Bug ID 699655: apmd may spend a lot of time initializing AD Query agent that can cause apmd to restart

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
11.6.0, 11.6.1, 11.6.2, 11.6.3,,,,, 11.6.4, 11.6.5,,,, 12.1.2, 12.1.3,,,,,,,, 12.1.4,, 12.1.5,,,, 12.1.6, 14.0.0,,,,,, 14.0.1,, 14.1.0,,,,,, 14.1.2,,,,,,,,, 14.1.3,, 14.1.4,,,,,,, 14.1.5,,,,,

Opened: Dec 21, 2017

Severity: 3-Major


apmd restart. in some rare cases apmd cannot start up restarting in a loop


users are not able to log in


- AD domain contains thousands of groups, so it takes more than 30 seconds to build local group cache for AD Query agent. - BIG-IP is configured with more than one Access Policy, each of them has at least one AD Query agent, every AD Query agent uses the one shared AAA AD Server. - multiple requests sent at the same time, during initialization of apmd more chances to observe the issue when changes to AAA AD Server have being made during group cache update process (that takes a while)


temporarily stop load on the BIG-IP, wait until apmd starts up, run one session, wait until group cache is updated, resume service requests

Fix Information


Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips