The policy store could not be initialized Policy Store configuration

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• SITEMINDER

Issue/Introduction

 

When installing a Policy Server, and manually trying to initialize the Oracle ODBC Policy Store (1), the following error shows up after running the command:

  c:\> smreg -su

  "The policy store could not be initialized.
   Failed to create the super user account."

 

Environment

 

  Policy Server 12.8SP3 on Windows 2012 R2;
   Oracle JDK 1.8.0_231;
  Policy Store on ODBC Oracle 12c;

 

Resolution

 

• Ensure that the SiteMinder ODBC driver has the "Extended Options" set with "EnableNcharSupport=0" (2).
• On the "ODBC Data Sources (64-bit)" driver, on the tab "Tracing", select "Machine-Wide tracing for all user identities", and click "Start Tracing Now";
• Reproduce the issue and check the produced trace to understand what caused the issue:

  c:\> smreg -tu <password>

Here are the expected basic commands to initialize the ODBC Policy Store.

  SQL> create user C##SMUSER identified by xxxxxxx;
  SQL> CREATE SMALLFILE TABLESPACE "PSTORE" DATAFILE 'C:\APP\ADMINISTRATOR\VIRTUAL\ORADATA\ORCL\PSTORE.DBF' SIZE 100M AUTOEXTEND ON NEXT 100M MAXSIZE 8G LOGGING DEFAULT NOCOMPRESS ONLINE EXTENT MANAGEMENT LOCAL AUTOALLOCATE SEGMENT SPACE MANAGEMENT AUTO;
  SQL> SELECT TABLESPACE_NAME, FILE_NAME FROM DBA_DATA_FILES ORDER BY TABLESPACE_NAME;
  SQL> GRANT CREATE SESSION TO C##SMUSER WITH ADMIN OPTION;
  SQL> alter user C##SMUSER default tablespace PSTORE temporary tablespace temp container=current;
  SQL> GRANT CREATE SESSION TO C##SMUSER WITH ADMIN OPTION;
  SQL> GRANT CONNECT TO C##SMUSER;
  SQL> GRANT CONNECT, RESOURCE, DBA TO C##SMUSER;
  SQL> GRANT UNLIMITED TABLESPACE TO C##SMUSER;
  SQL> select USERNAME, DEFAULT_TABLESPACE from DBA_USERS;
  USERNAME
  --------------------------------------------------------------------------------
  DEFAULT_TABLESPACE
  ------------------------------
  C##SMUSER
  PSTORE

  SQL> SELECT * FROM nls_database_parameters;

  NLS_CHARACTERSET
  AL32UTF8

  c:\> sqlplus C##SMUSER/[email protected] @"c:/Program Files/CA/siteminder/db/sql/sm_oracle_ps.sql"
  SQL> exit
  c:\> sqlplus C##SMUSER/[email protected] @"c:/Program Files/CA/siteminder/xps/db/Oracle.sql"

Additional Information

 

(1)

    How to Configure an Oracle Policy Store
    
    
(2)

    How to Configure an Oracle Policy Store

      - Click the Advanced tab and enter the following in the Extended
        Options field:
 
        EnableNcharSupport=0