Questions asked by SupportIvyTeam

Not all users are imported or updated form eDirectory

SupportIvyTeam — Tue, 28 Jul 2020 08:35:43 -0400

It seams that not all users are imported (only 500) or updated from Novell eDirectory since I have updated to 9.1. I have defined an ImportUsersOfGroup.

How to migrate Active Directory connection to LDAP(S) / SSL

SupportIvyTeam — Wed, 29 Apr 2020 05:39:52 -0400

Microsoft is enforcing LDAPS for active directory services. https://www.heise.de/newsticker/meldung/Microsoft-stellt-Domaincontroller-langsam-auf-LDAPS-um-4666079.html

So we have to configure all ivyEngine user synch connections to use LDAP(S). How can this be done? Simply enabling 'SSL' option doesn't seem to be enough.

We have multiple workflow app on differen ivyEngine (4.3, 5.1, 7.0) versions in use. Is there a generic approach to use that works als in older environments?

Why has the license check changed for Axon.ivy 8.0?

SupportIvyTeam — Wed, 15 Jan 2020 04:04:54 -0500

Why has the license check changed for Axon.ivy 8.0? You need now the so called public urls and not the hostname anymore. What is the reason why you have changed that?

InvocationTargetException: No class loader available

SupportIvyTeam — Tue, 05 Nov 2019 08:17:17 -0500

Since a few days I'm facing strange exception when trying to run the maven build for my IvyProject. How can I get rid of it? Entering the -X command doesn't really help here.

[ERROR] Failed to execute goal com.axonivy.ivy.ci:project-build-plugin:7.0.0:compileProject (default-compileProject) on project connectivity-demos: Failed to compile project '/mnt/data/dev/7.0/ivyProjects/ConnectivityDemos/ConnectivityDemos'.: InvocationTargetException: No class loader available for the bundle: ch.ivyteam.ivy.dataclasses.build_7.0.15.1911050149 [25] -> [Help 1]

How to increase file size upload limit in IIS?

SupportIvyTeam — Fri, 04 Oct 2019 04:31:56 -0400

After setting up my Ivy environment with an IIS, I could not upload any large files. Where can I change that restriction?

The error message looks something like this:

Request timed out.

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: 
System.Web.HttpException: Request timed out.

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace:

[HttpException (0x80004005): Request timed out.]

ElasticsearchException index read-only if updating/storing BusinessData

SupportIvyTeam — Tue, 01 Oct 2019 04:05:17 -0400

I can not update and store my Business data and get the following exception if I do it e.g. ivy.repo.save(in.myDossier):

ElasticsearchException: Elasticsearch update index of document failed because of:
{
   "root_cause":[
      {
         "type":"cluster_block_exception",
         "reason":"index [ivy.businessdata-abc] blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];"
      }
   ],
   "type":"cluster_block_exception",
   "reason":"index [ivy.businessdata-abc] blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];"
}

It seems that it is now forbidden to write to the Elasiticsearch index because it is read-only. Why is my index read-only? I did not do anything. It suddenly stopped working.

Solve read timeout issue while storing BusinessData in repository

SupportIvyTeam — Mon, 27 May 2019 03:17:31 -0400

I have deployed my cool wf-app into production several weeks ago. Now users are complaining about errors occuring on the screen. A first investigation into the logs revealed that there seems to be a connection problem with the elastic search server. I'm using the bundled elastic search server as it is shipped with the Axon.ivy Engine (7.3). Whats the issue here?

Caused by: java.net.SocketTimeoutException: Read timed out

[errorId=16AE46D591AAA1BE, request=HTTP POST Start Processes/DepartmentHead.mod/163BB87520D405CF-f3(493708.480005.45511.1), session=524 (a.f@m.ch), task=480005, application=301, requestId=34869, executionContext=524 (a.f@m.ch), pmv=GMAA$hr_pbm_0001_pf$1, client=10.208.68.15, hd=com.axonivy.hrwf.pbm0001.components.ZurueckweisenKommentar, processElement=163BB87520D405CF-f17]
    Caused by: ch.ivyteam.ivy.business.data.store.search.internal.elasticsearch.ElasticsearchException: Cannot reach Elasticsearch server
        at ch.ivyteam.ivy.business.data.store.search.internal.elasticsearch.JestOperation.tryToExecute(JestOperation.java:51)
        at ch.ivyteam.ivy.business.data.store.search.internal.elasticsearch.JestOperation.execute(JestOperation.java:36)
        at ch.ivyteam.ivy.business.data.store.search.internal.elasticsearch.JestIndexSynchronizer.execute(JestIndexSynchronizer.java:151)
        at ch.ivyteam.ivy.business.data.store.search.internal.elasticsearch.JestIndexSynchronizer.updateDocument(JestIndexSynchronizer.java:50)
        at ch.ivyteam.ivy.business.data.store.search.internal.ElasticBusinessDataSearchIndex.update(ElasticBusinessDataSearchIndex.java:33)
        at ch.ivyteam.ivy.business.data.store.internal.ElasticSystemDbPersistence.lambda$2(ElasticSystemDbPersistence.java:140)
        ... 174 more
    Caused by: java.net.SocketTimeoutException: Read timed out
        at java.net.SocketInputStream.socketRead0(Native Method)
        at java.net.SocketInputStream.socketRead(SocketInputStream.java:116)
        at java.net.SocketInputStream.read(SocketInputStream.java:171)
        at java.net.SocketInputStream.read(SocketInputStream.java:141)
        at org.apache.http.impl.io.SessionInputBufferImpl.streamRead(SessionInputBufferImpl.java:137) ...
        at org.apache.http.impl.conn.DefaultHttpResponseParser.parseHead(DefaultHttpResponseParser.java:56)
        at org.apache.http.impl.io.AbstractMessageParser.parse(AbstractMessageParser.java:259)
        at org.apache.http.impl.DefaultBHttpClientConnection.receiveResponseHeader(DefaultBHttpClientConnection.java:163)
        at org.apache.http.impl.conn.CPoolProxy.receiveResponseHeader(CPoolProxy.java:165)
        at org.apache.http.protocol.HttpRequestExecutor.doReceiveResponse(HttpRequestExecutor.java:273)...
        at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:108)
        at io.searchbox.client.http.JestHttpClient.executeRequest(JestHttpClient.java:133) ...
        at ch.ivyteam.ivy.business.data.store.search.internal.elasticsearch.JestOperation.tryToExecute(JestOperation.java:45)
        ... 183 more

How to install an alternative OpenJDK Java runtime to use the RIA based AdminUI

SupportIvyTeam — Fri, 24 May 2019 03:55:58 -0400

Hi Community

I'm running a 7.0 LTS Engine and heard that no security updates will shipped by oracle for the java runtime enviroment that is required to run the Admin UI of the Engine.

To keep my installation secure with the latest patches, I want to install an alternative JRE based on OpenJdk plus the IcedTea plugin to run Java Webstart apps: https://answers.axonivy.com/questions/3598/java-8-is-out-of-support-what-can-i-do-to-still-use-my-ria-clients-in-the-axon-ivy-engine

Now, how do I properly setup the suggested AdoptOpenJdk+IcedTea bundle on my Windows Server in order to run the AdminUI without any oracle dependencies?

How to find the root cause of error 500, frequently occuring in the logs

SupportIvyTeam — Mon, 13 May 2019 07:02:36 -0400

Some of users of my wf-app seem to face an error 500 while working. The errors show a viewExpiredException as cause of the problem. Generally this points to a session timeout issue. But as the user fires several request within seconds it doesn't make much sense, that one of the requests should fail with error 500 while others can be served as expected.

Unfortunately the behaviour is not 100% reproducible on any dialog. The logs expose the problem for several users but there is no clear pattern to find out which behaviour leads to these errors. Do I have any chance to isolate the real issue behind these error 500 logs?

ElasticSearch fails to recreate index due to data Field type change

SupportIvyTeam — Tue, 07 May 2019 04:23:23 -0400

We converted a field of a BusinessData object from long to String. Now we face index recreation problems after upgrading the ivy engine to a new version.

2019-05-06 15:36:36.038 ERROR [ch.ivyteam.ivy.business.data.store.search.internal.BusinessDataSearchIndecesRecreator] [ivy immediate job pool-thread-1] [executionContext=SYSTEM] 
  Recreation of business data search index failed
    [errorId=16A8D5C46C63FD9B, executionContext=SYSTEM]
    ch.ivyteam.ivy.business.data.store.search.internal.elasticsearch.ElasticsearchException: Elasticsearch add documents to index failed because of: One or more of the items in the Bulk request failed, check BulkResult.getItems() for more information.
    bulk error: id=f08fe3d90a454be4b95a0b59785686ff, index=ivy.businessdata-com.axonivy.hrwf.vea.arbeitsvertragsaenderungencasemodel, error={"type":"illegal_argument_exception","reason":"mapper [antrag.lohnUndOderArbeitszeitaenderung.baseSalaryPtNew] cannot be changed from type [float] to [long]"}
    bulk error: id=b15b99eb022b4e1f95cd1b34ee03ae2f, index=ivy.businessdata-com.axonivy.hrwf.vea.arbeitsvertragsaenderungencasemodel, error={"type":"mapper_parsing_exception","reason":"failed to parse [antrag.lohnUndOderArbeitszeitaenderung.expensesPtCurrent]","caused_by":{"type":"number_format_exception","reason":"For input string: \"CHF500\""}}

How can we get a proper data store and make the index recreation running?

Troubleshoot ActiveDirectory user import to my ivy 3.9 webApp

SupportIvyTeam — Wed, 01 May 2019 03:02:29 -0400

I have to maintain a legacy workflow app still running with XpertIvy 3.9. The users of the application are synchronized from our MS Active Directory.

Recently I got reports that some users are not able to connect to the WebApp. What can I do to verify and trace the ActiveDirectory user synchronization?

Lazy / On-demand Synchronization of LDAP Users

SupportIvyTeam — Mon, 29 Apr 2019 09:53:15 -0400

In our project we are using Microsoft AD as our security system. Our access policy is that anyone working in our company is allowed to access our Ivy application.

Our problem now is that daily user synchronization and user filtering in our code is quite slow as we have over 50'000 possible users to synchronize, even though our application is only used by a couple of thousand users.

Is it possible to 'lazy load' users, only adding users to our Ivy system database on first usage / login? And not on first synchronization with our AD system? But still updating users that have been changed in AD during synchronization?

How to upload a File to a REST api

SupportIvyTeam — Thu, 18 Apr 2019 04:05:19 -0400

I am building a document management service with a RESTful API.

@Path("fileUpload")
public class FileUploadService
{
  @PUT
  @Produces(MediaType.APPLICATION_JSON)
  @Consumes(MediaType.MULTIPART_FORM_DATA)
  public Response uploadFile(@FormDataParam("file") InputStream fileStream,
          @FormDataParam("file") FormDataContentDisposition fileDetail) throws IOException
  {
   .... 
  }
}

It seems to work as expected if I use a third party client such as Postman. However, when using the REST activity of ivy I am unable to call this service. I always get errors stating the the header X-Requested-By is missing. Whats the issue? How can I send files using a REST Client Call activity?

Huge MySQL/MariaDB System Database has slow response time

SupportIvyTeam — Mon, 04 Feb 2019 10:43:40 -0500

I've got so far some ivy engines running with mysql and mariadb as system database. The databases are huge, with about 10'000'000 tasks. With more and more tasks the responding time will be slower. The more tasks in the database, the worse the response times. Is there anything I can do to optimize this?

Can not connect to oracle database "Connection reset by peer"

SupportIvyTeam — Wed, 19 Dec 2018 09:17:54 -0500

I'm not able to connect ivy with an oracle database. Ivy is installed on CentOS.

Caused by: ch.ivyteam.ivy.persistence.PersistencyException: java.sql.SQLRecoverableException: IO Error: Connection reset by peer, Authentication lapse 295094 ms.

ErrorPageMBean.getApplicationName() returns always "?"

SupportIvyTeam — Mon, 10 Dec 2018 10:50:16 -0500

I have defined my own error page, which displays a link to the application start page. To get the current application, we use ErrorPageMBean.getApplicationName(), which always returns "?".

Fast LDAP user lookup at runtime

SupportIvyTeam — Wed, 14 Nov 2018 03:08:54 -0500

In my project I read users at runtime via Ivy API: SecurityContext.findUser("theUser");

This works reasonably well in my company environment. But if I deploy the project the the productive engine (to the cloud) this user lookups can take up to 2 minutes. At least if I search for a not existing user? How can I speed it up? The security system here is configured to use an LDAP. Shouldn't this be a fast protocol?

Failed to generate random number within 10 seconds

SupportIvyTeam — Fri, 17 Aug 2018 04:03:38 -0400

Failed to generate random number within 10 seconds. This could slow down the JSF runtime dramatically. Please consider installing a secure random provider for 'SHA1PRNG'!

Request Entity Too Large

SupportIvyTeam — Fri, 17 Aug 2018 04:01:46 -0400

Request Entity Too Large! - The HTTP method does not allow the data transmitted, or the data volume exceeds the capacity limit.

Socket name not available on this system

SupportIvyTeam — Fri, 17 Aug 2018 03:57:27 -0400

If the Enterprise Edition engine cannot be started and in the console the following error message is written:

Error while starting Axon.ivy Engine org.jgroups.ChannelException: 
    failed to start protocol stack 
    ... 
Caused by: java.net.SocketException: 
    The socket name is not available on this system 
    ...

Cant' start Axon.ivy Engine: JVM cannot allocate enough Memory

SupportIvyTeam — Fri, 17 Aug 2018 03:54:03 -0400

Error occurred during initialization of VM Could not reserve enough space for object heap Create registry entry 'SYSTEM\CurrentControlSet\Services\EventLog\Application\AxonIvyEngineConfig Launchers' for event log if it does not exists Error: Could not initialize java virtual machine (-4)

Task changes priority after SignalBoundary

SupportIvyTeam — Mon, 30 Jul 2018 09:10:02 -0400

I have a UserTask that can optionally be cancelled by firing a Signal. When the Signal is actually received the Task seems to change its Priority from HIGH to LOW. Why does that happen?

How do I find out from what .jar file my class gets loaded?

SupportIvyTeam — Tue, 17 Jul 2018 07:28:11 -0400

In our project we encountered a problem where we had to re-deploy one of our web services.

After changing the web service in Axon.ivy Designer and re-generating the code, we replace the .jar file in our deployment and restarted the engine again.

Unfortunately, we couldn't see any of our code updates in the Engine. It seems that the Engine still has a copy of the old .jar file somewhere else in its path, but we can't find another copy.

How do I find out where my updated class is loaded from?

How do I specify the maximum number of connections to the IvySystemDatabase?

SupportIvyTeam — Fri, 06 Jul 2018 09:27:05 -0400

I would like to increase the size of the database connection pool to the system database. I couldn't find a system property that does that so far.

Can I change the connection pool size and if yes, how?

How to fix Maven build plugin failing with SSL error?

SupportIvyTeam — Fri, 15 Jun 2018 04:01:32 -0400

I'm exploring the maven build capabilities and therefore try to build the example workspace from github: https://github.com/axonivy/project-build-examples/tree/7.0

But the build fails very early when entering mvn clean verify:

[ERROR] Failed to execute goal com.axonivy.ivy.ci:project-build-plugin:7.0.0:installEngine (default-installEngine) on project crm: Failed to find engine download link in list page https://developer.axonivy.com/download/maven.html: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target -> [Help 1]

What am I missing?

Apache with mod_proxy as frontend Webserver before Axon.ivy Engine

SupportIvyTeam — Fri, 08 Jun 2018 09:49:21 -0400

In the official frontend server integration we're guide to use Apache with mod_JK to connect the Axon.ivy engine behind. https://developer.axonivy.com/doc/latest/EngineGuideHtml/integration.html#integration-apacheserver

However I'd like to use to configure mod_proxy instead because it supports websockets (upgrade) and is still under active development.

Anyone knows how to configure it correctly?

How to Log AJP Connector bootstrap

SupportIvyTeam — Thu, 07 Jun 2018 02:52:20 -0400

I'm having difficutlies to get the AJP port up and running. Even tough I've set the System Properties Webserver.AJP.Enabled=true and Webserver.AJP.Port=8009, the engine does not bind the TCP Port 8009. Is there any way to log the bootstrap of the AJP Tomcat connector?

Why do my tasks disappear?

SupportIvyTeam — Wed, 06 Jun 2018 09:45:49 -0400

Sometimes it seems that tasks disappear from my task list. E.g. I have multiple tasks on my task list, I finish one, return to my task list and then one or more of the other tasks are gone.

How can this happen?

Can I avoid 'Unexpected subelement' errors when the service-provider introduces new properties?

SupportIvyTeam — Wed, 30 May 2018 09:37:52 -0400

I have a soap client call that invokes a remote service. Unfortunately the service provider is updating the service definition frequently and introduces new properties or changes the property order. Therefore I can no longer call it, the mapping of the response fails with:

ADBException: Unexpected subelement theID
Exception: org.apache.axis2.databinding.ADBException: Unexpected subelement theID
AxisFault: org.apache.axis2.databinding.ADBException: Unexpected subelement theID
BpmError: ivy:error:webservice:exception
RequestException: ivy:error:webservice:exception
Problem while processing request 'http://127.0.0.1:8081/ivy/pro/designer/finElcaUser/163B11CD193F9801/start.ivp'

I've also tried the new Webservice stack of Axon.ivy 7.1 based on CXF. But it fails with a similar issue:

UnmarshalException: unexpected element (uri:"", local:"theID"). Expected elements are <{}firstname>,<{}lastname>
    SAXParseException2: unexpected element (uri:"", local:"theID"). Expected elements are <{}firstname>,<{}lastname>
    javax.xml.bind.UnmarshalException
 - with linked exception:
[com.sun.istack.internal.SAXParseException2; lineNumber: 1; columnNumber: 218; unexpected element (uri:"", local:"theID"). Expected elements are <{}firstname>,<{}lastname>]
    Fault: Unmarshalling Error: unexpected element (uri:"", local:"theID"). Expected elements are <{}firstname>,<{}lastname> 
    Web Service Element: Call to http://localhost:8082/ivy/ws/designer/elcaMock/163B11ABE3388EE4 (Operation[name=getPersons,port=DocServicePort,parameters=[]]) failed!

Is there any way to read the response in a compliant way and ignore new properties introduced by the provider? the roundtrip is huge if I have to re-generate the client stack every-time when the provider makes changes.

Where to get an Entity Relation Diagram (ERD) of the Axon.ivy System DB

SupportIvyTeam — Thu, 24 May 2018 06:25:53 -0400

Is there any schema documentation available that show the relations of the tables in the Axon.ivy system database?