Symantec Access Management

Tech Tip : CA Single Sign-On : We are getting Size Limit exceeded in CA Directory Session Store logs after upgrading the Policy Server 

Jun 11, 2018 02:58 AM

Issue


We are currently upgrading our Policy Server from 12.51 to 12.7, and we are receiving warning messages "Size Limit exceeded" in the sessionstore_warn log around every minute during peak periods.

We configured the MaintenanceQueryRowLimit parameter that Specifies how many expired session records are deleted simultaneously, but the issue persists.

The 12.7 Policy Server is still pointing to the 12.51 policy store.

Is it possible that the new policy Server has a new parameter that sets the limitation of the number of returns for an LDAP search? How do I set this parameter to be more than 100 results?

 

Environment


SSO 12.51

 

Cause


The new 12.7 Policy Server was pointing to the old 12.51 policy store. The parameter "MaintenanceQueryRowLimit" is not available on 12.51 Policy Server

 

Resolution


You will have to upgrade the policy store to 12.7 as the MaintenanceQueryRowLimit is not available in the 12.51 version(current version of the policy store)

MaintenanceQueryRowLimit:

(LDAP and ODBC) Specifies how many expired session records are deleted simultaneously. Reduce this value if you have high delete/insert contention against your session store.

Value: Hexadecimal number

Default: 0x64

https://docops.ca.com/ca-single-sign-on/12-52-sp1/en/troubleshooting/session-store-troubleshooting

 

 

KD : KB000100567

Statistics
0 Favorited
3 Views
0 Files
0 Shares
0 Downloads

Related Entries and Links

No Related Resource entered.