Symantec Access Management

Hi,

We are getting this issue for our Siebel Application. A brief description of what's happening. We have three webservers loadbalanced. Siteminder Policy servers for authentication and then 3 app servers load balanced. We get the above error in the browser and till we do iisreset this error is not resolved.

In siteminder web agent logs below errors are captured

[4100/3384][Mon Apr 27 2015 23:29:32][CSmHighLevelAgent.cpp:205][INFO] HLA: Stopping.

[4100/3384][Mon Apr 27 2015 23:29:32][SmPlugin.cpp:103][INFO] Agent Framework plug-in 'SM_WAF_HTTP_PLUGIN' shutdown.

[4100/3384][Mon Apr 27 2015 23:29:32][SmAgentAPI.cpp:1581][INFO] Agent API has been released.

[6776/1788][Mon Apr 27 2015 23:29:39][CSmLowLevelAgent.cpp:3194][INFO] LLA: Logging initialized.

[6776/1788][Mon Apr 27 2015 23:29:39][SmPlugin.cpp:66][INFO] Agent Framework plug-in 'SM_WAF_HTTP_PLUGIN' initialized.  Description 'SiteMinder Agent HTTP Plug-in'.

[6776/1788][Mon Apr 27 2015 23:29:39][CSmAdminManager.cpp:766][INFO] ADMIN: Received key update attribute 'KEY_UPDATE_LAST'.

[6776/1788][Mon Apr 27 2015 23:29:39][CSmAdminManager.cpp:782][INFO] ADMIN: Successfully processed key update attribute 'LAST'.

[6776/1788][Mon Apr 27 2015 23:29:39][CSmAdminManager.cpp:790][INFO] ADMIN: Received key update attribute 'KEY_UPDATE_CURRENT'.

[6776/1788][Mon Apr 27 2015 23:29:39][CSmAdminManager.cpp:807][INFO] ADMIN: Successfully processed key update attribute 'CURRENT'.

[6776/1788][Mon Apr 27 2015 23:29:39][CSmAdminManager.cpp:740][INFO] ADMIN: Received key update attribute 'KEY_UPDATE_NEXT'.

[6776/1788][Mon Apr 27 2015 23:29:39][CSmAdminManager.cpp:757][INFO] ADMIN: Successfully processed key update attribute 'NEXT'.

[6776/1788][Mon Apr 27 2015 23:29:39][CSmAdminManager.cpp:815][INFO] ADMIN: Received key update attribute 'KEY_UPDATE_PERSISTENT'.

[6776/1788][Mon Apr 27 2015 23:29:39][CSmAdminManager.cpp:833][INFO] ADMIN: Successfully processed key update attribute 'PERSISTENT'.

[6776/1788][Mon Apr 27 2015 23:29:39][CSmAdminManager.cpp:223][INFO] ADMIN: Administration Manager initialized.

[6776/1788][Mon Apr 27 2015 23:29:39][CSmHighLevelAgent.cpp:191][INFO] HLA: Initialization complete.

[6776/5924][Mon Apr 27 2015 23:45:43][CSmHttpPlugin.cpp:485][ERROR] Unable to resolve URL. Exiting with HTTP 500 server error '10-0002'.

[6776/5924][Mon Apr 27 2015 23:45:43][CSmResourceManager.cpp:155][WARNING] HLA: Missing resource data.

[6776/5924][Mon Apr 27 2015 23:45:47][CSmHttpPlugin.cpp:485][ERROR] Unable to resolve URL. Exiting with HTTP 500 server error '10-0002'.

[6776/5924][Mon Apr 27 2015 23:45:47][CSmResourceManager.cpp:155][WARNING] HLA: Missing resource data.

[6776/5924][Mon Apr 27 2015 23:45:54][CSmHttpPlugin.cpp:485][ERROR] Unable to resolve URL. Exiting with HTTP 500 server error '10-0002'.

[6776/5924][Mon Apr 27 2015 23:45:54][CSmResourceManager.cpp:155][WARNING] HLA: Missing resource data.

[6776/5924][Mon Apr 27 2015 23:45:57][CSmHttpPlugin.cpp:485][ERROR] Unable to resolve URL. Exiting with HTTP 500 server error '10-0002'.

In trace log we get below error

[04/28/2015][00:37:35][6776][6764][000000000000000000000000754c640a-1a78-553f1c9f-1a6c-022626e9][ProcessResource][Plugins did not collect required resource data.]

[04/28/2015][00:37:35][6776][6764][000000000000000000000000754c640a-1a78-553f1c9f-1a6c-022626e9][ProcessRequest][ResourceManager returned SmExit, end new request.]

Please help if you know anything related

Agent Error Codes - CA SiteMinder® - 12.52 SP1 - CA Wiki

https://wiki.ca.com/display/sm1252sp1/Agent+Error+Codes#AgentErrorCodes-10-0002

10-0002

Reason:

Unable to read the 'URL' HTTP variable.

Action:

Check that the web browser and web server are HTTP 1.0-compliant.

We are getting the same exact error.  Started yesterday out of the blue.

Hi Josh,

The Siteminder Policy server version is 12.0.311.824 and our webservers are HTTP 1.0 compliant. Do you think something else can cause this issue?

Thanks

Do you have a monitoring tool? a lot of them dont send the header unless set to, if they een can.

Something is hitting your server without sending  that header.

Hi Josh,

What kind of monitoring is required for capturing this? I can look for it. Also let me know what kind of logs we need to check to dig deep into it.

Thanks

i dont think you understand.

web server monitoring tools will ensure a servver is  alive

they also are notorious  for not being http 1.0 and 1.1 compliant.

do you use one?

Hi Josh,

We have a monitoring tool which constantly checks the server and application health. I was not sure what type of monitoring tools you are referring to. There is a tool which constantly hits the application and web service and checks if application and web service is available also there is something which checks server health. If apart from this if you are referring for some other type web server monitoring tool then its not there. Also If you can suggest something that can be done to reproduce this type of issue it will help.

Thanks.

set a default host header

https://wiki.ca.com/display/sm1252sp1/Backward+Compatibility+Settings#BackwardCompatibilitySettings-AccommodateTestingToolsthatdonotsendHOSTHeaders