Unable to delete duplicate groups from VIDM resulting in error: "Group with id XXXXX was not found"

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

Users are encountering issues with duplicate groups in their VMware Identity Manager (VIDM). When trying to delete or locate the faulty group, the following error message is observed:

"Group with id XXXXX was not found."

 

Environment

 VMware Identity Manager 3.3.x

Cause

This issue occurs when a group has duplicate entries in the OpenSearch index, and one of the entries is incorrectly retained, despite not being present in the VIDM database.

Resolution

To resolve this issue and remove the faulty group from the OpenSearch index, follow the steps below:

Step 1: Query the OpenSearch index to find the duplicate group entries

Use the following curl command to search for the group by its name in the OpenSearch index:

curl -XGET "http://localhost:9200/v2_searchentities_groupsearchdocument/_search?q=name:<group-name>"

This query should return the duplicate groups with unique IDs. In this case, two group IDs are returned.

Step 2: Check the VIDM database to identify the original group

Run the following query to search for the group in the VIDM database:

select * from "Group" where "strName" LIKE '%<group-name>%';

Make sure to confirm that one of the group IDs does not exist in the database:

select * from "Group" where "id" = '<duplicate-group-id>';

If the group with the duplicate ID does not exist in the database, it confirms that this entry is a duplicate and should be removed from the OpenSearch index.

Step 3: Delete the duplicate group from the OpenSearch index

To remove the faulty duplicate group from the OpenSearch index, use the following curl command:

curl -X POST "http://localhost:9200/v2_searchentities_groupsearchdocument/_delete_by_query?pretty" \
  -H "Content-Type: application/json" \
  -d '{
    "query": {
      "term": {
        "_id": "Group-<duplicate-group-id>"
      }
    }
  }'

This will delete the group entry with the duplicate ID from the OpenSearch index.

Step 4: Validate the successful deletion

After running the delete query, run the same search query again to ensure that only the original group remains in the OpenSearch index:

curl -XGET "http://localhost:9200/v2_searchentities_groupsearchdocument/_search?q=name:<group-name>"

 

You should now see only the original group in the search results.