home / IDM

Category: IDM

OpenIDM startup issue: Cannot load database's configuration. The database seems to be corrupted.

  When initiating the openIDM startup while connected to the orientDB database, I would rarely (though often enough to blog about it). a startup issue with the following error response:

OpenIDM Issue - javax.crypto.BadPaddingException: Given final block not properly padded

  org.forgerock.json.JsonException: org.forgerock.json.crypto.JsonCryptoException: javax.crypto.BadPaddingException: Given final block not properly padded

IDM ERROR - JDBC repository configured but datasource default was not found

  IDM ERROR - JDBC repository configured but datasource default was not found

Unexpected character ('¾' (code 190)): expected a valid value

  Unexpected character occurred when the IP addresses changes and the virtual instance was migrated into a separate network subnet.

forgerock-openidm-encryptedjwt-error

  Received the JWT error

ERROR Caused by com.google.api.client.auth.oauth2.TokenResponseException 400 Bad Request - invalid_g

  During the reconcilation from OpenIDM to the ICF google apps connector, the following error response would occur. ERROR Caused by com.google.api.client.auth.oauth2.TokenResponseException 400 Bad Request - invalid_grant

ForgeRock OpenIDM - InvalidCredentialException: Remote framework key is invalid

  In the past, the similar error occurred though for the Oracle Identity Management solution. invalidcredentialexception remote framework key is invalid Because they all share the ICF connector framework, the error/solution would be the same.

Caused by: org.forgerock.json.resource.BadRequestException: Target does not support attribute groups

  When performing the attempt of a reconciliation from ForgeRock IDM to Active Directory, I would get the following error

ForgeRock IDM - org.forgerock.script.exception.ScriptCompilationException: missing ; before statemen

  ForgeRock IDM - org.forgerock.script.exception.ScriptCompilationException: missing ; before statement

org.forgerock.script.exception.ScriptCompilationException: missing ; before statement

  org.forgerock.script.exception.ScriptCompilationException: missing ; before statement

ForgeRock OpenIDM - InvalidCredentialException: Remote framework key is invalid

  In the past, the similar error occurred though for the Oracle Identity Management solution. invalidcredentialexception remote framework key is invalid Because they all share the ICF connector framework, the error/solution would be the same.

HOW TO provision AD group membership from OpenIDM

  For what I see, there's not too many supportive documentations out there that will demonstrate how provision AD group membership with the ICF connector using OpenIDM. The use of the special ldapGroups attribute is not explained anywhere in the Integrators guides to to the date of this blog. This quick blog identifies the tasks required to provision AD group membership from OpenIDM to AD using the LDAP ICF connector. However this doesn't really explain what ldapGroups actually does and there's no real worked example of how to go from an Assignment to ldapGroups to an assigned group in AD. I wrote up a wiki article for my own reference: AD group memberships automatically to users This is just my view, others may disagree, but I think the implementation experience could be improved with some more documentation and a more detailed example here.

Comments