Cybersecurity
DevOps Cloud
IT Operations Cloud
Summary
While loading an IDM Workflow form it can appear that loading hangs. The nginx process needs to be restarted in order to get it working again.
Products
Identity Manager (IDM)
Environment
Identity Manager 4.8.x on Linux.
Situation
While loading an IDM Workflow form it can appear that loading hangs. The nginx process
needs to be restarted in order to get it working again.
The nginx error.log shows the following error message:
2022/09/06 16:28:29 [error] 129692#0: *2 upstream prematurely closed connection while reading response header from upstream,
client: <host>,server: <host>:8600, request: "GET /WFHandler?sid=IDM&uri=/rest/access/forms&id=(...)
For= HTTP/1.1", upstream: "http://127.0.0.1:3000/WFHandler?sid=IDM&uri=/rest/access/forms&id=(...),
host: "<host>:8600", referrer: "https://<host>:8600/forms/""
Cause
While this error seem to point to a nginx problem the actual issue is with the IgaFormRenderer process which is started via nginx service and can't get enough tcp connections opened.
Solution is to increase the ulimit setting for that process.
Resolution
Edit the /etc/init.d/netiq-golang.sh file and modify it to add the: "ulimit -n 4096" line.
>>>snippet
#!/bin/bash
. gettext.sh
TEXTDOMAIN=install
export TEXTDOMAIN
TEXTDOMAINDIR=/opt/netiq/idm/uninstall_data/common/locale/
export TEXTDOMAINDIR
case $1 in
start)
str1=`gettext install "Starting IGA form renderer backend."`
echo $str1
ulimit -n 4096
(/opt/netiq/idm/apps/sites/IgaFormRenderer.sh -config /opt/netiq/idm/apps/sites/config.ini -golangPort 3000 start &> /dev/null) &
;;
<<<\snippet
Restart the nginx service: systemctl restart netiq-nginx.service
URL Name
KM000010561