APS Error message, DAM returned NULL

book

Article ID: 111090

calendar_today

Updated On:

Products

CA Single Sign On Secure Proxy Server (SiteMinder) AXIOMATICS POLICY SERVER CA Single Sign On SOA Security Manager (SiteMinder) CA Single Sign-On

Issue/Introduction

Seeing APS error messages about a NULL return from an OnAuthAccept rule/response. In APS.cfg there is an APP called DAM.

[Active Expression GetActiveAttr;smaps;SmApsRedirect;APP=DAM returned NULL]
[][][][][][][Leave function CSmActiveExprLibrary::GetActiveValue]

The error message implies that either DAM is not found in the APS.cfg or the return is NULL. It is not clear and there are no additional messages or traces.

Environment

Release:
Component: SMAPS

Resolution

After extensive testing and comparing against similar environments, the root cause was identified. 

The "error" message about APP=DAM returned NULL is not actually an error. It is the result of a misconfiguration. Specifically it was found that Password Policies were not enabled on the Authentication Scheme. So the response is firing but since Password Services are not enabled, the response is actually NULL.