PAM Cluster keeps going out of sync Warning: PAM-CMN-1161

Article Id: 125673

Status: Published

Updated On: 01-02-2019 07:19

Products:

CA Privileged Access Manager - Cloakware Password Authority (PA) , PAM SAFENET LUNA HSM , CA Privileged Access Manager (PAM) , CA Privileged Access Manager (PAM)

Issue/Introduction:

The Session Manager shows as out of sync. After refreshing the session manager status it stayed the same. After restarting the cluster it went out of sync again within a few minutes.

Environment:

Release:
Component: CAPAMX

Resolution:

Analysis of system logs showed that the table going out of sync was g_u in uag. Engineering determined that the problem was caused by devices having too many tags assigned to the device, as many as 75 per device. The true limitation was the size of a MySQL query, which concatenated all the tagIDs. The problem was resolved by changing the configuration to not use so many tags.