Symantec Access Management

Hi Team,

Greetings.

One of our client is setting up CA Directory R12 Sp18 as a SSOpolicy store. We need best practices/suggestions on Index/Caching for CA Directory to improve the performance. Please share if any such information.

Thanks in advance,

Regards,

GS

Hi Srinivasu,

By default directory will cache and index everything. If directory is embedded in another product these defaults may be different.

The only times the indexing needs to be reviewed is for:

• Slow start up times
• When memory resources are tight
• If some attributes have repetitive (weak) values: In this case, the performance of removing values can be improved

The default cache-index command “set cache-index = all-attributes;” is added by when a DSA is created to the*.dxi file under $DXHOME/config/servers|%DXHOME%\config\servers.

The indexes are used when evaluating search filters so some candidate attributes for exclusion may be large BLOBs, for example. If your client isn't experiencing any specific performance/resource issues then the defaults should be fine.

Cheers,

Justin