Access Gateway listens on tcp6 :::8080 out of box, regardless of server.conf configuration.

Products

• SITEMINDER
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

12.8 Access Gateway process is listening on tcp6 :::8080 out of box, regardless of server.conf configuration. 

Customer has already disabled port 8080 via server.conf, the intention is that Access Gateway only listens on secure port.

local.host="*"
#local.http.port="8080"

However, after this change, recycled Access Gateway, Access Gateway process is still listening on tcp6 :::8080.
There is no other way to control it. You can also telnet to the port too.

netstat -na |grep 8080
tcp6       0      0 :::8080                 :::*                    LISTEN

 

Cause

Build in Tomcat server lib defect, proxyrt.jar from Access gateway installation <..\secure-proxy>\Tomcat\lib folder 

Environment

Release : 12.8

Component : SITEMINDER SECURE PROXY SERVER

Resolution

Fix is provided via DE491656, and Engineering plans to include it in next future release, which could be 12.8.06.