WAMUI Slowness after installation

[mayank.agarwal.1]

Hi

 

I have upgraded my Policy store from r12sp3(10g) to r12.52sp1(12c). SO i did registered my WAMUI and after installation its working very slow,sometime loading of ACO itself takes time. Please suggest

 

WAMUI version is Full Version=12.52.105.2112

[Legacy User]

Mayank

 

Have we eliminated all external factors like

• Networks / Datacentre to ensure that difference in underlying topology is not a contributing factor.
• Is the Prodn OR PreProdn? If it is Prodn, was this issues seen in PreProdn? What are the difference between PreProdn and Prodn?

 

Beyond the external factors, I'd typically start by looking at Policy Server trace logs to see the calls generated and response times.

 

There are a few tuning things we could look at but don't jump into those directly without understanding the causes.

Configure ODBC Data Store Options - CA Single Sign-On - 12.6.01 - CA Technologies Documentation 

Policy Store Troubleshooting - CA Single Sign-On - 12.52 SP2 - CA Technologies Documentation 

 

Regards

Hubert

[Legacy User]

Some relevance to Policy Store (There are a few additional ones for User Store).

 

https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.TEC491779.html 

https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.TEC492511.html 

https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.TEC485225.html 

 

But again these are generic information. 

 

The first step is to identify what is causing it,

[mayank.agarwal.1]

Hello Hubert,

 

With the upgrade to Policy store R12.52SP1, we are facing this issue. Earlier with R12 Pstore, the FSSUI was working very fast.

 

Below are environment details:

Policy server and WAMUI OS: Solaris

Policy and WAMUI version: R1252 SP1

 

This is Pre-production. In production, the number objects are less as compared to pre-production. Please let me know the next steps.

 

Below are some time taking steps in environment

 

1- Adding agent in agent group: Time taken 25 minutes

2-Adding Agent/Agent Group in Realm- Time taken 30 minutes

[tlefam]

are you running SM on Unix or Windows?

 

if you are running the UI on Unix, there is a recommendation to symlink random to urandom.  This is to ensure enough entrophy for SM UI.

 

ln -s /dev/urandom  /dev/random

this should result of

random > urandom

 

however, the prefer way is to setup random number generator daemon (rngd).  if you are using RHEL, take a look at this link -

https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security_Guide/sect-Security_Guide-Encryption-Using_the_Random_Number_Generator.html

 

Hope this help.

[iamlearner2019]

Actually is there a document that provides instructions on fine tuning the WAM UI for better performance as this is one of the common issues that clients have been complaning about? It would be very helpful if there are some kind of instructions provided specially forJBOSS configurations ( i believe that is what needs to be tuned to get faster response on the WAM UI).

[Ujwol]

99.99% of time I have seen the Admin UI slowness related to not having enough entropy on linux based system.

Given that Admin UI doesn't talk to Policy store directly but just reads the local Policy store cache (loaded by Policy server), it comes to eventually how fast is your Policy server performing.

So, if the entropy is enough already next thing I would look at is Policy server performance. So may be capture policy trace logs and run trace analyis tool and watch out for any bottleneck.

Though this may not be necessary, if you want to actually tune the embedded Jboss for performance you can refer :

https://www.redhat.com/f/pdf/JB_JEAP5_PerformanceTuning_wp_web.pdf

[iamlearner2019]

We have the WAM UI installed on Windows OS. Can you provide something similar for Windows OS?

 

Thanks

 

Thanks,

VenkatAnand Katuri

Sr IAM Consultant, COREBLOX LLC

Mobile:+1  (312)-3073937

Office: [phone]

[e-mail]<mailto:[e-mail]>

 

[tlefam]

I don't have the info for Windows.   Hopefully someone that have the info see your post and chime in.  meanwhile, this is the closet response to your ask - https://en.wikipedia.org/wiki/Entropy_(computing)

[Karmeng]

Hi,

 

If this is referring to Windows environment, entropy is not relevant.

My initial suspicious is some indexing on policy store not performed causing the slowness.

When you said slow, do you have quatitative amount that you can share?

How many objects in policy store? This can be checked from smps log when policy server startup.

Did your policy server take time to startup? Do you find any exception from JBoss server log?

 

Regards,

Kar Meng

[mayank.agarwal.1]

Hi Ujowol,

 

The OS is Solaris plus this policy server doesnt even shares load for Policy server traffic. We have dedicated policy server for WAMUI still this issue.