By: Mohamad Taheri user 18 Dec 2016 at 3:17 a.m. CST

4 Responses
Mohamad Taheri gravatar
Hi. I use Gluu AuthNZ server for four month, and I don't have any issue, But yesterday I understood my Gluu has problem. RPT Authorization Endpoint (oxauth/seam/resource/restv1/requester/perm) has almost 1724ms delay on response time.(response is complete return RPT) There isn't any important log in wrapper log and oxauth. How can I resolve this?

By Yuriy Zabrovarnyy staff 18 Dec 2016 at 2:01 p.m. CST

Yuriy Zabrovarnyy gravatar
Mohamad, On our test server it takes 64 milliseconds. You can check oxd call for RPT authorization. https://ox.gluu.org/jenkins/job/oxD/278/consoleFull ```2016-12-06 01:56:30,424 TRACE [org.xdi.oxd.server.Processor] Command: {"command":"uma_rp_authorize_rpt","params":{"rpt":"04b16781-fb7d-4f79-a4a3-fe1c5b9ded30/3E49.D01B.6C3E.FEF1.DC5B.8C4A.7F08.9121","ticket":"437dfd6b-beb1-4bc9-aec3-a042fce68973","oxd_id":"b51a0c10-5a4c-44e3-adae-dd7b1915813f"}} 2016-12-06 01:56:30,429 DEBUG [org.xdi.oxd.server.op.RpAuthorizeRptOperation] Try to authorize RPT with ticket: 437dfd6b-beb1-4bc9-aec3-a042fce68973... 2016-12-06 01:56:30,429 TRACE [org.xdi.oxd.server.service.HttpService] Created TRUST_ALL client. 2016-12-06 01:56:30,442 DEBUG [org.xdi.oxd.server.service.UmaTokenService] AAT from site configuration, site: SiteConfiguration{acrValues=[], oxdId='b51a0c10-5a4c-44e3-adae-dd7b1915813f', opHost='https://ce-dev.gluu.org', authorizationRedirectUri='https://client.example.com/cb', applicationType='web', sectorIdentifierUri='null', redirectUris=[https://client.example.com/cb], responseTypes=[code], clientId='@!5A58.AE0D.D383.1E46!0001!E38B.7DBE!0008!6E75.8091.1923.BB9E', clientSecret='b72bce7c-c51d-43f8-b5fd-f78cbd821993', clientJwksUri='', scope=[openid, uma_protection, uma_authorization], uiLocales=[en], claimsLocales=[en], grantType=[authorization_code], contacts=[], aat=72002465-9c16-489a-a47b-78dbff13e7fc, aatCreatedAt=Tue Dec 06 01:56:30 EST 2016, aatExpiresIn=299, pat=c6c9ad8b-1de3-4de2-9c18-c1994040fe21, patCreatedAt=Tue Dec 06 01:56:29 EST 2016, patExpiresIn=299, umaProtectedResources=[UmaResource{id='1481007389736', path='/ws/phone', httpMethods=[GET], scopes=[http://photoz.example.com/dev/actions/view, http://photoz.example.com/dev/actions/all], ticketScopes=[http://photoz.example.com/dev/actions/view]}, UmaResource{id='1481007389776', path='/ws/phone', httpMethods=[PUT, POST], scopes=[http://photoz.example.com/dev/actions/add, http://photoz.example.com/dev/actions/all], ticketScopes=[http://photoz.example.com/dev/actions/add]}, UmaResource{id='1481007389804', path='/ws/phone', httpMethods=[DELETE], scopes=[http://photoz.example.com/dev/actions/remove, http://photoz.example.com/dev/actions/all], ticketScopes=[http://photoz.example.com/dev/actions/remove]}], rpt=04b16781-fb7d-4f79-a4a3-fe1c5b9ded30/3E49.D01B.6C3E.FEF1.DC5B.8C4A.7F08.9121, rptCreatedAt=Tue Dec 06 01:56:30 EST 2016, rptExpiresIn=Tue Dec 06 02:01:30 EST 2016, gat=null, gatCreatedAt=null, gatExpiresIn=null} 2016-12-06 01:56:30,491 TRACE [org.xdi.oxd.server.op.RpAuthorizeRptOperation] RPT is authorized. RPT: 04b16781-fb7d-4f79-a4a3-fe1c5b9ded30/3E49.D01B.6C3E.FEF1.DC5B.8C4A.7F08.9121 2016-12-06 01:56:30,493 TRACE [org.xdi.oxd.server.Processor] Send back response: {"status":"ok","data":{"oxd_id":"b51a0c10-5a4c-44e3-adae-dd7b1915813f"}}``` It's hard to say why exactly it takes so much time on your side, it can be: - big network latency between your client and Gluu AS. (Please try to authorize RPT directly from the same machine where Gluu AS is installed to make sure it is not network); - no ldap indexes on your LDAP Server. - Not enough CPU or memory for Gluu Server, check other processes on this machine. If you configured it properly it should be quite fast. Hope it helps, Yuriy

By Mohamad Taheri user 18 Dec 2016 at 11:34 p.m. CST

Mohamad Taheri gravatar
Thanks Yuri My VM has 6GB RAM and 4 core CPU and this configuration works until last couple of days and as I say just ``` oxauth/seam/resource/restv1/requester/perm ``` has problem. : ( How can I check ldap indexes?

By Yuriy Zabrovarnyy staff 19 Dec 2016 at 5:43 a.m. CST

Yuriy Zabrovarnyy gravatar
Which ldap server do you have ?

By Mohib Zico staff 19 Dec 2016 at 9:36 a.m. CST

Mohib Zico gravatar
>> How can I check ldap indexes? https://gluu.org/docs/reference/ldap/#opendj-indexing