Uploaded image for project: 'OpenAM Agents'
  1. OpenAM Agents
  2. AMAGENTS-1486

Agents 5 bootstrap retry settings are not used

    XMLWordPrintable

Details

    • Bug
    • Status: Open
    • Major
    • Resolution: Unresolved
    • 5.0.0.0
    • None
    • Web Agents
    • Version: 5.0.0
      Container: Apache 2.4 Linux 64bit/Centos6

    Description

      Steps to reproduce:
      1. Start hitting the Agent with large numbers of requests.
      2. Change the password in either AM or in the local agent.conf.
      3. Restart httpd.

      The requests will now cause large numbers of calls from Agent to AM as the Agent tries and fails to bootstrap, potentially thousands per minute.

      127.0.0.1 - - [19/Feb/2018:10:11:14 +0000] "POST /openam/json/realms/root/authenticate HTTP/1.1" 401 70
      127.0.0.1 - - [19/Feb/2018:10:11:14 +0000] "GET /openam/json/realms/root/serverinfo/* HTTP/1.1" 200 510
      127.0.0.1 - - [19/Feb/2018:10:11:14 +0000] "POST /openam/json/realms/root/authenticate HTTP/1.1" 401 70

      Step two is not an uncommon mistake made in deployments. It shouldn't cause a big spike in traffic to AM. In the event of multiple failures to bootstrap, the Agent should pause before re-trying.

      Such retry settings are documented in Agents 5.
      https://backstage.forgerock.com/docs/openam-web-policy-agents/5/web-agents-guide/#web-agent-bootstrap-properties

      org.forgerock.agents.init.retry.max
      This is the maximum number of consecutive agent initialization retries.

      org.forgerock.agents.init.retry.wait
      This is the wait time in seconds between retries.

      But not used https://bugster.forgerock.org/jira/browse/AMAGENTS-1123.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              andrew.dunn Andrew Dunn [X] (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated: