OpenIDM LDAP connector types (LiveSync, Implicit Sync)

1. LiveSync:
                    It sync changes from LDAP to OpenIDM  ( LDAP --> OpenIDM)

2. Implicit Sync:
                           It sync changes from IDM to LDAP (OpenIDM --> OpenDJ)

openidm error SEVERE: OpenICF connector test of SystemIdentifier{ uri='system/ldap/'} failed!

Error while configuring OpenAM with OpenDJ

SEVERE: OpenICF connector test of SystemIdentifier{ uri='system/ldap/'} failed!


Solution:

Issues could be IDM is unable to reach OpenDJ

check the following if ds server information is correct

1. DNS name resolution
2. openidm/db/ds/conf/repo.ds-external.json

forgerock OpenIDM and OpenAM integration error "accountClaiming" "Access Denied"

After integrating OpenIDM with OpenAM when you try login to OpenIDM admin console you get

accountClaiming at the url and "Access Denied" error.

Solution:

During integration you should have specified value of "Authorized OIDC SSO Clients"

if you missed this you will get his error. This property is located at


Services --> Oauth2 Provider --> Advanced OpenID Connect

enter value "openidm" at the value of  "Authorized OIDC SSO Clients"

and SAVE

Now if you try to login to the console. You should be able to login to the IDM console with openam username. Any user you are trying to login with should exist in OpenDJ

 

OpenIDM and OpenAM integration error redirect_uri_mismatch

During integration of OpenIDM and OpenAM, once you change the Directory services from local to OpenDJ you will get this error when you try to login.

Solution:

login to OpenAM
click on Top Level realm
from left side select Applications --> OAuth 2.0

on CORE tab go to Redirection URIs
enter the url you think you have put during "Configure Forgerock Identity Provider" section "Configure Access Management" property "Redirection URIs" value

correcting this value will fix this error 

SEVERE: Bundle: org.forgerock.openidm.repo-jdbc [8] FrameworkEvent ERROR

SEVERE: Bundle: org.forgerock.openidm.repo-jdbc [8] FrameworkEvent ERROR
org.apache.felix.log.LogException: org.osgi.framework.BundleException: Activator start error in bundle org.forgerock.openidm.repo-jdbc [8]

 at org.apache.felix.framework.Felix.activateBundle(Felix.java:2290)
        at org.apache.felix.framework.Felix.startBundle(Felix.java:2146)
        at org.apache.felix.framework.Felix.setActiveStartLevel(Felix.java:1373)
        at org.apache.felix.framework.FrameworkStartLevelImpl.run(FrameworkStartLevelImpl.java:308)
        at java.lang.Thread.run(Thread.java:745)
Caused by: org.apache.felix.log.LogException: com.zaxxer.hikari.pool.HikariPool$PoolInitializationException: Failed to initialize pool: Communications link failure

Solution:

Error was fixed after putting &useSSL=false at the end of jdbcUrl in datasource.jdbc-default.json file

"jdbcUrl" : "jdbc:mysql://&{openidm.repo.host}:&{openidm.repo.port}/openidm?allowMultiQueries=true&characterEncoding=utf8&useSSL=false"

 

ClassNotFoundException: com.mysql.jdbc.Driver not found by org.forgerock.openidm.datasource

Using LOGGING_CONFIG: -Djava.util.logging.config.file=/../../forgerock/openidm/conf/logging.properties
[15] Jan 17, 2020 9:53:37.157 PM org.forgerock.openidm.config.logging.LogServiceTracker logEntry
SEVERE: Bundle: org.forgerock.openidm.repo-jdbc [8] FrameworkEvent ERROR
org.apache.felix.log.LogException: org.osgi.framework.BundleException: Activator start error in bundle org.forgerock.openidm.repo-jdbc [8].
        at org.apache.felix.framework.Felix.activateBundle(Felix.java:2290)
        at org.apache.felix.framework.Felix.startBundle(Felix.java:2146)
        at org.apache.felix.framework.Felix.setActiveStartLevel(Felix.java:1373)
        at org.apache.felix.framework.FrameworkStartLevelImpl.run(FrameworkStartLevelImpl.java:308)
        at java.lang.Thread.run(Thread.java:745)
Caused by: org.apache.felix.log.LogException: java.lang.RuntimeException: Failed to load class of driverClassName com.mysql.jdbc.Driver
        at com.zaxxer.hikari.HikariConfig.setDriverClassName(HikariConfig.java:323)
        at org.forgerock.openidm.datasource.jdbc.impl.HikariCPDataSourceFactory.newInstance(HikariCPDataSourceFactory.java:33)
        at org.forgerock.openidm.datasource.jdbc.impl.JDBCDataSourceService.initDataSourceService(JDBCDataSourceService.java:133)
        at org.forgerock.openidm.datasource.jdbc.impl.JDBCDataSourceService.newInstance(JDBCDataSourceService.java:124)
        at org.forgerock.openidm.datasource.jdbc.JDBCDataSourceServiceFactory.newInstance(JDBCDataSourceServiceFactory.java:128)
        at org.forgerock.openidm.repo.jdbc.impl.Activator.start(Activator.java:68)
        at org.apache.felix.framework.util.SecureAction.startActivator(SecureAction.java:697)
        at org.apache.felix.framework.Felix.activateBundle(Felix.java:2240)
        ... 4 more
Caused by: java.lang.ClassNotFoundException: com.mysql.jdbc.Driver not found by org.forgerock.openidm.datasource [6]
        at org.apache.felix.framework.BundleWiringImpl.findClassOrResourceByDelegation(BundleWiringImpl.java:1639)
        at org.apache.felix.framework.BundleWiringImpl.access$200(BundleWiringImpl.java:80)
        at org.apache.felix.framework.BundleWiringImpl$BundleClassLoader.loadClass(BundleWiringImpl.java:2053)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
        at com.zaxxer.hikari.HikariConfig.setDriverClassName(HikariConfig.java:318)
        ... 11 more


Cause:

you forgot to copy mysql .jar files under openidm/bundle

copying will fix this error