Increase memory for RADIUS server

If the SecureAuth RADIUS server stops sending responses or is down, the administrator might see the following message in the log file:

java.lang.OutOfMemoryError : (...)
Symptom

SecureAuth RADIUS administrator is seeing memory errors in the logs.

Cause

SecureAuth RADIUS server installer might not have assigned enough memory to the service.

Resolution

  • Check the default value that the Java virtual machine (JVM) provided to SecureAuth RADIUS as the maximum heap size.

  1. Open a Windows command shell as the administrator.

  2. Change directory to SecureAuth-RADIUS_directory\bin\serverJre\jre\bin, for example:

    cd C:\Program Files\SecureAuth Corporation\SecureAuth IdP RADIUS Agent\bin\serverJre\jre\bin

  3. View the maximum heap size by running the following command:

    java -XX:+PrintFlagsFinal -version | findstr /i "MaxHeapSize" You will see the value in bytes.

  • Increase the maximum heap size for the SecureAuth RADIUS server.

    As a guide for increasing the maximum heap size, set the value to use one-half to three-quarters of the Windows server size.

  1. Open a Windows command shell as the administrator.

  2. Stop the RADIUS service:

    sc.exe stop secureauthRadius

  3. Open the installServiceBundledJRE.bat file with a text editor, such as Notepad. The file is located in the bin directory:

    SecureAuth-RADIUS_directory\bin\installServiceBundledJRE.bat

  4. Specify the maximum heap size.

    Search for the following line:

    --Startup=auto ^

    Specify the appropriate maximum heap size, 4GB in the following example, by adding the following line:

    --JvmOptions=-Xmx4G ^ where:

    -Xmx specifies the maximum heap size; append the letter k or K to indicate KB, m or M to indicate MB, g or G to indicate GB

    The default value depends on the platform; for example, use -Xmx4G to specify a maximum heap size of 4 GB.

  5. Save and close the installServiceBundledJRE.bat file.

  6. Change directory to SecureAuth-RADIUS_directory\lib\

  7. Copy the names of the two jar files in the lib directory:

    radius-server-core-release-version.jar

    secureauth-radius-core-version.jar

  8. Open a Windows command shell as the administrator.

  9. Change directory to where you have installed the SecureAuth RADIUS server, for example:

    cd C:\Program Files\SecureAuth Corporation\SecureAuth IdP RADIUS Agent

    Depending on the SecureAuth RADIUS server version, the following are some other default directories:

    C:\Program Files (x86)\SecureAuth Corporation\SecureAuth IdP RADIUS Agent

    C:\idpRADIUS

  10. Substitute the values that you copied in step 7 when you run the following command:

    bin\\installServiceBundledJRE.bat secureauth-radius-release-version.jar radius-server-core-core-version.jar

  11. Start the RADIUS service with the following command:

    sc.exe start secureauthRadius

In this section: