By: Tejesh Khimani user 19 Nov 2018 at 7:31 a.m. CST

4 Responses
Tejesh Khimani gravatar
Hi Team, We have configured Cache Refresh & backend LDAP. And for Users to login, we have configured backend LDAP in Managed Authentication. Oftentimes, we are getting Proxy Error while User tries to login. After few tries User is able to login. I'm wondering what would be the issue here. Points I would like to hilght is that: 1.In Cache Refresh, I have set 2 minutes polling interval. 2.In Managed Authentication, I haven't replaced the Gluus's default LDAP, instead i have added extrenal LDAP as addtional Server. So both LDAP's are in place. 3.In managed authentication->Default Authentication Method selected are "Default acr=basic" & "oxTrust acr=auth_ldap_server". 4.Cache refresh is working fine. Whenever, i add any new users in external LDAP, those are getting syncd & can be seen in Manage People. Please let me know ,if you can identify the issue based on the provided details & help me to resolve the issue. Thanks

By Michael Schwartz Account Admin 19 Nov 2018 at 8:12 a.m. CST

Michael Schwartz gravatar
1. 2 minute polling interval is pretty low. I would suggest 5-15 minutes 2. Make sure you have enough file descriptors. 65k is required. If `# ulimit -n` shows 1024 or 4k, it's too low. This is normally the root cause of a proxy error. Having a short refresh interval is probably make the problem worse, as you are generating lots of connections.

By Tejesh Khimani user 20 Nov 2018 at 5:39 a.m. CST

Tejesh Khimani gravatar
Hi Michael, Thanks for the quick response. 1. Should I update FD limit at Machine level or at Gluu Contrainer level or both? command Output of Machine Level & Gluu container level: [root@sso ~]# ulimit -Hn 4096 [root@sso ~]# ulimit -Sn 1024 And, when I vi(i.e., open) the file at 'Machine Level' "vi /etc/security/limits.conf" there is not limit set. However, within 'Gluu Container' when i vi the file, i could see below limits: ldap soft nofile 131072 ldap hard nofile 262144 apache soft nofile 131072 apache hard nofile 262144 jetty soft nofile 131072 jetty hard nofile 262144 2. Output of "cat /proc/sys/fs/file-max" is 383654. is this fine or should i reduce to 65K? 3. In file /etc/pam.d/login I should add "session required pam_limits.so", but not sure whether at Machine level or gluu container level or at both? Also, can you tell me what is the purpose of adding above line? will there be any restriction when i login to machine via SSH? Kindly help me to resolve this. Thanks

By Mohib Zico staff 25 Nov 2018 at 3:23 a.m. CST

Mohib Zico gravatar
Tejesh, Along with ulimit, make sure you have enough memory allocations for `identity`, `oxauth` and `idp`. They are in /etc/defaults/ inside container.

By Tejesh Khimani user 11 Mar 2019 at 4:36 a.m. CDT

Tejesh Khimani gravatar
Hi, I have modifed all the settings as above. But still i'm getting proxy error frequently. Kindly help to resolve this issue. Thanks