000037254 - RSA Identity Governance & Lifecycle 7.1.0 upgrade fails with error ORA-19011

Document created by RSA Customer Support Employee on Mar 25, 2019
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000037254
Applies ToRSA Product Set: Identity Governance  Lif&ecycle
RSA Version/Condition: 7.1.0
 
IssueRSA Identity Governance & Lifecycle migration fails when upgrading to 7.1.0.    The following error message is logged in the migrate.log file.
 
SQL/line#: /home/oracle/wildfly-10.1.0.Final/standalone/tmp/vfs/temp/tempcfc711f6815c3916/content-b6a949b558f78fb3/contents/aveksa.war/WEB-INF/database/updates/7.1/ACM-72719.sql(2):
Start time [Mon Mar 11 14:07:55 CDT 2019]
update t_av_entitlementreviewdef set configuration = replace(configuration,
        '</rev:review-config>',
        '<rev:review-analysis-config>
          <rev:analyzeCategory>Violations</rev:analyzeCategory>
        </rev:review-analysis-config>
        </rev:review-config>')
        where review_type = 'U' and configuration not like '%<rev:review-analysis-config>%'
java.sql.SQLException: ORA-19011: Character string buffer too small
CauseThis issue occurs during the upgrade of Reviews if the configuration elements in part of the Review definition exceed 4000 characters (4K).  

Specifically, this may occur if the review contains an extensive explicit list of entitlements, roles, groups or data resources.
ResolutionThis issue will be resolved in a future version of the migration code. 
WorkaroundIdentify which Review item(s) have configuration objects that exceed 4000 characters (see Notes).

The following options may be used to work around this issue.
  1. Delete the problem review.
  2. Edit the problem review and remove or reduce entitlements, roles, groups or data resources
  3. Edit the problem review and filter by groupings instead of individual items.

For example, instead of listing all AD Groups individually, select AD groups by business source.
 
User-added image
NotesThe following SQL command may be used to identify which review had a configuration object that exceeds 4000 characters.
 
SELECT
    name
FROM
    t_av_entitlementreviewdef
WHERE
    length(xmltype.getclobval(configuration)) > 4000;

Attachments

    Outcomes