HTTP security context cache is full

[Former Member]

Hey Guys,

In our CRM system i could see  below error  in sm21.

HTTP security context cache is full

When checked in the sm05 i could see that there are a lot of session in it and the cashe utilization in 100%.

Insterd of increasing the cashe size and reducing the retention time. Is there any other way to flush out the unwanted sessions?

[alisonv]

check here https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=462054228

[isaias_freitas]

Hello Sandy,

I am not aware of any other options besides the two options you have mentioned (increase the cache size and/or reduce the timeout).

Regards,

Isaías

[Former Member]

Hi Isaias,

I could see lot sessions entries which are like 1 month old .. Is it okay to delete it manually?

[isaias_freitas]

Hello,

I would say you could delete them... I guess it would be highly unlikely that the same user is still logged on with the same session (without logging off / logging on again), right?

What is the value of the parameter "http/security_session_timeout"?

Which is the release and patch level of the SAP kernel in use?

Regards,

Isaías

[Former Member]

Hey Isaias,

http/security_session_timeout value is 1800 sec.

As per my understanding the entries should be flushed out  session entries after every 30 mins of inactivity. but it looks like its not happening. The sessions are showing the start time and the end time. But the session entries are still there in the cashe. (There are a lot of sessions with Session end time  as "After timeout")

Is there any job that flushes  out these outdated  entries?

The Kernel level is 720/500. I know its not supported. This will be updated in the next maintenance activity.

[Johan_sapbasis]

Hi,

Have you checked SAP note 2070011 - Security Context Cache erroneously reported to be full, ITS applications fail it does cover kernel 720 does mention it is only affected by SP710 and you are only on 500.

Kind Regards,

Johan

[Former Member]

Hi Nicolaas,

Its not that the error is throwing erroneously in the system.. I checked in SM05 and it was full with session. The problem is the session are not getting deleted  which are older that 30 mins..

Now as Isaias said, I deleted few of the sessions to free-up some space.

[Johan_sapbasis]

Hi,

Have you checked the dependant parameters:

rdisp/autothtime

rdisp/plugin_auto_logout

http/security_context_cache_size

Is the auto logout active?

Kind Regards,

Johan

[Former Member]

Hey Johan,

Yes I have checked it and all the parameters are set and are having default values.