SiteMinder Agent Api function failed - 'Sm_AgentApi

Products

CA Single Sign On Secure Proxy Server (SiteMinder) CA Single Sign On Agents (SiteMinder) CA Single Sign On Federation (SiteMinder) CA Single Sign On SOA Security Manager (SiteMinder) SITEMINDER

Issue/Introduction

We're running a Web Agent and this one fails and reports error :

  [20791/662693632][Thu Aug 20 2020
  06:47:55][CSmLowLevelAgent.cpp:557][ERROR][sm-AgentFramework-00520]
  LLA: SiteMinder Agent Api function failed -
  'Sm_AgentApi_IsProtectedEx' returned '-1'.

  [20791/662693632][Thu Aug 20 2020
  06:47:55][CSmProtectionManager.cpp:192][ERROR][sm-AgentFramework-00420]
  HLA: Component reported fatal error: 'Low Level Agent'.

  [20791/662693632][Thu Aug 20 2020
  06:47:55][CSmHighLevelAgent.cpp:424][ERROR][sm-AgentFramework-00420]
  HLA: Component reported fatal error: 'Protection Manager'.

How can we solve this ?

Environment

Web Agent 12.52SP1CR09 on Apache 2.4;
Policy Server 12.8;

Cause

The Web Agent faces a problem to get an expected response from the
Policy Server at 08:14:03 :05 and :07 :

smwa.log

  [27807/2206131968][Fri Aug 21 2020
  08:14:03][CSmLowLevelAgent.cpp:557][ERROR][sm-AgentFramework-00520]
  LLA: SiteMinder Agent Api function failed -
  'Sm_AgentApi_IsProtectedEx' returned '-1'.

  [27807/2206131968][Fri Aug 21 2020
  08:14:03][CSmProtectionManager.cpp:192][ERROR][sm-AgentFramework-00420]
  HLA: Component reported fatal error: 'Low Level Agent'.

  [27807/2206131968][Fri Aug 21 2020
  08:14:03][CSmHighLevelAgent.cpp:424][ERROR][sm-AgentFramework-00420]
  HLA: Component reported fatal error: 'Protection Manager'.

--

  [27806/2180953856][Fri Aug 21 2020
  08:14:05][CSmLowLevelAgent.cpp:557][ERROR][sm-AgentFramework-00520]
  LLA: SiteMinder Agent Api function failed -
  'Sm_AgentApi_IsProtectedEx' returned '-1'.

  [27806/2180953856][Fri Aug 21 2020
  08:14:05][CSmProtectionManager.cpp:192][ERROR][sm-AgentFramework-00420]
  HLA: Component reported fatal error: 'Low Level Agent'.

  [27806/2180953856][Fri Aug 21 2020
  08:14:05][CSmHighLevelAgent.cpp:424][ERROR][sm-AgentFramework-00420]
  HLA: Component reported fatal error: 'Protection Manager'.

--

  [27808/2214524672][Fri Aug 21 2020
  08:14:07][CSmLowLevelAgent.cpp:557][ERROR][sm-AgentFramework-00520]
  LLA: SiteMinder Agent Api function failed -
  'Sm_AgentApi_IsProtectedEx' returned '-1'.

  [27808/2214524672][Fri Aug 21 2020
  08:14:07][CSmProtectionManager.cpp:192][ERROR][sm-AgentFramework-00420]
  HLA: Component reported fatal error: 'Low Level Agent'.

  [27808/2214524672][Fri Aug 21 2020
  08:14:07][CSmHighLevelAgent.cpp:424][ERROR][sm-AgentFramework-00420]
  HLA: Component reported fatal error: 'Protection Manager'.

There's no issue on the network level :

tcpdump.pcap :

  Arrival Time: Aug 21, 2020 09:14:03.320973000 Romance Daylight Time
  53448 185.906407 10.0.0.1 10.0.0.2 TCP 365 52216 → 44443
  [PSH, ACK] Seq=1 Ack=1 Win=88 Len=311

  [...]

  Arrival Time: Aug 21, 2020 09:14:03.645292000 Romance Daylight Time
  53695 186.230726 10.0.0.1 10.0.0.2 TCP 54 52216 → 44443
  [ACK] Seq=946 Ack=798 Win=105 Len=0

At the same time, the Policy Server reports 3 times a problem to load
library smiisusercontext, which belongs to User Context Gateway :

smps.log :

  [21595/139974619924224][Fri Aug 21 2020
  08:14:03][SmAuthServer.cpp:242][ERROR][sm-Server-02910] Failed to
  load library 'smiisusercontext'. Error: Unknown Error

  [21595/139974653495040][Fri Aug 21 2020
  08:14:05][SmAuthServer.cpp:242][ERROR][sm-Server-02910] Failed to
  load library 'smiisusercontext'. Error: Unknown Error

  [21595/139974611531520][Fri Aug 21 2020
  08:14:07][SmAuthServer.cpp:242][ERROR][sm-Server-02910] Failed to
  load library 'smiisusercontext'. Error: Unknown Error

smtracedefault.log :

  [][21595][139974619924224][08/21/2020][08:14:03][08:14:03.602][][][][Deq
  ueuing a Normal Priority message, from IP 10.0.0.1 with Port No 5221
  6. Current count is 0][][][][ThreadPool::Run][CServer.cpp:1514][][][][][
  ][][]

  [s515389/r4][21595][139974619924224][08/21/2020][08:14:03][08:14:03.602]
  [mywebagent][][][Receive request attribute 200, data size is 19
  ][][myrealm][][CSmMessage::ParseAgentMessage][SmMessage.cpp:55
  7][][][][][][][]

  [s515389/r4][21595][139974619924224][08/21/2020][08:14:03][08:14:03.602]
  [mywebagent][][][Receive request attribute 217, data size is 30
  ][][http://myserver.mydomain.com][][CSmMessage::ParseAgentMessage][SmM
  essage.cpp:557][][][][][][][]

  [s515389/r4][21595][139974619924224][08/21/2020][08:14:03][08:14:03.602]
  [mywebagent][][][Receive request attribute 201, data size is 115][]
  [/myresource/mypage.html]
  [][CSmMessage::ParseAgentMessage][SmMessage.cpp:557][][][][][][][]

  [s515389/r4][21595][139974619924224][08/21/2020][08:14:03][08:14:03.602]
  [mywebagent][][][Receive request attribute 202, data size is 3]
  [][GET][][CSmMessage::ParseAgentMessage][SmMessage.cpp:557][][][][][][][]

  [][21595][139974619924224][08/21/2020][08:14:03][08:14:03.602][]
  [/myresource/mypage.html][][Resource is protected by realm.]
  [][][][CSmAz::IsProtected][SmAuthorization.cpp:620][][][][][][][]

  [][21595][139974619924224][08/21/2020][08:14:03][08:14:03.603][][][][Log
  Message:ERROR:[sm-Server-02910] Failed to load library 'smiisusercontext
  '. Error: Unknown Error][][][][][SmAuthServer.cpp:242][][][][][][][]

  [s515389/r4][21595][139974619924224][08/21/2020][08:14:03][08:14:03.603]
  [mywebagent][][][** Status: Error. Reject s515389/r4 : internal
  error - failed to obtain scheme credentials for scheme 'myauthenticationscheme']
  [][][][CSm_Az_Message::SendReply][Sm_Az_Message.cpp:598][][][][][][][]

Resolution

Follow instruction to install libraries for User Context Gateway on
the Policy Server;