1/14

Contents

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

1 Introduction

• 1.1 Latest Release Information
• 1.2 Purpose of this Document
• 1.3 System Requirements and Specifications
• 1.4 Certification Information
  • 1.4.1 Where to Find Oracle Fusion Middleware Certification Information
  • 1.4.2 Certification Exceptions
    • 1.4.2.1 Certification Information for Oracle Fusion Middleware 11g R1 with Oracle Database 11.2.0.1
    • 1.4.2.2 Excel Export Issue on Windows Vista Client
    • 1.4.2.3 Oracle Forms and Oracle Reports 11g Installer Issues In Windows Vista and Windows XP
    • 1.4.2.4 Restrictions on Specific Browsers
  • 1.4.3 Upgrading Sun JDK From 1.6.0_07 to 1.6.0_11
  • 1.4.4 JMSDELIVERYCOUNT Is Not Set Properly
  • 1.4.5 Viewer Plugin Required On Safari 4 To View Raw XML Source
• 1.5 Downloading and Applying Required Patches
• 1.6 Licensing Information

2 Oracle Adaptive Access Manager

• 2.1 General Issues and Workarounds
  • 2.1.1 OAAM Sessions is Not Recorded When IP Address from Header is an Invalid IP Address
  • 2.1.2 Checkpoint Boxes in Session are Displayed with Same Timestamp
  • 2.1.3 Autogenerated Agent Cases Display User Specific Data
• 2.2 Policy Management Issues and Workarounds
  • 2.2.1 Rule Condition Check Current Transaction Using the Filter Conditions Cannot Be Configured for Corresponding Attributes of Two Entity Instances
  • 2.2.2 Rule Condition to Check Consecutive Transactions Fails Entity Check
  • 2.2.3 Exclude IP List Parameter for User and Device Velocity Rule Conditions
  • 2.2.4 OAAM Offline Displays Only the Last Rule Executed Overwriting Previous
  • 2.2.5 User: Check First Login Time Rule Condition Always Triggers
• 2.3 Transaction Issues and Workarounds
  • 2.3.1 OAAM Displays Only the Last Rule Executed and Overwrites Previous Rules
  • 2.3.2 OAAM Shows Only 25 Transactions in Session Details
  • 2.3.3 Alerts Are Not Displayed Beyond 25 Transactions
  • 2.3.4 OAAM Transaction Cannot Be Created with Numeric Parameter of More than 16 Digits
  • 2.3.5 Transactions in Session Details Duplicated After 25
  • 2.3.6 Transaction ID Association with Alert Does Not Work
  • 2.3.7 OAAM Console Does Not Display Transaction Status
  • 2.3.8 Transaction Mapping Substring Error for First Character Value
  • 2.3.9 Update Time for Entity Is Updated Without Any Change in Entity Data
• 2.4 Knowledge-Based Authentication Issues and Workarounds
  • 2.4.1 Registration Logic Page Does Not Display KBA Logic
  • 2.4.2 Answer Logic Abbreviation Resource Was Not Used
  • 2.4.3 Update KBA for FFIEC Compliance
  • 2.4.4 Closing Browser on Image and Security Phrase Registration Page
  • 2.4.5 OAAM Change Password Does Not Display Any Validation for Password Fields
  • 2.4.6 ORA-01722 Occurs During KBA Update
  • 2.4.7 Registered Questions Are Deleted and Subsequent Challenge Does Not Succeed
• 2.5 Integration Issues and Workarounds
  • 2.5.1 setupOAMTapIntegration.sh Does Not Set oaam.uio.oam.secondary.host.port
  • 2.5.2 OAAM Does Not Support Juniper Single Sign-On for Authentication and Forgot Password Flow
  • 2.5.3 Step Up Authentication Changes
  • 2.5.4 TAP: Incorrect Error Message
  • 2.5.5 OAAM 11g SOAP Timeout Exception Handling
  • 2.5.6 OAAM Should Call UserManager.Unlock() in the Forgot Password Workflow
• 2.6 Reporting Issues and Workarounds
  • 2.6.1 Alert Message Link in Session Details Page Does Not Open the Alert Details
  • 2.6.2 OAAM Rules Breakdown Report Does Not Provide Correct Information
• 2.7 Configuration Issues and Workarounds
  • 2.7.1 Oracle Linux 6 (OEL6) with the Unbreakable Enterprise Kernel (UEK), Oracle Linux 6 (OEL6) with the Red Hat Compatible Kernel, and Red Hat Enterprise Linux 6 (RHEL6) Certification
  • 2.7.2 Database Archive and Purge Scripts Missing from Installation
  • 2.7.3 Juniper Login Fails Due to Incorrect CN Value and No UID Attribute in SAML Response
• 2.8 Customer Care Issues and Workarounds
  • 2.8.1 Investigator Role Overrides CSR Role When Both Roles Are Given to a User
  • 2.8.2 Scroll Bars Missing from Some Case Management Screens
  • 2.8.3 Case Search and Case Details Do Not Display Case Disposition
  • 2.8.4 Wrong User Attributed for Last Notes Added If Two Users Concurrently Update Case Notes
  • 2.8.5 Manually Created OAAM Agent Cases Cannot Be Searched by Username or User ID
  • 2.8.6 OAAM Allows Case Ownership Change and Add Notes Actions to Closed Case
  • 2.8.7 Create Agent Case Configurable Action Displays Wrong Name for Action
  • 2.8.8 KBA and OTP Failure Counter Reset and Unlock
• 2.9 Performance Issues and Workarounds
  • 2.9.1 Out of Memory Error Occurs Scrolling through Sessions Search in OAAM Admin
• 2.10 Device Fingerprinting Issues and Workarounds
  • 2.10.1 Errors Occur When Custom Locale is Used in OAAM .NET
• 2.11 Geolocation Data Loader Issues and Workarounds
  • 2.11.1 Upload of Geolocation Data Causes Unique Constraint Violation
  • 2.11.2 IP Location Data Loader Fails If There is a Blank Line in the File
• 2.12 Multi-Language Support Issues and Workarounds
  • 2.12.1 Session or Cases Page Cannot Open if Browser Language is Italian
  • 2.12.2 Session Search and Case Search By Date Range Does Not Work in OAAM Admin Console When Browser Language is Brazilian Portuguese or Spanish

3 Oracle Access Manager

• 3.1 Patch Requirements
  • 3.1.1 Plain Text Credentials Exposed in Diagnostic Logs when Creating an Identity Store
• 3.2 General Issues and Workarounds
  • 3.2.1 Resource Protected By Federation Shown Without Authentication
  • 3.2.2 SSO Authentication Screen Does Does Not Appear If Using Oracle Traffic Director
  • 3.2.3 Issues Registering the OSSO Plugin
  • 3.2.4 Modify Authentication Scheme When Upgrading OAM 11.1.1.5 to OAM 11.1.1.7
  • 3.2.5 RemoteRegistrationServerException Seen After PasteConfig IDM (T2P)
  • 3.2.6 System Error Page Displayed After Login
  • 3.2.7 T2P Paste Config Operation Fails With Exception
  • 3.2.8 Creating Policies For Webgate 11g
  • 3.2.9 Sending Valid Cookie For Embedded BI Content
  • 3.2.10 Incorrect SSO Agent Date/Time Shown to User
  • 3.2.11 Initial Messages After Webgate Registration Are Not Shown in the User's Locale
  • 3.2.12 Single-Click to Open Child Node is Not Supported in the Navigation Tree
  • 3.2.13 User Credential for Registration Tool Does Not Support Non-ASCII Characters on Native Server Locale
  • 3.2.14 Turkish and Greek Character Issues on Oracle Access Manager Authentication Page
  • 3.2.15 Oracle Access Manager Authentication Does Not Support Non-ASCII Passwords on Locales Other than UTF8
  • 3.2.16 Error Message of Create Agent Shows as Server Locale
  • 3.2.17 Referrals in LDAP Searches
  • 3.2.18 Non-ASCII Resources Require OHS To Restart To Make Protection Take Effect
  • 3.2.19 Non-ASCII Characters on Success/Failure URL Results in Garbled Redirect URL
  • 3.2.20 Resource with Non-ASCII Characters Cannot Be Protected by an OSSO Agent
  • 3.2.21 Error in Administration Server Log from Console Logins
  • 3.2.22 Application Domain Subtree in the Navigation Tree Is Not Rendered and Does Not Respond to User Actions
  • 3.2.23 editWebgateAgent Command Does Not Give An Error If Invalid Value is Entered
  • 3.2.24 WLST Command displayWebgate11gAgent In Offline Mode Displays the Webgate Agent Entry Twice
  • 3.2.25 Message Logged at Error Level Instead of at INFO When Servers in Cluster Start
  • 3.2.26 Help Is Not Available for WLST Command registeroifdappartner
  • 3.2.27 User Must Click Continue to Advance in Authentication Flow
  • 3.2.28 OCSP-Related Fields are Not Mandatory
  • 3.2.29 Database Node is Absent in the Console
  • 3.2.30 Online Help Provided Might Not Be Up To Date
  • 3.2.31 Oracle Access Manager Audit Report AUTHENTICATIONFROMIPBYUSER Throws a FROM Keyword Not Found Where Expected Error
  • 3.2.32 Disabled: Custom Resource Types Cannot be Created
  • 3.2.33 Use of a Non-ASCII Name for a Webgate Might Impact SSO Redirection Flows
  • 3.2.34 Authentication Module Lists Non-Primary Identity Stores
  • 3.2.35 Unable to Stop and Start OAM Server Through Identity and Access Node in Fusion Middleware Control
  • 3.2.36 AdminServer Won't Start if the Wrong Java Path Given with WebLogic Server Installation
  • 3.2.37 Changing UserIdentityStore1 Type Can Lock Out Administrators
  • 3.2.38 Page Layouts and Locales
  • 3.2.39 Some Pages Are Not Correctly Localized
  • 3.2.40 Non-ASCII Query String Issues with Internet Explorer v 7, 8, 9
  • 3.2.41 Oracle Virtual Directory with SSL Enabled
  • 3.2.42 Query String Not Properly Encoded
• 3.3 Configuration Issues and Workarounds
  • 3.3.1 For mod-osso Value for RedirectMethod Should be "POST"
  • 3.3.2 User Wrongly Directed to the Self-User Login after Logging Out of the Oracle Identity Manager Administration Console
  • 3.3.3 11g Webgate Fails to Install with Compact Configuration
  • 3.3.4 Download IBM JDK to Fix Issue with Configuring Remote Administrators
  • 3.3.5 Auditing Does Not Capture the Information Related to Authentication Failures if a Resource is Protected Using Basic Authentication Scheme
  • 3.3.6 Unable to Access Partner Information on the Production Environment
  • 3.3.7 Incompatible Msvcirt.dll Files
  • 3.3.8 IPv6 Support
  • 3.3.9 What to Avoid or Note in Oracle Access Manager Configuration
    • 3.3.9.1 Unsupported Operations for WLST Scripts
    • 3.3.9.2 Unsupported Operations for Oracle Access Manager Console and WLST
  • 3.3.10 Install Guides Do Not Include Centralized Logout Configuration Steps
  • 3.3.11 NULL Pointer Exception Shown in Administration Server Console During Upgrade
  • 3.3.12 Using Access SDK Version 10.1.4.3.0 with Oracle Access Manager 11g Servers
  • 3.3.13 Finding and Deleting Sessions Using the Console
  • 3.3.14 Non-ASCII Users with Resource Protected by Kerberos Authentication Scheme
• 3.4 Oracle Security Token Service Issues and Workarounds
  • 3.4.1 No Warnings Given If Required Details are Omitted
  • 3.4.2 New Requester Pages, Internet Explorer v7, and Japanese Locale
  • 3.4.3 Delete Button Not Disabled When Tables Have No Rows
  • 3.4.4 Copying an Issuance Template Does Not Copy All Child Elements
  • 3.4.5 Apply and Revert Buttons are Enabled
  • 3.4.6 Only Generic Fault Errors Written to Oracle WSM Agent Logs
  • 3.4.7 Server and Client Key Tab Files Must be the Same Version
  • 3.4.8 Default Partner Profile Required for WS-Security
  • 3.4.9 SAML Token Issued When NameID is Not Found
• 3.5 Integration and Inter-operability Issues and Workarounds
  • 3.5.1 WNA Authentication Does Not Function on Windows 2008
  • 3.5.2 JVM Plug-in Ignores Cookies Marked 'httponly'
• 3.6 Oracle Access Manager with Impersonation Workarounds
  • 3.6.1 Impersonation Can Fail on Internet Explorer v 7, 8, 9
  • 3.6.2 With Oracle Access Manager 11g ORA_FUSION_PREFS Cookie Domain is Three Dots
• 3.7 Documentation Errata
  • 3.7.1 Oracle Fusion Middleware Administrator's Guide for Oracle Access Manager with Oracle Security Token Service
  • 3.7.2 Oracle Fusion Middleware Developer's Guide for Oracle Access Manager and Oracle Security Token Service
  • 3.7.3 Oracle Fusion Middleware Integration Guide for Oracle Access Manager
    • 3.7.3.1 Updates to Prerequisites for OAM-OIM Integration
    • 3.7.3.2 Properties for configOIM Command
    • 3.7.3.3 Updated Example for Integrating OIF/SP

4 Oracle Entitlements Server

• 4.1 General Issues and Workarounds
  • 4.1.1 Using Backslash on Oracle Internet Directory Policy Store
  • 4.1.2 Performance Tuning the Oracle Database Policy Store
  • 4.1.3 Action Bar Disappears When Using Internet Explorer 7
  • 4.1.4 Re-created Application May Not Be Distributed in Controlled Mode
  • 4.1.5 Enterprise Manager Doesn't Pick Up Newly Added Audit Events
  • 4.1.6 Attributes Passed to Authorization Request Are Treated as Case Sensitive
  • 4.1.7 Audit Schema Definitions are Incomplete
  • 4.1.8 Java Security Module on IPv6 Client Not Supported on Windows
  • 4.1.9 WebLogic Security Module Policy Distribution Configuration Issue on Windows IPv6 Hosts
  • 4.1.10 Validating Attribute Names in Custom Functions
• 4.2 Configuration Issues and Workarounds
• 4.3 Documentation Errata

5 Oracle Identity Federation

• 5.1 General Issues and Workarounds
  • 5.1.1 Database Table for Authentication Engine must be in Base64 Format
  • 5.1.2 Considerations for Oracle Identity Federation HA in SSL mode
  • 5.1.3 Database Column Too Short error for IDPPROVIDEDNAMEIDVALUE
• 5.2 Configuration Issues and Workarounds
  • 5.2.1 WLST Environment Setup when SOA and OIF are in Same Domain
  • 5.2.2 Oracle Virtual Directory Requires LSA Adapter
  • 5.2.3 Settings for Remote WS-Fed SP Must be Changed Dynamically
  • 5.2.4 Required Property when Creating a WS-Fed Trusted Service Provider
  • 5.2.5 Federated Identities Table not Refreshed After Record Deletion
  • 5.2.6 Default Authentication Scheme is not Saved
  • 5.2.7 Configuring 10g to Work with 11g Oracle Identity Federation using Artifact Profile
  • 5.2.8 Regenerating OAM 11g Key Requires Oracle Identity Federation Upgrade Script
• 5.3 Documentation Errata

6 Oracle Identity Manager

• 6.1 Patch Requirements
  • 6.1.1 Obtaining Patches From My Oracle Support (Formerly OracleMetaLink)
  • 6.1.2 Patch Requirements for Oracle Database 11g (11.1.0.7)
  • 6.1.3 Patch Requirements for Oracle Database 11g (11.2.0.2.0)
  • 6.1.4 Patch Requirements for Segregation of Duties (SoD)
  • 6.1.5 Patch Upgrade Requirement
• 6.2 General Issues and Workarounds
  • 6.2.1 Do Not Use Platform Archival Utility
  • 6.2.2 SPML-DSML Service is Unsupported
  • 6.2.3 Resource Object Names Longer than 100 Characters Cause Import Failure
  • 6.2.4 Status of Users Created Through the Create and Modify User APIs
  • 6.2.5 Status of Locked Users in Oracle Access Manager Integrations
  • 6.2.6 Generating an Audit Snapshot after Bulk-Loading Users or Accounts
  • 6.2.7 Browser Timezone Not Displayed
  • 6.2.8 Date Format Change in the SoD Timestamp Field Not Supported
  • 6.2.9 Bulk Loading CSV Files with UTF-8 BOM Encoding Not Supported
  • 6.2.10 Date Type Attributes are Not Supported for the Default Scheduler Job, "Job History Archival"
  • 6.2.11 Low File Limits Prevent Adapters from Compiling
  • 6.2.12 Reconciliation Engine Requires Matching Rules
  • 6.2.13 SPML Requests Do Not Report When Any Date is Specified in Wrong Format
  • 6.2.14 Logs Populated with SoD Exceptions When the SoD Message Fails and Gets Stuck in the Queue
  • 6.2.15 A Backslash (\) Cannot Be Used in a weblogic.properties File
  • 6.2.16 Underscore Character Cannot Be Used When Searching for Resources
  • 6.2.17 Assign to Administrator Action Rule is Not Supported by Reconciliation
  • 6.2.18 Some Buttons on Attestation Screens Do Not Work in Mozilla Firefox
  • 6.2.19 The maxloginattempts System Property Causes Autologin to Fail When User Tries to Unlock
  • 6.2.20 "<User not found>" Error Message Appears in AdminServer Console While Setting-Up an Oracle Identity Manager-Oracle Access Manager Integration
  • 6.2.21 Do Not Use Single Quote Character in Reconciliation Matching Rule
  • 6.2.22 Do Not Use Special Characters When Reconciling Roles from LDAP
  • 6.2.23 SoD Check During Request Provisioning Fails While Using SAML Token Client Policy When Default SoD Composite is Used
  • 6.2.24 SoD Check Fails While Using Client-Side Policy in Callback Invocation During Request Provisioning
  • 6.2.25 Error May Appear During Provisioning when Generic Technology Connector Framework Uses SPML
  • 6.2.26 Cannot Click Buttons in TransUI When Using Mozilla Firefox
  • 6.2.27 LDAP Handler May Cause Invalid Exception While Creating, Deleting, or Modifying a Role
  • 6.2.28 Cannot Reset User Password Comprised of Non-ASCII Characters
  • 6.2.29 Benign Exception and Error Message May Appear While Patching Authorization Policies
  • 6.2.30 The DateTime Pick in the Trans UI Does Not Work Correctly in the Thai Locale
  • 6.2.31 User Without Access Policy Administrators Role Cannot View Data in Access Policy Reports
  • 6.2.32 Archival Utility Throws an Error for Empty Date
  • 6.2.33 TransUI Closes with Direct Provisioning of a Resource
  • 6.2.34 Scheduler Throws "ParameterValueTypeNotSupportedException" Instead of "RequiredParameterNotSetException"
  • 6.2.35 All New User Attributes Are Not Supported for Attestation in Oracle Identity Manager 11g
  • 6.2.36 LDAP GUID Mapping to Any Field of Trusted Resource Not Supported
  • 6.2.37 User Details for Design Console Access Field Must Be Mapped to Correct Values When Reading Modify Request Results
  • 6.2.38 Cannot Create a User Containing Asterisks if a Similar User Exists
  • 6.2.39 Blank Status Column Displayed for Past Proxies
  • 6.2.40 Mapping the Password Field in a Reconciliation Profile Prevents Users from Being Created
  • 6.2.41 UID Displayed as User Login in User Search Results
  • 6.2.42 Roles/Organizations Browse Trees Disappear
  • 6.2.43 Entitlement Selection Is Not Optional for Data Gathering
  • 6.2.44 Oracle Identity Manager Server Throws Generic Exception While Deploying a Connector
  • 6.2.45 Create User API Allows Any Value for the "Users.Password Never Expires", "Users.Password Cannot Change", and "Users.Password Must Change" Fields
  • 6.2.46 Incorrect Label in JGraph Screen for the GTC
  • 6.2.47 Running the Workflow Registration Utility Generates an Error
  • 6.2.48 Native Performance Pack is Not Enabled On Solaris 64-bit JVM Install
  • 6.2.49 Error in the Create Generic Technology Connector Wizard
  • 6.2.50 DSML Profile for the SPML Web Service is Not Deployed With Oracle Identity Manager
  • 6.2.51 New Human Tasks Must Be Copied in SOA Composites
  • 6.2.52 Modify Provisioned Resource Request Does Not Support Service Account Flag
  • 6.2.53 Erroneous "Query by Example" Icon in Identity Administration Console
  • 6.2.54 The XL.ForcePasswordChangeAtFirstLogin System Property Is No Longer Used
  • 6.2.55 The tcExportOperationsIntf.findObjects(type,name) API Does Not Accept the Asterisk (*) Wilcard Character in Both Parameters
  • 6.2.56 Disabled Links on the Access Policy Summary Page Opened in Mozilla FireFox
  • 6.2.57 Benign Error is Generated on Editing the IT Resource Form in Advanced Administration
  • 6.2.58 User Account is Not Locked in iPlanet Directory Server After it is Locked in Oracle Identity Manager
  • 6.2.59 Oracle Identity Manager Does Not Support Autologin With JavaAgent
  • 6.2.60 Benign Error Logged on Opening Access Policies, Resources, or Attestation Processes
  • 6.2.61 User Locked in Oracle Identity Manager But Not in LDAP
  • 6.2.62 Reconciliation Profile Must Not Be Regenerated Via Design Console for Xellerate Organization Resource Object
  • 6.2.63 Benign Error Logged on Clicking Administration After Upgrade
  • 6.2.64 Provisioning Fails Through Access Policy for Provisioned User
  • 6.2.65 Benign Warning Messages Displayed During Oracle Identity Manager Managed Server Startup
  • 6.2.66 Benign Message Displayed When Running the Deployment Manager
  • 6.2.67 Deployment Manager Export Fails When Started Using Microsoft Internet Explorer 7 With JRE Plugin 1.6_23
  • 6.2.68 User Creation Fails in Microsoft Active Directory When Value of Country Attribute Exceeds Two Characters
  • 6.2.69 Deployment Manager Import Fails if Scheduled Job Entries Are Present Prior To Scheduled Task Entries in the XML File
  • 6.2.70 Permission on Target User Required to Revoke Resource
  • 6.2.71 Reconciliation Event Fails for Trusted Source Reconciliation Because of Missing Reconciliation Rule in Upgraded Version of Oracle Identity Manager
  • 6.2.72 XML Validation Error on Oracle Identity Manager Managed Server Startup
  • 6.2.73 Cannot View or Edit Adapter Mapping in the Data Object Manager Form of the Design Console
  • 6.2.74 Role Memberships for Assign or Revoke Operations Not Updated on Enabling or Disabling Referential Integrity Plug-in
  • 6.2.75 Deployment Manager Import Fails if Data Level for Rules is Set to 1
  • 6.2.76 Reconciliation Data Displays Attributes That Are Not Modified
  • 6.2.77 Benign Errors Displayed on Starting the Scheduler Service When There are Scheduled Jobs to be Recovered
  • 6.2.78 Trusted Source GTC Reconciliation Mapping Cannot Display Complete Attribute Names
  • 6.2.79 Benign Error Logged for Database Connectivity Test
  • 6.2.80 MDS Validation Error When Importing GTC Provider Through the Deployment Manager
  • 6.2.81 Encrypted User-Defined Field (UDF) Cannot be Stored with Size of 4000 Characters or More
  • 6.2.82 Request Approval Fails With Callback Service Failure
  • 6.2.83 Localized Display Name is Not Reconciled Via User/Role Incremental Reconciliation with iPlanet Directory Server
  • 6.2.84 LDAP Role Hierarchy and Role Membership Reconciliation With Non-ASCII Characters Does Not Reconcile Changes in Oracle Identity Manager
  • 6.2.85 Import of Objects Fails When All Objects Are Selected for Export
  • 6.2.86 Benign Audit Errors Logged After Upgrade
  • 6.2.87 Connector Upgrade Fails if Existing Data is Bigger in Size Than New Column Length
  • 6.2.88 Connector Artifacts Count Increases in the Deployment Manager When File is Not Imported
  • 6.2.89 Uploading JAR Files By Using the Upload JAR Utility Fails
  • 6.2.90 Oracle Identity Manager Data and MT Upgrade Fails Because Change of Database User Password
  • 6.2.91 Reverting Unsaved UDFs Are Not Supported in the Administration Details Page for Roles and Organizations
  • 6.2.92 Resources Provisioned to User Without Checking Changes in User Status After Request is Submitted
  • 6.2.93 Starting UCP Connection Pool Fails When Trying to Create User on 64-Bit Microsoft Windows With JDK 6
  • 6.2.94 Config.sh Command Fails When JRockit is Installed With Data Samples and Source
  • 6.2.95 Unexpected Memory Usage in Oracle Identity Manager 11g Release 1(11.1.1)
  • 6.2.96 Reports Link No Longer Exists in the Administrative and User Console
  • 6.2.97 Not Allowing to Delete a Role Whose Assigned User Members are Deleted
  • 6.2.98 Roles and Organizations Do Not Support String UDFs of Password Type
  • 6.2.99 Error on Importing Connector By Using the Deployment Manager
  • 6.2.100 Manage Localizations Dialog Box Does Not Open After Modifying Roles
  • 6.2.101 Not Allowing to Create User With Language-Specific Display Name Values
  • 6.2.102 SoD Check Results Not Displayed for Requests Created by Users for the PeopleSoft Resource
  • 6.2.103 The XL.UnlockAfter System Property and the Automatically Unlock User Scheduled Job Do Not Take Effect
  • 6.2.104 Resetting Password on Account Lockout Does Not Unlock User
  • 6.2.105 Starting Oracle Identity Manager and SOA Server on Some 64-bit Microsoft Windows Computers for the First Time Takes Time
  • 6.2.106 Incremental and Full Reconciliation Jobs Cannot Be Run Together
  • 6.2.107 Incorrect Content in the ScheduleTask Jars Loaded and Third Party Jars Tables in the MT Upgrade Report
  • 6.2.108 Scroll Bar Not Available on the Select Connector Objects to Be Upgraded Page of the Connector Management - Upgrading Wizard
  • 6.2.109 Adapter Import Might Display Adapter Logic if Compilation Fails Because of Incorrect Data
  • 6.2.110 XIMDD Tests Fail in Oracle Identity Manager
• 6.3 Configuration Issues and Workarounds
  • 6.3.1 Configuring UDFs to be Searchable for Microsoft Active Directory Connectors
  • 6.3.2 Creating or Modifying Role Names When LDAP Synchronization is Enabled
  • 6.3.3 ADF Issue Causes Oracle Identity Manager to Fail on the Sun JDK
  • 6.3.4 Nexaweb Applet Does Not Load In an Oracle Identity Manager and Oracle Access Manager Integrated Environment
  • 6.3.5 Packing a Domain With managed=false Option
  • 6.3.6 Option Not Available to Specify if Design Console is SSL-Enabled
  • 6.3.7 Nexaweb Applet Does Not Load in JDK 1.6.0_20
  • 6.3.8 Error is Generated on Starting Servers With Sun JDK 160_24 (32-bit) on Microsoft Windows 2008
  • 6.3.9 Oracle Identity Manager and Design Console Must be Installed in Different Directory Paths
  • 6.3.10 Error on Adding Organization to User in Windows Explorer 8
• 6.4 Multi-Language Support Issues and Limitations
  • 6.4.1 Multi-language Valued Attributes in SPML and Oracle Identity Manager Do Not Match
  • 6.4.2 Login Names with Some Special Characters May Fail to Register
  • 6.4.3 The Create Role, Modify Role, and Delete Role Request Templates are Not Available for Selection in the Request Templates List
  • 6.4.4 Parameter Names and Values for Scheduled Jobs are Not Translated
  • 6.4.5 Bidirectional Issues for Legacy User Interface
  • 6.4.6 Localization of Role Names, Role Categories, and Role Descriptions Not Supported
  • 6.4.7 Localization of Task Names in Provisioning Task Table Not Supported
  • 6.4.8 Localization of Search Results of Scheduled Tasks Not Supported
  • 6.4.9 Searching for User Login Names Containing Certain Turkish Characters Causes an Error
  • 6.4.10 Localization of Notification Template List Values for Available Data Not Supported
  • 6.4.11 Searching for Entity Names Containing German "ß" (Beta) Character Fails in Some Features
  • 6.4.12 Special Asterisk (*) Character Not Supported
  • 6.4.13 Translated Error Messages Are Not Displayed in UI
  • 6.4.14 Reconciliation Table Data Strings are Hard-coded on Reconciliation Event Detail Page
  • 6.4.15 Translated Password Policy Strings May Exceed the Limit in the Background Pane
  • 6.4.16 Date Format Validation Error in Bi-Directional Languages
  • 6.4.17 Mistranslation on the Create Job page
  • 6.4.18 E-mail Notification for Password Expiration Cannot Be Created With Arabic Language Setting
  • 6.4.19 Translated Justification is Not Displayed in Access Policy-Based Resource Provisioning Request Detail
  • 6.4.20 Additional Single Quotes Displayed in GTC Reconciliation Mapping Page for French UI
  • 6.4.21 Not Allowing to Enter Design Console Password When Server Locale is Set to Simple Chinese, Traditional Chinese, Japanese, or Korean
  • 6.4.22 Bidirectional Text Not Supported in Nexaweb Pages
  • 6.4.23 Do Not Modify Oracle Identity Manager Predefined System Properties in Non-English Locale
  • 6.4.24 Error Generated When Translated String for System Property Name Exceeds Maximum Allowed Length in PTY_NAME Column
  • 6.4.25 Password Notification is Not Sent if User Login Contains Special Characters
  • 6.4.26 Reset Password Fails if User Login Contains Lowercase Special Characters
  • 6.4.27 Email Notification Not Send Per Preferred Locale
  • 6.4.28 Help Contents Displayed in English on Non-English Browsers
• 6.5 Documentation Errata

7 Oracle Internet Directory

• 7.1 General Issues and Workarounds
  • 7.1.1 Cloned Oracle Internet Directory Instance Fails or Runs Slowly
  • 7.1.2 Oracle Internet Directory Fails to Start on Solaris SPARC System Using ISM
  • 7.1.3 Custom Audit Policy Settings Fail When Set Through Enterprise Manager
  • 7.1.4 Deleting Mandatory attributeTypes Referenced by objectClass is Successful
  • 7.1.5 Oracle Unified Directory 11.1.2.0 orclguid Attribute is Not Mapped for Server Chaining
  • 7.1.6 ODSM is Not Displaying Online Help Correctly in Internet Explorer 11
  • 7.1.7 ODSM Browser Window Becomes Unusable
  • 7.1.8 Bulkmodify Might Generate Errors
  • 7.1.9 Turkish Dotted I Character is Not Handled Correctly
  • 7.1.10 OIDCMPREC Might Modify Operational Attributes
  • 7.1.11 OIDREALM Does Not Support Realm Removal
  • 7.1.12 Apply Patch to Oracle Database 11.2.0.1.0 to Fix Purge Job Problem
  • 7.1.13 SQL of OPSS ldapsearch Might Take High %CPU
  • 7.1.14 If you Start the Replication Server by Using the Command Line, Stop it Using the Command Line
  • 7.1.15 ODSM Problems in Internet Explorer 7
• 7.2 Configuration Issues and Workarounds
  • 7.2.1 Re-Create Wallet After Moving Oracle Internet Directory from Test to Production
• 7.3 Documentation Errata
  • 7.3.1 Oracle Internet Directory VM Template is Not Available
  • 7.3.2 Description of the orclrevpwd Attribute Needs Clarification
  • 7.3.3 LDAP Commands Do Not Support the -k|-K Option
  • 7.3.4 Description of the orclOIDSCExtGroupContainer Attribute Needs Clarification
  • 7.3.5 Setting Up LDAP Replication Needs Clarification
  • 7.3.6 Password Expired Response Control is Not Documented
  • 7.3.7 Configuring the SSO Server for ODSM Integration Needs Clarification
  • 7.3.8 Determining Expired Users in Oracle Internet Directory
  • 7.3.9 New Superuser Account Must be Direct Member of DirectoryAdminGroup Group
  • 7.3.10 SSL Authentication Mode 1 and Anonymous SSL Ciphers Need Clarification
  • 7.3.11 Documentation of Replication Server Control and Failover is Incomplete
  • 7.3.12 Server Restart After Adding an Encrypted Attribute is Not Documented
  • 7.3.13 PASSWORD_VERIFY_FUNCTION Must be Set to NULL to Work with RCU is Not Documented
  • 7.3.14 Setting Up Oracle Internet Directory SSL Mutual Authentication
  • 7.3.15 Replication Instructions in Tutorial for Identity Management are Incomplete

8 Oracle Platform Security Services

• 8.1 Configuration Issues and Workarounds
  • 8.1.1 Oracle Fusion Middleware Audit Framework
    • 8.1.1.1 Configuring Auditing for Oracle Access Manager
    • 8.1.1.2 Audit Reports do not Display Translated Text in Certain Locales
    • 8.1.1.3 Audit Reports Always Display in English
    • 8.1.1.4 Audit Store Does not Support Reassociation through EM
    • 8.1.1.5 OWSM Audit Events not Audited
  • 8.1.2 Trailing '\n' Character in Bootstrap Key
  • 8.1.3 Users with Same Name in Multiple Identity Stores
  • 8.1.4 Script listAppRoles Outputs Wrong Characters
  • 8.1.5 Propagating Identities over the HTTP Protocol
    • 8.1.5.1 Addition to Section Propagating Identities over the HTTP Protocol
    • 8.1.5.2 Correction to Section Client Application Code Sample
    • 8.1.5.3 Correction to Section Keystore Service Configuration
    • 8.1.5.4 Updating the Trust Service Configuration Parameters
  • 8.1.6 Pool Configuration Missing in Identity Store
• 8.2 Documentation Errata
  • 8.2.1 Updated Configuration for Role Category
  • 8.2.2 Correct setAuditRepository Command Reference Example
  • 8.2.3 Demo CA Certificate not for Production Use
  • 8.2.4 Incorrect Link to ILM Content
  • 8.2.5 Incorrect Table Title in Appendix C
  • 8.2.6 Clarification of Note in Appendix C
  • 8.2.7 Notes Regarding Need for Server Restarts

9 SSL Configuration in Oracle Fusion Middleware

• 9.1 General Issues and Workarounds
  • 9.1.1 Incorrect Message or Error when Importing a Wallet

10 Oracle Directory Integration Platform

• 10.1 General Issues and Workarounds
  • 10.1.1 Enabling the Domain-Wide Administration Port on Oracle WebLogic Server Prevents use of the DIP Command Line Interface
  • 10.1.2 The AttrMapping Rule dnconvert() function is not Working During Directory Synchronization
  • 10.1.3 The Oracle Password Filter for Microsoft Active Directory is not Certified for use With Oracle Unified Directory or Oracle Directory Server Enterprise Edition
  • 10.1.4 LDIF Files That Contain Non-ASCII Characters Will Cause the testProfile Command Option to Fail if the LDIF File has Native Encoding
  • 10.1.5 Some Changes May Not Get Synchronized Due to Race Condition in Heavily-Loaded Source Directory
  • 10.1.6 Synchronization Continues After Stopping Oracle Directory Integration Platform
  • 10.1.7 File Path Separator Must Be Escaped on Windows
  • 10.1.8 Certain Queries and Provisioning Profile Functionality may Fail on JDK 1.6 u 21
• 10.2 Configuration Issues and Workarounds
  • 10.2.1 Update the Mapping Rule for Novell eDirectory
  • 10.2.2 Do not use localhost as Oracle Internet Directory Hostname When Configuring Oracle Directory Integration Platform
  • 10.2.3 You may Need to Restart the Directory Integration Platform After Running dipConfigurator Against Oracle Unified Directory
  • 10.2.4 When Configuring a Profile, you may Need to Scroll Past a Section of Whitespace to View Mapping Rules
  • 10.2.5 Resource Usage Charts will not Display if Multiple IDM Domains are Running on the Same Host
• 10.3 Documentation Errata

11 Oracle Virtual Directory

• 11.1 General Issues and Workarounds
  • 11.1.1 Oracle Virtual Directory Fails to Start When Unsupported Ciphersuite for Listener SSL Config is Selected in Enterprise Manager
  • 11.1.2 EUS Adapter Creation Failed
  • 11.1.3 Manually Edit adapters.os_xml File When Creating DB Adapter For Sybase
  • 11.1.4 ODSM Version Does Not Change in Enterprise Manager after Patching ODSM to 11.1.1.6.0
  • 11.1.5 ODSM Bug Requires Editing of odsmSkin.css File
  • 11.1.6 Oracle Directory Services Manager Browser Window is Not Usable
  • 11.1.7 Exceptions May Occur in Oracle Directory Services Manager When Managing Multiple Oracle Virtual Directory Components and One is Stopped
  • 11.1.8 Identifying the DN Associated with an Access Control Point in Oracle Directory Services Manager
  • 11.1.9 Issues With Oracle Virtual Directory Metrics in Fusion Middleware Control
    • 11.1.9.1 Configuring Operation-Specific Plug-Ins to Allow Performance Metric Reporting in Fusion Middleware Control After Upgrading to 11g Release 1 (11.1.1)
  • 11.1.10 Using a Wildcard when Performing an LDAPSEARCH on a TimesTen Database Causes an Operational Error
  • 11.1.11 ODSM Version 11.1.1.4.0 Does Not Support OVD Versions 11.1.1.2.0 or 11.1.1.3.0
  • 11.1.12 ODSM Version 11.1.1.5.0 Does Not Support OVD Versions 11.1.1.2.0, 11.1.1.3.0, or 11.1.1.4.0
  • 11.1.13 ODSM Version 11.1.1.6.0 Does Not Support OVD Versions 11.1.1.2.0, 11.1.1.3.0, 11.1.1.4.0, or 11.1.1.5.0
  • 11.1.14 Oracle Virtual Directory Issues with IPv6 Stack on Windows Platforms Using JDK6
  • 11.1.15 Users with Non-ASCII Names Might Encounter Problems when Using ODSM with SSO
  • 11.1.16 Creating an Attribute/Object Class Throws NPE Error
  • 11.1.17 Patch Required to Enable Account Lockout Feature
  • 11.1.18 ODSM Problems in Internet Explorer 7
  • 11.1.19 Strings Related to New Enable User Account Lockout Feature on EUS Wizard Are Not Translated
  • 11.1.20 All Connections Created In ODSM 11.1.1.1.0 Are Lost After Upgrading to OVD or OID Version 11.1.1.7.0
  • 11.1.21 Incorrect ODSM Version Displays in Enterprise Manager Console After OVD Upgrade
  • 11.1.22 Oracle Virtual Directory Versions 11.1.1.6.0 and 11.1.1.7.0 Start-Up Fails on Windows
  • 11.1.23 Connection Issues to OVD
  • 11.1.24 ODSM Version 11.1.1.70 Does Not Support OVD Versions 11.1.1.2.0, 11.1.1.3.0, 11.1.1.4.0, 11.1.1.5.0, or 11.1.1.6.0
  • 11.1.25 Modify Completes When Updating a Mandatory Attribute to Null
  • 11.1.26 Online Help Section is Not Working
• 11.2 Configuration Issues and Workarounds
  • 11.2.1 Configuring an OVD/OID Adapter For SSL Mutual Authentication
• 11.3 Documentation Errata
  • 11.3.1 Deploying Oracle Unified Directory with Oracle Virtual Directory