Error message "dsa is unwilling to perform" when starting policy server

book

Article ID: 207160

calendar_today

Updated On:

Products

CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

Policy server started, but nothing worked. Customer stated that they are not using APS.

smps.log shows error for each login attempt:

[9647/140025010296576][Sat Jan 23 2021 08:29:22][SmAuthUser.cpp:773][ERROR][sm-Server-02740] [SM-APS-07420] APS: Unable to update user uid=xxxx,ou=xxxx,dc=com
[9647/140025010296576][Sat Jan 23 2021 08:29:22][SmAuthUser.cpp:773][ERROR][sm-Server-02740] [SM-APS-07421] APS: Reason: DSA is unwilling to perform
[9647/140024411268864][Sat Jan 23 2021 08:29:24][CSmDbSessionManager.cpp:550][INFO][sm-Server-04350] Using ODBC 'Audit Logs' data source 'SiteMinder Logs Data Source'.
[9647/140025027081984][Sat Jan 23 2021 08:29:46][SmDsLdapFunctionImpl.cpp:1410][ERROR][sm-Ldap-00880] (SetUserProp) DN: ' uid=xxxx,ou=xxxx,dc=com', PropName: 'businesscategory', PropValue: '' . Status: Error 53 . DSA is unwilling to perform
[9647/140025027081984][Sat Jan 23 2021 08:29:46][SmDsLdapFunctionImpl.cpp:1410][ERROR][sm-Ldap-00880] (SetUserProp) DN: ' uid=xxxx,ou=xxxx,dc=com', PropName: 'audio', PropValue: '+nDDyQkWJ.........................2Vxt7e2Tk=' . Status: Error 53 . DSA is unwilling to perform
[9647/140025027081984][Sat Jan 23 2021 08:29:46][SmEmsCommandV2.cpp:3046][ERROR][sm-JavaApi-00070] (CSmEmsCommandV2::SetProperties) Could not rollback properties of directory object uid=xxxx,ou=xxxx,dc=com after setting properties failed.

Cause

LDAP policy store may have run out of space.

Sun-Directory-Server/11.1.1.7.190716 was used as policy store.

Environment

Release : 12.8

Component : SITEMINDER -POLICY SERVER

Resolution

Customer checked LDAP policy store for error.

LDAP policy store has run out of space. LDAP admin resolved the issue.