RestClient "active":false and sm-Server-06007 from Policy Server for ignorable error on OIDC Provider introspect endpoint access

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• SITEMINDER

Issue/Introduction

Using RestClient (not a web browser), accessed introspect endpoint with an expired access token.

It returned the message

｛"active":false｝successfully.

However, the Policy Server smps.log had a below error that is reproducible:

[5340/5984][Fri Feb 28 2020 15:48:20][SmSessionServer.cpp:571][ERROR][sm-Server-06007] failed. Error code : 2

What is the root cause and the possible resolution of this error?

If this is ignorable, what is the reason?

Resolution

The error was due to the non-existence of expired session data in the Session Store as the access token was expired (1).

Hence, the message may be ignorable, even if it's of ERROR level.

The smtracedefault.log trace showed that the error was observed in

"SmJavaAPI: JavaTunnelService

That finally resulted in success (successfully invoked).

Also, there is no error in it.

This can be concluded that the error is just informative.

smtracedefault.log :

[03/13/2020][15:09:17.133][15:09:17][4336][1420][CServer.cpp:6557][CServer::Tunnel][][][][][][][][][][][][][][][][][][][Lib='smjavaapi', Func='JavaTunnelService', Params='com.ca.federation.openidconnect.tunnel.ValidateAccessTokenTunnelService', Server='', Device=''][][Resolved all the input parameters][]

[...omitted for brevity...]

[03/13/2020][15:09:17.133][15:09:17][4336][1420][CServer.cpp:6740][CServer::Tunnel][][][][][][][][][][][][][][][][][][][][][Start of tunnel call JavaTunnelService][]
[03/13/2020][15:09:17.133][15:09:17][4336][1420][SmSSProvider.cpp:594][CSmSSProvider::GetSession][][][][][][][][][][][][][][][][][][][][][Enter function CSmSSProvider::GetSession][]

[...omitted for brevity...]

[03/13/2020][15:09:17.149][15:09:17][4336][1420][SmSSProvider.cpp:622][CSmSSProvider::GetSession][][][][][][][][][][][][][2][][][][][][][][Leave function CSmSSProvider::GetSession][]
[03/13/2020][15:09:17.149][15:09:17][4336][1420][SmSessionServer.cpp:571][][][][][][][][][][][][][][][][][][][][][][LogMessage:ERROR:[sm-Server-06007] failed. Error code : 2][]
[03/13/2020][15:09:17.149][15:09:17][4336][1420][SmJavaAPI.cpp:1499][JavaTunnelService][][][][][][][][][][][][][76][][][][][][][][Active Expression evaluated for SmJavaAPI: JavaTunnelService successfully invoked. Parameter to follow:][]
[03/13/2020][15:09:17.149][15:09:17][4336][1420][CServer.cpp:6845][CServer::Tunnel][][][][][][][][][][][][][76][][][][][][][][Return from tunnel call JavaTunnelService][]

Additional Information

1. Continually SmSessionServer Failed error code 2 and 3 in smps.log