CloudFans

Certificate Mapping Troubleshoot via logs Tutoiral

Discussion created by CloudFans Employee on May 12, 2015
Latest reply on Jul 7, 2015 by SungHoon_Kim

Certificate Mapping Troubleshoot Tutorial:

 

Case 1:

Error : Failed to get the certificate credentials.

 

[04/16/2015][11:24:34][2888][4784][CSmHighLevelAgent.cpp:960][ProcessAdvancedAuthentication][00000000000000000000000001000000-0b48-552f0f52-12b0-029d2cd6][][][][][][Start new request.]

[04/16/2015][11:24:34][2888][4784][CSmResourceManager.cpp:180][CSmResourceManager::ProcessAdvancedAuthResource][00000000000000000000000001000000-0b48-552f0f52-12b0-029d2cd6][][][][][][Calling SM_WAF_HTTP_PLUGIN->ProcessAdvancedAuthResource.]

[04/16/2015][11:24:34][2888][4784][CSmHttpPlugin.cpp:8554][CSmHttpPlugin::ProcessAdvancedAuthResource][00000000000000000000000001000000-0b48-552f0f52-12b0-029d2cd6][][][][][][Resolved HTTP_HOST: 'domain.service.lab'.]

[04/16/2015][11:24:34][2888][4784][CSmHttpPlugin.cpp:5165][Entered CSmHttpPlugin::ResolveFQServerName sHost: ][][][][][][][domain.service.lab]

[04/16/2015][11:24:34][2888][4784][CSmHttpPlugin.cpp:5518][CSmHttpPlugin::ResolveClientIp][00000000000000000000000001000000-0b48-552f0f52-12b0-029d2cd6][][][][][][Resolved Client IP address '::1'.]

[04/16/2015][11:24:34][2888][4784][SmAdvancedAuthCore.cpp:632][SmAdvancedAuthCore::parseTargetUrl][00000000000000000000000001000000-0b48-552f0f52-12b0-029d2cd6][*::1][][][/cert/][][Resolved cookie domain '.service.lab'.]

[04/16/2015][11:24:34][2888][4784][CSmResourceManager.cpp:218][CSmResourceManager::ProcessAdvancedAuthResource][00000000000000000000000001000000-0b48-552f0f52-12b0-029d2cd6][*::1][][IIS75Agent][/cert/][][SM_WAF_HTTP_PLUGIN->ProcessAdvancedAuthResource returned SmSuccess.]

[04/16/2015][11:24:34][2888][4784][CSmLowLevelAgent.cpp:499][IsResourceProtected][00000000000000000000000001000000-0b48-552f0f52-12b0-029d2cd6][*::1][][IIS75Agent][/cert/][][Resource is protected from cache.]

[04/16/2015][11:24:34][2888][4784][CSmResponseManager.cpp:193][ProcessResponses][00000000000000000000000001000000-0b48-552f0f52-12b0-029d2cd6][*::1][][IIS75Agent][/cert/][][Calling SM_WAF_HTTP_PLUGIN->ProcessResponses.]

[04/16/2015][11:24:34][2888][4784][CSmHttpPlugin.cpp:2777][CSmHttpPlugin::ProcessResponses][00000000000000000000000001000000-0b48-552f0f52-12b0-029d2cd6][*::1][][IIS75Agent][/cert/][][Processing IsProtected responses.]

[04/16/2015][11:24:34][2888][4784][CSmResponseManager.cpp:231][ProcessResponses][00000000000000000000000001000000-0b48-552f0f52-12b0-029d2cd6][*::1][][IIS75Agent][/cert/][][SM_WAF_HTTP_PLUGIN->ProcessResponses returned SmSuccess.]

[04/16/2015][11:24:34][2888][4784][CSmCredentialManager.cpp:222][CSmCredentialManager::GatherAdvancedAuthCredentials][00000000000000000000000001000000-0b48-552f0f52-12b0-029d2cd6][*::1][][IIS75Agent][/cert/][][Calling SM_WAF_HTTP_PLUGIN->ProcessAdvancedAuthCredentials.]

[04/16/2015][11:24:34][2888][4784][SmSCC.cpp:369][SmScc::getCredentials][00000000000000000000000001000000-0b48-552f0f52-12b0-029d2cd6][*::1][][IIS75Agent][/cert/][][Failed to get the certificate credentials.]

[04/16/2015][11:24:34][2888][4784][CSmCredentialManager.cpp:242][CSmCredentialManager::GatherAdvancedAuthCredentials][00000000000000000000000001000000-0b48-552f0f52-12b0-029d2cd6][*::1][][IIS75Agent][/cert/][][SM_WAF_HTTP_PLUGIN->ProcessAdvancedAuthCredentials returned SmExit.]

[04/16/2015][11:24:34][2888][4784][CSmHighLevelAgent.cpp:1119][ProcessAdvancedAuthentication][00000000000000000000000001000000-0b48-552f0f52-12b0-029d2cd6][*::1][][IIS75Agent][/cert/][][CredentialManager returned SmExit, end new request.]

 

Solution :

This means Web browser failed to submit the client certificate the the Agent.

Go to IIS setting, change Sites -> find virturl directory siteminderagent/cert -> SSL settings -> select Require for Client certificate.

Outcomes