topic Re: Security Rules Taking a while to come into effect on Rim Node in Management & Governance

Security Rules Taking a while to come into effect on Rim Node

mjperreault — Sat, 16 Nov 2024 03:19:02 GMT

Hi All,

We have a multi-node site in which we have one Central Node and two Rim Nodes. I have noticed some behavior recently where we will make an update to a Security Rule, for example granting a group access to a new stream, and while the Rule instantly goes into effect on the Central Node, it can take a while for it to go into effect on the Rim Nodes. I was wondering if anyone else has experienced this behavior and what the reasoning/resolution may be.

Thanks,
Mark

Re: Security Rules Taking a while to come into effect on Rim Node

gaidamichal — Mon, 10 Feb 2020 21:37:19 GMT

Hello,

Make sure you have upped the "max_connections" parameter in postgresql.conf accordingly to your nodes number (you might wanna give a bit higher number than in the link):

https://help.qlik.com/en-US/sense/June2019/Subsystems/PlanningQlikSenseDeployments/Content/Sense_Deployment/Installing-configuring-postgresql.htm

Regardless we found that more complex rules sometimes "lag". You can troubleshoot and force the security cache to reload and check if that helps.

https://support.qlik.com/articles/000089808

Re: Security Rules Taking a while to come into effect on Rim Node

gaidamichal — Mon, 10 Feb 2020 21:46:46 GMT

To clarify a bit more:

Qlik Sense Enteprise utilizes a cache concept for security rules. While applying new rules there is sometimes a "lag" between instant change and cache refresh on Rim nodes.

This was a known issue fixed in September 2018 (https://support.qlik.com/articles/000074467) but we had encountered it on April 2019 as well using an external Postgre SQL for configuration. Shutting down the environment and setting max_connections to 150 per node (higher than suggested 100 per node) mitigated the issue.

Security cache is refreshed after reset and can also be forced to refresh with QRS API (https://support.qlik.com/articles/000081585).

If you can make the rule "simpler" then it might help your issue also (we found that using custom properties in rules sometimes make it "lag" more than if the rule is set to use different parameters).

Re: Security Rules Taking a while to come into effect on Rim Node

mjperreault — Mon, 10 Feb 2020 23:25:29 GMT

@gaidamichal

Thanks for much for these responses, reading through the support articles now. The rule in question was using a custom property, so I will look into seeing if simplifying is possible. I love functionality that the CustomProperties provide but it seems to come at a cost.

Thanks again,
Mark

Re: Security Rules Taking a while to come into effect on Rim Node

jbouslimi — Thu, 11 Feb 2021 16:30:26 GMT

Hello,

I confirm you, sometimes, we encounter this is issue too ( QSE June 2020, 5 RIM nodes). This is an intermittent issue.

We restart the Repository services on the RIM nodes and this did help, but it is really an annoying issue.

Thanks,

James

Re: Security Rules Taking a while to come into effect on Rim Node

vegard_bakke — Fri, 19 Feb 2021 12:17:30 GMT

I can also confirm that we experience this problem, with Qlik Sense June 2020 SR4. Two rim nodes.

Restarting the Repository service fixed our problem.
At least for now.

Re: Security Rules Taking a while to come into effect on Rim Node

Ken_T — Mon, 29 Mar 2021 16:52:28 GMT

Security cache is refreshed after reset and can also be forced to refresh with QRS API (https://support.qlik.com/articles/000081585).

this article seems to be GONE..., is there a replacement link for this?