Change Requests stuck in the AFX Fulfillment Handler Workflow Node and Workflows Stalled in RSA Identity Governance & Lifecycle
Originally Published: 2020-07-07
Article Number
Applies To
RSA Version/Condition: 7.0.x, 7.1.x, 7.2.0
Issue
SYMPTOMS:
- Change requests that provision using AFX are stuck in the fulfillment phase.
- The change request workflows are stuck in the AFX fulfillment handler node.
- Workflows are flagged as stalled.
- AFX requests are stuck in the V state.
Cause
Not enough memory is available to the ActiveMQ queue during heavy processing of bulk Change Request items which causes messages to get stuck in the ActiveMQ queue intermittently impacting AFX processing and Change Request completion.
Resolution
- RSA Identity Governance & Lifecycle 7.1.1 P07
- RSA Identity Governance & Lifecycle 7.2.0 P02
- RSA Identity Governance & Lifecycle 7.2.1
- RSA Identity Governance & Lifecycle 7.5.0
Workaround
- Restart the stuck AFX requests, and
- Manually modify the ActiveMQ memory configuration to prevent future occurrences of this issue.
Restart stuck AFX requests:
Open a support ticket with RSA Identity Governance & Lifecycle Support for a workaround and provide the following information in the case:- Login to a SQL tool such as SQL*Plus or SQL Developer as avuser, and
- Execute the following queries:
These queries will determine the AFX request state of the specific stuck change request:
select * from T_AV_CHANGE_REQUESTS CR where NAME like '%stuck-change-request-name%';
Note the values of CR.ID and CR.CURRENT_STATE returned in the query results and substitute them into the next two queries:
select * from T_AV_CHANGE_REQUEST_DETAILS CRD where CHANGE_REQUESTS_ID=<CR.ID> select * from T_AV_AFX_REQUEST where change_item_id=<CRD.ID>
This query will identify any AFX requests in the V state:
select * from t_av_afx_request where state ='V'
Manually modify the ActiveMQ memory configuration:
- Follow the instructions in the attached ActiveMQ_Memory_Changes.docx document.
- Restart AFX as the afx user:
afx restart
Attachments
If the attachment does not open when clicked, please refresh the page and try again. You must be logged into view the file(s).
Related Articles
Workflows stuck in AFX fulfillment and/or Provisioning nodes in RSA Identity Governance & Lifecycle 547Number of Views AFX fulfillment workflow switches to manual fulfillment when using workflow variables in an AFX Connector in RSA Identity … 461Number of Views Queries to detect workflows and change requests that could overload the Workpoint Server in RSA Identity Governance & Life… 287Number of Views Partial failure in creating change requests with Java NPE error in RSA Governance & Lifecycle 382Number of Views Approval workflow slow or stuck in decision node in RSA Governance & Lifecycle 397Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device RSA-2026-10: RSA Authentication Manager Security Update for Third-Party Component Vulnerabilities Download RSA SecurID Access Cloud User Event audit logs using Cloud Administration REST API CLU RSA SecurID Desktop Token 5.0.3 for Windows Administrator's Guide RSA SecurID Software Token 4.2.1 for Mac OS X Administrator's Guide
Don't see what you're looking for?