Unable To Delete Unassigned Expired Token

3 years ago

Originally Published: 2016-01-25

Article Number

000049819

Applies To

RSA Product Set: SecurID
RSA Product/Service Type: SecurID Appliance
RSA Version/Condition: 8.1.0
Platform: Linux
O/S Version: SUSE Linux

Issue

"Either another administrator deleted one or more of the selected objects, or you attempted to delete objects from more than one identity source at the same time"

Cause

Tokens being reflected as "Unassigned" on the GUI while in reality they are still not completely unassigned at the database level, thus causing the issue while deleting tokens.

Resolution

Solution 1 : If the issue is seen for a single token, perform the following steps

rsaadmin@am8p:~> cd /opt/rsa/am/utils 
rsaadmin@am8p:/opt/rsa/am/utils> ./rsautil manage-secrets -a get com.rsa.db.dba.password 
Please enter OC Administrator username: ocadmin 
Please enter OC Administrator password: ********* 
com.rsa.db.dba.password: GrcvNN2FUAsWjyPfhaIsSWvjvZhvtN 
 
 
cd ../pgsql/bin 
rsaadmin@am8p:/opt/rsa/am/pgsql/bin> ./psql -h localhost -p 7050 -d db -U rsa_dba  
put the password that appeared 
 
And Query we will run: 
select * from rsa_rep.am_ctkip_authcode where token_serial_num like '000112259786'; 
 

Delete from rsa_rep.am_ctkip_authcode where token_serial_num like '000112259786';

Solution 2 : If the issue is seen for several random tokens, perform the following steps

rsaadmin@am8p:~> cd /opt/rsa/am/utils 
rsaadmin@am8p:/opt/rsa/am/utils> ./rsautil manage-secrets -a get com.rsa.db.dba.password 
Please enter OC Administrator username: ocadmin 
Please enter OC Administrator password: ********* 
com.rsa.db.dba.password: GrcvNN2FUAsWjyPfhaIsSWvjvZhvtN 
 
 
cd ../pgsql/bin 
rsaadmin@am8p:/opt/rsa/am/pgsql/bin> ./psql -h localhost -p 7050 -d db -U rsa_dba  
put the password that appeared 

select token_serial_num from am_ctkip_authcode where is_token_assigned='t' and token_serial_num IN (select serial_number from am_token where token_shutdown_date<='2017-12-31 00:00:00');

Delete from am_ctkip_authcode where is_token_assigned='t' and token_serial_num IN (select serial_number from am_token where token_shutdown_date<='2017-12-31 00:00:00');

Note : Please Backup RSA Database before performing these steps

Don't see what you're looking for?

Related Articles

Trending Articles