Security Module Crashes

 10 Replies
 0 Subscribed to this topic
 15 Subscribed to this forum
Sort:
Author
Messages
Brian Allen
Veteran Member
Posts: 104
Veteran Member
    We are having an issue with out of memory errors from the Lawson Security module on Websphere. As we are increasing activity with the security implementation, the issue is causing the application server JVM to crash.

    Updates to user RM records are quick, but simple changes to security, such as adding 1 class to a role, is taking about 30 seconds. Adding several classes to a role can take up to 5 minutes or produce a timeout. Our ADAM server was spiking to 100% CPU utilization during updates and we’ve since replaced it. It’s no longer a bottleneck, and update performance improved slightly. We have at least 3 admins who can be making updates in the security client. The max memory setting is at the recommended 1024 setting.

    Lawson is suggesting that we contact professional services since this is a performance issue; however, I’m thinking this is an application issue with the security module’s ability to service the client, or an issue with the client.

    Has anyone experienced this type of performance issue? If so, was it specific to an ADAM installation? Any suggestions on the JVM memory issue?

    Here are our versions:
    LSF 9.0.0.8 on AIX
    9.0.0.4 Apps
    LDAP is ADAM on Windows Enterprise Server
    MattM
    Veteran Member
    Posts: 82
    Veteran Member
      Are logins to portal slow also?
      MattM
      Veteran Member
      Posts: 82
      Veteran Member
        Also, are you bound to AD?
        Brian Allen
        Veteran Member
        Posts: 104
        Veteran Member
          Portal speed is excellent. We are not bound to AD.
          Brian Allen
          Veteran Member
          Posts: 104
          Veteran Member
            The out of memory errors only started occurring when we have increased update activity to security using the security client. User RM updates have never been a problem. Everything is pointing to the updates being the cause of the issue.
            ScotT
            New Member
            Posts: 2
            New Member
              We have been having the same issue for a year now in our test environment, oddly our production env is working normally. We have engaged LPS twice with no resolution. I'm convinced they have no clue what's causing it. We are on AIX env 9006 apps 9005 and using Tivoli Dir Srvs so they suggested we upgrade to the latest ESP and Env PT's however they can not verify this will resolve it, also we can not prioritize this upgrade and testing at this time. Interesting that you are on env 9008 and you are having the issue.
              MattD
              Veteran Member
              Posts: 94
              Veteran Member
                We had similar problems at one time. We didn't experience the sluggishness but we were receiving out of memory issues when loading security. Make sure your root and ldap users have a ulimit that is not restricted or that is very high.

                We still to this day have problems with LASE crashing and Lawson cannot figure that one out. That is not related to the out of memory issue, but frustrating all the same and revolves somehow around security.
                Brian Allen
                Veteran Member
                Posts: 104
                Veteran Member
                  So are you on LawSec on production for your users? Do you make updates to security classes and roles on production?
                  MattD
                  Veteran Member
                  Posts: 94
                  Veteran Member
                    Yes we are on Lawson Security 9 (CheckLS=Y) for all our production users. No one except the IT team is on LAUA. We do make changes to security classes and roles. At one point we banned doing it during the working day because we thought it may have something to do with the LASE crashing problem, but it continued to crash so we began to allow making changes again. If we have a lot of changes to make, like setting up a new security class, something beyond just adding security to a user we will sometimes try to perform it on off hours or when there is little activity on the system.
                    ScotT
                    New Member
                    Posts: 2
                    New Member
                      We have two security administrators and they have been building and testing our Lawsec in test and then parallel building it in production. Test env crashes every 48-72 hours however our production env has never crashed.
                      Brian Allen
                      Veteran Member
                      Posts: 104
                      Veteran Member
                        We have assumed that the updates to security have been causing our security module crashes since some updates are timing out and generating the Websphere errors. We also have a lot of security testing in progress, so this may be a factor as well.

                        I have a case open with Lawson on the issue. If we find any resolutions, I'll be sure to post them here.

                        Thanks Matt and Scott for your feedback.