Symantec Access Management

  • 1.  Unable to register Admin UI with Policy server(creating trusted relation)

    Posted Mar 23, 2010 03:01 AM
    Hi,I am trying to install Siteminder.I have ADAM for the directory service.I've configured the PolicyStore as well.Ran the command XPSRegClient.But Iam not able to log into the Administrative UI.Iam getting the error : No registratoin on file .XPSRegClient error log :.......CA-XPS:LDAP0014(ERROR) : Error occurred during "SearchExt" for "(xpsNumber=*)", text: Unavailable critical extension
    CA-XPS:XPSIO008(INFO) : 0 object(s) loaded from the Policy Store.
    CA-XPS:LDAP0014(ERROR) : Error occurred during "Modify" for "xpsParameter=CA.XPS::$Value_PolicyStoreID,ou=XPS,ou=policysvr4,ou=siteminder,ou=netegrity,dc=mycompany,dc=com", text: No such attribute
    CA-XPS:XPSIO024(ERROR) : Save Policy Store ID failed.
    CA-XPS:AUDIT012(INFO) : XPS Auditing is enabled.
    CA-XPS:EDIT0056(INFO) : No validation warnings will be logged (controlled by CA.XPS::$LogValidationWarnings).
    CA-XPS:UTIL0017(FATAL) : Read SiteMinder Trusted Hosts FAILED............I've installed R12 SP2 of siteminderAny idea what's wrong  Dinesh


  • 2.  Re: Unable to register Admin UI with Policy server(creating trusted relati

    Posted Mar 24, 2010 03:41 AM
    Consider re-registering at the policy server end. Carry over the registration credentials into the WAM UI.


  • 3.  RE: Re: Unable to register Admin UI with Policy server(creating trusted rel

    Posted Aug 10, 2012 11:38 AM
    How do I re-register at the policy server end? XPSRegClient?


  • 4.  RE: Re: Unable to register Admin UI with Policy server(creating trusted rel
    Best Answer

    Broadcom Employee
    Posted Aug 10, 2012 12:04 PM
    Hi brettcarroll,

    Please see the following section in the Policy server installation guide:
    Installation and Upgrade Guides › Policy Server Installation Guide › Installing the Administrative UI to an Existing Application Server › How to Register the Administrative UI › Reset the Administrative UI Registration Window

    If you used the XPSRegClient utility more than 24 hours ago to submit the SiteMinder super user credentials to the Policy Server, this step is required. The time from which you submit the credentials and attempt to create a trusted relationship with a Policy Server cannot exceed 24 hours.

    Note:(UNIX) Be sure that the SiteMinder environment variables are set before you use XPSRegClient. If the environment variables are not set, set them manually.
    To reset the registration window

    Log into the Policy Server host system.
    Run the following command:
    XPSRegClient siteminder_administrator[:passphrase] -adminui-setup -t timeout -r retries -c comment -cp -l log_path -e error_path -vT -vI -vW -vE -vF

    siteminder_administrator
    Specifies a SiteMinder administrator. If you are installing the Administrative UI as part of:

    A new r12.0 SP3 environment, specify the default SiteMinder administrator account (siteminder).
    An upgrade, specify any SiteMinder administrator account with super user permissions in the policy store.
    Note: If you are upgrading from r12.0 SP1 and do not have a super user account in the policy store, use the smreg utility to create the default SiteMinder account.

    passphrase
    Specifies the password for the SiteMinder administrator account.

    Note:If you do not specify the passphrase, XPSRegClient prompts you to enter and confirm it.

    -adminui-setup
    Specifies that the Administrative UI is being registered with a Policy Server for the first–time.

    -t timeout
    (Optional) Specifies the allotted time from when you to install the Administrative UI to the time you log in and create a trusted relationship with a Policy Server. The Policy Server denies the registration request when the timeout value is exceeded.

    Unit of measurement: minutes

    Default: 1440 (24 hours)

    Minimum limit: 1

    Maximum limit: 1440 (24 hours)

    -r retries
    (Optional) Specifies how many failed attempts are allowed when you are registering the Administrative UI. A failed attempt can result from submitting incorrect SiteMinder administrator credentials when logging into the Administrative UI for the first–time.

    Default: 1

    Maximum limit: 5

    -c comment
    (Optional) Inserts the specified comments into the registration log file for informational purposes.

    Note: Surround comments with quotes.

    -cp
    (Optional) Specifies that registration log file can contain multiple lines of comments. The utility prompts for multiple lines of comments and inserts the specified comments into the registration log file for informational purposes.

    Note: Surround comments with quotes.

    -l log path
    (Optional) Specifies where the registration log file must be exported.

    Default: siteminder_home\log

    siteminder_home

    Specifies the Policy Server installation path.

    -e error path
    (Optional) Sends exceptions to the specified path.

    Default: stderr

    -vT
    (Optional) Sets the verbosity level to TRACE.

    -vI
    (Optional) Sets the verbosity level to INFO.

    -vW
    (Optional) Sets the verbosity level to WARNING.

    -vE
    (Optional) Sets the verbosity level to ERROR.

    -vF
    (Optional) Sets the verbosity level to FATAL.

    Press Enter.
    XPSRegClient supplies the Policy Server with the administrator credentials. The Policy Server uses these credentials to verify the registration request when you log into the Administrative UI for the first–time.

    Hope this helps

    gene