Error loading roles and groups information through Userapp

Hi, I have a couple of errors on the UserApplication when I try to get information on the user dashboard and on the groups pages

Error loading roles dashboard:

When we are trying to load the roles of the user on the dashboard we have this response on the user app:

When we use the dev tools we get this response from the application:

And after that we have another error on the catalina.out.

14:45:47.462 [https-jsse-nio-8543-exec-115] ERROR com.netiq.idm.rest.access.PermissionAssignmentService - [RBPM] Internal exception occurred processing REST service
java.lang.NullPointerException: null
        at com.netiq.idm.rest.access.PermissionAssignmentService.getAllUserPermissions(PermissionAssignmentService.java:2144) ~[IDMAccessRest.jar:?]
        at com.netiq.idm.rest.access.PermissionAssignmentService.getLoggedInUserPermissionAssignmentsBasedOnFilter(PermissionAssignmentService.java:1989) ~[IDMAccessRest.jar:?]
        at sun.reflect.GeneratedMethodAccessor1004.invoke(Unknown Source) ~[?:?]
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_342]
        at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_342]
        at com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethodDispatchProvider$ResponseOutInvoker._dispatch(AbstractResourceMethodDispatchProvider.java:168) ~[jersey-bundle-1.1.5.jar:1.1.5]
        at com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch(ResourceJavaMethodDispatcher.java:67) ~[jersey-bundle-1.1.5.jar:1.1.5]
        at com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept(HttpMethodRule.java:259) ~[jersey-bundle-1.1.5.jar:1.1.5]
        at com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:133) ~[jersey-bundle-1.1.5.jar:1.1.5]
        at com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept(ResourceClassRule.java:83) ~[jersey-bundle-1.1.5.jar:1.1.5]
        at com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept(RightHandPathRule.java:133) ~[jersey-bundle-1.1.5.jar:1.1.5]
        at com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept(RootResourceClassesRule.java:71) ~[jersey-bundle-1.1.5.jar:1.1.5]
        at com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest(WebApplicationImpl.java:990) ~[jersey-bundle-1.1.5.jar:1.1.5]
        at com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:941) ~[jersey-bundle-1.1.5.jar:1.1.5]
        at com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest(WebApplicationImpl.java:932) ~[jersey-bundle-1.1.5.jar:1.1.5]
        at com.sun.jersey.spi.container.servlet.WebComponent.service(WebComponent.java:384) ~[jersey-bundle-1.1.5.jar:1.1.5]
        at com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:451) ~[jersey-bundle-1.1.5.jar:1.1.5]
        at com.sun.jersey.spi.container.servlet.ServletContainer.service(ServletContainer.java:632) ~[jersey-bundle-1.1.5.jar:1.1.5]
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:764) ~[servlet-api.jar:4.0.FR]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:227) ~[catalina.jar:9.0.65]
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162) ~[catalina.jar:9.0.65]
        at com.novell.common.auth.JAASFilter.doFilter(JAASFilter.java:149) ~[IDMfw-bin.jar:?]
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189) ~[catalina.jar:9.0.65]

Error loading groups:

we have a similar problem when we try to load the group list on the user app:

When we use the dev tools we get this response from the application:

And the error in the catalina.out

14:33:51.482 [https-jsse-nio-8543-exec-116] ERROR com.novell.srvprv.impl.vdata.model.VirtualDataAccess - [RBPM] Operation not supported. Compound Indexes not found for the sorting attribute : javax.naming.OperationNotSupportedException: [LDAP: error code 53 - Unwilling To Perform]; remaining name 'ou=System_Groups,o='
javax.naming.OperationNotSupportedException: [LDAP: error code 53 - Unwilling To Perform]
        at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3338) ~[?:1.8.0_342]
        at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3211) ~[?:1.8.0_342]
        at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3002) ~[?:1.8.0_342]
        at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1875) ~[?:1.8.0_342]
        at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1798) ~[?:1.8.0_342]
        at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:392) ~[?:1.8.0_342]
        at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:358) ~[?:1.8.0_342]
        at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:341) ~[?:1.8.0_342]
        at com.novell.srvprv.impl.vdata.model.VirtualDataAccess.getPaggedResultFromVlV(VirtualDataAccess.java:2384) ~[IDMfw-bin.jar:?]
        at com.novell.srvprv.impl.vdata.model.VirtualDataAccess.getPaggedResultlist(VirtualDataAccess.java:711) ~[IDMfw-bin.jar:?]
        at com.novell.srvprv.impl.vdata.model.VirtualDataAccess.getEntityResultList(VirtualDataAccess.java:615) ~[IDMfw-bin.jar:?]
        at com.novell.srvprv.impl.vdata.model.VirtualDataModel.getEntityResultList(VirtualDataModel.java:441) ~[IDMfw-bin.jar:?]
        at com.netiq.idm.rest.access.util.RestUtil.getGroupsFromIDVwithPagination(RestUtil.java:1014) ~[IDMAccessRest.jar:?]

Parents Reply Children
  • 0 in reply to   

    Yeah, the first error is very strange, what I can tell is that this seems to be happening only for the uaadmin user, other users can load the dashboard and the permissions page without any issue, I tried to recreate the RBPM but the result was the same.

    In regards of the indexes I can try to check them again tomorrow but all the index that you mentions seems to be included on the eDir and no one of them to me point to a group entry, I also checked the indexes that point to the nrf structure but they are all on the edir replica, Im going to try to check the configured indexes on the testing env to see if I can find anything different but is weird that they only have like 20 groups on the env with the problem.