Error 500 SM_WSZ_00031 Authentication web service not configured (SPS)

Products

• SITEMINDER
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

When running CA Access Gateway (SPS) and accessing the Authentication / Authorization Web Services using cURL Rest call, the command fails and the error 500 is reported:

c:\> curl --location --request POST http://azwebservices.example.com/authazws/AuthRestService/login/azwebservices.example.com/Resource --header "Content-Type: application/xml" --data "<loginRequest><userName><a_name></userName><password><a_password></password><action>GET</action></loginRequest>"

 <?xml version="1.0" encoding="UTF-8" standalone="yes"?><loginFault><errorMessage>SM_WSZ_00031 - Authentication web service is not configured. Be sure InitServlet runs.</errorMessage><httpStatus>500</httpStatus></loginFault>

The following errors are observed in the authazws.log:

  2021-Apr-01 16:13:16,830 - DEBUG - com.ca.soa.services.authaz.webservice.rest.ValidateRequestPayLoad - returning from isReadable () method = false
  2021-Apr-01 16:13:16,932 - ERROR - com.ca.soa.services.authaz.webservice.ServiceLogic - SM_WSZ_00031 - Authentication web service is not configured. Be sure InitServlet runs.
  2021-Apr-01 16:13:16,932 - ERROR - com.ca.soa.services.authaz.webservice.rest.LoginService - Got Exception calling Rest LoginService

  com.ca.soa.services.authaz.webservice.ServiceFault: SM_WSZ_00031 - Authentication web service is not configured. Be sure InitServlet runs.
   at com.ca.soa.services.authaz.webservice.ServiceLogic.requireAgentEnforcement(Unknown Source) ~[classes/:?]
   at com.ca.soa.services.authaz.webservice.AgentEnforcement.missingAgentEnforcement(Unknown Source) ~[classes/:?]
   at com.ca.soa.services.authaz.webservice.rest.LoginService.requireAgentEnforcement(Unknown Source) ~[classes/:?]
   at com.ca.soa.services.authaz.webservice.rest.LoginService.login(Unknown Source) [classes/:?]
   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_275]
   [...omitted for brevity...]

 

Environment

 

  CA Access Gateway (SPS) 12.8SP2 on Linux;

 

Cause

The virtual host name is

  "azwebservices.example.com" 

instead of

  "WebServicesAgentVirtualHost" 

in the CA Access Gateway (SPS) server.conf:

  <Context name="Authentication/Authorization web services">
    docBase="CA_AuthAZ"
    path="authazws"
    enable="yes"
  </Context>

  <VirtualHost name="azwebservices.example.com">
    hostnames="azwebservices.example.com"
    <WebAgent>
      sminitfile="/<home_sps>/proxy-engine/conf/webservicesagent/WebAgent.conf"
    </WebAgent>
  </VirtualHost>

 

Resolution

In server.conf, modify the virtual host name:

  From 

   <VirtualHost name="azwebservices.example.com">
     hostnames="azwebservices.example.com"

     <WebAgent>
       sminitfile="/<home_sps>/proxy-engine/conf/webservicesagent/WebAgent.conf"
     </WebAgent>
   </VirtualHost>

  To

   <VirtualHost name="WebServicesAgentVirtualHost">
     hostnames="azwebservices.example.com"

     <WebAgent>
      sminitfile="/<home_sps>/proxy-engine/conf/webservicesagent/WebAgent.conf"
     </WebAgent>
   </VirtualHost>
   
to solve the issue.