ProxyUI Error: Exception User might not have required permissions to get group information

book

Article ID: 130190

calendar_today

Updated On:

Products

CA Single Sign On Secure Proxy Server (SiteMinder) CA Single Sign On SOA Security Manager (SiteMinder) CA Single Sign-On

Issue/Introduction

I have installed, configured/registered Access Gateway with my Policy Server.

Upon logging in to Access Gateway Proxyui, the User Name at the top shows "null" and I get below error,
"Error: Exception User might not have required permissions to get group information"

When I try to create any groups, I get error,
"Error: Unable to Add to a Group"

I followed link below but error still persists.
https://docops.ca.com/ca-single-sign-on/12-8/en/using/ca-access-gateway-administrative-ui/group-configuration-settings-configuration/

Below is a screenshot of the errors.

<Please see attached file for image>

null user and group error

<Please see attached file for image>

add group error
 

Environment

Access Gateway 12.8.  Likely applies to other releases as well.

Resolution

ACO LegacyVariables was set to "no".  This was causing problems where the user name was "null" when logging into proxy ui.
Since the user is "null", we couldn't verify that the user had proper permissions for groups and thus we always get the "Error: Exception User might not have required permissions to get group information" error.

To resolve the errors, set ACO LegacyVariables=yes then restart Access Gateway so that you can pick up the new ACO change.  After doing so, the proper username is seen after logging in, we no longer see the errors regarding permissions for groups, and we are able to create groups.

Additional Information

Related KBs:
KB000006575 - Another option to resolve the proxyui error "Error: Exception User might not have required permissions to get group information".

KB000041809 - How to resolve the "Error: Exception User might not have required permissions to get group information" when logging into the R12.52 SP1 ProxyUI.

More about ACO LegacyVariables:
https://docops.ca.com/ca-single-sign-on/12-8/en/configuring/web-agent-configuration/web-application-protection/default-http-headers-used-by-the-product

Attachments

1558688170837000130190_sktwi1f5rjvs16fio.jpeg get_app
1558688168061000130190_sktwi1f5rjvs16fin.jpeg get_app