Account group aggregation is failing for Active Directory application

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Which IIQ version are you inquiring about?

IIQ 8.4p2

Share all details about your problem, including any error messages you may have received.

*Active Directory group aggregation is failing/not completing after completing all partitions. Task is partitioned to 261 partitions and task result shows ‘completed 260 of 261 partitions’. And that last partition is not completing even after couple of days.

There are couple of warnings in task result about Cyclic group* hierarchy*. Can these warnings stop task to be completed? If not, what could be possible issue stopping my aggregation.*

2

@srinamala0069

Can you paste the full error over here.

Thanks

3

@srinamala0069 Try this:

Issue: Pruning cyclical group hierarchy warning message for group aggregation.

Description: When groups are members of each other, forming a cyclic relation, it is termed as cyclic group hierarchy. For example:

  • GroupA is member of GroupB

  • GroupB is member if GroupC

  • GroupC is member of GroupA

The cyclic links between the groups are resolved during the Group aggregation. If the depth of the hierarchy is too deep within the Groups, the performance can be impacted for aggregation.

Solution: Add the following option to the TaskDefinition of the task through which aggregation is triggered from debug page.

<entry key="noGroupCycleDetection" value="True"/>
4

@srinamala0069 Please share the error you are getting. Warning on cyclic group membership should not fail the task.

5

Cyclic group issue is resolved/ignored with above suggestion(to add entry key in task definition). But currently I am facing this issue
Exception during aggregation of GROUP_NAME . Reason: Error getting BSFManager from pool.

6

Hi @srinamala0069 - Do you have a managed entitlement customization rule set? Also can you post the log output from the new error.

7

@srinamala0069 Could you please share the complete stacktrace?