Symptoms

After an incident where our domain controller was down for some time, the delivery of task was disrupted. Some roles were unaffected, some roles were complete empty, some roles missed users.

We noticed in the Identity.Member Table that the relation between roles and users was lost. After we restored the relations, we noticed that the system was restoring itself, i.e. users were re-added to the worklist on a regular interval. The next day all roles were restored.
 

Diagnoses

The reason why the users were removed is because of the identity cache mechanism that K2 uses.

http://help.k2.com/helppages/k2blackpearlGettingStarted4.6.4/Tweaking_identity_cache_performance_for_the_K2_Server.html

Our default cache refresh to retrieve user information from the Domain Controller is 8 hours as per above article.




 

Resolution

• If you run the following script it will clear the cache of the users and there containers.

http://community.k2.com/t5/General-K2-Utilities/Force-Identity-Service-Refresh/ba-p/74061

There is a script,

UPDATE DK2HostServer].vIdentity].iIdentity]
SET >ExpireOn] = GETDATE()
,rResolved] = 0
,rContainersResolved] = 0
,rContainersExpireOn] = GETDATE()
,rMembersResolved] = 0
,rMembersExpireOn] = GETDATE()

• This article is used to tweak the identity cache.

http://help.k2.com/helppages/k2blackpearlGettingStarted4.6.4/Tweaking_identity_cache_performance_for_the_K2_Server.html