Problem with tomcat hanging on Shib 2.4

Nguyen, Thai tqnguyen at usfca.edu
Fri Aug 29 14:23:50 EDT 2014


Hi John,

I have two suggestions here:
1. I saw a couple of replies to suggest staying away from OpenJDK. I don’t have anything to say about OpenJDK since I don’t use it. However, I don’t have any problem with Oracle JDK so I also suggest you to use Oracle JDK.
2. Your HEAP size is only 1G and you already allocate half of it to Permanent generation which leaves only 512M to the rest (Young + Old generations). That’s may cause the problem. If your OS have more memory I would suggest to allocate at least 2G for the HEAP and keep the Permanent generation to just 128M. Only when you had the PermGen OutOfMemoryError then you need to increase the Permanent generation.
Also make sure that your Tomcat endorsed the jar files that mention in Shibboleth 2.4

Here is my environment:
10366 Bootstrap -Djava.util.logging.config.file=/opt/apache-tomcat-7.0.54/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -Xms2048m -Xmx2048m -XX:MaxPermSize=128m -Djava.endorsed.dirs=/opt/apache-tomcat-7.0.54/endorsed -Dcatalina.base=/opt/apache-tomcat-7.0.54 -Dcatalina.home=/opt/apache-tomcat-7.0.54 -Djava.io.tmpdir=/opt/apache-tomcat-7.0.54/temp

java version "1.7.0_60"
Java(TM) SE Runtime Environment (build 1.7.0_60-b19)
Java HotSpot(TM) 64-Bit Server VM (build 24.60-b09, mixed mode)

On a busy day our single IdP run on a VM serves: (out put from loganalysis.py)
5620 unique userids
10455 logins

I had no idea how many users your server handles.

Nguyen, Thai
tqnguyen at usfca.edu



On Aug 28, 2014, at 4:49 PM, John Kamminga <jkamminga at ucmerced.edu> wrote:

> We’ve migrated our production Shibboleth environment from Solaris 10 to Redhat 6 and are now experiencing problems with the app becoming unresponsive every couple weeks. A tomcat reboot fixes it, but we’d like to find out what is causing it. Has anyone else experienced issue migrating to or running on Redhat 6?
> Or, does anyone see any potential problems with our setup?
>  
> Here is our environment setup on a Redhat VM.
> Redhat Linux version: 2.6.32-431.20.3.el6.x86_64
>  
> Shibboleth Idp 2.4
>  
> Tomcat  6.0.24
> JAVA_OPTS=" -Xmx1024M -XX:MaxPermSize=512M -server -Djava.library.path=/usr/lib64 -Djavax.net.ssl.trustStore=/jdk/cacerts"
>  
> Java -version:
> java version "1.7.0_55"
> OpenJDK Runtime Environment (rhel-2.4.7.1.el6_5-x86_64 u55-b13)
> OpenJDK 64-Bit Server VM (build 24.51-b03, mixed mode)
>  
> Thanks,
> John Kamminga
> Web Application Development
> Information Technology Department
> University of California, Merced
> T: 209.228.2965
> E: jkamminga at ucmerced.edu
> W: it.ucmerced.edu
>  
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140829/5a352890/attachment.html 


More information about the users mailing list