The Dreaded PermGen Error

[Timo Tunturi]

On 11/11/13 6:23 PM, Joshua Riffle wrote:
> We have been getting this error from time to time with our Shibboleth 
> Identity Provider in Tomcat 6 and before you reply to this thread...
>
> 1) Yes I know this is caused by a memory leak and can be 'mitigated' 
> by increasing the max permgen size: 
> https://wiki.shibboleth.net/confluence/display/SHIB2/IdPApacheTomcatPrepare
>
> 2) Or better yet possibly resolved in Tomcat 7: 
> http://wiki.apache.org/tomcat/MemoryLeakProtection
>
> -- What I don't know and would LOVE input on is:
>
> 1) How do you detect or prevent the evil PermGen error beforehand? My 
> understanding is increasing the MaxPermGenSize is only delaying the 
> inevitable memory leak build up.
>
> 2) Better yet: Best practices? What have you already done in your 
> architecture to avoid or defeat this kind of issue?

Restarting just the IdP-context (deploying new war) only has caused 
fatal leakage (to effectively crash tomcat) for me, if done repeatedly. 
That is, a few times in a few minutes.

Using ecmascript in the resolver caused leakage from hell into permgen 
for me. Porting scripts to type mapped or template got rid of that.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131112/110b9a6d/attachment.html