Symantec Access Management

Expand all | Collapse all

CA SSO : Query regarding speed up of WAMUI

Makesh Kannan Thangasamy

Makesh Kannan ThangasamyApr 16, 2018 11:39 AM

  • 1.  CA SSO : Query regarding speed up of WAMUI

    Posted Apr 16, 2018 09:38 AM

    Hi,

     

    Our WAMUI is very slow. We are already using an external admin store for login. So, if I register an additional policy server connection to the existing WAMUI, will it help in any way to speed up? Will the response be faster if I try to perform some activity using the newly registered policy server (Note : currently, multiple people are accessing the WAMUI at the same time)? or is it doesn't matter as the data needs to be loaded from the same policy store? but somewhere I have seen that WAMUI will not fetch content from policy store every time, instead it will store local copy(or something...)

     

    Thanks.

     

    Regards,

    Dhilip



  • 2.  Re: CA SSO : Query regarding speed up of WAMUI

    Posted Apr 16, 2018 10:00 AM

    Check the size of the task persistent database in the data directory of the WAM UI.  Prolonged use of the WAM UI can cause this database to grow very large.  As the database sizes gets larger, the wam ui will get slower.  If the database has grown to a GB or more, do a complete reset of the WAM UI, delete the data directory and re-register.  Once you do this create a job in the WAM UI to clean up persistent tasks on a periodic basis.  That should help prevent the database from growing out of control.



  • 3.  Re: CA SSO : Query regarding speed up of WAMUI

    Posted Apr 16, 2018 11:05 PM

    Hi David,

     

    Thanks for your response. Actually, it's a newly setup WAMUI. It is in use for just 40 days. So, although the size of  task persistence db is greater then 1 GB(1.5 GB currently), we wish to retain it for auditing purpose.

     

    Could you please provide your opinion about registering additional policy server with WAMUI? Will it help in any way (to improve speed)?



  • 4.  Re: CA SSO : Query regarding speed up of WAMUI

    Posted Apr 17, 2018 02:49 PM

    Registering an additional policy won't do anything to improve the speed.  The WAM UI is still having to deal with a 1GB+ task persistent database.  WAM UI tasks are written to siteminder/audit.  If you copy siteminder/audit/samples/* to siteminder/audit, the policy server should periodically process the wam ui audit logs into a form that could be imported into the audit database.  You would have to use sqlldr for Oracle or BCP for MSSQL to load the files.  This would allow you your audit information and then you could clean up the task persistent database.



  • 5.  Re: CA SSO : Query regarding speed up of WAMUI

    Posted Apr 18, 2018 12:25 AM

    David,

    Thanks for providing your opinion.

    1) Could you please elaborate the following point with a folder structure?

    "WAM UI tasks are written to siteminder/audit"

    because I thought these will be stored on the derby database(task persistence).

    Folder Structure : data/derby/siteminder/taskpersistence/.

    2) Also, I would like to know which path are you referring as siteminder/audit/samples/* because in siteminder/audit folder of policy server, I can't find 'samples' folder. In siteminder folder of WAMUI, I cant find 'audit' folder. . Could you please provide complete path?



  • 6.  Re: CA SSO : Query regarding speed up of WAMUI

    Posted Apr 18, 2018 02:12 PM

    The siteminder/audit structure should be on the policy server.  I

    Thought those scripts were available on all OS.  Maybe check the smconsole to ensure the policy server you are connecting to is logging the administrative audit information.  If you want to preserve the database then, move it before resetting the WAM UI.  Cleaning up the database should speed up the wam ui.  It isn't meant to have to maintain a large database.

     

    Sent from my iPhone



  • 7.  Re: CA SSO : Query regarding speed up of WAMUI

    Posted Apr 20, 2018 02:09 AM

    Hi David,

     

    Really appreciate your continuous support. Actually, we are logging all events regarding 'Administrator Audit Events' and 'Administrator Changes to Policy Store Objects'. I referred the following link.

    https://docops.ca.com/ca-single-sign-on/12-52-sp1/en/configuring/policy-server-configuration/configure-the-policy-server-log-smps-log-and-audit-log-smaccess-log

     

    Unfortunately, we are not using report server. So, it seems it is not feasible. Also, while checking with my team I came to know that WAMUI is slow even from the day one so I guess as Ujwol mentioned we have to take a look at entropy value but not sure about the command to find the same in Solaris.



  • 8.  Re: CA SSO : Query regarding speed up of WAMUI

    Posted Apr 25, 2018 07:26 AM

    Hello all,

     

    Could you please help me with the procedure/command to find the entropy value in Solaris OS?

    Thanks.



  • 9.  Re: CA SSO : Query regarding speed up of WAMUI

    Broadcom Employee
    Posted Apr 16, 2018 11:39 AM

    What version of policy server and WAMUI are you using ?



  • 10.  Re: CA SSO : Query regarding speed up of WAMUI

    Posted Apr 16, 2018 11:05 PM

    Hi Makesh,

     

    Thanks for your response.

     

    Policy server : 12.52.105.2113

    WAMUI : 12.52.105.2112



  • 11.  Re: CA SSO : Query regarding speed up of WAMUI

    Posted Apr 16, 2018 11:08 PM

    Is it linux ?

    If linux check if there are enough entropy available :

     

    cat /proc/sys/kernel/random/entropy_avail

    This needs to be > 1000 

     

    If so, refer this blog : How to ensure there are sufficient entropy for SiteMinder Policy Server 



  • 12.  Re: CA SSO : Query regarding speed up of WAMUI

    Posted Apr 16, 2018 11:43 PM

    Hi Ujwol,

     

    Thanks for your response. Actually, OS of the policy server is Solaris. I am not sure about the exact command, I am googling it and yet to find. Could you please help me with the command to find entropy value in Solaris?



  • 13.  Re: CA SSO : Query regarding speed up of WAMUI

    Posted Apr 18, 2018 12:25 AM

    Ujwol,

    Could you please help me with the command to find entropy value in Solaris?



  • 14.  Re: CA SSO : Query regarding speed up of WAMUI
    Best Answer



  • 15.  Re: CA SSO : Query regarding speed up of WAMUI

    Posted Apr 17, 2018 07:06 AM

    Hi Hubert,

     

    Thanks for the reminder. Yes, we are considering migration. Currently, we are looking for quick solution to speed up the existing WAMUI.