AdminUI 100% CPU

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• SITEMINDER

Issue/Introduction

 

We're running and AdminUI and we see the JVM starting to use 100% of
the machine CPU until we stop it and start it over.

The process in memory looks like this :

  smuser   32267 32198  2 11:14 ?        00:10:07 

  /opt/CA/siteminder/adminui/runtime/bin/java 
  -D[Standalone] -server -Xms4096m -Xmx4096m -XX:MaxPermSize=768m -XX:-UseGCOverheadLimit 
  -Dcom.sun.jersey.server.impl.cdi.lookupExtensionInBeanManager=true 
  -Djavax.net.ssl.keyStore=/opt/CA/siteminder/adminui/standalone/configuration/keyStore.jks 
  -Djavax.net.ssl.keyStoreType=jks -Djavax.net.ssl.keyStorePassword=changeit 
  -Djavax.net.ssl.trustStore=/opt/CA/siteminder/adminui/standalone/configuration/trustStore.jks 
  -Djavax.net.ssl.trustStoreType=jks -Djavax.net.ssl.trustStorePassword=changeit 
  -Dorg.jboss.boot.log.file=/opt/CA/siteminder/adminui/standalone/log/server.log 
  -Dlogging.configuration=file:/opt/CA/siteminder/adminui/standalone/configuration/logging.properties 
  -jar /opt/CA/siteminder/adminui/jboss-modules.jar -mp /opt/CA/siteminder/adminui/modules org.jboss.as.standalone 
  -Djboss.home.dir=/opt/CA/siteminder/adminui -Djboss.server.base.dir=/opt/CA/siteminder/adminui/standalone 
  -c standalone-full.xml -b 127.0.0.1 -Dnete.j2ee.vendor=jboss

How can we fix that ?

 

Environment

 

AdminUI 12.8SP3 on RedHat 7;

 

Cause

 

At first glance, there's a known issue fixed in Policy Server 12.8SP4
which matches exactly your description :

Defects Fixed in 12.8.04

  01285389 DE403891 Administrative UI becomes unresponsive and consumes
  heavy CPU capacity.

https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-identity-and-access-management/single-sign-on/12-8/release-notes/service-packs/Defects-Fixed-in-12_8_04.html

 

Resolution

 

Upgrade the AdminUI to 12.8SP4.

Note that in order to run AdminUI 12.8SP4, you do need to upgrade
Policy Server 12.8SP4 and upgrade the Policy Store data from the
Policy Server files 12.8SP4.