Symantec Access Management

Good morning,

I have installed siteminder 12.52 SPS on a RHEL 6.x system... My goal is to get it working w/ AU and AZ services protecting a simple web-service.

I think my virtual host configuration is bad... apache and proxy-engine start up OK but when I navigate to hostname:8080/proxyui I get an error like this:

Error Details

How can I change server.conf to fix this?

I skipped the Proxy UI Protection step in the configuration wizard...

I can't get this step to work...I have a good ACO and agent but I always get "Creation of Proxy UI Protection Policy has failed! Proxy UI will not be protected by default. Please verify the Agetn name and Press 'Back' to retry setting up of Proxy UI protection "

Previously, I had continued without proxy UI protection...but then the Proxy UI doesn't work...

I am trying to use a ACO that is a copy of the default AuthAzServiceDefaultSettings...I have added agent name parameter to point to my agent but still the proxy-ui protection step fails!

Any ideas?

I fixed my host configuration object...now the proxy UI comes up on the tomcat server port...but when I try to login the server crashes! It throws 500 code. Has anyone seen this before?

I added a userdir to the domain created to protect the Proxy UI. It is a simple user dir containing one user that I was originally using for SM HTTP BASIC auth...it works great for that purpose but doesn't seem to work for PROXY UI.

org.apache.jasper.JasperException: javax.servlet.ServletException: java.lang.NullPointerException org.apache.jasper.servlet.JspServletWrapper.handleJspException(Unknown Source) org.apache.jasper.servlet.JspServletWrapper.service(Unknown Source) org.apache.jasper.servlet.JspServlet.serviceJspFile(Unknown Source) org.apache.jasper.servlet.JspServlet.service(Unknown Source) javax.servlet.http.HttpServlet.service(Unknown Source) com.ca.sps.adminui.util.CustomCharacterEncodingFilter.doFilter(Unknown Source) 

root cause

javax.servlet.ServletException: java.lang.NullPointerException javax.faces.webapp.FacesServlet.service(FacesServlet.java:154) org.apache.jasper.runtime.PageContextImpl.doForward(Unknown Source) org.apache.jasper.runtime.PageContextImpl.forward(Unknown Source) org.apache.jsp.index_jsp._jspService(index_jsp.java:63) org.apache.jasper.runtime.HttpJspBase.service(Unknown Source) javax.servlet.http.HttpServlet.service(Unknown Source) org.apache.jasper.servlet.JspServletWrapper.service(Unknown Source) org.apache.jasper.servlet.JspServlet.serviceJspFile(Unknown Source) org.apache.jasper.servlet.JspServlet.service(Unknown Source) javax.servlet.http.HttpServlet.service(Unknown Source) com.ca.sps.adminui.util.CustomCharacterEncodingFilter.doFilter(Unknown Source) 

root cause

javax.faces.FacesException: java.lang.NullPointerException org.apache.myfaces.context.servlet.ServletExternalContextImpl.dispatch(ServletExternalContextImpl.java:425) org.apache.myfaces.application.jsp.JspViewHandlerImpl.renderView(JspViewHandlerImpl.java:211) com.ca.corpui.faces.application.CALocaleRemapViewHandler.renderView(CALocaleRemapViewHandler.java:86) org.apache.myfaces.lifecycle.RenderResponseExecutor.execute(RenderResponseExecutor.java:41) org.apache.myfaces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:132) javax.faces.webapp.FacesServlet.service(FacesServlet.java:140) org.apache.jasper.runtime.PageContextImpl.doForward(Unknown Source) org.apache.jasper.runtime.PageContextImpl.forward(Unknown Source) org.apache.jsp.index_jsp._jspService(index_jsp.java:63) org.apache.jasper.runtime.HttpJspBase.service(Unknown Source) javax.servlet.http.HttpServlet.service(Unknown Source) org.apache.jasper.servlet.JspServletWrapper.service(Unknown Source) org.apache.jasper.servlet.JspServlet.serviceJspFile(Unknown Source) org.apache.jasper.servlet.JspServlet.service(Unknown Source) javax.servlet.http.HttpServlet.service(Unknown Source) com.ca.sps.adminui.util.CustomCharacterEncodingFilter.doFilter(Unknown Source) 

root cause

org.apache.jasper.JasperException: java.lang.NullPointerException org.apache.jasper.servlet.JspServletWrapper.handleJspException(Unknown Source) org.apache.jasper.servlet.JspServletWrapper.service(Unknown Source) org.apache.jasper.servlet.JspServlet.serviceJspFile(Unknown Source) org.apache.jasper.servlet.JspServlet.service(Unknown Source) javax.servlet.http.HttpServlet.service(Unknown Source) org.apache.myfaces.context.servlet.ServletExternalContextImpl.dispatch(ServletExternalContextImpl.java:419) org.apache.myfaces.application.jsp.JspViewHandlerImpl.renderView(JspViewHandlerImpl.java:211) com.ca.corpui.faces.application.CALocaleRemapViewHandler.renderView(CALocaleRemapViewHandler.java:86) org.apache.myfaces.lifecycle.RenderResponseExecutor.execute(RenderResponseExecutor.java:41) org.apache.myfaces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:132) javax.faces.webapp.FacesServlet.service(FacesServlet.java:140) org.apache.jasper.runtime.PageContextImpl.doForward(Unknown Source) org.apache.jasper.runtime.PageContextImpl.forward(Unknown Source) org.apache.jsp.index_jsp._jspService(index_jsp.java:63) org.apache.jasper.runtime.HttpJspBase.service(Unknown Source) javax.servlet.http.HttpServlet.service(Unknown Source) org.apache.jasper.servlet.JspServletWrapper.service(Unknown Source) org.apache.jasper.servlet.JspServlet.serviceJspFile(Unknown Source) org.apache.jasper.servlet.JspServlet.service(Unknown Source) javax.servlet.http.HttpServlet.service(Unknown Source) com.ca.sps.adminui.util.CustomCharacterEncodingFilter.doFilter(Unknown Source) 

root cause

java.lang.NullPointerException com.ca.corpui.faces.util.Util.isIEBrowser(Util.java:177) com.ca.corpui.faces.renderkit.html.HtmlTabBarRenderer.renderPrimaryTabHeader(HtmlTabBarRenderer.java:623) com.ca.corpui.faces.renderkit.html.HtmlTabBarRenderer.renderPrimaryTabs(HtmlTabBarRenderer.java:306) com.ca.corpui.faces.renderkit.html.HtmlTabBarRenderer.encodeEnd(HtmlTabBarRenderer.java:201) javax.faces.component.UIComponentBase.encodeEnd(UIComponentBase.java:539) javax.faces.webapp.UIComponentTag.encodeEnd(UIComponentTag.java:498) javax.faces.webapp.UIComponentTag.doEndTag(UIComponentTag.java:366) com.ca.corpui.faces.taglib.html.HtmlTabBarTag.doEndTag(HtmlTabBarTag.java:290) org.apache.jsp.spsadminuimain_jsp._jspx_meth_ca_005fh_005ftabBar_005f0(spsadminuimain_jsp.java:330) org.apache.jsp.spsadminuimain_jsp._jspService(spsadminuimain_jsp.java:170) org.apache.jasper.runtime.HttpJspBase.service(Unknown Source) javax.servlet.http.HttpServlet.service(Unknown Source) org.apache.jasper.servlet.JspServletWrapper.service(Unknown Source) org.apache.jasper.servlet.JspServlet.serviceJspFile(Unknown Source) org.apache.jasper.servlet.JspServlet.service(Unknown Source) javax.servlet.http.HttpServlet.service(Unknown Source) org.apache.myfaces.context.servlet.ServletExternalContextImpl.dispatch(ServletExternalContextImpl.java:419) org.apache.myfaces.application.jsp.JspViewHandlerImpl.renderView(JspViewHandlerImpl.java:211) com.ca.corpui.faces.application.CALocaleRemapViewHandler.renderView(CALocaleRemapViewHandler.java:86) org.apache.myfaces.lifecycle.RenderResponseExecutor.execute(RenderResponseExecutor.java:41) org.apache.myfaces.lifecycle.LifecycleImpl.render(LifecycleImpl.java:132) javax.faces.webapp.FacesServlet.service(FacesServlet.java:140) org.apache.jasper.runtime.PageContextImpl.doForward(Unknown Source) org.apache.jasper.runtime.PageContextImpl.forward(Unknown Source) org.apache.jsp.index_jsp._jspService(index_jsp.java:63) org.apache.jasper.runtime.HttpJspBase.service(Unknown Source) javax.servlet.http.HttpServlet.service(Unknown Source) org.apache.jasper.servlet.JspServletWrapper.service(Unknown Source) org.apache.jasper.servlet.JspServlet.serviceJspFile(Unknown Source) org.apache.jasper.servlet.JspServlet.service(Unknown Source) javax.servlet.http.HttpServlet.service(Unknown Source) com.ca.sps.adminui.util.CustomCharacterEncodingFilter.doFilter(Unknown Source) 

Using chrome dev console, I can see that the actual login request is succesfull! I my user is issued SMSESSION cookies...but then when the /proxyui resource is accessed with these cookies, the server throws 500 error!

In proxyui.log, I see "com.ca.sps.adminui.xspsclient.XPSConnection - User might not have required permissions to get group information ".... What is wrong with my user?

Hi zestep,

Usually you will run into the XPSConnection error when the user is not an administrator. Please check if the user you used to login to proxyui is an administrator defined at Siteminder Policy Server.

Best regards,

Kelly

Can I define a new Administrator in the SiteMinder Administrative UI? How to add this administrator?