Ignorable error on OIDC Provider introspect endpoint access

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• SITEMINDER

Issue/Introduction

Using RestClient (not Web browser), accessed introspect endpoint with an expired access token.
It returned ｛"active":false｝successfully. However, smps.log had a below error which is reproducible

[5340/5984][Fri Feb 28 2020 15:48:20][SmSessionServer.cpp:571][ERROR][sm-Server-06007] failed. Error code : 2

What is the root cause and the resolution? Or if this is ignorable, what is the reason.

Environment

Release : 12.8

Component : CA Access Gateway / Policy Server

Resolution

As per smtracedefault.log provided, the error was due to non-existence of expired session data in the session store as the access token was expired. Hence, the message may be ignorable even it is of ERROR level.

The trace log showed that the error was observed in SmJavaAPI: JavaTunnelService call which finally resulted in success (successfully invoked). Also, there is no error in it. This can be concluded that the error is just informative.

Excerpt from smtracedefault.log :
[03/13/2020][15:09:17.133][15:09:17][4336][1420][CServer.cpp:6557][CServer::Tunnel][...][][][][][][][][][][][][][][##.##.##.##][][][][Lib='smjavaapi', Func='JavaTunnelService', Params='com.ca.federation.openidconnect.tunnel.ValidateAccessTokenTunnelService', Server='', Device=''][][Resolved all the input parameters][]
.....
[03/13/2020][15:09:17.133][15:09:17][4336][1420][CServer.cpp:6740][CServer::Tunnel][][][][][][][][][][][][][][][][][][][][][Start of tunnel call JavaTunnelService][]
[03/13/2020][15:09:17.133][15:09:17][4336][1420][SmSSProvider.cpp:594][CSmSSProvider::GetSession][][][][][][][][][][][][][][][][][][][][][Enter function CSmSSProvider::GetSession][]
.....
[03/13/2020][15:09:17.149][15:09:17][4336][1420][SmSSProvider.cpp:622][CSmSSProvider::GetSession][][][][][][][][][][][][][2][][][][][][][][Leave function CSmSSProvider::GetSession][]
[03/13/2020][15:09:17.149][15:09:17][4336][1420][SmSessionServer.cpp:571][][][][][][][][][][][][][][][][][][][][][][LogMessage:ERROR:[sm-Server-06007] failed. Error code : 2][]
[03/13/2020][15:09:17.149][15:09:17][4336][1420][SmJavaAPI.cpp:1499][JavaTunnelService][][][][][][][][][][][][][76][][][][][][][][Active Expression evaluated for SmJavaAPI: JavaTunnelService successfully invoked. Parameter to follow:][]
[03/13/2020][15:09:17.149][15:09:17][4336][1420][CServer.cpp:6845][CServer::Tunnel][][][][][][][][][][][][][76][][][][][][][][Return from tunnel call JavaTunnelService][]

Additional Information

Article Id: 39430: Why are we continually getting SmSessionServer Failed error code 2 and 3 in smps.log?