IBM 4.6 manual

IBM Tivoli Identity Manager Version 4.6 for z/OS Performance Tuning Guide Issue Date: 2007 March 02 – First Edition Publication Number: SC23-6536-00[...]

Copyright Notice Copyright IBM Corporation 2007. A ll rights reserved. May only be use d pursu ant to a Tivoli Systems Software License Agreeme nt, an IBM Software License Agreement, or Addendum for Tivoli Produ cts to IBM Customer or License Agreem ent. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval [...]

IBM Tivoli Identity Manager Performance Tuning Guide Page 1 T able of content s Table of contents .............................................................................................................. ........................ 1 About this guide .................................................................................................[...]

Page 2 IBM Tivoli Identity Manager Performance Tuning Guide About this guide This guide identifies some ways to tune your IBM® Tivoli Identity Manager™ system to improv e performance. Who should use this guide Use this guide if you are respo nsi ble for installing or maintaining an IBM Tivoli Identity Mana ger sy stem on z/OS. The following comp[...]

IBM Tivoli Identity Manager Performance Tuning Guide Page 3 1 Introduction The IBM Tivoli Identity Manager product addresses the complex proble m of ide ntity management. Due to the complexity of the problem, it can be challenging to optimize the use of resources by IBM Tivoli Identity Manager – that is, to tune. This tuning guide provid es a sys[...]

Page 4 IBM Tivoli Identity Manager Performance Tuning Guide 1.3.1 Memory All middleware components allo w you to adjust how much memory they will use. When cal culating how to allocate memory to middleware components, ke ep these considerations in mind: • Configuring middleware memory settings too high such that the total configured value exceed [...]

IBM Tivoli Identity Manager Performance Tuning Guide Page 5 2 IBM WebSphere Application Server Regardless of the installation type (sin gle server or cluster), the IBM Tivoli Identity Manager server can b e thought of as two components: WebS phere Application Server (the J2EE application se rver running the application) and the IBM Tivoli Identity [...]

Page 6 IBM Tivoli Identity Manager Performance Tuning Guide by other processes. When the WLM timeout is reached the threa d is killed resulting in the process b eing killed. IBM Tivoli Identity Manager can initiate long-running IIOP requests during processes like recon ciliation s. To allow long-running reconciliations to complete we recommend disa[...]

IBM Tivoli Identity Manager Performance Tuning Guide Page 7 Setting the values 1) Open the Administration Console. 2) Expand the Servers list in the navigation pane. 3) Select Application Servers in the navigation pan e. 4) Select the server to manage. 5) Select Container Services . 6) Select Transaction Services . 7) Change Maximum Transaction Tim[...]

Page 8 IBM Tivoli Identity Manager Performance Tuning Guide 3 IBM Tivoli Identity Manager application The IBM Tivoli Identity Manager application includes seve ral configuration files that provide a n area fo r tuning various parts of the application’ s perfo rmance. These are in the data/ directory under the IBM Tivoli Identity Manager product h[...]

IBM Tivoli Identity Manager Performance Tuning Guide Page 9 Setting the values Edit the enRole.properti es file and update the value of enrole.reconciliati on.threadcou nt to num_recon_threads . 3.2.2 Limiting attributes returned from the adapter Some adapters (such as the adapter for Microsoft Acti ve Directory) can limit the attributes that are r[...]

Page 10 IBM Tivoli Identity Manager Performance Tuning Guide Determining the values max_duration – The maxim um time in minutes that the reco nciliation should run. T o cal culate this value, do an initial run with a very large duration and m easure the time required. Consider setting the maximum duration to 10% above this time. Default value: 60[...]

IBM Tivoli Identity Manager Performance Tuning Guide Page 11 4 IBM Tivoli Identity Manager adapters It is sometimes necessary to tune the IBM Tivoli I dentity Manager adapters wh en doing large provisioning changes or reconciliations. This se ction should su pple ment, not supersede, the documentation includ ed with the adapter. 4.1 Microsoft Activ[...]

Page 12 IBM Tivoli Identity Manager Performance Tuning Guide 5 IBM DB2 Tuning IBM DB2 to run with the IBM Tivoli Identity Manager product involves adjusting the buffer pools, modifying the number of connection s, modifying inter nal database values, ad ding table space, adjusting logs, indexing, and running run stats. The tuning JCL provided applie[...]

IBM Tivoli Identity Manager Performance Tuning Guide Page 13 Setting the values 1) Copy DSN.V8R1M0.NEW .SDSNSAMP(#0 2TIJUZ) to another dataset and/or member for updating. 2) Locate the line containing DSNTIZP and delete everything to the end of the file, inclu ding this line. 3) Locate the IDTHTOIN operand for the DSN6FAC macro. 4) Change the value[...]

Page 14 IBM Tivoli Identity Manager Performance Tuning Guide 5.6 Reorg and Runstats Statistics on the number of rows in the tables and wh at indexes a re available are require d for IBM DB2 to efficiently fulfill queries. It is important to update th ese table and index statistics after large Directory Server Markup Language (DSML) load s, HR feeds[...]

IBM Tivoli Identity Manager Performance Tuning Guide Page 15 5.7 Additional ZPARMS The WebSphere Application Server 6.0 Develo per’ s Guide recommends updating the followi ng ZPARMS in addition to the ones mentioned el sewhere in this docume nt. For more information on these change s, please see the WebSphere Applicati on S erver 6.0 Developer’[...]

Page 16 IBM Tivoli Identity Manager Performance Tuning Guide 6 IBM LDAP Server The IBM LDAP Server is a compone nt of the Integrated Secu rity Service s base element in z/OS R 1.6 and 1.7, not to be confused with the IBM Tivo li Directory Server released with z/OS 1.8. 6.1 APARs The following APARs are recommended to fix insert and update failures [...]

IBM Tivoli Identity Manager Performance Tuning Guide Page 17 Determining the values max_connect ions – The maximum number of connections that the LDAP server will accept. Set this value to 20 more than the enrole.connecti onpool.maxpools ize specified in the enRole.propertie s file. Setting the values 1) Edit GLD.CNFOUT(SLAP DCNF) 2) Modify the m[...]

Page 18 IBM Tivoli Identity Manager Performance Tuning Guide 7 Best practices The IBM Tivoli Identity Manager product can be set up and configured in many ways. The following are some suggested best pract ices to help guide you in setting up your environment. • Each agent modifies the LDAP schema by adding new attributes to supp ort a n ew servic[...]

IBM Tivoli Identity Manager Performance Tuning Guide Page 19 8 Regular maintenance To maintain optimal performance for your IBM Tivo li Identity Manager environment, regular maintena nce is required. • Regularly empty the IBM Tivoli Identity Manager recycle bin. As the number of obje cts in the recycle bin increase LDAP performance can degra de. [...]

Page 20 IBM Tivoli Identity Manager Performance Tuning Guide 9 Other resources You will find the following resources use f ul for further tuning of IBM Tivoli Identity Manager: IBM Tivoli Identity Manager 4.6 Performance Tuning G uide for distri buted: http://publib.boulder.ibm.com/tividd/td/IT IM/SC23-5272-02/en_US/PDF/SC23-5 272-02.pdf z/OS Integ[...]