IBM Security Verify

 View Only
Expand all | Collapse all

Identity Manager - Issue While Processing the Application Requests

  • 1.  Identity Manager - Issue While Processing the Application Requests

    Posted Mon April 18, 2022 04:29 PM
    Hi,

    Our environment consisted of ISIM v7.0.0.2 running with DB 11.1.5.4 and SDS 6.4.0.20. The ISIM went into an issue and troubleshooting with support really prolonged due to which we took an approach to setup a new (Identity Manager) appliance version 10.0.0.3 with the existing DB and SDS. Now the new environment is ISIM 10.0.0.3, DB 11.1.4.5 and SDS 6.4.0.20.

    The identity manager is giving an issue processing any application request (AD, Exchange etc.), whereas other operations such as create/modify person, role, policies are working fine.

    In the logs, different errors are being received. I've attached the logs.

    Can this be due to the unsupported version of DB (as ISIM 10.0.0.3 requires minimum DB 11.5.4.0) or some other issue?

    Does anybody experience anything similar?

    Best regards,
    Hamza

    ------------------------------
    Muhammad Hamza
    ------------------------------

    Attachment(s)

    log
    trace.log   124 KB 1 version
    log
    msg.log   10 KB 1 version


  • 2.  RE: Identity Manager - Issue While Processing the Application Requests

    IBM Champion
    Posted Mon April 18, 2022 10:41 PM
    Edited by Rama Yenumula Mon April 18, 2022 10:42 PM

    Hi Hamza, There could be a possibility of different schema/table/permission requirements/dependencies from version to version depending on the new features added. So, it's always a best practice to deploy supported versions of all dependent software's as recommended.

    The attached trace log does indicate SQL related errors and you would want to isolate any version dependencies to further better troubleshoot the issue.

    Once you have all supported versions of middleware and if you are still encountering the issue, run your flows again and capture logs for further troubleshooting.


    Regards,
    Rama



    ------------------------------
    Rama Yenumula
    ------------------------------

    Original Message


  • 3.  RE: Identity Manager - Issue While Processing the Application Requests

    Posted Tue April 19, 2022 03:09 AM
    If you take a look in the trace.log the problem is very obvious - when you migrated to the VA you now have different crypto setup that is not able to decrypt the old encrypted data in ISIM.

    There are basically 2 ways to solve this - you can enter all the encrypted passwords again (not very easy to do ) or you can bring over the old crypto setup. I do not know the details of how to do that on a VA (I prefer SW version any day - this is one of the reasons) - but get a case out of the door and let our IBM Support people guide you through the steps (and get your DB2 upgraded to a supported level - it is not the cause - but it may give you problems down the road...)

    HTH

    ------------------------------
    Franz Wolfhagen
    IAM Technical Architect for Europe - Certified Consulting IT Specialist
    IBM Security Expert Labs
    ------------------------------

    Original Message