Zurück
-
Titel
How to reduce vasd CPU usage. Configuring QAS in large environments. -
Beschreibung
There may be circumstances where there are concerns about CPU usage on a system and it is required that Authentication Services usage be as low as possible. This configuration guide is for those types of cases. This is not for cases where there are CPU spikes of 100% or even general high CPU. This is for when Authentication Services is already using what would normally be considered an acceptable level of CPU and that needs to be reduced. -
Lösung
Configuration to reduce vasd CPU usage:
- Join in workstation mode or set workstation mode. For more information of workstation mode read What are the advantages of workstation mode? (72001)
- With workstation-mode-users-preload set to groups of system admins and whoever actively uses the system.
- lazy-cache-update-interval = 120
- ws-resolve-uid = true
- negative-cache-lifetime = 600
- workstation-mode-groups-skip-update = true
- touch /var/opt/quest/vas/vasd/.disable_ac_group_updating
- Disable vgptool. ( Move off the binary. mv /opt/quest/bin/vgptool /opt/quest/bin/vgptool.orig )
After market hours, do:
- rm /var/opt/quest/vas/vasd/.disable_ac_group_updating
mv /opt/quest/bin/vgptool.orig /opt/quest/bin/vgptool. - Wait two hours.
- Then redo steps 7 and 8 from above.
Things to note:- It will still do work if someone logs in or a lot of things are asked about.
- If there are a lot of requests for unknown QAS users/groups, mainly NSS requests, a newer version is much more efficient.
- It will be out of date for a lot of things. ( Until a user logs in. Then that one user is up to date. )
- If Authentication Services is configured incorrectly it will still use CPU. ( Bad users.allow /deny/ override entries. )
Please refer to the vas.conf man page for more information on the configuration settings:
#/opt/quest/bin/vastool configure vas vasd workstation-mode-users-preload [\]
#/opt/quest/bin/vastool configure vas vasd lazy-cache-update-interval#/opt/quest/bin/vastool configure vas vasd ws-resolve-uid#/opt/quest/bin/vastool configure vas vasd negative-cache-lifetime#/opt/quest/bin/vastool configure vas vasd workstation-mode-groups-skip-update