Database reindex required after applying Authentication Manager 8.7 SP1 and Authentication Manager 8.7 SP1 patch 1 due to upgrade from SUSE 12 to SUSE 15
2 years ago
Originally Published: 2023-12-01
Article Number
000071612
Applies To
RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.7 SP1 and 8.7 SP1 patch 1
Issue
The application of Authentication Manager 8.7 SP1 upgrades the underlying OS from SUSE 12 to SUSE 15.  Because of the operating system upgrade. a database reindex is required on all servers in the deployment.
 
Resolution
  1. Login to your primary via CLI.
  2. Shut down all services except database service.  Make sure that the database service is the only one that is up.
login as: rsaadmin
Using keyboard-interactive authentication.
Password: <enter OS password>
Last login: <om Dec 11 10:27:53 20123 from jumphost.vcloud.local
RSA Authentication Manager Installation Directory: /opt/rsa/am 
rsaadmin@primary:~> cd /opt/rsa/am/server
rsaadmin@primary:/opt/rsa/am/server> ./rsaserv stop all
rsaadmin@primary:/opt/rsa/am/server>
./rsaserv start db
  1. Connect to PostgreSQL:
rsaadmin@primary:~> cd /opt/rsa/am/utils
rsaadmin@am81p:/opt/rsa/am/utils> ./rsautil manage-secrets -a get com.rsa.db.dba.password
Please enter OC Administrator username: <enter Operations Console admin's name>
Please enter OC Administrator password: <enter Operations Console admin's password>
com.rsa.db.dba.password: rSKD5bGguLGNL9uGvFWnJoxIcHJah2 (your string will be different)
rsaadmin@primary:/opt/rsa/am/utils> cd ../pgsql/bin
rsaadmin@primary:/opt/rsa/am/pgsql/bin> ./psql -h localhost -p 7050 -d db -U rsa_dba
Password for user rsa_dba: <enter the com.rsa.db.dba.password captured above>
db=#
  1. Run the following command to reindex the database:
db=# REINDEX DATABASE db;
  1. Restart Authentication Manager services:
rsaadmin@primary:~> cd /opt/rsa/am/server
rsaadmin@primary:/opt/rsa/am/server> ./rsaserv start all
Notes
  • This issue is fixed in Authentication Manager 8.7 SP1 patch 2 (8.7.1.2).
  • The replica servers in the deployment will handle authentication requests while the services are down on the primary.
  • Depending on the size of your database, the reindex can take some time.
  • Replica servers do need to be reindexed.
  • Reindex the primary first, then replicas one at a time.