Online Help › Configure the General Server Settings › Configure Tomcat Settings

Configure Tomcat Settings

A Tomcat server is embedded in the CA SiteMinder® SPS. The Tomcat server provides a servlet container and servlet engine.

Follow these steps:

1. Navigate to Proxy Service, Advanced Settings.
2. Complete the following fields in the Tomcat Settings section:

   Single-Process Mode

   Specifies how the CA SiteMinder® SPS creates Low Level Agent Worker Process (LLAWP) at runtime. The following are the possible values:

   Yes

   Specifies that the Web Agent uses local resources rather than shared operating system resources offered by the LLAWP to operate. No separate LLAWP processes are started in single-process mode. When multiple virtual hosts run, single-process mode results in an increase in the memory footprint of the CA SiteMinder® SPS Java process. This mode is supported only for host servers that run as a single server process.

   No

   Specifies that the LLAWP framework spawns a process for every virtual host. As the multiple-process mode uses shared memory, the CA SiteMinder® SPS uses shared operating system resources for logging, caching, and monitoring of multiple web server processes.

   Add Quotes to Cookie

   Specifies that the CA SiteMinder® SPS must enclose the cookie parameter value in double quotes when the value is not zero. Select no if you do not want the CA SiteMinder® SPS to add double quotes around the cookie value before sending it to the backend.

   Worker AJP Port

   Specifies the port for the ajp13 connector.

   AJP13 Host

   Specifies the local ajp13 host as the local host.

   Worker AJP Connection Count

   Defines the number of requests waiting in the queue when all possible request processing threads are in use. Any requests received when the queue is filled are refused.

   Default: 10

   Minimum Spare Threads

   Defines the minimum number of idle threads at any time, waiting for new requests to arrive. This value must be greater than 0.

   Default: 10

   Maximum Spare Threads

   Defines the maximum number of concurrent connections possible, the pool does not create more connections than this number of threads.

   Default: 100

   Worker AJP Reply Timeout

   Specifies the maximum time in milliseconds that can elapse between any two packets received from the proxy engine after which the connection between HTTP listener and the proxy engine is dropped. If this value is 0, the CA SiteMinder® SPS waits indefinitely until a response is received.

   Default: 0

   Worker AJP Retries

   Specifies the maximum number of times that the worker sends a request to the proxy engine in a communication error.

   Default: 2

   Worker AJP Connection Pool Timeout

   Defines the maximum time, in seconds, that the idle connections between apache and tomcat over mod-jk remain in the connection pool before timing out. If the value is 0, the connections never timeout.

   Default: 0

   Worker AJP Max Packet Size

   Defines the maximum packet size in Bytes. The maximum value is 65536.

   Default: 8192

   SSL Settings Version

   Determines the SSL versions supported by the CA SiteMinder® SPS.

   SSL Settings Ciphers

   Specifies the list of ciphers that can be enabled or disabled. If a cipher is enabled, it is preceded by a + symbol. If a cipher is disabled, it is preceded by a - symbol. If you specify more than one cipher, separate each entry by commas.

   Request Header Charset

   Specify the character set for the appropriate locale. The HttpClient application reads this value to determine how to encode the headers to send to the backend server. The following are the possible values:

   US-ASCII

   Specifies the locale uses US English

   Shift_JIS

   Specifies the locale uses Japanese, including support for Japanese usernames.

   Default: US-ASCII

   SSL Maximum Cache Time

   Specifies the duration, in milliseconds, that the SSL session ID is cached for re-use by the SPS HTTPS client. When a user requests a file via an HTTPS connection, an SSL handshake occurs and an SSL session ID is created. This SSL session ID is used by CA SiteMinder® SPS and the backend server to identify a user session. When the HTTPS connection is terminated for the user, CA SiteMinder® SPS caches the SSL session ID for the maximum duration specified by this parameter. When the same user requests a new HTTPS connection to the backend server, the user can send the SSL session ID that is cached for a faster response. In this case, the SSL session ID provided by the user is compared with the cached SSL session ID. If the SSL session ID is available in cache, the new HTTPS connection is established faster.

   Default: 120000 milliseconds

   Ignore Backend SSL Exception

   Specifies that CA SiteMinder® SPS ignores the benign SSL exceptions when the backend web server returns the disconnect notification to CA SiteMinder® SPS.

3. Click Save.