RSA WebSerivce "Invalid column name" when creating a change request to terminate a user in RSA Governance & Lifecycle
Last Modified: 2024-01-26
Article Number
Applies To
This is a known issue in the following versions:
- RSA Governance & Lifecycle 7.2.x
- RSA Governance & Lifecycle 7.5.0
- SecurID Governance & Lifecycle 7.5.2
Issue
<UserChange> <Operation>Terminate</Operation> <User>value</User> <Parameters> <Parameter> <!-- Deleting/Locking/Disabling all the accounts that are mapped to the user --> <Name>ActionOnMappedAccounts</Name> <Value>Delete Or Lock or Disable</Value> </Parameter> <Parameter> <!-- Either disable the shared account or reset the shared account password --> <Name>ActionOnSharedAccount</Name> <Value>Disable or Reset</Value> </Parameter> <Parameter> <!-- Either disable the service account or reset the service account password --> <Name>ActionOnServiceAccount</Name> <Value>Disable or Reset</Value> </Parameter> <Parameter> <!-- Revoke all entitlements of user --> <Name>RevokeAllEnts</Name> <Value>True or false</Value> </Parameter> </Parameters> </UserChange>
The Account Id is not retrieved, and no account changes are created.
The following error message appears in the aveksaServer.log:
01/26/2024 11:09:29.648 ERROR (default task-5) [org.hibernate.engine.jdbc.spi.SqlExceptionHelper] Invalid column name
01/26/2024 11:09:29.658 ERROR (default task-5) [com.aveksa.server.db.persistence.PersistenceServiceProvider] Error while executing the named query: get-user-account-ids-with-no-service-shared-condition with Params: {user_id=12345678}
org.hibernate.exception.GenericJDBCException: could not execute query
at org.hibernate.exception.internal.StandardSQLExceptionConverter.convert(StandardSQLExceptionConverter.java:47)
at org.hibernate.engine.jdbc.spi.SqlExceptionHelper.convert(SqlExceptionHelper.java:109)
at org.hibernate.loader.Loader.doList(Loader.java:2620)
at org.hibernate.loader.Loader.doList(Loader.java:2600)
at org.hibernate.loader.Loader.listIgnoreQueryCache(Loader.java:2429)
at org.hibernate.loader.Loader.list(Loader.java:2424)
at org.hibernate.loader.custom.CustomLoader.list(CustomLoader.java:336)
at org.hibernate.internal.SessionImpl.listCustomQuery(SessionImpl.java:1967)
at org.hibernate.internal.AbstractSessionImpl.list(AbstractSessionImpl.java:322)
at org.hibernate.internal.SQLQueryImpl.list(SQLQueryImpl.java:125)
...
Cause
Resolution
- RSA Governance & Lifecycle 7.2.1 P12
- RSA Governance & Lifecycle 7.5.0 P08
- SecurID Governance & Lifecycle 7.5.2 P04
- RSA Governance & Lifecycle 8.0.0
Account Ids are retrieved successfully, and account changes are created as expected.
Related Articles
Log Artifacts generation fails due to ORA-31061 error in ASR report generation in RSA Identity Governance & Lifecycle 119Number of Views Menu bar is not refreshed after creating a Change Request or Pending Submission in RSA Identity Governance & Lifecycle 47Number of Views Creating a Trust Relationship 12Number of Views This request contains no changes. It cannot be submitted error when adding entitlement belonging to a role in RSA Identity… 24Number of Views Change the display language for all RSA Authentication Manager 8.x consoles 397Number of Views
Trending Articles
Artifacts to gather in RSA Identity Governance & Lifecycle How to Update the Root (Server) and Client Certificates in RSA Identity Governance & Lifecycle How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device Troubleshooting AFX Connector issues in RSA Identity Governance & Lifecycle How to Download and Reinstall the AFX Server Archive in RSA Governance & Lifecycle
Don't see what you're looking for?