Identity Manager role definition export taking too long


Article ID: 210825


Updated On:


CA Identity Manager CA Identity Suite


An attempt to export roles and tasks from Identity Management console never completes.

A similar attempt utilizing ImportExportUtil.bat results in an error

-------------------Starting a new Export-------------------
Exporting Directory 'ProvStore'...
Management Console is not protected, ignoring the provided username and password.
 disposition attachment; filename=ProvStore.xml;
Exported Filename: ProvStore.xml
Directory Exported Successfully!!!
Exporting Directory 'UserStore'...
 disposition attachment; filename=UserStore.xml;
Exported Filename: UserStore.xml
Directory Exported Successfully!!!
Exporting Environment 'identityEnv'...
 disposition null Failed : There is some problem with export, file name is missing in response.
Exception in thread "main" Failed : There is some problem with export, file name is missing in response.


There can be different causes, from orphan link to tasks / roles to missing approval policies.


Release : 14.x

Component : IdentityMinder(Identity Manager)


Increasing the logging level for ims.jdbc category to DEBUG will write to the log all the queries done on the database.

We then have to inspect the latest item exported (role / task / screen etc) and inspect that item in Identity Manager - if the task is associated with a no longer relevant item (role which is no longer define, for example).

If the role in question in Provisioning Role, inspect the relevant role using Provisioning Manager and ensure the name is an exact match and all the associated account templates exist. If the name in IM and in Provisioning Manager is not identical, we should
1. Delete the role using Provisioning Manager
2. Create the role using Provisioning Manager with the exact same name as it appears in Identity Manager UI