RACF Explore - Status - In Progress, Slow performance takes 1 hour to complete

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

The scheduled Explore of RACF job takes up to 1 hour to complete. The status is not reported back to CA IDM and the task remains in progress. The Task goes into fail status when idm is restarted.

Environment

Release : 14.2

Component : CA IDENTITY SUITE (VIRTUAL APPLIANCE)

Resolution

Changes to syscnt.conf file

net.ipv4.tcp_keepalive_intvl = 15
net.ipv4.tcp_keepalive_probes = 5
net.ipv4.tcp_keepalive_time = 45

to

net.ipv4.tcp_keepalive_intvl = 1
net.ipv4.tcp_keepalive_probes = 1
net.ipv4.tcp_keepalive_time = 3

Be sure to run sysctl -p after making the changes, and confirm that the new settings are in place with "sysctl -a | grep net.ipv4.tcp_keepalive"

The first three values of 45, 15 and 5 we are looking at IDM application detecting dead TCP connections after 120 seconds (45 + 15 + 15 + 15 + 15 + 15). The new settings 3, 1, 1 make it 4secs.