CA Identity Manager Error while creating/modifying users: No Items Found

[Mukul Anand]

Hello All,

I am facing this issue with CA IDM 14.2 implementation. Every time we run a task for creating or modifying a user or even Self - Registration, it throws the below error:

ERROR [ims.tmt.submit.validation.blth] (http-/0.0.0.0:8080-18) Exception in BLTH handleTask: : [facility=4 severity=3 reason=0 status=6 message=Unrecognized command]
No items found


Please let me know if there is some configuration that I am missing.

PS: We did not find this issue in the lower environment. We moved to a higher environment and migrated the settings from the lower environment.

Mack

------------------------------
Senior Security Consultant
------------------------------

[Sai Kumar Valluri]

Hi Mack,

Try to compare the lower and higher environment task and role settings. Also, try to enable debug on App server and IDM to get more information on this error.

You may also try to check by

1. creating users directly on user store. 

2. Try to create users with basic attributes on IDM console. 

3. Create a copy of create/other task and see if new one works. 

Thanks,

Sai

[Mukul Anand]

Thanks Sai. I tried doing everything still no luck.
The error shows up in the UI and doesn't allow task submission.

1. creating users directly on user store. --> This works

2. Try to create users with basic attributes on IDM console. --> Same Error: No Items Found

3. Create a copy of create/other task and see if new one works. --> Same Error: No Items Found

------------------------------
Senior Security Consultant
------------------------------

[Sai Kumar Valluri]

So to triage, enable debug logging and try to get further details on the error.

Thanks,

Sai

[Mukul Anand]

I tried removing the preventative Identity Policy BLTH. 
We are able to submit tasks now. However, the SynchronizeUserEvent in the task fails and the task gets stuck in "In Progress" state.

The error that we see in the SynchronizeUserEvent is:

Failed to execute SynchronizeUserEvent. ERROR MESSAGE: ImsRuntimeException:No items found

------------------------------
Senior Security Consultant
------------------------------

[Sai Kumar Valluri]

Turn off the sync (User & account both) for create task and try to create user.

If it works then the problem is with User Store to Provisioning Store Mappings. 

Thanks,

Sai

[Mukul Anand]

Yes, once I turn off the sync it is working and the task gets completed fine.

Can you tell me where should I check the mapping and what might me wrong?

Appreciate your help.

TIA

------------------------------
Senior Security Consultant
------------------------------

[Sai Kumar Valluri]

Go to Management Console> Environment>Press green play icon that you see after Provisioning Store.

You would find all User store to Provisioning Store Mappings. Ensure that you have right mappings set and all the provsioning physical attributes are present in LDAP.

 

Thanks,

Sai

 

[Mukul Anand]

Thank you Sai for your help.

------------------------------
Senior Security Consultant
------------------------------

[Mukul Anand]

I checked the user and provisioning store mapping and it is fine.
There were a few attributes missing in the provisioning manager global user custom fields. I have updated that and double checked the mapping.
After all these I still see the error:
Failed to execute SynchronizeUserEvent. ERROR MESSAGE: ImsRuntimeException:No items found  when I submit any user related tasks - Self Registration/ Create User/Modify User

------------------------------
Senior Security Consultant
------------------------------

[Sai Kumar Valluri]

Check the outbound Event mappings. They are mandate for Sync to happen:

 

Thanks,

Sai

 

[Mukul Anand]

The outbound mappings are also in place.

Initially I thought this issue might be because of some of the PXs; I disabled all PXs which are triggered for these events still no luck.

17:28:19,692 ERROR [com.netegrity.ims.exception.EventExecuteStateException] (Thread-65 (HornetQ-client-global-threads-762411872)) Exception: : [facility=4 severity=3 reason=0 status=6 message=Unrecognized command]17:28:19,692 ERROR [com.netegrity.ims.exception.EventExecuteStateException] (Thread-65 (HornetQ-client-global-threads-762411872)) Exception: : [facility=4 severity=3 reason=0 status=6 message=Unrecognized command]No items found at com.netegrity.llsdk6.imsimpl.securityengine.PolicyEngine.synchIdentityPolicies(PolicyEngine.java:1814) [imsapi6.jar:] at com.netegrity.llsdk6.imsimpl.provider.SynchronizationProviderImpl.synchronizeUserWithIdentityPolicies(SynchronizationProviderImpl.java:61) [imsapi6.jar:] at com.netegrity.ims.events.SynchronizeUserEvent.execute(SynchronizeUserEvent.java:114) [ims.jar:] at com.netegrity.ims.businessprocess.IMSEventController.executing(IMSEventController.java:270) [ims.jar:] at com.netegrity.ims.businessprocess.IMSController.executing(IMSController.java:58) [ims.jar:] at com.netegrity.ims.bootstrap.IMSMessageListener.processEventToNextSavePoint(IMSMessageListener.java:398) [ims.jar:] at com.netegrity.ims.bootstrap.IMSMessageListener.processToEndState(IMSMessageListener.java:212) [ims.jar:] at com.netegrity.ims.bootstrap.IMSMessageListener.onMessage(IMSMessageListener.java:174) [ims.jar:] at com.netegrity.ejb.message.subscriber.SubscriberMessageBean.onMessage(SubscriberMessageBean.java:71) [ims.jar:] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.8.0_181] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) [rt.jar:1.8.0_181] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.8.0_181] at java.lang.reflect.Method.invoke(Method.java:498) [rt.jar:1.8.0_181] at org.jboss.as.ee.component.ManagedReferenceMethodInterceptor.processInvocation(ManagedReferenceMethodInterceptor.java:52) [jboss-as-ee-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.invocation.WeavedInterceptor.processInvocation(WeavedInterceptor.java:53) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ee.component.interceptors.UserInterceptorFactory$1.processInvocation(UserInterceptorFactory.java:63) [jboss-as-ee-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.invocation.WeavedInterceptor.processInvocation(WeavedInterceptor.java:53) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ee.component.interceptors.UserInterceptorFactory$1.processInvocation(UserInterceptorFactory.java:63) [jboss-as-ee-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ejb3.component.invocationmetrics.ExecutionTimeInterceptor.processInvocation(ExecutionTimeInterceptor.java:43) [jboss-as-ejb3-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ejb3.tx.EjbBMTInterceptor.handleInvocation(EjbBMTInterceptor.java:104) [jboss-as-ejb3-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.as.ejb3.tx.BMTInterceptor.processInvocation(BMTInterceptor.java:60) [jboss-as-ejb3-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.invocation.InitialInterceptor.processInvocation(InitialInterceptor.java:21) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ee.component.interceptors.ComponentDispatcherInterceptor.processInvocation(ComponentDispatcherInterceptor.java:53) [jboss-as-ee-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ejb3.component.pool.PooledInstanceInterceptor.processInvocation(PooledInstanceInterceptor.java:51) [jboss-as-ejb3-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ejb3.component.interceptors.CurrentInvocationContextInterceptor.processInvocation(CurrentInvocationContextInterceptor.java:41) [jboss-as-ejb3-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ejb3.component.invocationmetrics.WaitTimeInterceptor.processInvocation(WaitTimeInterceptor.java:43) [jboss-as-ejb3-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ejb3.component.interceptors.ShutDownInterceptorFactory$1.processInvocation(ShutDownInterceptorFactory.java:64) [jboss-as-ejb3-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ejb3.component.interceptors.LoggingInterceptor.processInvocation(LoggingInterceptor.java:59) [jboss-as-ejb3-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ee.component.NamespaceContextInterceptor.processInvocation(NamespaceContextInterceptor.java:50) [jboss-as-ee-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ejb3.component.interceptors.AdditionalSetupInterceptor.processInvocation(AdditionalSetupInterceptor.java:55) [jboss-as-ejb3-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ejb3.component.messagedriven.MessageDrivenComponentDescription$5$1.processInvocation(MessageDrivenComponentDescription.java:203) [jboss-as-ejb3-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ee.component.TCCLInterceptor.processInvocation(TCCLInterceptor.java:45) [jboss-as-ee-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ee.component.ViewService$View.invoke(ViewService.java:185) [jboss-as-ee-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.as.ee.component.ViewDescription$1.processInvocation(ViewDescription.java:185) [jboss-as-ee-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61) [jboss-invocation-1.1.2.Final-redhat-1.jar:1.1.2.Final-redhat-1] at org.jboss.as.ee.component.ProxyInvocationHandler.invoke(ProxyInvocationHandler.java:73) [jboss-as-ee-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at javax.jms.MessageListener$$$view95.onMessage(Unknown Source) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.8.0_181] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) [rt.jar:1.8.0_181] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.8.0_181] at java.lang.reflect.Method.invoke(Method.java:498) [rt.jar:1.8.0_181] at org.jboss.as.ejb3.inflow.MessageEndpointInvocationHandler.doInvoke(MessageEndpointInvocationHandler.java:140) [jboss-as-ejb3-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at org.jboss.as.ejb3.inflow.AbstractInvocationHandler.invoke(AbstractInvocationHandler.java:73) [jboss-as-ejb3-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21] at com.sun.proxy.$Proxy207.onMessage(Unknown Source) at org.hornetq.ra.inflow.HornetQMessageHandler.onMessage(HornetQMessageHandler.java:330) at org.hornetq.core.client.impl.ClientConsumerImpl.callOnMessage(ClientConsumerImpl.java:1117) at org.hornetq.core.client.impl.ClientConsumerImpl.access$500(ClientConsumerImpl.java:57) at org.hornetq.core.client.impl.ClientConsumerImpl$Runner.run(ClientConsumerImpl.java:1252) at org.hornetq.utils.OrderedExecutorFactory$OrderedExecutor$1.run(OrderedExecutorFactory.java:105) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [rt.jar:1.8.0_181] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [rt.jar:1.8.0_181] at java.lang.Thread.run(Thread.java:748) [rt.jar:1.8.0_181]

------------------------------
Senior Security Consultant
------------------------------

[Sai Kumar Valluri]

Below errors are pointing that the issue might be with identity policies.

So, I would try below:

 

1. Disable all the Identity Policies.
2. Disabled Sync in tasks.
3. Create user.
4. Assign default provisioning role to get the provisioning user created.
5. If it works, then assign Any Account related provisioning role.

 

Thanks,

Sai