How to montior and test SiteMinder ACO cache

Products

• CA API Gateway

Issue/Introduction

Layer7 API Gateway register as an agent for SiteMinder and holds some agent configuration values. Could you please let me know:

1. Where is ACO cache located? 

2. How do we monitor its usage and do performance testing for size and age of this cache?

 

Environment

Release : 10.1

Component :

Resolution

The SSO SDK cache is store in the JVM of the gateway under class:  com.ca.siteminder.SiteMinderHighLevelAgent

Logging can be turned up to monitor/test SSO ACO cache 

Can you turn log level to FINE - for SSO 

Two thinks to get FINE 

1, Policy Manager Tasks -> Logging and Auditing -> Manage Log/Audit Sinks

Click SSG -> Properties -> Severity Threshold change to FINE

2. Cluster wide property Add/change Log.level value  

com.l7tech.level = CONFIG

com.ca.siteminder.level = FINE

Log the initialization of the cache: logs the size, age ….

2022-01-24T21:43:58.181+0000 FINE    171 com.ca.siteminder.SiteMinderAgentContextCacheManagerImpl: Initialized new cache: Key{configGoid=f3ea6550053d067ad3d8a582b67f1e1c, agentName='apim-gw_agent'}, resourceCache: size 10, max age 300000; authenticationCache: size 10, max age 3600000; authorizationCache: size 10, max age 3600000; acoCache: size 10, max age 300000

Isprotect call when a resource is first access with a cache miss:

2022-01-24T21:43:58.183+0000 FINE    171 com.ca.siteminder.SiteMinderHighLevelAgent: SiteMinder Resource - cache missed

Same repeated cal resource found in cache:

2022-01-24T21:44:04.058+0000 FINE    177 com.ca.siteminder.SiteMinderHighLevelAgent: Found resource cache entry: ResourceCacheKey{resource='/validate1', action='GET', serverName='}

Authentication cache miss:

2022-01-24T21:44:04.129+0000 FINE    177 com.ca.siteminder.SiteMinderHighLevelAgent: SiteMinder Authorization - cache missed

Repeated authentication found in cache:

2022-01-24T21:44:10.914+0000 FINE    182 com.ca.siteminder.SiteMinderHighLevelAgent: Found SiteMinder Authentication cache entry: AuthenticationCacheKey{sessionId='0yx5auX9vyparD9FN6nxs9MCwFY=', realmOid='06-000615a7-370a-1bdc-b5a2-18ae0aa20000'}

Authorization cache 

2022-01-24T21:44:10.916+0000 FINE    182 com.ca.siteminder.SiteMinderHighLevelAgent: Found SiteMinder Authorization cache entry: AuthorizationCacheKey{sessionId='0yx5auX9vyparD9FN6nxs9MCwFY=', resource='/validate1', action='GET'}