passing smsession details as query parameter

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• SITEMINDER

Issue/Introduction

 

We're running a Policy Server and we'd like to know how you can
configure the Policy Server to avoid writing user specific sensitive
info in the smaccess log file.

How can we do that ?

 

Environment

 

Policy Server 12.8SP3 on RedHat 6

 

Resolution

 

At first glance, out of the box Policy Server has limited ways to
limit the content of the smaccess log file. 

There's no such feature in Policy Server 12.8 series to suppress the
SMSESSION data from the smaccess.log file.