Provisioning Queue - troubleshooting

Hey All,
Does anyone have any suggestions about troubleshooting the provisioning queue. We have a recurring problem every day or so in development where the provisioning queues will stop processing and things begin to queue up. we do not see this issue in production ever. The dev dispatchers appear to be up and running and their are no entries in the logs to suggest there's been an error. The only way I've been able to get the system back to a running state is to clear out the queue and force a restart on the ModifyUser task. Obviously this is not ideal as we lose all the data relating to those changes that should have been processed. Any suggestions are much appreciated.
Thanks.

We are also interested in this topic - see my question ["How do you complete or re-attempt failed provisioning tasks"|How do you complete or re-attempt failed provisioning tasks].
Restarting failed tasks / audit id's so that the processing picks up from where it failed, would be a great feature if anyone knows how to do this.

Similar Messages

How to limit provisioning task to a batch of entries from the queue

Hi Folks,
In our IDM system we have 60000 entries sitting in the provisioning queue for a single repository for a single task. The provisioning task handles such amount of entries very slow working for days.
I'm wondering if it's possible to limit somehow the provisioning task to a certain batch of entries from the queue. Let say, to force somehow the provisioning task to handle TOP 1000 entries at once and then finish. In such a way it will start multiple times to process the 60000 entries, but each iteration of the task will not longer than 1000 entries.
I have the idea to overwrite the default view MXPROV_ENTRIES for the task to return top 1000 entries only. Do you think this will work ?
Any other ideas please welcome.
Thank you a lot!
Siarhei

Hi,
You don't mention what kind of task it is queued for, or perhaps it's even an action? Or the IdM version for that matter. I'm not sure how changing the views would change anything though.
In case it's a task (ordered, condt., switch etc) the dispatcher has for the latest versions been using the views mxpv_grouptasks_ordered/switch/conditional which already have 1000 row limiters in them.
If it's an action then the runtime should not be much affected by the size or really care how many are in the mxprov_entries view. It might take a few seconds to get the entire list og 60.000 rows if it doesn't add it's own limitation in addition to the action/repid filter. If they're all for the same actionid/repository combination it will just works through it one entry at a time untill it's done and each entry is enclosed in its own transaction so at this point there would be no effect of having a top 1000 or not It's also not possible to split up the queue action/repository combination between multiple runtimes either.
Br,
Per Christian

7.2 provisioning

Hey guys,
Could someone who has gotten a 7.2 to work tell me what their values are in the repository Privilege and Event Tasks tabs? ABAP is my main concern at the moment but I'm having the same issues on LDAP and ABAP repositorys.
I can assign the <repo>ONLY privilege to a user and the user will be created, I can remove that privilege and the user is deleted again. Only problem is I can not do it with any other privileges. Any time I try it with a different privilege my provisioning job gets set to deactivated in the Provisioning Queue and the privilege assignment is set to pending.
Thanks (again) for any possible help and happy holidays!

Jonathan Gijsemans wrote:
I understand what you're saying Ian and I do have to agree I see the logic in it now as well.
> But in no way is this "easier" than what we used to have in 7.1; also keeping in mind the fact that the master privilege field exists I feel like defining it there should make adding it to each and every business role (or seperate privilege assignment) obsolete.
I see two approaches, depending on the Business Role structure:
a) If there are "common" roles for each repository (like granting privileges that are common to all users for that repository) hook-up the account privileges there.
b) Include the needed account privileges to each business role. Either make the business role admin to include them manually or have your role maintenance configuration to include account privileges depending to which repositories do the role have privileges for.

Provisioning from HCM Staging Area to SAP Master question from a newbie

Hi
I have built a sandbox idM 7.2 PL3 (MS-SQL 2008/Windows 2003).
I've had a few stumbles on the way and my latest issue is that I have extracted the HCM data from our ERP (EHP5) HCM instance via LDAP to the VDS. The transfer completes successfully and the statistics on the HCM_Staging_Area indicate that the records have been added to this Identity Store.
The event handling on the Entity Type, MX_HCM_EMPLOYEE, has the task +189/Write HCM Employee To SAP Master_ configured. This Job (and it's tasks) is enabled. I can see the records (cn = "<SID666SAP 0000001>") with an objectclass of MX_HCM_EMPLOYEE.
Hiowever, nothing is logged in the System Log or Job Log to indicate that this task has been executed by the load. The SAP_Master is not updated.
I'm using the idM for SAP Landscape Configuration Guide (October 2011) for this installation.
Am I missing something? Is there a log file or trace that I can look at to try and figure out what is going on.
Thanks
Doug

Thanks for the reply.
This is my first attempt at setting up the idM so I've added what I've checked to answer your questions. I would be glad to hear of any additional checks I could perform.
Achim:
- Dispatcher is started: Yes, Windows Service is running (started).
- Dispatcher is configured to run standard and provisioning jobs: Yes, all jobs in Job tab of dispatcher are selected
- are there any entries within the provisioning queue: I believe so, On the statistics tab of the HCM_staging_area Identity store there are 513 entries provisioning queue size
- Jobs and Tasks are enabled, assigned to a dispatcher and configured to run as provisioning jobs: * Yes, the tasks are enabled and the schedule rule is set to provisioning for both tasks*
Bernd:
The exported entries are reaching the Identity Store. I can query the data and the statistics indicate this as well. The provisioning queue size increases as well. I have set the SAP_MASTER_IDS_ID to the appropriate id for SAP_Master (4) and HR_STAGING_AREA_IDS_ID to HCM_Staging_Area Identity Store (5).
Thankis again.
Doug

Problems with dispatchers after upgrading to SP5

Hi
We have just updated our productive environment to IdM 7.1 SP5. Apparantly everything works as expected, but for some reason the provisioning queue is just growing and growing. Jobs and provisionings are not executed. When checking the dispatchers, they seem to be running, and the "Last requested" timestamp is updated as normally. I log on to the server and stop and start the dispatcher. Then the provisioning queue is starting to be processed - but only for a few minutes. Then everything stalls again and I ahve to stop/start the dispatcher once again. The same thing happens: Everything performs just fine for a few minutes, then it stalls again.
Has anyone ever experienced this?
This is a very serious issue for us, since we cannot stop/start the dispatchers in the productive environment every two minutes
Kind regards
Heidi Kronvold

Hi Lahcen
SAP gave us a new jar file called mxopenspml.jar. After replacing the existing jar-file with this one, the problem was solved for all the java provisionings. On the ABAP side some things were also changed by recommendation from SAP, but I was not quite as involved in this part of the problem, so I cannot give you any detailed information. My advise for you and anyone else who experience similar problems would be to contact SAP and have them deliver the same changes, that they gave us. I believe it will be part of the next SP - I believe I saw somewhere that SP6 might be released W29.
Kind regards
Heidi Kronvold

I am unable to enable a device that was disabled through my account.

I am trying to re-enable a device that I previously disabled through the members center.
When I go the the list of devices I have added to my account I can see all of them. The device I am trying to enable again is greyed out indicating it is disabled. Clicking on this device opens a drop down menu showing the devices name, UDID and 2 buttons (Edit and Enable). When I try to click either of these buttons, there is no responce and nothing happens.
Next to the title 'iOS Devices' there are 3 buttons, 'Add', 'Edit' and 'Search'. Clicking this edit button removes the greyed out device from my list until I cancel this attempted edit.
I have also tried re-adding the device from the Organizer window in XCode. This only yeilds an error responce saying "This device '(UDID)' is already registered, but has been disabled. You can re-enable it from your list of registered devices in your account on the developer website." As I have already tried this I am all out of ideas.
Can someone tell me what I am doing wrong, or if there is some way to re-enable my device. I need the device for testing my app.

Supposedly you are on a good track trying to resolve this through the Member Center. I too have this problem presently, and the only reference I found addressing enabling the previously disabled devices is in Apple's App Distribution Guide under 'Adding Devices to Your Provisioning Profile' > 'Troubleshooting', where it says: "If your device was previously registered but is disabled, enable the device using Member Center...". Apologies if you have seen this already, but perhaps this is a good lead to explore the Member Center further. As I have been so far unsuccessful in the above Troubleshooting advice, I wish to join ScottH87 and ask someone, perhaps from Apple, to suggest the resolution. Thank you in anticipation.

Using iPhone to make calls while in Japan

So I'm in Tokyo, I paid ATT for a roaming plan while I am here, and I can't seem to make calls at all. If I just dial my number back home, I get some Japanese woman talking to me (automatic voice) and I have no idea what she is saying. If I try international prefix codes, I get nothing. I'm dead in the water while my colleague happily makes calls on her blackberry to home.
What is the magic sauce to using iPhone overseas like this?

Did you get international provisioning ACTIVATED on your account BEFORE you left? If not, call AT&T, obviously from another phone:
1-800-331-0500
That's AT&T's international provisioning verification & troubleshooting number.
Since you're abroad, sorry, use this number:
+1-916-843-4685

Printer not printing documents online

hey, i have been trying to print a few documents for the past 12 hours and when I check into the printer stauts. i have all my documents ready to printer but they are not. but i was able to select a print quality diagnostic report, printer stauts report, and make the most of your printer report.. i really need help

Hi @TriJFamily1
Welcome to the HP Support Forums. It seems like your documents are stuck in the print queue for your Envy 5530 printer.
I have included the Print Jobs from Your HP Printer are Stuck in the Print Queue troubleshooting document. Please click on your operating system and follow the steps listed.
If you have a Windows operating system you can also Try the HP Print and Scan Doctor for Windows. The HP Print and Scan Doctor is a free utility (tool) that helps to quickly resolve common printing, scanning and connectivity issues. You can always download the utility from
Please let me know how things turn out.
Regards,
Happytohelp01
Please click on the Thumbs Up on the right to say “Thanks” for helping!
Please click “Accept as Solution ” on the post that solves your issue to help others find the solution.
I work on behalf of HP

Validation for commisionpct which is enetered only job_id is SA_REP

Hi
I want a validation for an EmployeeEo having jobId and commission . If an employee having job_id is SA_REP then he cannot leave the commsionpct column. He must be entered the commission column. The commission column optional for remaining employees

Hi Matt,
Thanks for your response.
I read few articles in your blog couple of weeks before and they are very much informative.
The information provided in the provisioning queue just shows the task ID and no.of requests (without request nos) waiting in that task.
Basically the question I have mentioned in my previous post is not related to any specific task type. It is like using request no we wanted to know complete request history specially the current task (task ID) at which the request is waiting for.
Regards,
Venkata Bavirisetty

How to know the current Task/Job ID in which a request is waiting for

Hi Team,
Is there any table/view in IDM 7.2 that provides current task/job ID number a request is waiting for?
Even though the last completed phase of the request can be seen from admin UI that only shows the description of the completed steps but not the technical details like task ID/Job ID of the current step.
Knowing the current step/Job ID helps the admin a lot to directly go the step when the request is waiting for long/got failed etc..
Regards,
Venkata Bavirisetty

Hi Matt,
Thanks for your response.
I read few articles in your blog couple of weeks before and they are very much informative.
The information provided in the provisioning queue just shows the task ID and no.of requests (without request nos) waiting in that task.
Basically the question I have mentioned in my previous post is not related to any specific task type. It is like using request no we wanted to know complete request history specially the current task (task ID) at which the request is waiting for.
Regards,
Venkata Bavirisetty

IdM DB Space Issue

Hi Experts,
    We are facing IdM DB space issue in our PRD environment. Upon observing, it was found that the below tables are taking much space in IdM DB. Could anyone tell me what impact will my PRD system have if I truncate the below tables to free space. Please do help us out in this , if this problem is not solved, this will become the show stopper.
mc_exec_stat
MC_LOGS
MC_SYSLOG
mxi_entry
mxi_link_audit
mxi_link
MXI_OLD_VALUES
MXI_VALUES
MXP_AUDIT
MXP_Audit_Variables
MXP_Ext_Audit
Kind Regards,
Mohamed Fazil

I don't know what you mean with too much diskspace? Perhaps you can post the sizes here and the number of entries in your system so we can evaluate if it's normal or not.
Most of the tables you list should not be touched and if you truncate link and entry you will delete all your assignments and entry data, and you would possibly be looking for a new job the next day.
The log tables should be maintained by the housekeeping as mentioned, but
mc_exec_stat
MC_LOGS
MC_SYSLOG
can be cleaned but neither should have that much data, but large amounts of transactions cause logs to grow. Have you checked that your backup is cleaning the transaction logs? Also reduce loglevels to ERROR to reduce the amount logged here.
MXP_Audit_Variables should not contain audits that are not in the provisioning queue, if you delete those workflows will fail.
MXP_Ext_Audit can probably be cleaned without affecting operations (reports might be affected though) but you'll loose the detailed execution history on the entries, perhaps you can do partials, delete entries older than 3 years or similar.
For future reference:
List transaction log sizes (SQL Server):
DBCC SQLPERF(LOGSPACE)
List table siszes (SQL Server):
DECLARE @SpaceUsed TABLE( TableName VARCHAR(100)
      ,No_Of_Rows BIGINT
      ,ReservedSpace VARCHAR(15)
      ,DataSpace VARCHAR(15)
      ,Index_Size VARCHAR(15)
      ,UnUsed_Space VARCHAR(15)
DECLARE @str VARCHAR(500)
SET @str = 'exec sp_spaceused ''?'''
INSERT INTO @SpaceUsed EXEC sp_msforeachtable @command1=@str
SELECT * FROM @SpaceUsed order by CAST(REPLACE(ReservedSpace,' KB','') as INT) desc
Oracle undo, user and redofiles:
select * from dba_data_files where tablespace_name LIKE 'UNDOTB%1' OR tablespace_name LIKE 'USERS%';
select l.group#,f.member,l.archived,l.bytes/1078576 bytes,l.status,f.type
from v$log l, v$logfile f
where l.group# = f.group#
C
Message was edited by: Per Krabsetsve

Status is not OK during IDS Update

Hi experts!
Just wondering if anyone has seen this error before. It's occuring during an AD reconciliation process. I've changed the timeout to 600 and cleared the provisioning queue using the SP, but still having trouble.
Messages     Warning     Status is not OK. Not legal to mark running in this state (2)
     Warning     MC told us to stop. Status:2 - STOPPING!
     Warning     Pass stopped by script
Any advice would be appreciated.
Thanks,
Matt

Hi Matt
We see the same error every now and then, but have found no explanation for it. We do not only see it when running AD jobs though. All we have been able to deduct from it is, that for some reason the MMC detects that something is not right and therefor orders the job to stop.
We have noticed though, that when our system is a bit stressed by a large number of provisionings, it occurs more often.
Kind regards
Heidi Kronvold

GSM/GPRS gateway with Call Manager ?

Do CISCO make a GSM/GPRS gateway / interface card ?
To make sure I am using the correct terminology, I'll explain what I want to do.
I want a gateway registered with Call Manager (in the same way my e1 equipped 2821's are) but instead of using an e1, use up to 30 mobile SIMS so I can forcecalls to mobiles through this gateway and get "mobile-to-mobile" rates rather than "land-to-mobile" rates.
In order to achieve this, do I get a 3rd party box and connect this to the e1 interface of CISCO router - and this 3rd party box emulates an e1 ? meaning the use of mobile SIMs is transparent to the CISCO router (it just sees an e1). Do CISCO make/rebrand this type of device ? Is there a WIC/interface card that achieves this with a CISCO router ? Or a specific piece of CISCO equipment for this purpose ? Does anyone have any experience/recommendations ?
Just to clarrify, this is literally for voice calls only and cost savings based on "mobile-to-mobile" rates/call allowances in an active Call Manager 4 deployment, there is no data requirement. UK based.
Any help would be greatly appreciated.
Thanks.

The Cisco GPRS Gateway Support Node Service Manager (GGSN-SM) is a set of tools that interface with the CiscoWorks desktop navigation user interface to perform provisioning and troubleshooting of access point names (APNs) and Cisco GGSN charging profiles. The Cisco GGSN-SM interfaces with the CiscoWorks LAN Management Solution (LMS) to provide an end-to-end management solution for Cisco Mobile Exchange networks.
http://cisco.com/en/US/products/ps6454/index.html

Account does not get locked in all Repositories

Hello all,
i have have a strange behavior in an IDM 7.2 SP9 system. When i check the 'Account is disabled' box in standard UI task 'Change Identity' the user is only locked in one ABAP system, in all other ABAP systems it keeps unlocked. Other tasks such as role provisioning are working for all repositories. There are no pending tasks in the provisioning queue.
I already reimported the provisioning framework, without success.
Can anyone help me to find a solution for this?
Regards
Christian

Hello Tero,
There is no error in the Job Log, the jobs are executed without error, but only for two of five repositories. I thought it could maybe depend on the user, but also with a newly created one i have the same behavior.
It seems as if the IDM does not recognize all repositories the user is existing in. The user has the ACCOUNT<REPOSITORY> Attribute set for all five repositories.
I have checked all tasks on all repositories, they seem to be correct.
Also with changes for telephone, room, ... are not provisioned all repositories. Privileges are provisioned correct.
So the question is what is the trigger for the execution of the provisioning on a repository?
Regards
Christian

Unable to delete a task

Hi,
When I try to delete the task from Identity Center console tree, it's unable to do that and the aleart dialog appears like blow,
"The task ... is scheduled for excution by provisioning. The provisioning queue entries must be cleared before you can delete the task."
So, I want to delete the provisinoning queue entries of this task, however I don't know how check this queue and handle it. Please teach me about this if you have some information.
Best Reagards,
Daisuke Ikari

Hi, all
Thank you very much for your reply.
>>Rene
I checked around the Monitoring "Provisioning queue" link, but I could not resolve this situation. Because the Monitoring does not display anything related to my deeling Identity Store and provisioning queue.
However, thanks much for giving me help.
>>Matt
I've made sure that the dispatcher be running. Anyway, thanks.
>>Dominik
Thank you for your information of the way to clean up the provision queue.
I realized your way and ran the job, but the job was not executed normally. The Joblog did not display anything and also the provisioning queue was not deleted.
The "schedule rule" of the job is selected "On demand", and I pushed the "Run now" button. But the value of "scheduled time" does not change.
I think this situation is not caused by the cleaning up job configuration, but by the Identity Center's state or something like that.
Continuously, I want to some information and help. Please give me some idea or information.
Best Regards,
Daisuke

Provisioning Queue - troubleshooting

Similar Messages

Maybe you are looking for