000029020 - RSA Authentication Manager 8.1 database migration fails in test mode if RADIUS migration is completed first

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000029020
Applies ToRSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.0 or 8.1

IssueSymptoms include:
1. Performing a migration from Authentication Manager 6.1 to Authentication Manager 8.x.
2. The RADIUS migration option is completed prior to migrating the Authentication Manager database migration.
3. When performing the Authentication Manager server migration, the option for Test Migration is checked.
4. The test migration fails immediately and throws following error in the
migrationReport.log, located in /opt/rsa/am/server/logs/migration_basic-<datestamp>:
Exception thrown during migration job befc9f71bf01010a1ae6a3d101e9dd75 
at com.rsa.authmgr.internal.admin.acemigrate61.impl.task.AgentMigrationTask.linkToRADIUSClientIfNeeded(AgentMigrationTask.java:607)
at com.rsa.authmgr.internal.admin.acemigrate61.impl.task.AgentMigrationTask.processRecord(AgentMigrationTask.java:577)
at com.rsa.authmgr.internal.admin.acemigrate61.impl.task.AgentMigrationTask.executeBatch(AgentMigrationTask.java:134)
at com.rsa.authmgr.internal.admin.acemigrate61.impl.task.AbstractMigrationTask$MigrationTaskTransactionTemplate.doInTransaction(AbstractMigrationTask.java:829)
at org.springframework.transaction.support.TransactionTemplate.execute(TransactionTemplate.java:130)
at com.rsa.authmgr.internal.admin.acemigrate61.impl.task.AbstractMigrationTask.completeTask(AbstractMigrationTask.java:355)
at com.rsa.authmgr.internal.admin.acemigrate61.impl.task.MigrationTaskChainImpl.executeNext(MigrationTaskChainImpl.java:26)

5. Also in /opt/rsa/am/server/logs, the imsTrace.log lists following error:
2014-11-04 19:35:30,463, [[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'], (AgentAccessSQL.java:71), 
trace.com.rsa.authmgr.internal.admin.common.dal.sql.DataObjectAccessSql, ERROR, <FQDN_of_primary_Authentication_Manager_server>,,,,
Unable to lookup class com.rsa.authmgr.internal.admin.agentmgt.dal.Agentwith ip address: <IP_address_of_primary_Authentication_Manager_server>
CauseThe test migration fails because the RADIUS agent is not yet in the database, but the test migration attempts to look up the RADIUS agent in the database to link with the RADIUS client.
ResolutionTo resolve the issue,
  1. Take a backup of the blank database via the Operations Console, if using a hardware appliance, or take a snapshot of the virtual server.
  2. Skip the test migration option and do a real database migration.
Optionally, cleanup all the migrated RADIUS clients, do the Authentication Manager database migration first, then perform the RADIUS migration.