Check Policy Server IP Address or FQDN - login failed in ERP Agent
search cancel

Check Policy Server IP Address or FQDN - login failed in ERP Agent

book

Article ID: 226143

calendar_today

Updated On:

Products

CA Single Sign On Agents (SiteMinder) SITEMINDER

Issue/Introduction


When running an ERP Agent on SAP, the Agent cannot handle requests and report errors:

  #2.#2021 09 20 12:26:32:750#+0200#Error
  #com.netegrity.siteminder.sap.webas.jaas.AgentConnectionHandler#
  ##ca.com~SiteMinderLoginModule#C0000A0B4AAD0041000000060001F83F
  #304935450000000004#sap.com/irj
  #com.netegrity.siteminder.sap.webas.jaas.AgentConnectionHandler.isValidConnection()
  #Guest#0##0E41B81919FA11EC9303506B8DF4C0A3#0e41b81919fa11ec9303506b8df4c0a3##0
  #Thread[HTTP Worker [@2047131059],5,Dedicated_Application_Thread]#Plain##
  Return code from doManagement() is false#

  #2.#2021 09 20 12:26:32:752#+0200#Error
  #com.netegrity.siteminder.sap.webas.jaas.AgentConnectionHandler#
  ##ca.com~SiteMinderLoginModule#C0000A0B4AAD0041000000080001F83F#304935450000000004
  #sap.com/irj
  #com.netegrity.siteminder.sap.webas.jaas.AgentConnectionHandler.isValidConnection()
  #Guest#0##0E41B81919FA11EC9303506B8DF4C0A3#0e41b81919fa11ec9303506b8df4c0a3##0
  #Thread[HTTP Worker [@2047131059],5,Dedicated_Application_Thread]#Plain##
  Check Policy Server IP Address or FQDN#

  #2.#2021 09 20 12:26:32:754#+0200#Error
  #com.netegrity.siteminder.sap.webas.jaas.SiteMinderLoginModule#
  ##ca.com~SiteMinderLoginModule#C0000A0B4AAD00410000000A0001F83F#304935450000000004
  #sap.com/irj#com.netegrity.siteminder.sap.webas.jaas.SiteMinderLoginModule.SSOlogin()
  #Guest#0##0E41B81919FA11EC9303506B8DF4C0A3#0e41b81919fa11ec9303506b8df4c0a3##0
  #Thread[HTTP Worker [@2047131059],5,Dedicated_Application_Thread]#Plain##
  Agent not connected#

  #2.#2021 09 20 12:26:32:756#+0200
  #Error#com.netegrity.siteminder.sap.webas.jaas.SiteMinderLoginModule#
  ##ca.com~SiteMinderLoginModule#C0000A0B4AAD00410000000C0001F83F#304935450000000004
  #sap.com/irj#com.netegrity.siteminder.sap.webas.jaas.SiteMinderLoginModule.abort()
  #Guest#0##0E41B81919FA11EC9303506B8DF4C0A3#0e41b81919fa11ec9303506b8df4c0a3##0
  #Thread[HTTP Worker [@2047131059],5,Dedicated_Application_Thread]#Plain##
  login failed. Returning false#

 

Environment

 

  - ERP Agent 12.51 on SAP 7.50 on RedHat 7;
     (ca-erp-webas-12.51-rhas30-x86-64.bin);

     smwebas.home = /myapp/siteminder/webagent/sapwebas/conf/

  - Policy Server 12.8SP4 on RedHat 7;
      JDK jdk8u265-b01;

 

Cause


No Policy Server trace can be found from the network traces, which means that the ERP Agent doesn't try to reach the Policy Server.

The SAP server reported a problem with accessing and executing code from the CAPKIHOME.

std_server0.out

  --------------------------------------------------------------------------------
  stdout/stderr redirection
  --------------------------------------------------------------------------------
  node name : <server> host name : example.com system name : <servername>
  nr.  : 30 started at : Fri Oct 1 10:21:05 2021

  Please check atleast one of the following conditions are met.

  *) Set CAPKIHOME environment variable.

  *) Pass valid second parameter to etpki_lib_init function. Ex: if the second parameter is
     /a/b/c/[lib]cryptocme2.[dll][so][sl], it is assumed that /a/b/c has
     all the required CAPKI shared libraries

This is a known issue on regular Web Agent when there's a lack of configuration (1).

 

Resolution

 

  • Remove the JVM parameter:

    -DHostConfigFile=/{home_agent_sap}/sapwebas/conf/SmHost.conf

  • Set the CAPKIHOME variable in <servername>:
     
    SETENV_XX = CAPKIHOME=/{home_agent_sap}/sapwebas/CAPKI

Additional Information

 

  1. Error: Set CAPKIHOME environment variable on Web Agent Apache
    https://knowledge.broadcom.com/external/article?articleId=121289