Web application status fails with: Error when connecting to application in vIDM

Products

• VMware Aria Suite

Issue/Introduction

Users are unable to log in to the User Portal using their domain accounts, though access to the Admin UI remains functional when using a local system domain account. The issue is caused by a lock on the database changelog, preventing proper access control initialization.

As per log accesscontrol-service.log:

2024-08-16 07:15:15,453 GMT WARN  hostname:accesscontrol (localhost-startStop-1) [;;;] org.springframework.context.annotation.AnnotationConfigApplicationContext - Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'liquibase' defined in class path resource [com/vmware/vidm/accesscontrol/db/DbDataStoreAutoConfiguration.class]: Invocation of init method failed; nested exception is liquibase.exception.DatabaseException: org.postgresql.util.PSQLException: The connection attempt failed.

Environment

VMware Identity Manager 3.3.x

Cause

The issue is due to a persistent lock on the database changelog, which is preventing the access control service from initializing properly. The lock may have been acquired by another process or host, and it has not been released, leading to the login issue.

Resolution

To resolve this issue, you need to release the lock on the database changelog. This can be done using one of the following methods:

Command Line Method:

• Execute the following command to force release the lock:
  
  hznAdminTool liquibaseOperations -forceReleaseLocks


• Restart the horizon-workspace service:
  
  service horizon-workspace restart

Database Query Method:

• Run the following query on the VDIM Database to manually release the lock:
  
  update databasechangeloglock set locked=FALSE, lockgranted=NULL, lockedby=NULL where id=1;