SV-DEVTEST 10.5 Unable to connect to Identity and Access manager-Realm upgraded

book

Article ID: 142189

calendar_today

Updated On:

Products

CLOUDTEST CA Application Test CA Cloud Test Mobile MOBILECLOUD Service Virtualization

Issue/Introduction

I am not able to start IAM , getting the below errors in  server.log

2019-12-19 11:13:04,946 ERROR [org.jboss.msc.service.fail] (ServerService Thread Pool -- 48) MSC000001: Failed to start service jboss.undertow.deployment.default-server.default-host./auth: org.jboss.msc.service.StartException in service jboss.undertow.deployment.default-server.default-host./auth: java.lang.RuntimeException: RESTEASY003325: Failed to construct public org.keycloak.services.resources.KeycloakApplication(javax.servlet.ServletContext,org.jboss.resteasy.core.Dispatcher)

2019-12-19 11:23:15,435 INFO  [org.keycloak.exportimport.dir.DirImportProvider] (ServerService Thread Pool -- 58) Importing from directory /ca/DevTest/IdentityAccessManager/bin/../realms-to-import

2019-12-19 11:23:16,474 INFO  [org.keycloak.services] (ServerService Thread Pool -- 58) KC-SERVICES0030: Full model import requested. Strategy: IGNORE_EXISTING

2019-12-19 11:23:16,504 INFO  [com.ca.ad.sv.keycloak.ext.updater.IAMUpdater] (ServerService Thread Pool -- 58) Realm service_virtualization, exists, checking for version

2019-12-19 11:23:16,505 INFO  [com.ca.ad.sv.keycloak.ext.updater.IAMUpdater] (ServerService Thread Pool -- 58) Realm Version: 1.2.0 , IAM version : 1.2.1-SNAPSHOT . Realm will be upgraded

 

Cause


Caused by: java.lang.RuntimeException: Unable to find group specified by path. The Group Search/Sync might be a wide in LDAP configuration.   The step fails due to incomplete user objects in LDAP such as, importing large Ldap groups or  user objects that do not have an email address. It also fails due to the ldap groups of this user not resolving correctly.

Environment

Release : 10.4

Component : CA Service Virtualization

Resolution

The workaround for this problem is to let the startup of IAM fail very first time after upgrade. Once IAM starts and stops, do the following:

1. Edit the file C:\Program Files\CA\DevTest\IdentityAccessManager\bin\standalone.conf.bat(Windows)  or standalone.conf (linux)
2. Change the entry set "JAVA_OPTS=%JAVA_OPTS% -Diam.version=1.2.1-SNAPSHOT" as set "JAVA_OPTS=%JAVA_OPTS% -Diam.version=1.2.0"
3. Start IAM and it should start fine