You can improve SiteMinder authentication and authorization performance for large user stores by enabling the CA Directory DXcache feature. A 5 MB user store is considered large.
To enable caching
# cache configuration set max-cache-size = 100; set cache-index = commonName, surname, objectClass; set cache-attrs = all-attributes; set cache-load-all = true; set lookup-cache = true;
Note: The max-cache-size entry is the total cache size in MB. Adjust this value based on the total memory available on the CA Directory server and overall size of the user store. In addition, set the cache-index fields to those fields used by SiteMinder to perform a user search in the user store. For example, if users are authenticated and authorized based on their common name (cn=*), make sure that the commonName is set in the cache-index.
dxserver stop eTrustDsa dxserver start eTrustDsa
Copyright © 2010 CA. All rights reserved. | Email CA about this topic |