IDM Environment is Down (fail to start) * Startup Step 2 : Attempting to start PolicyServerService

Products

• CA Identity Manager

Issue/Introduction

 

Identity Manager fails to start with the following messages:

 

10:23:23,986 INFO  [ims.Main] (ServerService Thread Pool -- 107) * Startup Step 2 : Attempting to start PolicyServerService

10:23:23,986 INFO  [ims.default] (ServerService Thread Pool -- 107) Unlimited Strength Java Crypto Extensions enabled: TRUE

10:23:25,048 ERROR [ims] (ServerService Thread Pool -- 107) Unable to login to the policy server: Tunnel Agent failure. Please verify policy server administrator name and password as specified in ra.xml file in iam_im.ear.

10:23:25,064 WARN  [org.jboss.jca.core.connectionmanager.pool.strategy.OnePool] (ServerService Thread Pool -- 107) IJ000604: Throwable while attempting to get a new connection: null: javax.resource.spi.EISSystemException: Cannot connect to policy server: Tunnel Agent failure...

 

Cause

The messages indicate that Identity Manager is not able to make a tunnel connection to the SiteMinder Policy Server.

Resolution

If nothing in the configuration was changed, we should assume that SSO/SiteMinder was previously integrated and working successfully. Therefore there is now a problem contacting the Policy Server.

Make sure the Policy Server is accessible from IM and is up and running.

If the Policy Server is up and running you should verify the configuration of the IM-SSO integration. In particular, verify policy server administrator name and password as specified in ra.xml file in iam_im.ear, as stated in the error message.