<div dir="ltr">Hey,<div><br></div><div>I just performed 1 and 3 and adding users to a role through a task works just fine. Can I still run in active active configuration with the in-memory Quartz scheduling? </div><div><br></div><div>Also is there anything else you think I should try?</div><div><br></div><div>Thanks, </div><div>-F </div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jun 30, 2016 at 2:31 PM, Pavol Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>Florin,</p>
<p>just a few comments/questions:</p>
<p>1) We use a custom hibernate dialect for MySQL: <b>com.evolveum.midpoint.repo.sql.util.MidPointMySQLDialect</b>
(which is derived from MySQL5InnoDBDialect). The one you use is
marked as deprecated in hibernate sources. I'd suggest using
midPoint-supplied one.</p>
<p>2) I see that you use a separate database for Quartz. Although
this is required for H2, it is not required for other databases.
You may consider using a common one. (Although it shouldn't be a
cause of your problems. But ... who knows.)</p>
3) You said that the problem is visible even if there is only one
node in the cluster. If previous suggestions wouldn't help, could
you please try to comment out <taskManager> configuration in
the config file to switch to in-memory Quartz scheduling, just to
see if it changes the situation? <br>
<br>
Best regards,<br>
Pavol<div><div class="h5"><br>
<br>
<div>On 30.06.2016 23:17, Florin. Stingaciu
wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hey Pavol,
<div><br>
</div>
<div>I looked through the logs on my sql server and couldn't
find anything alarming. Also, I've been trying to delete the
task for the last half an hour through the very slow GUI with
no success. Here's my config.xml:</div>
<div><br>
</div>
<div>
<div><configuration></div>
<div> <midpoint></div>
<div> <webApplication></div>
<div>
<importFolder>${midpoint.home}/import</importFolder></div>
<div> </webApplication></div>
<div> <repository></div>
<div> <embedded>false</embedded></div>
<div>
<driverClassName>com.mysql.jdbc.Driver</driverClassName></div>
<div>
<hibernateHbm2ddl>validate</hibernateHbm2ddl></div>
<div>
<hibernateDialect>org.hibernate.dialect.MySQLDialect</hibernateDialect></div>
<div>
<repositoryServiceFactoryClass>com.evolveum.midpoint.repo.sql.SqlRepositoryFactory</repositoryServiceFactoryClass></div>
<div> <database>mysql</database></div>
<div>
<jdbcUsername>midpoint</jdbcUsername></div>
<div>
<jdbcPassword>password</jdbcPassword></div>
<div>
<jdbcUrl>jdbc:mysql://db-server:3306/midpoint_prod_live</jdbcUrl></div>
<div> </repository></div>
<div> <taskManager></div>
<div> <clustered>true</clustered></div>
<div>
<jdbcUrl>jdbc:mysql://db-server:3306/midpoint_prod_quartz_live</jdbcUrl></div>
<div>
<jmxUsername>midpoint</jmxUsername></div>
<div>
<jmxPassword>password</jmxPassword></div>
<div> </taskManager></div>
<div> <audit></div>
<div> <auditService></div>
<div>
<auditServiceFactoryClass>com.evolveum.midpoint.audit.impl.LoggerAuditServiceFactory</auditServiceFactoryClass></div>
<div> </auditService></div>
<div> <auditService></div>
<div>
<auditServiceFactoryClass>com.evolveum.midpoint.repo.sql.SqlAuditServiceFactory</auditServiceFactoryClass></div>
<div> </auditService></div>
<div> </audit></div>
<div> <icf></div>
<div>
<scanClasspath>true</scanClasspath></div>
<div>
<scanDirectory>${midpoint.home}/icf-connectors</scanDirectory></div>
<div> </icf></div>
<div> <keystore></div>
<div>
<keyStorePath>${midpoint.home}/keystore.jceks</keyStorePath></div>
<div>
<keyStorePassword>dEpCSVuC6kerpO8aaReMiA==</keyStorePassword></div>
<div>
<encryptionKeyAlias>default</encryptionKeyAlias></div>
<div> <!--</div>
<div> You can use smaller cipher key size for
encryption. For:</div>
<div> AES_128 "<a href="http://www.w3.org/2001/04/xmlenc#aes128-cbc" target="_blank">http://www.w3.org/2001/04/xmlenc#aes128-cbc</a>";</div>
<div> AES_256 "<a href="http://www.w3.org/2001/04/xmlenc#aes256-cbc" target="_blank">http://www.w3.org/2001/04/xmlenc#aes256-cbc</a>";</div>
<div> AES_192 "<a href="http://www.w3.org/2001/04/xmlenc#aes192-cbc" target="_blank">http://www.w3.org/2001/04/xmlenc#aes192-cbc</a>";</div>
<div><br>
</div>
<div> in element
<xmlCipher></xmlCipher></div>
<div> By default AES_128 is used. If you change key
size, than</div>
<div> you must also create secret key in key store
with proper key size and change encryptionKeyAlias.</div>
<div><br>
</div>
<div> To generate keystore with keytool use
command:</div>
<div> keytool -genseckey -alias default -keystore
keystore.jceks -storetype jceks -keyalg AES -keysize 128</div>
<div><br>
</div>
<div> secret key password is by default 'midpoint'</div>
<div> --></div>
<div> </keystore></div>
<div> </midpoint></div>
<div></configuration></div>
</div>
<div><br>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Jun 30, 2016 at 2:07 PM, Pavol
Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>Hello Florin,</p>
<p>this is really strange. Looks like some low-level DB
problem. <br>
</p>
<p>I read your log in this way:</p>
<p>Wicket has problems displaying a page, because thread <b>http-bio-8443-exec-2</b>
is blocking (line #2). And why and where is it blocked?</p>
<p>It is reading a task (line #51), therefore it asks
hibernate for data (line #36), so hibernate calls MySQL
driver (line #19). And the call didn't complete, as it
waits for something to come through the network socket
(line #5).</p>
<p>(What troubles me a lot is that one-node configuration
does not work as well.)</p>
<p>So I'd recommend to have a look at your database
configuration or setup.</p>
<p>I'm not an expert on databases (nor on MySQL in
particular), so I have no idea e.g. what troubleshooting
tools to use at this moment. Maybe you could open MySQL
admin console to see if there's something suspicious. Or
look at MySQL server logs. Or you could share your
midPoint config.xml here, particularly the
<repository> section of it.</p>
<p>Best regards,<br>
Pavol<br>
</p>
<div>
<div> <br>
<div>On 30.06.2016 22:49, Florin. Stingaciu wrote:<br>
</div>
</div>
</div>
<blockquote type="cite">
<div>
<div>
<div dir="ltr">Hello,
<div><br>
</div>
<div>Whenever I try to add a member through the
"Members" tab in Midpoint, nothing happens. I
tried to add myself to the Role "Approver"
through the "Members" tab and the task never
completes. </div>
<div><br>
</div>
<div>In fact midPoint starts hanging and the issue
doesn't resolve and I get all these errors: <a href="http://pastebin.com/GEgdtXnh" target="_blank"></a><a href="http://pastebin.com/GEgdtXnh" target="_blank">http://pastebin.com/GEgdtXnh</a></div>
<div><br>
</div>
<div>I'm running two instances of midPoint with
the following task manager configuration:</div>
<div><br>
</div>
<div>
<div> <taskManager></div>
<div>
<clustered>true</clustered></div>
<div>
<jdbcUrl>jdbc:mysql://db-server:3306/midpoint_prod_quartz_live</jdbcUrl></div>
<div>
<jmxUsername>midpoint</jmxUsername></div>
<div>
<jmxPassword>password</jmxPassword></div>
<div> </taskManager></div>
</div>
<div><br>
</div>
<div>I've tried this action with both instances
alive as well as with only one. </div>
<div><br>
</div>
<div>Also here's my tomcat config pertaining to
jmx:</div>
<div>
<p><span> -Dcom.sun.management.jmxremote.password.file=/var/opt/midpoint/jmxremote.password
-Dcom.sun.management.jmxremote.access.file=/var/opt/midpoint/jmxremote.access
-Dmidpoint.nodeId=001
-Dcom.sun.management.jmxremote.port=20001
-Dcom.sun.management.jmxremote.ssl=false</span></p>
<p>Even after I restart the tomcat server,
midPoint doesn't respond anymore and the logs
don't show anything. </p>
<p>I'm willing to forgo the active active
configuration and use an active passive
configuration. Also I believe this is the
cause of the earlier issues with the upgrade
process (besides the mismatch in the
connector) </p>
<p>Any help would be greatly appreciated. </p>
<p>Thanks, </p>
<p>-F </p>
</div>
</div>
<br>
<fieldset></fieldset>
<br>
</div>
</div>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div></div></div>
<br>_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br></div>