High times SmAuthUser.cpp called OAuth Authentication - Policy Server

Products

• SITEMINDER

Issue/Introduction

When running Policy Server, under load, the OAuth Authentication processing takes time to process.

The time is spent mostly in the SmAuthUser.cpp class, line 782 FedOAuthScheme.

With the XPS traces, the time spent is related to handling the GUID and searching the data.

Transaction taking 2 seconds:

[05/22/2023][15:21:58.944][7298][140375545071360][ FedOAuthAuthScheme::authenticate: Enter into OAuth authentication processing][SmAuthUser.cpp:782][15:21:58][ServerTrace][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][Enter into OAuth authentication processing][][][][][][][][][][][][][]

[05/22/2023][15:21:58.945][7298][140375545071360][
CA.XPS::Administrator: set GUID
(<value>)][XPSDDClass.cpp:878][15:21:58][New][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]

__[05/22/2023][15:21:58.945][7298][140375545071360][ Exit New][][15:21:58][New][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]

__[05/22/2023][15:22:00.847][7298][140375545071360][ Enter Search][XPSPolicyData.cpp:976][15:22:00][Search][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]

[05/22/2023][15:22:00.847][7298][140375545071360][ Enter Search][XPSPolicyData.cpp:1089][15:22:00][Search][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]

[05/22/2023][15:22:00.848][7298][140375545071360][ FedOAuthAuthScheme::authenticate: Attribute mapping is not enabled. Returning all attributes.][SmAuthUser.cpp:782][15:22:00][ServerTrace][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][Attribute mapping is not enabled. Returning all attributes.][][][][][][][][][][][][][]

 

Environment

 

Policy Server 12.8SP5 on Google Cloud;

 

Cause

 

The Policy Server is trying to get the OAuth provider objects from Policy Store. After fetching the Policy Store objects, the Policy Server is again trying to resync (Rechecking the all the objects with Policy Store), this Resync is taking time to compare objects with the Store.

This Resync is really not needed again. This double check Resync call has been removed, and then the performance gets improved.

 

Resolution

 

Upgrade the Policy Server to 12.8SP8 to benefit from fix DE566773.