Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-13790

AuthN, ForceAuth and Step Up Scenarios incur a large number of CTS MODIFY operations which is highly inefficient

    Details

    • Type: Improvement
    • Status: Open
    • Priority: Critical
    • Resolution: Unresolved
    • Affects Version/s: 14.0.0, 14.1.0, 14.1.1, 14.5.1, 5.5.1, 6.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.0.0.4
    • Fix Version/s: None
    • Component/s: authentication, session
    • Labels:
    • Target Version/s:
    • Support Ticket IDs:

      Description

      Authentication, ForceAuth and Step Up scenarios incur at least 8 MODIFY operations, each replacing the large CoreTokenObject attribute. This occurs each and every time these flows are executed and is amplified if PAPs are used which create/modify/delete session properties. The end result of this is customers are running out of disk space on the RS nodes due to the huge size of the resulting changelogDB containing many replacements of the CoreTokenObject attribute.

      The request is to look to optimise this to make a single MODIFY at the end of all the above processes.

      Attached is a sample access and audit look illustrating these modifies. This code snippet is also useful:

      LoginState.java:
      
      updateSessionProperty("AuthLevel", upgradeAuthLevel);
      updateSessionProperty("AuthType", upgradeModuleList);
      updateSessionProperty("Service", upgradeServiceName);
      updateSessionProperty("Role", upgradeRoleName);
      InternalSession session = getReferencedSession();
      session.setIsSessionUpgrade(true);
      

        Attachments

        1. access.1
          26 kB
        2. audit.1
          18 kB
        3. authN_ForceAuth_validate_session_AM1.sh
          6 kB

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                shokard Darinder Shokar
              • Votes:
                1 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                • Created:
                  Updated: