OIA Import roles NullPointerException

Question

Hi,
I need to import roles into OIA and constantly face failed import attempts.
The roles.rbx looks like:
rolename<use=mandatory>,parentRoleName,roleDescription,policies,statusKey
The import file (filename: roles12) looks like:
"AD PROD","","Root Role for Windows","","1"
"Domain Computers","AD PROD","All workstations and servers joined to the domain","Domain Computers","1"
The installed OIA version is 11.1.1.5.1.
I previously imported users, business structures and even policies without hassles. But why does it suddenly fail to import role information?
The error message in rbacx.log is pretty much useless and doesn't help at all. You'll find it below.
Does anybody of you know this behavior? (or even better: how to fix it?:-)
Thanks in advance and regards
Nicolas
The only log information I get, is the following excerpt:
15:51:53,099 DEBUG [CacheModel] Cache 'SchedulerExecutionLogRecord.schedulerExecutionLogRecordResultCache': flushed
15:51:53,099 INFO [VaauSchedulerEventListenerImpl] Job executed: in roles12, IAM
15:51:53,099 INFO [VaauSchedulerEventListenerImpl] Job run time: 0s
15:51:53,100 INFO [VaauSchedulerEventListenerImpl] Next Run: null
15:52:01,966 ERROR [RoleFileReader] ---> Error occured file reading file:
java.lang.NullPointerException
at com.vaau.rbacx.util.NameIdMap.put(NameIdMap.java:100)
at com.vaau.rbacx.core.support.RbacxDataImporterImpl.getUserNameIdMap(RbacxDataImporterImpl.java:1791)
at com.vaau.rbacx.core.support.RbacxDataImporterImpl.importRoles(RbacxDataImporterImpl.java:1054)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy127.importRoles(Unknown Source)
at com.vaau.rbacx.iam.file.csv.RoleFileReader.importRoles(RoleFileReader.java:278)
at com.vaau.rbacx.iam.file.csv.RoleFileReader.readCSVFileInternal(RoleFileReader.java:203)
at com.vaau.rbacx.iam.file.csv.AbstractCSVFileReader.readInternal(AbstractCSVFileReader.java:84)
at com.vaau.rbacx.iam.file.support.AbstractFileReader.read(AbstractFileReader.java:160)
at com.vaau.rbacx.iam.file.support.AbstractFileReader.run(AbstractFileReader.java:82)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
at java.lang.Thread.run(Thread.java:619)
15:52:41,025 DEBUG [CacheModel] Cache 'IdentityAuditPolicyViolation.identityAuditPolicyViolationCache': retrieved object '0'
15:52:41,029 DEBUG [CacheModel] Cache 'IdentityAuditPolicyViolation.identityAuditPolicyViolationCache': retrieved object '0'
15:52:41,032 DEBUG [CacheModel] Cache 'IdentityAuditPolicyViolation.identityAuditPolicyViolationCache': retrieved object '0'
15:52:41,036 DEBUG [CacheModel] Cache 'IdentityAuditPolicyViolation.identityAuditPolicyViolationCache': retrieved object '0'
15:54:30,597 INFO [DefaultRemoter] Exec: dwrIAMService.getOIMIAMSolutionVersion()
15:54:31,818 INFO [DefaultRemoter] Exec: dwrIAMService.getConnectionSpecs()
15:54:45,290 INFO [DefaultRemoter] Exec: dwrSchedulerService.isValidCronExpression()
15:54:45,316 WARN [BasicObjectConverter] Missing java bean property to match javascript property: null. For causes see debug level logs:
15:54:45,316 INFO [DefaultRemoter] Exec: dwrSchedulerService.addSchedulerIAMJob()

Answer 1

The error message mentions NullPointerException and something about NameIdMap. So far it didn't make any sense, because assigning users to roles during an import process was AFAIK not feasible.
It turned out, that during the users import process there were some corrupt records, which caused two users to not have a username (in the table: username was NULL) and one user with a invalid username containing dash signs... So far the system never complained about it, when browsing thru the users or doing something else.
SOLUTION: Deleting the users from table GLOBALUSERS and BU_GLOBALUSERS and afterwards importing the roles again.... Hooray! It works!
Lessons learned:
1) Make sure, absolutely sure, that import files do match the structure, e.g. number of columns even when column values are empty.
2) Most importantly make plausibility checks whether the content of the columns appear correct.
3) Check rbacx.log (tail -f rbacx.log) to see what the system does.
3) Use a SQL Browser to analyze the content of the tables afterwards. The column structured view allows you to quickly find rows which do not match with the general visual impression. (e.g. username having a certain length but there are some which have much longer strings -> Suspicious!)
4) Do not bang your head on the table... it's just not worth it ;-)
Regards
Nicolas