on 08-23-2019 11:30 AM
Hello SAP IDM Experts,
after following the step described under this SAP Help-Pages-link
the execution of the report RPLDAP_EXTRACT_IDM was unsuccessful.
The report SPLDAP_DISPLAY_LOG_TABLES shows for all records
Object not found
Message LDAPACCESS003
The connection to the database is working using the mxmc_rt user with "scope" 2 for the HCM Staging area (opening the schema tables works).
In the config of the Datasource there is a console error output when clicking on "Show available Attributes"
ERROR: java.sql.SQLSyntaxErrorException: ORA-00903: invalid table name
Reading DB config failed with error code:-1
The defeault database parameters (DN, DNFIELDS...) are empty?!
Does someone have an idea about this and below behaviour?
Thanks
Georg
PS: Content of Operations log
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 About to decode incoming on client: 57890 ALL Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 *** Starting search evaluation and preparation phase *** DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Search request: o=idstore, sub INFO Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Requested attributes: [objectclass] INFO Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Requested filter: (&(OBJECTCLASS=sapIdentity)(SYHR_A_P0105_AF_SYSUNAME=[20190823-99991231]BENDERD)) INFO Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Bind name before attempt to find rule: 'HRUSER' DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Assigning rule: FullAccess for user group: Authenticated, configured on node: o=idstore DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 UG(Authenticated): Conversion: No user group mapping required. DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Bind name before attempt to find rule: 'HRUSER' DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Assigning rule: FullAccess for user group: Authenticated, configured on node: o=idstore,* DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 *** Starting node evaluation and preparation phase *** DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 (Node:o=idstore,*): Is not proper objectcclass DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 *** Starting node search execution phase *** DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 *** Starting post processing phase *** DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 *** Fetch result code *** DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 No candidate nodes in scope DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Exception - but no error DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Returning: opResult:0,info: () DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Finished search operation DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Sending operation result DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Sending response to socket: 57890 ALL Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 LDAP Session continues ... DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 About to decode incoming on client: 57890 ALL Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 *** Starting search evaluation and preparation phase *** DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Search request: o=idstore, sub INFO Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Requested attributes: [objectclass] INFO Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Requested filter: (&(OBJECTCLASS=sapIdentity)(SYHR_A_P0105_AF_SYSUNAME=[20190823-99991231]BENDERD)) INFO Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Bind name before attempt to find rule: 'HRUSER' DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Assigning rule: FullAccess for user group: Authenticated, configured on node: o=idstore DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 UG(Authenticated): Conversion: No user group mapping required. DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Bind name before attempt to find rule: 'HRUSER' DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Assigning rule: FullAccess for user group: Authenticated, configured on node: o=idstore,* DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 *** Starting node evaluation and preparation phase *** DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 (Node:o=idstore,*): Is not proper objectcclass DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 *** Starting node search execution phase *** DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 *** Starting post processing phase *** DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 *** Fetch result code *** DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 No candidate nodes in scope DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Exception - but no error DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Returning: opResult:0,info: () DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Finished search operation DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Sending operation result DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Sending response to socket: 57890 ALL Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 LDAP Session continues ... DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 About to decode incoming on client: 57890 ALL Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Executing PreProcess operation DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Executing Preprocess of ADD response DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Executing preprocess of ADD Employee Type Request DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 *** Starting add evaluation phase *** DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 ADD request: CN=COXCLNT100 00000028,o=idstore DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Bind name before attempt to find rule: 'HRUSER' DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Assigning rule: FullAccess for user group: Authenticated, configured on node: o=idstore,* DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Requested attributes: [p0001-persg, text_p0001_stell, text_p0001_persg, text_p0001_persk, p0001-werks, p0001-bukrs, p0001-persk, text_p0001_bukrs, mx_entrytype, objectclass, syhr_a_p0002_af_split_end, p0001-stell, p0001-plans, text_p0001_gsber, p0001-gsber, text_p0001_werks, text_p0001_plans, p0000-stat2, text_p0000_stat2, p0002-vorna, syhr_a_p0002_af_split_beg, p0001-orgeh, p0002-nachn, text_p0001_orgeh, text_p0001_kostl, p0001-ansvh, syhr_a_p0105_af_sysuname, syhr_a_p0001_af_p_is_mgr, text_p0001_ansvh, p0001-kostl] DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 UG(Authenticated): Conversion: No user group mapping required. DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 (Node:o=idstore,*, RULE:FullAccess): Cleaning: Operation allowed on ALL attributes (no cleaning) DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 (Node:o=idstore,*, DS:IDM_Store): Conversion: Requested attributes: [p0001-persg, text_p0001_stell, text_p0001_persg, text_p0001_persk, p0001-werks, p0001-bukrs, p0001-persk, text_p0001_bukrs, mx_entrytype, objectclass, syhr_a_p0002_af_split_end, p0001-stell, p0001-plans, text_p0001_gsber, p0001-gsber, text_p0001_werks, text_p0001_plans, p0000-stat2, text_p0000_stat2, p0002-vorna, syhr_a_p0002_af_split_beg, p0001-orgeh, p0002-nachn, text_p0001_orgeh, text_p0001_kostl, p0001-ansvh, syhr_a_p0105_af_sysuname, syhr_a_p0001_af_p_is_mgr, text_p0001_ansvh, p0001-kostl] DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 (Node:o=idstore,*, DS:IDM_Store): Cleaning: All fields are available - no data source cleaning of attributes. DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 *** Starting operation execution phase *** DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 (Node:o=idstore,*): DN to ADD:CN=COXCLNT100 00000028,o=idstore DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Running add method DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Running update method DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 DNFIELDS parameter was NOT given - using default value DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 DNFIELDS parameter was NOT given - using default value DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Value of DNFIELDS= DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Obtained authenticating datasource DS_1697 DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 KEY INI PATH = /sapmnt/I2T/global/security/data/Key/Keys.ini DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 CacheConnection = false DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 DN parameter was NOT given - using default value DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 DN parameter was NOT given - using default value DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Exception when executing 'MxIDStoreFlat72'(ADD): Missing DS_DN parameter
ERROR /Applications/VirtualDirectoryServer true
{0}#1#java.lang.RuntimeException: Missing DS_DN parameter
at com.sap.idm.vds.idstore.SearchUtilities.refineNodeDN(SearchUtilities.java:279)
at MxIDStoreFlat72.update(MxIDStoreFlat72.java:312)
at MxIDStoreFlat72.add(MxIDStoreFlat72.java:239)
at com.sap.idm.vds.operations.MVDCommonAMDOperation.CarryOutMVDNodeOperation(MVDCommonAMDOperation.java:566)
at com.sap.idm.vds.operations.MVDAddOperation.CarryOutMVDAdd(MVDAddOperation.java:250)
at com.sap.idm.vds.operations.AddOperation.mxperform(AddOperation.java:105)
at com.sap.idm.vds.Engine.answerRequest(Engine.java:331)
at com.sap.idm.vds.protocols.ldap.MxLdapSession.run(MxLdapSession.java:193)
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 *** Fetch result code *** DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Operation result: 82 INFO Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Exception: (IDM_Store:82:Script execution failed) WARN Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Returning: opResult:82,info: ((IDM_Store:82:Script execution failed)) DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Finished add operation DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Sending operation result DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Sending response to socket: 57890 ALL Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 LDAP Session continues ... DEBUG Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 About to decode incoming on client: 57890 ALL Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 Unbind request received on engine id=1 ALL Plain false
Thread[10,3,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 VDS ends the LDAP session DEBUG Plain false
Thread[10,4,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 LDAP Message Handler for Session id=10: Closing INFO Plain false
Thread[10,4,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 LDAP Connection: Closed 57890 ALL Plain false
Thread[10,4,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 EnginePool: Check in engine id=1 ALL Plain false
Thread[10,4,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 EnginePool: Engine id=1 lasted 392 ALL Plain false
Thread[10,4,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 LDAP Message Handler for Session id=10: Closed INFO Plain false
Thread[10,4,LDAP Sessions:main_listener_1389] Fri Aug 23 11:21:32 CEST 2019 LDAP Session (10): Ended ALL Plain false
Hello Alex,
yes classpath setting and id store id have been set correct. Your assumption with Staging Area ID is correct. As seen in the Screenshot above, the id 2 is set correctly in the scope.
The database connection is working, the the table list is shown when selecting the "Get Database"-Button.
After recreating the Server from the template the jobs for 2 employees went through.
However I still don't know why it didn't do it before.
After a couple of solved and unsolved other issues flow of the test system seems to go through.
Thanks anyway for the help.
Regards
Georg
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello Alexander,
yes, all the steps before have been done of course 😉
For what I can see, the VDS is reached by the SAP HCM system, otherwise I would have no errors in the operationslog. Relating to the error
Missing DS_DN parameter
ERROR /Applications/VirtualDirectoryServer true
{0}#1#java.lang.RuntimeException: Missing DS_DN parameter
I would say too, that something is wrong in the config of the VDS, but as indicated in the help pages, I used the template and did not change much in it. Here is the config:
I changed only the redboxed ones. In the template were constants used which did not seem to work at all. I changed it to direct values.
Further I have following error stack thrown on the console of the VDS Gui:
Could not load sun.jdbc.odbc.JdbcOdbcDriver using URLClassLoader with the folowing URLS - file:/oracle/client/122/instantclient_12201/ojdbc8.jar
when opening/access datasource config.
I should mention also that it is the initial installation state, thus the id stores are empty.
Currently I do not exactly know where to find further hints.
As mentioned above the config for "Data source attributes" is "empty, resp. looks like this:
Thanks for any other help.
Regards
Georg
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Georg,
several steps up in the help docu there is the creation of the staging area as (https://help.sap.com/viewer/4773a9ae1296411a9d5c24873a8d418c/8.0/en-US/ba2c311d65e24559aa4f4d4d54ad1728.html). So you have an ID-Store with ID 1 named something and an ID-Store with ID 2 named HCM_Staging_Area? The later one is the one you should reference in the VDS config.
Can you please doublecheck the steps you took whether they are as detailed in the help docu?
Can you please check and state whether the JDBC driver path has been adjusted accordingly?
"The JDBC driver to use to access the Identity Center database is maintained in the class path for the Virtual Directory Server. (Maintain the driver under Tools Options Classpath.)"
Prerequisites, 2nd bullet
Regards,
Alex
Hi Georg,
I don't really get where your problem resides. Is it within HCM system or VDS? The error log reads to me as it would be VDS. Can you please provide more details about the steps you took and where you are having problems with which component?
Another question: the step you linked from help.sap.com requires several steps before to be successfully finished. Did you complete all these steps and tested them?
To me it seems that you are having a problem with your VDS config.
Regards,
Alex
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
76 | |
9 | |
8 | |
7 | |
6 | |
5 | |
5 | |
5 | |
5 | |
5 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.