Access Gateway Tomcat Crash

Products

• SITEMINDER
• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On Agents (SiteMinder)

Issue/Introduction

Tomcat (java executable) is crashing intermittently with no obvious triggers.

Environment

12.9 Access Gateway on Red Hat

Cause

Access Gateway was receiving a JSON Web Token (JWT) which contained an extremely long 'sub' claim which was roughly 11k bytes.  This caused the Tomcat process to crash.

Resolution

A fix is available for the 12.9 release.  This defect will be corrected in the 12.9.1 release.