Wildcard Realm and Rule resources patterns syntax in AdminUI

Products

• CA Single Sign On Agents (SiteMinder)
• SITEMINDER

Issue/Introduction

 

When running an AdminUI and configuring 2 rules having:

*.myapp*.net/*
*.myotherapp.net/*

• What would be the behavior in the Browser?
• Does Siteminder allow these patterns for Authentication and Authorization?

Resolution

 

At first glance, the Realm configuration should be a string. Regular expressions are only available for the Rules (1).

Configuring with the following:

Realm : /*.myapp*.net
Rule : /*
protected with Basic

Then in the browser, access is granted without having to log in:

http://_host._domain._com/1.myapp1.net/allheaders.php

When trying to reach this URL which has reserved characters, the Web Agent returns 500 complaints that:   

[ERROR][sm-HTTPAgent-00100] URL contains invalid characters.
Exiting with HTTP 500 server error '00-0002'.
   
  http://_host._domain._com/*.myapp*.net/allheaders.php

To correct that behavior, put the regular expression into the rule definition for that to work.

Realm : /
Rule : *.myapp*.net/*
protected with Basic
  
Then in the browser, access is requested to log in with Basic Authentication Scheme:

Then in the browser, access is requested to log in with Basic Authentication Scheme:

http://_host._domain._com/1.myapp1.net/allheaders.php

and access is granted after giving the expected credentials.

 

Additional Information

 

(1)

    AdminUI realm configuration with asterix * wildcard