IdP Java OutOfMemoryError

[Carl Waldbieser]

Bryan,

I'm not sure about IdP v4-- we are still running IdP v3.  Are you able to
interrogate the "/idp/status" resource?  That tells me the "used_memory"
and "maximum_memory" settings of a running instance.  This was especially
useful when we had out of memory issues.  For us, it turned out we had not
configured tomcat to use the available memory.  The status endpoint showed
that the maximum_memory was much less than we actually had allocated for
the host.

Now we are using the containers, which I believe have some reasonable
defaults baked in.  In tomcat's "setenv.sh", I see
"CATALINA_OPTS='-XX:+UseG1GC -Xmx3000m'".  I also see
"JAVA_OPTS='-Xmx3000m'" is set as an environment variable in the Dockerfile
we are using.

Thanks,
Carl Waldbieser
ITS
Lafayette College


On Thu, Sep 17, 2020 at 6:08 PM Bryan K. Walton <
bwalton+1573850983 at leepfrog.com> wrote:

> This morning, our IdP, running 4.0.1 on CentOS 8 (JDK 11), threw a Java
> Out of Memory Error:
>
> Sep 17 11:00:45 idp java[610134]: Exception: java.lang.OutOfMemoryError
> thrown from the UncaughtExceptionHandler in thread "qtp762218386-30247"
>
> About this time, the IdP quit responding to authentication requests. The
> system had plenty of system memory free, at this time.  A restart of the
> shibboleth-idp service restored things to working order.
>
> One thing to note, our IdP is not downloading InCommon's metadata.  Does
> anybody have any suggestions for how we can/should prevent this out of
> memory error?
>
> When I run:
> java -XX:+PrintFlagsFinal -version | grep -iE
> 'HeapSize|PermSize|ThreadStackSize'
>
> It shows that our InitialHeapSize is 60MB. And our MaxHeapSize is 944MB.
>
> Thanks,
> Bryan
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200918/0360a9bf/attachment.htm>