Webagent failure to load libmod_sm22.so due to SELinux - Identity Manager

Products

• CA Identity Manager
• CA Identity Suite
• SITEMINDER

Issue/Introduction

This article provides resolution steps for the Permission denied error encountered when starting the Apache HTTP server with the SiteMinder/Identity Manager Web Agent, caused by SELinux security policy restrictions.

Environment

Identity Manager 14.5

Siteminder 12.8

Cause

The SELinux security policy is preventing the Apache server process from accessing or loading the required Web Agent binary library (libmod_sm22.so) due to a security context mismatch.

Resolution

1. Audit SELinux Context: Run the following command to check for denials in the audit log: grep httpd /var/log/audit/audit.log | audit2why
2. Apply Policy Fix (Recommended): If the audit indicates a policy violation, generate and apply a local policy module to allow access: grep httpd /var/log/audit/audit.log | audit2allow -M webagent_policy semodule -i webagent_policy.pp
3. Alternative (Troubleshooting Only): If the issue persists, temporarily set SELinux to Permissive mode to confirm the security policy is the cause:
   • Edit /etc/selinux/config
   • Update the configuration: SELINUX=permissive
   • Save the file and restart the Apache service.

Additional Information

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.