Symantec Access Management

 View Only
  • 1.  Unable to modify application - Failed to execute ModifyRoleEvent. ERROR MESSAGE: InterruptedException:event timed out waiting for unpersisted references (60000 milliseconds)

    Broadcom Employee
    Posted Feb 11, 2021 01:04 AM
    Hi Team,

    One of my customer has reported that, he is not able to Modify the Application (NOT Domains->Domain).

    When configuring an application and trying to add Resources to Roles on the policy page, the following error message is displayed after a while:
    Modify Application "<Application Name>": Failed to execute ModifyRoleEvent. ERROR MESSAGE: InterruptedException:event timed out waiting for unpersisted references (60000 milliseconds)

    This is happening only in release 12.8.04 and 12.8.05, and NOT is release 12.8.03.

    I found below in tech docs, but this doesn't helps.
    When Internet Explorer 11 is used to access Administrative UI in releases upto Release 12.8.04, creation of objects such as responses, variables, rules, and rule groups fails.
    This is a known issue. As a workaround, Use any other supported browser.

    In Admin UI logs, I found the below:
    ERROR [com.netegrity.ims.exception.EventExecuteStateException] (Thread-243 (ActiveMQ-client-global-threads)) Execution of event: ModifyApplicationEvent failed.  Exception encountered: SmApiWrappedException:CA.SM::Policy@04-6433ef96-7939-4033-bbbb-5369e4770aaaaa;BOterminaltilgang&#41;: Duplicate value for CA.SM::Policy.Name=&quot;<Application Name>&quot;: CA.SM::Policy@04-6433ef96-7939-4033-bbbb-5369e4770aaaaa;<Application Name>&#41;,CA.SM::Policy@04-1b4a9a9f-09d3-4c3c-9524-1c81433e4ac3&#40;<Application name>&#41;.

    Based on this, I asked the customer to create a new policy (to avoid the duplicate) and try adding Resources to Roles, but still the same issue persist.

    Customer reports, during the first attempt in modifying the application they are seeing timeout error, and during the second attempt they are seeing duplicate error.

    Has anyone seen this before? Do we have any recommendation here?

    Thanks
    Lakshman


  • 2.  RE: Unable to modify application - Failed to execute ModifyRoleEvent. ERROR MESSAGE: InterruptedException:event timed out waiting for unpersisted references (60000 milliseconds)

    Posted Mar 04, 2021 02:09 PM
    We currently have an open ticket for this exact issue.  So far there is no resolution.


  • 3.  RE: Unable to modify application - Failed to execute ModifyRoleEvent. ERROR MESSAGE: InterruptedException:event timed out waiting for unpersisted references (60000 milliseconds)

    Broadcom Employee
    Posted Mar 05, 2021 01:51 AM
    Hi Jackie,

    This is a known issue in CA SSO 12.8.04 and 12.8.05.
    As far as I know, engineering team is working on this issue on priority and it is expected to be addressed by 2nd week of March.

    Workaround for this issue is
    1- Based on your application configuration, XPSExplorer can be used to map the policy links to the roles that are already present. OR
    2- Install and register 12.8 SP03 Admin UI to the Policy Server on 12.8.04.

    Second option seems to be better one for me.

    Thanks
    Lakshman


  • 4.  RE: Unable to modify application - Failed to execute ModifyRoleEvent. ERROR MESSAGE: InterruptedException:event timed out waiting for unpersisted references (60000 milliseconds)

    Broadcom Employee
    Posted Sep 30, 2021 10:53 AM
    Edited by Hongxu Liu Oct 01, 2021 09:47 AM
    This issue should be fixed on 12.8 SP06.

    12.8 SP06 Release note:
    https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/release-notes/service-packs/defects-fixed-in-12-8-06.html

    R12.8 SP06 [#2649] download
    https://support.broadcom.com/download-center/solution-detail.html?aparNo=99111236&os=MULTI-PLATFORM