OIG 11G R2 Field Enablement Training

Transcription

1 OIG 11G R2 Field Enablement Training Lab 21 - Reports Lab Disclaimer: The Virtual Machine Image and other software are provided for use only during the workshop. Please note that you are responsible for deleting them from your computers before you leave. If you would like to try out any of the Oracle products, you may download them from the Oracle Technology Network ( or the Oracle E-Delivery WebSite ( Oracle Proprietary - Restricted to Personal Use in an Oracle partner training class 1 P a g e

2 Table of Contents OIG 11G R2 Field Enablement Training... 1 Reports Lab Introduction Configuring data for reporting Executing Reports... 9 Oracle Proprietary - Restricted to Personal Use in an Oracle partner training class 2 P a g e

3 1. Introduction Oracle Proprietary - Restricted to Personal Use in an Oracle partner training class 3 P a g e

4 2 Configuring data for reporting Let us prep some important data for reports. The reports which we would like to check out are 1. Rouge Account Report 2. Orphan account report Let us prepare the appropriate data. Follow the below steps. 1. Let us first modify a user who could fall into the category of Account Not Found in Target. 2. Key in the below commands, in the VM s Terminal window to verify that the user s account exists. # cd /app/oud/oracleunifieddirectory /bin #./ldapsearch -v -h identity.oracleads.com -p D 'cn=directory Manager' -w Oracle123 -b "dc=example,dc=com" "(uid=sarora)" 3. Now that we have verified, let us delete the account. # cd /app/oud/oracleunifieddirectory /bin #./ldapdelete -v -h identity.oracleads.com -p D 'cn=directory Manager' -w Oracle123 'uid=sarora,ou=people,dc=example,dc=com' 4. We shall now create a Rogue account in our Enterprise Directory. 5. In the VM environment in the Command line console/terminal hit the following commands. # cd /app/oud/oracleunifieddirectory /bin #./ldapmodify -v -a -h identity.oracleads.com -p D 'cn=directory Manager' -w Oracle123 Oracle Proprietary - Restricted to Personal Use in an Oracle partner training class 4 P a g e

5 6. Now the Terminal window is in a Listening mode. Insert the following text and hit Enter twice. dn: uid=rougeac,ou=people,dc=example,dc=com objectclass: top objectclass: person objectclass: organizationalperson objectclass: inetorgperson uid: ROUGEAC givenname: Rouge sn: AC cn: Rouge AC userpassword: Oracle You should see a success message. 8. Hit Ctrl + C in the terminal window to close the ldapmodify listener mode. You may close the terminal window. Oracle Proprietary - Restricted to Personal Use in an Oracle partner training class 5 P a g e

6 9. In a browser, open the Sysadmin console. 10. Login as ADMIN. 11. Click on System Configuration under System Management. 12. Search for the following system property Enable Exception Reports 13. Change the Value filed to TRUE if the old Value is FALSE. 14. Click on Save. 15. Either from a putty session or from a terminal window on the VM execute the following commands. # sqlplus # Enter User Name: DEV_OIM # Enter Password: Default # select obj_name, obj_initial_recon_date from obj; This should show a list of values with the obj_initial_recon_date field as NULL; now run the below query. # UPDATE OBJ SET OBJ_INITIAL_RECON_DATe = SYSDATE-2; # COMMIT; # select obj_name, obj_initial_recon_date from obj; 16. The above two changes have to be done for exceptions to be noted Setting the flag Changing the date filed to be a value previous to today s date 17. Go to back to the browser where Sysadmin console is open. 18. Under System Management click on Scheduler. A popup window opens. Oracle Proprietary - Restricted to Personal Use in an Oracle partner training class 6 P a g e

7 19. Search for a task by name, LDAP Connector User Search Reconciliation. 20. Click on the Job Name to open the task. 21. Input Enterprise Directory - OUD on TextField of IT Resource. 22. Click Apply. 23. Click on Run Now. 24. Keep clicking on Refresh until the task is complete. Check for a successful completion. 25. After completion, in the same Scheduler window, complete the below steps. 26. Search for a task by name, LDAP Connector User Search Delete Reconciliation. 27. Click on the Job Name to open the task. 28. Also ensure the IT Resource name is Enterprise Directory OUD.10or 29. Click Apply. 30. Click on Run Now. 31. Keep clicking on Refresh until the task is complete. Check for a successful completion. 32. In the same popup window navigate to the Event Management tab. Oracle Proprietary - Restricted to Personal Use in an Oracle partner training class 7 P a g e

8 33. Click on the arrow button to search. 34. Most probably it has to be the first event in the list; click on the event to see that the Rouge Account user is imported. Oracle Proprietary - Restricted to Personal Use in an Oracle partner training class 8 P a g e

9 3. Executing Reports For running this lab, ensure that all the services except Database are down. Best way is to just reboot the VM. After reboot, start BI Publisher. 1. Start BI Publisher from Startup_Scripts on VM Desktop, 2. Check the log (/app/logs/bip.log) to verify the startup status Oracle Proprietary - Restricted to Personal Use in an Oracle partner training class 9 P a g e

10 3. Hit the BI Publisher URL in the browser. 4. Login as ADMIN. 5. Click on Catalog at the right top corner. 6. Expand the menu in the following way. Shared Folders Oracle Identity Manager Exception Reports. 7. Click on Open for the Orphaned Account Summary report. 8. Provide the following parameters. a. Resource Name: LDAP User b. From date: Yesterday s date c. To Date: today; right now. 9. Click on Apply. There you go! Oracle Proprietary - Restricted to Personal Use in an Oracle partner training class 10 P a g e

11 10. Click on Catalog at the right top corner. 11. Expand the menu in the following way. Shared Folders Oracle Identity Manager Exception Reports. 12. Click on Open for the Rogue Accounts by Resource report. Oracle Proprietary - Restricted to Personal Use in an Oracle partner training class 11 P a g e

12 13. Provide the following parameters. a. Resource Name: LDAP User 14. Click Apply. There you see the report. 15. Notice the Account Details column. At the end of the message there is a number. 16. Hit OIG Sysadmin Console. 17. Click on Scheduler under System Management. 18. Navigate to the Event Management tab. 19. Enter the number and search. 20. Click on the event number to open. Oracle Proprietary - Restricted to Personal Use in an Oracle partner training class 12 P a g e

13 21. So the report is mentioning about the event which has brought a rogue account. Oracle Proprietary - Restricted to Personal Use in an Oracle partner training class 13 P a g e