MaxSessionCacheSize ACO parameter is not working as expected

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

For performance reasons, we are implementing the MaxSessionCacheSize ACO parameter to cache user sessions and avoid performing too many calls to Policy Server, however we are noticing the requests for newer users seems to not being cached correctly, and the Agent is calling the Policy Server too soon when the cache is full.

We would expect to see older user sessions to be removed in favor of the new ones.

Environment

Policy Server R12.51 CR01Web Agent R12.51 CR01

Cause

There is a condition that causes the issue, as once the cache is filled, and a new entry needs to be added, the latest 10% of the cache entries are deleted.

Resolution

This is fixed in R12.51 CR08, so upgrading Web Agent to this version will solve the issue.

Additional Information

Documentation - Set the Maximum User Session Cache Size