Bug ID 1113385: Expired REST tokens are not getting deleted from /var/run/pamcache on standalone BIG-IP

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
13.1.5, 13.1.5.1, 14.1.5, 14.1.5.1, 14.1.5.2, 15.1.5, 15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 16.1.3, 16.1.3.1, 16.1.3.2, 17.0.0, 17.0.0.1

Fixed In:
17.1.0, 17.0.0.2, 16.1.3.3, 15.1.8.1, 14.1.5.3

Opened: Jun 10, 2022

Severity: 3-Major

Symptoms

REST tokens which are present in /var/run/pamcache on BIG-IP are not deleted after token expiration when there are a large number of tokens.

Impact

More memory will be used as /run/pamcache is an in memory filesystem

Conditions

When a large number of tokens are generated.

Workaround

Try to remove token files from /run/pamcache manually. You can check what would be deleted by the command below by using -print in place of -delete # find /run/pamcache -regextype posix-extended -type f -regex '/run/pamcache/[A-Z0-9]{26}' -delete Restart httpd processes: bigstart restart httpd

Fix Information

Expired token are removed from /run/pamcache by the BIG-IP system.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips