Symantec Access Management

I successfully run siteminder agent onto a RedHat machine with Apache 2.2 .

Unfortunately after some days I start getting errors on LLAWP and I need to do the IPCS cleanup process, by removing semaphores & shared memory leftovers

My system specs:

# free -m

                    total       used       free     shared    buffers     cached

Mem:          7872       6563       1308          0        586       4636

-/+ buffers/cache:       1340       6532

Swap:            0          0          0

# Distro: RedHat el6

# HTTPD: apache 2.2 MPM worker

Here's a piece of httpd error_log:

21/Mar/2016:07:02:57] [Info] [CA WebAgent IPC] [11480] [CSmSem::getSem] Attempted to attach to non-existent semaphore with key 0xc8f75712

[21/Mar/2016:07:02:57] [Info] [CA WebAgent IPC] [11480] [CSmSem::getSem] Created semaphore 231800836 using key 0xc8f75712

[21/Mar/2016:07:02:57] [Info] [CA WebAgent IPC] [11480] [CSmSem::getSem] Attempted to attach to non-existent semaphore with key 0x6bf75712

[21/Mar/2016:07:02:57] [Info] [CA WebAgent LLAWP] [11359] [LLAWP has been started.]

[21/Mar/2016:07:02:59] [Info] [CA WebAgent IPC] [11360] [CSmSem::getSem] Attempted to attach to non-existent semaphore with key 0x6bf75712

[21/Mar/2016:07:02:59] [Info] [CA WebAgent IPC] [11360] [CSmSem::getSem] Attempted to attach to non-existent semaphore with key 0x6bf75712

[21/Mar/2016:07:02:59] [Info] [CA WebAgent IPC] [11360] [CSmSem::getSem] Created semaphore 231833605 using key 0x6bf75712

[21/Mar/2016:07:02:59] [Error] [CA WebAgent IPC] [11360] [CSmSharedSegment::smalloc] Error allocating shared memory segment using key 0x6cf75712 - File exists (17)

[21/Mar/2016:07:02:59] [Info] [CA WebAgent IPC] [11360] [CSmSem::SemRm] Removed semaphore 231833605

[21/Mar/2016:07:02:59] [Error] SiteMinder Agent

        PID Cache error.

        Failed to initialize PID Cache

[21/Mar/2016:07:03:02] [Info] [CA WebAgent IPC] [11480] [CSmSem::getSem] Attempted to attach to non-existent semaphore with key 0x66f75712

[21/Mar/2016:07:03:02] [Error] SiteMinder Agent

        Failed to initialize the message bus.

[21/Mar/2016:07:03:02] [Warning] SiteMinder Agent

        SiteMinder agent has encountered initialization errors and will not service requests.

[21/Mar/2016:07:03:02] [Info] [CA WebAgent IPC] [11480] [CSmSem::SemRm] Removed semaphore 231800836

[21/Mar/2016:07:03:06] [Error] SiteMinder Agent

        PID Cache error.

        Failed to read PID Cache

[21/Mar/2016:07:03:06] [Error] SiteMinder Agent

        PID Cache error.

I am currently unable to find a solution, and I am working on a cron script which detects errors in the httpd error_log and does the shared memory and semaphore clean up and restarts the HTTPD daemon.  Of course this is a workaround, as the solution should be fixing the source of the issue.

Any help on this would be apreciated, as the other posts on "PID Cache error" do not provide a complete analysis and all lead to the IPCS cleaning solution

Hi,

You might take a look at the following section, which

gives you steps and explanations :

  Troubleshoot a Web Agent PID Error

  https://communities.ca.com/message/241870113?et=watches.email.thread

Best Regards,

Patrick

Thank you Patrick for the answer, however I can't find the section you mentioned, would you mind posting the link?

Hi,

Here's the link :

CA Security Cookbook

Best Regards,

Patrick

I gave a look, as I mentioned in my post, I already read that solution, cleared up all orphan semaphores and shared memory chunks.

I tried tuning down the two parameters (I can't upgrade the memory size on the server) MaxSessionCacheSize and  MaxResourceCacheSize into the file  webagent/config/WebAgent.conf.sample

Let's see if it works

Thank  you for now

After fine tuning the parameters mentioned in the link you provided it seems the CA Agent is being stable.

It just leaves semaphores and shared memory leftovers everytime I need to stop the Apache daemon , therefore I need to manually remove each orphan entry (actually I do this via script).

Thank you for your hint