000030895 - Authentication Manager 8.1 SP1 download of completed reports with attributes in an external identity source take hours

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000030895
Applies ToRSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.1 SP1
Platform: VMware
IssueUnable to download completed reports from the Security Console [in a timely manner]
When a report that contains fields that are attributes stored in an external Identity Source like Active Directory is Downloaded (to .csv or .html file) the download takes an hour or more, but if those attributes from the external Identity Source are removed from displaying in the report, the download takes seconds.  TCPdump on the Primary during download shows LDAP or LDAPS traffic to Identity Source during the download
CauseTable index to avoid LDAP lookups not done.  Should be included in AM 8.1 SP1 P7 or patch 8.  AM-29323
ResolutionDrop and rebuild the following Table Indexes in PGSQL then restart services
SSH login as: rsaadmin or operating system account
Using keyboard-interactive authentication.
Password:
Last login: Fri Jul 10 11:56:49 2015 from dh7u02ua3361dr7.uhc.com
RSA Authentication Manager Installation Directory: /opt/rsa/am
rsaadmin@securid:~> cd /opt/rsa/am/utils/
rsaadmin@securid:/opt/rsa/am/utils> ./rsautil manage-secrets -a get com.rsa.db.dba.password
Please enter OC Administrator username: rsaadmin
Please enter OC Administrator password: *********************
com.rsa.db.dba.password: EVPGOtr6Er2CFqP9g9W3yOTtzIHMHt
rsaadmin@securid:/opt/rsa/am/utils> cd ../pgsql/bin
rsaadmin@securid:/opt/rsa/am/pgsql/bin> ./psql -h localhost -p 7050 -d db -U rsa_dba
Password for user rsa_dba: <Right Click paste highlighted dba password>
psql.bin (9.2.4)
SSL connection (cipher: DHE-RSA-AES256-SHA, bits: 256)
Type "help" for help.
db=# DROP INDEX IDX_AM_TOKEN_REPORT_ATTR;
DROP INDEX
db=# \q
rsaadmin@securid:/opt/rsa/am/pgsql/bin> cd ../../server/
rsaadmin@securid:/opt/rsa/am/server> ./rsaserv restart all
rsaadmin@securid:/opt/rsa/am/utils> cd ../pgsql/bin

rsaadmin@securid:/opt/rsa/am/pgsql/bin> ./psql -h localhost -p 7050 -d db -U rsa_dba

Password for user rsa_dba: <Right Click paste highlighted dba password again>

psql.bin (9.2.4)

SSL connection (cipher: DHE-RSA-AES256-SHA, bits: 256)

Type "help" for help.

db=# CREATE INDEX IDX_AM_TOKEN_REPORT_ATTR;
CREATE INDEX

db=# \q
Workaroundwait for Patch 7 or 8 fix with JIRA AM-29323

Attachments

    Outcomes