ERROR com.appiancorp.ag.util.Utilities - Group membership validation failed in process for user

Question

I am seeing the following errors in the Application server logs, Can anyone please tell me what might have caused the issue? TIA.

2017 -09-27 17:04:13,138 [[ACTIVE] ExecuteThread: '51' for queue: 'weblogic.kernel.Default (self-tuning)'] ERROR com.appiancorp.ag.util.Utilities - Group membership validation failed in process for user [y48152] java.lang.RuntimeException: java.lang.InterruptedException: Work couldn't complete in the designated time: 60000 milliseconds. at com.appiancorp.process.analytics2.service.ProcessAnalyticsServiceFacade.validateGroupMembership(ProcessAnalyticsServiceFacade.java:2392) at sun.reflect.GeneratedMethodAccessor677.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:497) at com.appiancorp.util.MethodInvocationReflectionImpl.proceed(MethodInvocationReflectionImpl.java:23) at com.appiancorp.security.authz.AuthorizationMethodInterceptor.invoke(AuthorizationMethodInterceptor.java:54) at com.appiancorp.services.ServiceManager$ServiceInvocationHandler.invoke(ServiceManager.java:635) at com.sun.proxy.$Proxy134.validateGroupMembership(Unknown Source) at com.appiancorp.ag.util.Utilities.activateUserSessionsInProcessServers(Utilities.java:1479 ) at com.appiancorp.ag.GroupServiceJavaImpl.getCachedCredentials(GroupServiceJavaImpl.java:621 ) at sun.reflect.GeneratedMethodAccessor96.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:497) at com.appiancorp.kougar.services.KougarServiceInvocationHandler$JavaInvocationHandler.invoke(KougarServiceInvocationHandler.java:104) at com.appiancorp.kougar.services.KougarServiceInvocationHandler$KougarMethodInvocation.proceed(KougarServiceInvocationHandler.java:270) at com.appiancorp.security.authz.AuthorizationMethodInterceptor.invoke(AuthorizationMethodInterceptor.java:54) at com.appiancorp.kougar.services.KougarServiceInvocationHandler.invoke(KougarServiceInvocationHandler.java:307)

at com.sun.proxy.$Proxy128.getCachedCredentials(Unknown Source)
at com.appiancorp.services.AbstractServiceContext.getCredentials(AbstractServiceContext.java:236)
at com.appiancorp.services.AbstractServiceContext.getAppianUserDetails(AbstractServiceContext.java:97)
at com.appiancorp.services.AbstractServiceContext.getRoles(AbstractServiceContext.java:130)
at com.appiancorp.security.authz.AppianAuthorizationProvider.doAuthorize(AppianAuthorizationProvider.java:40)
at com.appiancorp.security.authz.AppianAuthorizationProvider.authorize(AppianAuthorizationProvider.java:23)
at com.appiancorp.security.authz.AuthorizationMethodInterceptor.invoke(AuthorizationMethodInterceptor.java:45)
at com.appiancorp.kougar.services.KougarServiceInvocationHandler.invoke(KougarServiceInvocationHandler.java:307)
at com.sun.proxy.$Proxy128.getCachedCredentials(Unknown Source)
at com.appiancorp.security.auth.GroupMembershipInfoProvider$GroupMembershipInfoProviderGmcImpl.getMemberGroupUuids(GroupMembershipInfoProvider.java:60)
at com.appiancorp.suiteapi.security.auth.AppianUserDetails.getRoles(AppianUserDetails.java:300)
at com.appiancorp.suiteapi.security.auth.AppianUserDetails.getAuthorities(AppianUserDetails.java:203)
at com.appiancorp.security.auth.SpringSecurityContextHelper.setSpringSecurityContext(SpringSecurityContextHelper.java:41)
at com.appiancorp.security.auth.SpringSecurityContextHelper.setSpringSecurityContextLazy(SpringSecurityContextHelper.java:31)
at com.appiancorp.security.auth.SpringSecurityContextHelper.runAs(SpringSecurityContextHelper.java:160)
at com.appiancorp.security.cors.CorsServlet.handleUserJsonObject(CorsServlet.java:321)
at com.appiancorp.security.cors.CorsServlet.sendUserData(CorsServlet.java:140)
at com.appiancorp.security.cors.CorsServlet.doGet(CorsServlet.java:99)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:731)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:844)

at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:280)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:254)
at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:136)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:346)
at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:25)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
at com.appiancorp.ap2.EntryFilter.doFilter(EntryFilter.java:40)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
at com.atlassian.plugin.servlet.filter.IteratingFilterChain.doFilter(IteratingFilterChain.java:46)
at com.atlassian.plugin.servlet.filter.ServletFilterModuleContainerFilter.doFilter(ServletFilterModuleContainerFilter.java:77)
at com.atlassian.plugin.servlet.filter.ServletFilterModuleContainerFilter.doFilter(ServletFilterModuleContainerFilter.java:63)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
at org.tuckey.web.filters.urlrewrite.RuleChain.handleRewrite(RuleChain.java:176)
at org.tuckey.web.filters.urlrewrite.RuleChain.doRules(RuleChain.java:145)
at org.tuckey.web.filters.urlrewrite.UrlRewriter.processRequest(UrlRewriter.java:92)
at org.tuckey.web.filters.urlrewrite.UrlRewriteFilter.doFilter(UrlRewriteFilter.java:381)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
at org.tuckey.web.filters.urlrewrite.RuleChain.handleRewrite(RuleChain.java:176)
at org.tuckey.web.filters.urlrewrite.RuleChain.doRules(RuleChain.java:145)
at org.tuckey.web.filters.urlrewrite.UrlRewriter.processRequest(UrlRewriter.java:92)
at org.tuckey.web.filters.urlrewrite.UrlRewriteFilter.doFilter(UrlRewriteFilter.java:381)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)

at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
at com.appiancorp.ap2.WrapFilter.doFilterInternal(WrapFilter.java:63)
at com.appiancorp.common.web.PathMatchExclusionFilter.doFilter(PathMatchExclusionFilter.java:70)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
at com.appiancorp.security.web.FrameOptionsFilter.doFilter(FrameOptionsFilter.java:25)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
at com.appiancorp.security.auth.ForceSetPasswordFilter.doFilter(ForceSetPasswordFilter.java:47)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:186)
at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:160)
at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:346)
at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:259)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
at com.appiancorp.common.web.HttpMethodOverrideFilter.doFilter(HttpMethodOverrideFilter.java:34)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
at com.appiancorp.security.cors.CorsFilter.doFilter(CorsFilter.java:245)
at com.appiancorp.security.cors.CorsFilter.doFilter(CorsFilter.java:199)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
at com.appiancorp.security.auth.logging.AuthenticationLoggingFilter.doFilter(AuthenticationLoggingFilter.java:37)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
at com.appiancorp.ap2.environment.EnvironmentFilter.doFilter(EnvironmentFilter.java:87)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
at com.appiancorp.common.web.ThreadLocalRequestFilter.doFilter(T

at com.appiancorp.ap2.EncodingFilter.doFilter(EncodingFilter.java:58)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:79)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3431)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3397)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
at weblogic.servlet.provider.WlsSubjectHandle.run(WlsSubjectHandle.java:57)
at weblogic.servlet.internal.WebAppServletContext.doSecuredExecute(WebAppServletContext.java:2280)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2196)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1621)
at weblogic.servlet.provider.ContainerSupportProviderImpl$WlsRequestExecutor.run(ContainerSupportProviderImpl.java:256)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:311)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:263)
Caused by: java.lang.InterruptedException: Work couldn't complete in the designated time: 60000 milliseconds.
at com.appiancorp.common.mapreduce.lib.map.MultithreadedMapper.run(MultithreadedMapper.java:102)
at com.appiancorp.common.mapreduce.Work.submit(Work.java:106)
at com.appiancorp.process.analytics2.service.ProcessAnalyticsServiceFacade.validateGroupMembership(ProcessAnalyticsServiceFacade.java:2385)
... 99 more

jamesm881 · Answer

Seems to be a time out of some type, and with this being group membership I'd imagine it's within Appian itself. Have you checked your engines, are they all up and running? If you are on cloud, you can find the engine log at [YourCloudURL]suite/logs/checkEngine.log.[DateYouWantToCheck], if you are on premise you will need to navigate to the same file in your APPIAN_HOME/logs directory.

You may also want to check the Engine Performance logs to see if one of your engines is slow. I am unsure which engine controls user permissions, but if I took a wild guess, I'd same Personalization Engine. docs.appian.com/.../Logging.html

I would suggest opening a Support Case for this issue. I think Group Membership Validation timing out likely won't be something you can fix from /admin, /design, or /designer.