID

  • User password

  • User container

  • User first name

  • User last name

Oracle Identity Manager cannot create a user.

Returned Error Message:

User already exists

Returned Error Code:

USER_ALREADY_EXISTS

A user with the specified ID already exists in Oracle Internet Directory. Assign a new ID to the user, and try again.

Oracle Identity Manager cannot create a user.

Returned Error Message:

Naming exception encountered

Returned Error Code:

INVALID_NAMING_ERROR

Check if the specified user container value already exists in Oracle Internet Directory.

Oracle Identity Manager cannot create a user.

Returned Error Message:

Could not create user

Returned Error Code:

USER_CREATION_FAILED

The user cannot be created because one or more attribute values violate the schema definition.

Check if the Oracle Internet Directory schema is correctly defined and contains all the object classes defined in the lookup definition.


5.2.3 Delete User Errors

The following table provides solutions to some commonly encountered Delete User errors.

Problem Description Solution

Oracle Identity Manager cannot delete a user.

Returned Error Message:

Required information missing

Returned Error Code:

INSUFFICIENT_INFORMATION_PROVIDED

Ensure that the following information is provided:

  • User Container

  • User ID

Oracle Identity Manager cannot delete a user.

Returned Error Message:

User does not exist

Returned Error Code:

USER_DOESNOT_EXIST

The specified user ID does not exist in Oracle Internet Directory.


5.2.4 Modify User Errors

The following table provides solutions to some commonly encountered Modify User errors.

Problem Description Solution

The Modify User operation failed because a value was being added to a nonexistent attribute.

Returned Error Message:

Attribute does not exist

Returned Error Code:

ATTRIBUTE_DOESNOT_EXIST

  1. From the corresponding process task, get the value passed for AttrName of the connector.

  2. Using the name obtained in the previous step, check in the AttrName.Recon.Map.OID lookup definition if the decode value is a valid attribute name in the target.

Oracle Identity Manager cannot modify an attribute of a user.

Returned Error Message:

Invalid attribute value or state

Returned Error Code:

INVALID_ATTR_MODIFY_ERROR

The attribute ID and value specified may be wrong. Check the specified values.

The Modify User operation failed because a value was being added to an attribute that does not exist in the AttrName.Prov.Map.OID lookup definition.

Returned Error Message:

One or more attribute mappings are missing

Returned Error Code:

ATTR_MAPPING_NOT_FOUND

  1. From the corresponding process task, get the value passed for AttrName of the connector.

  2. Using the name obtained in the previous step, check if an entry has been made in the AttrName.Prov.Map.OID lookup definition.

Oracle Identity Manager cannot update information about a user.

Returned Error Message:

Could not update user

Returned Error Code:

USER_UPDATE_FAILED

Generic error. Review the log for more details.

Oracle Identity Manager cannot move a user from one container to another.

Returned Error Message:

Could not move user

Returned Error Code:

USER_MOVE_FAILED

Generic error. Review the log for more details.


5.2.5 Child Data Errors

The following table provides solutions to some commonly encountered Child Data errors.

Problem Description Solution

Oracle Identity Manager cannot add a user to a group.

Returned Error Message:

Group does not exist

Returned Error Code:

GROUP_DOESNOT_EXIST

The specified user security group does not exist in Oracle Internet Directory. Check the group name.

Oracle Identity Manager cannot add a role to a user.

Returned Error Message:

Role does not exist

Returned Error Code:

ROLE_DOESNOT_EXIST

The specified role for the user does not exist in Oracle Internet Directory. Check the role name.

The operation failed because a duplicate value was being added to an attribute.

Returned Error Message:

Duplicate value encountered

Returned Error Code:

DUPLICATE_VALUE_ERROR

The user has already been added to the specified group or role.

Oracle Identity Manager cannot add a user to a group.

Returned Error Message:

Could not add user to group

Returned Error Code:

ADD_USER_TO_GROUP_FAILED

Generic error. Review the log for more details.

Oracle Identity Manager cannot remove a user from a group.

Returned Error Message:

Could not remove user from group

Returned Error Code:

REMOVE_USER_FROM_GROUP_FAILED

Generic error. Review the log for more details.

Oracle Identity Manager cannot add a user to a role.

Returned Error Message:

Add user to Role failed

Returned Error Code:

ADD_USER_TO_ROLE_FAILED

Generic error. Review the log for more details.

Oracle Identity Manager cannot remove a user from a role.

Returned Error Message:

Removing assigned role failed

Returned Error Code:

REMOVE_ROLE_FROM_USER_FAILED

Generic error. Review the log for more details.