Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
1248
Views
5
Helpful
4
Replies

ISE 1.2: Remove unused Sponsor Group and Identity Group

mstraessle
Level 4
Level 4

‎04-01-2014 12:07 AM - edited ‎03-10-2019 09:35 PM

Hi

I started with ISE 1.1.2 and now upgrade to 1.2.

There are 1. Sponsor Groups and 2. Identity Groups which are no more in use, but I am not able to remove them anymore.

1. One is a special Sponsor group which sponsor group policy I already removed. The I go to Aministration>Web Portal Management>Sponsor Groups and select the appropriate Group ans click delete and ok to confirm, the following error is displayed:

com.cisco.cpm.nsf.api.exceptions.NSFEntityDeleteFailed: java.rmi.RemoteException: Failed to execute the Query : DELETE_USERONAPP ORA-02292: integrity constraint (CEPM.EDF_GST_SPGRPID_SUB) violated - child record found ; nested exception is: java.sql.SQLIntegrityConstraintViolationException: ORA-02292: integrity constraint (CEPM.EDF_GST_SPGRPID_SUB) violated - child record found

 

2. The same happens with one Identity Group. I do not have it active anymore. Not in authentication, and not in authorization policy. I go to Administration>Identity Management>Groups>  and select te group to remove, and click "Delete selected" and confirm with ok, the following error occured:

Cannot delete selected Identity Group(s) because there are resources which are mapped to these or its child identity group(s)

 

 

Is there any reason for any of these issue?

Many thanks

 

 

    Labels:
    0 Helpful
    4 Replies 4

    Naveen Kumar
    Level 4
    Level 4

    ‎04-02-2014 12:16 AM

    please remove the rules or authentication and authorization profiles (which is being used with  sponsor and AD group) before removing the groups. Then only you can delete the groups.

    0 Helpful

    mstraessle
    Level 4
    Level 4
    In response to Naveen Kumar

    ‎04-09-2014 01:18 AM

    Unfortunatly I have remove all dependencies, but still did not have any success.

    0 Helpful

    Naresh Ginjupalli
    Cisco Employee
    Cisco Employee
    In response to mstraessle

    ‎09-23-2014 10:28 PM

    Hi ,

     

    Please open service request with cisco. These kind of issues may happen when the dependencies are deleted from UI but there is a chance that some of the dependencies may not be deleted completely and are not visible from UI as well.  These kind of issues can be resolved under cisco guidance.

     

    Thanks,

    Naresh

    0 Helpful

    Ravi Singh
    Level 7
    Level 7

    ‎09-24-2014 10:27 AM

    I would request you to open a TAC case at tac@cisco.com

    Getting Started

    Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

    Customers Also Viewed These Support Documents