Symantec Access Management

  • 1.  For siteminder, how to populate REMOTE_USER variables in HTTP header

    Posted Apr 23, 2015 03:17 AM

    Hello everyone, I am using siteminder r12.52. And install web agent with IBM HTTP Server. But in HTTP header, there is no "REMOTE_USER".

     

    I configure policy server web agent as following:

         

            SetRemoteUser=yes

     

    Do I need to other configuration for web agent? Thank you.



  • 2.  Re: For siteminder, how to populate REMOTE_USER variables in HTTP header

    Posted Apr 23, 2015 07:33 AM

    For all but some versions and then on IIS, the default for REMOTE_USER is to duplicate SM_USER/SMUSER

    however SM_USER/SMUSER can be turned off with the DisableUserNameVars

    more information: https://wiki.ca.com/display/sm1252sp1/Default+HTTP+Headers+Used+by+the+Product#DefaultHTTPHeadersUsedbytheProduct-DisableDefaultHTTPHeaderVariables

     

    i may have used R12.52 docs, but this has been the same since R6.0



  • 3.  Re: For siteminder, how to populate REMOTE_USER variables in HTTP header

    Posted Apr 23, 2015 08:16 AM

    I try what you said but didn't work.

     

    I set DisableUserNameVars=no and SetRemoteUser=yes in web agent configuration.

     

    I got the following headers(No "REMOTE_USER"):

    [Host, User-Agent, Accept, Accept-Language, Accept-Encoding, SM_TRANSACTIONID, SM_CLIENT_IP, SM_SDOMAIN, SM_REALM, SM_REALMOID, SM_AUTHTYPE, SM_AUTHREASON, SM_SESSIONDRIFT, SM_AUTHDIROID, SM_AUTHDIRNAME, SM_AUTHDIRSERVER, SM_AUTHDIRNAMESPACE, Cookie, SM_USER, SM_USERDN, SM_SERVERSESSIONID, SM_SERVERSESSIONSPEC, SM_TIMETOEXPIRE, SM_SERVERIDENTITYSPEC, x-forwarded-for, $WSIS, $WSSC, $WSPR, $WSRA, $WSRH, $WSRU, $WSSN, $WSSP, Surrogate-Capability, $WSFO, _WS_HAPRT_WLMVERSION]



  • 4.  Re: For siteminder, how to populate REMOTE_USER variables in HTTP header

    Posted Apr 23, 2015 11:53 AM

    I suggest a support case.

     

    as far as i am aware only R12.0 SP3 agent for IIS pre CR10 has a different variable it uses by default.

     

    it sounds like  there's a mess up somewhere. Support should be able to figure out



  • 5.  Re: For siteminder, how to populate REMOTE_USER variables in HTTP header
    Best Answer

    Posted Apr 23, 2015 03:25 PM

    Did you create a 'WebAgent-HTTP-Header-Variable' Response for your Get/Post/Put or OnAuthAccept Rule and add it to your Policy?