Symantec Access Management

  • 1.  We are seeing one of the .dat files in the derby directory for the SiteMinder AdminUI growing to a very large size. 

    Posted Jan 20, 2016 09:27 PM

    We are seeing one of the .dat files in the derby directory for the SiteMinder AdminUI growing to a very large size.  It is in the siteminder/adminui/server/default/data/derby/siteminder/taskpersistence/seg0 directory.  Should it roll automatically or what can we do to stop this from eating up all our disk space?  The .dat file is over 5GB now.  Maybe a restart of the AdminUI?



  • 2.  Re: We are seeing one of the .dat files in the derby directory for the SiteMinder AdminUI growing to a very large size. 
    Best Answer

    Posted Jan 20, 2016 11:40 PM

    Hi There,

     

    This is the Task Persistence database in derby that our IAM Framework uses to track tasks (Create Domain, Modify Rule, Delete Policy, etc.).

    These files cannot be deleted (or you will get unexpected behavior) , but the tables can be cleaned up through the Admin UI as below :

     

    Run Cleanup Submitted Tasks

    ----------------------------------------

    1. Login to the Siteminder Administrative UI as the Siteminder Administrator

    2. Go to the Cleanup Submitted Tasks UI under Administration->Admin UI

    3. Select "Execute now" and select "Next"

    4. Select the "Minimum Age". e.g 30 Minute

    5. Select "Finish"

       (This may take a while if there were a lot of rows in the database tables that needed cleaning up.)

    6. Check the disk space under <CA SSO Install>/adminui/server/default/data/derby/siteminder/taskpersistence.

       The amount of disk space should be reduced as compared to before the Cleanup Submitted Tasks run.

    7. You can repeat step 3-6 and at each iteration select longer duration, until the size of the files reduces considerably.

     

    You can also choose to schedule a recurring job to perform automatic cleanup.

     

    If the above steps do not help, you can also choose to considering deleting the data folder all-together and re-register Admin UI.

     

    Hope this helps

     

    Cheers,

    Ujwol Shrestha



  • 3.  Re: We are seeing one of the .dat files in the derby directory for the SiteMinder AdminUI growing to a very large size. 

    Posted Jan 21, 2016 07:59 AM

    Thanks for the quick reply.  We do not allow access to the AdminUI as the SiteMinder admin but only through external authentication using an ldap source.  Is there a command line equivalent that will do the same thing?



  • 4.  Re: We are seeing one of the .dat files in the derby directory for the SiteMinder AdminUI growing to a very large size. 

    Posted Jan 22, 2016 01:01 AM

    Hi there,

     

    If you have configured external administrator store, then this feature is still available but only to the System Manager Account.

    The System Manager account is defined using the Configure Administrative Authentication option. This account that is used during the initial registration of the Administrative UI and can be from an external administrator store. The cleanup submitted task functionality is not available to any other administrators, including administrator accounts with super user permissions.

     

    More here :

    Cleanup Submitted Tasks - CA Single Sign-On - 12.52 SP1 - CA Technologies Documentation

     

    There is not command line equivalent of this feature.

     

    Hope this helps.

     

    Cheers,

    Ujwol



  • 5.  Re: We are seeing one of the .dat files in the derby directory for the SiteMinder AdminUI growing to a very large size. 

    Posted Jan 28, 2016 03:36 PM

    Just as a follow-up to this.  We tried to run the cleanup task from the AdminUI but a very nasty error message.  Opened case but unfortunately did not get a fix before disk space became critical.  Ended up doing an uninstall/reinstall.  In the end, a sledge hammer always works. 



  • 6.  Re: We are seeing one of the .dat files in the derby directory for the SiteMinder AdminUI growing to a very large size. 

    Posted Jan 28, 2016 04:20 PM

    Just a thought on this, I think uninstall/reinstall takes more time. If you follow the steps to register the adminui will clear the derby database and saves time. Have you already tried it?



  • 7.  Re: We are seeing one of the .dat files in the derby directory for the SiteMinder AdminUI growing to a very large size. 

    Posted Jan 28, 2016 04:24 PM

    Nope.  Didn't try that.  If this happens again, I'll give it a go.

     

    Although I've gotten uninstall/reinstall to be <30 minutes... 

     

    Thanks



  • 8.  Re: We are seeing one of the .dat files in the derby directory for the SiteMinder AdminUI growing to a very large size. 

    Posted Jan 28, 2016 05:38 PM

    Uninstallation is overkill for this issue..all you needed was :

    delete <adminui dir>\server\default\data folder

    re-register Admin UI

     

    easy 5 min job