Highlighted
Anonymous_User Absent Member.
Absent Member.
336 views

IDM 4.0.1 and RSA driver Trivi! Help!


Novell Identity Manager 4.0.1 _*RedHat_Linux_Enterprise*_
RSA IDM driver with AuthManager 7.1 running in Identity Manager (
without remoteloader)
_IDM_TO_RSA_(_SUBSCRIBER-ONLY)__PUBLISHER_IS_DISABLED._

The driver starts OK,. but when existing user gets merged the modify
operation results in the ERROR

The modify operation looks like this before it leaves to the driver
shim:

<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User"
event-id="IDMSERVER#20121010124325#4#1:xxxx" from-merge="true"
qualified-src-dn="removed-intetionalily"
src-dn="removed-intetionalily\maxuded" src-entry-id="49833">
<association>maxdude</association>
<modify-attr attr-name="FirstName">
<remove-all-values/>
<add-value>
<value timestamp="1349871539#2" type="string">Max</value>
</add-value>
</modify-attr>
<modify-attr attr-name="LastName">
<remove-all-values/>
<add-value>
<value timestamp="1338471650#73" type="string">Dude</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>



<nds dtdversion="3.0">
<source>
<contact>TriVir</contact>
<product instance="RSA" version="2.1.41/1.0.46">RSA IDM
Driver</product>
</source>
<output>
<status event-id="IDMSERVER#20121010123111#4#1:xxxx" level="error"
type="app-general">
<description>Error updating user information</description>
<default-login>maxdude</default-login>
*<error-code>1010</error-code>*
</status>
</output>
</nds>


Any helps guys, I hope Trivir is still there to help us..


-M.


--
belaie
------------------------------------------------------------------------
belaie's Profile: https://forums.netiq.com/member.php?userid=308
View this thread: https://forums.netiq.com/showthread.php?t=42723

Labels (1)
0 Likes
8 Replies
Knowledge Partner
Knowledge Partner

Re: IDM 4.0.1 and RSA driver Trivi! Help!

On 10/10/2012 9:04 AM, belaie wrote:
>
> Novell Identity Manager 4.0.1 _*RedHat_Linux_Enterprise*_
> RSA IDM driver with AuthManager 7.1 running in Identity Manager (
> without remoteloader)
> _IDM_TO_RSA_(_SUBSCRIBER-ONLY)__PUBLISHER_IS_DISABLED._
>
> The driver starts OK,. but when existing user gets merged the modify
> operation results in the ERROR
>
> The modify operation looks like this before it leaves to the driver
> shim:
>
> <nds dtdversion="4.0" ndsversion="8.x">
> <source>
> <product edition="Advanced" version="4.0.1.0">DirXML</product>
> <contact>Novell, Inc.</contact>
> </source>
> <input>
> <modify class-name="User"
> event-id="IDMSERVER#20121010124325#4#1:xxxx" from-merge="true"
> qualified-src-dn="removed-intetionalily"
> src-dn="removed-intetionalily\maxuded" src-entry-id="49833">
> <association>maxdude</association>
> <modify-attr attr-name="FirstName">
> <remove-all-values/>
> <add-value>
> <value timestamp="1349871539#2" type="string">Max</value>
> </add-value>
> </modify-attr>
> <modify-attr attr-name="LastName">
> <remove-all-values/>
> <add-value>
> <value timestamp="1338471650#73" type="string">Dude</value>
> </add-value>
> </modify-attr>
> </modify>
> </input>
> </nds>
>
>
>
> <nds dtdversion="3.0">
> <source>
> <contact>TriVir</contact>
> <product instance="RSA" version="2.1.41/1.0.46">RSA IDM
> Driver</product>
> </source>
> <output>
> <status event-id="IDMSERVER#20121010123111#4#1:xxxx" level="error"
> type="app-general">
> <description>Error updating user information</description>
> <default-login>maxdude</default-login>
> *<error-code>1010</error-code>*
> </status>
> </output>
> </nds>
>
>
> Any helps guys, I hope Trivir is still there to help us..


I will ask a friend at TriVir if he has any ideas.

I would consider looking at the RSA side to see if there are any more
details there?

Anything in the RL trace if you boost the level? (Or engine trace, if
running locally?)



0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: IDM 4.0.1 and RSA driver Trivi! Help!


The shim does not say anything else other than ERROR!.. As i mentioned
im running the driver in the engine not with RL.. but trace 4-8 does
not reveal a lot from the shim.


--
belaie
------------------------------------------------------------------------
belaie's Profile: https://forums.netiq.com/member.php?userid=308
View this thread: https://forums.netiq.com/showthread.php?t=42723

0 Likes
Knowledge Partner
Knowledge Partner

Re: IDM 4.0.1 and RSA driver Trivi! Help!

On 10/10/2012 10:54 AM, belaie wrote:
>
> The shim does not say anything else other than ERROR!.. As i mentioned
> im running the driver in the engine not with RL.. but trace 4-8 does
> not reveal a lot from the shim.


Worth a shot. Asked a friend at TriVir to ask someone to come look at
the post, lets see what happens.

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: IDM 4.0.1 and RSA driver Trivi! Help!


Could you set the trace level to 6 and send me a full log excerpt for an
event this produces this error (everything from "Start transaction" to
"End transaction"). Does "maxdude" still exist in the destination
system?

Thanks,

- K


--
rawlink
------------------------------------------------------------------------
rawlink's Profile: https://forums.netiq.com/member.php?userid=2595
View this thread: https://forums.netiq.com/showthread.php?t=42723

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: IDM 4.0.1 and RSA driver Trivi! Help!


Hello

I'm afraid i cannot send you the full log from the production server
due to some security reasons. but here is something i see after log
level

Yes maxdude is found on the RSA server, and driver matching policy
comes with this match-found!

what does 1010 code mean actually ???

Any RSA server side logs that we should look for ?


<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.0">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User"
event-id="idm-server##4#1:guid-some-intentionaly-removed"
from-merge="true" qualified-src-dn="INTENTIONALY_REMOVED\maxdude"
src-dn="INTENTIONALY_REMOVED\maxdude" src-entry-id="XXXXX">
<association>maxdude</association>
<modify-attr attr-name="FirstName">
<remove-all-values/>
<add-value>
<value timestamp="1349871539#2" type="string">RSA</value>
</add-value>
</modify-attr>
<modify-attr attr-name="LastName">
<remove-all-values/>
<add-value>
<value timestamp="1338471650#73" type="string">Dude</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
[10/11/12 10:51:56.579]:RSA ST:RSA\Subscriber: modifyHandler
[10/11/12 10:51:56.619]:RSA ST:RSA\Subscriber: Error occured while
modifying user 'maxdude'. (1010)
[10/11/12 10:51:56.620]:RSA ST:SubscriptionShim.execute() returned:
[10/11/12 10:51:56.620]:RSA ST:
<nds dtdversion="3.0">
<source>
<contact>TriVir</contact>
<product instance="RSA" version="2.1.41/1.0.46">RSA IDM
Driver</product>
</source>
<output>
<status
event-id="idm-server#20121011085156#4#1:guid-some-intentionaly-removed"
level="error" type="app-general">
<description>Error updating user information</description>
<default-login>maxdude</default-login>
<error-code>1010</error-code>
</status>
</output>
</nds>
[10/11/12 10:51:56.621]:RSA ST:No input transformation policies.
[10/11/12 10:51:56.621]:RSA ST:Applying schema mapping policies to
input.
[10/11/12 10:51:56.621]:RSA ST:Applying policy:
%+C%14CTRVRRSADCFG-smp%-C.
[10/11/12 10:51:56.621]:RSA ST:Resolving association references.
[10/11/12 10:51:56.635]:RSA ST:Processing returned document.
[10/11/12 10:51:56.635]:RSA ST:Processing operation <status> for .
[10/11/12 10:51:56.636]:RSA ST:
DirXML Log Event -------------------
Driver: \IDM\DriverSet\RSA
Channel: Subscriber
Object: \INTENTIONALY_REMOVED\maxdude
Status: Error
Message: <description>Error updating user
information</description>
<default-login>maxdude</default-login>
<error-code>1010</error-code>


--
belaie
------------------------------------------------------------------------
belaie's Profile: https://forums.netiq.com/member.php?userid=308
View this thread: https://forums.netiq.com/showthread.php?t=42723

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: IDM 4.0.1 and RSA driver Trivi! Help!


More info and updates:

New user creation works fine only updates does not work.

and very strange thing happens after successfully creation of the new
user the RSA driver stops with the following exception.
and when trying to restart the driver driver still gives the same
exception and never starts.

IT ONLY STARTS AFTER RESTARTING WHOLE ENGINE (service ndsd restart)


DirXML Log Event -------------------
Driver: \IDM\DriverSet\RSA
Status: Error
Message: Code(-9010) An exception occurred: java.lang.Error:
fullName == null
at
com.trivir.ace.api.UserInfoCollection.addToFullNameIndex(Unknown
Source)
at com.trivir.ace.api.UserInfoCollection.put(Unknown Source)
at
com.trivir.idm.driver.ace.DataModel.loadDb(DataModel.java:863)
at
com.trivir.idm.driver.ace.DataModel.loadCache(DataModel.java:1003)
at
com.trivir.idm.driver.ace.DataModel.<init>(DataModel.java:108)
at
com.trivir.idm.driver.ace.AceDriverShim.init(AceDriverShim.java:343)
at
com.novell.nds.dirxml.engine.Driver.startShim(Driver.java:1318)
at
com.novell.nds.dirxml.engine.Driver.initialize(Driver.java:264)
at com.novell.nds.dirxml.engine.Driver.<init>(Driver.java:236)
at
com.novell.nds.dirxml.engine.DriverEntry.run(DriverEntry.java:551)
at java.lang.Thread.run(Unknown Source)


--
belaie
------------------------------------------------------------------------
belaie's Profile: https://forums.netiq.com/member.php?userid=308
View this thread: https://forums.netiq.com/showthread.php?t=42723

0 Likes
Knowledge Partner
Knowledge Partner

Re: IDM 4.0.1 and RSA driver Trivi! Help!

My message asking for someone to look has been passed along...

At this point, I would consider an incident with Novell, since they
would pass it to TriVir if it gets hard anyway.

Looks like a bug of some kind, and this error in addToFullNameIndex
looks relevant.


> More info and updates:
>
> New user creation works fine only updates does not work.
>
> and very strange thing happens after successfully creation of the new
> user the RSA driver stops with the following exception.
> and when trying to restart the driver driver still gives the same
> exception and never starts.
>
> IT ONLY STARTS AFTER RESTARTING WHOLE ENGINE (service ndsd restart)
>
>
> DirXML Log Event -------------------
> Driver: \IDM\DriverSet\RSA
> Status: Error
> Message: Code(-9010) An exception occurred: java.lang.Error:
> fullName == null
> at
> com.trivir.ace.api.UserInfoCollection.addToFullNameIndex(Unknown
> Source)
> at com.trivir.ace.api.UserInfoCollection.put(Unknown Source)
> at
> com.trivir.idm.driver.ace.DataModel.loadDb(DataModel.java:863)
> at
> com.trivir.idm.driver.ace.DataModel.loadCache(DataModel.java:1003)
> at
> com.trivir.idm.driver.ace.DataModel.<init>(DataModel.java:108)
> at
> com.trivir.idm.driver.ace.AceDriverShim.init(AceDriverShim.java:343)
> at
> com.novell.nds.dirxml.engine.Driver.startShim(Driver.java:1318)
> at
> com.novell.nds.dirxml.engine.Driver.initialize(Driver.java:264)
> at com.novell.nds.dirxml.engine.Driver.<init>(Driver.java:236)
> at
> com.novell.nds.dirxml.engine.DriverEntry.run(DriverEntry.java:551)
> at java.lang.Thread.run(Unknown Source)
>
>


0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: IDM 4.0.1 and RSA driver Trivi! Help!


The 1010 error is an "Unspecified Error". We have isolated and addressed
the issue.

At this point, Geoff is correct. Please open an incident with NetIQ so
we can properly track this with Novell. I believe that we will need the
support incident to document and track/exchange any patched versions of
the software.


belaie;202295 Wrote:
>
>
> <nds dtdversion="3.0">
> <source>
> <contact>TriVir</contact>
> <product instance="RSA" version="2.1.41/1.0.46">RSA IDM
> Driver</product>
> </source>
> <output>
> <status event-id="IDMSERVER#20121010123111#4#1:xxxx" level="error"
> type="app-general">
> <description>Error updating user information</description>
> <default-login>maxdude</default-login>
> *<error-code>1010</error-code>*
> </status>
> </output>
> </nds>
>
>
> Any helps guys, I hope Trivir is still there to help us..
>
>
> -M.



--
rawlink
------------------------------------------------------------------------
rawlink's Profile: https://forums.netiq.com/member.php?userid=2595
View this thread: https://forums.netiq.com/showthread.php?t=42723

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.