You can configure the security cache by specifying a value for the
cacheTimeout property for an independent integration server by updating the
server.conf.yaml
configuration file or, for on an integration node, by using the
mqsichangeproperties command.
About this task
To improve performance, the security manager uses a security cache. Entries are created in the
security cache when a message flow with a security profile performs authentication, mapping, or
authorization. The entries are valid for the length of time that is specified by the
cacheTimeout property of the SecurityCache component after which
the entries are marked as expired.
Procedure
- For an independent integration server:
- Open the configuration file for your integration server
(server.conf.yaml) by using a YAML editor.
You can edit the file by using the built-in YAML editor that is provided in the IBM® App Connect
Enterprise Toolkit, either by double-clicking the file in the Application
Development view or by right-clicking the file and selecting . If you choose to edit the file by
using a plain text editor, ensure that you do not include any tab characters (which are not valid in
YAML) and use a YAML validation tool to validate the contents of your file.
For more information about configuring an integration server, see Configuring an integration server by modifying the server.conf.yaml file.
- Set the security cache timeout property, cacheTimeout, in the
SecurityCache section of the server.conf.yaml
configuration file.
The default value is 60 seconds.
- When you have modified and saved the server.conf.yaml file,
restart the integration server for the changes to take effect.
- For an integration node:
- Use the mqsichangeproperties
command.
For example, to change the value of the security cache timeout parameter,
cacheTimeout, to 200 seconds, use the following
command:
mqsichangeproperties INODE -b SecurityCache -n cacheTimeout -v 200
- Restart the integration node for the change to take effect.