String or binary data would be truncated when adding AD user groups in Identity Portal

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

When managing Active Directory (AD) groups within CA Identity Portal, access requests may fail if the group name (Distinguished Name) exceeds 255 characters. This article provides the cause and the SQL workaround to address this limitation.

Environment

• Product: CA Identity Portal
• Affected Versions: 14.1, 14.3, 14.4, 14.5
• Related Product: CA Identity Manager (IM)

Cause

When attempting to add or remove an Active Directory group, the request fails with the following errors in the UI or logs:

• UI Error: "Truncated value"
• Log Error: com.microsoft.sqlserver.jdbc.SQLServerException: String or binary data would be truncated in table 'PORTAL.dbo.request_account', column 'entitlement_id'.
• Transaction Error: org.hibernate.exception.DataException: could not execute statement

This is a known limitation of the current Identity Portal database schema, which restricts the column length for entitlement identifiers.

Resolution

To resolve this issue, the column length for the request_account table must be increased in the database.

Warning: Always perform a full database backup before executing any structural changes.

1. For MS SQL Server: Run the following commands:

   sql

    

   ALTER TABLE request_account alter column entitlement_name nvarchar(2048);ALTER TABLE request_account alter column entitlement_id nvarchar(2048);

2. For Oracle Database: Run the following commands:

   sql

    

   ALTER TABLE request_account MODIFY entitlement_name NVARCHAR2(2048);ALTER TABLE request_account MODIFY entitlement_id NVARCHAR2(2048);