ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

IDM Environment is Down (fail to start) * Startup Step 2 : Attempting to start PolicyServerService

book

Article ID: 226396

calendar_today

Updated On:

Products

CA Identity Manager

Issue/Introduction

 
Identity Manager fails to start with the following messages:
 
10:23:23,986 INFO  [ims.Main] (ServerService Thread Pool -- 107) * Startup Step 2 : Attempting to start PolicyServerService
10:23:23,986 INFO  [ims.default] (ServerService Thread Pool -- 107) Unlimited Strength Java Crypto Extensions enabled: TRUE
10:23:25,048 ERROR [ims] (ServerService Thread Pool -- 107) Unable to login to the policy server: Tunnel Agent failure. Please verify policy server administrator name and password as specified in ra.xml file in iam_im.ear.

10:23:25,064 WARN  [org.jboss.jca.core.connectionmanager.pool.strategy.OnePool] (ServerService Thread Pool -- 107) IJ000604: Throwable while attempting to get a new connection: null: javax.resource.spi.EISSystemException: Cannot connect to policy server: Tunnel Agent failure...

 

Cause

The messages indicate that Identity Manager is not able to make a tunnel connection to the SiteMinder Policy Server.

Resolution

If nothing in the configuration was changed, we should assume that SSO/SiteMinder was previously integrated and working successfully. Therefore there is now a problem contacting the Policy Server.

Make sure the Policy Server is accessible from IM and is up and running.

If the Policy Server is up and running you should verify the configuration of the IM-SSO integration. In particular, verify policy server administrator name and password as specified in ra.xml file in iam_im.ear, as stated in the error message.