Change Requests stuck in the AFX Fulfillment Handler Workflow Node and Workflows Stalled in RSA Identity Governance & Lifecycle
Originally Published: 2020-07-07
Last Modified: 2023-11-30
Article Number
Applies To
RSA Version/Condition: 7.0.x, 7.1.x, 7.2.0
Issue
SYMPTOMS:
- Change requests that provision using AFX are stuck in the fulfillment phase.
- The change request workflows are stuck in the AFX fulfillment handler node.
- Workflows are flagged as stalled.
- AFX requests are stuck in the V state.
Cause
Not enough memory is available to the ActiveMQ queue during heavy processing of bulk Change Request items which causes messages to get stuck in the ActiveMQ queue intermittently impacting AFX processing and Change Request completion.
Resolution
- RSA Identity Governance & Lifecycle 7.1.1 P07
- RSA Identity Governance & Lifecycle 7.2.0 P02
- RSA Identity Governance & Lifecycle 7.2.1
- RSA Identity Governance & Lifecycle 7.5.0
Workaround
- Restart the stuck AFX requests, and
- Manually modify the ActiveMQ memory configuration to prevent future occurrences of this issue.
Restart stuck AFX requests:
Open a support ticket with RSA Identity Governance & Lifecycle Support for a workaround and provide the following information in the case:- Login to a SQL tool such as SQL*Plus or SQL Developer as avuser, and
- Execute the following queries:
These queries will determine the AFX request state of the specific stuck change request:
select * from T_AV_CHANGE_REQUESTS CR where NAME like '%stuck-change-request-name%';
Note the values of CR.ID and CR.CURRENT_STATE returned in the query results and substitute them into the next two queries:
select * from T_AV_CHANGE_REQUEST_DETAILS CRD where CHANGE_REQUESTS_ID=<CR.ID> select * from T_AV_AFX_REQUEST where change_item_id=<CRD.ID>
This query will identify any AFX requests in the V state:
select * from t_av_afx_request where state ='V'
Manually modify the ActiveMQ memory configuration:
- Follow the instructions in the attached ActiveMQ_Memory_Changes.docx document.
- Restart AFX as the afx user:
afx restart
Attachments
If the attachment does not open when clicked, please refresh the page and try again. You must be logged into view the file(s).
Related Articles
Workflows stuck in AFX fulfillment and/or Provisioning nodes in RSA Identity Governance & Lifecycle 553Number of Views Partial failure in creating change requests with Java NPE error in RSA Governance & Lifecycle 390Number of Views AFX fulfillment workflow switches to manual fulfillment when using workflow variables in an AFX Connector in RSA Identity … 480Number of Views Queries to detect workflows and change requests that could overload the Workpoint Server in RSA Identity Governance & Life… 291Number of Views Auto generated revocation requests Stuck in Fulfillment Phase with AFX errors in connector logs If any Change Item rejecte… 159Number of Views
Trending Articles
RSA Authentication Manager 8.9 Setup and Configuration Guide How to download full kits, service packs, and patches from RSA Link for RSA Identity Governance & Lifecycle RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide RSA Authentication Manager 8.9 Patches and Hotfixes Readme How to 'Trust' the RSA Authentication Manager Security Console Self-Signed Root CA certificate and prevent Cert warnings.
Don't see what you're looking for?