The vasd process is using a high amount of CPU.
In some instances, vasd debug may show a lot of check_access output repeated for hundreds of users and over a long period of time such as:
Feb 12 10:58:02 joe_user daemon:debug vasd: check_access_cached: allowed file does exist, user_allowed = 0, group_allowed = 0, ou_allowed = 0, realm_allowed = 0, userWorkstations_allowed = 0
Product Defect 27914:
.* vasd: When processing ac files, ignore duplicates instead of marking theprocessing invalid triggering another processing in 30 seconds, over and over.
The duplicate id's in the users.allow file cause vasd to process the users.allow file over and over and utilize a high amount of CPU.
Operating system configuration - Ulimit or maximim number of files limit
1 - Edit the /etc/opt/quest/vas/users.allow file
Remove the duplicate
The defect is fixed in QAS 220.127.116.11 and up
Upgrade to QAS latest Maintenance Release.
Please go to https://support.oneidentity.com/authentication-services/download-new-releases
Increase the number maximum of open files.
For instructions please refer to the operating system vendor's documentation.