Policy Server is slow to start

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Description:

When starting the policy server, we can see that it takes some time to start because it spends some time on loading objects in its cache.
Oracle directory server 11g is used as Policy Store.

By checking the LDAP logs associated, we can see that the indexes are not used properly and even by recreating the indexes it does not help for queries like:

SRCH base="ou=xps,ou=policysvr4,ou=siteminder,ou=netegrity,o=xxxxxx" scope=2 filter="(&(xpsNumber=*)(!(xpsTombstone=*)))" attrs="objectClass"

Solution:

Using the out of the box XPS/OracleDirectoryServer.ldif indexes does not help in this specific situation and needs to be modified depending on the based structure as the policy store was an upgrade form the 5.x version and did not respect the correct tree.

The script try to add the index on dn:
cn=xps_browsing_index,cn=PolicySvr4,cn=ldbm database,cn=plugins,cn=config
but we haven't this kind of schema. we have this:
cn=xps_browsing_index,cn=Netegrity,cn=ldbm database,cn=plugins,cn=config.

Script need to be accomodated accordingly.

Environment

Release: ESPSTM99000-12.51-Single Sign On-Extended Support Plus
Component: