All Codes (by Rajnish Bhatia)

Active Directory userAccountControl Values

2008-11-13T10:32:00.004-05:00

Normal Day to Day Values:
===========================
512 - Enable Account
514 - Disable account
544 - Account Enabled - Require user to change password at first logon
4096 - Workstation/server
66048 - Enabled, password never expires
66050 - Disabled, password never expires
262656 - Smart Card Logon Required
532480 - Domain controller

All Other Values:
===========================
1 - script
2 - accountdisable
8 - homedir_required
16 - lockout
32 - passwd_notreqd
64 - passwd_cant_change
128 - encrypted_text_pwd_allowed
256 - temp_duplicate_account
512 - normal_account
2048 - interdomain_trust_account
4096 - workstation_trust_account
8192 - server_trust_account
65536 - dont_expire_password
131072 - mns_logon_account
262144 - smartcard_required
524288 - trusted_for_delegation
1048576 - not_delegated
2097152 - use_des_key_only
4194304 - dont_req_preauth
8388608 - password_expired
16777216 - trusted_to_auth_for_delegation

reference:
http://support.microsoft.com/kb/305144
http://www.computerperformance.co.uk/ezine/ezine23.htm

Random Password Generator

2008-10-13T13:28:00.002-04:00

A lot of places we need to create and apply Random Password upon granting a resource or creation of OIM user via code. Here is a code that would generate one and will also allow you to specify the length of random password.

================================
RandomPasswordGenerator.java
================================

import java.util.Random;

public class RandomPasswordGenerator {

public static int DEFAULT_PASSWORD_LENGTH=8;
public static char[] Special_Character = {'!','@','#','$','%','^','&','*','(',')' };
public static char getSpecialCharacter(){
Random rand = new Random();
int randInt = rand.nextInt(10);
return Special_Character[randInt];
}

public static String getPassword(int n) {
if(n <=8 ){
n=DEFAULT_PASSWORD_LENGTH;
}
char[] pw = new char[n];
int c = 'A';
int r1 = 0;
int i=0;
String tempString = new String();
while(i< n){
r1 = (int)(Math.random() * 4);
l1: switch(r1) {
case 0: c = '0' + (int)(Math.random() * 10); break l1;
case 1: c = 'a' + (int)(Math.random() * 26); break l1;
case 2: c = 'A' + (int)(Math.random() * 26); break l1;
case 3: c = getSpecialCharacter(); break;
}

char c1 = (char)c;
boolean isExisting = false;
l2: for(int j=0; j < i; j++){
if(c1 == pw[j]){
isExisting = true;
break l2;
}
}
if(!isExisting){
pw[i] = (char)c;
i++;
}

}
return new String(pw);
}
public static void main(String args[]){
System.out.println(RandomPasswordGenerator.getPassword(8));
}
}

===============================
Output would be something like:
===============================
&3FVZfxb

ACF2 Connector Details

2008-10-13T11:34:00.004-04:00

Clarity on ACF2 Connector
==========================
Please note: Port numbers are configurable.

Pioneer & Voyager are installed on ACF2.
ldap gateway sits on OIM.

Usually, 5190 is the port on the OIM server in which the ldap gateway listens on. Voyager points to the OIM server on port 5190. PIONEER is the listener on the mainframe, the default port is 5790 (Typically 5790 unless it is reserved for another service).

Few Data Types Explored
=========================

1. TOD - String Time-of-day attribute (This is an internal MF format. It's the value returned by the TIME macro) (http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/index.jsp?topic=/com.ibm.zsecure.doc/ckrbzz1902.html)

2. PACKED - Date Field (PACKED is a MF format -- basically, it's a number, but rather than being stored in binary, it's stored in a format where each nibble is one digit and the last nibble denotes the sign.

Example: x''01234C' would be 1234 (positive)) http://webster.cs.ucr.edu/AoA/Windows/HTML/DataRepresentationa7.html

3. HEX - String (hexidecimal data)

4. TIMEBIN - String (TIMEBIN is a fullword; that's 4 bytes and it's the number of .01 secs since midnight.)

5. CHEN - CHEN is character (but encrypted)

For other attributes, refer http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/index.jsp?topic=/com.ibm.zsecure.doc/ckrbzz1902.html

Searching Jar Files in Unix / Linux

2008-10-10T17:52:00.008-04:00

Lot of times we get the following errors:
Exception in thread "main" java.lang.NoClassDefFoundError: server

And we just don't know which jar file is missing from the classpath. And we need to know the correct jar file name(s) to fix the problem. So, here I create a shell script that would allow you to search through all the jar files by specifying a specific keyword. You may modify this script to search in all files (*) or whatever your criteria may be. This script works recursively for all sub-folders as well. So, you can keep this script on the root level of search and simply execute it.

=====================================
searchjars.sh
=====================================

#!/bin/sh

if [ $# -ne 1 ];
then
echo "Usage: ./searchjars.sh <keyword>"
exit
fi

LOOK_FOR="$1"

for i in `find . -name "*jar"`
do
#echo "Looking in $i ..."
jar tvf $i | grep $LOOK_FOR > /dev/null
if [ $? == 0 ]
then
echo "==> Found \"$LOOK_FOR\" in $i"
fi
done

After saving this file, don't forget to give the execute permissions to this script.

[jboss@lin01 xlclient]$chmod +x searchjars.sh

Now you are ready to execute as follows:

If you don't specify any value, the script shows you the usage command:
[jboss@lin01 xlclient]$ ./searchjars.sh
Usage: ./searchjars.sh <keyword>

When you specify the value to be searched, you will see the files that have that value in it.
[jboss@lin01 xlclient]$ ./searchjars.sh server
==> Found "server" in ./java/lib/rt.jar
==> Found "server" in ./ext/jdbcpool-0.99.jar
==> Found "server" in ./ext/nexaweb-nfc-api.jar
==> Found "server" in ./ext/jai_core.jar
==> Found "server" in ./ext/javagroups-all.jar
==> Found "server" in ./ext/jbossall-client.jar
==> Found "server" in ./ext/jboss-client.jar
==> Found "server" in ./ext/nexaweb-common.jar
==> Found "server" in ./ext/soap.jar
==> Found "server" in ./lib/xlVO.jar
==> Found "server" in ./lib/XellerateClient.jar
[jboss@lin01 xlclient]$

If you need to see what files are being looked at, uncomment (remove the #) the following line in the script:
#echo "Looking in $i ..."

Running Task Scheduler from DOS

2008-10-10T12:44:00.006-04:00

Sometimes Scheduler does not run the tasks properly (older versions of OIM). So, here is a way to run the task scheduler from dos prompt:

===========================
Running
===========================
This tool runs on the Xellerate Server. The Xellerate Server directory, for example C:\oracle\xellerate, is denoted by ${xl.home} below.
First create a directory "RunSchedulerTask" and then copy these files (source code below)

"RunSchedulerTask.java"
"build.xml"
To run, simply open a command-line prompt, change directory to RunSchedulerTask, and run ant:
${xl.home}\ant\bin\ant.bat run -Dxl.home="${xl.home}" -Dargs="<classname> <username> <password> <task-file.properties>"

Where
classname is the full classname of the scheduler task to run
username is the Xellerate login (eg xelsysadm)
password is the login password (eg xelsysadm)
task-file.properties is the properties file containing the Scheduler Task attributes
Example
To run the AD Group Lookup reconciliation:
Create a Task attributes file "ADGroupLookupRecon.properties" and add the following lines:
Server=MyActiveDirectoryServerItResourceInstance

LookupCodeName=Lookup.ADReconliation.GroupLookup

==================================
Run Ant
==================================
${xl.home}\ant\bin\ant.bat run -Dxl.home="${xl.home}" -Dargs="com.thortech.xl.schedule.tasks.ADGroupLookupReconTask xelsysadm xelsysadm ADGroupLookupRecon.properties"

===========================
RunSchedulerTask.java
===========================

import Thor.API.Security.LoginHandler.LoginSession;
import Thor.API.Security.XLClientSecurityAssociation;
import Thor.API.tcUtilityFactory;
import com.thortech.util.logging.Logger;
import com.thortech.xl.client.dataobj.tcDataBaseClient;
import com.thortech.xl.scheduler.tasks.SchedulerBaseTask;
import com.thortech.xl.util.config.ConfigurationClient;
import java.io.*;
import java.util.Properties;

/*
* RunSchedulerTask.java
*
* Runs an Xellerate Scheduler task from the command-line.
*
*/
public class RunSchedulerTask
{
public static void help()
{
System.out.println("");
System.out.println("Runs an Xellerate Scheduler task " +
"from the command-line.");
System.out.println("");
System.out.println("Usage:");
System.out.println("RunSchedulerTask " +
"[classname] [username] [password] [task-attributes.properties]");
System.out.println(" classname : Full classname of " +
"the scheduler task class");
System.out.println(" username : Xellerate login name");
System.out.println(" password : Xellerate login password");
System.out.println(" task-attributes.properties: " +
"properties file path, contains key-value pairs of task attributes.");
}

/*
* arg[0] : recon class name. Class must derived from SchedulerBaseTask
* arg[1] : username (eg xelsysadm)
* arg[2] : password (eg xelsysadm)
* arg[3] : task attributes file (file contains key=value on each line)
*/
public static void main(String args[])
{
if (args.length < 3)
{
help();
return;
}

try
{
// Create a new instance of the scheduler task
SchedulerBaseTask task = (SchedulerBaseTask) Class.forName(
args[0]).newInstance();

// Login to Xellerate
Properties jndi = ConfigurationClient.getComplexSettingByPath(
"Discovery.CoreServer").getAllSettings();
tcUtilityFactory tcutilityfactory = new tcUtilityFactory(
jndi, args[1], args[2]);

task.setUtilityFactory(tcutilityfactory);

// Load the task scheduler attributes file
Properties attributes = new Properties();
if (args.length > 3)
{
attributes.load( new FileInputStream( new File(args[3]) ));
task.setTaskAttributeMap(attributes);
}

// Get a database handle
LoginSession loginsession = tcutilityfactory.getLoginSession();
XLClientSecurityAssociation.setGlobalLoginSession(loginsession);

tcDataBaseClient clientDB = new tcDataBaseClient();
String s = clientDB.getDatabaseName();

task.setDataBase(clientDB);

// Run
task.runAsThread();

// Print Success/Failure
boolean success = task.isSuccess();
if (!success)
{
System.out.println("TASK FAILED");

String message = task.getStatus();
System.out.println("Status: " + message);

Exception ex = task.getResult();
if (ex != null)
{
System.out.println("Exception: " + ex.getMessage());
}
}
}
catch (Exception ex)
{
ex.printStackTrace();
}

// Not sure why we need to manually exit, but without this java just hangs
System.exit(0);
}
}

==================================
Build.xml
==================================

<project name="IDM" default="compile" basedir=".">
<property name="xl.home" value="C:\xellerate9\xellerate"/>

<path id="classpath.server.xellerate">
<pathelement location="${xl.home}/lib/xlAdapterUtilities.jar"/>
<pathelement location="${xl.home}/lib/xlAPI.jar"/>
<pathelement location="${xl.home}/lib/xlAuthentication.jar"/>
<pathelement location="${xl.home}/lib/xlCrypto.jar"/>
<pathelement location="${xl.home}/lib/xlDataObjects.jar"/>
<pathelement location="${xl.home}/lib/xlDataObjectBeans.jar"/>
<pathelement location="${xl.home}/lib/xlScheduler.jar"/>
<pathelement location="${xl.home}/lib/xlLogger.jar"/>
<pathelement location="${xl.home}/lib/xlUtils.jar"/>
<pathelement location="${xl.home}/lib/xlVO.jar"/>
<pathelement location="${xl.home}/ext/log4j-1.2.8.jar"/>
</path>

<path id="classpath.client.xellerate">
<fileset dir="${xl.home}/lib">
<include name="**/*.jar"/>
</fileset>
<fileset dir="${xl.home}/ext">
<include name="**/*.jar"/>
</fileset>
<fileset dir="${xl.home}/ScheduleTask">
<include name="**/*.jar"/>
</fileset>
<fileset dir="${xl.home}/JavaTasks">
<include name="**/*.jar"/>
</fileset>
</path>

<target name="init">
<copy todir="config"><fileset dir="${xl.home}/config"/></copy>
</target>

<target name="compile">
<javac srcdir="." destdir="." debug="on">
<classpath>
<path refid="classpath.server.xellerate"/>
</classpath>
</javac>
</target>

<target name="run" depends="init,compile">
<java classname="RunSchedulerTask" fork="true">
<classpath>
<path location="."/>
<path refid="classpath.client.xellerate"/>
</classpath>

<sysproperty key="java.security.auth.login.config"
value="${xl.home}/config/auth.conf"/>
<sysproperty key="XL.RedirectSysOutErrToFile" value="false"/>
<arg line="${args}" />
</java>
</target>
</project>

source courtesy:http://zerointech.com/xellerate-idm-run-schedulertask.html

OIM Backdoor Queries

2008-10-03T16:15:00.004-04:00

1. Getting all information about Email Definition:
======================================================
select emd.emd_subject, emd.emd_name,emd.usr_key, emd.emd_body, emd.emd_from_type, emd.emd_type from emd emd where emd.emd_name='Email Definition Name'

2. Updating Resource Status to Revoked for a given resource:
==========================================================

update oiu set ost_key = (select ost_key from ost where obj_key in ( select obj_key from obj where obj_name like 'RESOURCENAME' ) and ost_status like 'Revoked') where ORC_KEY = 'Process Instance Key'

update orc set orc_status='X' where orc_key = 'Process Instance Key'

PeopleSoft Listener Issues

2008-10-03T15:48:00.004-04:00

Making PeopleSoft Connector URL work can be an issue sometimes.
So, here is the process you need to follow to make it work:

1. Create a folder C:\TEMPSFT

2. cd\TEMPSFT

3. In this folder copy your peopleSoftUserMgmt.war

4. Create another folder C:\TEMPSFT\META-INF

5. Under this folder C:\TEMPSFT\META-INF, create a file called application.xml

6. Put the following contents:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE application PUBLIC "-//Sun Microsystems, Inc.//DTD J2EE Application 1.2//EN" "http://java.sun.com/j2ee/dtds/application_1_2.dtd">
<application>
<display-name>PeopleSoft UserMgmt Listener</display-name>
<module>
<web>
<web-uri>peopleSoftUserMgmt.war</web-uri>
<context-root>/peopleSoftUserMgmt</context-root>
</web>
</module>
</application>

7. Create another file MANIFEST.MF with the following contents:
Manifest-Version: 1.0
Ant-Version: Apache Ant 1.5.3
Created-By: 1.4.2_17-b06 (Sun Microsystems Inc.)
Assembled-By: XIM Assembler
Assembled-At: 07/01/2008 21:10
Product-Version: 9.1.0
Build-Number: 9.1.0.1849.0

8. Go to C:\TEMPSFT folder and execute the following command:

jar -cvf peopleSoftUserMgmt.ear peopleSoftUserMgmt.war META-INF/

9. Now, deploy (copy) peopleSoftUserMgmt.ear file in your application server. Say for JBOSS:
C:\jboss4.0.3SP1\server\default\deploy

10. Restart your app server.

11. Now your application should be ready to recieve the PSFT xml:

Your url should be:

http://<hostname>:<port>/peopleSoftUserMgmt/do/peopleSoftAction

12. Go to your out of the box connector test folder now and try to change server url and test psft-xel-test.vbs

13. You should see a reconciliation event now in Design Console and trace.txt should show the contents of the xml posted to this listener.

14. Same steps can be applied to Employee Reconciliation.

Oracle Support on VMWare / Virtualized environment

2008-09-03T11:40:00.002-04:00

Oracle does not support Oracle Products installed on VMware as Oracle has not certified any of its products on VMware virtualized environments.

If the issue does not occur in a non-virtual deployment, you will be referred to work with VM Product Company.

For details, look on oracle metalink (https://metalink.oracle.com) for the following document:

Support Position for Oracle Products Running on VMWare Virtualized Environments

Doc ID: Note:249212.1 Type: ANNOUNCEMENT
Last Revision Date: 16-NOV-2007 Status: PUBLISHED

OIM 9.1 METADATA

2008-09-01T11:43:00.011-04:00

The following table lists the metadata of each table within OIM 9.1

PHYSICAL COLUMN NAME	METADATA
AAD_CREATE	Organizations-Groups. Creation Date
AAD_CREATEBY	Organizations-Groups. Created By
AAD_DATA_LEVEL	Organizations-Groups. System Level
AAD_DELETE	Organizations-Groups. Delete Permission
AAD_NOTE	Organizations-Groups. Note
AAD_ROWVER	Organizations-Groups. Row Version
AAD_UPDATE	Organizations-Groups. Update Date
AAD_UPDATEBY	Organizations-Groups. Updated By
AAD_WRITE	Organizations-Groups. Write Access
AAP_CREATE	Organizations. Field. Creation Date
AAP_CREATEBY	Organizations. Field. Created By
AAP_DATA_LEVEL	Organizations. Field. System Level
AAP_KEY	Organizations. Field. Key
AAP_NOTE	Organizations. Field. Note
AAP_ROWVER	Organizations. Field. Row Version
AAP_UPDATE	Organizations. Field. Update Date
AAP_UPDATEBY	Organizations. Field. Updated By
AAP_VALUE	Organizations. Field. Parameter Value
ACP_CREATE	Organizations-Resource Objects. Creation Date
ACP_CREATEBY	Organizations-Resource Objects. Created By
ACP_DATA_LEVEL	Organizations-Resource Objects. System Level
ACP_NOTE	Organizations-Resource Objects. Note
ACP_ROWVER	Organizations-Resource Objects. Row Version
ACP_SELF_SERVICABLE	Organizations-Resource Objects. Self Serviceable
ACP_UPDATE	Organizations-Resource Objects. Update Date
ACP_UPDATEBY	Organizations-Resource Objects. Updated By
ACTIVE_SDL_LABEL	Structure Utility. Structure Utility Version Label. Active Version Label
ACT_CREATE	Organizations. Creation Date
ACT_CREATEBY	Organizations. Created By
ACT_CUST_TYPE	Organizations. Type
ACT_DATA_LEVEL	Organizations. System Level
ACT_DISABLED	Organizations. Disabled
ACT_KEY	Organizations. Key
ACT_NAME	Organizations. Organization Name
ACT_NOTE	Organizations. Note
ACT_PARENT	Organizations. Parent Name
ACT_ROWVER	Organizations. Row Version
ACT_STATUS	Organizations. Status
ACT_UPDATE	Organizations. Update Date
ACT_UPDATEBY	Organizations. Updated By
ADJ_PARENT_KEY	Adapter Factory. Adapter Tasks. Parent Key
ADJ_CREATE	Adapter Factory. Adapter Tasks. Creation Date
ADJ_CREATEBY	Adapter Factory. Adapter Tasks. Created By
ADJ_DATA_LEVEL	Adapter Factory. Adapter Tasks. System Level
ADJ_METHOD	Adapter Factory. Adapter Tasks. Method
ADJ_NOTE	Adapter Factory. Adapter Tasks. Note
ADJ_ROWVER	Adapter Factory. Adapter Tasks. Row Version
ADJ_API_NAME	Adapter Factory. Adapter Tasks. API Name
ADJ_CONSTRUCTOR	Adapter Factory. Adapter Tasks. Constructor
ADJ_INST_NAME	Adapter Factory. Adapter Tasks. Instant Name
ADJ_JAR_FILE	Adapter Factory. Adapter Tasks. Jar File
ADJ_METHOD_DISPLAY	Adapter Factory. Adapter Tasks. Method Display
ADJ_PERSIST	Adapter Factory. Adapter Tasks. Persist
ADJ_STATIC	Adapter Factory. Adapter Tasks. static
ADJ_UPDATE	Adapter Factory. Adapter Tasks. Update Date
ADJ_UPDATEBY	Adapter Factory. Adapter Tasks. Updated By
ADP_DATA_LEVEL	Adapter Factory. System Level
ADP_NOTE	Adapter Factory. Note
ADPROWVER	Adapter Factory. Row Version
ADP_BUILD	Adapter Factory. Build
ADP_CLASS	Adapter Factory. Adapter class
ADP_CREATE	Adapter Factory. Creation Date
ADP_CREATEBY	Adapter Factory. Created By
ADP_DISABLED	Adapter Factory. Disabled
ADP_DISCRIPTION	Adapter Factory. Discription
ADP_KEY	Adapter Factory. Key
ADP_NAME	Adapter Factory. Name
ADP_STANDALONE	Adapter Factory. Standalone
ADP_STATUS	Adapter Factory. Status
ADP_STATUS_INFO	Adapter Factory. Status Info
ADP_TYPE	Adapter Factory. Type
ADP_UPDATE	Adapter Factory. Update Date
ADP_UPDATEBY	Adapter Factory. Updated By
ADT_CREATE	Adapter Factory. Adapter Task. Creation Date
ADT_CREATEBY	Adapter Factory. Adapter Task. Created By
ADT_DATA_LEVEL	Adapter Factory. Adapter Task. System Level
ADT_KEY	Adapter Factory. Adapter Task. Key
ADT_NOTE	Adapter Factory. Adapter Task. Note
ADT_ROWVER	Adapter Factory. Adapter Task. Row Version
ADT_UPDATE	Adapter Factory. Adapter Task. Update Date
ADT_UPDATEBY	Adapter Factory. Adapter Task. Updated By
ADT_NAME	Adapter Factory. Adapter Task. Name
ADT_PARENT_KEY	Adapter Factory. Adapter Task. Parent Key
ADT_SEQUENCE	Adapter Factory. Adapter Task. Sequence
ADT_TYPE	Adapter Factory. Adapter Task. Type
ADV_CREATE	Adapter Factory. Adapter Variables. Creation Date
ADV_CREATEBY	Adapter Factory. Adapter Variables. Created By
ADV_DATA_LEVEL	Adapter Factory. Adapter Variables. System Level
ADV_NOTE	Adapter Factory. Adapter Variables. Note
ADV_ROWVER	Adapter Factory. Adapter Variables. Row Version
ADV_UPDATE	Adapter Factory. Adapter Variables. Update Date
ADV_UPDATEBY	Adapter Factory. Adapter Variables. Updated By
ADV_DATA_TYPE	Adapter Factory. Adapter Variables. Type
ADV_DESC	Adapter Factory. Adapter Variables. Description
ADV_DISPLAY_VALUE	Adapter Factory. Adapter Variables. Display Value
ADV_FIELD_LENGTH	Adapter Factory. Adapter Variables. Field Length
ADV_FINAL	Adapter Factory. Adapter Variables. Final
ADV_KEY	Adapter Factory. Adapter Variables. Key
ADV_MAP_QUALIFIER	Adapter Factory. Adapter Variables. Map Qualifier
ADV_MAP_TO	Adapter Factory. Adapter Variables. Map To
ADV_MAP_VALUE	Adapter Factory. Adapter Variables. Map Value
ADV_NAME	Adapter Factory. Adapter Variables. Name
AOA_CREATE	Adapter Factory. Adapter Tasks. Open Adapter. Creation Date
AOA_CREATEBY	Adapter Factory. Adapter Tasks. Open Adapter. Created By
AOA_DATA_LEVEL	Adapter Factory. Adapter Tasks. Open Adapter. System Level
AOA_NOTE	Adapter Factory. Adapter Tasks. Open Adapter. Note
AOA_ROWVER	Adapter Factory. Adapter Tasks. Open Adapter. Row Version
AOA_UPDATE	Adapter Factory. Adapter Tasks. Open Adapter. Update Date
AOA_UPDATEBY	Adapter Factory. Adapter Tasks. Open Adapter. Updated By
AOA_FILE	Adapter Factory. Adapter Tasks. Open Adapter. File
AOA_FILE_NAME	Adapter Factory. Adapter Tasks. Open Adapter. File Name
AOA_KEY	Adapter Factory. Adapter Tasks. Open Adapter. Key
ASSIGNEDTOTYPE	Process Instance. Task Information. Assigned To Type
ASSIGNEE_FIRST_NAME	Process Instance. Task Information. Assignee First Name
ASSIGNEE_LAST_NAME	Process Instance. Task Information. Assignee Last Name
ASSIGNEE_USER_KEY	Process Instance. Task Information. Assignee User Key
ASSIGNEE_USER_LOGIN	Process Instance. Task Information. Assignee User ID
Acs_default	Organizations- IT Resource. Default
Adj_key	Adapter Factory. Adapter Tasks. Key
CHILD_SDK_NAME	Structure Utility. Child Tables. Child Table
CHILD_SVR	IT Resources. Remote Manager Name
DEP_CREATE	Process Definition. Tasks. Task Dependency. Creation Date
DEP_CREATEBY	Process Definition. Tasks. Task Dependency. Created By
DEP_DATA_LEVEL	Process Definition. Tasks. Task Dependency. System Level
DEP_KEY	Process Definition. Tasks. Task Dependency. Key
DEP_NOTE	Process Definition. Tasks. Task Dependency. Note
DEP_ROWVER	Process Definition. Tasks. Task Dependency. Row Version
DEP_UPDATE	Process Definition. Tasks. Task Dependency. Update Date
DEP_UPDATEBY	Process Definition. Tasks. Task Dependency. Updated By
DOB_CREATE	Data Object Manager. Creation Date
DOB_CREATEBY	Data Object Manager. Created By
DOB_DATA_LEVEL	Data Object Manager. System Level
DOB_KEY	Data Object Manager. key
DOB_NAME	Data Object Manager. Data Object
DOB_NOTE	Data Object Manager. Note
DOB_ROWVER	Data Object Manager. Row Version
DOB_UPDATE	Data Object Manager. Update Date
DOB_UPDATEBY	Data Object Manager. Updated By
DVT_CREATE	Data Object Manager-Event Handler Manager. Creation Date
DVT_CREATEBY	Data Object Manager-Event Handler Manager. Created By
DVT_CRITERIA	Data Object Manager-Event handler Manager. Criteria
DVT_DATA_LEVEL	Data Object Manager-Event Handler Manager. System Level
DVT_MAP_STATUS	Data Object Manager-Event Handler Manager. Mapping Status
DVT_NOTE	Data Object Manager-Event Handler Manager. Note
DVT_POST_DELETE_SEQUENCE	Data Object Manager-Event Handler Manager. Post-Delete Seq
DVT_POST_INSERT_SEQUENCE	Data Object Manager-Event Handler Manager. Post-Insert Seq
DVT_POST_UPDATE_SEQUENCE	Data Object Manager-Event Handler Manager. Post-Update Seq
DVT_PRE_DELETE_SEQUENCE	Data Object Manager-Event Handler Manager. Pre-Delete Seq
DVT_PRE_INSERT_SEQUENCE	Data Object Manager-Event Handler Manager. Pre-Insert Seq
DVT_PRE_UPDATE_SEQUENCE	Data Object Manager-Event Handler Manager. Pre-Update Seq
DVT_ROWVER	Data Object Manager-Event Handler Manager. Row Version
DVT_UPDATE	Data Object Manager-Event Handler Manager. Update Date
DVT_UPDATEBY	Data Object Manager-Event Handler Manager. Updated By
EMD_BODY	Email Definition. Body
EMD_CREATE	Email Definition. Creation Date
EMD_CREATEBY	Email Definition. Created By
EMD_DATA_LEVEL	Email Definition. System Level
EMD_FROM_TYPE	Email Definition. From Type
EMD_KEY	Email Definition. Key
EMD_NAME	Email Definition. Name
EMD_NOTE	Email Definition. Note
EMD_ROWVER	Email Definition. Row Version
EMD_STATUS	Email Definition. Status
EMD_SUBJECT	Email Definition. Subject
EMD_TYPE	Email Definition. Type
EMD_UPDATE	Email Definition. Update Date
EMD_UPDATEBY	Email Definition. Updated By
ERR_ACTION	Error Message Definition. Action
ERR_CODE	Error Message Definition. Code
ERR_COUNT	Error Message Definition. Count
ERR_CREATE	Error Message Definition. Creation Date
ERR_CREATEBY	Error Message Definition. Created By
ERR_DATA_LEVEL	Error Message Definition. System Level
ERR_DESC	Error Message Definition. Description
ERR_HELP_URL	Error Message Definition. Help URL
ERR_KEY	Error Message Definition. Key
ERR_LAST_OCCURANCE	Error Message Definition. Last Occurrence
ERR_NOTE	Error Message Definition. Note
ERR_REMEDY	Error Message Definition. Remedy
ERR_ROWVER	Error Message Definition. Row Version
ERR_SEVERITY	Error Message Definition. Severity
ERR_UPDATE	Error Message Definition. Update Date
ERR_UPDATEBY	Error Message Definition. Updated By
EVT_CREATE	Event Handler Manager. Creation Date
EVT_CREATEBY	Event Handler Manager. Created By
EVT_DATA_LEVEL	Event Handler Manager. System Level
EVT_KEY	Event Handler Manager. Key
EVT_NAME	Event Handler Manager. Event Handler Name
EVT_NOTE	Event Handler Manager. Note
EVT_PACKAGE	Event Handler Manager. Package
EVT_POST_DELETE	Event Handler Manager. Post-Delete
EVT_POST_INSERT	Event Handler Manager. Post-Insert
EVT_POST_UPDATE	Event Handler Manager. Post-Update
EVT_PRE_DELETE	Event Handler Manager. Pre-Delete
EVT_PRE_INSERT	Event Handler Manager. Pre-Insert
EVT_PRE_UPDATE	Event Handler Manager. Pre-Update
EVT_ROWVER	Event Handler Manager. Row Version
EVT_UPDATE	Event Handler Manager. Update Date
EVT_UPDATEBY	Event Handler Manager. Updated By
FUG_CREATE	Structure Utility. Administrators. Creation Date
FUG_CREATEBY	Structure Utility. Administrators. Created By
FUG_DATA_LEVEL	Structure Utility. Administrators. System Level
FUG_DELETE	Structure Utility. Administrators. Delete
FUG_NOTE	Structure Utility. Administrators. Note
FUG_ROWVER	Structure Utility. Administrators. Row Version
FUG_UPDATE	Structure Utility. Administrators. Update Date
FUG_UPDATEBY	Structure Utility. Administrators. Updated By
FUG_WRITE	Structure Utility. Administrators. Write
GPG_CREATE	Groups-User Sub Groups. Creation Date
GPG_CREATEBY	Groups-User Sub Groups. Created By
GPG_DATA_LEVEL	Groups-User Sub Groups. System Level
GPG_NOTE	Groups-User Sub Groups. Note
GPG_PRIORITY	Groups-User Sub Groups. Priority
GPG_ROWVER	Groups-User Sub Groups. Row Version
GPG_UPDATE	Groups-User Sub Groups. Update Date
GPG_UPDATEBY	Groups-User Sub Groups. Updated By
GPP_CREATE	Groups-Group Ownership. Creation Date
GPP_CREATEBY	Groups-Group Ownership. Created By
GPP_DATA_LEVEL	Groups-Group Ownership. System Level
GPP_DELETE	Groups-Group Ownership. Delete
GPP_NOTE	Groups-Group Ownership. Note
GPP_ROWVER	Groups-Group Ownership. Row Version
GPP_UPDATE	Groups-Group Ownership. Update Date
GPP_UPDATEBY	Groups-Group Ownership. Updated By
GPP_WRITE	Groups-Group Ownership. Write
GPY_NOTE	System Configuration-Groups. Note
GPY_ROWVER	System Configuration-Groups. Row Version
GPY_CREATE	System Configuration-Groups. Creation Date
GPY_CREATEBY	System Configuration-Groups. Created By
GPY_DATA_LEVEL	System Configuration-Groups. System Level
GPY_UPDATE	System Configuration-Groups. Update Date
GPY_UPDATEBY	System Configuration-Groups. Updated By
LATEST_SDL_LABEL	Structure Utility. Structure Utility Version Label. Latest Version Label
LKU_CREATE	Lookup Definition. Creation Date
LKU_CREATEBY	Lookup Definition. Created By
LKU_DATA_LEVEL	Lookup Definition. System Level
LKU_FIELD	Lookup Definition. Field
LKU_KEY	Lookup Definition. Key
LKU_LOOKUP_KEY	Lookup Definition. Lookup Key
LKU_NOTE	Lookup Definition. Note
LKU_REQUIRED	Lookup Definition. Required
LKU_ROWVER	Lookup Definition. Row Version
LKU_TYPE	Lookup Definition. Type
LKU_TYPE_GROUP	Lookup Definition. Group
LKU_TYPE_STRING_KEY	Lookup Definition. Code
LKU_UPDATE	Lookup Definition. Update Date
LKU_UPDATEBY	Lookup Definition. Updated By
LKV_COUNTRY	Lookup Definition. Lookup Code Information. Country
LKV_CREATE	Lookup Definition. Lookup Code Information. Creation Date
LKV_CREATEBY	Lookup Definition. Lookup Code Information. Created By
LKV_DATA_LEVEL	Lookup Definition. Lookup Code Information. System Level
LKV_DECODED	Lookup Definition. Lookup Code Information. Decode
LKV_DISABLED	Lookup Definition. Lookup Code Information. Disabled
LKV_ENCODED	Lookup Definition. Lookup Code Information. Code Key
LKV_KEY	Lookup Definition. Lookup Code Information. Key
LKV_LANGUAGE	Lookup Definition. Lookup Code Information. Language
LKV_NOTE	Lookup Definition. Lookup Code Information. Note
LKV_ROWVER	Lookup Definition. Lookup Code Information. Row Version
LKV_UPDATE	Lookup Definition. Lookup Code Information. Update Date
LKV_UPDATEBY	Lookup Definition. Lookup Code Information. Updated By
LKV_VARIANT	Lookup Definition. Lookup Code Information. Variant
LOC_ADDRESS_	Locations. Street/P. O. Box
LOC_ADDRESS_	Locations. Address
LOC_CITY	Locations. City
LOC_COUNTRY	Locations. Country
LOC_CREATE	Locations. Creation Date
LOC_CREATEBY	Locations. Created By
LOC_DATA_LEVEL	Locations. System Level
LOC_INTL_STATE	Locations. Province
LOC_KEY	Locations. Key
LOC_NAME	Locations. Location Name
LOC_NOTE	Locations. Note
LOC_POSTAL_CODE	Locations. Postal Code
LOC_REGION	Locations. Region
LOC_ROWVER	Locations. Row Version
LOC_STATE	Locations. State
LOC_UPDATE	Locations. Update Date
LOC_UPDATEBY	Locations. Updated By
LOC_ZIP	Locations. Zip
LOC_ZIP	Locations. Zip + Code
MAV_CREATE	Process Definition. Tasks. Integration. Adapter Variables. Creation Date
MAV_CREATEBY	Process Definition. Tasks. Integration. Adapter Variables. Created By
MAV_DATA_LEVEL	Process Definition. Tasks. Integration. Adapter Variables. System Level
MAV_DISPLAY_VALUE	Process Definition. Tasks. Integration. Adapter Variables. Displayed Value
MAV_FIELD_LENGTH	Process Definition. Tasks. Integration. Adapter Variables. Field Length
MAV_MAP_QUALIFIER	Process Definition. Tasks. Integration. Adapter Variables. Qualifier
MAV_MAP_TO	Process Definition. Tasks. Integration. Adapter Variables. Map to
MAV_MAP_VALUE	Process Definition. Tasks. Integration. Adapter Variables. Mapped Value
MAV_NOTE	Process Definition. Tasks. Integration. Adapter Variables. Note
MAV_ROWVER	Process Definition. Tasks. Integration. Adapter Variables. Row Version
MAV_UPDATE	Process Definition. Tasks. Integration. Adapter Variables. Update Date
MAV_UPDATEBY	Process Definition. Tasks. Integration. Adapter Variables. Updated By
MEMBERPRIORITY	Groups. Member Priority
MIL_APP_EFFECT	Process Definition. Tasks. Task Effect
MIL_ASSIGN_TO_MANAGER	Process Definition. Tasks. Assign To User Manager
MIL_CANCEL_WHILE_PENDING	Process Definition. Tasks. Allow Cancellation While Pending
MIL_COMP_ON_REC	Process Definition. Tasks. Complete on Recovery
MIL_CONDITIONAL	Process Definition. Tasks. Conditional
MIL_CONSTANT	Process Definition. Tasks. Constant Duration
MIL_CREATE	Process Definition. Tasks. Creation Date
MIL_CREATE BY	Process Definition. Tasks. Created By
MIL_CREATE_MULTIPLE	Process Definition. Tasks. Allow Multiple Instances
MIL_DATALABEL	Process Definition. Tasks. Milestone Datalabel
MIL_DATA_LEVEL	Process Definition. Tasks. System Level
MIL_DAY	Process Definition. Tasks. Days
MIL_DELETE_FLAG	Process Definition. Tasks. Milestone Delete Flag
MIL_DEPENDENCY	Process Definition. Tasks. Milestone Dependency
MIL_DESCRIPTION	Process Definition. Tasks. Task Description
MIL_DISABLE_MANUAL_INSERT	Process Definition. Tasks. Disable Manual Insert
MIL_HOUR	Process Definition. Tasks. Hours
MIL_KEY	Process Definition. Tasks. Key
MIL_MAP_STATUS	Process Definition. Tasks. Milestone Mapping Status
MIL_MINUTE	Process Definition. Tasks. Minutes
MIL_NAME	Process Definition. Tasks. Task Name
MIL_NOTE	Process Definition. Tasks. Note
MIL_REQUIRED_COMPLETE	Process Definition. Tasks. Required For Completion
MIL_ROWVER	Process Definition. Tasks. Row Version
MIL_SEC	Process Definition. Tasks. Second Duration
MIL_SEQUENCE	Process Definition. Tasks. Milestone Sequence
MIL_SEQ_INTERVAL	Process Definition. Tasks. Milestone Sequence Interval
MIL_UPDATE	Process Definition. Tasks. Update Date
MIL_UPDATEBY	Process Definition. Tasks. Updated By
MSG_CREATE	Status-Groups-Milestone-Process. Creation Date
MSG_CREATEBY	Status-Groups-Milestone-Process. Created By
MSG_DATA_LEVEL	Status-Groups-Milestone-Process. System Level
MSG_NOTE	Status-Groups-Milestones-Process. Note
MSG_ROWVER	Status-Groups-Milestone-Process. Row Version
MSG_UPDATE	Status-Groups-Milestone-Process. Update Date
MSG_UPDATEBY	Status-Groups-Milestone-Process. Updated By
MST_CREATE	Status-Process Definition. Task-Object. Object Status. Creation Date
MST_CREATEBY	Status-Process Definition. Task-Object. Object Status. Created By
MST_DATA_LEVEL	Status-Process Definition. Task-Object. Object Status. System Level
MST_NOTE	Status-Process Definition. Task-Object. Object Status. Note
MST_ROWVER	Status-Process Definition. Task-Object. Object Status. Row Version
MST_UPDATEBY	Status-Process Definition. Task-Object. Object Status. Updated By
MST_UPDATE	Status-Process Definition. Task-Object. Object Status. Update Date
OBA_CREATE	Objects-Ordering Permissions. Creation Date
OBA_CREATEBY	Objects-Ordering Permissions. Created By
OBA_DATA_LEVEL	Objects-Ordering Permissions. System Level
OBA_NOTE	Objects-Ordering Permissions. Note
OBA_PRIORITY	Objects-Ordering Permissions. Priority
OBA_ROWVER	Objects-Ordering Permissions. Row Version
OBA_UPDATE	Objects-Ordering Permissions. Update Date
OBA_UPDATEBY	Objects-Ordering Permissions. Updated By
OBD_CHILD_KEY	Objects. Object Dependencies. Child Key
OBD_CREATE	Objects. Object Dependencies. Creation Date
OBD_CREATEBY	Objects. Object Dependencies. Created By
OBD_DATA_LEVEL	Objects. Object Dependencies. System Level
OBD_NOTE	Objects. Object Dependencies. Note
OBD_PARENT_KEY	Objects. Object Dependencies. Parent Key
OBD_ROWVER	Objects. Object Dependencies. Row Version
OBD_UPDATE	Objects. Object Dependencies. Update Date
OBD_UPDATEBY	Objects. Object Dependencies. Updated By
OBI_CREATE	Object Instance. Creation Date
OBI_CREATEBY	Object Instance. Created By
OBI_DATA_LEVEL	Object Instance. System Level
OBI_DEP_REQUIRED	Object Instance. Dependent Required
OBI_KEY	Object Instance. Key
OBI_NOTE	Object Instance. Note
OBI_ROWVER	Object Instance. Row Version
OBI_STATUS	Object Instance. Status
OBI_UPDATE	Object Instance. Update Date
OBI_UPDATEBY	Object Instance. Updated By
OBJECTFORMCOUNT	Object Instance. Object Form Entries
OBJECTFORMINSTANCEKEY	Objects. Object Instance Key In Form
OBJECTFORMKEY	Objects. Object Form Key
OBJECTFORMNAME	Objects. Object Form Name
OBJ_ALLOWALL	Objects. Allow All
OBJ_ALLOW_MULTIPLE	Objects. Allow Multiple
OBJ_AUTOLAUNCH	Objects. Auto Launch
OBJ_AUTOSAVE	Objects. Auto Save
OBJ_AUTO_PREPOP	Objects. Auto Prepopulate
OBJ_CREATE	Objects. Creation Date
OBJ_CREATEBY	Objects. Created By
OBJ_DATA_LEVEL	Objects. System Level
OBJ_KEY	Objects. Key
OBJ_NAME	Objects. Name
OBJ_NOTE	Objects. Note
OBJ_OBJADMINONLY	Objects. Admin Only
OBJ_ORDER_FOR	Objects. Order For
OBJ_ROWVER	Objects. Row Version
OBJ_SELF_REQUEST_ALLOWED	Objects. Self Request Allowed
OBJ_TYPE	Objects. Type
OBJ_UPDATE	Objects. Update Date
OBJ_UPDATEBY	Objects. Updated By
ODF_CREATE	Process Definition. Data Flow. Creation Date
ODF_CREATEBY	Process Definition. Data Flow. Created By
ODF_DATA_LEVEL	Process Definition. Data Flow. System Level
ODF_NOTE	Process Definition. Data Flow. Note
ODF_ROWVER	Process Definition. Data Flow. Row Version
ODF_UPDATEBY	Process Definition. Data Flow. Updated By
ODF_KEY	Process Definition. Data Flow. Key
ODF_OBJ_SDC_KEY	Process Definition. Data Flow. Object. Form Field
ODF_TOS_SDC_KEY	Process Definition. Data Flow. Process. Form Field
ODF_UPDATE	Process Definition. Data Flow. Update Date
ODV_CREATE	Objects-Events. Creation Date
ODV_CREATEBY	Objects-Events. Created By
ODV_DATA_LEVEL	Objects-Events. System Level
ODV_NOTE	Objects-Events. Note
ODV_ROWVER	Objects-Events. Row Version
ODV_UPDATE	Objects-Events. Update Date
ODV_UPDATEBY	Objects-Events. Updated By
OIO_CREATE	Organization-Object Instance-Process Instance. Creation Date
OIO_CREATEBY	Organization-Object Instance-Process Instance. Created By
OIO_DATA_LEVEL	Organization-Object Instance-Process Instance. System Level
OIO_KEY	Organization-Object Instance-Process Instance. Key
OIO_NOTE	Organization-Object Instance-Process Instance. Note
OIO_ROWVER	Organization-Object Instance-Process Instance. Row Version
OIO_SELECTED	Requests. Organization-Object Instance-Process Instance. Selected Instance
OIO_UPDATE	Organization-Object Instance-Process Instance. Update Date
OIO_UPDATEBY	Organization-Object Instance-Process Instance. Updated By
OIU_CREATE	Users-Object Instance For User. Creation Date
OIU_CREATEBY	Users-Object Instance For User. Created By
OIU_DATA_LEVEL	Users-Object Instance For User. System Level
OIU_KEY	Users-Object Instance For User. Key
OIU_NOTE	Users-Object Instance For User. Note
OIU_ROWVER	Users-Object Instance For User. Row Version
OIU_SELECTED	Requests. Users-Object Instance For User. Selected Instance
OIU_SERVICEACCOUNT	Users-Object Instance For User. Service Account Flag
OIU_UPDATE	Users-Object Instance For User. Update Date
OIU_UPDATEBY	Users-Object Instance For User. Updated By
OOD_CREATE	Organizations. Object Instance For Organization. Dependency. Creation Date
OOD_CREATEBY	Organizations. Object Instance For Organization. Dependency. Created By
OOD_DATA_LEVEL	Organizations. Object Instance For Organization. Dependency. System Level
OOD_NOTE	Organizations. Object Instance For Organization. Dependency. Note
OOD_ROWVER	Organizations. Object Instance For Organization. Dependency. Row Version
OOD_UPDATE	Organizations. Object Instance For Organization. Dependency. Update Date
OOD_UPDATEBY	Organizations. Object Instance For Organization. Dependency. Updated By
ORC_ASSIGNED_TO	Process Instance. Assigned To
ORC_CREATE	Process Instance. Create
ORC_CREATEBY	Process Instance. Created By
ORC_DATA_LEVEL	Process Instance. System Level
ORC_DEPENDS	Process Instance. Depends
ORC_KEY	Process Instance. Key
ORC_NOTE	Process Instance. Note
ORC_ORDERBY_POLICY	Process Instance. Order By Policy
ORC_PACKAGE_INSTANCE_KEY	Process Instance. Package Instance Key
ORC_PARENT_KEY	Process Instance. Parent Key
ORC_REFERENCEKEY	Process Instance. Reference Key
ORC_REQUIRED_COMPLETE	Process Instance. Required Complete
ORC_ROWVER	Process Instance. Row Version
ORC_SERVICEORDER	Process Instance. Service Order
ORC_STATUS	Process Instance. Status
ORC_SUBORDER	Process Instance. Suborder
ORC_SUBTOSKEY	Process Instance. Subprocess Key
ORC_SUPPCODE	Process Instance. Supplementary Code
ORC_TARGET	Process Instance. Target
ORC_TOS_INSTANCE_KEY	Process Instance. Descriptive Data
ORC_UPDATE	Process Instance. Update Date
ORC_UPDATEBY	Process Instance. Updated By
ORD_ASSIGNED_TO	Orders. Assigned To
ORD_BATCH	Orders. Batch
ORD_CANCEL_CODE	Orders. Cancel Code
ORD_CANCEL_DATE	Orders. Cancel Date
ORD_CARRIER_ORDERNO	Orders. Carrier Order No
ORD_CREATE	Orders. Creation Date
ORD_CREATEBY	Orders. Created By
ORD_CUST_ISSUE	Orders. Cust Issue
ORD_CUST_ORDERNO	Orders. Order No
ORD_CUST_REQUEST	Orders. Date Requested
ORD_DATA_LEVEL	Orders. System Level
ORD_EXPEDITE	Orders. Expedite
ORD_INPUT	Orders. Input
ORD_INPUTBY	Orders. Input By
ORD_KEY	Orders. Key
ORD_LATECODE	Orders. Late Code
ORD_NOTE	Orders. Note
ORD_ORDERID	Orders. Order ID
ORD_PROJECT	Orders. Project
ORD_RECEIVE	Orders. Date Received
ORD_RELORDNO	Orders. Relord No
ORD_ROWVER	Orders. Row Version
ORD_SALES_CHANNEL	Orders. Sales Channel
ORD_SERVORD	Orders. Serve Order
ORD_STATUS	Orders. Status
ORD_SUBORD	Orders. Sub Order
ORD_TRACK	Orders. Track
ORD_TYPE	Orders. Type
ORD_UPDATE	Orders. Update Date
ORD_UPDATEBY	Orders. Updated By
ORF_CREATE	Objects. Reconciliation Fields. Creation Date
ORF_CREATEBY	Objects. Reconciliation Fields. Created By
ORF_DATA_LEVEL	Objects. Reconciliation Fields. System Level
ORF_FIELDNAME	Objects. Reconciliation Fields. Name
ORF_KEY	Objects. Reconciliation Fields. Key
ORF_NOTE	Objects. Reconciliation Fields. Note
ORF_NULLABLE	Objects. Reconciliation Fields. Nullable
ORF_ROWVER	Objects. Reconciliation Fields. Row Version
ORF_UPDATE	Objects. Reconciliation Fields. Update Date
ORF_UPDATEBY	Objects. Reconciliation Fields. Updated By
ORR_RULE	Objects. Reconciliation Action Rules. Rules
OSI_ASSIGNED_DATE	Process Instance. Task Information. Assigned Date
OSI_ASSIGNED_TO	Process Instance. Task Information. Assigned To
OSI_ASSIGNED_TO_UGP_KEY	Process Instance. Task Information. Assigned To Group Key
OSI_ASSIGNED_TO_USR_KEY	Process Instance. Task Information. Assigned To User Key
OSI_ASSIGN_TYPE	Process Instance. Task Information. Assign Type
OSI_CREATE	Process Instance. Task Information. Creation Date
OSI_CREATEBY	Process Instance. Task Information. Created By
OSI_DATA_LEVEL	Process Instance. Task Information. System Level
OSI_LOG_KEY	Process Instance. Task Information. Log Key
OSI_NOTE	Process Instance. Task Information. Note
OSI_RECOVERY_FOR	Process Instance. Task Information. Recovery Task
OSI_RETRY_FOR	Process Instance. Task Information. Retry Task
OSI_ROWVER	Process Instance. Task Information. Row Version
OSI_UPDATE	Process Instance. Task Information. Update Date
OSI_UPDATEBY	Process Instance. Task Information. Updated By
OST_CREATE	Objects. Object Status. Creation Date
OST_CREATEBY	Objects. Object Status. Created By
OST_DATA_LEVEL	Objects. Object Status. System Level
OST_KEY	Objects. Object Status. Key
OST_LAUNCH_DEPENDENT	Objects. Object Status. Launch Dependent
OST_NOTE	Objects. Object Status. Note
OST_REMOVED	Objects. Object Status. Removed
OST_ROWVER	Objects. Object Status. Row Version
OST_STATUS	Objects. Object Status. Status
OST_UPDATE	Objects. Object Status. Update Date
OST_UPDATEBY	Objects. Object Status. Updated By
OUD_CREATE	Users. Object Instance For User. Dependency. Creation Date
OUD_CREATEBY	Users. Object Instance For User. Dependency. Created By
OUD_DATA_LEVEL	Users. Object Instance For User. Dependency. System Level
OUD_NOTE	Users. Object Instance For User. Dependency. Note
OUD_ROWVER	Users. Object Instance For User. Dependency. Row Version
OUD_UPDATE	Users. Object Instance For User. Dependency. Update Date
OUD_UPDATEBY	Users. Object Instance For User. Dependency. Updated By
OUG_CREATE	Objects-Groups. Creation Date
OUG_CREATEBY	Objects-Groups. Created By
OUG_DATA_LEVEL	Objects-Groups. System Level
OUG_DELETE	Objects-Groups. Delete
OUG_NOTE	Objects-Groups. Note
OUG_ROWVER	Objects-Groups. Row Version
OUG_UPDATE	Objects-Groups. Update Date
OUG_UPDATEBY	Objects-Groups. Updated By
OUG_WRITE	Objects-Groups. Write
PARENT_KEY	Organizations. Parent Key
PARENT_SDK_NAME	Structure Utility. Child Tables. Parent Table
PCQ_ANSWER	Users. Password Challenge Question. Answer
PCQ_CREATE	Users. Password Challenge Question. Creation Date
PCQ_CREATEBY	Users. Password Challenge Question. Created By
PCQ_DATA_LEVEL	Users. Password Challenge Question. System Level
PCQ_KEY	Users. Password Challenge Question. Key
PCQ_NOTE	Users. Password Challenge Question. Note
PCQ_QUESTION	Users. Password Challenge Question. Question
PCQ_ROWVER	Users. Password Challenge Question. Row Version
PCQ_UPDATE	Users. Password Challenge Question. Update Date
PCQ_UPDATEBY	Users. Password Challenge Question. Updated By
PDF_CREATE	Process Integration. Sub Processes. Set Data Flow. Creation Date
PDF_CREATEBY	Process Integration. Sub Processes. Set Data Flow. Created By
PDF_DATA_LEVEL	Process Integration. Sub Processes. Set Data Flow. System Level
PDF_KEY	Process Integration. Sub Processes. Set Data Flow. Key
PDF_NOTE	Process Integration. Sub Processes. Set Data Flow. Note
PDF_ROWVER	Process Integration. Sub Processes. Set Data Flow. Row Version
PDF_SINK_DOB	Process Integration. Sub Processes. Set Data Flow. Sink Process Data Object
PDF_SINK_FIELD	Process Integration. Sub Processes. Set Data Flow. Target Process Field
PDF_SINK_HIERARCHY	Process Integration. Sub Processes. Set Data Flow. Target Process Hierarchy String
PDF_SINK_PKG_KEY	Process Integration. Sub Processes. Set Data Flow. Target Process Key
PDF_SOURCE_FIELD	Process Integration. Sub Processes. Set Data Flow. Source Process Field
PDF_SOURCE_HIERARCHY	Process Integration. Sub Processes. Set Data Flow. Source Process Hierarchy String
PDF_SOURCE_PKG_KEY	Process Integration. Sub Processes. Set Data Flow. Source Process Key
PDF_SOURCE_TABLE	Process Integration. Sub Processes. Set Data Flow. Source Process Table
PDF_UPDATE	Process Integration. Sub Processes. Set Data Flow. Update Date
PDF_UPDATEBY	Process Integration. Sub Processes. Set Data Flow. Updated By
PGP_CREATE	Groups-Request Permissions. Create Date
PGP_CREATEBY	Groups-Request Permissions. Created By
PGP_DATA_LEVEL	Groups-Request Permissions. System Level
PGP_NOTE	Groups-Request Permissions. Note
PGP_ROWVER	Groups-Request Permissions. Row Version
PGP_UPDATE	Groups-Request Permissions. Update Date
PGP_UPDATEBY	Groups-Request Permissions. Updated By
PHO_ADDRESS	Phones. Number/Address
PHO_COUNTRY_CODE	Phones. Country Code
PHO_CREATE	Phones. Creation Date
PHO_CREATEBY	Phones. Created By
PHO_DATASET_ATTRIBUTE	Phones. Dataset Attribute
PHO_DATA_LEVEL	Phones. System Level
PHO_DESCRIPTION	Phones. Description
PHO_EXT	Phones. Extension
PHO_FREQUENCY	Phones. Frequency
PHO_JOB	Phones. Job
PHO_KEY	Phones. Key
PHO_LABEL	Phones. Label
PHO_NOTE	Phones. Note
PHO_ORIGINATOR	Phones. Originator
PHO_PASSWORD	Phones. Password
PHO_PIN	Phones. PIN
PHO_RECEIVE_FILE	Phones. Receive File
PHO_ROWVER	Phones. Row Version
PHO_TYPE	Phones. Type
PHO_UPDATE	Phones. Update Date
PHO_UPDATEBY	Phones. Updated By
PHO_USERNAME	Phones. Username
PKD_CREATE	Process Integration. Sub Processes. Depends On. Creation Date
PKD_CREATEBY	Process Integration. Sub Processes. Depends On. Created By
PKD_DATA_LEVEL	Process Integration. Sub Processes. Depends On. System Level
PKD_KEY	Process Integration. Sub Processes. Depends On. Key
PKD_NOTE	Process Integration. Sub Processes. Depends On. Note
PKD_PREDECESSOR_PKH_KEY	Process Integration. Sub Processes. Depends On. Parent of Process Hierarchy Key
PKD_ROWVER	Process Integration. Sub Processes. Depends On. Row Version
PKD_UPDATE	Process Integration. Sub Processes. Depends On. Update Date
PKD_UPDATEBY	Process Integration. Sub Processes. Depends On. Updated By
PKG_CREATE	Process Definition. Creation Date
PKG_CREATEBY	Process Definition. Created By
PKG_DATA_LEVEL	Process Definition. System Level
PKG_DESCRIPTION	Process Definition. Process Description
PKG_KEY	Process Definition. Key
PKG_NAME	Process Definition. Name
PKG_NOTE	Process Definition. Note
PKG_OBJ_DEFAULT	Process Definition. Default Process
PKG_PROMO	Process Definition. Process Promo
PKG_ROWVER	Process Definition. Row Version
PKG_SYSTEM	Process Definition. System Process
PKG_TOS_INSTANCE_SRC_FIELD	Process Definition. Pkg Tos Instance Source Field
PKG_TOS_INSTANCE_SRC_HIERARCHY	Process Definition. Pkg Tos Instance Source Hierarchy
PKG_TYPE	Process Definition. Type
PKG_UPDATE	Process Definition. Update Date
PKG_UPDATEBY	Process Definition. Updated By
PKH_CHILD_PKG_KEY	Process Integration. Child Process Key
PKH_CONDITIONAL	Process Integration. Sub Processes. Conditional
PKH_CREATE	Process Integration. Sub Processes. Creation Date
PKH_CREATEBY	Process Integration. Sub Processes. Created By
PKH_DATA_LEVEL	Process Integration. Sub Processes. System Level
PKH_KEY	Process Integration. Key
PKH_NOTE	Process Integration. Sub Processes. Note
PKH_REQUIRED_COMPLETE	Process Integration. Sub Processes. Required Complete
PKH_ROWVER	Process Integration. Sub Processes. Row Version
PKH_SEQUENCE	Process Integration. Sub Processes. Sequence
PKH_UPDATE	Process Integration. Sub Processes. Update Date
PKH_UPDATEBY	Process Integration. Sub Processes. Updated By
POF FIELD_VALUE	Access Policy. Policy Field Definition. Field Value
POF_CREATE	Access Policy. Policy Field Definition. Creation Date
POF_CREATEBY	Access Policy. Policy Field Definition. Created By
POF_KEY	Access Policy. Policy Field Definition. Key
POF_NOTE	Access Policy. Policy Field Definition. Note
POF_ROWVER	Access Policy. Policy Field Definition. Row Version
POF_DATA_LEVEL	Access Policy. Policy Field Definition. System Level
POF_FIELD_NAME	Access Policy. Policy Field Definition. Field Name
POF_UPDATE	Access Policy. Policy Field Definition. Update Date
POF_UPDATEBY	Access Policy. Policy Field Definition. Updated By
POG_CREATE	Access Policy-User Groups. Creation Date
POG_CREATEBY	Access Policy-User Groups. Created By
POG_DATA_LEVEL	Access Policy-User Groups. System Level
POG_NOTE	Access Policy-User Groups. Note
POG_ROWVER	Access Policy-User Groups. Row Version
POG_UPDATE	Access Policy-User Groups. Update Date
POG_UPDATEBY	Access Policy-User Groups. Updated By
POL_CREATE	Access Policies. Creation Date
POL_CREATEBY	Access Policies. Created By
POL_DATA_LEVEL	Access Policies. System Level
POL_DESCRIPTION	Access Policies. Description
POL_KEY	Access Policies. Key
POL_NAME	Access Policies. Name
POL_NOTE	Access Policies. Note
POL_PRIORITY	Access Policies. Priority
POL_REQUEST	Access Policies. By Request
POL_RETROFIT_POLICY	Access Policies. Retrofit Flag
POL_ROWVER	Access Policies. Row Version
POL_UPDATE	Access Policies. Update Date
POL_UPDATEBY	Access Policies. Updated By
POP_CREATE	Access Policy-Resource Objects. Creation Date
POP_CREATEBY	Access Policy-Resource Objects. Created By
POP_DATA_LEVEL	Access Policy-Resource Objects. System Level
POP_DENIAL	Access Policy-Resource Objects. Denial
POP_NOTE	Access Policy-Resource Objects. Note
POP_REVOKE_OBJECT	Access Policy-Resource Objects. Revoke Objects
POP_ROWVER	Access Policy-Resource Objects. Row Version
POP_UPDATE	Access Policy-Resource Objects. Update Date
POP_UPDATEBY	Access Policy-Resource Objects. Updated By
PRF_COLUMNNAME	Process Definition. Reconciliation Fields Mappings. ColumnName
PRF_CREATE	Process Definition. Reconciliation Fields Mappings. Creation Date
PRF_CREATEBY	Process Definition. Reconciliation Fields Mappings. Created By
PRF_DATA_LEVEL	Process Definition. Reconciliation Fields Mappings. System Level
PRF_ISKEY	Process Definition. Reconciliation Fields Mappings. Iskey
PRF_NOTE	Process Definition. Reconciliation Fields Mappings. Note
PRF_ROWVER	Process Definition. Reconciliation Fields Mappings. Row Version
PRF_UPDATE	Process Definition. Reconciliation Fields Mappings. Update Date
PRF_UPDATEBY	Process Definition. Reconciliation Fields Mappings. Updated By
PROCESSFORMCOUNT	Process Instance. Process Form Entries
PROCESSFORMINSTANCEKEY	Process. Process Definition. Process Instance Key In Form
PROCESSFORMKEY	Process. Process Definition. Process Form Key
PROCESSFORMNAME	Process. Process Definition. Process Form Name
PTY_CREATE	System Configuration. Creation Date
PTY_CREATEBY	System Configuration. Created By
PTY_DATA_LEVEL	System Configuration. System Level
PTY_KEY	System Configuration. Key
PTY_KEYWORD	System Configuration. Keyword
PTY_NAME	System Configuration. Name
PTY_NOTE	System Configuration. Note
PTY_ROWVER	System Configuration. Row Version
PTY_RUN_ON	System Configuration. Run On
PTY_SYSTEM	System Configuration. System
PTY_UPDATE	System Configuration. Update Date
PTY_UPDATEBY	System Configuration. Updated By
PTY_VALUE	System Configuration. Value
PUG_CREATE	ProcessDefinition-Groups. Creation Date
PUG_CREATEBY	ProcessDefinition-Groups. Created By
PUG_DATA_LEVEL	ProcessDefinition-Groups. System Level
PUG_DELETE	ProcessDefinition-Groups. Delete
PUG_NOTE	ProcessDefinition-Groups. Note
PUG_ROWVER	ProcessDefinition-Groups. Row Version
PUG_UPDATE	ProcessDefinition-Groups. Update Date
PUG_UPDATEBY	ProcessDefinition-Groups. Updated By
PUG_WRITE	ProcessDefinition-Groups. Write
PWP_CREATE	Password Policies. Policy Process Targets. Creation Date
PWP_CREATEBY	Password Policies. Policy Process Targets. Created By
PWP_DATA_LEVEL	Password Policies. Policy Process Targets. System Level
PWP_NOTE	Password Policies. Policy Process Targets. Note
PWP_ROWVER	Password Policies. Policy Process Targets. Row Version
PWP_UPDATE	Password Policies. Policy Process Targets. Update Date
PWP_UPDATEBY	Password Policies. Policy Process Targets. Updated By
PWR_CREATE	Password Policies. Creation Date
PWR_CREATEBY	Password Policies. Created By
PWR_DATA_LEVEL	Password Policies. System Level
PWR_DESC	Password Policies. Policy Description
PWR_DICTIONARY_DELIMITER	Password Policies. Password File Delimiter
PWR_DICTIONARY_LOCATION	Password Policies. Password File
PWR_DISALLOW_FNAME	Password Policies. Disallow First Name
PWR_DISALLOW_LNAME	Password Policies. Disallow Last Name
PWR_DISALLOW_USERID	Password Policies. Disallow User ID
PWR_EXPIRES_AFTER	Password Policies. Expires After(Days)
PWR_INVALID_CHARS	Password Policies. Characters Not Allowed
PWR_INVALID_STRINGS	Password Policies. Substrings Not Allowed
PWR_KEY	Password Policies. Key
PWR_MAX_LENGTH	Password Policies. Maximum Length
PWR_MAX_REPEATED	Password Policies. Maximum Repeated Characters
PWR_MAX_SPECIALCHAR	Password Policies. Maximum Special Characters
PWR_MIN_ALPHA	Password Policies. Minimum Alphabet Characters
PWR_MIN_ALPHANUM	Password Policies. Minimum Alphanumeric Characters
PWR_MIN_LENGTH	Password Policies. Minimum Length
PWR_MIN_LOWERCASE	Password Policies. Minimum Lowercase Characters
PWR_MIN_NUMBER	Password Policies. Minimum Numeric Characters
PWR_MIN_SPECIALCHAR	Password Policies. Minimum Special Characters
PWR_MIN_UNIQUE	Password Policies. Minimum Unique Characters
PWR_MIN_UPPERCASE	Password Policies. Minimum Uppercase Characters
PWR_NAME	Password Policies. Policy Name
PWR_NOTE	Password Policies. Note
PWR_REQD_CHARS	Password Policies. Characters Required
PWR_ROWVER	Password Policies. Row Version
PWR_STARTS_WITH_CHAR	Password Policies. Start With Character
PWR_UPDATE	Password Policies. Update Date
PWR_UPDATEBY	Password Policies. Updated By
PWR_VALID_CHARS	Password Policies. Characters Allowed
PWR_WARN_AFTER	Password Policies. Warn After(Days)
PWT_CREATE	Password Policies. Policy User Targets. Creation Date
PWT_CREATEBY	Password Policies. Policy User Targets. Created By
PWT_DATA_LEVEL	Password Policies. Policy User Targets. System Level
PWT_EMP_TYPE	Password Policies. Policy User Targets. Employee Type
PWT_KEY	Password Policies. Policy User Targets. Key
PWT_NOTE	Password Policies. Policy User Targets. Note
PWT_ROWVER	Password Policies. Policy User Targets. Row Version
PWT_UPDATE	Password Policies. Policy User Targets. Update Date
PWT_UPDATEBY	Password Policies. Policy User Targets. Updated By
PXD_CREATE	Proxy. Creation Date
PXD_CREATEBY	Proxy. Created By
PXD_DATA_LEVEL	Proxy. System Level
PXD_END_DATE	Proxy. End Date
PXD_KEY	Proxy. Key
PXD_NOTE	Proxy. Note
PXD_ORIG_USR_KEY	Proxy. Original User Key
PXD_PROXY_KEY	Proxy. Proxy User Key
PXD_ROWVER	Proxy. Row Version
PXD_START_DATE	Proxy. Start Date
PXD_UPDATE	Proxy. Update Date
PXD_UPDATEBY	Proxy. Updated By
QUE_CREATE	Queues. Creation Date
QUE_CREATEBY	Queues. Created By
QUE_DATA_LEVEL	Queues. System Level
QUE_DESCRIPTION	Queues. Description
QUE_KEY	Queues. Key
QUE_NAME	Queues. Queue Name
QUE_NOTE	Queues. Note
QUE_PARENT	Queues. Parent Queue Name
QUE_PARENT_KEY	Queues. Parent Queue
QUE_ROWVER	Queues. Row Version
QUE_UPDATE	Queues. Update Date
QUE_UPDATEBY	Queues. Updated By
QUG_CREATE	Queues. Administrators. Creation Date
QUG_CREATEBY	Queues. Administrators. Created By
QUG_DATA_LEVEL	Queues. Administrators. System Level
QUG_DELETE	Queues. Administrators. Delete
QUG_NOTE	Queues. Administrators. Note
QUG_ROWVER	Queues. Administrators. Row Version
QUG_UPDATE	Queues. Administrators. Update Date
QUG_UPDATEBY	Queues. Administrators. Updated By
QUG_WRITE	Queues. Administrators. Write
QUM_CREATE	Queues. Members. Creation Date
QUM_CREATEBY	Queues. Members. Created By
QUM_DATA_LEVEL	Queues. Members. System Level
QUM_DELETE	Queues. Members. Delete
QUM_NOTE	Queues. Members. Note
QUM_ROWVER	Queues. Members. Row Version
QUM_UPDATE	Queues. Members. Update Date
QUM_UPDATEBY	Queues. Members. Updated By
QUM_WRITE	Queues. Members. Write
RCD_CREATE	Reconciliation Manager. Event Data. Creation Date
RCD_CREATEBY	Reconciliation Manager. Event Data. Created By
RCD_DATA_LEVEL	Reconciliation Manager. Event Data. System Level
RCD_NOTE	Reconciliation Manager. Event Data. Note
RCD_ROWVER	Reconciliation Manager. Event Data. Row Version
RCD_UPDATE	Reconciliation Manager. Event Data. Update Date
RCD_UPDATEBY	Reconciliation Manager. Event Data. Updated By
RCD_VALUE	Reconciliation Manager. Event Data. Value
RCE_CREATE	Reconciliation Manager. Creation Date
RCE_CREATEBY	Reconciliation Manager. Created By
RCE_DATA_LEVEL	Reconciliation Manager. System Level
RCE_KEY	Reconciliation Manager. Key
RCE_LAST_ACTION	Reconciliation Manager. Last Action
RCE_NOTE	Reconciliation Manager. Note
RCE_ROWVER	Reconciliation Manager. Row Version
RCE_STATUS	Reconciliation Manager. Status
RCE_UPDATE	Reconciliation Manager. Update Date
RCE_UPDATEBY	Reconciliation Manager. Updated By
RCH_ACTION	Reconciliation Manager. Event Action History. Action
RCH_CREATE	Reconciliation Manager. Event Action History. Creation Date
RCH_CREATEBY	Reconciliation Manager. Event Action History. Created By
RCH_DATA_LEVEL	Reconciliation Manager. Event Action History. System Level
RCH_KEY	Reconciliation Manager. Event Action History. Key
RCH_NOTE	Reconciliation Manager. Event Action History. Note
RCH_ROWVER	Reconciliation Manager. Event Action History. Row Version
RCH_UPDATE	Reconciliation Manager. Event Action History. Update Date
RCH_UPDATEBY	Reconciliation Manager. Event Action History. Updated By
REQUESTADMIN	RequestAdmin. User ID
REQUESTADMIN_FIRST_NAME	RequestAdmin. First Name
REQUESTADMIN_KEY	RequestAdmin. Key
REQUESTADMIN_LAST_NAME	RequestAdmin. Last Name
REQUESTER	Requester. User ID
REQUESTER_FIRST_NAME	Requester. First Name
REQUESTER_LAST_NAME	Requester. Last Name
REQ_CONSOLIDATED_DATA_VALUE	Requests. Consolidated Data Value
REQ_CREATE	Requests. Creation Date
REQ_CREATEBY	Requests. Created By
REQ_DATA_LEVEL	Requests. System Level
REQ_KEY	Requests. Key
REQ_NAME	Requests. Name
REQ_NOTE	Requests. Note
REQ_NUMBER	Requests. Request ID
REQ_OBJ_ACTION	Requests. Object Request Type
REQ_PRIORITY	Requests. Request Priority
REQ_PROV_DATE	Requests. Provisioning Executed Date
REQ_PROV_SCHED_DATE	Requests. Provisioning Scheduled Date
REQ_ROWVER	Requests. Row Version
REQ_SCHED_PROV	Requests. Scheduled Provisioning
REQ_TARGET_TYPE	Requests. Target Type
REQ_TYPE	Requests. Type
REQ_UPDATE	Requests. Update Date
REQ_UPDATEBY	Requests. Updated By
REQ_UPDATEBY_FNAME	Requests. Updated By First Name
REQ_UPDATEBY_LNAME	Requests. Updated By Last Name
REQ_UPDATEBY_LOGIN	Requests. Updated By Login
RGM_CREATE	Tasks-Responses. Creation Date
RGM_CREATEBY	Tasks-Responses. Created By
RGM_DATA_LEVEL	Tasks-Responses. System Level
RGM_NOTE	Tasks-Responses. Note
RGM_ROWVER	Tasks-Responses. Row Version
RGM_UPDATE	Tasks-Responses. Update Date
RGM_UPDATEBY	Tasks-Responses. Updated By
RLO_CREATE	External Jar File Directory. Creation Date
RLO_CREATEBY	External Jar File Directory. Created By
RLO_DESC	External Jar File Directory. Description
RLO_KEY	External Jar File Directory. Key
RLO_NOTE	External Jar File Directory. Note
RLO_ROWVER	External Jar File Directory. Row Version
RLO_TAG	External Jar File Directory. Tag
RLO_URL	External Jar File Directory. URL
RLO_DISABLE_DIR	External Jar File Directory. Disable DIR
RLO_DATA_LEVEL	External Jar File Directory. System Level
RLO_UPDATE	External Jar File Directory. Update Date
RLO_UPDATEBY	External Jar File Directory. Updated By
ROP_CREATE	Rule Designer-Object Definition. Creation Date
ROP_CREATEBY	Rule Designer-Object Definition. Created By
ROP_DATA_LEVEL	Rule Designer-Object Definition. System Level
ROP_NOTE	Rule Designer-Object Definition. Note
ROP_PRIORITY	Rule Designer-Object Definition. Priority
ROP_ROWVER	Rule Designer-Object Definition. Row Version
ROP_TYPE	Rule Designer-Object Definition. Type
ROP_UPDATE	Rule Designer-Object Definition. Update Date
ROP_UPDATEBY	Rule Designer-Object Definition. Updated By
RPW_CREATE	Access Policy-Resource Objects-Rule Designer. Creation Date
RPW_CREATEBY	Access Policy-Resource Objects-Rule Designer. Created By
RPW_DATA_LEVEL	Access Policy-Resource Objects-Rule Designer. System Level
RPW_NOTE	Access Policy-Resource Objects-Rule Designer. Note
RPW_ROWVER	Access Policy-Resource Objects-Rule Designer. Row Version
RPW_UPDATE	Access Policy-Resource Objects-Rule Designer. Update Date
RPW_UPDATEBY	Access Policy-Resource Objects-Rule Designer. Updated By
RPW_PRIORTIY	Access Policy-Resource Objects-Rule Designer. Priority
RQA_CREATE	Requests. Organization Targets. Creation Date
RQA_CREATEBY	Requests. Organization Targets. Created By
RQA_DATA_LEVEL	Requests. Organization Targets. System Level
RQA_NOTE	Requests. Organization Targets. Note
RQA_ROWVER	Requests. Organization Targets. Row Version
RQA_UPDATE	Requests. Organization Targets. Update Date
RQA_UPDATEBY	Requests. Organization Targets. Updated By
RQC_COMMENT	Requests. Comments. Comments
RQC_CREATE	Requests. Comments. Creation Date
RQC_CREATEBY	Requests. Comments. Created By
RQC_CREATEBY_FNAME	Requests. Comments. Created By First Name
RQC_CREATEBY_LNAME	Requests. Comments. Created By Last Name
RQC_CREATEBY_LOGIN	Requests. Comments. Created By Login
RQC_DATA_LEVEL	Requests. Comments. System Level
RQC_KEY	Requests. Comments. Key
RQC_NOTE	Requests. Comments. Note
RQC_ROWVER	Requests. Comments. Row Version
RQC_TYPE	Requests. Comments. Type
RQC_UPDATE	Requests. Comments. Update Date
RQC_UPDATEBY	Requests. Comments. Updated By
RQD_ATTR_NAME	Registration. Attribute Name
RQD_ATTR_VALUE	Registration. Attribute Value
RQD_CREATE	Registration. Create Date
RQD_CREATEBY	Registration. Created By
RQD_DATA_LEVEL	Registration. System Level
RQD_DISPLAY	Registration. Display
RQD_ENCRYPTED	Registration. Encrypted
RQD_NOTE	Registration. Note
RQD_ROWVER	Registration. Row Version
RQD_UPDATE	Registration. Update Date
RQD_UPDATEBY	Registration. Updated By
RQE_CREATE	Request-Queues. Creation Date
RQE_CREATEBY	Request-Queues. Created By
RQE_DATA_LEVEL	Request-Queues. System Level
RQE_NOTE	Request-Queues. Note
RQE_ROWVER	Request-Queues. Row Version
RQE_UPDATE	Request-Queues. Update Date
RQE_UPDATEBY	Request-Queues. Updated By
RQH_CREATE	Request History. Creation Date
RQH_CREATEBY	Request History. Created By
RQH_DATA_LEVEL	Request History. System Level
RQH_KEY	Request History. Key
RQH_NOTE	Request History. Note
RQH_ROWVER	Request History. Row Version
RQH_STATUS	Request History. Status
RQH_UPDATE	Request History. Update Date
RQH_UPDATEBY	Request History. Updated By
RQO_CREATE	Requests. Request Objects. Creation Date
RQO_CREATEBY	Requests. Request Objects. Created By
RQO_DATA_LEVEL	Requests. Request Objects. System Level
RQO_FILL_IN	Requests. Request Objects. Data Provider
RQO_NOTE	Requests. Request Objects. Note
RQO_ROWVER	Requests. Request Objects. Row Version
RQO_SERVICEACCOUNT	Requests. Request Objects. Service Account Flag
RQO_UPDATE	Requests. Request Objects. Update Date
RQO_UPDATEBY	Requests. Request Objects. Updated By
RQR_MGR_FNAME	Requester. Manager First Name
RQR_MGR_KEY	Requester. Manager Key
RQR_MGR_LNAME	Requester. Manager Last Name
RQR_MGR_LOGIN	Requester. Manager User ID
RQU_CREATE	Requests. User Targets. Creation Date
RQU_CREATEBY	Requests. User Targets. Created By
RQU_DATA_LEVEL	Requests. User Targets. System Level
RQU_NOTE	Requests. User Targets. Note
RQU_ROWVER	Requests. User Targets. Row Version
RQU_UPDATE	Requests. User Targets. Update Date
RQU_UPDATEBY	Requests. User Targets. Updated By
RRE_CASESENSITIVE	Reconciliation Rules. Rule Element. Case-sensitive
RRE_CHILD_RRL_KEY	Reconciliation Rules. Rule Element. Reconciliation Child User Matching Rules Key
RRE_CREATE	Reconciliation Rules. Rule Element. Creation Date
RRE_CREATEBY	Reconciliation Rules. Rule Element. Created By
RRE_DATA_LEVEL	Reconciliation Rules. Rule Element. System Level
RRE_FIELDNAME	Reconciliation Rules. Rule Element. Field Name
RRE_KEY	Reconciliation Rules. Rule Element. Key
RRE_NOTE	Reconciliation Rules. Rule Element. Note
RRE_SEQUENCE	Reconciliation Rules. Rule Element. Sequence
RRE_UPDATE	Reconciliation Rules. Rule Element. Update Date
RRE_UPDATEBY	Reconciliation Rules. Rule Element. Updated By
RRE_VALID	Reconciliation Rules. Rule Element. Valid
RRL_ACTIVE	Reconciliation Rules. Active
RRL_CREATE	Reconciliation Rules. Creation Date
RRL_CREATEBY	Reconciliation Rules. Created By
RRL_DATA_LEVEL	Reconciliation Rules. System Level
RRL_KEY	Reconciliation Rules. Key
RRL_NAME	Reconciliation Rules. Name
RRL_NOTE	Reconciliation Rules. Note
RRL_OPERATOR	Reconciliation Rules. Operator
RRL_ROWVER	Reconciliation Rules. Row Version
RRL_UPDATE	Reconciliation Rules. Update Date
RRL_UPDATEBY	Reconciliation Rules. Updated By
RRL_VALID	Reconciliation Rules. Valid
RRT_CREATE	Reconciliation Rules. Property. Creation Date
RRT_CREATEBY	Reconciliation Rules. Property. Created By
RRT_DATA_LEVEL	Reconciliation Rules. Property. System Level
RRT_KEY	Reconciliation Rules. Property. Key
RRT_NAME	Reconciliation Rules. Property. Name
RRT_NOTE	Reconciliation Rules. Property. Note
RRT_ROWVER	Reconciliation Rules. Property. Row Version
RRT_UPDATE	Reconciliation Rules. Property. Update Date
RRT_UPDATEBY	Reconciliation Rules. Property. Updated By
RRT_VALUE	Reconciliation Rules. Property. Value
RSC_UPDATEBY	Process Definition. Tasks. Responses. Updated By
RSC_CREATE	Process Definition. Tasks. Responses. Creation Date
RSC_CREATEBY	Process Definition. Tasks. Responses. Created By
RSC_DATA	Process Definition. Tasks. Responses. Response
RSC_DATA_LEVEL	Process Definition. Tasks. Responses. System Level
RSC_DESC	Process Definition. Tasks. Responses. Description
RSC_KEY	Process Definition. Tasks. Responses. Key
RSC_NOTE	Process Definition. Tasks. Responses. Note
RSC_ROWVER	Process Definition. Tasks. Responses. Row Version
RSC_UPDATE	Process Definition. Tasks. Responses. Update Date
RUE_ATTRIBUTE	Rule Designer. Rule Element. Attribute
RUE_ATTRIBUTE_SOURCE	Rule Designer. Rule Element. Attribute Source
RUE_ATTRIBUTE_SOURCE_SDK_KEY	Rule Designer. Rule Element. User-Defined Form
RUE_CHILD_RUL_KEY	Rule Designer. Rule Element. Child Key
RUE_CREATE	Rule Designer. Rule Element. Creation Date
RUE_CREATEBY	Rule Designer. Rule Element. Created By
RUE_DATA_LEVEL	Rule Designer. Rule Element. System Level
RUE_KEY	Rule Designer. Rule Element. Key
RUE_NOTE	Rule Designer. Rule Element. Note
RUE_OPERATION	Rule Designer. Rule Element. Operation
RUE_ROWVER	Rule Designer. Rule Element. Row Version
RUE_SEQUENCE	Rule Designer. Rule Element. Sequence
RUE_UPDATE	Rule Designer. Rule Element. Update Date
RUE_UPDATEBY	Rule Designer. Rule Element. Updated By
RUE_VALUE	Rule Designer. Rule Element. Attribute Value
RUG_CREATE	Requests-Groups. Creation Date
RUG_CREATEBY	Requests-Groups. Created By
RUG_DATA_LEVEL	Requests-Groups. System Level
RUG_DELETE	Requests-Groups. Delete
RUG_NOTE	Requests-Groups. Note
RUG_ROWVER	Requests-Groups. Row Version
RUG_UPDATE	Requests-Groups. Update Date
RUG_UPDATEBY	Requests-Groups. Updated By
RUG_WRITE	Requests-Groups. Write
RUL_ALL_OBJECTS	Rule Designer. All Objects
RUL_ALL_PROCESSES	Rule Designer. All Processes
RUL_CREATE	Rule Designer. Creation Date
RUL_CREATEBY	Rule Designer. Created By
RUL_DATA_LEVEL	Rule Designer. System Level
RUL_KEY	Rule Designer. Key
RUL_NAME	Rule Designer. Name
RUL_NOTE	Rule Designer. Description
RUL_OPERATOR	Rule Designer. Operator
RUL_ROWVER	Rule Designer. Row Version
RUL_SUBTYPE	Rule Designer. Sub-Type
RUL_TYPE	Rule Designer. Type
RUL_UPDATE	Rule Designer. Last Update Date
RUL_UPDATEBY	Rule Designer. Updated By
RVM_CREATE	Process Definition. Tasks. Recovery Tasks. Creation Date
RVM_CREATEBY	Process Definition. Tasks. Recovery Tasks. Created By
RVM_DATA_LEVEL	Process Definition. Tasks. Recovery Tasks. System Level
RVM_NOTE	Process Definition. Tasks. Recovery Tasks. Note
RVM_ROWVER	Process Definition. Tasks. Recovery Tasks. Row Version
RVM_UPDATE	Process Definition. Tasks. Recovery Tasks. Update Date
RVM_UPDATEBY	Process Definition. Tasks. Recovery Tasks. Updated By
SCH_ACTION	Process Instance. Task Details. Action
SCH_ACTUAL_END	Process Instance. Task Details. Actual End Date
SCH_ACTUAL_START	Process Instance. Task Details. Actual Start Date
SCH_CREATE	Process Instance. Task Details. Creation Date
SCH_CREATEBY	Process Instance. Task Details. Created By
SCH_DATA	Process Instance. Task Details. Data
SCH_DATA_LEVEL	Process Instance. Task Details. System level
SCH_INT_KEY	Process Instance. Task Information. Int Key
SCH_KEY	Process Instance. Task Details. Key
SCH_NOTE	Process Instance. Task Details. Note
SCH_PROJ_END	Process Instance. Task Details. Projected End
SCH_PROJ_START	Process Instance. Task Details. Projected Start
SCH_REASON	Process Instance. Task Details. Reason
SCH_ROWVER	Process Instance. Task Details. Row Version
SCH_STATUS	Process Instance. Task Details. Status
SCH_TYPE	Process Instance. Task Details. Type
SCH_UPDATE	Process Instance. Task Details. Update Date
SCH_UPDATEBY	Process Instance. Task Details. Updated By
SDC_CREATE	Structure Utility. Additional Columns. Creation Date
SDC_CREATEBY	Structure Utility. Additional Columns. Created By
SDC_DATA_LEVEL	Structure Utility. Additional Columns. System Level
SDC_DEFAULT	Structure Utility. Additional Columns. Default
SDC_DEFAULT_VALUE	Structure Utility. Additional Columns. Default Value
SDC_ENCRYPTED	Structure Utility. Additional Columns. Encrypted
SDC_FIELD_TYPE	Structure Utility. Additional Columns. Field Type
SDC_KEY	Structure Utility. Additional Columns. Key
SDC_LABEL	Structure Utility. Additional Columns. Field Label
SDC_NAME	Structure Utility. Additional Columns. Name
SDC_NOTE	Structure Utility. Additional Columns. Note
SDC_ORDER	Structure Utility. Additional Columns. Order
SDC_PROFILE_ENABLED	Structure Utility. Additional Columns. Profile Enabled
SDC_ROWVER	Structure Utility. Additional Columns. Row Version
SDC_SQL_LENGTH	Structure Utility. Additional Columns. Length
SDC_UPDATE	Structure Utility. Additional Columns. Update Date
SDC_UPDATEBY	Structure Utility. Additional Columns. Updated By
SDC_VARIANT_TYPE	Structure Utility. Additional Columns. Variant Type
SDC_VERSION	Structure Utility. Additional Columns. Version
SDH_CHILD_KEY	Structure Utility. Child Tables. Child Key
SDH_CHILD_VERSION	Structure Utility. Child Tables. Child Version
SDH_CREATE	Structure Utility. Child Tables. Creation Date
SDH_CREATEBY	Structure Utility. Child Tables. Created By
SDH_DATA_LEVEL	Structure Utility. Child Tables. System Level
SDH_NOTE	Structure Utility. Child Tables. Note
SDH_PARENT_KEY	Structure Utility. Child Tables. Parent Key
SDH_PARENT_VERSION	Structure Utility. Child Tables. Parent Version
SDH_ROWVER	Structure Utility. Child Tables. Row Version
SDH_UPDATE	Structure Utility. Child Tables. Update Date
SDH_UPDATEBY	Structure Utility. Child Tables. Updated By
SDK_ACTIVE_VERSION	Structure Utility. Active Version
SDK_CREATE	Structure Utility. Creation Date
SDK_CREATEBY	Structure Utility. Created By
SDK_DATA_LEVEL	Structure Utility. System Level
SDK_DESCRIPTION	Structure Utility. Form Description
SDK_FORM_DESCRIPTION	Structure Utility. Description
SDK_KEY	Structure Utility. Key
SDK_LATEST_VERSION	Structure Utility. Latest Version
SDK_NAME	Structure Utility. Table Name
SDK_NOTE	Structure Utility. Note
SDK_ORC	Structure Utility. Request Table
SDK_ROWVER	Structure Utility. Row Version
SDK_SCHEMA	Structure Utility. Schema
SDK_TYPE	Structure Utility. Form Type
SDK_UPDATE	Structure Utility. Update Date
SDK_UPDATEBY	Structure Utility. Updated By
SDL_CHILD_VERSION	Structure Utility. Structure Utility Version Label. Child Label
SDL_CREATE	Structure Utility. Structure Utility Version Label. Creation Date
SDL_CREATEBY	Structure Utility. Structure Utility Version Label. Created By
SDL_DATA_LEVEL	Structure Utility. Structure Utility Version Label. System Level
SDL_KEY	Structure Utility. Structure Utility Version Label. Key
SDL_LABEL	Structure Utility. Structure Utility Version Label. Version Label
SDL_NOTE	Structure Utility. Structure Utility Version Label. Note
SDL_PARENT_VERSION	Structure Utility. Structure Utility Version Label. Parent Label
SDL_ROWVER	Structure Utility. Structure Utility Version Label. Row Version
SDL_UPDATE	Structure Utility. Structure Utility Version Label. Update Date
SDL_UPDATEBY	Structure Utility. Structure Utility Version Label. Updated By
SDP_CREATE	Structure Utility. Additional Columns. Properties. Creation Date
SDP_CREATEBY	Structure Utility. Additional Columns. Properties. Created By
SDP_DATA_LEVEL	Structure Utility. Additional Columns. Properties. System Level
SDP_KEY	Structure Utility. Additional Columns. Properties. Key
SDP_NOTE	Structure Utility. Additional Columns. Properties. Note
SDP_PROPERTY_NAME	Structure Utility. Additional Columns. Properties. Property Name
SDP_PROPERTY_VALUE	Structure Utility. Additional Columns. Properties. Property Value
SDP_ROWVER	Structure Utility. Additional Columns. Properties. Row Version
SDP_UPDATE	Structure Utility. Additional Columns. Properties. Update Date
SDP_UPDATEBY	Structure Utility. Additional Columns. Properties. Updated By
SEL_CREATE	Groups. Object Permissions. Creation Date
SEL_CREATEBY	Groups. Object Permissions. Created By
SEL_DATA_LEVEL	Groups. Object Permissions. System Level
SEL_DELETE_ALLOW	Groups. Object Permissions. Allow Delete
SEL_INSERT_ALLOW	Groups. Object Permissions. Allow Insert
SEL_KEY	Groups. Object Permissions. Key
SEL_NOTE	Groups. Object Permissions. Note
SEL_ROWVER	Groups. Object Permissions. Row Version
SEL_UPDATE	Groups. Object Permissions. Update Date
SEL_UPDATEBY	Groups. Object Permissions. Updated By
SEL_UPDATE_ALLOW	Groups. Object Permissions. Allow Update
SIT_CLLI	Site. CLLI
SIT_CREATE	Site. Creation Date
SIT_CREATEBY	Site. Created By
SIT_DATA_LEVEL	Site. System Level
SIT_EXT_CABLE_TYP	Site. Ext Cable Type
SIT_EXT_DISTANCE	Site. Ext Distance
SIT_EXT_FLOOR	Site. Ext Floor
SIT_EXT_JACK_PROVD	Site. Ext Jack Provider
SIT_EXT_JACK_TYPE	Site. Ext Jack Type
SIT_EXT_ROOM	Site. Ext Room
SIT_EXT_SHIELDING	Site. Ext Shielding
SIT_EXT_WIRE_ORG	Site. Ext Wire Org
SIT_FLOOR	Site. Site Number
SIT_JACK_PROVIDER	Site. Jack Provider
SIT_JACK_TYPE	Site. Jack Type
SIT_KEY	Site. Key
SIT_NOTE	Site. Note
SIT_ROOM	Site. Room
SIT_ROWVER	Site. Row Version
SIT_TYPE	Site. Site Type
SIT_UPDATE	Site. Update Date
SIT_UPDATEBY	Site. Updated By
SPD_CREATE	IT Resource Type Definition. IT Resource Type Parametr. Creation Date
SPD_CREATEBY	IT Resource Type Definition. IT Resource Type Parametr. Created By
SPD_DATA_LEVEL	IT Resource Type Definition. IT Resource Type Parametr. System Level
SPD_KEY	IT Resource Type Definition. IT Resource Type Parametr. Key
SPD_NOTE	IT Resource Type Definition. IT Resource Type Parametr. Note
SPD_ROWVER	IT Resource Type Definition. IT Resource Type Parametr. Row Version
SPD_UPDATE	IT Resource Type Definition. IT Resource Type Parametr. Update Date
SPD_UPDATEBY	IT Resource Type Definition. IT Resource Type Parametr. Updated By
SPD_CREATE	IT Resources Type Parameter. Creation Date
SPD_CREATEBY	IT Resources Type Parameter. Created By
SPD_DATA_LEVEL	IT Resources Type Parameter. System Level
SPD_FIELD_DEFAULT	IT Resource Type Definition. IT Resource Type Parametr. Default Value
SPD_FIELD_DEFAULT	IT Resources Type Parameter. Default
SPD_FIELD_ENCRYPTED	IT Resources Type Parameter. Encrypted
SPD_FIELD_ENCRYPTED	IT Resource Type Definition. IT Resource Type Parametr. Encrypted
SPD_FIELD_NAME	IT Resource Type Definition. IT Resource Type Parametr. Field Name
SPD_FIELD_NAME	IT Resources Type Parameter. Name
SPD_KEY	IT Resources Type Parameter. Key
SPD_NOTE	IT Resources Type Parameter. Note
SPD_ROWVER	IT Resources Type Parameter. Row Version
SPD_UPDATE	IT Resources Type Parameter. Update Date
SPD_UPDATEBY	IT Resources Type Parameter. Updated By
SRS_CREATE	IT Resource. Dependant IT Resource. Creation Date
SRS_CREATEBY	IT Resource. Dependant IT Resource. Created By
SRS_DATA_LEVEL	IT Resource. Dependant IT Resource. System Level
SRS_NOTE	IT Resource. Dependant IT Resource. Note
SRS_ROWVER	IT Resource. Dependant IT Resource. Row Version
SRS_UPDATE	IT Resource. Dependant IT Resource. Update Date
SRS_UPDATEBY	IT Resource. Dependant IT Resource. Updated By
SRS_SVR_KEY	IT Resource. Dependant IT Resource. Value
STA_BUCKET	Status. Category
STA_BUCKET_ORDER	Status. Category Order
STA_CREATE	Status. Creation Date
STA_CREATEBY	Status. Created By
STA_DATA_LEVEL	Status. System Level
STA_KEY	Status. Key
STA_NOTE	Status. Note
STA_ORDER	Status. Order
STA_ROWVER	Status. Row Version
STA_STATUS	Status. Status
STA_SUCCESS	Status. Successful Completion
STA_UPDATE	Status. Update Date
STA_UPDATEBY	Status. Updated By
SUBGROUPKEY	Groups. Subgroup Key
SUBGROUPNAME	Groups. Subgroup Name
SVD_CREATE	IT Resource Type Definition. Creation Date
SVD_CREATEBY	IT Resource Type Definition. Created By
SVD_DATA_LEVEL	IT Resource Type Definition. System Level
SVD_KEY	IT Resource Type Definition. Key
SVD_NOTE	IT Resource Type Definition. Note
SVD_ROWVER	IT Resource Type Definition. Row Version
SVD_UPDATE	IT Resource Type Definition. Update Date
SVD_UPDATEBY	IT Resource Type Definition. Updated By
SVD_LOCATION_BASED	IT Resource Type Definition. Location Bases
SVD_CREATE	IT Resources Type Definition. Creation Date
SVD_CREATEBY	IT Resources Type Definition. Created By
SVD_DATA_LEVEL	IT Resources Type Definition. System Level
SVD_INSERT_MULTIPLE	IT Resource Type Definition. Insert Multiple
SVD_INSERT_MULTIPLE	IT Resources Type Definition. Insert Multiple
SVD_KEY	IT Resources Type Definition. Key
SVD_NOTE	IT Resources Type Definition. Note
SVD_ROWVER	IT Resources Type Definition. Row Version
SVD_SVR_TYPE	IT Resource Type Definition. Server Type
SVD_SVR_TYPE	IT Resources Type Definition. Server Type
SVD_UPDATE	IT Resources Type Definition. Update Date
SVD_UPDATEBY	IT Resources Type Definition. Updated By
SVP_CREATE	IT Resource. Parameter. Creation Date
SVP_CREATEBY	IT Resource. Parameter. Created By
SVP_DATA_LEVEL	IT Resource. Parameter. System Level
SVP_NOTE	IT Resource. Parameter. Note
SVP_ROWVER	IT Resource. Parameter. Row Version
SVP_UPDATE	IT Resource. Parameter. Update Date
SVP_UPDATEBY	IT Resource. Parameter. Updated By
SVP_CREATE	IT Resources Type Parameter Value. Creation Date
SVP_CREATEBY	IT Resources Type Parameter Value. Created By
SVP_DATA_LEVEL	IT Resources Type Parameter Value. System Level
SVP_FIELD_VALUE	IT Resource. Parameter. Value
SVP_FIELD_VALUE	IT Resources Type Parameter Value. Value
SVP_KEY	IT Resource. Parameter. Key
SVP_KEY	IT Resources Type Parameter Value. Key
SVP_NOTE	IT Resources Type Parameter Value. Note
SVP_ROWVER	IT Resources Type Parameter Value. Row Version
SVP_UPDATE	IT Resources Type Parameter Value. Update Date
SVP_UPDATEBY	IT Resources Type Parameter Value. Updated By
SVR_CREATE	IT Resource. Creation Date
SVR_CREATEBY	IT Resource. Created By
SVR_DATA_LEVEL	IT Resource. System Level
SVR_NOTE	IT Resource. Note
SVR_ROWVER	IT Resource. Row Version
SVR_UPDATE	IT Resource. Update Date
SVR_UPDATEBY	IT Resource. Updated By
SVR_CHILD_KEY	IT Resource. Child Key
SVR_CHILD_KEY	IT Resources. Remote Manager Key
SVR_CREATE	IT Resources. Creation Date
SVR_CREATEBY	IT Resources. Created By
SVR_DATA_LEVEL	IT Resources. System Level
SVR_KEY	IT Resource. Key
SVR_KEY	IT Resources. Key
SVR_NAME	IT Resource. Name
SVR_NAME	IT Resources. Name
SVR_NOTE	IT Resources. Note
SVR_ROWVER	IT Resources. Row Version
SVR_UPDATE	IT Resources. Update Date
SVR_UPDATEBY	IT Resources. Updated By
SVS_CREATE	IT Resource-Site. Creation Date
SVS_CREATEBY	IT Resource-Site. Created By
SVS_DATA_LEVEL	IT Resource-Site. System Level
SVS_NOTE	IT Resource-Site. Note
SVS_ROWVER	IT Resource-Site. Row Version
SVS_UPDATE	IT Resource-Site. Update Date
SVS_UPDATEBY	IT Resource-Site. Updated By
TAS_KEY	Task Scheduler. Task Attributes. Key
TDV_CREATE	Process-Data Object Manager-Event Handler Manager. Creation Date
TDV_CREATEBY	Process-Data Object Manager-Event Handler Manager. Created By
TDV_DATA_LEVEL	Process-Data Object Manager-Event Handler Manager. System Level
TDV_NOTE	Process-Data Object Manager-Event Handler Manager. Note
TDV_ROWVER	Process-Data Object Manager-Event Handler Manager. Row Version
TDV_UPDATE	Process-Data Object Manager-Event Handler Manager. Update Date
TDV_UPDATEBY	Process-Data Object Manager-Event Handler Manager. Updated By
TOS. UPDATEBY	Process. Process Definition. Updated By
TOS_AUTOSAVE	Process. Process Definition. Auto Save
TOS_AUTO_PREPOP	Tasks. Auto Prepopulate
TOS_CREATE	Process. Process Definition. Creation Date
TOS_CREATEBY	Process. Process Definition. Created By
TOS_DATA_LEVEL	Process. Process Definition. System Level
TOS_KEY	Process. Process Definition. Process Key
TOS_MATCHNOTFOUND	Process. Process Definition. Match Not Found
TOS_MULTMATCHFOUND	Process. Process Definition. Mult Match Found
TOS_NOTE	Process. Process Definition. Note
TOS_ONEMATCHFOUND	Process. Process Definition. One Match Found
TOS_ROWVER	Process. Process Definition. Row Version
TOS_TYPE	Process. Process Definition. Type
TOS_UPDATE	Process. Process Definition. Update Date
TSA_CREATE	Task Scheduler. Task Attributes. Creation Date
TSA_CREATEBY	Task Scheduler. Task Attributes. Created By
TSA_DATA_LEVEL	Task Scheduler. Task Attributes. System Level
TSA_NOTE	Task Scheduler. Task Attributes. Note
TSA_ROWVER	Task Scheduler. Task Attributes. Row Version
TSA_NAME	Task Scheduler. Task Attributes. Name
TSA_UPDATE	Task Scheduler. Task Attributes. Update Date
TSA_UPDATEBY	Task Scheduler. Task Attributes. Updated By
TSA_VALUE	Task Scheduler. Task Attributes. Value
TSK_CREATE	Task Scheduler. Creation Date
TSK_CREATEBY	Task Scheduler. Created By
TSK_DATA_LEVEL	Task Scheduler. System Level
TSK_NOTE	Task Scheduler. Note
TSK_ROWVER	Task Scheduler. Row Version
TSK_CLASSNAME	Task Scheduler. ClassName
TSK_DISABLE	Task Scheduler. Disable
TSK_FREQTYPE	Task Scheduler. Frequency Type
TSK_INTERVAL	Task Scheduler. Interval
TSK_KEY	Task Scheduler. Key
TSK_LAST_START_TIME	Task Scheduler. Last Start Time
TSK_LAST_STOP_TIME	Task Scheduler. Last Stop Time
TSK_MAX_RETRIES	Task Scheduler. Max Retries
TSK_NAME	Task Scheduler. Name
TSK_NEXT_START_TIME	Task Scheduler. Next Start Time
TSK_RETRY_COUNT	Task Scheduler. Retry Count
TSK_START_TIME	Task Scheduler. Start Time
TSK_STATUS	Task Scheduler. Status
TSK_UPDATE	Task Scheduler. Update Date
TSK_UPDATEBY	Task Scheduler. Updated By
UGP_CREATE	Groups. Creation Date
UGP_CREATEBY	Groups. Created By
UGP_DATA_LEVEL	Groups. System Level
UGP_EMAIL	Groups. E-mail
UGP_KEY	Groups. Key
UGP_NAME	Groups. Group Name
UGP_NOTE	Groups. Note
UGP_ROWVER	Groups. Row Version
UGP_UPDATE	Groups. Update Date
UGP_UPDATEBY	Groups. Updated By
UGP_VIEWSET	Groups. Viewset
ULN_CREATE	Users-Locations. Creation Date
ULN_CREATEBY	Users-Locations. Created By
ULN_DATA_LEVEL	Users-Locations. System Level
ULN_NOTE	Users-Locations. Note
ULN_ROLE	Users-Locations. Role
ULN_ROWVER	Users-Locations. Row Version
ULN_UPDATE	Users-Locations. Update Date
ULN_UPDATEBY	Users-Locations. Updated By
UNM_CREATE	Process Definition. Tasks. Undo Tasks. Creation Date
UNM_CREATEBY	Process Definition. Tasks. Undo Tasks. Created By
UNM_DATA_LEVEL	Process Definition. Tasks. Undo Tasks. Sytem Level
UNM_NOTE	Process Definition. Tasks. Undo Tasks. Note
UNM_ROWVER	Process Definition. Tasks. Undo Tasks. Row Version
UNM_UPDATE	Process Definition. Tasks. Undo Tasks. Update Date
UNM_UPDATEBY	Process Definition. Tasks. Undo Tasks. Updated By
UPDATEBY_FIRST_NAME	Process Instance. Task Information. Updated By First Name
UPDATEBY_LAST_NAME	Process Instance. Task Information. Updated By Last Name
UPDATEBY_USER_KEY	Process Instance. Task Information. Updated By User Key
UPDATEBY_USER_LOGIN	Process Instance. Task Information. Updated By User ID
UPY_NOTE	System Configuration- Users. Note
UPY_ROWVER	System Configuration- Users. Row Version
UPY_CREATE	System Configuration- Users. Creation Date
UPY_CREATE	Users-Client Properties. Creation Date
UPY_CREATEBY	System Configuration- Users. Created By
UPY_CREATEBY	Users-Client Properties. Created By
UPY_DATALEVEL	Users-Client Properties. System Level
UPY_DATA_LEVEL	System Configuration- Users. System Level
UPY_NOTE	Users-Client Properties. Note
UPY_ROWVER	Users-Client Properties. Row Version
UPY_UPDATE	System Configuration-Users. Update Date
UPY_UPDATE	Users-Client Properties. Update Date
UPY_UPDATEBY	System Configuration- Users. Updated By
UPY_UPDATEBY	Users-Client Properties. Updated By
USERMANAGER	Users. Manager Login
USERMANAGERFIRSTNAME	Users. Manager First Name
USERMANAGERLASTNAME	Users. Manager Last Name
USG_CREATE	Groups-Users. Creation Date
USG_CREATEBY	Groups-Users. Created By
USG_DATA_LEVEL	Groups-Users. System Level
USG_NOTE	Groups-Users. Note
USG_PRIORITY	Groups-Users. Priority
USG_ROWVER	Groups-Users. Row Version
USG_UPDATE	Groups-Users. Update Date
USG_UPDATEBY	Groups-Users. Updated By
USR_CREATE	Users. Creation Date
USR_CREATEBY	Users. Created By
USR_DATA_LEVEL	Users. System Level
USR_DEPROVISIONED_DATE	Users. Deprovisioned Date
USR_DEPROVISIONING_DATE	Users. Deprovisioning Date
USR_DISABLED	Users. Disable User
USR_DISABLED_BY_PARENT	Users. Disabled By Parent
USR_EMAIL	Users. Email
USR_EMP_TYPE	Users. Role
USR_END_DATE	Users. End Date
USR_FIRST_NAME	Users. First Name
USR_FSS	Users. Identity
USR_KEY	Users. Key
USR_LAST_NAME	Users. Last Name
USR_LOCKED	Users. Lock User
USR_LOGIN	Users. User ID
USR_MANAGER_KEY	Users. Manager Key
USR_MIDDLE_NAME	Users. Middle Name
USR_NOTE	Users. Note
USR_PASSWORD	Users. Password
USR_PROVISIONED_DATE	Users. Provisioned Date
USR_PROVISIONING_DATE	Users. Provisioning Date
USR_PWD_CANT_CHANGE	Users. Password Cannot Change
USR_PWD_EXPIRE_DATE	Users. Password Expiration Date
USR_PWD_MUST_CHANGE	Users. Password Must Change
USR_PWD_NEVER_EXPIRES	Users. Password Never Expires
USR_PWD_WARN_DATE	Users. Password Warning Date
USR_ROWVER	Users. Row Version
USR_START_DATE	Users. Start Date
USR_STATUS	Users. Status
USR_TYPE	Users. Xellerate Type
USR_UPDATE	Users. Update Date
USR_UPDATEBY	Users. Updated By
USR_UPDATE_AD	Users. AD Reference
UWP_CREATE	Groups-Form Information. Creation Date
UWP_CREATEBY	Groups-Form Information. Created By
UWP_DATA_LEVEL	Groups-Form Information. System Level
UWP_NEST_LEVEL	Groups-Form Information. Nesting Level
UWP_NOTE	Groups-Form Information. Note
UWP_PARENT_KEY	Groups-Form Information. Parent Key
UWP_ROWVER	Groups-Form Information. Row Version
UWP_SEQUENCE	Groups-Form Information. Sequence
UWP_UPDATE	Groups-Form Information. Update Date
UWP_UPDATEBY	Groups-Form Information. Updated By
WIN_CREATE	Form Information. Creation Date
WIN_CREATEBY	Form Information. Created By
WIN_DATA_LEVEL	Form Information. System Level
WIN_DEFAULT_REPORT	Form Information. Default Report
WIN_GRAPHIC_FILENAME	Form Information. Graphic Filename
WIN_GRAPHIC_NAME	Form Information. Graphic Name
WIN_HELP_URL	Form Information. Context Sensitive Help URL
WIN_JSP_HELP_URL	Form Information. JSP Help URL
WIN_JSP_NAME	Form Information. JSP Name
WIN_KEY	Form Information. key
WIN_NOTE	Form Information. Note
WIN_ROWVER	Form Information. Row Version
WIN_UPDATE	Form Information. Update Date
WIN_UPDATEBY	Form Information. Updated By
WIN_WINDOW_DESC	Form Information. Description
WIN_WINDOW_NAME	Form Information. Class Name
WIN_WIZARD_FORM	Form Information. Wizard Form
_ROWVER	Reconciliation Rules. Rule Element. Row Version
acn_role	Organization. Contacts. Role
err_action	Conditions. Action
err_action	Conditions. Severity
lkv_decoded	User Defined Field Definition. DataType
lkv_encoded	Form Information. Type
lkv_encoded	User Defined Field Definition. FormName
obj_type	Objects. Object Type
orf_fieldtype	Objects. Reconciliation Fields. Type
pof_field_name	Policies. PolicyDefinitions. FieldName
req_obj_action	Request. Application Request Type
req_priority	Request. Request Priority
rml_target_type	Task Definition. Assignment Rules. Type
rqc_type	Request Comments. Type
rre_operator	Reconciliation Rules. Rule Element. Operator
rre_transform	Reconciliation Rules. Rule Element. Transform
rul_subtype	RulesDefinition. SubType
rul_type	RulesDefinition. Type
sch_action	Contacts. User Tasks. Action
sdc_field_type	Structure Utility. AdditionalColumns. FieldType
sdc_variant_type	Structure Utility. AdditionalColumns. VariantType

To extract the Metadata, you may use the following query statement:

SELECT lku_field, lku_type_string_key FROM lku WHERE lku_type='f' ORDER BY lku_field;

Creating a Task Assignment Adapter

2008-08-29T11:56:00.006-04:00

There are 2 values that you need to specify in Task assignment adapter.

"Adapter return value for Key type" :-

user

group

"Adapter return value for Key" :-

What does OBSSOCookie Contain ?

2008-08-29T10:11:00.000-04:00

Access Server generates a session token with a URL that contains the ObSSOCookie. Single sign-on works when the cookie is used or subsequent authorizations in lieu of prompting the user to supply authorization credentials. When the cookie is generated, part of the cookie is used as an encrypted session token.

The encrypted session token contains the following information:

• The distinguished name (DN) of the authenticated user
• The level of the authentication scheme that authenticated the user
• The IP address of the client to which the cookie was issued
• The time the cookie was originally issued
• The time the cookie was last updated

If the user has not been idle, the cookie is updated at a fixed interval to prevent the session from timing out. The update interval is one-fourth of the length of the idle session timeout parameter.

Unencrypted ObSSOCookie data includes:

• Cookie expiry time
• The domain in which the cookie is valid
• An optional flag that determines if the cookie can only be sent via SSL

Can OBSSO Cookie be read ?

2008-08-29T10:00:00.001-04:00

The ObSSOCookie is a secure mechanism for user authentication. When NetPoint generates the cookie, an MD-5 hash is taken of the session token. When the ObSSOCookie is used to authenticate a user, the MD-5 hash is compared with the original cookie contents to be sure no one has tampered with the cookie.

MD-5 is a one-way hash, so it cannot be unencrypted. The Access Server does the comparison by hashing the session token again and comparing the output with the hash of the token already present in the cookie. If the two hashes do not match, the cookie is corrupt. The system relies on the fact that if someone tampers with the session token, the hashes will not match.

Please Note: The single sign-on cookie does not contain user credentials such as username and password.

MIIS - MA Connector Space Dump

2008-08-28T15:53:00.003-04:00

To take a connector space dump from any Management Agent, you may use the csexport.exe utility in the bin folder of the install (Generally - C:\Program Files\Microsoft Identity Integration Server\bin).

Suppose you have a HR Management Agent called HRSHADOW. Use the following command in the bin folder to export the connector space to xml file. Note: You may use different variations of this utility to export connector space with different statuses.

C:\Program Files\Microsoft Identity Integration Server\bin>csexport.exe HRSHADOW HR_CS_DATA.XML

Finding OIM Task Key in a Process Definition

2008-08-28T15:35:00.003-04:00

Finding OIM Task Key in a Process Definition in OIM 9.1 is possible through a new API:

Thor.API.Operations.TaskDefinitionOperationsIntf --> getTaskDetails()

Finding an OIM Task Key in a Process Definition in PRE- OIM 9.1 releases can be achieved using the following sql:

String sql = "SELECT m.mil_key FROM mil m, pkg p, tos t WHERE m.mil_name = '" + taskName + "' AND m.TOS_KEY = t.TOS_KEY AND t.PKG_KEY = p.PKG_KEY AND p.pkg_name='"+ processname + "'";

Update Active Directory Password with Code

2008-08-28T10:04:00.003-04:00

import java.util.*;
import javax.naming.*;
import javax.naming.directory.*;
import javax.naming.*;
import javax.naming.directory.*;
import javax.naming.ldap.*;
import java.util.*;
import java.security.*;

public class ADUpdatePwd

{

private DirContext ldapContext;

private String baseName = ",ou=People,dc=bhatiacorp,dc=com";

private String serverIP = "127.0.0.1";

public void updatePassword(String username, String password) {
try {
String quotedPassword = "\"" + password + "\"";
char unicodePwd[] = quotedPassword.toCharArray();
byte pwdArray[] = new byte[unicodePwd.length * 2];
for (int i = 0; i < unicodePwd.length; i++) {
pwdArray[i * 2 + 1] = (byte) (unicodePwd[i] >>> 8);
pwdArray[i * 2 + 0] = (byte) (unicodePwd[i] & 0xff);
}

ModificationItem[] mods = new ModificationItem[1];
mods[0] = new ModificationItem(DirContext.REPLACE_ATTRIBUTE, new BasicAttribute("UnicodePwd", pwdArray));
ldapContext.modifyAttributes("cn=" + username + baseName, mods);
} catch (Exception e) {
System.out.println("ADUpdatePwd :: Update Password Error :: " + e);

}
}

private void setContext(String ldaphost, String ldapport, String adminID, String adminpassword, boolean useSSL) {
String providerurl = ldaphost + ":" + ldapport;
if (ldapport == "") {
ldapport = "636";
}
try {
Hashtable env = new Hashtable();
env.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, providerurl);
if (useSSL == true) {
// if SSL is used - use can use ssl enabled ldaphost
// eg. "ldaps://localhost:636"
// else
// eg. "ldap://localhost:636"
env.put(Context.SECURITY_PROTOCOL, "ssl");
}
env.put(Context.SECURITY_AUTHENTICATION, "simple");
env.put(Context.SECURITY_PRINCIPAL, adminID);
env.put(Context.SECURITY_CREDENTIALS, adminpassword);
ldapContext = new InitialDirContext(env);
} catch (Exception ex) {
ex.printStackTrace();
}
}

public ADUpdatePwd() {
try {
setContext("ldaps://serverIP", "636", "CN=Administrator"+baseName, "p@ssw0rd1~", true);
} catch (Exception e) {
System.out.println("ADUpdatePwd :: Error :: " + e);
e.printStackTrace();

}
}

public static void main(String[] args) {
try {
/*
* Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider()); the keystore that holds trusted root certificates
* System.setProperty("javax.net.ssl.trustStore", "c:\\myCaCerts.jks");
* System.setProperty("javax.net.debug","all");
*/

ADUpdatePwd c = new ADUpdatePwd();
c.updatePassword("Bhatiar", "p@ssw0rd3");
} catch (Exception ex) {
ex.printStackTrace();
}
}
}

OIM Tables Descriptions (9.0.1.1)

2008-08-21T13:36:00.015-04:00

The following table lists the purpose of each table within OIM.

Note: Custom Tables are created for user defined Object / Process Forms.

TABLE NAME IN OIM	DESCRIPTION OF TABLE
AAD	List To Define The Administrators For Each Organization And Their Delegated Admin Privileges
AAP	Table for storing Resource - Organization level parameter Values
ACP	ACP - Link Table That Holds Reference To ACT And PKG Tables, Table That Defines The Objects (Resources) Allowed For A Particular Organization
ACS	Link Table for Account Table(ACT) and Server Table(SVR)
ACT	Defines information about all organizations created through Xellerate
ADJ	Contains the Java API information for the constructor with parameters and method name with parameters chosen for an adapter task of type JAVA, UTILITY, TAME,REMOTE, or XLAPI.
ADL	Contains the all of the necessary parameters for an adapter task of type IF, ELSE IF,FOR, WHILE, SET, and VARIABLE tasks. These type of tasks are known as LOGICTASKS
ADM	Data mapping between parameters input/output parameters and source/sink
ADP	Defines an adapter created through the Adapter Factory
ADS	Database,schema and procedure name selections which define a stored procedure adaptertask
ADT	Defines a task attached to an adapter
ADU	Contains the web service and method chosen for a task of the Adapter Factory
ADV	Adapter variable table contains variables that have been created for specific adapters.
AFM	Links an adapter with a form
AGS	Holds the definition of organization/contact groups
AOA	Contains the OpenAdapter property file for OpenAdapter
APA	To store attestation process administrators
APD	To store attestation Process definition
APT	To store the attestation tasks
ARS	Contains custom response codes for 'Process Task' Adapters only
ATD	To store entitlement details for each attestation task
ATP	Defines input and output parameters for the constructor and method of an adapter taskof type JAVA, UTILITY, TAME, REMOTE, and XLAPI
ATR	To store attestation requests
ATS	Stores which services or can be ordered by which organizations and which rates apply
AUD	Define the Auditors
AUD_JMS
CRT	Trusted Certificate Information
DAV	Stores the runtime data mappings for 'Entity' & 'Rule Generator' adapters. The data source being an Xellerate form or child table,or a user defined process form.
DEP	Dependencies among Tasks Within A Workflow Process
DOB	Data Resource definition consisting of the fully qualified class name of the dataobject
DVT	Defines the one to many relationship between Data Resources and Event Handlers (this includes adapters)
EIF	Export Import Files. Each row contains one single file used in export/import operation. For export there is only one file
EIH	Export Import History. Each row represents one Data Deployment Management session.
EIL	DB Based lock for export operation. Used to make sure only one user can import at atime. This is currently not managed through data objects
EIO	Export Import Objects. Each row represents one object exported/imported
EIS	Substitutions used during import process
EMD	Core --Email Definition Information Table That Holds The Email Template Definitions
ERR	Error codes
ESD	Encrypted columns not within the bounds of the SDK
EVT	Defines event handlers by providing a process and class name. In addition the scheduling time of when the event handler can execute is set to pre (insert, update, delete) or post (insert, update, delete)
FUG	List to define the administrators for each user defined object in the 'StructureUtility' form or for each user defined field in the 'User Defined FieldDefinition' form
GPG	List to define the (nested) group members of User Group in the 'User Group' form.
GPP	List to define the Administrators and their delegated admin rights over a User Group
GPY	Joins Properties (PTY) and Groups (UGP).
IEI	Table where all the imports and exports are defined
LAY	Table where the layouts are defined for the various imports and exports
LIT	Import/export table.
LKU	Lookup definition entries
LKV	Lookup values
LOB	Import/export table.
LOC	Holds information about locations
MAP	XML MapSchema Information
MAV	Stores the runtime data mappings for 'Process Task' adapters. The data source being a process form, Location, User, Organization, Process, IT Resource, orLiteral data.
MEV	E-mail notification events
MIL	Holds information about tasks of a process
MSG	Defines the user groups that have permission to set the status of a process task.
MST	Task Status And Object Status Information. Holds All The Task Status To Object Status Mappings
OBA	Object Authorizer Information
OBD	Object Dependencies
OBI	Object Instance Information
OBJ	Resource Object definition information.
ODF	Holds Object To Process Form Data Flow Mappings.
ODV	Object Events/Adapters Information
OIO	Object Instance Request Target Organization Information.
OIU	Object Instance Request Target User Information.
OOD	Object Instance Request Target Organization Dependency Information.
ORC	This Entity Holds The Detail On Each Order. This Could Be Considered The Items Section Of An Invoice. This Entity Is The Instance Of A Particular Process
ORD	Holds information that is necessary to complete an order regardless of a processbeing ordered
ORF	Resource Reconciliation Fields
ORR	Object Reconciliation Action Rules
OSH	Task Instance Assignment History
OSI	Holds information about tasks that are created for an order
OST	Object Status Information
OUD	Object Instance Request Target User Dependency Information. Holds The Dependency Between Different Resource Instances Provisioned To A User.
OUG	List to define the administrators for each Resource
PCQ	Holds the challenging questions and answers for a user
PDF	Package data flow table holds the data flow relationships between packages
PHO	Holds all communication addresses for this contact -- e.g., contact telephone numbers,fax numbers, e-mail, etc.
PKD	Package dependency table holds the dependency relationships between child packages of a parent package
PKG	Consists of names and system keys of service processes, which consist of a group ofservices from the TOS table. Defines a Process in Xellerate.
PKH	Package Hierarchy Table Holds The Parent-child Relationships Between Processes
POC	Stores values for the child tables of the Object/Process form of a resource being provisioned by an access policy
POF	Policy field table holds the field value pairs that constitute the definition of apolicy
POG	Join table between Policy and User Groups, Specifies the groups to whom an access policy will apply.
POL	Policy Table Holds A Policy, Defines An Access Policy In The System
POP	Policy Package Join Table Holds The Packages That A Particular Policy Orders For User, Defines Which Resources Will Be Provisioned Or Denied For A Particular Access Policy.
PRF	Process Reconciliation Field Mappings
PRO	Defines a process name, scheduling frequency, and priority. A process is made up of oneor more tasks
PTY	Client Properties Table
PUG	List to define The Administrators And Their Delegated Admin Rights For Each Process.
PWR	Table forPassword Rule Policies
PXD	Table that holds the list of all Proxies Defined
QUE	Administrative queues definition
QUM	Administrative queue members
RAV	Stores the runtime data mappings for 'Pre-populate' adapters. The data source being an Xellerate form or child table, or a user defined form
RCA	Reconciliation Event Organizations Matched
RCB	Reconciliation Event Invalid Data
RCD	Reconciliation Event Data
RCE	Reconciliation Events
RCH	Reconciliation Event Action History
RCM	Reconciliation Event Multi-Valued Attribute Data
RCP	Reconciliation Event Processes Matched
RCU	Reconciliation Event Users Matched
REP	Table that contains all information about reports in the system
REQ	This table holds request information
RES	This table is used to stored adapter resources entered by the user.
RGM	Table for Response Code Generated Milestones
RGP	Rules To Apply To A User Group, Defines The Auto-group Membership Rules Attached To AParticular Group.
RGS	Defines all known registries. These are used by Web Service tasks in an Adapter to communicate with a web service
RIO	Request Organizations Resolved Object Instances
RIU	Request Users Resolved Object Instances
RLO	This table contains directory URLs which are referenced by Adapter Factoryjar/class files.
RML	Rules To Apply To Task, Defines The Task Assignment Rules Attached To A Process Task.
ROP	Rules To Apply To An Object-process Pair, Defines The Process Determination Rules Attached To A Resource Object.
RPC	Reconciliation Event Process Child Table Matches
RPG	Link table between Group table and Report Table. Specifies which group has accessto which reports
RPP	Parameters passed to report.
RPT	Stores information related to the creation of reports
RPW	Rules To Apply To A Password Policy, Defines The Policy Determination Rules Attached To A Password Policy.
RQA	Request target organization information.
RQC	Request comment information
RQD	Contains self-registration request data for web admin.
RQE	Request administrative queues
RQH	Requeststatus history
RQO	Request object information.
RQU	Request object target user information
RQY	Request Organizations Requiring Resolution
RQZ	Request Users Requiring Resolution
RRE	Reconciliation User Matching Rule Elements
RRL	Reconciliation User Matching Rules
RRT	Reconciliation User Matching Rule Element Properties
RSC	Defines the All The Possible Response Code For A Process Task.
RUE	Defines the Elements In A Rule Definition.
RUG	List to define the administrators for each Request
RUL	Rule definitions
RVM	Holds Recovery Milestones
SCH	Holds specific information about an instance of a ask such as its status orscheduled dates
SDC	Column metadata.
SDH	Meta-Table Hierarchy.
SDK	User define data object meta data definition
SDL	SDK version labels
SDP	User defined column properties
SEL	Data Object Permissions For Groups On A Specified Data object
SIT	The SIT table contains information about sites. Sites are subsets of locations.
SPD	IT Resource parameter definition
SRE	Defines Which Pre-populate Rule Generator Will Run For A Field Of User Defined DataObject.
SRP	Should be replaced by the rate table from a billing system. Here it holdspecific rates for specific services.
SRS	IT Resource - IT Resource join
STA	Status Codes
SUG
SVD	IT Resource type definition
SVP	IT Resource property definition
SVR	IT Resource instance definition
SVS	IT Resource - Site Join
TAP	Holds parameter values for a task, which is an instantiation of Valid Task,i.e. value for parameter Company Name, etc.
TAS	Holds instances of Valid Task. Examples of Valid Tasks would be reports, imports, etc. Valid TaskParameters indicate what parameters can be assassigned to an instance of a task, i.e
TDV	Used by event manager/data objects, joins data objects, types of service, and events
TLG	Keeps logof SQL transactions.
TMP	Indicates which tasks are in a process. Tasks are defined in table; this way, one task can be in many processes.
TOD	To do list settings table.
TOS	Holds information about a process
TSA	Stores initialization params (name/value pairs) forscheduler tasks
TSK	Scheduler task definition information
UDP	User-defined field table
UGP	Defines a group of users
UHD	User Policy Profile History Details table
ULN	This table hold UHD allow / deny list
UNM	"UnDoMilestone" Feature
UPA
UPA_FIELDS	Stores changes only for user profile audit history in de-normalized format
UPA_GRP_MEMBERSHIP	Stores groups membership history in de-normalized format
UPA_RESOURCE	Stores user profile resource history in de-normalized format
UPA_USR	Stores user profile history in de-normalized format
UPD	User Policy Profile Details table
UPH	User Policy Profile History table
UPL	User-defined field table
UPP	User Policy Profile table
UPT	User-defined field table
UPY	Joins Properties (PTY) and User (USR) tables.
USG	This table stores which users are in which groups.
USR	Stores all information regarding a user.
UWP	Window sequence, nesting in CarrierBase explorer for each user group.
VTK	Defines automation task types such as reports, imports, and exports.
VTP	Valid Task Parameters. Indicates which parameters can be defined for an instance of a task.
WIN	Windows table: Windows keys, descriptions, and class names.
XSD	This table holds Xellerate System Data

Reference: Oracle DD

Monitoring OIM Apps / Listeners - Automatic Startups

2008-07-11T23:34:00.003-04:00

The code here checks the Peoplesoft listener in OC4J environment that keep crashing unexpectedly in OIM 903 for some reason. The XML messages sent from PeopleSoft gets queued and won't reach OIM. The listener servlet throws the HTTP 500 Internal Server error. So, to restart the listener automatically, we can use the following code. You can set this code to execute at specific intervals to recheck and recycle the app, if in case it is down.

==========================================
PSFTListenerUtility.java
==========================================
import java.io.*;
import java.net.*;
import java.util.HashMap;
import java.util.Iterator;
import java.util.logging.Level;
import java.util.logging.Logger;
import com.thortech.xl.scheduler.tasks.SchedulerBaseTask;

public class PSFTListenerUtility extends SchedulerBaseTask {

private boolean stop;

public PSFTListenerUtility() {
super("PSFTListenerUtility");
stop = false;
}

@Override
public void execute() {

HashMap myMap = new HashMap();
myMap.put("http://idmdev.bhatiacorp.com:7777/peopleSoftUsrHRM/do/peopleSoftAction", "peopleSoftUsrHRM");
myMap.put("http://idmdev.bhatiacorp.com:7777/peopleSoftUsrCRM/do/peopleSoftAction", "peopleSoftUsrCRM");
myMap.put("http://idmdev.bhatiacorp.com:7777/peopleSoftUsrPRT/do/peopleSoftAction", "peopleSoftUsrPRT");

Iterator iterator = myMap.keySet().iterator();
while (iterator.hasNext()) {
Object key = iterator.next();
String temp = key.toString();
try {
URL url = new URL(temp);
boolean isAlive = getURLOutput(url);
if (!isAlive) {
try {
//restart
String applicationName = (String) myMap.get(key);
logger.debug(" --- REBOOTING PEOPLESOFT LISTENER --- ");
logger.debug(" --- LISTENER NAME: " + applicationName +" --- ");
Runtime.getRuntime().exec("/opt/oracle/product/t01idm_app/opmn/bin/opmnctl startproc application="+applicationName);
} catch (IOException ex) {
Logger.getLogger(PSFTListenerUtility.class.getName()).log(Level.SEVERE, null, ex);
}
}
// Object val = myMap.get(URL);
} catch (MalformedURLException ex) {
Logger.getLogger(PSFTListenerUtility.class.getName()).log(Level.SEVERE, null, ex);
}
}
}

public boolean getURLOutput(URL url) {
BufferedReader in = null;
String inputLine;
boolean isAlive = true;
try {
in = new BufferedReader(new InputStreamReader(url.openStream()));
//for 500 Internal Server error, an exception will be caught.
in.close();
} catch (IOException ex) {
isAlive = false;
logger.debug("PEOPLESOFT LISTENER NOT RUNNING!");
Logger.getLogger(PSFTListenerUtility.class.getName()).log(Level.SEVERE, null, ex);

}

return isAlive;
}

@Override
public boolean stop() {
logger.debug("Entering PSFTListenerUtility.stop()");
logger.warn(" ---- Stopping current task ---- ");
stop = true;
logger.debug("Exiting PSFTListenerUtility.stop()");
return stop;
}
}

courtesy:Askar Zaidi

Executing VBScripts within OIM

2008-07-07T17:03:00.004-04:00

Some remote systems are not available to be connected directly within OIM (maybe legacy systems, proprietary systems etc.) For such cases, you may be able to execute scripts on the native systems. These scripts come handy to create, say for example, a home directory in a remote system. So, here is the code you may use to create a connector and execute the script. Modify as needed.

============================================
ADCreateHomeDir.java
============================================

public class ADCreateHomeDir {

public String callScript(String script, String username) {
int exitVal = -1;
try {
Runtime rt = Runtime.getRuntime();
String execute = "cscript " + script + " " + username;
Process proc = rt.exec(execute);
InputStream stderr = proc.getErrorStream();
InputStream stdin = proc.getInputStream();
InputStreamReader isr = new InputStreamReader(stderr);
InputStreamReader isr2 = new InputStreamReader(stdin);
BufferedReader br = new BufferedReader(isr);
BufferedReader br2 = new BufferedReader(isr2);
String line = null;
while ((line = br.readLine()) != null) {
System.out.println(line);
}
while ((line = br2.readLine()) != null) {
System.out.println(line);
}
exitVal = proc.waitFor();
System.out.println("Process exitValue: " + exitVal);
} catch (Throwable t) {
t.printStackTrace();
}
return String.valueOf(exitVal);
}
}

If you need help to develop a VBScript, you may use any commerically available tool such as http://www.wintask.com . This even allows to create a script to send keystrokes and mouse events to a gui app. You may use this or any VBScript to be called by remote manager with a simple java connector and pass parameters.

courtesy:Mark Earnest

OIM Startup Script for JBOSS

2008-07-03T12:06:00.002-04:00

Here is a shell script that you can use to bring up OIM quickly from your home folder.

Usage: jboss {start|stop|restart|help}

=====================================
jboss.sh
=====================================
#!/bin/sh

JBOSS_HOME=/opt/jboss
JAVA_HOME=/opt/j2sdk1.4.2_17
JBOSS_USER=oimuser
XL_HOME=/opt/oracle/xellerate
RUN_AS="su -l $JBOSS_USER -c"
XL_OPTS="-DXL.HomeDir=/opt/oracle/xellerate -Djava.awt.headless=true -Djboss.partition.name=$partition_name$"
XL_CMD_START="$JBOSS_HOME/bin/run.sh $XL_OPTS"
XL_CMD_STOP="$JBOSS_HOME/bin/shutdown.sh -S"
JBOSS_CONSOLE=$JBOSS_HOME/server/default/log/console.log

#
# Check if Jboss home directory exists
#
if [ ! -d "$JBOSS_HOME" ]; then
echo JBOSS_HOME does not exist as a valid directory : $JBOSS_HOME
exit 1
fi

#
# Check if XL home directory exists
#
if [ ! -d "$XL_HOME" ]; then
echo XL_HOME does not exist as a valid directory : $XL_HOME
exit 1
fi

if [ -n "$JBOSS_CONSOLE" -a ! -d "$JBOSS_CONSOLE" ]; then
# ensure the file exists
touch $JBOSS_CONSOLE
if [ ! -z "$SUBIT" ]; then
chown $JBOSS_USER $JBOSS_CONSOLE
fi
fi

if [ -n "$JBOSS_CONSOLE" -a ! -f "$JBOSS_CONSOLE" ]; then
echo "WARNING: location for saving console log invalid: $JBOSS_CONSOLE"
echo "WARNING: ignoring it and using /dev/null"
JBOSS_CONSOLE="/dev/null"
fi

start(){
echo "Starting jboss.."

echo XL_CMD_START = $XL_CMD_START
if [ -z "$RUN_AS" ]; then
eval "$XL_CMD_START > ${JBOSS_CONSOLE} 2>&1 &"
else
$RUN_AS "$XL_CMD_START > ${JBOSS_CONSOLE} 2>&1 &"
fi

}

stop(){
echo "Stopping jboss.."

echo XL_CMD_STOP = $XL_CMD_STOP
if [ -z "$RUN_AS" ]; then
eval "$XL_CMD_STOP > ${JBOSS_CONSOLE} 2>&1 &"
else
$RUN_AS "$XL_CMD_STOP > ${JBOSS_CONSOLE} 2>&1 &"
fi

}

case "$1" in
start)
start
;;
stop)
stop
;;
restart)
$0 stop
$0 start
;;
*)
echo "Usage: jboss {start|stop|restart|help}"
exit 1
esac

exit 0

courtesy:Rajesh Mittal

Direct Streaming in VBS

2008-06-20T11:56:00.002-04:00

You can use XMLHTTP in vbs also to do direct streaming.

Dim msXHttp
Set msXHttp = CreateObject("MSXML2.ServerXMLHTTP")
msXHttp.Open "GET", "http://www.google.com/", False
'msXHttp.Open "GET", " http://www.google.com/", False, Username, Password
msXHttp.send

If msXHttp.Status <> 200 Then
'Error
msgbox msXHttp.Status
Else
Dim downloadedData
downloadedData = msXHttp.responseText
msgbox downloadedData
End If

Direct Streaming in ASP

2008-06-20T11:53:00.002-04:00

You can use XMLHttp in ASP as well to create asynchronous requests.

<%
Dim msXHttp

Set msXHttp = Server.CreateObject("MSXML2.ServerXMLHTTP")
msXHttp.Open "GET", "http://www.google.com/", False
'msXHttp.Open "GET", " http://www.google.com/", False, Username, Password
msXHttp.send

If msXHttp.Status <> 200 Then
'Error
Response.Write ("Error")
Else
Dim downloadedData
downloadedData = msXHttp.responseText
Response.Write("Result : "+downloadedData)
End If

%>

Direct Streaming in .NET

2008-06-19T17:39:00.005-04:00

Here is a console application to have web feed directly into your application.By default, the .NET Framework supports URIs that begin with http:, https:, ftp:, and file: scheme identifiers.

===========================
Program.cs
===========================

using System;
using System.IO;
using System.Net;
namespace Extract_Direct_WebData
{
class Program
{
void Execute()
{
try
{
WebClient client = new WebClient();
//If you need to add headers
//client.Headers.Add("user-agent", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.0.3705;)");
Stream data = client.OpenRead("http://www.google.com");
StreamReader reader = new StreamReader(data);
string s = reader.ReadToEnd();
Console.WriteLine(s);
Console.ReadLine();
data.Close();
reader.Close();
}
catch (Exception ex)
{
Console.WriteLine(ex.Message + ex.StackTrace.ToString());
Console.ReadLine();
}
}
static void Main(string[] args)
{
Program p=new Program();
p.Execute();
}
}
}
=========================
Result
=========================

Reset a forgotten admin password on OVD

2008-06-17T15:09:00.001-04:00

Go to OVD_HOME\conf and open server.os_xml

Find the <rootUser> node and replace with following

<rootUser>
<name>cn=admin</name>
<password>{SSHA}qLzLcgk/WLpCE6Z72OmQ7zXfCp4nTvj7</password>
</rootUser>

This will set cn=admin and password as "secret" for super User.

Schedule Task Up

2008-06-11T13:11:00.003-04:00

To make sure if your schedule task is up and running, you may go to http://localhost:8080/xlScheduler

This url will tell you if scheduler is up or not. It should look like this:

requestApprovalDetailTiles.jsp

2008-06-07T00:38:00.003-04:00

This modified file includes the customization that were done to supplement my other blog post http://rajnishbhatia19.blogspot.com/2008/06/oim-customization-for-resource.html . Please refer to that post before you dig through this code.

<%@ taglib uri="/WEB-INF/tld/struts-bean.tld" prefix="bean"%>
<%@ taglib uri="/WEB-INF/tld/struts-html.tld" prefix="html"%>
<%@ taglib uri="/WEB-INF/tld/struts-nested.tld" prefix="nested"%>
<%@ page import="com.thortech.xl.webclient.util.FormField"%>
<%@ page import="com.thortech.xl.webclient.bean.*"%>
<%@ page import="com.thortech.xl.webclient.util.tcMessageResourcesUtil" %>
<%@ page import="com.thortech.xl.webclient.util.*" %>
<%@ page import="Thor.API.Operations.*" %>
<%@ page import="Thor.API.*" %>
<%@ page import="java.sql.*" %>
<%@ page import="javax.sql.*" %>
<%@ page import="javax.naming.*" %>
<%@ page import="java.util.*"%>

<bean:define id="requestApprovalBean" name="requestApprovalDetailForm" property="requestItemListBean" />
<bean:define id="entityKey" name="requestApprovalDetailForm" property="requestKey"/>
<script>
function submitPage(pageAction){
for(var i = 0; i < document.forms[0].elements.length; i++) {
if(document.forms[0].elements[i].name=='approveDeny' && document.forms[0].elements[i].type=='hidden'){
document.forms[0].elements[i].value=pageAction;
}
}
document.forms[0].submit();
return false;
}
function getRequestDetail(htmlFormId, actionClassReference, methodName,
entityKey) {
// loop through all the forms on the page to find a match for the htmlFormId
for(var i = 0; i < document.forms.length; i++) {
if(document.forms[i].id == htmlFormId) {
document.forms[i].action=actionClassReference;
document.forms[i].entityKey.value=entityKey;
for(var j = 0; j < document.forms[i].elements.length; j++) {
if(document.forms[i].elements[j].name=='method'
&& document.forms[i].elements[j].type=='hidden') {
document.forms[i].elements[j].value=methodName;
break;
}
}
document.forms[i].submit();
return false;
}

}
}

</script>

<%!

public String getFormDataByObjectInstanceKey(String objectInstanceKey, String resourceName){
Context ctx = null;
Connection con = null;
PreparedStatement pstmt = null;
ResultSet rs = null;

try{
String [] temp = null;
String name = "";
ctx = new InitialContext();
DataSource ds = (DataSource)ctx.lookup("java:jdbc/xlDS");
con = ds.getConnection();
con.setAutoCommit(false);
String stmt="select upper(lkv_encoded), lkv_decoded from lkv where upper(lkv_encoded)='"+resourceName.toUpperCase()+"' and lku_key =(select lku_key from lku where lku_type_string_key='Lookup.Resources.ObjectForm.FieldMappings') ";
System.out.println(stmt);
pstmt=con.prepareStatement(stmt);

rs=pstmt.executeQuery();
if(rs!=null && rs.next())
{
temp = rs.getString("LKV_DECODED").split(";");
pstmt=null;
rs=null;

String columns="";
System.out.println("------------");
for (int i = 1 ; i < temp.length ; i++) {
if(i>1)
columns=columns+" , ";
columns=columns+temp[i];
System.out.println("temp["+i+"] is "+temp[i]);
}
System.out.println("------------");

stmt="select "+columns+" from "+temp[0]+ " where obi_key= "+objectInstanceKey;
System.out.println(stmt);
pstmt = con.prepareStatement(stmt);
rs = pstmt.executeQuery();
while (rs.next()) {

for (int i = 1 ; i < temp.length ; i++) {
name =name+ " - "+rs.getString(temp[i]);
}
break;
}
System.out.println("out name : "+ name);
}
return name;
}catch(Exception exp){
exp.printStackTrace();
}finally{
try {
if(rs != null)
rs.close();

if(pstmt != null)
pstmt.close();

if(con != null )
con.close();
}catch(Exception ex)
{
ex.printStackTrace();
}
}

return "";

}

public String getResourceDetails(String requestKey, HttpSession session, String row, String resourceName){
String retVal="";
try {

retVal="Error - No Value Found for row : "+row+ " , request key : "+requestKey;
sessionContainer sessioncontainer;
sessioncontainer = (sessionContainer)session.getAttribute("Xellerate.Session");
tcRequestOperationsIntf tcrequestoperationsintf = sessioncontainer.getRequestOperationsIntf();
HashMap hashmap = new HashMap();
hashmap.put("Requests.Key", requestKey);
tcResultSet tcresultset1 = tcrequestoperationsintf.getRequestObjects(Long.parseLong(requestKey));

//System.out.println("First loop - i count = "+tcresultset1.getRowCount());

for(int i=0; i<tcresultset1.getRowCount(); i++)
{
String x=Integer.toString(i);
if ( x.equals(row)) {
tcresultset1.goToRow(i);
String value = tcresultset1.getStringValue("Object Instance.Key");
System.out.println("Object instance key is = " + value);
retVal = getFormDataByObjectInstanceKey(value, resourceName);
//System.out.println(" form data is = " + retVal);
}
}

}catch(Exception ex)
{
ex.printStackTrace();
}
return retVal;
}

%>

<html:form action="/requestApprovalDetail.do" styleId="requestAppDetail">
<TABLE height=66 cellSpacing=0 cellPadding=0 width="100%" border=0>
<TBODY>
<TR>
<TD>
<TABLE>
<TR>
<TD class="PageTitle"><A class="Linktext" href="javascript:getRequestDetail('requestAppDetail','requestDetail.do','<bean:message key="request.requestDetail"/>','<%=entityKey%>')">
<bean:message key="requests.requestDetail.label.pageTitle" /> </A>
</TD>
<TD class="PageTitle"><bean:message bundle="xlDefaultAdmin" key="global.label.twoRightArrows" /></TD>
<TD class="PageTitle"><bean:message key="requests.approvalTasks.label.pageTitle" /></TD>
</TR>
</TABLE>
</TD>
</TR>
<TR>
<TD class=PageTitle height=28><bean:message key="requests.approvalTasks.label.pageTitle" /></TD>
</TR>
<TR>
<TD class=InstructionText align=left height=18><bean:message key="requests.approvalTasks.message.instruction" /></TD>
</TR>
<TR>
<TD width=1044> </TD>
<TR>
<TD width=1044>
<P class=InstructionText align=left><B><bean:message key="request.requestID" /></B>
<A class="Linktext" href="javascript:getRequestDetail('requestAppDetail','requestDetail.do','<bean:message key="request.requestDetail"/>','<%=entityKey%>')"> <nested:write property="requestID" /> </A></P>
</TD>
</TR>
</TBODY>
</TABLE>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td>
</td>
</tr>
</table>

<table width="100%" border="0" cellspacing="0" cellpadding="0" class="backgroundcolor">
<tr>
<td colSpan="3" width="48%" height="20" class="td_tab_header_body_fill">
<span class="SectionTitles"><bean:message key="requests.approvalTasks.label.requestApprovalTasks" /></span>
<td>
</tr>
<tr class="backgroundcolor">
<td solSpan="3">   </td>
</tr>
<tr class="backgroundcolor">
<td>   </td>
<td>
<%
if (hasTask(requestApprovalBean)) {
%>
<TABLE class=object_list_table cellSpacing=1 width="100%" border=0>
<TBODY>
<TR vAlign=top>
<nested:iterate indexId="indexId" id="field" property="requestItemListBean.viewTableForm.formFieldList" length="4">
<TD class=object_list_td_header><nested:message property="labelCode" /></TD>
</nested:iterate>
</TR>
<nested:iterate indexId="rowId" id="row" property="requestItemListBean.viewTableForm.formList">
<TR>
<nested:iterate id="column" indexId="columnId" name="row" length="5">
<%
if((columnId.intValue() != 3)&&(columnId.intValue() != 2)){
%>
<TD class=object_list_td_align_center vAlign=center>
<%
if (columnId.intValue() == 4){
%>
<html:multibox name="requestApprovalDetailForm" property="approvalDenyList" disabled="<%=getCheckBoxStatusValue(rowId, requestApprovalBean,request)%>">
<nested:write name="column" />
</html:multibox>
<%
}
else {
%>
<%=getValue(rowId, columnId, requestApprovalBean,column)%>
<%
}
%>
</TD>
<%
}
else {
if(columnId.intValue() == 2){
%>
<TD class=object_list_td_align_center vAlign=center>
<%=getValue(rowId, columnId, requestApprovalBean,column)%>
<%
}
else {
%>

</TD>
<%
}
}
%>
</nested:iterate>
</TR>
</nested:iterate>
<nested:iterate indexId="rowId" id="row" property="requestItemListBean.viewTableForm.formList" length="1">
<TR>
<nested:iterate id="column" indexId="columnId" name="row" length="4">
<TD class=object_list_td_align_center vAlign=center>
<%
if (columnId.intValue() == 3) {
%>
<input type="hidden" name="method" value="<bean:message key="request.requestAssignDetail"/>">
<input type="hidden" name="approveDeny" value="">
<input type="submit" class="Commandbutton" name="method" value="<bean:message key="approvals.button.approve"/>" onclick="return submitPage('approve')" />
<input type="submit" class="Commandbutton" name="method" value="<bean:message key="approvals.button.deny"/>" onclick="return submitPage('deny')" /> <input type="submit" class="Commandbutton" name="method" value="<bean:message key="approvals.button.reassign"/>" onclick="return submitPage('reassign')" />
<html:hidden property="entitySelected" value="TasksUser" />
<html:hidden property="userAction" value="new" />
<%
}
%>
</TD>
</nested:iterate>
</TR>
</nested:iterate>
</TABLE>
</td>
<td>   </td>
</tr>
<tr class="backgroundcolor">
<td solSpan="3">   </td>
</tr>
<%
}
else {
%>
<TR>
<TD class=InstructionText align=left height=18><bean:message key="requests.approvalTasks.label.noApprovalTasks" /></TD>
</TR>
</table>
<%
}
%>

<bean:define id="objectListBean" name="requestApprovalDetailForm" property="resourceList"/>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
<tr>
<td>  <td>
</tr>
</table>
<%
if(hasApprovalTask(objectListBean)){
%>
<table width="100%" border="0" cellspacing="0" cellpadding="0" class="backgroundcolor">
<tr>
<td colSpan="3" width="48%" height="20" class="td_tab_header_body_fill">
  <span class="SectionTitles"><bean:message key="requests.approvalTasks.label.resourceApprovalTasks" /></span>
<td>
</tr>
<%
int index = 0;
%>
<nested:iterate indexId="indexId" id="resource" property="resourceList">
<tr class="backgroundcolor">
<td solSpan="3">   </td>
</tr>
<tr class="backgroundcolor">
<td>   </td>
<td>
<%// Integer indexIdInteger = new Integer(indexId);
//System.out.println("New thing");
//System.out.println("Index ID " + indexId);
//System.out.println("Integer indexIdInteger"+ indexIdInteger);
%>
<nested:iterate id="resourceName" name="requestApprovalDetailForm" property="resourceNameList" length="1" offset="<%=indexId.toString()%>">
<% String resName= (String) resourceName; %>
<P class=InstructionText align=left><B><nested:write name="resourceName"/> <%= getResourceDetails(entityKey.toString(), session,indexId.toString(), resName) %></B></P>
</nested:iterate>
</td>
<td>   </td>
</tr>
<tr class="backgroundcolor">
<td>   </td>
<td>
<TABLE class=object_list_table cellSpacing=1 width="100%" border=0 >
<TBODY>
<%
if(hasApprovalTask(objectListBean, index)){
%>
<TR vAlign=top>
<nested:iterate id="field" name="resource" property="viewTableForm.formFieldList" length="4">
<TD class=object_list_td_header>
<nested:message property="labelCode"/>
</TD>
</nested:iterate>
</TR>
<nested:iterate indexId="rowId" id="row" name="resource" property="viewTableForm.formList" >
<TR>
<nested:iterate id="column" indexId="columnId" name="row" length="5">
<%
if((columnId.intValue() != 3)&&(columnId.intValue() != 2)){
%>
<TD class=object_list_td_align_center vAlign=center>
<%
if (columnId.intValue() == 4){
%>
<html:multibox name="requestApprovalDetailForm" property="approvalDenyList" disabled="<%=getCheckBoxStatusValue(rowId, resource,request)%>">
<nested:write name="column" />
</html:multibox>
<%
}
else {
%>
<%=getValue(rowId,columnId,resource,column)%>
<%
}
%>
</TD>
<%
}
else {
if(columnId.intValue() == 2){
%>
<TD class=object_list_td_align_center vAlign=center>
<%=getValue(rowId,columnId,resource,column)%>
<%
}
else {
%>

</TD>
<%
}
}
%>
</nested:iterate>
</TR>
</nested:iterate>
<nested:iterate indexId="rowId" id="row" property="viewTableForm.formList" length="1">
<TR>
<nested:iterate id="column" indexId="columnId" name="row" length="4">
<TD class=object_list_td_align_center vAlign=center>
<%
if (columnId.intValue() == 3) {
%>
<input type="hidden" name="method" value="<bean:message key="request.requestAssignDetail"/>">
<input type="hidden" name="approveDeny" value="">
<input type="submit" class="Commandbutton" name="method" value="<bean:message key="approvals.button.approve"/>" onclick="return submitPage('approve')" />
<input type="submit" class="Commandbutton" name="method" value="<bean:message key="approvals.button.deny"/>" onclick="return submitPage('deny')" /> <input type="submit" class="Commandbutton" name="method" value="<bean:message key="approvals.button.reassign"/>" onclick="return submitPage('reassign')" />
<html:hidden property="entitySelected" value="TasksUser" />
<html:hidden property="userAction" value="new" />
<%
}
%>
</TD>
</nested:iterate>
</TR>
</nested:iterate>
</TABLE>
</td>
<td>   </td>
</tr>
<tr class="backgroundcolor">
<td solSpan="3">   </td>
</tr>
<%
}
else{
%>
<TABLE height=66 cellSpacing=0 cellPadding=0 width="100%" border=0>
<TBODY>
<TR>
<TD class=InstructionText align=left height=18><bean:message key="requests.approvalTasks.label.noApprovalTasks" />
</TD>
</TR>
</TBODY>
</TABLE>
<%
}
index++;
%>
</nested:iterate>
</table>
<%
}
%>
<input type="hidden" name="method" value=""/>
<input type="hidden" name="entityKey" value=""/>
<html:hidden property="requestKey"/>
<html:hidden property="requestID"/>

</html:form>

<%!
public String getValue(Integer rowId, Integer columnId,
Object itemListBean, Object columnValueBean) {

String returnValue = (String) columnValueBean;

int rowIdx = rowId.intValue();
int columnIdx = columnId.intValue();
tcItemListBean itemList = (tcItemListBean) itemListBean;
String columnValue = (String) columnValueBean;

FormField formField = (FormField) itemList.getViewTableForm()
.getFormFieldList().get(columnIdx);
String type = formField.getType();
String assignType = ((String[]) itemList.getViewTableForm()
.getFormList().get(rowIdx))[3];
if (type != null) {
if (type.equals("IMG")) {

if (returnValue.equals("C")) {
returnValue = "<img src='images/checkw.gif'/>";
} else if (returnValue.equals("R")) {
returnValue = "<img src='images/stoppedw.gif'/>";
} else if (returnValue.equals("W")) {
returnValue = "<img src='images/pausedw.gif'/>";
} else if (returnValue.equals("P")) {
returnValue = "<img src='images/runningtrans.gif'/>";
}
} else if (type.equals("IMG_VALUE")) {
if (columnValueBean != null) {
if (assignType.equals("User")) {
returnValue = "<img src='images/user.gif'/>"
+ returnValue;
} else if (assignType.equals("Group")) {
returnValue = "<img src='images/user_group.gif'/>"
+ returnValue;
} else if (assignType.equals("UserProxy")) {
returnValue = "<img src='images/assign_to_proxy_user.gif'/>"
+ returnValue;
} else if (assignType.equals("GroupProxy")) {
returnValue = "<img src='images/assign_to_proxy_group.gif'/>"
+ returnValue;
}
}
}
}

itemList.getViewTableForm().getFormList().get(rowIdx);
return returnValue;
}
public boolean getCheckBoxStatusValue(Integer rowId,
Object itemListBean, HttpServletRequest request) {

int rowIdx = rowId.intValue();

tcItemListBean itemList = (tcItemListBean) itemListBean;

String status = ((String[]) itemList.getViewTableForm()
.getFormList().get(rowIdx))[1];
String statusAdminRole = ((String[]) itemList.getViewTableForm()
.getFormList().get(rowIdx))[5];

java.util.Locale locale = (java.util.Locale)request.getSession(true).getAttribute(org.apache.struts.Globals.LOCALE_KEY);
org.apache.struts.util.MessageResources message = (org.apache.struts.util.MessageResources) request.getAttribute(org.apache.struts.Globals.MESSAGES_KEY);
if(status.equalsIgnoreCase(tcMessageResourcesUtil.getMessage(message,locale, "global.Lookup.WebClient.Open-Task.Status.Pending")) && statusAdminRole.equalsIgnoreCase("true"))
{
return false;
}
else return true;
}

public boolean hasTask(Object requestApprovalBean) {
boolean hasTask = false;
tcItemListBean itemList = (tcItemListBean) requestApprovalBean;
if (itemList.getViewTableForm().getFormList().size() != 0) {
hasTask = true;
}
return hasTask;

}

public boolean hasApprovalTask(Object objectListBean) {
boolean hasTask = false;

ArrayList resourceList = (ArrayList) objectListBean;
if (resourceList.size() != 0) {
hasTask = true;
}

return hasTask;

}

public boolean hasApprovalTask(Object objectListBean, int objIndex) {
boolean hasTask = false;

ArrayList resourceList = (ArrayList) objectListBean;

tcItemListBean itemList = (tcItemListBean) resourceList.get(objIndex);

ArrayList taskList = itemList.getViewTableForm().getFormList();

if (taskList.size() > 0) {
hasTask = true;
}

return hasTask;

}
%>

OIM Customization for Resource Distinction

2008-06-06T13:21:00.028-04:00

I came across a typical problem in OIM that the approver could not make a distinction of what resource he is approving when multiple resources of the same type are put in one request. Here is the snapshot:

So, here I present you with a customization that would allow your approvers to view the object form details on approval screen. My modifications will allow you to put multiple fields values right on the approval pages seperated by a ";". Please note that the first value will be the object form name itself following by all the multiple fields you want to display the values of. It will even work with Date attribute fields. I have created 2 resources Employee and Manual Application. In one request, I'm going to fill values for these object forms. Then we are going to modify one page in xlWebApp.war file and put in some customization code with a custom lookup. Once this is done, you will get around this issue.

Lets get started and I'll firstly reproduce the problem:

So, now you see how there is no distinction in what resource the approver is approving.

1. Firstly, Backup your xlWebApp.war in some safe place.

2. Copy this xlWebApp.war in some location say : C:\eclipse\workspace

3. Extract this jar file by using the following command:
jar -xvf xlWebApp.war .

4. Next, lets dig right to the file that needs modification. Look for the following file:
C:\eclipse\workspace\xlWebApp\tiles\requestApprovalDetailTiles.jsp

5. Open this file in a Textpad and add the following lines of code:

<%!

public String getFormDataByObjectInstanceKey(String objectInstanceKey, String resourceName){
Context ctx = null;
Connection con = null;
PreparedStatement pstmt = null;
ResultSet rs = null;

try{
String [] temp = null;
String name = "";
ctx = new InitialContext();
DataSource ds = (DataSource)ctx.lookup("java:jdbc/xlDS");
con = ds.getConnection();
con.setAutoCommit(false);
String stmt="select upper(lkv_encoded), lkv_decoded from lkv where upper(lkv_encoded)='"+resourceName.toUpperCase()+"' and lku_key =(select lku_key from lku where lku_type_string_key='Lookup.Resources.ObjectForm.FieldMappings') ";
System.out.println(stmt);
pstmt=con.prepareStatement(stmt);

rs=pstmt.executeQuery();
if(rs!=null && rs.next())
{
temp = rs.getString("LKV_DECODED").split(";");
pstmt=null;
rs=null;

String columns="";
System.out.println("------------");
for (int i = 1 ; i < temp.length ; i++) {
if(i>1)
columns=columns+" , ";
columns=columns+temp[i];
System.out.println("temp["+i+"] is "+temp[i]);
}
System.out.println("------------");

stmt="select "+columns+" from "+temp[0]+ " where obi_key= "+objectInstanceKey;
System.out.println(stmt);
pstmt = con.prepareStatement(stmt);
rs = pstmt.executeQuery();
while (rs.next()) {

for (int i = 1 ; i < temp.length ; i++) {
name =name+ " - "+rs.getString(temp[i]);
}
break;
}
System.out.println("out name : "+ name);
}
return name;
}catch(Exception exp){
exp.printStackTrace();
}finally{
try {
if(rs != null)
rs.close();

if(pstmt != null)
pstmt.close();

if(con != null )
con.close();
}catch(Exception ex)
{
ex.printStackTrace();
}
}

return "";

}

public String getResourceDetails(String requestKey, HttpSession session, String row, String resourceName){
String retVal="";
try {

retVal="Error - No Value Found for row : "+row+ " , request key : "+requestKey;
sessionContainer sessioncontainer;
sessioncontainer = (sessionContainer)session.getAttribute("Xellerate.Session");
tcRequestOperationsIntf tcrequestoperationsintf = sessioncontainer.getRequestOperationsIntf();
HashMap hashmap = new HashMap();
hashmap.put("Requests.Key", requestKey);
tcResultSet tcresultset1 = tcrequestoperationsintf.getRequestObjects(Long.parseLong(requestKey));

//System.out.println("First loop - i count = "+tcresultset1.getRowCount());

for(int i=0; i<tcresultset1.getRowCount(); i++)
{
String x=Integer.toString(i);
if ( x.equals(row)) {
tcresultset1.goToRow(i);
String value = tcresultset1.getStringValue("Object Instance.Key");
System.out.println("Object instance key is = " + value);
retVal = getFormDataByObjectInstanceKey(value, resourceName);
//System.out.println(" form data is = " + retVal);
}
}

}catch(Exception ex)
{
ex.printStackTrace();
}
return retVal;
}

%>

6. Update the following lines of code:

<nested:iterate id="resourceName" name="requestApprovalDetailForm" property="resourceNameList" length="1" offset="<%=indexId.toString()%>">
<% String resName= (String) resourceName; %>
<P class=InstructionText align=left><B><nested:write name="resourceName"/> <%= getResourceDetails(entityKey.toString(), session,indexId.toString(), resName) %></B></P>
</nested:iterate>

7. For your convenience, I am going to put the full modified source in a seperate blog. You may access this whole file here: http://rajnishbhatia19.blogspot.com/2008/06/requestapprovaldetailtilesjsp.html

8. Here is how the object forms looks for these Resource Objects.

9. I have created c.bat and written all the regular useful commands in a batch file. So, you can do the same and run c.bat from your command prompt.

10. Run c.bat and make sure your application is compiled successfully and deployed. Restart your app server.

11. In the design console, add a lookup Lookup.Resources.ObjectForm.FieldMappings that would have a resource name and the field names from the Object Forms.

12. Once you restart the server, here is now how it looks. It displays values from the object form right on the approval screen.

13. If you see the logs, you will see all the queries that are being created and run on the fly against the oim database.

14. When you run this query in the sqlplus, you see the values I am printing on the approval oim customized page.

Playing with System Configurations

2008-06-03T09:39:00.012-04:00

Sometimes you need to modify the system attributes to make OIM behave according to your organizational needs. So, here I show you how to tweak these values. I am going to show you two simple changes and you can play more with it yourself.

1. Here, I am going to change login page to not display "User Registration".

2. Next, I am showing you how to display more custom questions than out of the box. You can obviously do more things from system configuration, like how many correct questions a user has to reply before resetting their credentials.

Additionally:

If you want to change the OIM text or web settings, such as number of results to be displayed during search (like 10 are by default and you can increase them to whatever number you like) or modifying logo etc - you need to modify the xlWebApp. Look into http://rajnishbhatia19.blogspot.com/2008/03/changing-oracle-logo-in-oim.html blog for details. Generally, you may change xlWebAdmin.properties file to incorporated such changes. Look for "global.displayrecordNum.value" and change it from 10 to 20 (or whatever you wish). You may change other text like Previous Next etc also from this file.

Running OIM Design Console from Linux / Unix

2008-06-02T17:30:00.007-04:00

Here are a few scripts you can use to run OIM Design Console from *nux flavors.
You would need to download and setup xming ( http://sourceforge.net/projects/xming ) or cygwin/x.

[root@oim ~]# cd /opt/oracle/xlclient/xlclient/

Create the following 2 script files using vi.

[root@oim xlclient]# vi classpath.sh
CLASSPATH=.:./lib/XellerateClient.jar:./lib/XellerateServer.jar:./ext/jakarta-oro-2.0.8.jar:./ext/bsh.jar:./ext/jhall.jar:./ext/mail.jar:./ext/log4j-1.2.8.jar:./ext/jboss-j2ee.jar:./ext/jboss-jaas.jar:./ext/jbosssx.jar:./ext/jts.jar:./ext/jbossall-client.jar:./ext/concurrent.jar:./ext/getopt.jar:./ext/gnu-regexp.jar:./ext/jacorb.jar:./ext/jboss-client.jar:./ext/jboss-common-client.jar:./ext/jbosscx-client.jar:./ext/jbossha-client.jar:./ext/jboss-iiop-client.jar:./ext/jbossjmx-ant.jar:./ext/jboss-jsr77-client.jar:./ext/jbossmq-client.jar:./ext/jboss-net-client.jar:./ext/jbosssx-client.jar:./ext/jboss-system-client.jar:./ext/jboss-transaction-client.jar:./ext/jcert.jar:./ext/jmx-connector-client-factory.jar:./ext/jmx-ejb-connector-client.jar:./ext/xdoclet-module-jboss-net.jar:./ext/jsse.jar:./ext/jnet.jar:./ext/jmx-rmi-connector-client.jar:./ext/jmx-invoker-adapter-client.jar:./ext/jnp-client.jar:./ext/log4j.jar:./ext/jocache.jar:./lib/xlAPI.jar:./lib/xlLogger.jar:./lib/xlVO.jar:./lib/xlUtils.jar:./lib/xlCrypto.jar:./lib/xlAuthentication.jar:./lib/xlDataObjectBeans.jar:./ext/weblogic.jar:./lib/xlCopyUtil.jar:./ext/xalan.jar:./ext/xerces.jar:./ext/xercesImpl.jar:./ext/oc4jclient.jar:./ext/ejb.jar
export $CLASSPATH

[root@oim xlclient]# vi xlclient.sh
. ./classpath.sh

#export DEBUG_OPTS="-classic -Xdebug -Xnoagent -Djava.compiler=NONE -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=5001 -DXL.RedirectSysOutErrToFile=TRUE -DXL.SysOutErrLogFile=./logs/Client.System.Out.Err.log"

export DEBUG_OPTS="-Xdebug -Xnoagent -Djava.compiler=NONE -Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=5001 -DXL.RedirectSysOutErrToFile=TRUE -DXL.SysOutErrLogFile=./logs/Client.System.Out.Err.log"

export DEBUG_OPTS

#Make sure to remove java.naming.provider.url and read it from the configuration
#once the JNDI Profiles are implemented.
#make sure you are using j2sdk1.4.2_04

/opt/j2sdk1.4.2_16/jre/bin/java $DEBUG_OPTS -DXL.ExtendedErrorOptions=TRUE \
-DXL.HomeDir=. -Djava.security.policy=config/xl.policy \
-Djava.security.manager -Djava.security.auth.login.config=config/auth.conf \
-Dlog4j.configuration=config/log.properties \
-cp $CLASSPATH com.thortech.xl.client.base.tcAppWindow -server server &

[root@oim xlclient]# chmod +x xlclient.sh

[root@oim xlclient]# chmod +x classpath.sh

[root@oim ~]# cd ~

[root@oim ~]# vi launchclient.sh
#!/bin/bash
cd /opt/oracle/xlclient/xlclient
./xlclient.sh &

[root@oim ~]# chmod +x launchclient.sh

[root@oim ~]# ./launchclient.sh

Connecting to SQL Server with JDBC

2008-05-22T19:38:00.006-04:00

All you need is 3 jar files in your classpath

• Msbase.jar
• Msutil.jar
• Mssqlserver.jar

When you install the Microsoft drivers, by default, they go to the following folder:
c:\program files\Microsoft SQL Server 2000 Driver for JDBC

So, going by this, you can set your CLASSPATH the following way:

CLASSPATH=.;c:\program files\Microsoft SQL Server 2000 Driver for JDBC\lib\msbase.jar;c:\program files\Microsoft SQL Server 2000 Driver for JDBC\lib\msutil.jar;c:\program files\Microsoft SQL Server 2000 Driver for JDBC\lib\mssqlserver

Code to connect SQL Server

import java.*;
public class Connect{
private java.sql.Connection con = null;
private final String url = "jdbc:microsoft:sqlserver://";
private final String serverName= "localhost";
private final String portNumber = "1433";
private final String databaseName= "pubs";
private final String userName = "user";
private final String password = "password";
// Informs the driver to use server a side-cursor,
// which permits more than one active statement
// on a connection.
private final String selectMethod = "cursor";

// Constructor
public Connect(){}

private String getConnectionUrl(){
return url+serverName+":"+portNumber+";databaseName="+databaseName+";selectMethod="+selectMethod+";";
}

private java.sql.Connection getConnection(){
try{
Class.forName("com.microsoft.jdbc.sqlserver.SQLServerDriver");
con = java.sql.DriverManager.getConnection(getConnectionUrl(),userName,password);
if(con!=null) System.out.println("Connection Successful!");
}catch(Exception e){
e.printStackTrace();
System.out.println("Error Trace in getConnection() : " + e.getMessage());
}
return con;
}

/*
Display the driver properties, database details
*/

public void displayDbProperties(){
java.sql.DatabaseMetaData dm = null;
java.sql.ResultSet rs = null;
try{
con= this.getConnection();
if(con!=null){
dm = con.getMetaData();
System.out.println("Driver Information");
System.out.println("\tDriver Name: "+ dm.getDriverName());
System.out.println("\tDriver Version: "+ dm.getDriverVersion ());
System.out.println("\nDatabase Information ");
System.out.println("\tDatabase Name: "+ dm.getDatabaseProductName());
System.out.println("\tDatabase Version: "+ dm.getDatabaseProductVersion());
System.out.println("Avalilable Catalogs ");
rs = dm.getCatalogs();
while(rs.next()){
System.out.println("\tcatalog: "+ rs.getString(1));
}
rs.close();
rs = null;
closeConnection();
}else System.out.println("Error: No active Connection");
}catch(Exception e){
e.printStackTrace();
}
dm=null;
}

private void closeConnection(){
try{
if(con!=null)
con.close();
con=null;
}catch(Exception e){
e.printStackTrace();
}
}
public static void main(String[] args) throws Exception
{
Connect myDbTest = new Connect();
myDbTest.displayDbProperties();
}
}

Output

If this code is successful, the output is similar to the following:

Connection Successful!
Driver Information
Driver Name: SQLServer
Driver Version: 2.2.0022

Database Information
Database Name: Microsoft SQL Server
Database Version: Microsoft SQL Server 2000 - 8.00.384 (Intel X86)
May 23 2001 00:02:52
Copyright (c) 1988-2000 Microsoft Corporation
Desktop Engine on Windows NT 5.1 (Build 2600: )

Avalilable Catalogs
catalog: master
catalog: msdb
catalog: pubs
catalog: tempdb

This is an excerpt from microsoft article. Here is the full article:

http://support.microsoft.com/kb/313100

Backup / Restore OIM Oracle DB

2008-05-22T19:19:00.015-04:00

I am showing you the statements to backup and import an OIM Database. Most of the statements are on a linux box. Windows should be same or nearly same. I'll also provide with a few useful OIM / Oracle statements (besides Backup/Restore) that will be handy all the time.

OIM Backup
I always recommended that whenever you reach a logical step in implementing OIM, you should take a backup. By logical step, I mean when your first clean install is completed take one backup. Once your connectors are loaded, take another backup. So on and so forth. Coming straight to the point of backup, here are the statements:
Assuming you have a linux machine, connect with the user that has the privileges to do an export of oracle. Usually user is oracle, but if you have a different one - go with that user.

[oracle@idm ~]$mkdir exports
[oracle@idm ~]$cd exports
[oracle@idm exports]$ export NLS_LANG=AMERICAN_AMERICA.AL32UTF8

Here is the syntax we are going to use to export the database:
exp <schemaOwner>/<schemaOwnerPassword>@<DatabaseSID> file=<filename>.dmp log=<logname>.log full=y

In this example assume:
Schema owner is xladm
Password is xladmpwd
databaseSID is IDM
filename is base_clean_install.dmp
logname is base_clean_install_log.log

So, issue the command like this:

[oracle@aelidm1 exports]$ exp xladm/xladmpwd@IDM file=base_clean_install.dmp log=base_clean_install_log.log full=y

If you need to, you may set your environment variables as follows:
export ORACLE_HOME=/ora/oim_infra
export PATH=$ORACLE_HOME/bin:$PATH
export ORACLE_SID=IDM

or in windows as follows:
set ORACLE_HOME=C:\ora\oim_infra
set PATH=%PATH%;%ORACLE_HOME%;
set ORACLE_SID=IDM

Note: Please change values according to your environment.

And your backup is done.

OIM Restore

Step 1

Firstly, delete user/schema owner & associated datafiles from Enterprise Manager. You may also use the following scripts to achieve it:

sqlplus sys/password@IDM as sysdba
SQL>drop user xladm cascade;
SQL>drop tablespace oim_dev including datafiles and contents;
SQL>drop tablespace oim_dev including contents;
SQL>quit

Note, we are logging in as sys user (with sysdba privilege) to delete the xladm schema owner / user and drop oim_dev tablespace completely.

Step 2

====================================
To Re-Prepare the OIM database:
====================================
log in as oracle (or login root and su - oracle)
cd /oim903/OIM903/installServer/Xellerate/db/oracle
sh ./prepare_xl_db.sh IDM /oracle/10_2 xladm xladmpwd OIM_DEV /oracle/OIM OIM_DEV_D01 TEMP sys_user_password

Here is the description of the parameters you need send to the script:
# Arguments : $1 --> ORACLE_SID
# $2 --> ORACLE_HOME
# $3 --> Oracle Identity Manager User Name
# $4 --> Password for the Oracle Identity Manager user
# $5 --> Name of the Tablespace to be created
# $6 --> Directory to store the datafile for the tablespace
# $7 --> Name of the datafile
# $8 --> Temporary tablespace for Oracle Identity Manager User
# $9 --> Password of the SYS user

Step 3

cd ~/exports
imp xladm/xladmpwd@IDM

Specify the filename from where the dump has to be imported. This will be the .dmp file name you specified when you took the backup. Also, specify xladm as the user when asked and press enter on all the other options presented.

Step 4

Next, we will recompile all invalid objects.

To recompile as user, save this file and run it from sqlplus:
Go to the folder that holds recompile_as_user.sql file. If you do not have this file, copy the text from below and save it one of the folder. Please note, you might have to run this twice to make sure all invalid objects are compiled.

sqlplus xladm/xladmpwd@IDM
SQL>@recompile_as_user.sql;
SQL>@recompile_as_user.sql;
SQL>quit

Then you can quit from sqlplus. If you are one of those who are intrigued to know which objects are rendered invalid, here is the sql you can use to find out this.

SQL>select object_name from user_objects where status='INVALID';

Here is the file:

----------------------------------------------------------
-- recompile_as_user.sql
-- connected as the SCHEMA_OWNER
----------------------------------------------------------
set feedback off;
set heading off;
set linesize 100;
set pagesize 1000;

spool recompile_as_user.lst;
prompt spool recompile_as_user.log;

select 'alter '||
DECODE(object_type,'PACKAGE BODY','PACKAGE',object_type)||' '||
object_name||' compile '||
DECODE(object_type,'PACKAGE BODY','BODY','PACKAGE','PACKAGE',' ')||';',
'show errors;'
from user_objects
where status = 'INVALID'
order by created,
DECODE(object_type, 'PACKAGE BODY', 'AAA', 'PACKAGE', 'AAB', substr(object_type, 1, 3)) DESC,
object_name;

prompt spool off;
spool off;

@@recompile_as_user.lst;
----------------------------------------------------------

Step 5

All set with the import. Restart your application server and you should be all set.

cd /opt/oracle/xellerate/bin
./xlStartServer.sh &
or ./xlStartServer.sh | tee /tmp/oim.log | less
or however you start your application server.

If you need to kill your application server, just do a ps -ef | grep java
and then you can kill the process.

Solving Oracle Issues if it is not up
===========================================

Check all the services are up (started) in Control Panel ->services

C:\oracle\product\10.2.0\db_1\BIN>sqlplus

SQL*Plus: Release 10.2.0.1.0 - Production on Thu Dec 27 16:01:09 2007

Copyright (c) 1982, 2005, Oracle. All rights reserved.

Enter user-name: sys as sysdba
Enter password:
Connected to an idle instance.

SQL> startup
ORACLE instance started.

Total System Global Area 612368384 bytes
Fixed Size 1250452 bytes
Variable Size 188746604 bytes
Database Buffers 419430400 bytes
Redo Buffers 2940928 bytes
Database mounted.
Database opened.
SQL>quit

----------------------------------
Other DB Related Operations
----------------------------------
To ping TNS - tnsping idm
To start listener - lnsrctrl start
To start enterprise manager - emctl start dbconsole
To login to enterprise manager webconsole - http://server:1158/em
To startup database in sqlplus - startup
To shutdown in sqlplus - shutdown
To reach sqlplus address - http://server:5560/isqlplus
To initiate sqlplus - sqlplus

Another Backup Variant:
exp system/systempwd file=C:\DB_backup.dmp owner=xladm

AD SSL Handshake / Certificate Expired Error

2008-05-22T12:40:00.011-04:00

If you have a certificate in Active Directory that is manually generated and expired, your OIM connection might fail with SSL Handshake error or Certificate Expired Error. Even though you see the correct certificate in Active Directory, still you might recieve SSL Handshake Errors or Certificate Expired Errors. This happens mostly when its a manually generated certificate.

Here is the error that you might face:
java.security.cert.CertificateExpiredException: NotAfter: Thu Apr 17 13:56:25 EDT 2008
at sun.security.x509.CertificateValidity.valid(CertificateValidity.java:268)
at sun.security.x509.X509CertImpl.checkValidity(X509CertImpl.java:564)
at sun.security.validator.SimpleValidator.engineValidate(SimpleValidator.java:123)
at sun.security.validator.Validator.validate(Validator.java:202)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(DashoA12275)
at com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkServerTrusted(DashoA12275)
at com.sun.net.ssl.internal.ssl.SunJSSE_az.a(DashoA12275)
at com.sun.net.ssl.internal.ssl.SunJSSE_az.a(DashoA12275)
at com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(DashoA12275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA12275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.j(DashoA12275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA12275)
at com.sun.net.ssl.internal.ssl.AppInputStream.read(DashoA12275)
at java.io.BufferedInputStream.fill(BufferedInputStream.java:183)
at java.io.BufferedInputStream.read1(BufferedInputStream.java:222)
at java.io.BufferedInputStream.read(BufferedInputStream.java:277)
at com.sun.jndi.ldap.Connection.run(Connection.java:784)

Alternatively, you might face the following issue:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found

Here is the solution for this:

WORKAROUND

To work around this issue, remove the expired (archived) certificate. To do this, follow these steps:1. Open the Microsoft Management Console (MMC) snap-in where you manage the certificate store on the IAS server. If you do not already have an MMC snap-in to view the certificate store from, create one. To do so:a. Click Start, click Run, type mmc in the Open box, and then click OK.
b. On the Console menu (the File menu in Windows Server 2003), click Add/Remove Snap-in, and then click Add.
c. In the Available Standalone Snap-ins list, click Certificates, click Add, click Computer account, click Next, and then click Finish.

Note You can also add the Certificates snap-in for the user account and for the service account to this MMC snap-in.
d. Click Close, and then click OK.

2. Under Console Root, click Certificates (Local Computer).
3. On the View menu, click Options.
4. Click to select the Archived certificates check box, and then click OK.
5. Expand Personal, and then click Certificates.
6. Right-click the expired (archived) digital certificate, click Delete, and then click Yes to confirm the removal of the expired certificate.
7. Quit the MMC snap-in. You do not have to restart the computer or any services to complete this procedure.
8. FYI - In our case, we had to restart the AD server to take the changes in effect. This did not fix the issue without restarting.

This is an excerpt from Microsoft's Website. Here are the links to solve this:

http://support.microsoft.com/kb/822406/

http://support.microsoft.com/kb/839514/

The other problem could be your new / renewed certificate was not imported in Java cacerts keystore of OIM server. Use the following to connect OIM with SSL based Active Directory. This is an excerpt from OIM documentation:

Installing Certificate Services

The connector requires Certificate Services to be running on the host computer. To install Certificate Services:
1.Insert the operating system installation media into the CD-ROM or DVD drive.
2.Click Start, Settings, and Control Panel.
3.Double-click Add/Remove Programs.
4.Click Add/Remove Windows Components.
5.Select Certificate Services.
6.Follow the instructions to start Certificate Services.

Enabling LDAPS

The target Microsoft Active Directory server must have LDAP over SSL (LDAPS) enabled. To enable LDAPS, generate a certificate as follows:
1.On the Active Directory Users and Computers console, right-click the domain node, and select Properties.
2.Click the Group Policy tab.
3.Select Default Domain Policy.
4.Click Edit.
5.Click Computer Configuration, Windows Settings, Security Settings, and Public Key Policies.
6.Right-click Automatic Certificate Request Settings, and then select New and Automatic Certificate Request. A wizard is started.
7.Use the wizard to add a policy with the Domain Controller template.
At the end of this procedure, the certificate is created and LDAP is enabled using SSL on port 636.

Setting Up the Microsoft Active Directory Certificate As a Trusted Certificate

If the Microsoft Active Directory certificate is not issued or certified by a certification authority (CA), then set it up as a trusted certificate. To do this, you first export the certificate and then import it into the keystore of the Oracle Identity Manager server as a trusted CA certificate.
Exporting the Microsoft Active Directory Certificate
To export the Microsoft Active Directory certificate:
1.Click Start, Programs, Administrative Tools, and Certification Authority.
2.Right-click the Certification Authority that you create, and then select Properties.
3.On the General tab, click View Certificate.
4.On the Details tab, click Copy To File.
5.Use the wizard to create a certificate (.cer) file using base-64 encoding.
Importing the Microsoft Active Directory Certificate
To import the Microsoft Active Directory certificate into the certificate store of the Oracle Identity Manager server:

Note:
In a clustered environment, you must perform this procedure on all the nodes of the cluster.

Note:
The user password cannot be set unless 128-bit SSL is used. In addition, the computer on which Microsoft Active Directory is installed must have Microsoft Windows 2000 Service Pack 2 (or later) or Microsoft Windows 2003 running on it.

Granting Users Limited Design Console Access

2008-05-16T23:38:00.039-04:00

Sometimes you want to share responsibility to maintain a resource or any other item of a design console with another user who does not belong to Administrator group.

Here, I show you with a technique to grant limited access of design console to users. You can have different groups having different access of design consoles.

1. Modify the user profile User-Type attribute to be "End-User Administrator" instead of "End-User".

Now, after this change, you can log in to the design console. But, you will not be able to see any items. That is because we explicitly need to give access to the menu items.

If you do not do the above said change, you will get the following error.

2. Go to your OIM web application and create a Group, say, "DESIGN CONSOLE MID ADMINS" using your web application and make this user member of the group.

3. Next, login to OIM design console as system admin (xelsysadm or whatever id you use) and authorize the menu items as well as the explicit individual items you want the "DESIGN CONSOLE MID ADMINS" members to see. For example, I will demonstrate an IT Resource called "Excel Sheet", that these members will be able to Read only. You can also assign Write and / or Delete with any combinations.

4. Go to the IT Resource and then navigate to the Administrator tab. Assign your group - "DESIGN CONSOLE MID ADMINS" to the resource and check off the rights you want this group to have. This will ensure to give members of this user the permission to explicitly look at the details of the IT Resource.

5. Now, you are ready to login as this user.

OIM Supported Version

2008-05-16T23:33:00.003-04:00

When you are installing OIM, sometimes you might have a different version of software that OIM does not support (for eg. Java supported version issue). So, just to bypass the warning, here I present you with a trick. Go to your OIM installation folder files and navigate to installServer\Xellerate folder. You will find one file called xlSupportedVersion.properties. Easy enough - Just open it and edit the file and save it with your version number. No more warnings will appear ever again.

Here is how the file looks like:
==================================
xlSupportedVersion.properties
==================================
jbossversion=4.0.3SP1
jdkversion=1.4.2_12
weblogicversion=8.1 SP6
websphereversion=5.1.1.12
oc4jversion=10.1.3.1.0

You may modify this file to look as follows: (notice I changed the jdk version)

==================================
xlSupportedVersion.properties
==================================
jbossversion=4.0.3SP1
jdkversion=1.4.2_13
weblogicversion=8.1 SP6
websphereversion=5.1.1.12
oc4jversion=10.1.3.1.0

Converting AD long dates to Java Date format

2008-05-07T23:17:00.004-04:00

Environment : OIM 9.0.3, OIM Connector Pack 9.0.4.1, AD 2000

When you reconcile data from AD, the AD dates fail to link up OIM dates because of different format. The dates are stored in AD in long format and OIM uses normal Java Dates. So, here is the code that you can use to make this conversion.

import java.util.Date;
import java.util.TimeZone;
import java.text.SimpleDateFormat;
public class AD
{
public void converADdateToOIMdate(long ADdate){

long ADdate = Long.parseLong(String.valueOf(ADdate));
System.out.println("long value : "+ADdate);

// Filetime Epoch is 01 January, 1601
// java date Epoch is 01 January, 1970
// so take the number and subtract java Epoch:
long javaTime = ADdate - 0x19db1ded53e8000L;

// convert UNITS from (100 nano-seconds) to (milliseconds)
javaTime /= 10000;

// Date(long date)
// Allocates a Date object and initializes it to represent
// the specified number of milliseconds since the standard base
// time known as "the epoch", namely January 1, 1970, 00:00:00 GMT.
Date theDate = new Date(javaTime);

System.out.println("java DATE value : "+theDate);

SimpleDateFormat formatter = new SimpleDateFormat("MMMMM d, yyyy");
// change to GMT time:
//formatter .setTimeZone(TimeZone.getTimeZone("GMT"));

String newDateString = formatter.format(theDate);

System.out.println("Date changed format :" + newDateString);
}

public static void main(String[] args)
{
AD d=new AD();
d.converADdateToOIMdate(128568528000000000L);
// 9223372036854775807
// 127948319499226601

}
}

Importing Connector XML more than once

2008-04-25T11:50:00.003-04:00

Sometimes there is a need to duplicate a resource object, IT Resource, Process Definitions, Forms, Adapters etc. So, the easiest way to do this to reimport the out of the box connector xml or export the connector xml from your environment if you have customizations on the connector. The following example lists the minimal changes that need to be done in order for this xml to be reimported successfully. I am using Unix SSH Connector to demonstrate what changes need to be done.

Firstly, backup your OIM database. Even if you are on a VMWare, remember, Database export is always good.

Next, get a free tool like "xml notepad" from Microsoft or any other xml editor tool.

Open the xml with the editor and do the following:

1. Replace All the "SSH User" to "Linux02" (or choose whatever name you want).

2. Go to the Form Name node and replace it from "UD_SSH" to "UD_L02".

3. Delete objectDataDefinition node.

4. Just import and its all done.

5. Occasionally, if the import fails, do a reimport again. Delete the nodes from the selections in deployment manager which are already in the OIM from the first import (They come with a big X mark on the side).

OAM ObSSOCookie Logoff JavaScript Code

2008-04-16T15:31:00.004-04:00

You may use the following code to Delete ObSSOCookie (or any other) cookie to logoff from OAM.

<script type="text/javascript">
// this deletes the cookie when called

function LogoffOAM(){
Logoff('ObSSOCookie', '/', '');
}

function Logoff( name, path, domain ) {
if ( Get_Cookie( name ) ) document.cookie = name + "=" +
( ( path ) ? ";path=" + path : "") +
( ( domain ) ? ";domain=" + domain : "" ) +
";expires=Thu, 01-Jan-1970 00:00:01 GMT";

javascript:Confirm();

}
function Get_Cookie( name ) {

var start = document.cookie.indexOf( name + "=" );
var len = start + name.length + 1;
if ( ( !start ) &&
( name != document.cookie.substring( 0, name.length ) ) )
{
return null;
}
if ( start == -1 ) return null;
var end = document.cookie.indexOf( ";", len );
if ( end == -1 ) end = document.cookie.length;
return unescape( document.cookie.substring( len, end ) );
}

function closeWindow(win) {

win.open('','_parent','');

win.close();

}

function Confirm ()
{

window.location = "http://www.bhatiacorp.com";

}

function logoffRedirect ()
{
alert(" You are logged off.\n\n You will be redirected to Corporate Web Site.");
window.location = "http://www.bhatiacorp.com";
}

</script>

DistributionListUtils

2008-04-11T18:07:00.004-04:00

package com.bhatiacorp.utils;

import java.security.Provider;
import java.security.Security;
import java.util.Hashtable;
import java.util.Vector;

import javax.naming.Context;
import javax.naming.NamingEnumeration;
import javax.naming.NamingException;
import javax.naming.directory.Attribute;
import javax.naming.directory.Attributes;
import javax.naming.directory.BasicAttribute;
import javax.naming.directory.BasicAttributes;
import javax.naming.directory.DirContext;
import javax.naming.directory.InitialDirContext;
import javax.naming.directory.SearchControls;
import javax.naming.directory.SearchResult;

import Thor.API.tcResultSet;
import Thor.API.tcUtilityFactory;
import Thor.API.Operations.tcLookupOperationsIntf;

import com.thortech.util.logging.Logger;
import com.thortech.xl.dataaccess.tcDataProvider;

public class DistributionListUtils {

private String loggerTag;
private Logger logger;
private String CLASS_NAME;
public static double DISTRIBUTION_GROUP_GLOBAL = 2D;
public static double SECURITY_GROUP_GLOBAL = -2147483646D;
private String mLdapHost;
private String mLdapPort;
private String mAdminID;
private String mAdminPassword;
private boolean mUseSSL;
private String mLdapDistributionListLocation;
private String mRootContext;
private tcLookupOperationsIntf lookIntf;
private static String lookupCodeKeyCol = "Lookup Definition.Lookup Code Information.Code Key";
private static String lookupDecodeKeyCol = "Lookup Definition.Lookup Code Information.Decode";

public DistributionListUtils(String pLdapHost, String pLdapPort,
String pAdminID, String pAdminPassword, String pUseSSL,
String pLdapDistributionLocation, String pRootContext) {
loggerTag = "XL_INTG.BHATIACORP_UTILS";
logger = Logger.getLogger(loggerTag);
CLASS_NAME = getClass().getName();

mLdapHost = pLdapHost;
mLdapPort = pLdapPort;
mAdminID = pAdminID;
mAdminPassword = pAdminPassword;
mUseSSL = (pUseSSL.equalsIgnoreCase("true")) ? true : false;
mLdapDistributionListLocation = pLdapDistributionLocation;
mRootContext = pRootContext;
if (mUseSSL) {
Provider provider = Security.getProvider("com.sun.net.ssl.internal.ssl.Provider");
try {
if (provider == null) {
Class class1 = Class.forName("com.sun.net.ssl.internal.ssl.Provider");
Provider provider1 = (Provider) class1.newInstance();
Security.addProvider(provider1);
}
} catch (ClassNotFoundException classnotfoundexception) {
logger.error("DistributionListUtils -> Exception while setting provide for ssl. Could not find class com.sun.net.ssl.internal.ssl.Provider.\n"
+ classnotfoundexception.getMessage());
} catch (IllegalAccessException illegalaccessexception) {
logger.error("DistributionListUtils -> Exception while setting provide for ssl. IllegalAccessException: "
+ illegalaccessexception.getMessage());
} catch (InstantiationException instantiationexception) {
logger.error("DistributionListUtils -> Exception while setting provide for ssl. InstantiationException: "
+ instantiationexception.getMessage());
}
}

}

private DirContext getDirContext(String pLdapHost, String pLdapPort,
String pAdminID, String pAdminPassword,
boolean pUseSSL) {
DirContext ctx = null;
String providerurl = pLdapHost + ":" + pLdapPort;
if (pLdapPort == "") {
pLdapPort = "636";
}
try {
Hashtable env = new Hashtable();
env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, providerurl);
if (pUseSSL == true) {
env.put(Context.SECURITY_PROTOCOL, "ssl");
}
env.put(Context.SECURITY_AUTHENTICATION, "simple");
env.put(Context.SECURITY_PRINCIPAL, pAdminID);
env.put(Context.SECURITY_CREDENTIALS, pAdminPassword);

ctx = new InitialDirContext(env);
} catch (Exception ex) {
ex.printStackTrace();
}
return ctx;
}

private DirContext getDirContext() {
DirContext ctx = null;
try {
if (mUseSSL = true) {
ctx = getDirContext("ldaps://" + mLdapHost, mLdapPort,
mAdminID, mAdminPassword, true);
} else {
ctx = getDirContext("ldap://" + mLdapHost, mLdapPort, mAdminID,
mAdminPassword, false);
}
} catch (Exception ex) {
ex.printStackTrace();
}
return ctx;
}

/**
* Close the directory context of the LDAP server.
*
*/
protected void closeContext(DirContext ctx) {
try {
if (ctx != null) {
ctx.close();
}
} catch (NamingException e) {
logger.warn("DirContext.close failed", e);
}
}

public String assignDistributionList(String pDepartmentID, String pUserId,
String pCompany) throws Exception {

String rtnval = "EXECUTION_SUCCESS";
String tempDepartmentID = new String(pDepartmentID);
if (this.isEmptyString(pDepartmentID)) {
tempDepartmentID = (pCompany.equalsIgnoreCase("BHATIACORP"))
? new String("0000")
: new String("0000-CON");
}

String groupName = "CN="+ tempDepartmentID;
String groupDN = groupName + "," + this.mLdapDistributionListLocation;

//check if group Exists.
Vector groupSearchResult = this.search("(&(objectclass=group)("+groupName+"))");
if(groupSearchResult.isEmpty()){
createGroup(groupDN, pCompany);
}

Vector memberList = getSepcifiedGroupAttributeValue(groupName, "member");
if(memberList == null)
memberList = new Vector();
for(int i = 0; i < memberList.size(); i++){
String member = (String)memberList.elementAt(i);
member = member.toUpperCase();
memberList.setElementAt(member, i);
}

String userDN = getUserDN(pUserId);
if(!memberList.contains(userDN)){
addUserToGroup(userDN, groupDN);
}

return rtnval;
}

public boolean addUserToGroup(String userDN, String groupDN) throws Exception{
DirContext dirCtx = null;
try{
BasicAttributes basicattributes = new BasicAttributes(true);
basicattributes.put(new BasicAttribute("member", userDN));
dirCtx = getDirContext();
dirCtx.modifyAttributes(groupDN,dirCtx.ADD_ATTRIBUTE, basicattributes);
return true;
}catch(Exception exp){
throw exp;
}finally{
this.closeContext(dirCtx);
}
}

public boolean removeUserToGroup(String userDN, String groupDN) throws Exception{
DirContext dirCtx = null;
try{
BasicAttributes basicattributes = new BasicAttributes(true);
basicattributes.put(new BasicAttribute("member", userDN));
dirCtx = getDirContext();
dirCtx.modifyAttributes(groupDN,dirCtx.REMOVE_ATTRIBUTE, basicattributes);
return true;
}catch(Exception exp){
throw exp;
}finally{
this.closeContext(dirCtx);
}
}

public boolean createGroup(String pGroupName, String companyName) throws Exception{
try{
String defaultGroupMemberShip = null;
double groupType = 0D;
String groupName = new String(pGroupName);
if(companyName.equalsIgnoreCase("BHATIACORP")){
defaultGroupMemberShip = "CN=ALL-BCORP-STAFF" +"," + this.mLdapDistributionListLocation;
groupType = DistributionListUtils.SECURITY_GROUP_GLOBAL;
}else{
defaultGroupMemberShip = "CN=ALL-NON-BCORP-STAFF" +"," + this.mLdapDistributionListLocation;
groupName = groupName.concat("-CON");
groupType = DistributionListUtils.DISTRIBUTION_GROUP_GLOBAL;
}
Double groupTypeDouble = new Double(groupType);
String groupTypeDoubleStr = Integer.toString(groupTypeDouble.intValue());
return createGroup(pGroupName, groupTypeDoubleStr, defaultGroupMemberShip );
}catch(Exception exp){
throw exp;
}
}

public boolean createGroup(String groupName, String groupType, String defaultGroupMembership) throws Exception{
DirContext dirCtx = null;
try{
dirCtx = getDirContext();
BasicAttributes basicattributes = new BasicAttributes(true);
basicattributes.put(new BasicAttribute("objectclass", "group"));
basicattributes.put(new BasicAttribute("cn", groupName));
basicattributes.put(new BasicAttribute("sAMAccountName", groupName));
basicattributes.put(new BasicAttribute("groupType", groupType));
basicattributes.put(new BasicAttribute("memberOf", defaultGroupMembership));
dirCtx.createSubcontext(groupName, basicattributes);
return true;
}catch(Exception exp){
throw exp;
}finally{
this.closeContext(dirCtx);
}
}

private String getUserDN(String pUserId) throws Exception{
DirContext dirCtx = null;
try{
String userId = "CN="+ pUserId;
dirCtx = getDirContext();
Vector searchResults = search("("+userId+ ")");
if(searchResults.isEmpty())return null;
String userDNValue = (String)searchResults.get(0);
String userDN = userDNValue + "," + this.mRootContext;
return new String(userDN.toUpperCase());
}catch(Exception exp){
throw exp;
}finally{
this.closeContext(dirCtx);
}
}

public Vector getSepcifiedGroupAttributeValue(String groupName, String lookfor) throws Exception{
DirContext dirCtx = getDirContext();
try{
String[] attributes = {lookfor};
Vector searchResults = search("("+groupName+ ")", attributes);
SearchResult searchResult = (SearchResult)searchResults.get(0);
Attributes searchResultAttributes = searchResult.getAttributes();
Attribute attr = searchResultAttributes.get(lookfor);
Vector attrVector = new Vector(attr.size());
for(int i=0; i< attr.size(); i++){
String value = new String(attr.get(i).toString());
attrVector.add(value.toUpperCase());
}
closeContext(dirCtx);
return attrVector;
}catch(Exception exp){
throw exp;
}finally{
this.closeContext(dirCtx);
}
}

public Vector search(String filter) throws Exception{
DirContext ctx = null;
try{
ctx = getDirContext();
SearchControls searchcontrols = new SearchControls();
searchcontrols.setSearchScope(2);
SearchResult searchresult;
NamingEnumeration namingenumeration = ctx.search(this.mRootContext, filter, searchcontrols);
Vector vector = new Vector();
for(;namingenumeration.hasMoreElements();vector.addElement(searchresult.getName())){
searchresult = (SearchResult)namingenumeration.nextElement();
searchresult.setRelative(false);
}
return vector;
}catch(Exception exception){
logger.error("Error during search : " + exception);
}finally{
closeContext(ctx);
}
return null;
}

public Vector search(String filter, String[] retAttr) throws Exception{
DirContext ctx = null;
try{
ctx = getDirContext();
SearchControls searchcontrols = new SearchControls();
searchcontrols.setSearchScope(2);
if(retAttr != null)
searchcontrols.setReturningAttributes(retAttr);
SearchResult searchresult;
NamingEnumeration namingenumeration = ctx.search(this.mRootContext, filter, searchcontrols);
Vector vector = new Vector();
for(;namingenumeration.hasMoreElements();vector.addElement(searchresult)){
searchresult = (SearchResult)namingenumeration.nextElement();
searchresult.setRelative(false);
}
return vector;
}catch(Exception exception){
logger.error("Error during search : " + exception);
}finally{
closeContext(ctx);
}
return null;
}

public String getLookupCodeValue(String lookupName, String valueToLookFor, tcDataProvider tcdataprovider)
throws Exception{
lookIntf = (tcLookupOperationsIntf)tcUtilityFactory.getUtility(tcdataprovider, "Thor.API.Operations.tcLookupOperationsIntf");
tcResultSet tcresultset = lookIntf.getLookupValues(lookupName);
int i = tcresultset.getRowCount();
for(int j = 0; j < i; j++){
tcresultset.goToRow(j);
if(valueToLookFor.equalsIgnoreCase(tcresultset.getStringValue(lookupDecodeKeyCol)))
return tcresultset.getStringValue(lookupCodeKeyCol);
}
return "";
}

/**
* Return true if the given string is empty.
*/
public final boolean isEmptyString(String toCheck) {
if ((toCheck != null) && (toCheck.trim().length() > 0)) {
return false;
}
return true;
}

/**
* Return true if the given object is null.
*/
public final boolean isNull(Object toCheck) {
return (toCheck == null);
}

}//end of class DistributionListUtils

courtesy:Rajesh Mittal

RandomPasswordGenerator

2008-04-11T18:05:00.002-04:00

package com.bhatiacorp.utils;

import java.util.Random;

public class RandomPasswordGenerator {

public static int DEFAULT_PASSWORD_LENGTH=8;
public static char[] Special_Character = {'!','@','#','$','%','^','&','*','(',')' };
public static char getSpecialCharacter(){
Random rand = new Random();
int randInt = rand.nextInt(10);
return Special_Character[randInt];
}

public static String getPassword(int n) {
if(n <=8 ){
n=DEFAULT_PASSWORD_LENGTH;
}
char[] pw = new char[n];
int c = 'A';
int r1 = 0;
int i=0;
String tempString = new String();
while(i< n){
r1 = (int)(Math.random() * 4);
l1: switch(r1) {
case 0: c = '0' + (int)(Math.random() * 10); break l1;
case 1: c = 'a' + (int)(Math.random() * 26); break l1;
case 2: c = 'A' + (int)(Math.random() * 26); break l1;
case 3: c = getSpecialCharacter(); break;
}

char c1 = (char)c;
boolean isExisting = false;
l2: for(int j=0; j < i; j++){
if(c1 == pw[j]){
isExisting = true;
break l2;
}
}
if(!isExisting){
pw[i] = (char)c;
i++;
}

}
return new String(pw);
}

}

LdapOperations

2008-04-11T17:19:00.004-04:00

You may use the following code to create quick ldap assisting functions:
==========================================
LdapOperations.java
==========================================

package com.bhatiacorp.operations;

import java.util.Hashtable;

import javax.naming.*;
import javax.naming.directory.*;

import com.thortech.util.logging.Logger;

public class LdapOperations {

private String loggerTag;
private Logger logger;
private String CLASS_NAME;
private String ldapHost;
private String ldapPort;
private String adminID;
private String adminPassword;
boolean useSSL;

public LdapOperations(String ldapHost, String ldapPort, String adminID, String adminPassword, boolean useSSL){
this.ldapHost = ldapHost;
this.ldapPort = ldapPort;
this.adminID = adminID;
this.adminPassword = adminPassword;
this.useSSL = useSSL;
loggerTag = "XL_INTG.BHATIACORP_LDAPOPERATIONS";
logger = Logger.getLogger(loggerTag);
CLASS_NAME = getClass().getName();

logger.info(" server name = " + ldapHost );
logger.info(" server port = " + ldapPort );
logger.info("adminId = " + adminID);
logger.info(" useSSL = " + useSSL );
}

private DirContext getContext(String ldaphost, String ldapport, String adminID, String adminpassword, boolean useSSL)
{
DirContext ctx=null;
String providerurl=ldaphost+":"+ldapport;
if(ldapport=="")
{
ldapport="636";
}
try {
Hashtable env = new Hashtable();
env.put(Context.INITIAL_CONTEXT_FACTORY ,"com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL ,providerurl);
if(useSSL==true)
{
// if SSL is used - use can use ssl enabled ldaphost
// eg. "ldaps://localhost:636"
// else
// eg. "ldap://localhost:636"
env.put(Context.SECURITY_PROTOCOL, "ssl");
}
env.put(Context.SECURITY_AUTHENTICATION ,"simple");
env.put(Context.SECURITY_PRINCIPAL ,adminID);
env.put(Context.SECURITY_CREDENTIALS ,adminpassword);
ctx = new InitialDirContext(env);

}
catch(Exception ex)
{
ex.printStackTrace();
}
return ctx;
}

private DirContext getContext()
{
DirContext ctx=null;
try {
ctx=getContext("ldap://"+ldapHost,ldapPort,adminID,adminPassword,useSSL);
}
catch(Exception ex)
{
ex.printStackTrace();
}

return ctx;
}

/**
* @param cn
* @param attribute
* @param value
* @return
*/
public String addAttribute(String cn,String attribute, String newvalue) throws NamingException{
String rtnval="EXECUTION_SUCCESS";
DirContext ctx= null;
try{
ctx=getContext();
ModificationItem[] mods = new ModificationItem[1];
mods[0]=new ModificationItem(DirContext.ADD_ATTRIBUTE,new BasicAttribute(attribute,newvalue));
ctx.modifyAttributes(cn, mods);

}catch(Exception ex){
rtnval="ERROR: "+ex.getMessage();
ex.printStackTrace();
}finally{
ctx.close();
}
return rtnval;
}

/**
* @param cn
* @param attribute
* @param value
* @return
*/
public String modifyAttribute(String userId,String attribute, String newvalue) throws NamingException{
String rtnval="EXECUTION_SUCCESS";
DirContext ctx= null;
try{
System.out.println();
ModificationItem[] mods = new ModificationItem[1];
ctx=getContext();
mods[0]=new ModificationItem(DirContext.REPLACE_ATTRIBUTE, new BasicAttribute(attribute,newvalue));
ctx.modifyAttributes("cn="+userId, mods);
}catch(Exception ex){
rtnval="ERROR: "+ex.getMessage();
ex.printStackTrace();
}finally{
ctx.close();
}
return rtnval;
}

/**
* @param cn
* @param attribute
* @param value
* @return
*/
public String modifyAttributeWithOutFullDN(String userId,String directoryRootNode, String attribute, String newvalue) throws NamingException{
String rtnval="EXECUTION_SUCCESS";

DirContext ctx= null;
try
{
ctx=getContext();
logger.info(" userId = " + userId );
ModificationItem[] mods = new ModificationItem[1];
String userDN=searchFullDn(directoryRootNode, "cn=" + userId);
logger.info(" user full dn = " + userDN );
logger.info(" attr name = " + attribute + " value = " + newvalue);
mods[0]=new ModificationItem(DirContext.REPLACE_ATTRIBUTE, new BasicAttribute(attribute,newvalue));
ctx.modifyAttributes(userDN, mods);

logger.info(" update was done successfully ");
}catch(Exception ex){
rtnval="ERROR: "+ex.getMessage();
ex.printStackTrace();
}finally{
ctx.close();
}
return rtnval;
}

/*
public void printAttributes(Attributes attrs)
{
try
{
for (NamingEnumeration ae = attrs.getAll(); ae.hasMore();) {
Attribute attr = (Attribute)ae.next();
System.out.println("attribute: " + attr.getID());
for (NamingEnumeration e = attr.getAll(); e.hasMore();
System.out.println("value: " + e.next()));
}}catch(Exception ex)
{
ex.printStackTrace();
}

}
*/

/**
* @param cn
* @param attribute
* @param value
* @return
*/
public String deleteAttribute(String cn,String attribute, String newvalue) throws NamingException{
String rtnval="EXECUTION_SUCCESS";
ModificationItem[] mods = new ModificationItem[1];
try
{
DirContext ctx=getContext();
mods[0]=new ModificationItem(DirContext.REMOVE_ATTRIBUTE,new BasicAttribute(attribute,newvalue));
ctx.modifyAttributes(cn, mods);
}
catch(Exception ex)
{
rtnval="ERROR: "+ex.getMessage();
ex.printStackTrace();
}
return rtnval;
}

public String setADManagerInfo(String userId,String directoryRootNode, String mgrEmployeeId) throws NamingException{
String rtnval="EXECUTION_SUCCESS";

DirContext ctx= null;
try
{
ctx=getContext();
logger.info(" userId = " + userId );
logger.info(" manager employee id = " + mgrEmployeeId);
ModificationItem[] mods = new ModificationItem[1];
String userDN=searchFullDn(directoryRootNode, "cn=" + userId);
logger.info(" Manager DN to be searched is = " + "(|(extensionAttribute1=" + mgrEmployeeId+ ")(cn="+ mgrEmployeeId+ "))");
String managerDN = searchFullDn(directoryRootNode, "(|(extensionAttribute1=" + mgrEmployeeId+ ")(cn="+ mgrEmployeeId+ "))" );
if(this.isEmptyString(managerDN)){
return "EXECUTION_FAILURE_MANAGER_DOESN'T_EXISTS";
}
logger.info(" user full dn = " + userDN );
logger.info(" attr name is manager value = " + managerDN);
mods[0]=new ModificationItem(DirContext.REPLACE_ATTRIBUTE, new BasicAttribute("manager", managerDN));
ctx.modifyAttributes(userDN, mods);

logger.info(" update was done successfully ");
}catch(Exception ex){
rtnval="ERROR: "+ex.getMessage();
}finally{
ctx.close();
}
return rtnval;
}

/**
* @param directoryRootNode
* @param nameToSearch
* @return
*/
public String searchFullDn(String directoryRootNode,String nameToSearch){
try
{
SearchControls searchControls = new SearchControls (SearchControls.SUBTREE_SCOPE, 1, 0, new String[0], true, false);
NamingEnumeration srchResults = getContext().search(directoryRootNode, "(&("+nameToSearch+")(objectclass=*))",searchControls);
if (srchResults.hasMore())
{
SearchResult sr = (SearchResult)srchResults.next();
return sr.getName().toString()+","+directoryRootNode;
}
} catch (NamingException e){
e.printStackTrace();
}
return "";
}

/**
*
* @param cnvalue
* @param fname
* @param lname
* @param treevalue
* @return
*/
public String createUser(String cnvalue, String fname, String lname, String treevalue){
String rtnval="EXECUTION_SUCCESS";
String treenodevalue="ou=People,dc=bhatiacorp,dc=com";
if(treevalue!="")
treenodevalue=treevalue;
try {
BasicAttributes attrs = new BasicAttributes();
BasicAttribute ocs = new BasicAttribute("objectClass");
ocs.add("top");
ocs.add("person");
ocs.add("organizationalPerson");
//Add whichever classes apply in your case
attrs.put(ocs);
attrs.put(new BasicAttribute("cn" , cnvalue));
attrs.put(new BasicAttribute("sn" , lname));
attrs.put(new BasicAttribute("displayName" , fname+" "+ lname));
String fulldn="cn="+cnvalue+","+treenodevalue;
getContext().createSubcontext(fulldn, attrs);
}
catch (Exception ex) {
rtnval="ERROR: "+ex.getMessage();
ex.printStackTrace();
}

return rtnval;
}

/**
*
* @param cnvalue
* @return
*/
public String deleteUser(String cnvalue)
{
String rtnval="EXECUTION_SUCCESS";
String dn=searchFullDn("dc=bhatiacorp,dc=com", cnvalue);
try {
getContext().destroySubcontext(dn);
}
catch (Exception ex) {
rtnval="ERROR: "+ex.getMessage();
ex.printStackTrace();
}

return rtnval;

}

/**
* Return true if the given string is empty.
*/
public final boolean isEmptyString(String toCheck) {
if ((toCheck != null) && (toCheck.trim().length() > 0)) {
return false;
}
return true;
}

/**
* Return true if the given object is null.
*/
public final boolean isNull(Object toCheck) {
return (toCheck == null);
}

/**
*
* @param cn
* @param domain
* @param NewOU
* @return
*/
public String moveUser2NewOU(String cn, String domain,String NewOU){
String rtnval="EXECUTION_SUCCESS";
try {
DirContext ctx=getContext();
String OldCN="CN="+cn+",CN=Users,"+domain;
System.out.println("Old CN:"+OldCN);
String NewCN="CN="+cn+",OU="+NewOU+","+domain;
System.out.println("New CN:"+NewCN);
System.out.println("Starting Modify DN ");
ctx.rename(OldCN, NewCN);
System.out.println("Ended Modify DN with Success..."+rtnval);
//ctx.rename("CN=Rajnish Bhatia,OU=HR,dc=bhatiacorp,dc=com", "CN=Rajnish Bhatia,OU=IT,dc=bhatiacorp,dc=com");
//System.out.println(ctx.lookup("CN=Rajnish Bhatia,OU=IT,dc=bhatiacorp,dc=com"));
ctx.close();
} catch (Exception e) {
System.out.println("Ended Modify DN with Error...");
rtnval="ERROR : "+e.getMessage();
e.printStackTrace();
}
return rtnval;
}

/**
* @param args
*/
public static void main(String[] args) {
try
{
LdapOperations c=new LdapOperations();
//System.out.println(c.createUser("AB","ABtest","test","ou=People,dc=bhatiacorp,dc=com"));
System.out.println(c.modifyAttribute("cn=AB,ou=People,dc=bhatiacorp,dc=com", "extensionAttribute12", "12-12-1999"));
//System.out.println(c.searchFullDn("dc=bhatiacorp,dc=com","cn=AB"));
//System.out.println(c.deleteUser("cn=AB"));
}catch(Exception ex)
{
ex.printStackTrace();
}
}
}

Problem with AD Connector updating City, State with literal text

2008-03-31T14:09:00.002-04:00

The Problem:
When a user is created in AD (using out of the box OIM connector 9041), all values for city, state etc change in AD to be literally "city", "state" etc. instead of correct values supplied via AD User Provisioning form (even with prepop).

The Resolution:
There is a task in AD called Set Exchange Related Properties in Exchange Provisioning Definition. This task has a literal value for all the AD fields like "city", "state". Either make this task conditional or map these values from Xellerate User City / State UDFs.

Changing Oracle Logo in OIM

2008-03-26T00:01:00.005-04:00

If you ever need to customize the logo in Oracle Identity Manager, the do the following steps:

1. Take the file xlWebApp.war from your oim server installation folder and copy it to another folder - say C:\CustomWebApp.
RECOMMENDATION: Take a Backup of this file in another location as well (just incase).

2. Go to command prompt and change your current directory to be C:\CustomWebApp.

3. Run the following command:
jar -xvf xlWebApp.war

4. Copy your company's logo file(s) to the following folder:
C:\CustomWebApp\images

Suppose you have 2 files header_r1_c1.gif (actual logo file) and header_r1_c2.gif (company punch line file).

5. After this, edit the following file in any editor -

C:\CustomWebApp\WEB-INF/classes/xlDefaultAdmin.properties

Search for the following line:
global.image.clientlogo=/images/client_logo.gif

And change this to
global.image.clientlogo=/images/header_r1_c1.gif
global.image.clientlogo1=/images/header_r1_c2.gif

6. Next, edit this file C:/CustomWebApp/tiles/common/tjspHeader.jsp and look for this line (NOTE : This line may appear different in different versions. So, just concentrate on looking for clientlogo keyword.

<html:img bundle="xlDefaultAdmin" pageKey="global.image.clientlogo" height="80"/>

And change it to

<TD valign="center" align="left" width="650px" height="80px" background="/xlWebApp/images/header_bkgd.gif">
<html:img bundle="xlDefaultAdmin" pageKey="global.image.clientlogo" height="80"/>
<html:img bundle="xlDefaultAdmin" pageKey="global.image.clientlogo1" height="80"/>
</TD>

AGAIN NOTE: You might just have one file. In that case, you do not need the second line (referring clientlogo1). You may also adjust the alignment left, center or changing the width of the table.

7. Save all the files and come out of text editors.

8. Now, delete the xlWebApp.war from C:\CustomWebApp

9. Issue the following command:
jar -cvf xlWebApp.war .

10. It will create a new xlWebApp.war file now. Copy this xlWebApp.war in your OIM Server Xellerate installation webapp folder.

11. Then go to OIM Server Xellerate Installation setup folder and run the following command while jboss is still running.
patch_jboss.cmd xlAdm
or
./patch_jboss.sh xlAdm (in Unix flavors).

NOTE: "xlAdm" here is the database password for your OIM schema User that you created while OIM installation.

12. This will deploy your new war file and all you need is a restart to your jboss application server. Now you should see new logo in your OIM on all the pages.

Getting your definitions straight

2008-03-20T17:22:00.010-04:00

Reconciliation

Reconciliation involves duplicating in Oracle Identity Manager the creation of and modifications to user accounts on the target system. It is an automated process initiated by a scheduled task that you configure.

Types of Reconciliation
While configuring the connector, the target system can be designated as a Trusted Source or Target Resource (also known as Non-Trusted Source). Usually there is a parameter on your Scheduled Task (for eg., IsTrusted = True or False or something like TrustedSource=True or False) that differentiates or tells OIM how to consider the events associated with this scheduled job recon.

Trusted Reconciliation
If you designate the target system as a trusted source, then both newly created and modified user accounts are reconciled in Oracle Identity Manager.

Non-Trusted Reconciliation
If you designate the target system as a target resource or Non-Trusted Source, then only modified user accounts are reconciled in Oracle Identity Manager.

Provisioning

Provisioning involves creating or modifying a user's access rights on the target system through Oracle Identity Manager. You use the Oracle Identity Manager Administrative and User Console to perform provisioning operations.

AD Child Domain Referral Searches

2008-03-19T22:16:00.004-04:00

If your ldp tool fails to find users / groups from other child / brother domains due to referral issues, use the following method to override the search criteria.

First create an account with Enterprise Admin rights over the full root domain. Once the rights are properly given, in ldp tool, set connection options to add LDAP_OPT_REFERRALS to 1 (after binding with this enterprise admin user) and then retry your search.

Add cross reference of trusted domain. You may use the following Microsoft support link as a reference:
http://support.microsoft.com/kb/241737

If you are coding, add this statement to make it work:
env.put( Context.REFERRAL, "follow" );

Here is the sample code:

import javax.naming.ldap.*;
import javax.naming.directory.*;
import javax.naming.*;
import javax.naming.directory.BasicAttributes;
import java.util.Properties;

public class test {
public static void main(String[] args) {

Properties env = new Properties();

env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL, "ldap://localhost:389");
env.put(Context.SECURITY_AUTHENTICATION,"simple");
env.put(Context.REFERRAL, "follow" );
env.put(Context.SECURITY_PRINCIPAL, "Rajnish");
env.put(Context.SECURITY_CREDENTIALS, "Bhatia01");

try {
LdapContext context = new InitialLdapContext(env, null);
String base = "DC=nj,DC=bhatiacorp,DC=com";
String filter = "(&(objectClass=group)(CN=rajadmin))";

SearchControls controls = new SearchControls();

String []strReturningAttr = {"member"};

controls.setReturningAttributes(strReturningAttr);
controls.setSearchScope(SearchControls.SUBTREE_SCOPE);

NamingEnumeration answer = context.search(base, filter, controls);
int totalResults = 0;
String strMember ;
BasicAttributes userattrs;

// ... process attributes ...
while (answer.hasMoreElements()) {
SearchResult sr = (SearchResult)answer.next();

System.out.println(">>>" + sr.getName());

//Print out the groups

Attributes attrs = sr.getAttributes();

if (attrs != null) {

try {
for (NamingEnumeration ae = attrs.getAll();ae.hasMore();) {
Attribute attr = (Attribute)ae.next();
System.out.println("Attribute: " + attr.getID());
for (NamingEnumeration e = attr.getAll();e.hasMore();totalResults++) {

strMember = (String) e.next();
System.out.println(" " + totalResults + ". " + strMember);
userattrs = (BasicAttributes)context.getAttributes(strMember);

}

}

}
catch (NamingException e) {
System.err.println("Problem listing membership: " + e);
}

}
}
System.out.println("TotalResults " + totalResults );
}
catch (NamingException e) {
System.out.println("Problem retrieving RootDSE: " + e);
}
}
}

Custom Sybase Connector for Non-Supported Versions

2008-03-17T14:04:00.005-04:00

import java.sql.*; // JDBC
import com.sybase.jdbc2.*; // Sybase jConnect
import java.util.Properties; // Properties

public class ExtendedUserUtilities {
private static Connection getSybaseConnection( String machine,String port, String userID,String password ) {

Connection connection;
String url;
Properties properties;
connection = null;
url = "jdbc:sybase:Tds:" + machine + ":" + port;
properties = new Properties();
properties.put ( "user", userID );
properties.put ( "password", password );
try {
Class.forName ( "com.sybase.jdbc2.jdbc.SybDriver" ).newInstance();
connection = DriverManager.getConnection( url, properties );
connection.setAutoCommit( false ) ;
}
catch ( Exception exception ) {
System.out.println ( "Error: " + exception.getMessage() );
exception.printStackTrace();
}
System.out.println ( "Connection url: '" + url + "'" );
return connection;

}

public static void main(String[] args){
ExtendedUserUtilities e=new ExtendedUserUtilities("192.168.2.10", "3083", "bhatia_su", "bhatia123");
String Pwd = "Password";
String User = "bhatia01";
e.sybase_adduser(User, pwd,"cp", "g_cp", "Rajnish", "Bhatia");
// e.sybase_dropuser(User);
}

public String sybase_adduser(String user, String password, String database, String group, String firstname, String lastname){
String rtnval="Success";
Connection connection1 = getSybaseConnection( SybaseServer, Port, Admin, Pwd);
if ( connection1 != null ) {
System.out.println( "Connection to Sybase successful" );
} else {
System.out.println( "Connection to Sybase failed" );
}
try {

CallableStatement proc = connection1.prepareCall("{call sp_addlogin( ?, ?, ?, ?, ?) }");
connection1.setAutoCommit(true);
proc.setString( 1, user);
proc.setString( 2, password);
proc.setString( 3, database);
proc.setString( 4, null);
proc.setString( 5, firstname+" "+lastname);
proc.executeUpdate();
System.out.println( "Executed sp_addlogin : User "+user +" created with password " );

CallableStatement proc2 = connection1.prepareCall("{call "+database+".dbo.sp_adduser( ?, ? , ?) }");
proc2.setString( 1, user);
proc2.setString( 2, user);
proc2.setString( 3, group);
proc2.executeUpdate();
System.out.println( "Executed sp_adduser : User "+user +" added." );

} catch( Throwable e ) {
rtnval="Error";
e.printStackTrace();
}
return rtnval;
}

public String sybase_dropuser(String user){
String rtnval="Success";
Connection connection1 = getSybaseConnection( SybaseServer, Port, Admin, Pwd);
if ( connection1 != null ) {
System.out.println( "Connection to Sybase successful" );
} else {
System.out.println( "Connection to Sybase failed" );
}
try {

CallableStatement proc = connection1.prepareCall("{call databasename.dbo.sp_dropuser( ?) }");
connection1.setAutoCommit(true);
proc.setString( 1, user);

proc.executeUpdate();
System.out.println( "Executed sp_dropuser : User "+user +" dropped" );

CallableStatement proc2 = connection1.prepareCall("{call sp_droplogin( ?) }");
proc2.setString( 1, user);
proc2.executeUpdate();
System.out.println( "Executed sp_droplogin : User "+user +" dropped." );

} catch( Throwable e ) {
rtnval="Error";
e.printStackTrace();
}
return rtnval;
}
}

Add jconn2.jar Sybase driver to this code.

AD Move User to New OU

2008-03-17T13:51:00.004-04:00

The Active Directory Connector by default creates users in CN=Users. Oftentimes, you need to move user to another ou based on some logic, for example based of location. So, here I present you with a code snippet that you can use to move user to another ou and attach it to create user "Success" response code in AD Provisioining process.

import javax.naming.*;
import javax.naming.directory.*;
import java.util.ArrayList;
import java.util.HashMap;
import java.util.Hashtable;
import java.util.List;
import java.util.Map;
import Thor.API.Exceptions.tcAPIException;
import Thor.API.tcResultSet;
import Thor.API.tcUtilityFactory;
import Thor.API.Base.tcUtilityOperationsIntf;
import Thor.API.Operations.tcUserOperationsIntf;

import com.thortech.util.logging.Logger;
import java.util.Hashtable;
public class MoveUserToOU {
public Logger logger;

public String MoveUser2NewOU(String cn, String ADServer, String domain,String Location, String AdminID, String Password){
String rtnval="EXECUTION_SUCCESS";
if (Location.equalsIgnoreCase(""))
{
return rtnval;
}
Hashtable env = new Hashtable();
env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.SECURITY_PROTOCOL, "ssl");
env.put(Context.PROVIDER_URL, "ldaps://"+ADServer+":636/");
//AdminID="Administrator@bhatia.com"
env.put(Context.SECURITY_PRINCIPAL, AdminID);
//Password="Password1";
env.put(Context.SECURITY_CREDENTIALS, Password);
try {
DirContext ctx = new InitialDirContext(env);
String OldCN="CN="+cn+",OU=Users,OU=OTHR,"+domain;
logger.debug("Old CN:"+OldCN);
String NewCN="CN="+cn+",OU=Users,OU="+getNewOU(Location)+","+domain;
logger.debug("New CN:"+NewCN);
logger.debug("Starting Modify DN ");
ctx.rename(OldCN, NewCN);
logger.debug("Ended Modify DN with Success..."+rtnval);
//ctx.rename("CN=Rajnish Bhatia,OU=HR,dc=bhatia,dc=com", "CN=Rajnish Bhatia,OU=IT,dc=bhatia,dc=com");
//System.out.println(ctx.lookup("CN=Rajnish Bhatia,OU=IT,dc=bhatia,dc=com"));
ctx.close();
} catch (Exception e) {
logger.debug("Ended Modify DN with Error...");
rtnval="ERROR : "+e.getMessage();
e.printStackTrace();
}
return rtnval;
}

public String getNewOU(String Location) {
String NewOU="";
if(Location.equalsIgnoreCase("CA"))
NewOU="CA";
else
if(Location.equalsIgnoreCase("TN"))
NewOU="TN";
else
if(Location.equalsIgnoreCase("NJ"))
NewOU="NJ";
else
if(Location.equalsIgnoreCase("TX"))
NewOU="TX";
return NewOU;
}
}

Active Directory SSL Test

2008-03-17T12:49:00.004-04:00

You may use this code to test the SSL connection with your AD server.

=====================================================
ADSSLConnectionTest.java
=====================================================

import java.util.*;
import javax.naming.*;
import javax.naming.directory.*;
public class ADSSLConnectionTest
{

private DirContext getContext(String ldaphost, String ldapport, String adminID, String adminpassword, boolean useSSL)
{
DirContext ctx=null;
String providerurl=ldaphost+":"+ldapport;
if(ldapport=="")
{
ldapport="636";
}
try {
Hashtable env = new Hashtable();
env.put(Context.INITIAL_CONTEXT_FACTORY ,"com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL ,providerurl);
if(useSSL==true)
{
// if SSL is used - use can use ssl enabled ldaphost
// eg. "ldaps://localhost:636"
// else
// eg. "ldap://localhost:636"
env.put(Context.SECURITY_PROTOCOL, "ssl");
}
env.put(Context.SECURITY_AUTHENTICATION ,"simple");
env.put(Context.SECURITY_PRINCIPAL ,adminID);
env.put(Context.SECURITY_CREDENTIALS ,adminpassword);
ctx = new InitialDirContext(env);
}
catch(Exception ex)
{
ex.printStackTrace();
}
return ctx;
}

public DirContext getContext()
{
DirContext ctx=null;
try {
ctx=getContext("ldaps://localhost","636","CN=Rajnish Bhatia,DC=bhatia,DC=com","Password1",true);
System.out.println("Connected with SSL");
}
catch(Exception ex)
{
System.out.println("NOT Connected with SSL");
ex.printStackTrace();
}
return ctx;
}

public static void main(String[] args) {
try
{
ADSSLConnectionTest c = new ADSSLConnectionTest();
c.getContext();
}catch(Exception ex)
{
ex.printStackTrace();
}
}
}

Compile and run with your credentials as following:

C:\>javac ADSSLConnectionTest.java

C:\>java ADSSLConnectionTest

=============================
Notes
=============================

1. If you have issues, make sure your SSL Certificate is in proper java store such as C:\j2sdk1.4.2_13\jre\lib\security. Make sure you are adding the certificate to the correct (& in path) java cacerts keystore.

2. You may also test by telnet to the server - telnet localhost 636

3. You may list the keystore values as follows:
C:\j2sdk1.4.2_13\jre\lib\security>keytool -list -v -storepass changeit -keystore cacerts

This is how it looks:

*******************************************
*******************************************

Alias name: someclass3g3ca
Creation date: Jun 15, 2004
Entry type: trustedCertEntry

Owner: CN=Some Authority, OU="(c)
1999 Bhatia, Inc. - For authorized use only", OU=Bhatia Trust Network, O="Bhatia, Inc.", C=US
Issuer: CN=Some Authority, OU="(c)
1999 Bhatia, Inc. - For authorized use only", OU=Bhatia Trust Network, O="Bhatia, Inc.", C=US
Serial number: 9b7e0649a33e62b9d5ee90487129ef53
Valid from: Thu Sep 30 20:00:00 EDT 1999 until: Wed Jul 16 19:59:59 EDT 2036
Certificate fingerprints:
MD5: CD:68:B6:A7:C7:C4:CE:75:E0:1D:2F:57:44:61:92:09
SHA1: 13:2D:0D:45:53:4B:69:97:CD:B2:D6:C3:39:E2:55:76:60:9B:5C:C6

*******************************************
*******************************************

Alias name: corp9
Creation date: Mar 17, 2008
Entry type: trustedCertEntry

Owner: CN=srvr-corp9.nj.bhatia.com
Issuer: CN=SRVR-RAS-DC, DC=bhatia, DC=com
Serial number: 2714a16c000000000013
Valid from: Mon Jan 28 12:14:58 CST 2008 until: Tue Jan 27 12:14:58 CST 2009
Certificate fingerprints:
MD5: CD:48:B6:A7:C7:C4:CE:75:E0:1D:2F:57:44:61:92:09
SHA1: 12:1D:0D:45:52:4B:64:97:CD:B2:D6:C3:39:E2:55:76:60:9B:5C:C6

*******************************************
*******************************************

4. Then, make sure your ADITResource in OIM - The server is srvr-corp9.nj.bhatia.com (as per your keystore).

5. For specific ldap error codes, look at the following url:
http://www.directory-info.com/LDAP/LDAPErrorCodes.html

xell-ds.xml encrypted

2008-03-17T12:17:00.005-04:00

A solution to having the DB credentials in cleartext for OIM on jboss in the xell-ds.xml file.

Here is how to encrypt the password.

execute the following to get the encrypted data for the password:

cd to your jboss home directory (example: /opt/jboss-4.0.3SP1) and execute the following (replacing <password> with the actual password)

java -cp lib/jboss-jmx.jar:lib/jboss-common.jar:server/default/lib/jbosssx.jar:server/default/lib/jboss-jca.jar org.jboss.resource.security.SecureIdentityLoginModule <password>

repace the contents of your xell-ds.xml file with the following (modify the connection-url to reflect your environment)
replace it with the following file contents
<?xml version="1.0" encoding="UTF-8"?>
<datasources>
<local-tx-datasource>
<jndi-name>jdbc/xlDS</jndi-name>
<connection-url>jdbc:oracle:thin:@some.corpdev1.bhatia.com:1575:dbidm</connection-url>
<driver-class>oracle.jdbc.driver.OracleDriver</driver-class>

<security-domain>EncryptDBPassword</security-domain>
<exception-sorter-class-name>org.jboss.resource.adapter.jdbc.vendor.OracleExceptionSorter</exception-sorter-class-name>
<check-valid-connection-sql>select 1 from USR where 1=2 </check-valid-connection-sql>
</local-tx-datasource>
<xa-datasource>
<jndi-name>jdbc/xlXADS</jndi-name>
<track-connection-by-tx>true</track-connection-by-tx>
<isSameRM-override-value>false</isSameRM-override-value>
<xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
<xa-datasource-property name="URL">jdbc:oracle:thin:@some.corpdev1.bhatia.com:1575:dbidm</xa-datasource-property>

<security-domain>EncryptDBPasswordXA</security-domain>
<exception-sorter-class-name>org.jboss.resource.adapter.jdbc.vendor.OracleExceptionSorter</exception-sorter-class-name>
<no-tx-separate-pools/>
<valid-connection-checker-class-name>org.jboss.resource.adapter.jdbc.vendor.OracleValidConnectionChecker</valid-connection-checker-class-name>
</xa-datasource>
<mbean code="org.jboss.resource.adapter.jdbc.vendor.OracleXAExceptionFormatter"
name="jboss.jca:service=OracleXAExceptionFormatter">
<depends optional-attribute-name="TransactionManagerService">jboss:service=TransactionManager</depends>
</mbean>
</datasources>

Add the following to the login-config.xml file....
================================================================
<application-policy name="EncryptDBPassword">
<authentication>
<login-module code="org.jboss.resource.security.SecureIdentityLoginModule" flag="required">
<module-option name="username">oim</module-option>
<module-option name="password">-34a58ed26f8d8263e0f4fadaae6c7657</module-option>
<module-option name="managedConnectionFactoryName">jboss.jca:name=jdbc/xlDS,service=LocalTxCM</module-option>
</login-module>
</authentication>
</application-policy>
<application-policy name="EncryptDBPasswordXA">
<authentication>
<login-module code="org.jboss.resource.security.SecureIdentityLoginModule" flag="required">
<module-option name="username">oim</module-option>
<module-option name="password">-34a58ed26f8d8263e0f4fadaae6c7657</module-option>
<module-option name="managedConnectionFactoryName">jboss.jca:name=jdbc/xlXADS,service=XATxCM</module-option>
</login-module>
</authentication>
</application-policy>

courtesy:Patrick Dooley

Propagating Changes to target sources

2008-02-06T23:06:00.003-05:00

If you ever need to Propagate the changes to the target systems by change from the source system in OIM, do the following steps. In the following example, I am transmitting the first name change to Active Directory whenever a change occurs in Xellerate User profile.

1. Create an process task adapter that will copy & return the same string back as an adapter return value.
2. Go to Active Directory Provisioning Process definition.
3. Create / Modify Change First Name process task. Map the adapter created in Step 1 with Xellerate User First Name as the source string and adapter return variable to Process Form First Name.
4. Create / re-verify that First Name Updated task is present on AD Provisioning Process definition that propogates the attribute update on AD. That should be it !!

Setting JBOSS-OIM with Apache

2008-01-24T18:05:00.001-05:00

If you don't want your oim users to key in the port number in the url while accessing OIM application server, you may add an apache web server in front of jboss. This is one of the options. Here is how you set this:

Download Apache web server from the website and set it up by running the installer.

Suppose you installed Apache 2.0.63 in the following folder : C:\Apache2063

Then go to C:\Apache2063\Apache2\conf\httpd.conf file and add the following line to this file:

Redirect permanent /xlWebApp http://server:8080/xlWebApp

Please note that "server" value should be the full name of the server (FQDN - Fully Qualified Domain Name) - something like - nj.somecompany.com

After that restart apache web server and you are all done !!
===========================================
Here is how you would enter the url on the browser:
===========================================

===========================================
Here is how the browser redirects you to OIM:
===========================================

Installing OIM as a Windows Service

2008-01-24T13:23:00.002-05:00

On Production, if you want Xellerate to run as a Windows Service so that it can be restarted automatically on a server restart, you can do the following things.

1. Get JavaService.exe from the web (open source project) and deploy it in your JBOSS\bin directory.
2. Use the following script to install this as a web serivce. The following script will need some tweaking of parameters depending on your environment:
================================================
Here is the script
================================================

@echo off
setlocal

rem
rem -------------------------------------------------------
rem This script sets the JBoss instance for OIM to run
rem as a windows service. You may need to tweak the
rem variables below to properly define your installation.
rem
rem
rem
rem -------------------------------------------------------
rem

rem This sets the memory usage settings passed to the JVM
set MEM_ARGS=-Xmx1024m

rem This is the directory where OIM is installed in
set XL_HOME=C:\xellerate\xlserver\xellerate

rem This is the directory where JBoss is installed in
set JB_HOME=C:\xellerate\jboss-4.0.3SP1

rem This is the base directory of the JDK installation for JBOSS
set JAVA_HOME=C:\java\j2sdk1.4.2_13\jre

rem This is the name of the Windows service
set SERVICE_NAME=JBoss-OIM

rem
rem -------------------------------------------------------
rem End of common variables you may need to tweak
rem -------------------------------------------------------
rem

echo Attempting to stop and remove old OIM / JBoss service
net stop %SERVICE_NAME% /y
javaservice.exe -uninstall %SERVICE_NAME%
echo Done.

echo Attempting to install and start OIM / JBoss service
mkdir %JB_HOME%\logs
copy /f javaservice.exe %JB_HOME%\bin
cd %JB_HOME%\bin
javaservice.exe -install %SERVICE_NAME% %JAVA_HOME%\bin\client\jvm.dll %MEM_ARGS% -Djava.class.path="%JAVA_HOME%\lib\tools.jar;%JB_HOME%\bin\run.jar" -DXL.HomeDir=%XL_HOME% -Djava.awt.headless=true -start org.jboss.Main -stop org.jboss.Main -method systemExit -out %JB_HOME%\logs\console.log -err %JB_HOME%\logs\console.log -current %JB_HOME%\bin -path "%PATH%" -auto

net start %SERVICE_NAME%
echo Done.
endlocal

================================================
Here is how it will get installed.
================================================

================================================
Here is how it looks after getting installed as a Windows Service.
================================================

Notes:
================================================
1. Also copy javaservice.exe & jvm.dll to C:\<WindowsInstallFolder>\system32 (say C:\Windows\system32) as after restart if these files are not in path, the windows service will fail to start.

Creating Scheduled Task Event

2008-01-23T15:38:00.000-05:00

If you need to do create a schedule task event that occurs periodically in OIM, here is a code snippet that you can modify to put your custom task in.

In my example here, I am emailing all the members of a OIM Group "Blank Email ID Notification" (configurable - passed from task scheduler itself) to notify that there are Employees in OIM with Blank Employee IDs. Someone should log on to OIM and add employee user ids. This can be a task that can run daily, weekly, monthly or however you want to configure it within OIM. Just create the jar file from the code and drop it in ScheduledTask folder under xellerate application.

======================================
Here is how to configure the task scheduler and OIM group:
======================================

======================================
Here is how the end result looks :
======================================

======================================
BlankEIDEmail.java
======================================

import java.util.HashMap;

import com.thortech.xl.scheduler.tasks.SchedulerBaseTask;
import Thor.API.tcResultSet;
import Thor.API.Operations.tcUserOperationsIntf;
import Thor.API.Operations.tcGroupOperationsIntf;
import com.thortech.xl.dataobj.util.tcEmailNotificationUtil;

/**
*
* Class to determine the OIM users having a blank EID
*
*/

public class BlankEIDEmail extends SchedulerBaseTask{

private tcUserOperationsIntf userAPI;
private String eid;
private String userID;
private String firstName;
private String middleName;
private String lastName;
private String dept;
private String manager;
private String mailBody;
private String mailTemp;
public static String newline = "\n\r";
private String grpName;
private tcGroupOperationsIntf grpAPI;

public void init() {
//Fetch the attributes of the scheduled task and initialize the APIs
try{
grpName = getAttribute("Group Name");
mailTemp = getAttribute("Email Template");
userAPI = (tcUserOperationsIntf)getUtility("Thor.API.Operations.tcUserOperationsIntf");
grpAPI = (tcGroupOperationsIntf)getUtility("Thor.API.Operations.tcGroupOperationsIntf");
}
catch(Exception e){
e.printStackTrace();
}
}//end of init method

public void execute() {
try{
HashMap hashmap = new HashMap();
hashmap.put("Users.User ID","*");
//hashmap.put("USR_UDF_EID", "");
tcResultSet rset = userAPI.findAllUsers(hashmap);
System.out.println("** Filtered ** Number of Users:"+rset.getRowCount());
rset.sort("USR_UDF_EID",true);
if(rset.getRowCount()>0){
mailBody = "The following users have a blank EID:"+newline;
mailBody+= "(First Name, Middle Name, Last Name, User ID, Manager, Department)"+newline;
for(int count=0;count rset.goToRow(count);
eid = rset.getStringValue("USR_UDF_EID");
System.out.println("Processing User:"+rset.getStringValue("Users.User ID")+";USR_UDF_EID="+eid);
//filter users who have a blank EID
if(eid =="" eid==null){
userID = rset.getStringValue("Users.User ID");
firstName = rset.getStringValue("Users.First Name");
middleName = rset.getStringValue("Users.Middle Name");
lastName = rset.getStringValue("Users.Last Name");
manager = rset.getStringValue("Users.Manager Login");
dept = rset.getStringValue("USR_UDF_DEPARTMENT");
mailBody+= firstName+", ";
mailBody+= middleName+", ";
mailBody+= lastName+", ";
mailBody+= userID+", ";
mailBody+= manager+",";
mailBody+= dept;
mailBody+= newline;
}///end of inner if
else{
break;
}//end of inner else
}//end of for loop */
mailBody+=newline;
mailBody+="Thank You."+newline;
mailBody+="System Administrator."+newline;
mailTo(mailBody);
}//end of outer if
else{
}//end of else
}//end of try block
catch(Exception e){
e.printStackTrace();
}//end of catch block
}//end of execute method

public void mailTo(String mailBody)
{
try
{
tcEmailNotificationUtil sendMail = new tcEmailNotificationUtil(getDataBase());
//construct the email text
sendMail.constructEmail(mailTemp);
sendMail.setBody(mailBody);
tcResultSet memberSet = getGroupMembers(grpName);
for(int i=0;i memberSet.goToRow(i);
String usrID = memberSet.getStringValue("Users.User ID");
HashMap findUsr = new HashMap();
findUsr.put("Users.User ID", usrID);
tcResultSet userSet = userAPI.findUsers(findUsr);
String reqMailID = userSet.getStringValue("Users.Email");
//send email to the respective user ids
if(reqMailID =="" reqMailID==null){
System.out.println("Blank email for UserID:"+usrID);
} else {
System.out.println("Mailing BlankEID List to:"+reqMailID);
sendMail.sendEmail(reqMailID);
}
}//end of for loop
}
catch(Exception e)
{
e.printStackTrace();
}
}
/**
* This method is called to find one the members of a group
* @param name of the group
* @return returns resultset containing members of the group
*/

public tcResultSet getGroupMembers(String groupName){
tcResultSet grpMembers = null;
try{
HashMap grp = new HashMap();
grp.put("Groups.Group Name", grpName);
tcResultSet groupSet = grpAPI.findGroups(grp);
groupSet = grpAPI.findGroups(grp);
long grpKey = groupSet.getLongValue("Groups.Key");
grpMembers = grpAPI.getAllMemberUsers(grpKey);
}
catch(Exception e){
e.printStackTrace();
}
return grpMembers;
}
}

Kerberos Authentication

2008-01-17T23:14:00.001-05:00

You may use the following code to implement Kerberos Authentication in your applications:

====================================
CompanyKerbLogin.conf
====================================

/**
* Login Configuration for JAAS.
*
* Specify that Kerberos v5 is a required login module for the classes.
*/

CompanyKerbCallbackHandler {
com.sun.security.auth.module.Krb5LoginModule
required
client=TRUE
debug=FALSE
useTicketCache=FALSE;
};

====================================
krb5.conf
====================================

[domain_realms]

.bhatia.company.com = BHATIA.COMPANY.COM
.company.com=COMPANY.COM
bhatia.company.com = BHATIA.COMPANY.COM
company.com=COMPANY.COM

[libdefaults]

default_realm = COMPANY.COM
#dns_lookup_kdc=false
#default_tgs_enctypes = des-cbc-md5
#default_tkt_enctypes = des-cbc-md5

[logging]

[realms]
BHATIA.COMPANY.COM= {
kdc = server2.bhatia.company.com
admin_server = server2.bhatia.company.com
default_domain = bhatia.company.com
}

COMPANY.COM= {
kdc = server01.company.com
admin_server = server01.company.com
default_domain = company.com
}

import javax.security.auth.callback.*;

====================================
CompanyKerbCallbackHandler.java
====================================

/**
* Callback Handler that is used with the KerberosAuthHandler.
*
* Two methods are added to this callback handler which allows the
* KerberosAuthHandler to pass the username and password received
*
*/
public class CompanyKerbCallbackHandler implements CallbackHandler
{

private String CompanyUserId;
private char [] CompanyPassword;

public void handle(Callback[] callbacks)
throws java.io.IOException, UnsupportedCallbackException {
for (int i = 0; i < callbacks.length; i++) {
if (callbacks[i] instanceof NameCallback) {
NameCallback cb = (NameCallback)callbacks[i];
cb.setName(CompanyUserId);

} else if (callbacks[i] instanceof PasswordCallback) {
PasswordCallback cb = (PasswordCallback)callbacks[i];
cb.setPassword(CompanyPassword);

} else {
throw new UnsupportedCallbackException(callbacks[i]);
}
}
}

public void setUserId(String userid)
{
CompanyUserId = userid;
}

public void setPassword(String password)
{
CompanyPassword = password.toCharArray();
}
}

This should do the magic for you !! Enjoy Authenticating.

Testing your MS-Exchange Server

2008-01-03T11:53:00.001-05:00

A quick test to make sure your localhost MS-Exchange Server is running is to use command line window.

Go to Windows Start Button -> Run...
Type cmd and Press Ok. Once on the command line window, do the following.

telnet localhost 25
HELO
MAIL FROM:ABHATIA@somecompany.com
RCPT TO:rbhatia@somecompany.com
DATA
Here is the test message.
.
QUIT

You should recieve an email shortly (depending how your server is configured to deliver the message - after an interval or right away).

Here is how this looks:

Happy Testing :)

Implementing SHA encryption to secure data

2007-10-19T15:36:00.000-04:00

Here I provide you with a class that will assist you to have a Base64 encoding of your data.
==============================
Base64coder.java
==============================
public class Base64Coder {

// Mapping table from 6-bit nibbles to Base64 characters.
private static char[] map1 = new char[64];
static {
int i=0;
for (char c='A'; c<='Z'; c++) map1[i++] = c;
for (char c='a'; c<='z'; c++) map1[i++] = c;
for (char c='0'; c<='9'; c++) map1[i++] = c;
map1[i++] = '+'; map1[i++] = '/'; }

// Mapping table from Base64 characters to 6-bit nibbles.
private static byte[] map2 = new byte[128];
static {
for (int i=0; i < map2.length; i++) map2[i] = -1;
for (int i=0; i < 64; i++) map2[map1[i]] = (byte)i; }

/**
* Encodes a string into Base64 format.
* No blanks or line breaks are inserted.
* @param s a String to be encoded.
* @return A String with the Base64 encoded data.
*/
public static String encodeString (String s) {
return new String(encode(s.getBytes())); }

/**
* Encodes a byte array into Base64 format.
* No blanks or line breaks are inserted.
* @param in an array containing the data bytes to be encoded.
* @return A character array with the Base64 encoded data.
*/
public static char[] encode (byte[] in) {
return encode(in,in.length); }

/**
* Encodes a byte array into Base64 format.
* No blanks or line breaks are inserted.
* @param in an array containing the data bytes to be encoded.
* @param iLen number of bytes to process in in.
* @return A character array with the Base64 encoded data.
*/
public static char[] encode (byte[] in, int iLen) {
int oDataLen = (iLen*4+2)/3; // output length without padding
int oLen = ((iLen+2)/3)*4; // output length including padding
char[] out = new char[oLen];
int ip = 0;
int op = 0;
while (ip < iLen) {
int i0 = in[ip++] & 0xff;
int i1 = ip < iLen ? in[ip++] & 0xff : 0;
int i2 = ip < iLen ? in[ip++] & 0xff : 0;
int o0 = i0 >>> 2;
int o1 = ((i0 & 3) << 4) | (i1 >>> 4);
int o2 = ((i1 & 0xf) << 2) | (i2 >>> 6);
int o3 = i2 & 0x3F;
out[op++] = map1[o0];
out[op++] = map1[o1];
out[op] = op < oDataLen ? map1[o2] : '='; op++;
out[op] = op < oDataLen ? map1[o3] : '='; op++; }
return out; }

/**
* Decodes a string from Base64 format.
* @param s a Base64 String to be decoded.
* @return A String containing the decoded data.
* @throws IllegalArgumentException if the input is not valid Base64 encoded data.
*/
public static String decodeString (String s) {
return new String(decode(s)); }

/**
* Decodes a byte array from Base64 format.
* @param s a Base64 String to be decoded.
* @return An array containing the decoded data bytes.
* @throws IllegalArgumentException if the input is not valid Base64 encoded data.
*/
public static byte[] decode (String s) {
return decode(s.toCharArray()); }

/**
* Decodes a byte array from Base64 format.
* No blanks or line breaks are allowed within the Base64 encoded data.
* @param in a character array containing the Base64 encoded data.
* @return An array containing the decoded data bytes.
* @throws IllegalArgumentException if the input is not valid Base64 encoded data.
*/
public static byte[] decode (char[] in) {
int iLen = in.length;
if (iLen%4 != 0) throw new IllegalArgumentException ("Length of Base64 encoded input string is not a multiple of 4.");
while (iLen > 0 && in[iLen-1] == '=') iLen--;
int oLen = (iLen*3) / 4;
byte[] out = new byte[oLen];
int ip = 0;
int op = 0;
while (ip < iLen) {
int i0 = in[ip++];
int i1 = in[ip++];
int i2 = ip < iLen ? in[ip++] : 'A';
int i3 = ip < iLen ? in[ip++] : 'A';
if (i0 > 127 || i1 > 127 || i2 > 127 || i3 > 127)
throw new IllegalArgumentException ("Illegal character in Base64 encoded data.");
int b0 = map2[i0];
int b1 = map2[i1];
int b2 = map2[i2];
int b3 = map2[i3];
if (b0 < 0 || b1 < 0 || b2 < 0 || b3 < 0)
throw new IllegalArgumentException ("Illegal character in Base64 encoded data.");
int o0 = ( b0 <<2) | (b1>>>4);
int o1 = ((b1 & 0xf)<<4) | (b2>>>2);
int o2 = ((b2 & 3)<<6) | b3;
out[op++] = (byte)o0;
if (op < oLen) out[op++] = (byte)o1;
if (op < oLen) out[op++] = (byte)o2; }
return out; }

// Dummy constructor.
private Base64Coder() {}

} // end class Base64Coder

===============================
DigestService.java
===============================

import java.security.MessageDigest;

public final class DigestService
{
public static String encrypt(String plaintext) throws Exception {

MessageDigest md = MessageDigest.getInstance("SHA");

md.update(plaintext.getBytes("UTF-8"));

return new String(Base64Coder.encode(md.digest()));
}
}

================================
Base64Test.java
================================

public class Base64Test {

public static void main(String[] args) {
try{
System.out.println(DigestService.encrypt("rajnishbhatia19"));
}catch(Exception ex){
ex.printStackTrace();
}
}

}

========================
Results:
========================
OA4WNjP6mo9Yw12bDET5ZutjOC4=