IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  IGI: Get User Attributes Outside of Event

    Posted Tue May 04, 2021 03:36 AM
    Trying to retrieve the user attributes outside of event, and following the pre-mapping rule example that describe in 
    Pre-mapping and post-mapping rule examples
    Ibm remove preview
    Pre-mapping and post-mapping rule examples
    Examples of pre-mapping and post-mapping rules to retrieve user data and create and email a user password so that the user can access a restored LDAP account.
    View this on Ibm >
     
    But always get the following error:
    04/05/2021 14:25:37 ERROR [Active Directory] Exception executing consequence for rule "TT" in defaultpkg: 33 - java.lang.Exception: Error JdbcUtil: org.postgresql.util.PSQLException: ERROR: function lower(numeric) does not exist
    Hint: No function matches the given name and argument types. You might need to add explicit type casts.
    Position: 39
    04/05/2021 14:25:37 ERROR [Active Directory] Pre-Mapping rule error.: java.lang.Exception: Error JdbcUtil: org.postgresql.util.PSQLException: ERROR: function lower(numeric) does not exist
    Hint: No function matches the given name and argument types. You might need to add explicit type casts.
    Position: 39
    04/05/2021 14:25:37 ERROR [Active Directory] ConnectorException: Pre-Mapping rule error. 33 - java.lang.Exception: Error JdbcUtil: org.postgresql.util.PSQLException: ERROR: function lower(numeric) does not exist
    Hint: No function matches the given name and argument types. You might need to add explicit type casts.
    Position: 39

    Anyone can offer the right method to retrieve user attributes from IGI core?
    Thank in advice.


    ------------------------------
    Andy Wu
    ------------------------------


  • 2.  RE: IGI: Get User Attributes Outside of Event

    Posted Wed May 05, 2021 02:38 AM

    Andy, 

    There is a Support Technote on this, somewhere, but i can not find it now.  The service attributes are stores as a JSON string in the DN and column definition is too small for some targets ( like AD). You might need to increase the size of this column. If you are able to open a Support Case, I would get assistance from L2.

    to increase size of  JSONATTRS from 4096 to 6144 
    ALTER TABLE IGACORE.CHANGELOG ALTER COLUMN JSONATTRS SET DATA TYPE BLOB (6144)


    ------------------------------
    [David] [Kuehr-McLaren] [
    Security Expert Labs]
    [Senior Security Architect - STSM]
    [IBM]
    [dkuehrmc@us.ibm.com]
    ------------------------------



  • 3.  RE: IGI: Get User Attributes Outside of Event

    Posted Wed May 05, 2021 03:05 AM
    Hi David,
         I can't open support case now, we are in POC state to my client.
    We are trying to replace my clients from Novell(NetIQ) Identity Manager to IGI.

    Many thanks for your response.

    ------------------------------
    Andy Wu
    ------------------------------