LockUserActionHandler : COMPENSATED Error when Attempting to Lock User that is Set Up for LDAP Sync and OAM Integration (Doc ID 2240295.1)

Last updated on MARCH 03, 2017

Applies to:

Identity Manager - Version 11.1.2.3.0 and later
Information in this document applies to any platform.

Symptoms

 Completed integration steps for OIM and OAM.

LDAPSync works for User Create, Modify and Delete.

However, when attempting to Lock a user in OIM, a Pop-up error shows:

LockUserActionHandler : COMPENSATED

The log shows:

.... [ERROR] [] [oracle.iam.platform.kernel.impl] [tid: [ACTIVE].ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'] [...] Kernel Information: {0}[[
oracle.iam.platform.kernel.EventFailedException: Error occured while executing Id 4 name UserLockLDAPPreProcessHandler
at oracle.iam.platform.kernel.impl.OIMEvent.execute(OIMEvent.java:174)
at oracle.iam.platform.kernel.impl.ProcessImpl.executeStage(ProcessImpl.java:223)
at oracle.iam.platform.kernel.impl.OIMProcess.doStageExecution(OIMProcess.java:39)
at oracle.iam.platform.kernel.impl.ProcessImpl.execute(ProcessImpl.java:182)
at oracle.iam.platform.kernel.impl.MonitoredOIMProcess.execute(MonitoredOIMProcess.java:33)
at oracle.iam.platform.kernel.impl.OIMEvent.handleBulkEventResult(OIMEvent.java:298)
at oracle.iam.platform.kernel.impl.OIMEvent.execute(OIMEvent.java:181)
at oracle.iam.platform.kernel.impl.ProcessImpl.executeStage(ProcessImpl.java:223)
at oracle.iam.platform.kernel.impl.OIMProcess.doStageExecution(OIMProcess.java:39)
at oracle.iam.platform.kernel.impl.ProcessImpl.execute(ProcessImpl.java:182)
at oracle.iam.platform.kernel.impl.MonitoredOIMProcess.execute(MonitoredOIMProcess.java:33)
at oracle.iam.platform.kernel.impl.Utils.manageSyncProcessing(Utils.java:73)
at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.doProcessing(OrchestrationEngineImpl.java:357)
.
Caused by: oracle.iam.platform.entitymgr.ProviderException: Attribute oblockedon is not supported in schema.
at oracle.iam.ldapsync.impl.eventhandlers.user.UserLockLDAPHandler.execute(UserLockLDAPHandler.java:158)
at oracle.iam.platform.kernel.impl.OIMEvent.executeHandlers(OIMEvent.java:207)
at oracle.iam.platform.kernel.impl.MonitoredOIMEvent.invokeExecuteHandler(MonitoredOIMEvent.java:99)
at oracle.iam.platform.kernel.impl.MonitoredOIMEvent.executeHandlers(MonitoredOIMEvent.java:69)
at oracle.iam.platform.kernel.impl.OIMEvent.execute(OIMEvent.java:157)
... 147 more
Caused by: javax.naming.directory.InvalidAttributeIdentifierException: Error: UNDEFINED_ATTRIBUTE_TYPE
LDAP Error 17 : [LDAP: error code 17 - Attribute oblockedon is not supported in schema.] [Root exception is oracle.ods.virtualization.service.VirtualizationException: oracle.ods.virtualization.engine.util.DirectoryException: LDAP Error 17 : [LDAP: error code 17 - Attribute oblockedon is not supported in schema.]]
at oracle.ods.virtualization.jndi.OVDUtil.mapErrorCode(OVDUtil.java:137)
at oracle.ods.virtualization.jndi.OVDContext.modifyAttributes(OVDContext.java:681)
at javax.naming.directory.InitialDirContext.modifyAttributes(InitialDirContext.java:172)
at oracle.iam.platform.entitymgr.provider.ldap.LDAPUtil.modifyAttributes(LDAPUtil.java:1329)
at oracle.iam.platform.entitymgr.provider.ldap.LDAPDataProvider.lockEntity(LDAPDataProvider.java:1539)
at oracle.iam.platform.entitymgr.provider.ldap.LDAPDataProvider.lock(LDAPDataProvider.java:1520)
at oracle.iam.ldapsync.impl.eventhandlers.user.util.LDAPUserHandlerUtil.lockUser(LDAPUserHandlerUtil.java:235)
at oracle.iam.ldapsync.impl.eventhandlers.user.UserLockLDAPHandler.execute(UserLockLDAPHandler.java:153)
... 151 more
Caused by: oracle.ods.virtualization.service.VirtualizationException: oracle.ods.virtualization.engine.util.DirectoryException: LDAP Error 17 : [LDAP: error code 17 - Attribute oblockedon is not supported in schema.]
at oracle.ods.virtualization.operation.ModifyOperation.process(ModifyOperation.java:106)
at oracle.ods.virtualization.service.DefaultVirtualizationSession.processOperation(DefaultVirtualizationSession.java:394)
at oracle.ods.virtualization.service.DefaultVirtualizationSession.modify(DefaultVirtualizationSession.java:210)
at oracle.ods.virtualization.jndi.OVDContext.modifyAttributes(OVDContext.java:675)
... 157 more
Caused by: oracle.ods.virtualization.engine.util.DirectoryException: LDAP Error 17 : [LDAP: error code 17 - Attribute oblockedon is not supported in schema.]
at oracle.ods.virtualization.engine.backend.jndi.ConnectionHandle.handleError(ConnectionHandle.java:463)
at oracle.ods.virtualization.engine.backend.jndi.ConnectionHandle.modify(ConnectionHandle.java:345)
at oracle.ods.virtualization.engine.backend.jndi.BackendJNDI.modify(BackendJNDI.java:842)
at oracle.ods.virtualization.engine.chain.Chain.nextModify(Chain.java:341)
at oracle.ods.virtualization.engine.chain.BasePlugin.modify(BasePlugin.java:97)
at oracle.ods.virtualization.engine.chain.plugins.usermanagement.UserManagement.modify(UserManagement.java:1121)
at oracle.ods.virtualization.engine.chain.Chain.nextModify(Chain.java:350)
.
Caused by: javax.naming.directory.InvalidAttributeIdentifierException: [LDAP: error code 17 - Attribute oblockedon is not supported in schema.]; remaining name 'cn=Gopal.Sita,cn=RIID, 'USERSDN' '
at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3158)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3035)
at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2841)
at com.sun.jndi.ldap.LdapCtx.c_modifyAttributes(LdapCtx.java:1479)

... [WARNING] [] [oracle.iam.platform.kernel.impl] [tid: [ACTIVE].ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'] [...] Kernel Information: [[
====================================
Flow for Process Id ....
Status : ACTIVE
Id 1 name LockUserValidationHandler : COMPLETED
Id 2 name GetCurrentUser : COMPLETED
Id 3 name LockUserPreProcessHandler : COMPLETED
Child Process Id ....
Id 4 name UserLockLDAPPreProcessHandler : COMPLETED
Id 5 name LockUserActionHandler : FAILED
Status : FAILED
Id 719636 name UserActionFailedHandler : COMPLETED
Id 5 name LockUserActionHandler : COMPENSATED
Id 4 name UserLockLDAPPreProcessHandler : COMPENSATED
Id 3 name LockUserPreProcessHandler : COMPENSATED
Id 2 name GetCurrentUser : COMPENSATED
Status : COMPENSATED
====================================

 

Changes

 Upgraded instance

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms