Hung thread in Websphere JVM for Advanced Authentication Java component

Products

• CA Advanced Authentication
• CA Strong Authentication
• CA Risk Authentication

Issue/Introduction

Advanced Authentication Environment is experiencing hung thread issue intermittently in our WebSphere JVM. 

It seems like it could be due to some kind of deadlock(infinite waiting) when our Authminder/Webfort servers try to connect LDAP and they are not reachable anyhow. In that situation they try to block connections in the connection pool and stops working after some time. What is the the best way to deal with this situation to re-mediate hung threads and flush them automatically if it happens, Otherwise how to set its timeout so that it will throw an exception if it's going to take long but return thread to the pool.

Environment

Release: 9.x
Component: Strong Authentication

Resolution

Perform the following steps to update the LDAP connection pool timeout on IBM WebSphere:

• Log in to WebSphere Administration Console.
• Navigate to Servers > Server Types > WebSphere application servers.
• Click the Server that you want to configure.
• In Server Infrastructure section, click Java and Process Management.
• Click the Process Definition link.
• In the Additional Properties section, click Java Virtual Machine.
• In the Additional Properties section, click Custom Properties.
• Click New to add custom properties.
• Add the configurations that are listed in the following table as name-value pairs in the General Properties section. Repeat the process for every name-value pair:

                com.sun.jndi.ldap.connect.pool.maxsize - 64

                com.sun.jndi.ldap.connect.pool.prefsize  - 32

                com.sun.jndi.ldap.connect.pool.initsize   - 8

                com.sun.jndi.ldap.connect.pool.timeout  - 240000

                com.sun.jndi.ldap.connect.pool.protocol  - plain ssl

                com.sun.jndi.ldap.connect.pool.authentication - simple

• Click Apply.
• Restart WebSphere Application server.