RSA WebSerivce "Invalid column name" when creating a change request to terminate a user in RSA Governance & Lifecycle
Article Number
Applies To
This is a known issue in the following versions:
- RSA Governance & Lifecycle 7.2.x
- RSA Governance & Lifecycle 7.5.0
- SecurID Governance & Lifecycle 7.5.2
Issue
<UserChange> <Operation>Terminate</Operation> <User>value</User> <Parameters> <Parameter> <!-- Deleting/Locking/Disabling all the accounts that are mapped to the user --> <Name>ActionOnMappedAccounts</Name> <Value>Delete Or Lock or Disable</Value> </Parameter> <Parameter> <!-- Either disable the shared account or reset the shared account password --> <Name>ActionOnSharedAccount</Name> <Value>Disable or Reset</Value> </Parameter> <Parameter> <!-- Either disable the service account or reset the service account password --> <Name>ActionOnServiceAccount</Name> <Value>Disable or Reset</Value> </Parameter> <Parameter> <!-- Revoke all entitlements of user --> <Name>RevokeAllEnts</Name> <Value>True or false</Value> </Parameter> </Parameters> </UserChange>
The Account Id is not retrieved, and no account changes are created.
The following error message appears in the aveksaServer.log:
01/26/2024 11:09:29.648 ERROR (default task-5) [org.hibernate.engine.jdbc.spi.SqlExceptionHelper] Invalid column name
01/26/2024 11:09:29.658 ERROR (default task-5) [com.aveksa.server.db.persistence.PersistenceServiceProvider] Error while executing the named query: get-user-account-ids-with-no-service-shared-condition with Params: {user_id=12345678}
org.hibernate.exception.GenericJDBCException: could not execute query
at org.hibernate.exception.internal.StandardSQLExceptionConverter.convert(StandardSQLExceptionConverter.java:47)
at org.hibernate.engine.jdbc.spi.SqlExceptionHelper.convert(SqlExceptionHelper.java:109)
at org.hibernate.loader.Loader.doList(Loader.java:2620)
at org.hibernate.loader.Loader.doList(Loader.java:2600)
at org.hibernate.loader.Loader.listIgnoreQueryCache(Loader.java:2429)
at org.hibernate.loader.Loader.list(Loader.java:2424)
at org.hibernate.loader.custom.CustomLoader.list(CustomLoader.java:336)
at org.hibernate.internal.SessionImpl.listCustomQuery(SessionImpl.java:1967)
at org.hibernate.internal.AbstractSessionImpl.list(AbstractSessionImpl.java:322)
at org.hibernate.internal.SQLQueryImpl.list(SQLQueryImpl.java:125)
...
Cause
Resolution
- RSA Governance & Lifecycle 7.2.1 P12
- RSA Governance & Lifecycle 7.5.0 P08
- SecurID Governance & Lifecycle 7.5.2 P04
- RSA Governance & Lifecycle 8.0.0
Account Ids are retrieved successfully, and account changes are created as expected.
Related Articles
WebService createChangeRequest command "Remove account to group" does not populate the user information in request tab in … 37Number of Views New Change Requests become stuck at every Approval Node regardless of Approval status in RSA Identity Governance & Lifecycle 162Number of Views Attribute change rule creating duplicate change items for users having more than one account with same entitlement in an a… 33Number of Views How approval activity behaves when change request items are grouped by category in RSA Identity Governance & Lifecycle 124Number of Views Change the display language for all RSA Authentication Manager 8.x consoles 397Number of Views
Trending Articles
Unable to login to RSA Authentication Manager Security Console as super admin Authentication Manager Administration Server with operations console service Fails to Start with "No config.xml Was Found"… Authentication Manager Security Console and Operations Console Inaccessible After Certificate Update RSA Authentication Manager Upgrade Process Authentication Manager How to Retrieve the LDAPS Certificate and Configure an External Identity Source to Use LDAPS
Don't see what you're looking for?