Shibd process consumes more memory and leads to CPU spike

[Cantor, Scott]

> The main problem over here is, this force us to restart the webserver
> everyday in advance before the issue occurs (As I mentioned earlier it
> occurs in between 4-5 PM, hence we restart at 2PM).

Restarting the web server isn't going to help you if the SP is involved, shibd is a separate process.

There are relatively small leaks in versions prior to 2.5 but to be affected by them on a daily basis you'd have to be doing hundreds of thousands of sessions (not requests, actual unique logins). And they would not occur because of load spikes.

I think you should double check that you're actually in worker mode.
 
> Also my main concerns is your previous statement.
> 
> I am curious to dig deeper into that. Any pointers/suggestion related to
> that would be of much help.

https://wiki.shibboleth.net/confluence/display/SHIB2/SecurityAdvisories

-- Scott