DevTest Portal Projects Not Visible and Workstation Performance Issues During LDAP Maintenance

Products

• Service Virtualization

Issue/Introduction

 

The customer encountered a critical issue where projects were not visible in the DevTest Portal and the Workstation performance degraded to an unusable state. 

from portal grails reshub log :

ERROR StackTrace    - Full Stack Trace:retrofit.RetrofitError: 401 Unauthorized    at retrofit.RetrofitError.httpError(RetrofitError.java:39) ~[retrofit-1.6.1.jar:?]    at retrofit.RestAdapter$RestHandler.invokeRequest(RestAdapter.java:382) ~[retrofit-1.6.1.jar:?]    at retrofit.RestAdapter$RestHandler.invoke(RestAdapter.java:240) ~[retrofit-1.6.1.jar:?]    at jdk.proxy3/jdk.proxy3.$Proxy361.getVSEnvironments(Unknown Source) ~[?:?]    at jdk.internal.reflect.GeneratedMethodAccessor516.invoke(Unknown Source) ~[?:?]

 

Environment

Devtest 10.8.3.1 and up

Cause

Investigation revealed that maintenance activity on the LDAP server disrupted connectivity from Keycloak (Identity Access Manager - IAM). This disruption created a performance bottleneck during the authentication phase of REST API calls between the DevTest Portal and the Registry.

IAM server.log : 

 

 

ERROR [org.keycloak.services.error.KeycloakErrorHandler] (executor-thread-6) Uncaught server error: 
org.keycloak.models.ModelException: LDAP Query failed
    at org.keycloak.storage.ldap.idm.query.internal.LDAPQuery.getResultList(LDAPQuery.java:178)
    at org.keycloak.storage.ldap.idm.query.internal.LDAPQuery.getFirstResult(LDAPQuery.java:185)
    at org.keycloak.storage.ldap.LDAPStorageProvider.loadLDAPUserByUsername(LDAPStorageProvider.java...)

Caused by: org.keycloak.models.ModelException: Querying of LDAP failed org.keycloak.storage.ldap.idm.query.internal.LDAPQuery@125b478a
    at org.keycloak.storage.ldap.idm.store.ldap.LDAPIdentityStore.fetchQueryResults(LDAPIdentityStore.java:294)
    at org.keycloak.storage.ldap.idm.query.internal.LDAPQuery.getResultList

 

Resolution

To resolve the immediate performance issue and ensure long-term stability against LDAP connectivity fluctuations, follow these optimization steps:

1. IAM LDAP Timeout Configuration

Optimize connection pooling to prevent hangs during LDAP instability:

1. Navigate to the IAM installation directory.
2. Open the following file for editing: IAM_HOME/bin/IdentityAccessManagerService.vmoptions.
3. Add the following line:

   -Dcom.sun.jndi.ldap.connect.pool.timeout=300000

4. Restart the IAM Service to apply the changes.

2. DevTest  Optimization

• Increase the Registry and Portal service memory to 8GB by updating the service configuration/vmoptions:
   

  -Xms8g -Xmx8g

3. ActiveMQ & Pathfinder Optimization

• Optimize ActiveMQ memory in RegistryService.vmoptions: -Dactivemq.maxMem.mb=2048
• Disable Pathfinder in local.properties: lisa.pathfinder.on=false

The environment should remain stable, and project visibility in the DevTest Portal is restored after applying these optimizations.