After upgrade to 14.1 ADC GUI response is slow resulting in operation timeout with tacacs auth
book
Article ID: CTX585679
calendar_today
Updated On:
Description
>After upgrading Citrix ADC to version 14.1-8.50 from version 13.1, users are facing management GUI access issue with Tacacs authentication. Almost all pages are opening very slowly and are giving error Operation timeout.
>Disabling RbaOnResponse resolves the issue as a workaround

Resolution
- Please follow the below steps to apply the solution after login to the ADC.
>shell
#sysctl -w netscaler.aaad_max_workers=1024
#killall -SIGKILL nsaaad
- To check the current value run below command
#sysctl -a | grep netscaler.aaad_max_workers
- Add the same command in the file /nsconfig/rc.netscaler to persist the reboots.
Problem Cause
When RbaOnResponse is enabled, each command execution triggers an nsaaad process for authorization. In the latest version there is a limitation introduced with the maximum concurrent nsaaad processes to 512 to manage CPU usage. However, during quick page switching in the GUI, the command execution count surpasses this limit, leading to dropped authorizations and causing the 'operation timeout' issue.
Was this article helpful?
thumb_up
Yes
thumb_down
No