<div dir="ltr">Thanks. I think for now I'll just stick with an active passive configuration. I'll be setting up a dev environment with two midpoint instances and test out various configs. I will update this thread with what I find. <div><br></div><div>Thanks for all your help Pavol! </div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jun 30, 2016 at 2:42 PM, Pavol Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p><span class="">
</span></p><blockquote type="cite">Can I still run in active active
configuration with the in-memory Quartz scheduling?</blockquote>
Unfortunately, no.<p></p>
<p>Active-active configuration requires common scheduling database,
so that tasks execution can be distributed and duplicate execution
of a single task can be avoided.</p>
<p>So maybe you could switch the taskManager configuration back,
restart midPoint in single-node mode, and try the test.</p>
<p>If it would work, you could perhaps add the second node.</p>
<p>If not, maybe you could try #2.</p>
<p>Best regards,</p>
<p>Pavol<br>
</p><div><div class="h5">
<br>
<div>On 30.06.2016 23:38, Florin. Stingaciu
wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hey,
<div><br>
</div>
<div>I just performed 1 and 3 and adding users to a role through
a task works just fine. Can I still run in active active
configuration with the in-memory Quartz scheduling? </div>
<div><br>
</div>
<div>Also is there anything else you think I should try?</div>
<div><br>
</div>
<div>Thanks, </div>
<div>-F </div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Jun 30, 2016 at 2:31 PM, Pavol
Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>Florin,</p>
<p>just a few comments/questions:</p>
<p>1) We use a custom hibernate dialect for MySQL: <b>com.evolveum.midpoint.repo.sql.util.MidPointMySQLDialect</b>
(which is derived from MySQL5InnoDBDialect). The one you
use is marked as deprecated in hibernate sources. I'd
suggest using midPoint-supplied one.</p>
<p>2) I see that you use a separate database for Quartz.
Although this is required for H2, it is not required for
other databases. You may consider using a common one.
(Although it shouldn't be a cause of your problems. But
... who knows.)</p>
3) You said that the problem is visible even if there is
only one node in the cluster. If previous suggestions
wouldn't help, could you please try to comment out
<taskManager> configuration in the config file to
switch to in-memory Quartz scheduling, just to see if it
changes the situation? <br>
<br>
Best regards,<br>
Pavol
<div>
<div><br>
<br>
<div>On 30.06.2016 23:17, Florin. Stingaciu wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hey Pavol,
<div><br>
</div>
<div>I looked through the logs on my sql server
and couldn't find anything alarming. Also, I've
been trying to delete the task for the last half
an hour through the very slow GUI with no
success. Here's my config.xml:</div>
<div><br>
</div>
<div>
<div><configuration></div>
<div> <midpoint></div>
<div> <webApplication></div>
<div>
<importFolder>${midpoint.home}/import</importFolder></div>
<div> </webApplication></div>
<div> <repository></div>
<div>
<embedded>false</embedded></div>
<div>
<driverClassName>com.mysql.jdbc.Driver</driverClassName></div>
<div>
<hibernateHbm2ddl>validate</hibernateHbm2ddl></div>
<div>
<hibernateDialect>org.hibernate.dialect.MySQLDialect</hibernateDialect></div>
<div>
<repositoryServiceFactoryClass>com.evolveum.midpoint.repo.sql.SqlRepositoryFactory</repositoryServiceFactoryClass></div>
<div>
<database>mysql</database></div>
<div>
<jdbcUsername>midpoint</jdbcUsername></div>
<div>
<jdbcPassword>password</jdbcPassword></div>
<div>
<jdbcUrl>jdbc:mysql://db-server:3306/midpoint_prod_live</jdbcUrl></div>
<div> </repository></div>
<div> <taskManager></div>
<div>
<clustered>true</clustered></div>
<div>
<jdbcUrl>jdbc:mysql://db-server:3306/midpoint_prod_quartz_live</jdbcUrl></div>
<div>
<jmxUsername>midpoint</jmxUsername></div>
<div>
<jmxPassword>password</jmxPassword></div>
<div> </taskManager></div>
<div> <audit></div>
<div> <auditService></div>
<div>
<auditServiceFactoryClass>com.evolveum.midpoint.audit.impl.LoggerAuditServiceFactory</auditServiceFactoryClass></div>
<div> </auditService></div>
<div> <auditService></div>
<div>
<auditServiceFactoryClass>com.evolveum.midpoint.repo.sql.SqlAuditServiceFactory</auditServiceFactoryClass></div>
<div> </auditService></div>
<div> </audit></div>
<div> <icf></div>
<div>
<scanClasspath>true</scanClasspath></div>
<div>
<scanDirectory>${midpoint.home}/icf-connectors</scanDirectory></div>
<div> </icf></div>
<div> <keystore></div>
<div>
<keyStorePath>${midpoint.home}/keystore.jceks</keyStorePath></div>
<div>
<keyStorePassword>dEpCSVuC6kerpO8aaReMiA==</keyStorePassword></div>
<div>
<encryptionKeyAlias>default</encryptionKeyAlias></div>
<div> <!--</div>
<div> You can use smaller cipher key
size for encryption. For:</div>
<div> AES_128 "<a href="http://www.w3.org/2001/04/xmlenc#aes128-cbc" target="_blank"></a><a href="http://www.w3.org/2001/04/xmlenc#aes128-cbc" target="_blank">http://www.w3.org/2001/04/xmlenc#aes128-cbc</a>";</div>
<div> AES_256 "<a href="http://www.w3.org/2001/04/xmlenc#aes256-cbc" target="_blank"></a><a href="http://www.w3.org/2001/04/xmlenc#aes256-cbc" target="_blank">http://www.w3.org/2001/04/xmlenc#aes256-cbc</a>";</div>
<div> AES_192 "<a href="http://www.w3.org/2001/04/xmlenc#aes192-cbc" target="_blank"></a><a href="http://www.w3.org/2001/04/xmlenc#aes192-cbc" target="_blank">http://www.w3.org/2001/04/xmlenc#aes192-cbc</a>";</div>
<div><br>
</div>
<div> in element
<xmlCipher></xmlCipher></div>
<div> By default AES_128 is used. If
you change key size, than</div>
<div> you must also create secret key
in key store with proper key size and change
encryptionKeyAlias.</div>
<div><br>
</div>
<div> To generate keystore with
keytool use command:</div>
<div> keytool -genseckey -alias
default -keystore keystore.jceks -storetype
jceks -keyalg AES -keysize 128</div>
<div><br>
</div>
<div> secret key password is by
default 'midpoint'</div>
<div> --></div>
<div> </keystore></div>
<div> </midpoint></div>
<div></configuration></div>
</div>
<div><br>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Jun 30, 2016 at
2:07 PM, Pavol Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank"></a><a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>Hello Florin,</p>
<p>this is really strange. Looks like some
low-level DB problem. <br>
</p>
<p>I read your log in this way:</p>
<p>Wicket has problems displaying a page,
because thread <b>http-bio-8443-exec-2</b>
is blocking (line #2). And why and where
is it blocked?</p>
<p>It is reading a task (line #51),
therefore it asks hibernate for data (line
#36), so hibernate calls MySQL driver
(line #19). And the call didn't complete,
as it waits for something to come through
the network socket (line #5).</p>
<p>(What troubles me a lot is that one-node
configuration does not work as well.)</p>
<p>So I'd recommend to have a look at your
database configuration or setup.</p>
<p>I'm not an expert on databases (nor on
MySQL in particular), so I have no idea
e.g. what troubleshooting tools to use at
this moment. Maybe you could open MySQL
admin console to see if there's something
suspicious. Or look at MySQL server logs.
Or you could share your midPoint
config.xml here, particularly the
<repository> section of it.</p>
<p>Best regards,<br>
Pavol<br>
</p>
<div>
<div> <br>
<div>On 30.06.2016 22:49, Florin.
Stingaciu wrote:<br>
</div>
</div>
</div>
<blockquote type="cite">
<div>
<div>
<div dir="ltr">Hello,
<div><br>
</div>
<div>Whenever I try to add a member
through the "Members" tab in
Midpoint, nothing happens. I tried
to add myself to the Role
"Approver" through the "Members"
tab and the task never completes. </div>
<div><br>
</div>
<div>In fact midPoint starts hanging
and the issue doesn't resolve and
I get all these errors: <a href="http://pastebin.com/GEgdtXnh" target="_blank"></a><a href="http://pastebin.com/GEgdtXnh" target="_blank">http://pastebin.com/GEgdtXnh</a></div>
<div><br>
</div>
<div>I'm running two instances of
midPoint with the following task
manager configuration:</div>
<div><br>
</div>
<div>
<div> <taskManager></div>
<div>
<clustered>true</clustered></div>
<div>
<jdbcUrl>jdbc:mysql://db-server:3306/midpoint_prod_quartz_live</jdbcUrl></div>
<div>
<jmxUsername>midpoint</jmxUsername></div>
<div>
<jmxPassword>password</jmxPassword></div>
<div> </taskManager></div>
</div>
<div><br>
</div>
<div>I've tried this action with
both instances alive as well as
with only one. </div>
<div><br>
</div>
<div>Also here's my tomcat config
pertaining to jmx:</div>
<div>
<p><span> -Dcom.sun.management.jmxremote.password.file=/var/opt/midpoint/jmxremote.password
-Dcom.sun.management.jmxremote.access.file=/var/opt/midpoint/jmxremote.access
-Dmidpoint.nodeId=001
-Dcom.sun.management.jmxremote.port=20001
-Dcom.sun.management.jmxremote.ssl=false</span></p>
<p>Even after I restart the tomcat
server, midPoint doesn't respond
anymore and the logs don't show
anything. </p>
<p>I'm willing to forgo the active
active configuration and use an
active passive configuration.
Also I believe this is the cause
of the earlier issues with the
upgrade process (besides the
mismatch in the connector) </p>
<p>Any help would be greatly
appreciated. </p>
<p>Thanks, </p>
<p>-F </p>
</div>
</div>
<br>
<fieldset></fieldset>
<br>
</div>
</div>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
</div>
</div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div></div></div>
<br>_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br></blockquote></div><br></div>