Access Gateway listens on tcp6 :::8080 out of box, regardless of server.conf configuration.

Products

• SITEMINDER
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

12.8 Access Gateway process is listening on tcp6 :::8080 out of box, regardless of server.conf configuration. 

Customer has already disabled port 8080 via server.conf, the intention is that Access Gateway only listens on secure port.

local.host="*"
#local.http.port="8080"

However, after this change, recycled Access Gateway, Access Gateway process is still listening on tcp6 :::8080.
There is no other way to control it. You can also telnet to the port too.

netstat -na |grep 8080
tcp6       0      0 :::8080                 :::*                    LISTEN

 

Cause

Build in Tomcat server lib defect, proxyrt.jar from Access gateway installation <..\secure-proxy>\Tomcat\lib folder 

Environment

Release : 12.8

Component : SITEMINDER SECURE PROXY SERVER

Resolution

Fix is provided via DE491656 for 12.8SP01. 

Fix is provided via DE505652 for 12.8SP05.

Engineering plans to include it in next future release, which could be 12.8.06.