RuntimeException while Role Mining (OIA integration with Waveset)

Question

HI All...
I would appreciate some help with the following, If anybody has any ideas.... plz.
My Appologies if it is in the wrong category but there is no Identity Analytics category.
My PoC Environment consists of
Vm #1
Centos 5.5 (64bit)
JDK 1.6.0_25 (64bit)
Oracle Waveset 8.1.1 patch 4 (145769-05)
MySql (5.0.77)
Oracle Glassfish 3.1.1 (Zip Distro)
VM #2
Centos 5.5 (64Bit)
JDK 1.6.0_25 (64bit)
Oracle Identity Analytics 11.1.1.3.6 (p12831135)
MySql (5.0.77)
Apache Tomcat 6.0.32
VM #3
Centos 5.5 (64Bit)
JDK 1.6.0_25 (64bit)
MySql (5.0.77)
All components are installed and configured as described in their respective documentation. Waveset and Analytics each have their own repository locally and the 3rd VM contains a database with 2x Tables (each configured as a resource in Waveset). Table 1x - 32 000 entries, Table 2x 45 000 entries.
Integration was configured and tested successfully.
From a Waveset side the Accounts contained in the 2x Tables have be reconciled with Waveset and shows up as expected. Column mapped, and users on direct resource assignments (No Roles yet...)
From an Analytics side I have done the following:
1. Import the same Business Structure that was used in Waveset into Analytics using csv import.
2. Import the Global Users from Waveset using the configured provisioning server instance.
3. Import the Resource Metadata from Waveset.
4. Import the Resources from Waveset.
5. Import the Accounts from Waveset.
Up to this point this all completed successfully.
I ran some custom SQL updates to link the Global Users to the relevant Business Structure (bu_globalusers table) as this was not done during the import. (even thou waveset.organization maps to RMBUname and customproperty1) but no matter.
If I log into Analytics I can go to the Identity Warehouse and see the Business Structure, see the Users assigned to a Business Structure and the Accounts linked to that user.
I can go to Resources and see the Attributes defined under each, as well as sample search results when I select an attribute.
I modified the WEB-INF/rolemining-context.xml: <property name="roleminingAccountThreshold" value="*50000*"/> to allow for the number of records in the database tables during role mining.
I configured the Resource type for one of the resources to have one of the attributes minable. I then went and scheduled a Role Mining Task to mine that resource.
The task ran with the following result:
13:39:10,119 DEBUG [RMEServiceUtil] About to call scheduler service to schedule roleMiningRun : com.vaau.rbacx.scheduling.domain.SchedulerRoleMiningJob@106e94
13:39:10,127 DEBUG [SqlMapRoleMiningOptionsDaoImpl] LoadingRoleMiningOptionsWrapper
13:39:10,209 DEBUG [FindRolesHelper] Loading Role Mining Run from backend: 31
13:39:10,209 DEBUG [SqlMapRoleMiningRunDaoImpl] Loading RoleMiningRunWrapper
13:39:10,216 DEBUG [FindRolesHelper] Loading Role Mining Options from backend: 31
13:39:10,216 DEBUG [RMEServiceUtil] About to call scheduler service to schedule roleMiningRun : com.vaau.rbacx.scheduling.domain.SchedulerRoleMiningJob@106e94
13:39:10,224 DEBUG [SqlMapRoleMiningOptionsDaoImpl] LoadingRoleMiningOptionsWrapper
13:39:10,232 DEBUG [SqlMapRoleMiningRunDaoImpl] Loading RoleMiningRunWrapper
13:39:10,261 DEBUG [MLRbacxRoleMiningServiceImpl] Creating DataRecords...
13:39:10,306 DEBUG [RoleMiningConfigurationManagerImpl] Retrieving Role Mining configuration
13:39:10,306 DEBUG [RoleMiningConfigurationManagerImpl] Returning in memory role mining configuration
13:39:10,308 DEBUG [NamespaceEndpointInstanceCreator] Calling account manager to count accounts
13:39:10,838 DEBUG [NamespaceEndpointInstanceCreator] Accounts counted by account manager
13:39:10,838 DEBUG [NamespaceEndpointInstanceCreator] 1 endpoints had 32675 accounts
13:39:10,838 DEBUG [RoleMiningConfigurationManagerImpl] Retrieving Role Mining configuration
13:39:10,838 DEBUG [RoleMiningConfigurationManagerImpl] Returning in memory role mining configuration
13:39:10,839 DEBUG [NamespaceEndpointInstanceCreator] Normalizer flag is true
13:39:10,839 DEBUG [NamespaceEndpointInstanceCreator] Loading accounts in endpoints
13:39:10,839 DEBUG [NamespaceEndpointInstanceCreator] Calling account manager to load accounts
13:39:31,222 ERROR [SqlMapTemplateConcurrentReader] End:getAccountAttributeWrappersRootOnly, com.vaau.commons.dao.concurrent.ibatis.SqlMapTemplateConcurrentReader@4dbff46fResult: Error, Parameters:{rootIdList=[24633, 24658, 24683, 24708, 24733, ...
49158, 49183, 49208], endPointId=1}
13:39:31,232 ERROR [SqlMapTemplateConcurrentReader] End:getAccountAttributeWrappersRootOnly, com.vaau.commons.dao.concurrent.ibatis.SqlMapTemplateConcurrentReader@fa85648Result: Error, Parameters:{rootIdList=[6, 31, 55, 80, 105, 129, 154, 178, 202, ...
+Repeats a bunch of times+
+Repeats a bunch of times+
2755, 762771, 762787, 762803], endPointId=1}
14:09:35,912 ERROR [MLRbacxRoleMiningServiceImpl] Problem starting role mining processjava.lang.RuntimeException: Error while executing query:getAccountAttributeWrappersRootOnly
14:09:35,913 ERROR [RoleMiningExecutor] Role Mining run exit with errors. com.vaau.rbacx.rolemining.service.RoleMiningException: java.lang.RuntimeException: Error while executing query:getAccountAttributeWrappersRootOnly
Traced it to a file called WEB-INF/classes/com/vaau/rbacx/dao/ibatis/maps/AccountAttributeWrapper.xml which had some "^M" character in it but nothing serious.
The Entry in question looks like follows:
<select id="getAccountAttributeWrappersRootOnly" resultMap="hierarchyWrappers-with-metadata">
select aah.id as aah_id, aah.root_id as aah_root_id, aah.parent_id as aah_parent_id,
av.id as attribute_value_id, av.attribute_id, a.name as attribute_name, av.attribute_value,
avm.high_privileged, avm.data_owner_id, avm.data_owner_name, avm.classification, avm.definition
from acct_attr_hier_nodes aah
join attribute_values av on aah.attribute_value_id = av.id
left join attribute_value_metadata avm on (av.id=avm.attribute_value_id and #endPointId:BIGINT#=avm.endpoint_id)
join attributes a on av.attribute_id = a.attributekey
where 1=1
<dynamic prepend="and">
<iterate property="rootIdList" open="aah.id in (" close=")" conjunction=",">
#rootIdList[]:BIGINT#
</iterate>
</dynamic>
</select>
The SQL executes against the DB without error, had to removed the "+#endPointId:BIGINT#=avm.endpoint_id+" as "+avm.endpoint_id=1+" does not exist in the DB by the time I execute the Query.
Could not find the same Xml entry in Oracle Analytics 11.1.1.3.0, so I'm assuning its fairly new or linked to a previous bug....
So finally getting to the Question: What is this and how can I get it fixed...? If anyone has any Ideas it would be much appreciated.
Thank You,
Pieter
Edited by: user9372024 on Aug 26, 2011 7:22 AM

Answer 1

I am facing the same issue - has anyone had any luck with integrating the two?
Thanks in advance.