Configuration to reduce vasd CPU usage:
- Join in workstation mode or set workstation mode. For more information of workstation mode read What are the advantages of workstation mode? (72001)
- With workstation-mode-users-preload set to groups of system admins and whoever actively uses the system.
- lazy-cache-update-interval = 120
- ws-resolve-uid = true
- negative-cache-lifetime = 600
- workstation-mode-groups-skip-update = true
- touch /var/opt/quest/vas/vasd/.disable_ac_group_updating
- Disable vgptool. ( Move off the binary. mv /opt/quest/bin/vgptool /opt/quest/bin/vgptool.orig )
- rm /var/opt/quest/vas/vasd/.disable_ac_group_updating
mv /opt/quest/bin/vgptool.orig /opt/quest/bin/vgptool.
- Wait two hours.
- Then redo steps 7 and 8 from above.
Things to note:
- It will still do work if someone logs in or a lot of things are asked about.
- If there are a lot of requests for unknown QAS users/groups, mainly NSS requests, a newer version is much more efficient.
- It will be out of date for a lot of things. ( Until a user logs in. Then that one user is up to date. )
- If Authentication Services is configured incorrectly it will still use CPU. ( Bad users.allow /deny/ override entries. )
Please refer to the vas.conf man page for more information on the configuration settings:
#/opt/quest/bin/vastool configure vas vasd workstation-mode-users-preload [\]
#/opt/quest/bin/vastool configure vas vasd lazy-cache-update-interval
#/opt/quest/bin/vastool configure vas vasd ws-resolve-uid
#/opt/quest/bin/vastool configure vas vasd negative-cache-lifetime
#/opt/quest/bin/vastool configure vas vasd workstation-mode-groups-skip-update