Siteminder Policy Server startup and boot scripts for RedHat 7

Products

• CA Single Sign On Federation (SiteMinder)
• SITEMINDER
• CA Single Sign-On

Issue/Introduction

 

One might need to get a script to start the Policy Server at boot
time.

 

Environment

 

Policy Server 12.8SP5 on RedHat 7

 

Resolution

 

At first glance, Policy Server files offer a sample script for
sysVinit or OpenRC style :

  /opt/CA/siteminder/S98sm

which you can integrate to systemd RedHat 7 style as per documentation
(1).

It's advised to integrate it according to documentation, and then
apply one by one all custom configuration the environment might need.

Systemd scripts are restricted to root user. To run them from a
non-root user, implement sudo command. Contact the RedHat Support or
your system administrator to implement this. Here's a discussion over
the internet about the same (2).

The given configuration from our documentation insure that when
systemd script run by root, the Policy Server runs with the user
"smuser" (3).

 

Additional Information

 

(1)

    Configure Auto Startup
    https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/installing/install-a-policy-server/install-policy-server-on-unix/configure-auto-startup.html

(2)

    How could we allow non-root users to control a systemd service?

      Just add all needed commands to sudoers separately:

    https://unix.stackexchange.com/questions/192706/how-could-we-allow-non-root-users-to-control-a-systemd-service

(3)

     Configure Auto Startup

      [...]

      [Service]
      Type=forking
      User=smuser

      [...]

    https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/installing/install-a-policy-server/install-policy-server-on-unix/configure-auto-startup.html