Last Modified: Oct 06, 2020
See more info
Known Affected Versions:
11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8
Opened: Dec 08, 2015
Related AskF5 Article: K55561335
Under heavy authentication requests from tmm with a slow or down back-end authentication server, the apd accept connection queue could get full, resulting in apd logs: AD module: authentication with '1439805563539620' failed: Too many open files.
Authentication failures; might bring authentication rate down to zero.
- Incoming authentication request to apd (from tmm) is very high. - Back-end authentication server is slow or down.
Adjust the value of connhwm, connlwm and soconnmax values using tmsh commands. - To set the value to 1024, use the following command: sysctl -w net.core.somaxconn=1024. - Change Low water mark first using the following command: tmsh modify sys db apm.apd.connlwm value 480. - Change highwater mark next using the following command: tmsh modify sys db apm.apd.connhwm value 512.
Values of high-water and low-water mark for the 'apd' pending request queue now handle requests as expected.