search cancel

APS Agent support for IPv6 only deployment

book

Article ID: 188921

calendar_today

Updated On:

Products

CA Single Sign On Secure Proxy Server (SiteMinder) CA Single Sign On Agents (SiteMinder) CA Single Sign On Federation (SiteMinder) CA Single Sign On SOA Security Manager (SiteMinder) SITEMINDER

Issue/Introduction

Customer would like to know for 4x agents, such as that used for SmCPW in APS, is it supported with IPv6 only deployment?

Cause

Customer has infrastructure changes coming up, where possibly entire network will be configured as IPv6 only network.
Needs to know if this will break APS deployment and functions.

Environment

Release : 12.52

Component : SITEMINDER ADVANCED PASSWORD SERVICES

Resolution

APS is not supported with IPv6. This is mentioned in known issues section within bookshelf:
https://docops.ca.com/ca-single-sign-on/12-52-sp1/en/release-notes/known-issues-in-release-12-52-sp1/known-issues-in-policy-server-12-52-sp1

"When configuring APS, you create 4.x Agent objects to represent for the Help Desk (APSAdmin), Forgotten Password (FPS), and Change Password interface client components. However, agents that are configured to act as 4.x Agents do not support IPv6 addresses.
In a pure IPv6 environment, install and configure the APS client components on the same system as the Policy Server and use a loopback IP address (for example, 127.0.0.1) in the agent configuration.
 
Otherwise, use an IPv4 and IPv6 mixed environment.
More information:
IPv6 Addresses Not Supported by Web Agents Configured as 4.x Agent Types (65071)
"

Even with servlet war APS solution, IPv6 support is not added/tested as it is still relying on same configuration(using the same agent objects). DE432905