10.7.2 IAM not starting with oracle database with SP2

Products

• Service Virtualization

Issue/Introduction

We are not able to start IAM in 10.7.2 with sp2 service pack. getting below error:

Error:

2023-05-23 04:04:42,445 ERROR [org.keycloak.quarkus.runtime.cli.ExecutionExceptionHandler] (main) ERROR: ORA-01000: maximum open cursors exceeded

2023-05-23 04:04:42,445 ERROR [org.keycloak.quarkus.runtime.cli.ExecutionExceptionHandler] (main) ERROR: ORA-01000: maximum open cursors exceeded

2023-05-23 04:04:42,445 ERROR [org.keycloak.quarkus.runtime.cli.ExecutionExceptionHandler] (main) For more details run the same command passing the '--verbose' option. Also you can use '--help' to see the details about the usage of the particular command.

 

Environment

Release : 10.7.2

Cause

Guidance on how to use APIs.

Resolution

Increase the cursor limit to some maximum value (i.e 3000 or 5000) for one time during upgrade. Once IAM server is strated maximum open cursors can be reverted back to original state and next IAM startup onward it will not be required as DB Scheema gets upgraded.

     You can check the existing cursor count using below query

select inst_id,NAME,VALUE from gv$parameter where lower(name) like 'open_cursor%' and lower(value) != 'enable';

Additional Information

Refer to section "Using IAM API to Manage Users" in the documentation of DevTest version you are running.

 

Client Id and Client secret are required to get the token from IAM. All these values are stored in /DevTest/IdentityAccessManager/realms-to-import/service_virtualization-realm.json.

The below snippet from service-virtualization-realm.json shows the Container Id (id), Client Id (clientId), and Client Secret(secret).

service-virtualization-realm.json contains these values in a readable format.
{
    "id" : "########-####-####-####-############",
    "clientId" : "virtual-service-catalog",
    "name" : "virtual-service-catalog",
    "description" : "Virtual Service Catalog",
    "surrogateAuthRequired" : false,
    "enabled" : true,
    "clientAuthenticatorType" : "client-secret",
    "secret" : "########-####-####-####-############",
…..
…..