000037254 - Migration fails with error ORA-19011 when upgrading to RSA Identity Governance & Lifecycle 7.1.0

Document created by RSA Customer Support Employee on Mar 25, 2019•Last modified by RSA Customer Support Employee on Jun 28, 2019
Version 2Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000037254
Applies ToRSA Product Set: Identity Governance & Lifecycle
RSA Version/Condition: 7.1.0
 
IssueRSA Identity Governance & Lifecycle migration fails when upgrading to 7.1.0. The following error message is logged in the migrate.log file.
 
SQL/line#: /home/oracle/wildfly-10.1.0.Final/standalone/tmp/vfs/temp/tempcfc711f6815c3916/content-b6a949b558f78fb3/contents/aveksa.war/WEB-INF/database/updates/7.1/ACM-72719.sql(2):
Start time [Mon Mar 11 14:07:55 CDT 2019]
update t_av_entitlementreviewdef set configuration = replace(configuration,
        '</rev:review-config>',
        '<rev:review-analysis-config>
          <rev:analyzeCategory>Violations</rev:analyzeCategory>
        </rev:review-analysis-config>
        </rev:review-config>')
        where review_type = 'U' and configuration not like '%<rev:review-analysis-config>%'
java.sql.SQLException: ORA-19011: Character string buffer too small
CauseThis issue occurs during the upgrade of Reviews if the configuration elements in part of the Review definition exceed 4000 characters (4K).  

Specifically, this may occur if the review contains an extensive explicit list of entitlements, roles, groups or data resources.
Resolution

This issue is resolved in the following patches/versions:



  • RSA Identity Governance & Lifecycle 7.1.0 P08
  • RSA Identity Governance & Lifecycle 7.1.1 P02
  • RSA Identity Governance & Lifecycle 7.1.2
WorkaroundIdentify which Review item(s) have configuration objects that exceed 4000 characters (see Notes).

The following options may be used to work around this issue.
  1. Delete the problem review.
  2. Edit the problem review and remove or reduce entitlements, roles, groups or data resources.
  3. Edit the problem review and filter by groupings instead of individual items.

For example, instead of listing all AD groups individually, select AD groups by business source.
 
User-added image
NotesThe following SQL command may be used to identify which review had a configuration object that exceeds 4000 characters.
 
SELECT
    name
FROM
    t_av_entitlementreviewdef
WHERE
    length(xmltype.getclobval(configuration)) > 4000;

Attachments

    Outcomes