RSA Token Auth Scheme doesn't Work at Boot Time. Works Normally After Manual Restart

Products

• SITEMINDER

Issue/Introduction

The RSA Token auth scheme is not initializing properly when the policy server starts automatically at boot time on Red Hat 7.  If we manually restart the policy server, the auth scheme initializes successfully.

Environment

Release : 12.8

Component : SITEMINDER -WEB AGENT FOR APACHE

Cause

The environment variables needed by the RSA Token auth scheme, VAR_ACE and USR_ACE, were not avilable to the policy server process at boot time.  These vars are available when doing a manual restart.

Resolution

The init.d start script for the policy server was using sudo instead of su.  Switching to su changed the shell context and allowed these vars to be available at boot time.