Symantec Access Management

  • 1.  smps.log on newly installed r12.52 SP1 CR05 policy servers indicates that policy server is restarting by itself periodically

    Posted Jul 29, 2016 12:19 PM

    Hello,

    We have an open case with CA Support on this issue but does not seem to be getting anywhere with it and once again, turning to folks from CA Community for answers.  We installed two new r12.52 SP1 CR5 policy servers on Linux Redhat 6 as our SiteMinder QA environment in a r12.0 to r12.52 parallel environment upgrade.  We migrated the data over to the new policy servers and modify the SmHost.conf file on all of the web agents so that it is talking to the new r12.52 policy servers.  We are seeing multiple smps.log files being rotated on a very frequent basis with size of each of these log files are less than 1MB so the rotation is definitely not due to file size limit.

     

    We noticed that each time we invoke the federated SSO service the SMPS.log file would show that it is loading the java virtual machine, and then the log ends there and a new smps.log file would generate and the content of the next smpl.log shows that the policy starting up, but does not show it being shut down.  This is very consistent, it appears that each time we see the java jvm loaded/initialized, the policy server would then restart.  Below is one of the many smps.log files that get generated every time we invoke SAML federation SSO services:

    -----------------------------------------------------------------------------------------------------------------------------------------------------

     

    [37452/4022983536][Fri Jul 29 2016 09:05:10][SmJVMSupport.cpp:255][INFO][sm-JavaApi-01030] SmJVMSupport: Using the following JRE: /usr/pservic

    es/ca/jdk1.7.0_79/jre

    [37452/4022983536][Fri Jul 29 2016 09:05:10][SmJVMSupport.cpp:260][INFO][sm-JavaApi-01040] SmJVMSupport: Loaded the following JVM library: /us

    r/pservices/ca/jdk1.7.0_79/jre/lib/i386/server/libjvm.so

    ------------------------------------------------------------------------------------------------------------------------------------------------------

     

     

    smps.log - - > 1st log rotation

     

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:5010][INFO][sm-Server-01430] Logging and Trace output in local time. TimeZone: [GMT-7

    :00]. Daylight Savings: 1

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:5296][INFO][sm-Server-04010] Buffering of trace messages not supported

    [35935/4151826144][Fri Jul 29 2016 08:46:52][SmEventTrap.cpp:388][INFO][sm-Server-02500] Loading event handler '/usr/pservices/ca/siteminder/l

    ib/libXPSAudit.so'

    [35935/4151826144][Fri Jul 29 2016 08:46:52][SmEventTrap.cpp:402][INFO][sm-Server-02510] Initializing event handler '/usr/pservices/ca/sitemin

    der/lib/libXPSAudit.so'

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:3950][INFO][sm-Server-03540] Product: SiteMinder Policy Server

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:3951][INFO][sm-Server-03550] Version: 12.52; Update: 01.05; Build: 2112; CR: 05;

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:3954][INFO][sm-Server-03570] Starting up Application: smpolicysrv.

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:7686][INFO][sm-Server-04190] Setting the server suspend state for reason 4. The serve

    r will stop serving requests.

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:3971][INFO][sm-Server-01800] Logger initialized successfully

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CSmRadiusLogger.cpp:52][INFO][sm-Server-01320] RADIUS server is disabled

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:4082][INFO][sm-Server-04430] Policy Server employing classic SiteMinder and FIPS-140

    cryptographic algorithms.

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:7059][INFO][sm-Server-02150] Agent API TCP port: 44442

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:2537][INFO][sm-Server-01750] Maximum number of file descriptors available to this pro

    cess is 4096

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:7086][INFO][sm-Server-02180] Admin TCP port: 44444

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:7095][INFO][sm-Server-02200] Admin UDP port: 44444

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:7114][INFO][sm-Server-02230] Radius accounting port: Disabled

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:7123][INFO][sm-Server-02250] Radius authentication port: Disabled

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:4120][INFO][sm-Server-03580] Linux 2.6.32-573.18.1.el6.x86_64

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:4133][INFO][sm-Server-02110] Product=Policy Server,Platform=Linux 2.6.32-573.18.1.el6

    .x86_64,Version=12.52,Update=01.05,Label=2112,Crypto=128,UTC=1469803612,TZ=7

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:4690][INFO][sm-Server-01990] ========================================================

    ===========================

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:4691][INFO][sm-Server-02000] System Statistics

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:4697][INFO][sm-Server-02010] Available file descriptors: 1024

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:4708][INFO][sm-Server-02020] Thread pool limit: 8

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:4730][INFO][sm-Server-02030] Thread pool: Msgs=0 Throughput=0.000/sec Response Time=0

    .000ms Wait Time In Queue=0.000ms Max HP Msg=0 Max NP Msg=0 Current Depth=0 Max Depth=0 Current High Depth=0 Current Norm Depth=0 Current Thre

    ads=0 Max Threads=0 Busy Threads=0

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:4738][INFO][sm-Server-02040] Connections: Current=0 Max=0 Limit=8192 Exceeded limit=0

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:4741][INFO][sm-Server-01990] ========================================================

    ===========================

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:4169][INFO][sm-Server-03930] ThreadPool using priority thread count : 5

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:4216][INFO][sm-Server-01810] Initialized Monitoring API

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:4251][INFO][sm-Server-03640] Initialized Monitoring Agent Proxy

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:4286][INFO][sm-Server-01820] Starting thread pool. Thread pool size is 8

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:4290][INFO][sm-Server-01830] Starting main reactor thread (Network IO dispatcher)

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:345][INFO][sm-Server-01680] Loaded Transact

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:296][INFO][sm-Server-03580] *********************************************************

    ***

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:296][INFO][sm-Server-03580] *****        SmTransact Version 12.52.0105.2112        **

    ***

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:296][INFO][sm-Server-03580] *********************************************************

    ***

    [35935/4151826144][Fri Jul 29 2016 08:46:52][CServer.cpp:4314][INFO][sm-Server-01840] Initializing smpolicysrv

    [35935/3992157040][Fri Jul 29 2016 08:46:52][CServer.cpp:3772][INFO][sm-Server-01780] Starting main Reactor thread

    [35935/4151826144][Fri Jul 29 2016 08:46:52][SmAuthDsCache.cpp:253][INFO][sm-Directory-00450] UserAz cache is enabled for all policy resolutio

    ns

    [35935/4151826144][Fri Jul 29 2016 08:46:52][SmAuthDsCache.cpp:136][INFO][sm-Directory-00420] Initializing user directory cache

    [35935/4151826144][Fri Jul 29 2016 08:46:52][SmObjProvider.cpp:243][INFO][sm-Server-02830] Initializing policy store provider 'LDAP:'

    [35935/4151826144][Fri Jul 29 2016 08:46:52][SmObjProvider.cpp:282][INFO][sm-Server-02840] Loading of policy store provider extension DLL: 'sm

    objldapims' succeeded.

    [35935/4151826144][Fri Jul 29 2016 08:46:52][SmLdapPs.cpp:209][INFO][sm-Ldap-02140] SSL client init will not be attempted - no certificate dat

    abase defined

    [35935/4151826144][Fri Jul 29 2016 08:46:53][smldaputils.cpp:529][INFO][sm-Ldap-00540] Opening policy store connection to LDAP server: ' vlslc

    casso02.regence.com:20400 '

    [35935/-143141152][Fri Jul 29 2016 08:46:53][SmLdapBulkSearch.cpp:173][CreateRoot][INFO][sm-xpsxps-01160] LDAP Provider Info String = CA Direc

    tory

    [35935/-143141152][Fri Jul 29 2016 08:46:53][SmLdapBulkSearch.cpp:227][CreateRoot][INFO][sm-xpsxps-01120] LDAP Provider Version: supportedLdap

    Version = 3

    [35935/-143141152][Fri Jul 29 2016 08:46:53][SmLdapBulkSearch.cpp:227][CreateRoot][INFO][sm-xpsxps-01120] LDAP Provider Version: dxServerVersi

    on = dxserver 12.0.17 (build 11556) Linux 64-Bit

    [35935/4151826144][Fri Jul 29 2016 08:46:53][SmObjCache.cpp:402][INFO][sm-Server-02800] Preloading policy store cache

    [35935/4151826144][Fri Jul 29 2016 08:46:53][SmObjCache.cpp:415][INFO][sm-Server-02860] BulkFetch policy store

    [35935/4151826144][Fri Jul 29 2016 08:46:53][SmObjCache.cpp:418][INFO][sm-Server-02810] Precaching system configuration objects

    [35935/4151826144][Fri Jul 29 2016 08:46:59][SmObjCache.cpp:487][INFO][sm-Server-02820] Precaching each Policy Domain

    [35935/4151826144][Fri Jul 29 2016 08:46:59][SmObjCache.cpp:491][INFO][sm-Server-02870] BulkRelease policy store

    [35935/4151826144][Fri Jul 29 2016 08:46:59][PolicyCache.cpp:1294][INFO][sm-Server-02880] Building policy cache ...

    [35935/4151826144][Fri Jul 29 2016 08:46:59][PolicyCache.cpp:1387][INFO][sm-Server-02890] Building policy cache done

    [35935/4151826144][Fri Jul 29 2016 08:46:59][SmObjStore.cpp:1478][INFO][sm-Server-00050] Object store initialized

    [35935/3929217904][Fri Jul 29 2016 08:46:59][SmObjStore.cpp:1110][INFO][sm-Server-00110] Starting object store journal thread

    [35935/3918728048][Fri Jul 29 2016 08:46:59][SmObjStore.cpp:935][INFO][sm-Server-00070] Object store journal thread started

    [35935/3918728048][Fri Jul 29 2016 08:46:59][SmObjStore.cpp:936][INFO][sm-Server-00080] Journal commands refresh interval is 60 second(s)

    [35935/3918728048][Fri Jul 29 2016 08:46:59][SmObjStore.cpp:937][INFO][sm-Server-00090] Server command synchronization delta is 51 second(s)

    [35935/3918728048][Fri Jul 29 2016 08:46:59][SmObjStore.cpp:938][INFO][sm-Server-05250] Secondary cache failure timeout is 0 second(s)

    [35935/-143141152][Fri Jul 29 2016 08:46:59][Database.cpp:689][InitDB][INFO][sm-xpsxps-00120] Initializing XPS Version 12.52.0105.2112

    [35935/-143141152][Fri Jul 29 2016 08:46:59][XPSLDAP.cpp:799][CreateRoot][INFO][sm-xpsxps-01160] LDAP Provider Info String = CA Directory

    [35935/-143141152][Fri Jul 29 2016 08:46:59][XPSIO.cpp:465][InitialLoad][INFO][sm-xpsxps-00560] Database Transactions are 0.

    [35935/-143141152][Fri Jul 29 2016 08:46:59][XPSIO.cpp:492][InitialLoad][INFO][sm-xpsxps-00300] 1 Parameter(s) loaded from Policy Store, 2 tot

    al.

    [35935/-143141152][Fri Jul 29 2016 08:46:59][XPSIO.cpp:497][InitialLoad][INFO][sm-xpsxps-00330] Caching Policy Data...

    [35935/-143141152][Fri Jul 29 2016 08:47:01][XPSIO.cpp:516][InitialLoad][INFO][sm-xpsxps-00310] 5057 object(s) loaded from the Policy Store.

    [35935/-143141152][Fri Jul 29 2016 08:47:01][XPSIO.cpp:580][SetPolicyStoreID][INFO][sm-xpsxps-00430] Policy Store ID is "0001c440-0541-1790-85

    41-87f40a16a0be".

    [35935/-143141152][Fri Jul 29 2016 08:47:01][XPSAudit.cpp:719][GetAudit][INFO][sm-xpsxps-06870] XPS Auditing is enabled.

    [35935/-143141152][Fri Jul 29 2016 08:47:01][Database.cpp:752][InitDB][INFO][sm-xpsxps-03460] No validation warnings will be logged (controlle

    d by CA.XPS::$LogValidationWarnings).

    [35935/-143141152][Fri Jul 29 2016 08:47:02][XPSIO.cpp:2065][MergeSmAndXPS][INFO][sm-xpsxps-00150] XPS Initialized. (1594, 0, 0)

    [35935/-143141152][Fri Jul 29 2016 08:47:02][XPS.cpp:909][Init][INFO][sm-xpsxps-00150] XPS Initialized.

    [35935/-143141152][Fri Jul 29 2016 08:47:02][NIDMgtCleanupRoutine.cpp:74][start][INFO][sm-xobfed-02966] NameID management cleanup thread start

    ed.

    [35935/-422200464][Fri Jul 29 2016 08:47:02][NIDMgtCleanupRoutine.cpp:129][waitForXPS][INFO][sm-xobfed-02969] NameID management cleanup thread

    running.

    [35935/-143141152][Fri Jul 29 2016 08:47:02][FedInterface.cpp:692][PostInitialize][INFO][sm-xobfed-02577] Successfully loaded smobjadapter.

    [35935/4151826144][Fri Jul 29 2016 08:47:02][SmPolicyServer.cpp:749][INFO][sm-Server-05320] XPS Initialization complete

    [35935/4151826144][Fri Jul 29 2016 08:47:02][SmPolicyServer.cpp:810][INFO][sm-Server-00770] Global Preferences: siteminder.viewObjects=706,

    [35935/4151826144][Fri Jul 29 2016 08:47:02][SmPolicyServer.cpp:822][INFO][sm-Server-00780] Nested Security:on

    [35935/4151826144][Fri Jul 29 2016 08:47:02][SmPolicyServer.cpp:853][INFO][sm-Server-00810] This policy server does not generate agent keys

    [35935/4151826144][Fri Jul 29 2016 08:47:02][SmPolicyServer.cpp:1043][INFO][sm-Server-00840] This policy server is not allowed to roll over tr

    usted host shared secrets

    [35935/4151826144][Fri Jul 29 2016 08:47:02][DoManagement.cpp:1003][INFO][sm-Server-03670] Starting agent command management watchdog thread

    [35935/3841297264][Fri Jul 29 2016 08:47:02][DoManagement.cpp:976][INFO][sm-Server-03660] Starting agent command management thread

    [35935/4151826144][Fri Jul 29 2016 08:47:02][SmPolicyServer.cpp:2373][INFO][sm-Server-03690] Starting key management watchdog thread

    [35935/3830807408][Fri Jul 29 2016 08:47:02][DoManagement.cpp:853][INFO][sm-Server-00340] Agent Command Management thread started

    [35935/4151826144][Fri Jul 29 2016 08:47:02][SmPolicyServer.cpp:1941][INFO][sm-Server-03680] Starting journal management watchdog thread

    [35935/4151826144][Fri Jul 29 2016 08:47:02][SmSSInLDAPStore.cpp:503][INFO][sm-Ldap-02160] Opening session server connection to CA Directory:

    ' vlslccasso02.regence.com:20400 '

    [35935/4151826144][Fri Jul 29 2016 08:47:02][SmSSProvider.cpp:198][INFO][sm-Server-01800] Logger initialized successfully

    [35935/3778358128][Fri Jul 29 2016 08:47:02][SmSSProvider.cpp:153][INFO][sm-Server-04260] The session server watchdog thread has started.

    [35935/3767868272][Fri Jul 29 2016 08:47:02][SmSSProvider.cpp:134][INFO][sm-Server-04240] The session server maintenance thread has started.

    [35935/4151826144][Fri Jul 29 2016 08:47:02][CServer.cpp:4335][INFO][sm-Server-01850] Initialized smpolicysrv

    [35935/4151826144][Fri Jul 29 2016 08:47:02][CServer.cpp:6454][INFO][sm-Server-03480] Initializing TLI

    [35935/4151826144][Fri Jul 29 2016 08:47:02][CServer.cpp:8050][INFO][sm-Server-02410] Initializing UDP

    [35935/4151826144][Fri Jul 29 2016 08:47:02][CServer.cpp:6517][INFO][sm-Server-03490] Starting TLI

    [35935/4151826144][Fri Jul 29 2016 08:47:02][CServer.cpp:6531][INFO][sm-Server-03500] Admin UDP port is up

    [35935/4151826144][Fri Jul 29 2016 08:47:02][CServer.cpp:8270][INFO][sm-Server-02420] TCP is up on 3 interfaces listening for incoming connect

    ions

    [35935/4151826144][Fri Jul 29 2016 08:47:02][CServer.cpp:4359][INFO][sm-Server-01860] Initialization done

    [35935/4151826144][Fri Jul 29 2016 08:47:02][CServer.cpp:4388][INFO][sm-Server-01870] Signal handler for SIGTERM and SIGINT is installed, thre

    ad id = 4151826144

    [35935/4151826144][Fri Jul 29 2016 08:47:02][CServer.cpp:4008][INFO][sm-Server-04230] The suspend timeout is 3600 seconds.

    [35935/4151826144][Fri Jul 29 2016 08:47:02][CServer.cpp:5678][INFO][sm-Server-02080] SiteMinder Policy Server is ready on vlslccasso02

    [35935/4151826144][Fri Jul 29 2016 08:47:02][CServer.cpp:5685][INFO][sm-Server-02090] Waiting for messages on thread id 4151826144

    [35935/3820317552][Fri Jul 29 2016 08:47:05][SmPolicyServer.cpp:2344][INFO][sm-Server-00910] Starting key management thread

    [35935/3736398704][Fri Jul 29 2016 08:47:05][SmPolicyServer.cpp:1966][INFO][sm-Server-00900] Key management thread started.

    [35935/4034116464][Fri Jul 29 2016 08:47:16][SmAuthServer.cpp:332][INFO][sm-Server-02750] Loaded authentication scheme AD - IWA Auth Scheme -

    .regence.com. Version 768 . http://iwa-staging.regence.com/siteminderagent/ntlm/creds.ntc

    [35935/3809827696][Fri Jul 29 2016 08:47:17][SmPolicyServer.cpp:1913][INFO][sm-Server-00880] Starting journal management thread

    [35935/3715418992][Fri Jul 29 2016 08:47:17][SmPolicyServer.cpp:1862][INFO][sm-Server-00870] Journaling thread started, will delete commands o

    lder than 60  minutes

    [35935/3918728048][Fri Jul 29 2016 08:47:17][SmObjStore.cpp:407][INFO][sm-Server-03330] Key Update Management is not enabled

    [35935/3918728048][Fri Jul 29 2016 08:47:17][SmObjStore.cpp:446][INFO][sm-Server-04720] Key distribution has been initiated by Policy Server

    [35935/3918728048][Fri Jul 29 2016 08:47:17][PolicyCache.cpp:1294][INFO][sm-Server-02880] Building policy cache ...

    [35935/3918728048][Fri Jul 29 2016 08:47:17][PolicyCache.cpp:1387][INFO][sm-Server-02890] Building policy cache done

    [35935/3918728048][Fri Jul 29 2016 08:48:17][PolicyCache.cpp:1294][INFO][sm-Server-02880] Building policy cache ...

    [35935/3918728048][Fri Jul 29 2016 08:48:17][PolicyCache.cpp:1387][INFO][sm-Server-02890] Building policy cache done

    [35935/4065586032][Fri Jul 29 2016 08:48:24][SmAuthServer.cpp:361][INFO][sm-Server-02760] Initialized authentication scheme AD - IWA Auth Sche

    me - .regence.com

    [35935/4023626608][Fri Jul 29 2016 08:48:25][SmAuthServer.cpp:332][INFO][sm-Server-02750] Loaded authentication scheme Anonymous Template. Ver

    sion 768 . SiteMinder(tm) anonymous authentication scheme

    [35935/4013136752][Fri Jul 29 2016 08:48:25][SmJVMSupport.cpp:255][INFO][sm-JavaApi-01030] SmJVMSupport: Using the following JRE: /usr/pservic

    es/ca/jdk1.7.0_79/jre

    [35935/4013136752][Fri Jul 29 2016 08:48:25][SmJVMSupport.cpp:260][INFO][sm-JavaApi-01040] SmJVMSupport: Loaded the following JVM library: /us

    r/pservices/ca/jdk1.7.0_79/jre/lib/i386/server/libjvm.so

     

     

    smps.log - - - > 2nd log rotation

    ------------------------------------------

     

    [37452/4151183072][Fri Jul 29 2016 08:57:36][CServer.cpp:5010][INFO][sm-Server-01430] Logging and Trace output in local time. TimeZone: [GMT-7

    :00]. Daylight Savings: 1

    [37452/4151183072][Fri Jul 29 2016 08:57:36][CServer.cpp:5296][INFO][sm-Server-04010] Buffering of trace messages not supported

    [37452/4151183072][Fri Jul 29 2016 08:57:36][SmEventTrap.cpp:388][INFO][sm-Server-02500] Loading event handler '/usr/pservices/ca/siteminder/l

    ib/libXPSAudit.so'

    [37452/4151183072][Fri Jul 29 2016 08:57:36][SmEventTrap.cpp:402][INFO][sm-Server-02510] Initializing event handler '/usr/pservices/ca/sitemin

    der/lib/libXPSAudit.so'

    [37452/4151183072][Fri Jul 29 2016 08:57:36][CServer.cpp:3950][INFO][sm-Server-03540] Product: SiteMinder Policy Server

    [37452/4151183072][Fri Jul 29 2016 08:57:36][CServer.cpp:3951][INFO][sm-Server-03550] Version: 12.52; Update: 01.05; Build: 2112; CR: 05;

    [37452/4151183072][Fri Jul 29 2016 08:57:36][CServer.cpp:3954][INFO][sm-Server-03570] Starting up Application: smpolicysrv.

    [37452/4151183072][Fri Jul 29 2016 08:57:36][CServer.cpp:7686][INFO][sm-Server-04190] Setting the server suspend state for reason 4. The serve

    r will stop serving requests.

    [37452/4151183072][Fri Jul 29 2016 08:57:36][CServer.cpp:3971][INFO][sm-Server-01800] Logger initialized successfully

    [37452/4151183072][Fri Jul 29 2016 08:57:36][CSmRadiusLogger.cpp:52][INFO][sm-Server-01320] RADIUS server is disabled

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:4082][INFO][sm-Server-04430] Policy Server employing classic SiteMinder and FIPS-140

    cryptographic algorithms.

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:7059][INFO][sm-Server-02150] Agent API TCP port: 44442

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:2537][INFO][sm-Server-01750] Maximum number of file descriptors available to this pro

    cess is 4096

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:7086][INFO][sm-Server-02180] Admin TCP port: 44444

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:7095][INFO][sm-Server-02200] Admin UDP port: 44444

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:7114][INFO][sm-Server-02230] Radius accounting port: Disabled

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:7123][INFO][sm-Server-02250] Radius authentication port: Disabled

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:4120][INFO][sm-Server-03580] Linux 2.6.32-573.18.1.el6.x86_64

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:4133][INFO][sm-Server-02110] Product=Policy Server,Platform=Linux 2.6.32-573.18.1.el6

    .x86_64,Version=12.52,Update=01.05,Label=2112,Crypto=128,UTC=1469804257,TZ=7

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:4690][INFO][sm-Server-01990] ========================================================

    ===========================

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:4691][INFO][sm-Server-02000] System Statistics

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:4697][INFO][sm-Server-02010] Available file descriptors: 1024

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:4708][INFO][sm-Server-02020] Thread pool limit: 8

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:4730][INFO][sm-Server-02030] Thread pool: Msgs=0 Throughput=0.000/sec Response Time=0

    .000ms Wait Time In Queue=0.000ms Max HP Msg=0 Max NP Msg=0 Current Depth=0 Max Depth=0 Current High Depth=0 Current Norm Depth=0 Current Thre

    ads=0 Max Threads=0 Busy Threads=0

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:4738][INFO][sm-Server-02040] Connections: Current=0 Max=0 Limit=8192 Exceeded limit=0

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:4741][INFO][sm-Server-01990] ========================================================

    ===========================

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:4169][INFO][sm-Server-03930] ThreadPool using priority thread count : 5

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:4216][INFO][sm-Server-01810] Initialized Monitoring API

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:4251][INFO][sm-Server-03640] Initialized Monitoring Agent Proxy

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:4286][INFO][sm-Server-01820] Starting thread pool. Thread pool size is 8

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:4290][INFO][sm-Server-01830] Starting main reactor thread (Network IO dispatcher)

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:345][INFO][sm-Server-01680] Loaded Transact

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:296][INFO][sm-Server-03580] *********************************************************

    ***

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:296][INFO][sm-Server-03580] *****        SmTransact Version 12.52.0105.2112        **

    ***

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:296][INFO][sm-Server-03580] *********************************************************

    ***

    [37452/4151183072][Fri Jul 29 2016 08:57:37][CServer.cpp:4314][INFO][sm-Server-01840] Initializing smpolicysrv

    [37452/4151183072][Fri Jul 29 2016 08:57:37][SmAuthDsCache.cpp:253][INFO][sm-Directory-00450] UserAz cache is enabled for all policy resolutio

    ns

    [37452/4151183072][Fri Jul 29 2016 08:57:37][SmAuthDsCache.cpp:136][INFO][sm-Directory-00420] Initializing user directory cache

    [37452/4151183072][Fri Jul 29 2016 08:57:37][SmObjProvider.cpp:243][INFO][sm-Server-02830] Initializing policy store provider 'LDAP:'

    [37452/4002003824][Fri Jul 29 2016 08:57:37][CServer.cpp:3772][INFO][sm-Server-01780] Starting main Reactor thread

    [37452/4151183072][Fri Jul 29 2016 08:57:37][SmObjProvider.cpp:282][INFO][sm-Server-02840] Loading of policy store provider extension DLL: 'sm

    objldapims' succeeded.

    [37452/4151183072][Fri Jul 29 2016 08:57:37][SmLdapPs.cpp:209][INFO][sm-Ldap-02140] SSL client init will not be attempted - no certificate dat

    abase defined

    [37452/4151183072][Fri Jul 29 2016 08:57:38][smldaputils.cpp:529][INFO][sm-Ldap-00540] Opening policy store connection to LDAP server: ' vlslc

    casso02.regence.com:20400 '

    [37452/-143784224][Fri Jul 29 2016 08:57:38][SmLdapBulkSearch.cpp:173][CreateRoot][INFO][sm-xpsxps-01160] LDAP Provider Info String = CA Direc

    tory

    [37452/-143784224][Fri Jul 29 2016 08:57:38][SmLdapBulkSearch.cpp:227][CreateRoot][INFO][sm-xpsxps-01120] LDAP Provider Version: supportedLdap

    Version = 3

    [37452/-143784224][Fri Jul 29 2016 08:57:38][SmLdapBulkSearch.cpp:227][CreateRoot][INFO][sm-xpsxps-01120] LDAP Provider Version: dxServerVersi

    on = dxserver 12.0.17 (build 11556) Linux 64-Bit

    [37452/4151183072][Fri Jul 29 2016 08:57:38][SmObjCache.cpp:402][INFO][sm-Server-02800] Preloading policy store cache

    [37452/4151183072][Fri Jul 29 2016 08:57:38][SmObjCache.cpp:415][INFO][sm-Server-02860] BulkFetch policy store

    [37452/4151183072][Fri Jul 29 2016 08:57:38][SmObjCache.cpp:418][INFO][sm-Server-02810] Precaching system configuration objects

    [37452/4151183072][Fri Jul 29 2016 08:57:44][SmObjCache.cpp:487][INFO][sm-Server-02820] Precaching each Policy Domain

    [37452/4151183072][Fri Jul 29 2016 08:57:44][SmObjCache.cpp:491][INFO][sm-Server-02870] BulkRelease policy store

    [37452/4151183072][Fri Jul 29 2016 08:57:44][PolicyCache.cpp:1294][INFO][sm-Server-02880] Building policy cache ...

    [37452/4151183072][Fri Jul 29 2016 08:57:44][PolicyCache.cpp:1387][INFO][sm-Server-02890] Building policy cache done

    [37452/4151183072][Fri Jul 29 2016 08:57:44][SmObjStore.cpp:1478][INFO][sm-Server-00050] Object store initialized

    [37452/3939064688][Fri Jul 29 2016 08:57:44][SmObjStore.cpp:1110][INFO][sm-Server-00110] Starting object store journal thread

    [37452/3928574832][Fri Jul 29 2016 08:57:44][SmObjStore.cpp:935][INFO][sm-Server-00070] Object store journal thread started

    [37452/3928574832][Fri Jul 29 2016 08:57:44][SmObjStore.cpp:936][INFO][sm-Server-00080] Journal commands refresh interval is 60 second(s)

    [37452/3928574832][Fri Jul 29 2016 08:57:44][SmObjStore.cpp:937][INFO][sm-Server-00090] Server command synchronization delta is 51 second(s)

    [37452/3928574832][Fri Jul 29 2016 08:57:44][SmObjStore.cpp:938][INFO][sm-Server-05250] Secondary cache failure timeout is 0 second(s)

    [37452/-143784224][Fri Jul 29 2016 08:57:44][Database.cpp:689][InitDB][INFO][sm-xpsxps-00120] Initializing XPS Version 12.52.0105.2112

    [37452/-143784224][Fri Jul 29 2016 08:57:44][XPSLDAP.cpp:799][CreateRoot][INFO][sm-xpsxps-01160] LDAP Provider Info String = CA Directory

    [37452/-143784224][Fri Jul 29 2016 08:57:44][XPSIO.cpp:465][InitialLoad][INFO][sm-xpsxps-00560] Database Transactions are 0.

    [37452/-143784224][Fri Jul 29 2016 08:57:44][XPSIO.cpp:492][InitialLoad][INFO][sm-xpsxps-00300] 1 Parameter(s) loaded from Policy Store, 2 tot

    al.

    [37452/-143784224][Fri Jul 29 2016 08:57:44][XPSIO.cpp:497][InitialLoad][INFO][sm-xpsxps-00330] Caching Policy Data...

    [37452/-143784224][Fri Jul 29 2016 08:57:45][XPSIO.cpp:516][InitialLoad][INFO][sm-xpsxps-00310] 5057 object(s) loaded from the Policy Store.

    [37452/-143784224][Fri Jul 29 2016 08:57:45][XPSIO.cpp:580][SetPolicyStoreID][INFO][sm-xpsxps-00430] Policy Store ID is "0001c440-0541-1790-85

    41-87f40a16a0be".

    [37452/-143784224][Fri Jul 29 2016 08:57:45][XPSAudit.cpp:719][GetAudit][INFO][sm-xpsxps-06870] XPS Auditing is enabled.

    [37452/-143784224][Fri Jul 29 2016 08:57:45][Database.cpp:752][InitDB][INFO][sm-xpsxps-03460] No validation warnings will be logged (controlle

    d by CA.XPS::$LogValidationWarnings).

    [37452/-143784224][Fri Jul 29 2016 08:57:47][XPSIO.cpp:2065][MergeSmAndXPS][INFO][sm-xpsxps-00150] XPS Initialized. (1594, 0, 0)

    [37452/-143784224][Fri Jul 29 2016 08:57:47][XPS.cpp:909][Init][INFO][sm-xpsxps-00150] XPS Initialized.

    [37452/-143784224][Fri Jul 29 2016 08:57:47][NIDMgtCleanupRoutine.cpp:74][start][INFO][sm-xobfed-02966] NameID management cleanup thread start

    ed.

    [37452/-412353680][Fri Jul 29 2016 08:57:47][NIDMgtCleanupRoutine.cpp:129][waitForXPS][INFO][sm-xobfed-02969] NameID management cleanup thread

    running.

    [37452/-143784224][Fri Jul 29 2016 08:57:47][FedInterface.cpp:692][PostInitialize][INFO][sm-xobfed-02577] Successfully loaded smobjadapter.

    [37452/4151183072][Fri Jul 29 2016 08:57:47][SmPolicyServer.cpp:749][INFO][sm-Server-05320] XPS Initialization complete

    [37452/4151183072][Fri Jul 29 2016 08:57:47][SmPolicyServer.cpp:810][INFO][sm-Server-00770] Global Preferences: siteminder.viewObjects=706,

    [37452/4151183072][Fri Jul 29 2016 08:57:47][SmPolicyServer.cpp:822][INFO][sm-Server-00780] Nested Security:on

    [37452/4151183072][Fri Jul 29 2016 08:57:47][SmPolicyServer.cpp:853][INFO][sm-Server-00810] This policy server does not generate agent keys

    [37452/4151183072][Fri Jul 29 2016 08:57:47][SmPolicyServer.cpp:1043][INFO][sm-Server-00840] This policy server is not allowed to roll over tr

    usted host shared secrets

    [37452/4151183072][Fri Jul 29 2016 08:57:47][DoManagement.cpp:1003][INFO][sm-Server-03670] Starting agent command management watchdog thread

    [37452/4151183072][Fri Jul 29 2016 08:57:47][SmPolicyServer.cpp:2373][INFO][sm-Server-03690] Starting key management watchdog thread

    [37452/3851144048][Fri Jul 29 2016 08:57:47][DoManagement.cpp:976][INFO][sm-Server-03660] Starting agent command management thread

    [37452/4151183072][Fri Jul 29 2016 08:57:47][SmPolicyServer.cpp:1941][INFO][sm-Server-03680] Starting journal management watchdog thread

    [37452/3819674480][Fri Jul 29 2016 08:57:47][DoManagement.cpp:853][INFO][sm-Server-00340] Agent Command Management thread started

    [37452/4151183072][Fri Jul 29 2016 08:57:47][SmSSInLDAPStore.cpp:503][INFO][sm-Ldap-02160] Opening session server connection to CA Directory:

    ' vlslccasso02.regence.com:20400 '

    [37452/4151183072][Fri Jul 29 2016 08:57:47][SmSSProvider.cpp:198][INFO][sm-Server-01800] Logger initialized successfully

    [37452/3788204912][Fri Jul 29 2016 08:57:47][SmSSProvider.cpp:153][INFO][sm-Server-04260] The session server watchdog thread has started.

    [37452/3777715056][Fri Jul 29 2016 08:57:47][SmSSProvider.cpp:134][INFO][sm-Server-04240] The session server maintenance thread has started.

    [37452/4151183072][Fri Jul 29 2016 08:57:47][CServer.cpp:4335][INFO][sm-Server-01850] Initialized smpolicysrv

    [37452/4151183072][Fri Jul 29 2016 08:57:47][CServer.cpp:6454][INFO][sm-Server-03480] Initializing TLI

    [37452/4151183072][Fri Jul 29 2016 08:57:47][CServer.cpp:8050][INFO][sm-Server-02410] Initializing UDP

    [37452/4151183072][Fri Jul 29 2016 08:57:47][CServer.cpp:6517][INFO][sm-Server-03490] Starting TLI

    [37452/4151183072][Fri Jul 29 2016 08:57:47][CServer.cpp:6531][INFO][sm-Server-03500] Admin UDP port is up

    [37452/4151183072][Fri Jul 29 2016 08:57:47][CServer.cpp:8270][INFO][sm-Server-02420] TCP is up on 3 interfaces listening for incoming connect

    ions

    [37452/4151183072][Fri Jul 29 2016 08:57:47][CServer.cpp:4359][INFO][sm-Server-01860] Initialization done

    [37452/4151183072][Fri Jul 29 2016 08:57:47][CServer.cpp:4388][INFO][sm-Server-01870] Signal handler for SIGTERM and SIGINT is installed, thre

    ad id = 4151183072

    [37452/4151183072][Fri Jul 29 2016 08:57:47][CServer.cpp:4008][INFO][sm-Server-04230] The suspend timeout is 3600 seconds.

    [37452/4151183072][Fri Jul 29 2016 08:57:47][CServer.cpp:5678][INFO][sm-Server-02080] SiteMinder Policy Server is ready on vlslccasso02

    [37452/4151183072][Fri Jul 29 2016 08:57:47][CServer.cpp:5685][INFO][sm-Server-02090] Waiting for messages on thread id 4151183072

    [37452/3840654192][Fri Jul 29 2016 08:57:50][SmPolicyServer.cpp:2344][INFO][sm-Server-00910] Starting key management thread

    [37452/3746245488][Fri Jul 29 2016 08:57:50][SmPolicyServer.cpp:1966][INFO][sm-Server-00900] Key management thread started.

    [37452/3830164336][Fri Jul 29 2016 08:58:02][SmPolicyServer.cpp:1913][INFO][sm-Server-00880] Starting journal management thread

    [37452/3735755632][Fri Jul 29 2016 08:58:02][SmPolicyServer.cpp:1862][INFO][sm-Server-00870] Journaling thread started, will delete commands o

    lder than 60  minutes

    [37452/3928574832][Fri Jul 29 2016 08:58:02][SmObjStore.cpp:407][INFO][sm-Server-03330] Key Update Management is not enabled

    [37452/3928574832][Fri Jul 29 2016 08:58:02][SmObjStore.cpp:446][INFO][sm-Server-04720] Key distribution has been initiated by Policy Server

    [37452/3928574832][Fri Jul 29 2016 08:58:02][PolicyCache.cpp:1294][INFO][sm-Server-02880] Building policy cache ...

    [37452/3928574832][Fri Jul 29 2016 08:58:02][PolicyCache.cpp:1387][INFO][sm-Server-02890] Building policy cache done

    [37452/3928574832][Fri Jul 29 2016 08:59:02][PolicyCache.cpp:1294][INFO][sm-Server-02880] Building policy cache ...

    [37452/3928574832][Fri Jul 29 2016 08:59:02][PolicyCache.cpp:1387][INFO][sm-Server-02890] Building policy cache done

    [37452/4085922672][Fri Jul 29 2016 09:00:03][SmAuthServer.cpp:332][INFO][sm-Server-02750] Loaded authentication scheme AD - IWA Auth Scheme -

    .regence.com. Version 768 . http://iwa-staging.regence.com/siteminderagent/ntlm/creds.ntc

    [37452/4012493680][Fri Jul 29 2016 09:05:09][SmAuthServer.cpp:361][INFO][sm-Server-02760] Initialized authentication scheme AD - IWA Auth Sche

    me - .regence.com

    [37452/4054453104][Fri Jul 29 2016 09:05:10][SmAuthServer.cpp:332][INFO][sm-Server-02750] Loaded authentication scheme Anonymous Template. Ver

    sion 768 . SiteMinder(tm) anonymous authentication scheme

    [37452/4022983536][Fri Jul 29 2016 09:05:10][SmJVMSupport.cpp:255][INFO][sm-JavaApi-01030] SmJVMSupport: Using the following JRE: /usr/pservic

    es/ca/jdk1.7.0_79/jre

    [37452/4022983536][Fri Jul 29 2016 09:05:10][SmJVMSupport.cpp:260][INFO][sm-JavaApi-01040] SmJVMSupport: Loaded the following JVM library: /us

    r/pservices/ca/jdk1.7.0_79/jre/lib/i386/server/libjvm.so



  • 2.  Re: smps.log on newly installed r12.52 SP1 CR05 policy servers indicates that policy server is restarting by itself periodically

    Posted Jul 29, 2016 02:19 PM

    First thing to look at is smexec.log.  That log is from the process that monitors the policy server.  If the policy server is crashing, it will be logged there and a message stating that the smexec process is restarting the policy server.

     

    If it is crashing, then you need to find if a core file was created.  If yes, open a case with support and get them involved.  The core file could be in any number of locations depending on the configuration of your OS.  Probably just easier to search the whole drive for it.  It will be owned by the same user that owns the policy server process.



  • 3.  Re: smps.log on newly installed r12.52 SP1 CR05 policy servers indicates that policy server is restarting by itself periodically

    Posted Jul 29, 2016 02:27 PM

    Hi Samat,

     

    Yes, it does seem like the policy server is crashing based on the smexec.log:

     

    Thu Jul 28 12:09:14 2016: Enter: HandleSignals(UNBLOCK_ALL)
    Fri Jul 29 10:23:12 2016: Received SIGNAL 10
    Fri Jul 29 10:23:12 2016: Disabled Service smpolicysrv
    Fri Jul 29 10:23:12 2016: Sending SIGTERM to  41168, want first to wait until the child process dies
    Fri Jul 29 10:23:12 2016: SIGTERM was sent to  41168, want first to wait until it dies
    Fri Jul 29 10:23:12 2016: Deleting pid file ----- /usr/pservices/ca/siteminder/config/smpolicysrv.pid
    Fri Jul 29 10:23:12 2016: wait interrupted by signal
    Fri Jul 29 10:23:13 2016: Enter: HandleSignals(BLOCK_ALL)
    Fri Jul 29 10:23:13 2016: Enter: HandleSignals(UNBLOCK_ALL)
    Fri Jul 29 10:23:24 2016: Received SIGNAL 10
    Fri Jul 29 10:23:24 2016: Disabled Service smservmon
    Fri Jul 29 10:23:24 2016: Sending SIGTERM to  39478, want first to wait until the child process dies
    Fri Jul 29 10:23:24 2016: SIGTERM was sent to  39478, want first to wait until it dies
    Fri Jul 29 10:23:24 2016: Deleting pid file ----- /usr/pservices/ca/siteminder/config/smservmon.pid
    Fri Jul 29 10:23:24 2016: Going back to the wait function
    Fri Jul 29 10:23:24 2016: wait interrupted by signal
    Fri Jul 29 10:23:24 2016: Enter: HandleSignals(BLOCK_ALL)
    Fri Jul 29 10:23:24 2016: Enter: HandleSignals(UNBLOCK_ALL)
    Fri Jul 29 10:23:24 2016: wait failed, errno: 10
    Fri Jul 29 11:32:40 2016: smexec STARTING
    Fri Jul 29 11:32:40 2016: Enter: HandleSignals(HANDLE_KILL)
    Fri Jul 29 11:32:40 2016: Enter: HandleSignals(IGNORE_USR)
    Fri Jul 29 11:32:40 2016: Enter: HandleSignals(BLOCK_ALL)
    Fri Jul 29 11:32:40 2016: Starting service: smservmon, pid: 28924
    Fri Jul 29 11:32:40 2016: Enter: HandleSignals(UNBLOCK_ALL)
    Fri Jul 29 11:32:40 2016: Enter: HandleSignals(BLOCK_ALL)
    Fri Jul 29 11:32:40 2016: Starting service: smpolicysrv, pid: 28925
    Fri Jul 29 11:32:40 2016: Enter: HandleSignals(UNBLOCK_ALL)
    Fri Jul 29 11:32:40 2016: Enter: HandleSignals(HANDLE_USR)
    Fri Jul 29 11:32:40 2016: Enter: HandleSignals(UNBLOCK_ALL)
    Fri Jul 29 11:32:40 2016: Enter: HandleSignals(UNBLOCK_ALL)
    Fri Jul 29 11:34:37 2016: Enter: HandleSignals(BLOCK_ALL)
    Fri Jul 29 11:34:37 2016: Enter: HandleSignals(UNBLOCK_ALL)
    Fri Jul 29 11:34:37 2016: Service smpolicysrv died - restart #0, pid: 29108

    Fri Jul 29 11:34:37 2016: Enter: HandleSignals(UNBLOCK_ALL)
    Fri Jul 29 11:44:52 2016: Enter: HandleSignals(BLOCK_ALL)
    Fri Jul 29 11:44:52 2016: Enter: HandleSignals(UNBLOCK_ALL)
    Fri Jul 29 11:44:52 2016: Service smpolicysrv died - restart #0, pid: 30560

    Fri Jul 29 11:44:52 2016: Enter: HandleSignals(UNBLOCK_ALL)
    Fri Jul 29 11:47:26 2016: Enter: HandleSignals(BLOCK_ALL)
    Fri Jul 29 11:47:26 2016: Enter: HandleSignals(UNBLOCK_ALL)
    Fri Jul 29 11:47:26 2016: Service smpolicysrv died - restart #0, pid: 31277

    Fri Jul 29 11:47:26 2016: Enter: HandleSignals(UNBLOCK_ALL)
    Fri Jul 29 12:04:01 2016: Enter: HandleSignals(BLOCK_ALL)
    Fri Jul 29 12:04:01 2016: Enter: HandleSignals(UNBLOCK_ALL)
    Fri Jul 29 12:04:01 2016: Service smpolicysrv died - restart #0, pid: 33377

    Fri Jul 29 12:04:01 2016: Enter: HandleSignals(UNBLOCK_ALL)



  • 4.  Re: smps.log on newly installed r12.52 SP1 CR05 policy servers indicates that policy server is restarting by itself periodically

    Posted Jul 29, 2016 03:45 PM

    Would you be able to paste in your JVMOptions.txt file?



  • 5.  Re: smps.log on newly installed r12.52 SP1 CR05 policy servers indicates that policy server is restarting by itself periodically

    Posted Jul 31, 2016 07:20 PM

    Hi,

     

    From the logs, it did seems the policy server is crashing whenever invoke the JVM. I will advice to enable core dump on the OS so it captured the dump when this happen. The dump file will give us more hints on why the policy server crashed at that time. There is a pkgapp script that you need to run against the core dump on the machine that generate the core dump. It basically collect the lib information and some stack trace from the core dump.

     

    As you have the CA Support case open, you can request the script once you have the dump available. Hope this helps.

     

    Regards,

    Kar Meng



  • 6.  Re: smps.log on newly installed r12.52 SP1 CR05 policy servers indicates that policy server is restarting by itself periodically
    Best Answer

    Broadcom Employee
    Posted Aug 01, 2016 03:06 AM

    Hi,

     

    The Policy Server crashes. Just check the PID, it keeps changing

    among the logs snippet.

     

    But for a quick resolution, increase the available file descriptors

    amount the Policy Server will be able to open, the Policy Server

    only has 1024 and you allow 8192 connections, so it will get problems

    to process.

     

      Available file descriptors: 1024

      Connections: Current=0 Max=0 Limit=8192 Exceeded limit=0

     

    Increase the open files with command (with the user starting

    the policy server and before starting it):

     

         # ulimit -n 10000

     

    and check it has been set correctly with command

     

        # ulimit -a

     

    you should see line :

     

        open files         (-n) 10000

     

    Be sure also that you have installed on RedHat 6 64bit all pre-requisites

    for the Policy Server :

     

    https://docops.ca.com/ca-single-sign-on-12-52-sp1/en/installing/policy-server/installing-the-policy-server-on-unix/prepare-for-the-policy-server-installation

     

    Best Regards,

    Patrick



  • 7.  Re: smps.log on newly installed r12.52 SP1 CR05 policy servers indicates that policy server is restarting by itself periodically

    Posted Aug 01, 2016 02:15 PM

    Patrick / Karmeng / Samat,

     

    Thank you all for your responses to help me resolve this issue.  Your information helped me focused toward the right area of troubleshooting the issue.  After finding other threads out there that hinted about a possible r12.52 SP1 CR05 on Linux/Unix platforms having issues with Java memory I provided this information to CA Support for this case and they confirmed that this issue was indeed caused by the "Previous" released version for r12.52 SP1 CR05 which had a bug causing this issue.  CA since then taken down the download for that version and released a different file/download for r12.52 SP1 CR05 which indeed fixed this bug.

     

    Again thank you folks for your help!