-
Title
Authentications start failing or high cpu usage.vastool status:WARNING:720 more then 20 vasd sockets -
Description
Authentication failures start happening.
All users no longer can login.
Authentication fails.
Vasd high cpu usage.
In the debug log the following error occurrs:
In the messages file the following messages may be seen:
"vas_ipc_recv() failed: error=145, msg=Connection timed out"
vas_ipc_recv() failed: error=78, msg=A remote host did not respond within the timeout period.
vasd[x]: AuthChild::HandleGetNextMessageFailure Error processing message. rc=71 ("Protocol error")
Eventually users won't be able to login without restarting vasd.
The "vastool status" output may also include the following message about too many sockets:
"WARNING: 720 more then 20 vasd sockets, has <COUNT> open" -
Cause
Product defects:
Version 4.1.0.20185 had several memory leak issues that have been resolved in the maintenance release.
314594:vasd: Stop vasd auth daemon file descriptor leak when unknown session is requested.
369657 fixed in 4.1.0.21110vasd: Fix fd leak under certain server unreachable situations.724526* vasd: Full buffer timeout now scales with vascache-ipc-timeout. Better handlesheavy loads. Also reduced kernel load under those situations.
NOTE: The Authentication Services code has many performance improvements since 4.1.0.x. It is recommended if you are running client version of QAS 4.1.0.x to upgrade to the latest maintenance release as soon as possible. In 4.1.0 we added the 'auth daemon'. It took till 4.1.5 to really make it efficient for heavy login situations. If you have a heavy load server we highly recommend version 4.1.5 and up. -
Resolution
STATUS: Fixed.
WORKAROUND:
Restart vasd daemon by doing the following command:
/opt/quest/bin/vastool daemon restart vasd
RESOLUTION:
Upgrade to latest Authentication Services Maintenance version and then reboot. Please go to https://support.oneidentity.com/authentication-services/download-new-releases to download the latest software.
The Changelog.txt describes the defects fixed. A reboot or a restart of any process using the vasd libraries may be required to free up leaked resources after upgrading.
-
Change Request
314594