Symantec Access Management

  • 1.  LDAP latency that causes Busy threads leaks

    Posted Apr 20, 2018 10:11 AM

    Hi,

     

    Our CA SSO Policy Server experience from time to time a Busy Threads leak that goes up to 100 threads and we are having a hard time finding the root cause of this.

     

    We are suspecting LDAP latency but to get more help from our AD support team we need to give them a little bit more information on wich LDAP server that might cause the latency.

     

    So, I have a few questions regarding this :

     

    - Is running smpolicysrv -dumprequests will give me more information on what is causing the busy thread leaks ?

    - Is it possible to dump the busy threads information in a text file ?

    - Do you guys have any guidances on how to troubleshoot this kind of issue ?

     

    Thanks



  • 2.  Re: LDAP latency that causes Busy threads leaks

    Posted Apr 23, 2018 12:11 AM

    Hi Phillippe,

     

    To troulbleshoot such busy threads issue, we will need :

     

    - Policy server trace logs ( ensure you select LDPA components )

    - Also, take serveral process dump of the Policy server process at every 2,3 minute intervals.

     

    • In unix, you can use "gcore" to take manual core dump of running process.
    • In windows, you can use IIS Debug Diag to take manual core dump of running (hung) process

     

    Let me know if any questions.

     

    Regards,

    Ujwol



  • 3.  Re: LDAP latency that causes Busy threads leaks

    Broadcom Employee
    Posted Apr 23, 2018 12:59 PM

    Phillippe, In addition to above, the trace analysis tool described and available here should help to highlight some trouble-spots: 

    https://communities.ca.com/thread/97562407

     

    Take care,.- Vijay