Symantec Access Management

Expand all | Collapse all

What are the most frequent errors you see in SiteMinder Policy Server?

  • 1.  What are the most frequent errors you see in SiteMinder Policy Server?

    Broadcom Employee
    Posted Jan 06, 2012 11:48 AM
    Please provide the most frequent errors that you see in SiteMinder Policy Server. I will collect the errors, research and provide a solution for the top errors.


  • 2.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

     
    Posted Jan 06, 2012 04:07 PM
    Thanks (again) :grin: Saravanan for reaching out to community members!

    Get those questions/comments in folks!

    Regards,
    Chris


  • 3.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

     
    Posted Jan 06, 2012 09:01 PM
    Hi Saravanan,

    The response below was posted on LinkedIn. I let the poster know I would post here but that here was where there would be response and provided the link.

    Waseem Kazmi • usually logs directory gets filled up. secondly repljcation errors occur

    Thanks and have a great weekend!
    Chris


  • 4.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Feb 03, 2012 02:49 PM

    saravanan_ramalingam wrote:

    Please provide the most frequent errors that you see in SiteMinder Policy Server. I will collect the errors, research and provide a solution for the top errors.
    Sm_Az_Message.cpp:209][ERROR] Bad s6430/r597 request detected
    [Sm_Auth_Message.cpp:271][ERROR] Password Message could not be parsed


  • 5.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Broadcom Employee
    Posted Feb 03, 2012 03:22 PM
    Thanks David. I will get you some details soon.


  • 6.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Broadcom Employee
    Posted Feb 17, 2012 02:53 PM
    Hi Daivd,

    Here are some details about the error message "Sm_Az_Message.cpp:209][ERROR] Bad s6430/r597 request detected".

    This error message is thrown in SiteMinder policy server smps.log file when a request doesnt have some of the expected data points. Every request that comes to the policy server must have a valid agent name and trusted host name at a minimum. If the policy server receives a request and that request doesnt have any of these then the policy server throws this "Bad request detected" error message.

    This kind of error messages can be seen in smps.log file if a health check ping threads at the web server makes a call to the policy server without the agent name in the request. You can check the policy server trace (profile) log for more information about this particular request.

    I hope this gives some understanding about this error. Please let me know if you have any furhter questions.

    Thanks,
    Saravanan


  • 7.  Thread Splitted

    Broadcom Employee
    Posted Feb 21, 2012 04:39 PM
    The new thread can be found at 97566029.

    I have moved this to a new thread. I would like to keep this thread to address most frequent errors in policy server.


  • 8.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Feb 17, 2012 05:24 PM
    I just wanted to add in a comment (mainly because I'm still pretty new to SiteMinder, but also because this just happened to me and it might help someone else out):

    It may seem like common sense, but make sure that you have agentnames in the policy server that match the webagents you use when registering the agent. I skipped this step in a new environment setup and had to retrace my steps. It can mainfest itself as a Bad s/r request or it will look like this on a web page:

    500: Server Error [20-0004]

    Hope this helps someone else newer than me out :)


  • 9.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Apr 03, 2012 01:33 PM
    SmJavaAPI.cpp:991][ERROR] SmJavaAPI: Error initializing Java active expressions


  • 10.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Broadcom Employee
    Posted Jun 26, 2012 12:03 PM
    Hello pmarion,

    Error: SmJavaAPI.cpp:991][ERROR] SmJavaAPI: Error initializing Java active expressions

    What is this error?:
    1) This means that SMPS is configured to load Java based Active Expression and it could not load or initialize it successfully

    Reasons could be:

    1) Your SMPS JVM itself is not initialized successfully
    2) The java active expression is mis-configured
    3) There is problem with the java active expression library, look at your jvmoptions.txt file and verify the jar file for your library

    Places to go check for more details on this:

    1) smps log
    2) smps profiler traces with Java component enabled
    3) version of java configured to be used by SMPS, should be supported

    Hope this helps.
    Thanks,
    ----- Manjari.


  • 11.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Jun 20, 2012 05:46 AM
    I have come across the TCP Port 9999 error in Federation Manager. This problem causes the SM policy server to go down which in turn affects FM with HTTP 500 errors. Agreed this is a SiteMinder discussion/forum but i posted this query here because i guess its related to SM policy server


  • 12.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Jun 26, 2012 11:47 AM
    Don't expect a reply. I don't think that the CA staff even looks at their threads. I never got a reply to my post. I ended up opening a case to get an answer. :mad:


  • 13.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

     
    Posted Jun 26, 2012 12:03 PM
    Hi,

    The boards are watched by CA and we do make real efforts to respond when we don't see something being answered. That being said these message boards are really for members to discuss technical issues, best practices and share experiences. Anytime you have an issue that requires CA Support assistance then opening an issue is you best bet.

    Thanks for all your participation, helping drive activity and letting us know your thoughts!

    :grin:

    Chris


  • 14.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Jun 26, 2012 12:04 PM
    pmarion: While I'm not which thread or posting your comment was specifically directed at, I am most happy to respond. This particular thread is an attempt to capture a wide spectrum of responses and issues such that they can be added to the identified list of issues for possible inclusion in upcoming updates and releases. As for other threads on this Message Board that are posted looking for responses, those are there for potential responses from both CA staff as well as community members. Sometimes the type of question asked is not one that can be answered in this forum and is bests suited for the Support Issue vehicle.

    Are some threads missed from time to time? Certainly as noone or no system is perfect and things might be missed, it is also possible that the rest of the Community members also were unable to provide you the insights you were looking for. As you can see by the number of threads posted and plethora of those that are set as resolved, answers are certainly being delivered. Your thoughts and responses are always welcomed and are greatly appreciated by Community Members when they add to the collaboration that is ongoing within this site.

    Thanks again and we look forward to your continued involvement and sharing of your insights with the entire Community.


  • 15.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Jun 26, 2012 12:14 PM
    Thanks for the replies. We got an answer when we opened a case many weeks back.


  • 16.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Broadcom Employee
    Posted Jun 26, 2012 11:58 AM
    Hello svinayak,

    You are welcome to post the FEderation related questions on this message board as well, yet I think I would suggest you to post it outside of this thread as welll since I believe this thread (I shall request Saravanan to describe the purpose of this thread) was to collect a list of common error messages for SMPS and then do something about that compilation. Anyhow since I see the errors also being explained in the reply as part of this thread here is the explanation for your error.

    Error:
    Failed to initialize TCP server socket: Socket error:9999

    This means there is a problem with the Policy Server process opening the
    necessary sockets it needs to listen on. Typically this is either due to a
    smpolicysrv process already running or a problem with the OS's networking
    layer.

    There are a few things to check:
    1) make sure there is only a single smpolicysrv process running
    2) verify that after FedMa services are stopped, no smpolicysrv is running
    3) verify that after FedMa services are stopped, ports 44441-44444 are
    available

    For FEDMA restart I would suggest the following steps:

    1) Stop FEDMA from the stop script
    2) check for all the FEDMA processes gone (httpd, java, smpolicysrv,
    smspsproxyengine)
    3) start the FEDMA using the start script.

    Thanks and please let me know if you have any further related questions.

    Thanks,
    ----- Manjari.


  • 17.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Jul 26, 2012 05:30 AM
    I got the below error message, when the application is under load with Basic Auth Scheme, in R12SP4, Build#1004, in Solaris Environment

    Cannot get attr CA.SM::Policy.ActiveExprString for XID CA.SM::Policy@04-3179b384-fc5a-100a-9c25-84f2550a0000.


  • 18.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Jul 26, 2012 10:13 AM

    thosr04 wrote:

    I got the below error message, when the application is under load with Basic Auth Scheme, in R12SP4, Build#1004, in Solaris Environment

    Cannot get attr CA.SM::Policy.ActiveExprString for XID CA.SM::Policy@04-3179b384-fc5a-100a-9c25-84f2550a0000.
    Where did you get your hands on a R12SP4 release?? We were told that was schedule for September or later?


  • 19.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Aug 28, 2012 11:43 AM
    I see this error a lot in the smps.log

    [CA.XPS:LDAP0014][ERROR] Error occurred during "SearchExt" for "(&(xpsNumber=*)(!(xpsCategory=1))(modifytimestamp>=20120819053501Z))", text: Timed out


  • 20.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Aug 28, 2012 11:46 AM
    Here is another error message that I am seeing a lot of:
    [SmDsLdapProvider.cpp:1668][ERROR] CSmDsLdapProvider::Search(): Wrong syntax of LDAP search filter: (&(|(objectclass=organizationalPerson)(objectclass=inetOrgPerson)(objectclass=organization)(objectclass=organizationalUnit)(objectclass=groupOfNames)(objectclass=groupOfUniqueNames)(objectclass=group))(Uid=xxxxxxxxxxxxxxxxxxxxxxxxx=))


  • 21.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Feb 05, 2014 08:24 PM

    Siteminder policy server service is getting stopped automatically, flowinng below error logs in smps.log

    [1272/4288][Wed Feb 05 2014 22:19:49][CServer.cpp:6433][INFO] Initializing TLI
    [1272/4288][Wed Feb 05 2014 22:19:49][CServer.cpp:7993][INFO] Initializing UDP
    [1272/10968][Wed Feb 05 2014 22:19:49][SmSSProvider.cpp:106][INFO] The session server maintenance thread has started.
    [1272/4288][Wed Feb 05 2014 22:19:49][CServer.cpp:7969][ERROR] Failed to initialize UDP server socket on port: 9999. Socket error:-990403843
    [1272/4288][Wed Feb 05 2014 22:19:49][CServer.cpp:6478][ERROR] UDP port initialization failure
    [1272/4288][Wed Feb 05 2014 22:19:49][CServer.cpp:8060][ERROR] Failed to initialize TCP server socket: Socket error:9999
    [1272/4288][Wed Feb 05 2014 22:19:49][CServer.cpp:8060][ERROR] Failed to initialize TCP server socket: Socket error:9999
    [1272/4288][Wed Feb 05 2014 22:19:49][CServer.cpp:8060][ERROR] Failed to initialize TCP server socket: Socket error:9999
    [1272/4288][Wed Feb 05 2014 22:19:49][CServer.cpp:8060][ERROR] Failed to initialize TCP server socket: Socket error:9999
    [1272/4288][Wed Feb 05 2014 22:19:49][CServer.cpp:6485][ERROR] TCP port initialization failure
    [1272/4288][Wed Feb 05 2014 22:19:49][CServer.cpp:7620][INFO] Clearing the server suspend state for reason 4. The server will resume serving requests.
    [1272/4288][Wed Feb 05 2014 22:19:49][CServer.cpp:3968][INFO] The suspend timeout is 3600 seconds.
    [1272/4288][Wed Feb 05 2014 22:19:49][CServer.cpp:4402][INFO] smpolicysrv shutting down
    [1272/4288][Wed Feb 05 2014 22:19:49][CServer.cpp:4430][INFO] Unregistering from the Monitor
    [10644/7164][Wed Feb 05 2014 22:19:49][CServer.cpp:7510][INFO] Server 'dumpcache' command received.
    [1272/4288][Wed Feb 05 2014 22:19:50][CServer.cpp:4441][INFO] Releasing Monitor API
    [1272/10968][Wed Feb 05 2014 22:19:50][SmSSProvider.cpp:109][INFO] The session server maintenance thread has exited.
    [1272/4288][Wed Feb 05 2014 22:19:50][CServer.cpp:4458][INFO] Stopping thread pool; waiting for threads to terminate.
    [1272/4288][Wed Feb 05 2014 22:19:50][CServer.cpp:4465][INFO] Stopping reactor thread ; waiting for threads to terminate.


  • 22.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Feb 06, 2014 04:38 AM

    Hello,

        This error may come if there is some problem with OS network system, there could be a confilct of ports. try rebooting the policy server physically.

    Regards

    Vikas Tiwari



  • 23.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Feb 06, 2014 07:48 AM

    better than a physical reboot: find what is on the ps ports.

     

    make sure there are no conflicts and restart.



  • 24.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Dec 06, 2012 04:55 AM
    Hi,

    Can you help me, I have a lot of these erors in my smps.log

    [5736/7380][Wed Jan 25 2012 13:29:29][CServer.cpp:1707][ERROR] Bad security handshake attempt. Handshake error: 3159

    [5736/7380][Wed Jan 25 2012 13:29:29][CServer.cpp:1712][ERROR] Handshake error: Failed to receive client hello. Client disconnected

    [5736/7380][Wed Jan 25 2012 13:29:29][CServer.cpp:1882][ERROR] Failed handshake with 172.26.212.9:9697

    Best regards,

    Ludo.


  • 25.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Feb 13, 2013 09:35 AM
    @ Brett Carroll

    I would love to help but see no message on either post. I'll check with the forum eople to find the error

    @ Ludovic

    This means someon connected via telnet to test the port, or the policy server was so busy it never sent an ACK until the Web Agent had already departed


  • 26.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Feb 13, 2013 09:50 AM
    Hi Josh,

    Thank you for your help.
    What is the way to solve these problems ?

    Best regards.

    Ludovic.


  • 27.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Feb 13, 2013 12:37 PM
    Ludovic,

    Assumming the more common issue, the Policy Server was slow, the best way to go about this is to look for a pattern. if it is at a certain time, i would suggest figuring out why at that time.
    this could be a capacity issue

    agent checkin, v2.1 would be good at figuring out if this is due to a specific server set or in general.

    @ Brett

    appears Inernet Explorer doesn't like your post. works fine in FireFox.

    I'm working with Chris to see if we can correct that IE display issue.

    as for the problems,
    [CA.XPS:LDAP0014][ERROR] Error occurred during "SearchExt" for "(&(xpsNumber=*)(!(xpsCategory=1))(modifytimestamp>=20120819053501Z))", text: Timed out
    is likely an indexing issue. what type of LDAP are you running?
    [SmDsLdapProvider.cpp:1668][ERROR] CSmDsLdapProvider::Search(): Wrong syntax of LDAP search filter: (&(|(objectclass=organizationalPerson)(objectclass=inetOrgPerson)(objectclass=organization)(objectclass=organizationalUnit)(objectclass=groupOfNames)(objectclass=groupOfUniqueNames)(objectclass=group))(Uid=xxxxxxxxxxxxxxxxxxxxxxxxx=))
    is likely due to the tailing = in the username.
    most versions of the policy server support this key:
    EnableSearchFilterCheck

    valid values:
    0 = off (no checking is done)
    1 = warn and allow search
    2+ = report error and block search (default and suggested, because a bad search could cause other issues)

    in your case it looks like the search might be bad this has been around since sometime in 6.0. i'm not sure when it was put in and am looking for where the key should go.
    please open a case if you need the location expedited.

    Sincerely,
    Josh Perlmutter
    CA Technologies SiteMinder Support
    SiteMinder Team Line: 800-CALL-CAI (225-5224)
    My Direct Line: 508-628-8808
    My Working Hours: 8 AM to 4 PM US Eastern Time
    Center Hours: 8 AM to 8 PM US Eastern Time


  • 28.  Re: RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Jan 27, 2015 05:49 PM


  • 29.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Feb 27, 2013 02:21 PM
    Hi,
    I'm new to the myca communites as well as to the IAM domain. I'm learning basics in Identity and Access managment.

    I have 2 errors in ca siteminder policy server while i'm trying to implement SSO.

    I'm using vmware workstation with 2 virtual machines with windows server 2003. 1 for sitmeinder another for webserver.
    I got below policy server error while i installed it and configured with policy store.
    _____________________________________________________
    Below is the result of nete-ps-details.log:
    -> Retrying failed objects ...
    ***
    COMMAND: "C:\Documents and Settings\Administrator\Local Settings\Temp\016486.tmp\smregSu.cmd"
    RETURN: 0
    STDOUT:
    STDERR:
    ***
    ### POST-INSTALL ###
    Command failed: "C:\Documents and Settings\Administrator\Local Settings\Temp\016486.tmp\smldapsetupLdgen.cmd"
    Return Value: 91
    Stdout: {2}
    Stderr: {3}
    ####################
    _________________________________________________________
    ___________________________________________________________
    and the below is the result of smps.log
    [INFO] Opening policy store connection to LDAP server: ' 192.168.237.132:389 '
    [2376/2380][Wed Feb 27 2013 23:38:33][smldaputils.cpp:862][ERROR] [color=#fd0808]SmObjLdap failed to bind to LDAP server 192.168.237.132:389 as cn=Directory Manager . LDAP error 91-Can't connect to the LDAP server[color]
    [2376/2380][Wed Feb 27 2013 23:38:33][SmPolicyServer.cpp:316][ERROR] Failed to initialize policy store Policy store failed operation 'ProviderInit' for object type 'Policy store provider'. Failed to connect to the LDAP Policy Store.
    [2376/2380][Wed Feb 27 2013 23:38:33][CServer.cpp:3826][INFO] smpolicysrv shutting down
    -------------------------------------------------------------------------------------------------------------------------


  • 30.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Broadcom Employee
    Posted Feb 27, 2013 04:05 PM
    Good afternoon dheerajk ,

    It looks like you have setup some type of LDAP server on 192.168.237.132 on port 389.
    It would also appear you are trying to connect as cn=Directory Manager but failing.

    Questions:
    1) is the LDAP instance on the same Vmware as the policy server?
    2) can you use an LDAP browser to conenct to 192.168.237.132 on port 389 as cn=Directory Manager with the password you provided during installation?
    3) can both of your vmwate images ping each other?

    It would appear from the isntallation logs that the policy store was not initialized for the same reason.

    Did you create blank LDAP instance and suffix to be used as the policy store?

    You can try running the policy store configuration wizzard again and seeing if that goes through.


    Hope this helps get you moving in the right direction

    Gene


  • 31.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Feb 27, 2013 11:12 PM
    hi Gene_Howard,
    Thanks for your reply.

    I have setup sun one directory server 5.2 and it is installed in another virtual machine but not in where policy server installed.
    I have created 2 virtual machines
    in 1st machine i installed and config only policy server 6.0-sp6
    in 2nd machine installed apache 2.0, sun one directory server 5.2 and webagent v6qmr5 and register the same host as trusted host.
    server Name is "xxxx.test.com"
    Both machines are ping each other succesfully.
    And i test the ldap connection from policy server management console using "Test LDAP Connection" . It shows "Success " Message.
    I even tested it using Softerra LDAP Browser 2.6 it's also show "success"msg. and i can access and browse the users.

    in the 2nd virtual machine i checked in windows applcitaion event viewer it shows the siteminder agent error. which is "The siteminder agent in not enabled.But siteminder is running". when i even set the EnableWebagent=yes in webagent.conf file which located in siteminder/webagent/directory.

    i can't understand where went wrong?????

    Can you plz explain me what is ROOT DN and what is cn=Directory manager???

    Plz help to resolve this issues.


  • 32.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Broadcom Employee
    Posted Feb 28, 2013 03:07 PM
    Good afternoon dheerajk,

    I will do my best to help out. However the problem is really not with siteminder it is with your LDAP policy store.

    In your original message you saw the error:
    Command failed: "C:\Documents and Settings\Administrator\Local Settings\Temp\016486.tmp\smldapsetupLdgen.cmd"

    This means the policy store was not properly initialized during the policy store configuration wizard phase.

    What should have happened is the following:
    1) In your LDAP 5.2 console you created a new LDAP instance.
    2) By default you can connect to this with the user cn=Directory manager and the password you setup
    3) During this process you give the root dn which is usally taken from your machine name such as dc=domain,dc=com

    All of the above is done in the LDAP instance configuration.

    You need to have this information in order to run the policy store configuration wizard. This sounds like what is not setup and working properly.
    You will need to look at your LDAP administrator guides on how to do set this up properly.

    Once this is setup properly then you can run the policy server configuration wizard again and choose sun LDAP for the policy store and check the box for inialize the policy store.

    As long as the Root dn is correct and your username and password are correct to connect to the LDAP instance the configuration wizzard should finish setting up the Policy store for you and the policy server should come up ok.

    You can also read the policy server installation guide for doing a manual configuration of the LDAP policy store if you would like as well.

    hope this helps

    Gene


  • 33.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Mar 04, 2013 07:24 AM
    Thanks Gene,

    It's working now. i run policy store configuration wizard again. ther's no more errors now.
    But as i told you earlier that i installed siteminder webagent 6QMR5 on the 2nd virtual machine.

    The virtual machine giving errors. like,
    1. The siteminder web agent is not enabled. But siteminder web agent is running (i checked this error in Windows applicaton Event viewer)
    2. The webagent can't generate any logs. I even set the parameter EnableWebagent="YES".
    3. How to know llawp process is running? and it's seems to be in my webserver that llawp process is not running.

    Plz help to resolve this one.

    Thank you


  • 34.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted May 30, 2013 08:41 AM
    Hi,

    We are getting the below error in the policy server smps.log.

    [15728/1952828][Tue May 28 2013 06:12:32][SmDsLdapConnMgr.cpp:586][ERROR] SmDsLdapConnMgr (ldap_search_ext_s) in PingServer : Timed out at userstorename.domainname.com:636
    [15728/1952829][Tue May 28 2013 06:12:39][SmDsLdapConnMgr.cpp:586][ERROR] SmDsLdapConnMgr (ldap_search_ext_s) in PingServer : Timed out at userstorename.domainname.com:636
    [15728/3061556][Tue May 28 2013 06:12:43][SmDsLdapConnMgr.cpp:586][ERROR] SmDsLdapConnMgr (ldap_search_ext_s) in PingServer : Timed out at userstorename.domainname.com:636
    [15728/3061557][Tue May 28 2013 06:12:51][SmDsLdapConnMgr.cpp:586][ERROR] SmDsLdapConnMgr (ldap_search_ext_s) in PingServer : Timed out at userstorename.domainname.com:636
    [15728/1952828][Tue May 28 2013 06:13:02][SmDsLdapConnMgr.cpp:827][ERROR] SmDsLdapConnMgr Bind. Server userstorename.domainname.com:636 Error 81-Can't contact LDAP server

    at the same time we are seeing the below error in apache webserver as well.

    [6829/41][Tue May 28 2013 06:12:57][CSmLowLevelAgent.cpp:1085][ERROR] LLA: SiteMinder Agent Api function failed - 'Sm_AgentApi_LoginEx' returned '-2'.
    [6829/41][Tue May 28 2013 06:12:57][CSmAuthenticationManager.cpp:181][ERROR] HLA: Component reported fatal error: 'Low Level Agent'.
    [6829/41][Tue May 28 2013 06:12:57][CSmHighLevelAgent.cpp:986][ERROR] HLA: Component reported fatal error: 'Authentication Manager'.

    [240/1][Tue May 28 2013 06:16:02][LLAWorkerProcess.cpp:1419][WARNING] LLAWP: DoManagement lost connection to Policy Server.
    [10305/50][Tue May 28 2013 06:16:21][CSmLowLevelAgent.cpp:491][ERROR] LLA: SiteMinder Agent Api function failed - 'Sm_AgentApi_IsProtectedEx' returned '-2'.
    [10305/50][Tue May 28 2013 06:16:21][CSmProtectionManager.cpp:192][ERROR] HLA: Component reported fatal error: 'Low Level Agent'.


    Can someone help to find the root cause and resolve this issue?


  • 35.  Re: [CA SiteMinder General Discussion] RE: What are the most frequent error

    Posted May 30, 2013 09:20 AM
    Have you tested connectivity to the User Store from the Policy Server?

    telnet userstorename.domainname.com 636

    The messages seem to indicate that the Policy Server can't connect to the
    User Store on port 636.




    From: "CA Security Global User Community (Distributed)"
    <CommunityAdmin@communities-mail.ca.com>
    To: "mb.2253364.101117814@myca-email.ca.com"
    <mb.2253364.101117814@myca-email.ca.com>
    Date: 05/30/2013 08:41 AM
    Subject: [CA SiteMinder General Discussion] RE: What are the most
    frequent errors you see in SiteMinder Policy Server?



    Hi,

    We are getting the below error in the policy server smps.log.

    [15728/1952828][Tue May 28 2013 06:12:32][SmDsLdapConnMgr.cpp:586][ERROR]
    SmDsLdapConnMgr (ldap_search_ext_s) in PingServer : Timed out at
    userstorename.domainname.com:636
    [15728/1952829][Tue May 28 2013 06:12:39][SmDsLdapConnMgr.cpp:586][ERROR]
    SmDsLdapConnMgr (ldap_search_ext_s) in PingServer : Timed out at
    userstorename.domainname.com:636
    [15728/3061556][Tue May 28 2013 06:12:43][SmDsLdapConnMgr.cpp:586][ERROR]
    SmDsLdapConnMgr (ldap_search_ext_s) in PingServer : Timed out at
    userstorename.domainname.com:636
    [15728/3061557][Tue May 28 2013 06:12:51][SmDsLdapConnMgr.cpp:586][ERROR]
    SmDsLdapConnMgr (ldap_search_ext_s) in PingServer : Timed out at
    userstorename.domainname.com:636
    [15728/1952828][Tue May 28 2013 06:13:02][SmDsLdapConnMgr.cpp:827][ERROR]
    SmDsLdapConnMgr Bind. Server userstorename.domainname.com:636 Error
    81-Can't contact LDAP server

    at the same time we are seeing the below error in apache webserver as
    well.

    [6829/41][Tue May 28 2013 06:12:57][CSmLowLevelAgent.cpp:1085][ERROR] LLA:
    SiteMinder Agent Api function failed - 'Sm_AgentApi_LoginEx' returned
    '-2'.
    [6829/41][Tue May 28 2013
    06:12:57][CSmAuthenticationManager.cpp:181][ERROR] HLA: Component reported
    fatal error: 'Low Level Agent'.
    [6829/41][Tue May 28 2013 06:12:57][CSmHighLevelAgent.cpp:986][ERROR] HLA:
    Component reported fatal error: 'Authentication Manager'.

    [240/1][Tue May 28 2013 06:16:02][LLAWorkerProcess.cpp:1419][WARNING]
    LLAWP: DoManagement lost connection to Policy Server.
    [10305/50][Tue May 28 2013 06:16:21][CSmLowLevelAgent.cpp:491][ERROR] LLA:
    SiteMinder Agent Api function failed - 'Sm_AgentApi_IsProtectedEx'
    returned '-2'.
    [10305/50][Tue May 28 2013 06:16:21][CSmProtectionManager.cpp:192][ERROR]
    HLA: Component reported fatal error: 'Low Level Agent'.


    Can someone help to find the root cause and resolve this issue?
    Posted by:kannan_b
    --
    CA Communities Message Boards
    101120354

    mb.2253364.101117814@myca-email.ca.com
    https://communities.ca.com


  • 36.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Nov 29, 2013 08:58 AM
    saravanan_ramalingam:
    Please provide the most frequent errors that you see in SiteMinder Policy Server. I will collect the errors, research and provide a solution for the top errors.



    Hi All, We have upgraded siteminder R6 to R12.5 Cr01 as follows. 1. Install Fresh installation of R12.5 CR01 2. Export the policy store objects from R6 using smobjimport and .smdif file is extracted. 3. Import the .smdif file into R12.5 Cr01 using smobjimport. 4. Now Installed and configured ADmin UI. 5. I have created sample realms and policy and try to test using Test Tool. 6. I am able to protect and Authenticate but not able to Authorize it because it is throwing Error " No valid session id" 7. I checked in Admin UI key management and it shows "Error: No session". 8. When I checked in smps.log , it clearly throws error "Failed to decrypt persistent key". Pls guide how to rectify this issue. I have found a thread in this forum but it is not clear. So provide your solution ASAP
     



  • 37.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Dec 02, 2013 09:52 AM

    velkongu,

     

    i think you have antoher thread on this.

    I would say it depends on use of password services. if not in use the best solution is to roll the Session Ticket once or more.

    If in use verify with support a hidden registry key is still honored. I know that it was slated for departure at some point but not when or if it has been removed.

     

    -Josh



  • 38.  RE: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted May 13, 2014 08:34 AM

    Hi,

    I have siteminder inetgrated with identity manager in my staging environment. 

    Siteminder release-12.0.309.547

    Identity manager release-12.5.11.0.823

    We have configured single sign on. Now SSO is not working for some of application. Please suggest how to resolve it.



  • 39.  Re: What are the most frequent errors you see in SiteMinder Policy Server?

    Posted Jun 01, 2016 10:28 AM

    Glad I happened upon this thread...  We are currently running 12.52-CR01 on RHEL 6, with an SQL policy and key store.  We are currently in the process of upgrading to SP1-CR04.   One of the most frequent messages we see in our smps logs is:

     

    [21971/3856378736][Tue May 31 2016 23:59:02][CServer.cpp:1680][ERROR][sm-Server-01050] Failed to initialize TCP client connection. Socket error 107

     

    I'd like to hear some feed back on what this error actually means...  Is this an agent that requested communication with the policy server, hit a timeout period and closed the request by the time the policy server attempted to respond?   We are running the default SmHost.conf timeout setting:  requesttimeout="60"     It's hard for me to believe that we have agents timing out after 60 seconds.  I would think that our phones would be ringing.   Despite this error being prevalent in our smps logs, our environment runs pretty smoothly.   I would like to really know what this error means and the best way to address it.

     

    thanks !