CA Access Gateway (SPS) :: Error 500 : SM_WSZ_00031 - Authentication web service is not configured. Be sure InitServlet runs

Products

• SITEMINDER
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

 

When running CA Access Gateway (SPS) and accessing the Authentication
/ Authorization Web Services using Curl Rest call, the command fails
and error 500 is reported :

  c:\> curl --location --request POST http://azwebservices.training.com/authazws/AuthRestService/login/azwebservices.training.com/Resource --header "Content-Type: application/xml" --data "<loginRequest><userName>jsmith</userName><password>password</password><action>GET</action></loginRequest>"

    <?xml version="1.0" encoding="UTF-8"
    standalone="yes"?><loginFault><errorMessage>SM_WSZ_00031 -
    Authentication web service is not configured. Be sure InitServlet
    runs.</errorMessage><httpStatus>500</httpStatus></loginFault>

The following errors are observed in the authazws.log :

  2021-Apr-01 16:13:16,830 - DEBUG -
  com.ca.soa.services.authaz.webservice.rest.ValidateRequestPayLoad -
  returning from isReadable () method = false

  2021-Apr-01 16:13:16,932 - ERROR -
  com.ca.soa.services.authaz.webservice.ServiceLogic - SM_WSZ_00031 -
  Authentication web service is not configured. Be sure InitServlet
  runs.

  2021-Apr-01 16:13:16,932 - ERROR -
  com.ca.soa.services.authaz.webservice.rest.LoginService - Got
  Exception calling Rest LoginService

  com.ca.soa.services.authaz.webservice.ServiceFault: SM_WSZ_00031 -
  Authentication web service is not configured. Be sure InitServlet
  runs.

   at
   com.ca.soa.services.authaz.webservice.ServiceLogic.requireAgentEnforcement(Unknown
   Source) ~[classes/:?]

   at
   com.ca.soa.services.authaz.webservice.AgentEnforcement.missingAgentEnforcement(Unknown
   Source) ~[classes/:?]

   at
   com.ca.soa.services.authaz.webservice.rest.LoginService.requireAgentEnforcement(Unknown
   Source) ~[classes/:?]

   at
   com.ca.soa.services.authaz.webservice.rest.LoginService.login(Unknown
   Source) [classes/:?]

   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native
   Method) ~[?:1.8.0_275]

   [...]

 

Environment

 

  CA Access Gateway (SPS) 12.8SP2 on Linux;

 

Cause

 

The virtualhost name is 

  "azwebservices.training.com" 

instead of

  "WebServicesAgentVirtualHost" 

in the CA Access Gateway (SPS) server.conf :

  <Context name="Authentication/Authorization web services">
    docBase="CA_AuthAZ"
    path="authazws"
    enable="yes"
  </Context>

  <VirtualHost name="azwebservices.training.com">
    hostnames="azwebservices.training.com"
    <WebAgent>
      sminitfile="/opt/CA/secure-proxy/proxy-engine/conf/webservicesagent/WebAgent.conf"
    </WebAgent>
  </VirtualHost>

 

Resolution

 

In server.conf, modify the virtualhost name :

  From 

   <VirtualHost name="azwebservices.training.com">
     hostnames="azwebservices.training.com"

     <WebAgent>
       sminitfile="/opt/CA/secure-proxy/proxy-engine/conf/webservicesagent/WebAgent.conf"
     </WebAgent>
   </VirtualHost>

  To

   <VirtualHost name="WebServicesAgentVirtualHost">
     hostnames="azwebservices.training.com"

     <WebAgent>
      sminitfile="/opt/CA/secure-proxy/proxy-engine/conf/webservicesagent/WebAgent.conf"
     </WebAgent>
   </VirtualHost>

to solve the issue.