Error: Failed to connect to datasource Policy server process died

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• SITEMINDER

Issue/Introduction

 

When running a Policy Server, this one crashed and it doesn't start over. The logs show that the Policy Server can't reach the ODBC Key Store.

smexec.log :

  Wed Oct 30 06:07:13 2019: Starting service: smpolicysrv, pid: 14415
  Wed Oct 30 06:07:31 2019: Service smpolicysrv died - restart #1, pid: 14466
  Wed Oct 30 06:07:50 2019: Service smpolicysrv died - restart #2, pid: 14517
  Wed Oct 30 06:08:09 2019: Service smpolicysrv died - restart #3, pid: 14567
  Wed Oct 30 06:08:27 2019: Service smpolicysrv died - restart #4, pid: 14617
  Wed Oct 30 06:08:46 2019: Service smpolicysrv DISABLED after 5 failures
  Wed Oct 30 06:08:46 2019: Deleting pid file -----
  /opt/CA/siteminder/config/smpolicysrv.pid because it's DISABLED
  Wed Oct 30 06:08:46 2019: EXIT because all services have been disabled

smps.log :

  [14617/140573264066368][Wed Oct 30 2019 06:08:27][CServer.cpp:4072][INFO][sm-Server-03550] Version: 12.8; Update: 02.00; Build: 1992; CR: 00;
  [14617/140573264066368][Wed Oct 30 2019 06:08:27][CServer.cpp:4075][INFO][sm-Server-03570] Starting up Application: smpolicysrv.
  [14617/140573264066368][Wed Oct 30 2019 06:08:27][CServer.cpp:4239][INFO][sm-Server-03580] Linux 3.10.0-1062.1.2.el7.x86_64
  [14617/140573264066368][Wed Oct 30 2019 06:08:27][SmObjProvider.cpp:244][INFO][sm-Server-02830] Initializing policy store provider 'LDAP:'
  [14617/140573264066368][Wed Oct 30 2019 06:08:27][SmObjProvider.cpp:253][INFO][sm-log-00000] Initializing key store provider 'ODBC:'
  [14617/140573264066368][Wed Oct 30 2019 06:08:28][smldaputils.cpp:523][INFO][sm-Ldap-00540] Opening policy store connection to LDAP server: ' 10.0.0.1:9000 '
  [14617/140573264066368][Wed Oct 30 2019 06:08:28][SmLdapBulkSearch.cpp:228][CreateRoot][INFO][sm-xpsxps-01120]LDAP Provider Version: dxServerVersion = dxserver 14.0.00 (build 14803) Linux 64-Bit
  [14617/140572147812096][Wed Oct 30 2019 06:08:28][CSmDbUtilities.cpp:465][ERROR][sm-Odbc-00060]Failed to connect to datasource 'SiteMinder Keys Data Source'.
  [14617/140573264066368][Wed Oct 30 2019 06:08:28][SmObjProvider.cpp:188][ERROR][sm-Server-03090]Policy store failed operation 'Save' for object type 'SharedSecretPolicy' . Unexpected error in database interface. Error code -1063
  [14617/140573264066368][Wed Oct 30 2019 06:08:28][SmPolicyStoreVersion.cpp:219][INFO][sm-Server-04420] Minimum supported Key Store version taken as default 5.
  [14617/140573264066368][Wed Oct 30 2019 06:08:28][SmObjProvider.cpp:181][ERROR][sm-Server-03090] Policy store failed operation 'BulkFetch' for object type 'Key store provider' . DoBulkFetch Failed
  [14617/140573264066368][Wed Oct 30 2019 06:08:28][SmPolicyServer.cpp:734][ERROR][sm-Server-00450] Failed to initialize policy store Policy store failed operation 'BulkFetch' for object type 'Key store provider'. DoBulkFetch Failed
  [14617/140573264066368][Wed Oct 30 2019 06:08:28][CServer.cpp:4552][INFO][sm-Server-01880] smpolicysrv shutting down

 

Environment

 

  Policy Server 12.8SP2CR00 on RedHat 7;
  Policy Store on CA Directory 14;
  Key Store on LDAP CA Directory 14, embedded in the Policy Store;

 

Resolution

 

In the Policy Server smconsole, on the "Data" tab:

• In "Database:" select "Key Store";
• Check "Use Policy Store database";
• Click "Apply" and "OK";

Start the Policy Server.

This will make the Key Store use the same connection as the Policy Store to reach the Keys when the Key Store is in the Policy Store.

This change will solve the issue.