Memory Usage

[Zmuda, Matthew R]

Yes two login context entries are added that are almost identical. See the attached file.
One by SSOProfileHandler.performAuthentication, the other by AuthenticationEngine(AuthenticationEngine).startUserAuthentication both using HttpServletHelper.bindLoginContext

This is in V2.3.3 of IDP.

I also see 1 ReplyCache added.

When user authenticates only the second LoginContextEntry is cleared. The first one added sticks around until it expires. Same with Reply Cache.

We may at some point have a very large amount of users simultaneously using our system. So I need to fine tune this to clear our as much data as we can without affecting the integrity of the security.

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Chad La Joie
Sent: Friday, February 03, 2012 1:11 PM
To: Shib Users
Subject: Re: Memory Usage

On Fri, Feb 3, 2012 at 11:21, Zmuda, Matthew R <Matthew.R.Zmuda at td.com> wrote:
> I'm also noticing when user arrived at IDP, 2 LoginContextEntry and 1
> ReplayCacheEntry are added.

What do you mean you are "noticing" 2 login context entires?

> I'm hoping to free up memory a quickly as possible without posing security
> risks.

Are you noticing some sort of memory constraint?  At this point, sans
loading huge (hundreds of MBs) of metadata, the IdP runs at a steady
state of about 20MB of memory usage.

-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

NOTICE: Confidential message which may be privileged. Unauthorized use/disclosure prohibited. If received in error, please go to www.td.com/legal for instructions.
AVIS : Message confidentiel dont le contenu peut être privilégié. Utilisation/divulgation interdites sans permission. Si reçu par erreur, prière d'aller au www.td.com/francais/avis_juridique pour des instructions.
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: LoginContextEntry.txt
Url: http://shibboleth.net/pipermail/users/attachments/20120203/8ac85e3c/attachment.txt