SiteMinder 12.8.07 Policy Servers on Red-Hat 8 use much higher memory.

Products

• SITEMINDER

Issue/Introduction

The Siteminder Policy Server 'smpolicysrv' process exhibits increased memory usage after upgrading to 12.8.07.

RAM usage may keep increasing until it reaches the maximum available RAM. This condition is remediated by restarting the Policy Server.

Environment

PRODUCT: Siteminder

COMPONENT: Policy Server

RELEASE : 12.8.07

OS: Red Hat Linux 8

Cause

Some protected applications are using SM_USERNESTEDGROUPS, within HTTP_HEADER like this:

WebAgent-HTTP-Header-Variable: SM_USERNESTEDGROUPS=<%userattr="SM_USERNESTEDGROUPS" %>

Core file analysis by the engineering team shows it was filled with group DNs, causing a memory leak while retrieving SM_USERNESTEDGROUPS.

Resolution

The attached update to 'libsmdsldap.so' resolves this issue.  This version of 'libsmdsldap.so' is specific to Siteminder r12.8.7 Policy Server on Linux 8.

This issue is also resolved in the r12.8.8 and higher Policy Server.  

------ NOTE: If anyone upgrades to r12.8.8 release, the siteminder administrator must apply KB 280876 (See References (below)).  It is recommended to upgrade to r12.8.8.1 or higher which resolves both defects.

- KB Document reference (KB 280876):

All Groups are Being Authorized when Nested Groups is Enabled in 12.8.8