PAM Cluster keeps going out of sync Warning: PAM-CMN-1161
book
Article ID: 125673
calendar_today
Updated On:
Products
CA Privileged Access Manager - Cloakware Password Authority (PA)PAM SAFENET LUNA HSMCA Privileged Access Manager (PAM)
Issue/Introduction
The Session Manager shows as out of sync. After refreshing the session manager status it stayed the same. After restarting the cluster it went out of sync again within a few minutes.
Environment
Release: Component: CAPAMX
Resolution
Analysis of system logs showed that the table going out of sync was g_u in uag. Engineering determined that the problem was caused by devices having too many tags assigned to the device, as many as 75 per device. The true limitation was the size of a MySQL query, which concatenated all the tagIDs. The problem was resolved by changing the configuration to not use so many tags.