Symantec Access Management

Expand all | Collapse all

CA Access Gateway Configuration Error

Legacy User

Legacy UserJan 16, 2018 03:01 AM

  • 1.  CA Access Gateway Configuration Error

    Posted Jan 15, 2018 03:40 AM

    Dear Team,

    I am getting error while installing CA Access Gateway.

    I have already configured 

    • CA Admin UI 
    • CA Policy Server

    Please suggest me how I can resolve this.

    For your reference I am adding the screen shots.

     

     

    CA Single Sign-On



  • 2.  Re: CA Access Gateway Configuration Error

    Posted Jan 15, 2018 05:38 AM

    Can you verify if the ACO and other information provided is correct while doing the configuration ?



  • 3.  Re: CA Access Gateway Configuration Error

    Posted Jan 16, 2018 03:01 AM

    yes thats correct.



  • 4.  Re: CA Access Gateway Configuration Error
    Best Answer

    Posted Jan 15, 2018 05:44 AM

    Hi ,

     

    If the SiteMiner Administrator defined during the install/config does not have sufficient rights to create Policy Store objects, this step will fail requiring a manual configuration of the Policy Store objects. Also, if the Policy Server defined during the install/config is at an earlier version than the R12.52x Access Gateway, then automatic creation of the Policy Store objects will also fail requiring a manual configuration of the Policy Store objects.

     

    Refer : Manually create the required Policy Store objects to protect the R12.52x Access Gateway ProxyUI with CA Single Sign On. 

     

    Regards,

    Leo Joseph.



  • 5.  Re: CA Access Gateway Configuration Error

    Posted Jan 15, 2018 07:25 PM

    jagatjyoti1

     

    There are two issues here and they may be independent of each other.

     

    The first screenshot is failure to create the Policy Domain that protects the ProxyUI. The second screenshot is a server error, not sure if that is related to the first failure (I think it is not). 

     

    For Issue-1 : failure to create the Policy Domain that protects the ProxyUI.

    Leo already provided the manual steps. The reasons as to why it would fail is more than a handful. Hence I feel the better option is to just create the Policy Domain manually, rather than trying to break our heads about why the Configuration Wizard failed (it is just not worth the man-hours / effort to debug). Alternatively I also have an ER / Ideation (feel free to cast your vote, if you think it benefits) raised to include this Policy Domain for CA Access Gateway into smpolicy.xml rather than incorporating this into CA Access Gateway Configuration Wizard which is quite error prone (for most of the time it fails).

     

    For Issue-2 : Server Error.

    Did you see any errors in server.log ?  Were you able to access the default virtual host successfully after CA Access Gateway started ?

     


    Regards

    Hubert



  • 6.  Re: CA Access Gateway Configuration Error

    Posted Jan 16, 2018 04:35 AM

    Hi,

    I am not able to log in into CA Access Gateway.

    Username:siteminder

    Password:P@ssw0rd

    I have given the above credentials.

    Please tell me how can i create a new credential for the same for login.

     

    Thanking you,

    Jagatjyoti Dash



  • 7.  Re: CA Access Gateway Configuration Error

    Posted Jan 16, 2018 04:36 AM

    Please find the screen shot



  • 8.  Re: CA Access Gateway Configuration Error

    Posted Jan 16, 2018 04:43 AM

    Hi Jagatjyoti,

     

    User you are trying to login to Siteminder Admin UI & SPS (Access Gateway ) Proxy UI is different .

     

     

    You should use the user - part of the User Directory that added to the DOMAIN-SPSADMINUI-<AgentName>

     

    Regards,
    Leo Joseph.



  • 9.  Re: CA Access Gateway Configuration Error

    Posted Jan 16, 2018 07:46 AM

    Dear Leo Joseph,

    I am adding below screen shot for your reference ...

    I think I have integrated AD with SSO successfully.

    Thank you and regards,

    Jagatjyoti Dash



  • 10.  Re: CA Access Gateway Configuration Error

    Posted Jan 16, 2018 07:48 AM

    Hi,

    How I will login to CA Access Gateway.

    Please suggest.

     

    Regards,

    Jagat



  • 11.  Re: CA Access Gateway Configuration Error

    Posted Jan 17, 2018 06:27 AM

    Hi Jagat,

     

    As others mentioned, the nxgetAD you have defined in the DOMAIN-SPSADMINUI-... domain is the one that will be checked to authenticate the user & password you are introducing in the proxyui login page.

     

    For this, there should be also a Policy where you specify which user/s will be allowed to access (even if the credentials are correct, so for example if you only wish an administrator account to login here).

     

    So, you should already have a policy object (may be called POLICY-SPSADMINUI-... (etc)) where you need to define this. You may add a single entry or depending on the root/base DN you defined for the nxgetAD User Directory adding all may work for you. This depends on your needs, but the idea is to specify which user/s will be able to access the proxyui.

    You should find this under the "Domain Policies" section (so in AdminUI, Policies > Domain menu)

     

    This entry is added in the Users tab of the policy.

     

    I hope this helps.

     

    Albert F.



  • 12.  Re: CA Access Gateway Configuration Error

    Posted Jan 16, 2018 07:55 AM

    Hi Jagat,

     

    login to CA Access Gateway with the user which is presented Active Directory (nxgetAD).

     

    Thanks,

    Shankar



  • 13.  Re: CA Access Gateway Configuration Error

    Posted Jan 16, 2018 11:13 AM

    Hi,

    But it is showing wrong user id and password.

    May I know what should be the password?

    Please suggest.

     

     

    Thanking you and regards,

    Jagat



  • 14.  Re: CA Access Gateway Configuration Error

    Broadcom Employee
    Posted Jan 16, 2018 11:23 AM

    This is the user password associated with the account present in nxgetAD.