Sun Java logo     Previous      Contents      Index      Next     

Sun logo
Sun Java[tm] System Identity Manager 6.0 Tuning, Troubleshooting, and Error Messages 2005Q4M3  

3

Errors and Exceptions

This chapter provides detailed information about Identity Manager error messages and exceptions.

This information is organized as follows:


Overview

This section provides general information about Identity Manager errors and exceptions, including:

Components that Generate Errors and Exceptions

The following Identity Manager components generate exceptions and error messages:

General Statements about Exceptions and Error Messages

The following information is helpful when interpreting exception and error messages:

The Identity Manager Messaging System

Throughout the messaging system, items displayed as {0} or {1} represent parameters supplied by code.

Some exceptions are simply wrappers. Consequently, their parameters are the entire exception. Examples include:

When using parameterized messages, if there are single or double quotes in the message, they must be escaped with an additional single or double quote. On output, you will see only one quote symbol.

Examples Used in this Chapter

Errors and exceptions created by forms are displayed in one the following locations:

The examples provided in this chapter use a locale devised for example purposes only (xx_XX locale).


Login/Authentication Errors

Login errors occur during login and authentication. These errors can be displayed on the Identity Manager administrator interface or Identity Manager user interface login pages.

Example Login Failure

The following message displays when a login attempt fails:

_xx_XX_Login Failed: missing properties. _xx_XX_Please complete the '_xx_XX_Password' field(s) before logging in.

Error Codes

The following table lists the login/authentication-related error codes and their corresponding messages as displayed by Identity Manager.

Login/Authentication-Related Error Codes and Messages

AN_LOGIN_ATTEMPT_FAILED

Login attempt failed for user {0}. {1}

SES_MISSING_PROP_LOGIN_FAILURE

Login Failed: missing properties.

SES_OPEN_ERROR_NO_PASSWORD

Unable to open session: no password specified.

SES_PASSWORD_CHANGE_ERROR

Cannot change end-user password with the Session.changePassword method.

SES_RESOURCE_ACCOUNT_FETCH_ERROR

Unable to locate account.

SES_VIEW_AUTH_ERROR

Could not authenticate to ''{0}''.

UI_ERROR_ACCOUNT_ID_NEEDED

An account ID must be specified.

UI_ERROR_ACCOUNT_NOT_ACCESSIBLE

Account ID not accessible.

UI_ERROR_BUILTIN_AUTH_FAILED_PASSWORD

Could not authenticate as the built-in administrator used to change passwords.

UI_ERROR_BUILTIN_AUTH_FAILED_QUESTION

Could not authenticate as the built-in administrator used to retrieve authentication questions.

UI_ERROR_MISSING_KEY_ID

Missing key ID.

UI_ERROR_NO_CREDS_IN_VIEW

Credentials not in view.

UI_ERROR_NO_USERID_IN_CREDS

User ID not found in credentials.

UI_ERROR_NO_USER_FOUND

The specified user was not found.

UI_ERROR_PASSWORD_FIELDS_DO_NOT_MATCH

Fields Confirm Password: and Password: do not match.

AN_LOGIN_TIMEOUT_MSG

Please login again.

AN_LOGIN_ATTEMPT_FAILED

Login attempt failed for user {0}.<br/>{1}.

AN_PASSWORD_EXPIRE_WARNING

Your Identity Manager password will expire in {0} day(s).

AN_PASSWORD_EXPIRES_TODAY_WARNING

Your Identity Manager password expires today. Please change it now.

AN_PASSWORD_EXPIRED_ONE_ACCOUNT

Your password has expired for account {0} on resource {1}. Please change it now.

AN_PASSWORD_EXPIRED_MULTI_ACCOUNTS

Your password has expired for account {0} on the following resources. Please change them now. {1}.

AN_QUESTIONS_ANSWERED_INCORRECTLY

One or more authentication questions for user {0} answered incorrectly. Change answers and reverify or click Cancel.

AN_TOO_FEW_USER_QUESTIONS_ANSWERED_
GIVEN_QUESTION_POLICY

Too few questions defined in Identity Manager policy or too few user questions answered based on the configured random question count of {0}.

AN_SYNC_AUTHENTICATION_PASSWORDS

You must keep your password synchronized on all of the following resources since they are configured as either required or requisite authentication resources. {0}.

AN_EX_INVALID_ID

Invalid Account ID.

AN_EX_INVALID_PWD

Invalid Password.

AN_EX_ACCOUNT_DISABLED

Account is disabled.

AN_CHG_PWD_BUTTON_LABEL

Change Password.

AN_EX_MUST_HAVE_ID_OR_EMAIL

Must have {0} or {1} to authenticate to this resource.

AN_EX_MULTIPLE_ACCOUNT_TO_EMAIL

More than one Identity Manager account has email address.

AN_EX_NO_ORGS_NO_CAPS

User controls no organizations and has no capabilities.

AN_EX_NO_ORGS

 

User controls no organizations.

AN_EX_NO_CAPS

User has no capabilities.

AN_EX_INVALID_PWD_FMT

Invalid password format specified in LoginInfo. Byte array required.

AN_USER_NOT_FOUND

No Identity Manager User found matching resource accountId ''{0}''.

AN_INVALID_TYPE_FOR_RIGHT

Invalid type: {0} for existing rights.

AN_INVALID_RIGHTS_FOR_TYPE

Login attempt failed for user {0}. {1}.

AN_INVALID_RIGHTS_FOR_TYPE_2

Right ''{0}'' is invalid for type ''{1}''.


Account Creation/Update Policy Errors

The following errors are all password policy violation errors and can occur whenever an administrator or user tries to change a password.

Example Account Creation/Update Policy Failure

The following message is an example of an account creation or update policy failure:

xx_XX_Policy Violation (Password on Identity Manager User): xx_XX_Minimum length is 2.s

Error Codes

The following table lists the account creation/update-related error codes and the text of their corresponding messages as displayed by Identity Manager.

Account Creation/Update-Related Error Codes and Messages

PL_POLICY_VIOLATION

Violation of policy {0}: {1}.

PL_POLICY_VIOLATION_HEADER

Policy Violation ({0} on {1}).

PL_RESOURCE_ACCOUNT_MIN_SELECTED

Must select at least one resource account.

PL_STRING_MIN_CHARACTERS

Must contain at least {0} valid characters.

PL_STRING_MIN_LEN

Minimum length is {0}.

PL_STRING_MAX_LEN

Maximum length is {0}.

PL_STRING_ATTRIBUTE

Must not contain the value of the {0} attribute.

PL_STRING_WORD

Must not contain the word {0}.

PL_STRING_MIN_CHARACTER_TYPE_RULES

Of the {0} character type rules enabled, {1} passed. The minimum number of character type rules that must pass is {2}. The rules that did not pass were:

PL_STRING_MIN_ALPHA

Must have at least {0} alpha characters.

PL_STRING_MIN_NUMERIC

Must have at least {0} numeric characters.

PL_STRING_MIN_UPPER

Must have at least {0} uppercase characters.

PL_STRING_MIN_LOWER

Must have at least {0} lowercase characters.

PL_STRING_MIN_SPECIAL

Must have at least {0} special characters {1}.

PL_STRING_MAX_REPETITIVE

Number of repetitive characters cannot exceed {0}.

PL_STRING_MAX_SEQUENTIAL

Number of sequential numeric characters cannot exceed {0}.

PL_STRING_MIN_START_ALPHA

Must have at least {0} alpha characters at beginning.

PL_STRING_MIN_START_NUMERIC

Must have at least {0} numeric characters at beginning.

PL_STRING_ALL_CHARS

All characters must be {0}.

PL_STRING_PASSWORD_HISTORY

New password cannot match any of the {0} previous passwords for this account.

PL_STRING_MAX_LEN_EXCEEDED

Policy Violation: total of minimum alpha, numeric, uppercase, lowercase, and specials is larger than maximum length of {0}.

PL_STRING_START_CHARS_CONFLICT

Policy Violation: Cannot specify both Alphabetic and Numeric characters at the beginning.

PL_STRING_MORE_THAN_ONE_ALL

Policy Violation: invalid request for all {0} characters to be of more than one character type (For example, alpha, numeric, special).


Adapter Connection Errors

Adapter connection errors are typically wrapped in another exception. The actual exception that the adapter returns most likely will not be localized, but the wrapper will be.

Example Adapter Connection Failure

The following message displays if you create a new Windows NT resource and remove the port number but still have valid Hostname, User ID, and Password values:

‘Test connection failed==> Error Making Connection. You must specify a PortNumber.’

Error Codes

The following tables list the adapter connection-related error codes and their corresponding messages as displayed by Identity Manager.

AS400 Adapter Connection Error Codes and Messages

AD_AS400_CONNECTION_ERROR

AS400 Connection is down.

AD_AS400_IO_ERROR

IO Exception.

AD_AS400_LOGIN_ERROR

AS400 Invalid admin signon.

AD_AS400_SECURITY_ERROR

AS400 Security Error.

DB2 Connection and SQL Error Codes and Messages

AD_DB2_ACCOUNT_ERROR1

Account ID longer than {0} characters.

AD_DB2_ACCOUNT_ERROR2

Account ID uses a DB2 restricted character.

AD_DB2_ACCOUNT_ERROR3

Account ID is a DB2 restricted word.

AD_DB2_ACCOUNT_ERROR4

Password uses a DB2 restricted character.

AD_DB2_ACCOUNT_ERROR5

Password is a DB2 restricted word.

AD_DB2_CONNECTION_ERROR

No Database connection.

AD_DB2_GRANT_ERROR

No grants completed.

AD_DB2_GRANT_EXCEPTION

''{0}'' not granted to {1}.

AD_DB2_SQL_ERROR

No SQL statement.

AD_DB2_SQL_EXCEPTION

SQL exception.

The following tables describe generic connection error codes that can occur during Test Connection on Resource Create/Edit.

Generic Connection Error Codes and Messages

AD_CONNECTION_ERROR

An error occurred connecting to resource ''{0}''.

AD_CONNECTION_TEST_ERROR

Connection test failed.

AD_GENERIC_ERROR

An error occurred: {0}.

AD_GENERIC_ERROR_NO_PARM

An error occurred.

AD_GET_TRACE_ERROR

An error occurred getting the trace file.

AD_HOST_NULL_ERROR

Error making connection: You must enter a hostname.

AD_NO_CLASS_ERROR

Internal error making connection: No adapter class specified.

AD_NO_LOGIN_INFO_ERROR

Missing required login information.

AD_PORT_NULL_ERROR

Error making connection: You must enter a port number.

AD_START_CONN_ERROR

An error occurred starting the connection: {0}.

AD_START_CONN_ERROR_NO_PARM

An error occurred starting the connection.

MySQL Database-Specific Error Codes and Messages

AD_MYSQL_AUTH_ERROR

Authentication failed for {0}.

AD_MYSQL_CONNECTION_ERROR

Could not connect to database ''{0}'' as user ''{1}'' with specified password.

AD_MYSQL_DISCONNECT_ERROR

Could not disconnect from database.

AD_MYSQL_SQL_ERROR

Error executing SQL statement.

SAP and SME Connection Error Codes and Messages

AD_SAP_CLASS_ERROR

Could not initialize the SAP jCO. Please reinstall and check that the needed libraries (librfc32 and sapjcorfc) are available to Java and restart this application.

AD_SME_CONNECTION_ERROR1

An error occurred connecting to host ''{0}''.

AD_SME_CONNECTION_ERROR2

An error occurred connecting to host ({0}): {1} {2}.


Admin Account List and Ticker Errors

This section describes the errors that can occur on the Account list menu or for the ticker. (The ticker displays on the main page of the Identity Manager Administrator interface.)

Example Account List Menu Failure

The following Account error list message occurs if no user is selected in the account list and the user clicks Disable.

UI_ADMINDOMENU_ERROR4

Error Codes

The following tables list the Account list menu-related error codes and their corresponding messages displayed by Identity Manager. These errors occur on the Account list menu or for the ticker.

Admin Account Menu Error Codes and Messages

UI_ADMINDOMENU_ERROR1

Please select a User or Organization to delete.

UI_ADMINDOMENU_ERROR2

Please select a User to change password.

UI_ADMINDOMENU_ERROR3

Please select a User to delete.

UI_ADMINDOMENU_ERROR4

Please select a User to disable.

UI_ADMINDOMENU_ERROR5

Please select a User to edit their capabilities.

UI_ADMINDOMENU_ERROR6

Please select a User to enable.

UI_ADMINDOMENU_ERROR7

Please select a User to rename.

UI_ADMINDOMENU_ERROR8

Please select a User to reset password.

UI_ADMINDOMENU_ERROR9

Please select a User to update.

UI_ADMINDOMENU_ERROR10

Please select an Organization to delete.

UI_ADMINDOMENU_ERROR11

Please select an item to edit.

UI_ADMINDOMENU_ERROR12

Please select one or more Organizations to delete.

UI_ADMINDOMENU_ERROR13

Please select one or more {0} to {1}.

UI_ADMINDOMENU_ERROR14

Please select a User or Organization to delete.

UI_CONFIG_TEST_FAILED

Test Failed.

Admin Ticker Generation Error Codes and Messages

UI_TICKER_GEN_ERROR

Error: Ticker Generation resulted in an error.

UI_TICKER_IE_GET_ERROR

Error retrieving IE Ticker data from the task result.

UI_TICKER_NAV_GET_ERROR

Error retrieving Navigator Ticker data from the task result.


Configuration Errors

The following errors indicate an error in the configuration of the system. Typically, this indicates that an XML file or object is malformed. In the case of http headers, this would probably occur when an application is creating the request from scratch.

Example Configuration Failure

The following error message can result from an invalid task ID:

_xx_XX_This item was not found: TaskInstance:null(id=#ID#A3A54BAA50EE6A83:-FAB1B5:F4E533AC54:-7FFA)

Error Codes

The following tables list the import file-related error codes and their corresponding messages as displayed by Identity Manager.

Import File-Related Error Codes and Messages

SES_IMPORT_CLASS_ERROR_4

Unable to {0}: Access to class {1} was denied.

SES_IMPORT_CLASS_ERROR_5

Unable to {0}: type ''{1}'' not found.

SES_IMPORT_CLASS_REPOSITORY_ERROR

Unable to {0}: Cannot get a handle to the repository.

SES_IMPORT_CLASS_SERVER_ERROR

Unable to {0}: Cannot get a handle to the server.

SES_IMPORT_OBJECT_ERROR

Cannot import object of type {0} without a name.

SES_IMPORT_RECREATE_FAILED

Attempting to recreate Administrator ''{0}'' failed {1}.

Http Header Errors/Bad Http Request

SES_MISSING_HTTP_ATTRIBUTE_ERROR

Http request must contain the {0} attribute(s) before login can continue.

SES_MISSING_HTTP_HEADER_ERROR

Http header must contain the {0} field(s) before login can continue.

SES_MISSING_HTTP_REQUEST_ERROR

Http request must contain the {0} parameter(s) before login can continue.

SES_ROLE_EXCLUSION_ERROR_1

The Role {0} excludes this Role and must be removed.

SES_ROLE_EXCLUSION_ERROR_2

The Role {0} is excluded by the role {1} and one must be removed.

SES_ROW_REMOVE_ERROR

Not allowed to remove all rows.

Import of Unknown/Invalid XML Object Error Codes and Messages

SES_VIEW_CHECKIN_ERROR

Unable to checkin view. No account ID specified.

SES_VIEW_CLASS_ERROR_1

Class {0} is not a ViewHandler class.

SES_VIEW_CLASS_ERROR_2

Class {0} is not a concrete class.

SES_VIEW_CLASS_ERROR_3

Class {0} does not have a public zero-argument constructor.

SES_VIEW_CLASS_ERROR_4

Class {0} is not a LoginModule implementation.

SES_VIEW_CLASS_ERROR_5

Class {0} not found.s

SES_VIEW_CLASS_ERROR_6

Class {0} does not implement ImportMerger.

SES_VIEW_CLASS_ERROR_7

Constructor for {0} that takes an instance of {1} is not public.

SES_VIEW_CLASS_ERROR_8

Class {0} is not an XmlObject extension.

SES_VIEW_CLASS_ERROR_9

Access to class {0} was denied.

SES_VIEW_ITEM_NOT_FOUND

This item was not found: {0}.

SES_VIEW_FILE_NAME_ERROR

Unable to determine view file name.

SES_VIEW_FILE_OBJECT_ERROR

Cannot create object views.

SES_VIEW_CLASS_ERROR_2

Class {0} is not a concrete class.

SES_VIEW_CLASS_ERROR_3

Class {0} does not have a public zero-argument constructor.

SES_VIEW_CLASS_ERROR_4

Class {0} is not a LoginModule implementation.

SES_VIEW_CLASS_ERROR_5

Class {0} not found.

SES_VIEW_CLASS_ERROR_6

Class {0} does not implement ImportMerger.

SES_VIEW_FILE_OBJECT_ERROR

Cannot create object views.

SES_WAVESETCONSOLE_FILE_WSUSER_
ERROR

File does not contain a WSUser object.

SES_WAVESETCONSOLE_RENAME_ERROR

Rename of Users is not allowed from the console.

SES_WORKITEM_AUTH_FAILED_
NO_SUBJECT

Unable to authorize: no subject.

SES_WORKITEM_CHANGE_OWNER_ERROR

You may not change the work item owner.

SES_WORKITEM_FINDUSER_ARG_ERROR

findUser: Insufficient number of arguments.

SES_WORKITEM_REMOVE_OWNER_ERROR

You may not remove a work item owner.

UI_ABSTRACTDATASTORE_
WAVESETEXCEPTION1

An item with this name already exists: {0}.

Configuration Error Codes and Messages

SES_USER_UI_CONFIG_ERROR

Unable to locate UserUIConfig.


Create/Edit Password/Account Policy Rule Violations

Password and Account Policy errors can be generated either on the creation of the policy (the first group) or when an account (with password) is being created that uses the policy. There can be multiple errors in either case. These errors are collected and displayed as one error with a wrapper message.

Example Password Creation Failure

The following example shows an exception that occurs when creating a password.

_xx_XX_Policy Violation (password on Identity Manager User): _xx_XX_Minimum length is 4.

Example Policy Setup Violation Failure

The following message contains the main exception “Policy Setup Violation.” Individual policy violations are added on:

_xx_XX_Policy Setup Violation: _xx_XX_Specified that 10 character type rules must pass, but there are only 2 character type rules enabled. _xx_XX_Minimum Length cannot be greater than Maximum Length. _xx_XX_The total number of character type rule characters is greater than Maximum Length.

Error Codes

The following table lists the policy creation rule-related error codes and the text of their corresponding messages as displayed by Identity Manager.

Policy Creation Rule-Related Error Codes and Messages

PL_POLICY_SETUP_VIOLATION_HEADER

Policy Setup Violation:

PL_RULE_INVALID_CHAR_ERROR

Invalid request for all {0} characters to be of more than one character type (e.g. alpha, numeric, special, etc.)

PL_RULE_INVALID_ERROR

Invalid limit value entered for {0} rule: {1}. Please enter a number from 0 to 9999.

PL_RULE_LIMIT_ALL_ERROR

Must specify a limit value to enable {0} rule. Please enter a number from 0 to 9999 or ""All"".

PL_RULE_LIMIT_ERROR

Must specify a limit value to enable {0} rule. Please enter a number from 0 to 9999.

PL_TOO_MANY_RULES_ERROR

Specified that {0} character type rules must pass, but there are only {1} character type rules enabled.

PL_TOTAL_RULE_ERROR

The total number of character type rule characters is greater than Maximum Length.

UI_POLICYFORM_WAVESETEXCEPTION1

Could not edit the policy. Please try again.

UI_POLICYFORM_WAVESETEXCEPTION2

Could not execute 'SaveAs' or 'Rename' without a new name parameter.

UI_POLICYFORM_WAVESETEXCEPTION3

Missing value for Policy Type.

UI_POLICYFORM_WAVESETEXCEPTION4

Invalid value specified for minimum number of enabled rules that must pass. Specify a number greater than 0 or 'ALL'.

UI_POLICYFORM_WAVESETEXCEPTION5

Must specify a limit value to enable {0} rule. Please enter a number from 0 to 9999.

UI_POLICYFORM_WAVESETEXCEPTION6

Must specify a limit value to enable {0} rule. Please enter a number from 0 to 9999 or 'ALL'.

UI_POLICYFORM_WAVESETEXCEPTION7

Invalid limit value entered for {0} rule: {1}. Please enter a number from 0 to 9999.

UI_POLICYFORM_WAVESETEXCEPTION8

Invalid request for all {0} characters to be of more than one character type (e.g. alpha, numeric, special, etc.).

UI_POLICYFORM_WAVESETEXCEPTION9

Invalid limit value entered for {0} rule: {1}. Please enter a number from 0 to 9999.

UI_POLICYFORM_WAVESETEXCEPTION10

Invalid limit value entered for {0} rule: {1}. Please enter a number from 0 to 9999 or 'ALL'.

UI_POLICYFORM_WAVESETEXCEPTION11

Incompatible character type rule limit values. No other character type rule limits can be specified when one character type rule is specified with a value of 'ALL'.

UI_POLICYFORM_WAVESETEXCEPTION12

Specified that {0} character type rules must pass, but there are only {1} character type rules enabled.

UI_POLICYFORM_WAVESETEXCEPTION13

Minimum Length cannot be greater than Maximum Length.

UI_POLICYFORM_WAVESETEXCEPTION14

The total number of character type rule characters is greater than Maximum Length.

UI_POLICYFORM_WAVESETEXCEPTION15

Invalid value for 'Number of Previous Passwords that Cannot be Reused'.


Form Errors

The following errors can occur when a form is generated.

Approval Routing Error when Approver has no email Address

UI_EMAIL_FROMADDRESS_ERROR

You must specify fromAddress.

UI_EMAIL_TOADDRESS_ERROR

You must specify toAddress.

Example Form Failure

If the user does not specify a file in the File to Upload field of the Load from File page, the following error message displays:

‘You must specify a file to upload.’

Error Codes

The following tables list the form-related error codes and their corresponding messages as displayed by Identity Manager:

Form Creation Error Codes and Messages

UI_EDITFORM_WAVESETEXCEPTION1

Alignment for {0} must be either left, right, center, or null.

UI_EDITFORM_WAVESETEXCEPTION2

HTMLItems must support Table.implementsToHTML.

UI_EDITFORM_WAVESETEXCEPTION3

You must specify a name.

UI_EDITFORM_WAVESETEXCEPTION4

Error listing the contents of this Organization. Please try again.

UI_EDITFORM_WAVESETEXCEPTION5

Could not find multi-part boundary in post data.

UI_EDITFORM_WAVESETEXCEPTION6

Multi-part boundary in post data is not correct.

UI_EDITFORM_WAVESETEXCEPTION7

The file is larger than the maximum supported length of {0} bytes.

Editor Form Error Codes and Messages

UI_FORMMODULE_WAVESETEXCEPTION1

Not a PersistentObject.

UI_FORMMODULE_WAVESETEXCEPTION2

Not a form!

UI_FORMMODULE_WAVESETEXCEPTION3

Unable to locate parent for edited item.

UI_FORMMODULE_WAVESETEXCEPTION4

Attempt to assimilate non-FormItem.

UI_FORM_VALIDATION

Validation errors detected in form.

UI_IMPORTFORM_JAVA_ERROR1

The request contained invalid file data.

UI_IMPORTFORM_JAVA_ERROR2

The request did not contain the expected file.

UI_IMPORTFORM_JAVA_IMPORT_ERROR

An error occurred importing the file, although some of the file data may have been processed.

UI_LOADFORM_COL_HDR2

Errors

UI_LOADFORM_FILE_ERROR

You must specify a file to upload.

UI_LOGINSETUPTABLE_EXCEPTION

At least one login module must be assigned to save this configuration.

UI_ORGSAVE_EXCEPTION

Error deserializing ObjectGroup saved on session.


Object Locking Errors

This section describes the object locking errors that occur when more than one administrator is editing or viewing an object.

Example Object Locking Failure

The following error displays when two administrators are viewing the same organization. (Notice the UI_ERROR_TAG prefix.)

_xx_XX_ERROR:_xx_XX_Item ObjectGroup:Marketing(id=#ID#OBJECTGROUP:MARKETING) already locked by 'Configurator'

Error Codes

The following table lists the object locking-related error codes and their corresponding messages as displayed by Identity Manager.

Object Locking Error Codes and Messages

SES_OBJECT_LOCKED

Object is locked by {0}.

SES_OBJECT_LOCKED_NO_SUBJECT

Object is locked.


Provisioning and Reconciliation Errors

The following errors relate to failures during account provisioning and reconciliation procedures.

Example Provisioning and Reconciliation Failure

If a resource has an account that violates Identity Manager Account policy rules, reconciliation can fail. The following error might display:

‘Failed to create a new Identity Manager user based on resource account {0}:{1}.’

Error Codes

The following table lists the provisioning- and reconciliation-related error codes and their corresponding messages as displayed by Identity Manager.

Reconciliation Error Codes and Messages

AR_CREATE_NEW_USER_FROM_ACCOUNT_X_FAILED

Failed to create a new Identity Manager user based on resource account {0}: {1}.

AR_DELETE_ACCOUNT_X_FAILED

Failed to delete resource account {0}: {1}.

AR_LINK_ACCOUNT_X_TO_USER_Y_FAILED

Failed to link resource account {0} to Identity Manager user {1}: {2}.

AR_POTENTIAL_ACCOUNT_DISPUTE

Potential conflict: User {0} owns account {1} on resource {2}, but the identity template on that resource would generate the same account id for user {3}.

AR_RECON_HAD_EXCEPTION

Reconciliation was terminated by an internal error: {0}.

UI_RECONPOLICYFORM_JAVA_SCHEDULE_POLICY_
LOCK_FAILED

Could not acquire locks on reconciliation schedule policy.

UI_RECONPOLICYLIST_STATUS_FAILURE

Failed.

UI_RECONSTATUS_RECON_FAILURE

Reconciliation failed:

UI_RECONSTATUS_RECON_WARNINGS

Reconciliation succeeded with errors:

UI_RECONSTATUS_WARNINGS_RECEIVED

The following errors were received during reconciliation:

UI_RECONTASKRESULTS_SUBTITLE

A status of {0} highlights a failure that halted reconciliation of a resource. A status of {1} indicates a potential problem or a failure that affected only a single account.


Resource Adapter Errors

The errors described in this section occur during reconciliation and account creation where conflicts exist among assigned resources.

Error Codes

The following table lists the resource adapter-related error codes and their corresponding messages as displayed by Identity Manager:

Resource Adapter-Related Error Codes and Messages

AR_SITUATION_DESC_ADAPTER_ERROR

Unexpected error from resource adapter.

AR_SITUATION_DESC_BAD_CONNECTION

Unable to list accounts on a resource.

AR_SITUATION_DESC_COLLISION

Two users own the same resource account.

AR_SITUATION_DESC_CONFIRMED

An expected account exists on a resource.

AR_SITUATION_DESC_CROSSOVER

A user has a resource account with the same name as an account owned by a different user on a different resource.

AR_SITUATION_DESC_DELETED

An expected account does not exist on a resource.

AR_SITUATION_DESC_FOUND

A user has an account on a resource assigned to that user.

AR_SITUATION_DESC_MISSING

A user has no account on a resource assigned to that user.

AR_SITUATION_DESC_UNKNOWN

The state of this resource account (as compared to Identity Manager) has not yet been determined.

AR_SITUATION_DESC_UNOWNED_MULTIPLE

A resource account previously unknown to Identity Manager matches more than one Identity Manager user.

AR_SITUATION_DESC_UNOWNED_NO_MATCH

A resource account previously unknown to Identity Manager matches no Identity Manager user.

AR_SITUATION_DESC_UNOWNED_ONE_MATCH

A resource account previously unknown to Identity Manager matches exactly one Identity Manager user.

AR_SITUATION_MSG_COLLISION

User ''{3}'' already owns the account ({2}) on resource ''{1}'' that would have been created for user ''{0}''.

AR_SITUATION_MSG_CONFIRMED

Found expected account ''{2}'' for user ''{0}'' on resource ''{1}''.

AR_SITUATION_MSG_CROSSOVER

User ''{3}'' already has a resource account ({2}) with the name that would have been created on resource ''{1}'' for user ''{0}''.

AR_SITUATION_MSG_DELETED

User ''{0}'' had an account ({2}) on assigned resource ''{1}'', but the account appears to have been deleted without using Identity Manager.

AR_SITUATION_MSG_FOUND

Found account ({2}) for user ''{0}'' on assigned resource ''{1}''.

AR_SITUATION_MSG_MISSING

User ''{0}'' missing account ({2}) on assigned resource ''{1}''.

AR_SITUATION_MSG_UNOWNED_MULTIPLE

Account ''{2}'' was added to resource ''{1}'' without using Identity Manager. It could correlate (by accountId) with any of the following users: {3}.

AR_SITUATION_MSG_UNOWNED_NO_MATCH

Account ''{2}'' was added to resource ''{1}'' without using Identity Manager. It does NOT correlate (by accountId) with any Identity Manager user.

AR_SITUATION_MSG_UNOWNED_ONE_MATCH

Account ''{2}'' was added to resource ''{1}'' without using Identity Manager. It correlates (by accountId) with user ''{0}''.


Resource and Role Errors

The following errors occur when you are working with resources and roles. The first group of errors occur when you are searching for a Role or Resource. The second group shows errors that are generated from the resource List, Create, or Edit menus.

Example Resource and Role Failure

The following message occurs when a test connection on a LDAP server failed:

_xx_XX_Test connection failed. Could not connect to LDAP server 'maurelius-nt'. ==> maurelius-nt:389

The first piece is the wrapper for the “Could not connect…” exception that came from the adapter.

Error Codes

The following tables list the role/resource-related error codes and the corresponding message text displayed by Identity Manager.

Role/Resource-Related Error Codes and Messages

UI_SEARCHTABLE_WAVESETEXCEPTION1

You must select at least one search row checkbox. Please try again.

UI_SEARCHTABLE_WAVESETEXCEPTION2

You must enter some text to search by user name.

UI_SEARCHTABLE_WAVESETEXCEPTION3

You must select a role to search by role.

UI_SEARCHTABLE_WAVESETEXCEPTION4

Unable to search on that role. Please try again.

UI_SEARCHTABLE_WAVESETEXCEPTION5

You must select a resource to search by resource.

UI_SEARCHTABLE_WAVESETEXCEPTION6

Unable to search on that resource. Please try again.

UI_SEARCHTABLE_WAVESETEXCEPTION7

You must select a enabled state to search by enabled state.

UI_SEARCHTABLE_WAVESETEXCEPTION8

You must select a provisioning state to search by provisioning state.

UI_SEARCHTABLE_WAVESETEXCEPTION9

You must select an organization to search by organization.

UI_SEARCHTABLE_WAVESETEXCEPTION10

Unknown row name {0}.

UI_ROLES_JAVA_TOO_MANY_ERR_MSG

Your search returned too many items. Results truncated to {0} users.

UI_ROLES_JSP_DELETE_ERR_MSG

Please select one or more roles to delete.

UI_ROLES_XML_VAL_OVERRIDE_COL_LABEL

Value override.

UI_SERVICEMODIFY_JSP_DELAY_ERROR2

Delay Between Retries must be greater than or equal to 0.

UI_SERVICEMODIFY_JSP_DELETE_ERROR

ERROR attempting to delete {0}:

UI_SERVICEMODIFY_JSP_EDIT_ERROR

An error occurred trying to edit that resource. Please try again.

UI_SERVICEMODIFY_JSP_MAXIMUMRETRIES_
ERROR1

Maximum Retries must be a number.

UI_SERVICEMODIFY_JSP_MAXIMUMRETRIES_
ERROR2

Maximum Retries must be greater than or equal to 0.

UI_SERVICEMODIFY_JSP_ORG_ERROR

This resource must be made available to at least one organization. Please assign one and save again.

UI_SERVICEMODIFY_JSP_RETRY_ERROR1

Retry Notification Email Threshold must be a number.

UI_SERVICEMODIFY_JSP_RETRY_ERROR2

Retry Notification Email Threshold must be greater than or equal to 0.

UI_SERVICEMODIFY_JSP_START_ERROR

Error starting {0}.

Resource Test Connection Error Codes and Messages

UI_TESTCONNECTION_FAILED

Test connection failed.

UI_TESTCONNECTION_FAILED_ALERT

Test connection failed for resource(s):

Resource List Error Codes and Messages

UI_RESOURCEDOMENU_ERROR_1

Please select a Resource Object to rename.

UI_RESOURCEDOMENU_ERROR_2

Please select an item to rename.

UI_RESOURCEDOMENU_ERROR_3

Please select a Resource Object to save as.

UI_RESOURCEDOMENU_ERROR_4

Please select an item to save as.

UI_RESOURCEDOMENU_ERROR_5

Please select an object from which to begin a find request.

UI_RESOURCEDOMENU_ERROR_6

Please select an item to edit.

UI_RESOURCEDOMENU_ERROR_7

Please select only one Resource to edit.

UI_RESOURCEDOMENU_ERROR_8

Please select a Resource in order to edit its schema.

UI_RESOURCEDOMENU_ERROR_9

Please select a Resource in order to edit its dn template.

UI_RESOURCEDOMENU_ERROR_10

Please select a Resource in order to edit its retry attributes.

UI_RESOURCEDOMENU_ERROR_11

Please select a Resource in order to edit its policy attributes.

UI_RESOURCEDOMENU_ERROR_12

Please select a Resource in order to test its connection status.

UI_RESOURCEDOMENU_ERROR_13

Please select a Resource to start.

UI_RESOURCEDOMENU_ERROR_14

Please select a Resource to stop.

UI_RESOURCEDOMENU_ERROR_15

Please select a Resource in order to refresh its active sync status.

UI_RESOURCEDOMENU_ERROR_16

Please select one or more items to delete.

UI_RESOURCEDOMENU_ERROR_17

Please select one or more {0} to {1}.


Task Errors

The following errors typically occur when tasks are run.

Provisioning Error Codes and Messages

PR_ACCOUNT_DELETED_ERROR

Account ''{0}'' is marked for deletion. Operation ignored.

PR_NEW_ACCOUNT_ERROR

Creation of new accounts is currently disallowed.

PV_ACCOUNT_EXISTS

An account with name {0} already exists.

PV_ACCOUNT_NOT_UNIQUE_ERROR

Generated account ID ''{0}'' on resource ''{1}'' is not unique.

PV_ACCOUNT_RESOURCE_UNLINK_MSG

Account ''{0}'' on Resource ''{1}'' unlinked from User ''{2}''.

PV_APPROVAL_FORWARDING

User {0} is forwarding approvals to {1}.

PV_APPROVAL_MISSING_ID

WorkflowServices.getApprovers: missing account ID.

PV_CANNOT_GENERATE_ACCOUNT_ID

Unable to generate user account ID.

PV_DELETE_ENTRY_ERROR

Failed to delete AccountIndex entry: {0}.

PV_DEPROVISION_REQUIRED

The account {0} could not be deleted. Accounts for the following resources still exist: {1}. You must first deprovision this account.

PV_ENABLE_DISABLE_MISSING_ACCOUNT

WorkflowServices.enable/disable: missing account ID.

PV_FAILURE_SENDING_EMAIL

Failure sending email: {0}.

PV_FORWARD_CYCLE_ERROR

Forwarding cycle detected between {0} and {1}. Last approver was {2}.

PV_MISSING_ATTRIBUTE

Account cannot be created, missing attribute {0}.

PV_MISSING_EMAIL_ON_RESET

Password reset notification for user {0} cannot be sent since user has no email address.

PV_MISSING_REJECTOR_NAME

Missing rejector name.

PV_MISSING_RESOURCE_NAME

Missing resource name.

PV_MISSING_USER_NAME

WorkflowServices.{0}: missing user name.

PV_MISSING_VALUE_FOR_ARG

Context lacks value for argument ''{0}''.

PV_MISSING_VALUE_FOR_BOTH_ARGS

Context has value for neither argument ''{0}'' nor ''{1}''.

PV_MUST_DEPROVISION

You must de-provision account {0} before it can be deleted.

PV_NO_ACCOUNT

Unable to provision, no account name specified.

PV_NO_ADAPTER

Unable to locate resource adapter {0}.

PV_NO_PASSWORD

Unable to provision, no password specified.

PV_NO_ROLE

Unable to provision, no role specified.

PV_NO_SUBJECT_FOR_ANON_USER

Cannot create Subject for anonymous user.

PV_NO_USER_ERROR

WorkflowServices.validate: no user.

PV_PROVISION_NO_VIEW

WorkflowServices.provision: no view.

PV_RESOURCE_USER_UNLINK_MSG

Resource ''{0}'' unlinked from User ''{1}''.

PV_RETRY_MESSAGE

Retry {0} of {1}.

PV_UNABLE_TO_CREATE_ACCOUNT

Unable to create identity for account on resource ''{0}''.

PV_UNKNOWN_NOTIFICATION_TYPE

Unknown notification type ''{0}''.

PV_UNKNOWN_USER

Unknown user {0}.

PV_UNKNOWN_WORKFLOW_OPERATION

Unknown WorkflowServices op {0}.

PV_USER_NO_EMAIL_ADDRESS

User {0} does not have an email address.

PV_USER_NO_RIGHTS

User {0} does not have approval rights.

PV_USER_WAS_DELETED_ERROR

User ''{0}'' was deleted during provisioning.

Example Task Failure

If a user creates an Identity Manager account with either a resource or role that requires approval, and the approver does not have an email address set, the following message displays:

‘Address must be specified’

Error Codes

The following tables list the import task-related error codes and their corresponding messages as displayed by Identity Manager.

Task Execution Error Codes and Messages

TASK_EXECUTE_ERROR_NO_DEF

Could not execute task ''{0}'', no task definition.

TASK_EXECUTE_ERROR_NO_EXEC

Could not execute task ''{0}'', no executor class specified.

TASK_LAUNCH_ERROR_NO_NAME

Unable to launch process, missing process name.

TASK_LOCK_ERROR

Unable to break lock on TaskInstance ''{0}''.

TASK_NO_SUBJECT_ERROR

Unable to launch task ''{0}'', no subject or owner specified.

Task Errors and Result Page Error Codes and Messages

UI_TASKS_APPLET_MSG_ERR_RETRIEVING

There was an error while retrieving task status.

UI_TASKS_JAVA_BAD_NAME_ERR_MSG

Cannot format results page, no task with name {0}.

UI_TASKS_JAVA_NO_RESULT_ERR_MSG

Cannot format results page, no task id or result.

UI_TASKS_JAVA_STATE_WITH_ERRORS

with errors.

UI_TASKS_LAUNCH_ERROR

Unable to launch task. A task with name ''{0}'' is already running.


UI Exceptions

The exceptions described in this section occur in the Identity Manager Administrative interface. This list of exceptions varies widely.

Example UI Exception

The following error message may display when the user clicks Send on the Find Users page when creating an account:

‘You must enter some text to search by name.’

Error Codes

The following table lists UI-related error codes and their corresponding messages as displayed by Identity Manager.

Generic UI Error Codes and Messages

UI_EXCEPTION_1

A task definition must be specified.

UI_EXCEPTION_2

Adjacent paste with no parent.

UI_EXCEPTION_3

AppletCell is not supported.

UI_EXCEPTION_4

At least one login module must be assigned to save this configuration.

UI_EXCEPTION_5

Attempt to assimilate non-FormItem.

UI_EXCEPTION_6

Cannot layout without start node.

UI_EXCEPTION_7

Cell is not null.

UI_EXCEPTION_8

Cell out of bounds.

UI_EXCEPTION_9

Could not find Login Config Object.

UI_EXCEPTION_10

Each subitem must be an instance of Button or Cell.

UI_EXCEPTION_11

Empty Identity Manager User Attribute or Resource User Attribute. All rows must be filled in to save this Schema Map.

UI_EXCEPTION_12

Error editing the login module. Please try again.

UI_EXCEPTION_13

Error editing the login module. Please try again.

UI_EXCEPTION_14

FormUtil: missing Identity Manager session.

UI_EXCEPTION_15

FormUtil: missing type name.

UI_EXCEPTION_16

GridSpanCell is full.

UI_EXCEPTION_17

InputStream truncated.

UI_EXCEPTION_18

Invalid ID.

UI_EXCEPTION_19

Invalid integer.

UI_EXCEPTION_20

Item to replace not found.

UI_EXCEPTION_21

Missing <Display> class name.

UI_EXCEPTION_22

Missing key ID.

UI_EXCEPTION_23

Missing parameter \""taskId\"".

UI_EXCEPTION_24

Missing password.

UI_EXCEPTION_25

Missing required parameter. This operation may not be supported on this resource type.

UI_EXCEPTION_26

Missing session.

UI_EXCEPTION_27

Missing user name.

UI_EXCEPTION_28

Next available cell is not null.

UI_EXCEPTION_29

No UserUIConfig.

UI_EXCEPTION_30

No UserUIConfig.

UI_EXCEPTION_31

No XML element surrounding script.

UI_EXCEPTION_32

No destination.

UI_EXCEPTION_33

No session.

UI_EXCEPTION_34

Not a Library.

UI_EXCEPTION_35

Not a PersistentObject.

UI_EXCEPTION_36

Not a form!

UI_EXCEPTION_37

Not a rule.

UI_EXCEPTION_38

Not a workflow process.

UI_EXCEPTION_39

Not an EmailTemplate.

UI_EXCEPTION_40

Not enough cells in grid.

UI_EXCEPTION_41

Null request state.

UI_EXCEPTION_42

Paste structure error.

UI_EXCEPTION_43

Request is null.

UI_EXCEPTION_44

This administrator does not control any organizations.

UI_EXCEPTION_45

Unable to determine edit form.

UI_EXCEPTION_46

Unable to determine edit view.

UI_EXCEPTION_47

Unable to launch process, missing process name.

UI_EXCEPTION_48

Unable to locate editor module.

UI_EXCEPTION_49

Unable to locate object.

UI_EXCEPTION_50

Unable to locate parent for edited item.

UI_EXCEPTION_51

Unresolved source.

UI_EXCEPTION_52

ViewModule cannot load object.

UI_EXCEPTION_53

WSHOME not set.

UI_EXCEPTION_54

WorkItemForm: no ID.

UI_EXCEPTION_55

XML roundtrip failed.

UI_EXCEPTION_56

You must enter some text to search by name.

UI_EXCEPTION_57

You must pick a capability to search by capability.

UI_EXCEPTION_58

You must pick a controlled organization to search by controlled organization.

UI_EXCEPTION_59

You must pick a resource to search by resource.

UI_EXCEPTION_60

You must pick an approver to search by approver.

UI_EXCEPTION_61

You must pick an organization to search by \""Available to\"".

UI_EXCEPTION_62

You must select an organization to search by organization.

UI_EXCEPTION_63

You must select at least one search row checkbox. Please try again.

UI_EXCEPTION_64

colSpan must not be zero.

UI_EXCEPTION_65

colSpan too big.

UI_EXCEPTION_66

save as or rename without a new name parameter.

UI_EXCEPTION_67

rowSpan must not be zero.

UI_EXCEPTION_68

rowSpan too big.

UI_EXCEPTION_69

save as or rename without a new name parameter.

UI_EXCEPTION_70

Invalid type name: {0}.

UI_EXCEPTION_71

Unknown user name field selected: {0}.

UI_EXCEPTION_72

Could not get proxy administrator for resource {0}.

UI_EXCEPTION_73

Error parsing {0}.

UI_EXCEPTION_74

MIME boundary missing: {0}.

UI_EXCEPTION_75

Content Disposition line misformatted: {0}.

UI_EXCEPTION_76

Content Disposition of {0} is not supported.

UI_EXCEPTION_77

Content Disposition line misformatted: {0}.

UI_EXCEPTION_78

Content-Type line misformatted: {0}.

UI_EXCEPTION_79

Unexpected line in MIMEpart header: {0}.

UI_EXCEPTION_80

Misformatted line following disposition: {0}.

UI_EXCEPTION_81

Failure in parseMulti hashtable building code.

UI_EXCEPTION_82

Unknown row name {0}.

UI_EXCEPTION_83

Source List value must either be a string or an expression.

UI_EXCEPTION_84

You must have at least one {0} resource to create a login module.

UI_EXCEPTION_85

Unable to generate view, no object id or creation type.

UI_EXCEPTION_86

Alignment for {0} must be either left, right, center, or null.

UI_EXCEPTION_87

File {0} is empty.

UI_EXCEPTION_88

File starts with neither XML header nor CSV header.

UI_EXCEPTION_89

File starts with neither XML header nor CSV header.

UI_EXCEPTION_90

No editor module for type: {0}.

UI_EXCEPTION_91

Class {0} is not a Component class.

UI_EXCEPTION_92

No registered editor for object {0}.

UI_EXCEPTION_93

File exceeds the maximum supported length of {0} bytes.

UI_EXCEPTION_94

Missing multi-part boundary in post data.

UI_EXCEPTION_95

Incorrect multi-part boundary in post data.

UI_EXCEPTION_96

The maximum number of auditable attributes is ''{0}''. Changes/additions to account attributes are audited if the Account Management audit group is enabled. In that case ALL attributes names/values are stored in the audit record as a single string. Marking an attribute auditable here will also store the attributes value (except in case of a password) in a separate database column, for ease in data mining.

UI_EXCEPTION_97

The audit record details you have requested is not a member of an organization you control. In order to view the details of an audit record you must control the organization the record belongs.

UI_EXCEPTION_98

Could not authenticate as the reset administrator.


Miscellaneous Errors and Exceptions

The following tables list error codes and their corresponding messages displayed by Identity Manager for the following:

The following generic wrapper is sometimes seen in page processor errors or sometimes with reports or roles:

Generic Tag (used as a wrapper for some other exceptions)

UI_ERROR_TAG

ERROR



Previous      Contents      Index      Next     


Copyright 2006 Sun Microsystems, Inc. All rights reserved.