000037307 - WorkPoint.log and heap dumps are written to the Linux root user directory "/" in RSA Identity Governance & Lifecycle WebSphere implementations

Document created by RSA Customer Support Employee on May 9, 2019
Version 1Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000037307
Applies ToRSA Product Set: Identity Governance & Lifecycle
RSA Version/Condition: 7.0.2, 7.1.0
Platform: WebSphere
 
Issue

This issue is specific to WebSphere environments. 

The WorkPoint.log file and heap dumps are incorrectly written to "/", the root user directory on the Linux operating system. These files are supposed to be written to the same file location as the other application log files such as the aveksaServer.log. As of RSA Identity Governance & Lifecycle 7.0.2 and 7.1.0 this location in a Websphere environment is /opt/IBM/WebSphere/AppServer/profiles/AppSrv01/installedApps/imgNode01Cell/aveksa.ear/aveksa.war/log.



A WorkPoint.log can be found in the above location but it is a static file and no data is written to it. The functioning WorkPoint.log is incorrectly located in the '/' directory.



Having the WorkPoint.log and heap dumps being written to the '/' directory is risky because usually not much space is allocated to the '/' location and the likelihood of running out of space is a real danger.



 
CauseThis issue is due to a change in the way WebSphere starts the RSA Identity Governance & Lifecycle application. WorkPoint is started before RSA Identity Governance & Lifecycle  (IGL) so it is unable to retrieve the log file location from the IGL application.
ResolutionThe solution is to set the parameter that specifies the file location so that it is available to WorkPoint when WorkPoint is started. This requirement will be documented in a future release of the RSA Identity Governance & Lifecycle Installation Guide.

In the WebSphere console:
  1.  Go to Application Servers and click on your Server name.
  2.  Select Process Definition under Server Infrastructure.
  3.  On the right, under Additional Properties click Java Virtual Machine.
  4.  On the right, click on Custom Properties and click New.
  5.  As Name, enter log.dir and as Value, add the location of your aveksaServer.log.
  6.  Press Apply and OK and verify the setting on the summary page.

User-added image

 

There may be a directory location called jboss.server.log.dir. Do not use this Name. Instead, make sure a new resource is named log.dir as specified in step 5.



  1. Go to Applications > WebSphere Enterprise Applications and restart IGL and the Workflow editor.

    1. Applications > Application Types > WebSphere Enterprise Applications > Select Aveksa > Stop > Start.
    2. Applications > Application Types > WebSphere Enterprise Applications > Select Aveksa Workflow Editor > Stop > Start.

If RSA Identity Governance & Lifecycle is deployed on a WebSphere cluster, this resolution needs to be applied on all nodes of the cluster.

Attachments

    Outcomes