SiteMinder 12.8.07 Policy Servers on Red-Hat 8 uses much higher memory.

Products

• SITEMINDER

Issue/Introduction

The Siteminder Policy Server 'smpolicysrv' process is exhibiting increased memory usage after upgrading to 12.8.07.

The RAM usage may keep increasing until reaching the MAX of ram available.  This condition is remediated by restarting the Policy Server.

Environment

PRODUCT: Siteminder

COMPONENT: Policy Server

RELEASE : 12.8.07

OS: Red Hat Linux 8

Cause

Some protected applications are using SM_USERNESTEDGROUPS, within HTTP_HEADER like this:

WebAgent-HTTP-Header-Variable: SM_USERNESTEDGROUPS=<%userattr="SM_USERNESTEDGROUPS" %>

Core file analysis done by engineering shows it was filled with group DNs, so memory is leaking while retrieving SM_USERNESTEDGROUPS.

Resolution

The attached updated to 'libsmdsldap.so' resolves this issue.  This version of 'libsmdsldap.so' is specific to Siteminder r12.8.7 Policy Server on Linux 8.

This issue is also resolved in the r12.8.8 and higher Policy Server.  

NOTE: IF you upgrade to r12.8.8, you must also apply KB 280876 (See References (below)).  It is recommended to upgrade to r12.8.8.1 or higher which resolves both defects.

 

Additional Information

KB280876: All Groups are Being Authorized when Nested Groups is Enabled in 12.8.8