Environment
NetIQ Access Governance Suite
Situation
In some envs,Access Governance Suite logs "Unable to refresh link" msgs like this:
20110621 12:15:01.687 [[ERROR] Identitizer [QuartzScheduler_Worker-2]]
Unable to refresh link: DB2 SQL error: SQLCODE: -204,
SQLSTATE: 42704, SQLERRMC: EE0M02M.ACCOUNT
The error msg appears when the refresh logic steps thru each link ("refreshLinks" option enabled) and attempts to reload account info from the (associated) connector. In this scenario, the JDBC connector getObject method builds a SQL cmd from the schema account attr (default "account") or from the "getObjectSQL" attribute.
This diagnoses the msg's RCA as a mis-cfg app object in combination with enabling the refresh task "refreshLinks" option ("Refresh all application attributes").
Resolution
To resolve, select one of the following approaches:
1) disable the "refreshLinks" task option (preferred)
2) specify a (valid) "getObjectSQL" attribute
3) set the schema account attribute to the target tablename
As a best practice, Support suggests not enabling the "Refresh all application attributes" option on production refresh tasks. This option performs a mini-aggregation, incurring application I/O to fetch every account link (and duplicating the work done by aggregation tasks).
Please note that the JDBC application also contains a (separate) "SQL" attribute. This attribute customizes the account fetch logic during iterations (such as the aggregation operation). The "Test Connection" feature uses the "SQL" stmt too.