After Migration to 14.4 Centos 8 vApps some endpoints / data are missing. Error: "com.netegrity.llsdk6.imsapi.exception.ImsRuntimeException"
search cancel

After Migration to 14.4 Centos 8 vApps some endpoints / data are missing. Error: "com.netegrity.llsdk6.imsapi.exception.ImsRuntimeException"

book

Article ID: 273915

calendar_today

Updated On:

Products

CA Identity Suite

Issue/Introduction

We have upgraded our environment from 14.3 to 14.4

Issue 1:

Then while validating endpoints from Modify User endpoint account it is not loading and giving below error:

com.netegrity.llsdk6.imsapi.exception.ImsRuntimeException

But endpoints are listing from Provisioning manager.

Issue 2:

We suddenly notices 2 AD endpoints are missing after upgrade. We had total 3 AD endpoints now can see only one AD endpoint.

Environment

Release : 14.4

Resolution

The original issue was caused from the CentOS8 nodes not having all the data from the CentOS6 nodes. We performed MW recovery for these nodes following the below KB and we were able to confirm that all the endpoints were restored.

CA Directory - DSA out of sync

https://knowledge.broadcom.com/external/article/9559/ca-directory-dsa-out-of-sync.html

After we restored the data, we had to fix the servers.dxi files to now match the appropriate sizes of the DSA's. The new imps sizes were 250mb but the old ones (CentOS6) were 2000mb. This is most likely the root cause of why the data wasn't fully copied over from CentOS6 to CentOS8.

Once all dxi files properly matched the .db file sizes, we had to fix the managing connector servers for each endpoint.

Connector Xpress > IMPS > Endpoint > Set Managing CS > Selected appropriate servers.

 

Additional Information

"Arithmetic overflow error for data type smallint, value = 32768." This was resolved by following the below KB:

https://knowledge.broadcom.com/external/article?articleId=94834

Database performance tuning for IM and IP:

https://knowledge.broadcom.com/external/article/240023/symantec-identity-suite-performance-tun.html

AD performance tuning (set value to 200 from 10):

https://knowledge.broadcom.com/external/article/202209/symantec-identity-manager-connector-ser.html