Error: Permission denied on Web Agent webappclientresponse Ajax calls

Products

• CA Single Sign On Agents (SiteMinder)
• SITEMINDER
• CA Single Sign-On

Issue/Introduction

When running a Web Agent and protecting a resource using the ACO parameter WebAppClientResponse, the browser gets an error:

server.example.com says
Unable to connect to Server.

Cause

The Web Agent can't deliver the content holding the response because the Web Agent doesn't have permission to read and execute it.

As per documentation, the Body file from the WebAppClientResponse should have the direction the request should proceed (1).

webagent.log

[29985/501548800][Fri Nov 19 2021 10:40:32] cookieprovider='https://server.example.com/SmMakeCookie.ccc'.
[29985/501548800][Fri Nov 19 2021 10:40:32] overlooksessionaspattern='yes'.
[29985/501548800][Fri Nov 19 2021 10:40:32] overlooksessionforurls='/myapp/mypage/'.
[29985/501548800][Fri Nov 19 2021 10:40:32] webappclientresponse='Resource=/myapp/my.*|Method=GET,POST,PUT|Status=200|Body=/{home_webagent}/samples/ajax/ajax.html|Content-Type=application/json|Charset=us-ascii'.
[...]
[30437/1921849088][Tue Nov 23 2021 10:32:33][CSmHttpPlugin.cpp:2332][WARNING][sm-HTTPAgent-00190] Unable to process SMSESSION cookie.
[30437/1921849088][Tue Nov 23 2021 10:32:33][CSmWeb20CacheObj.cpp:238][ERROR][sm-HTTPAgent-00370] Error opening form template '/{home_webagent}/samples/ajax/ajax.html': Permission denied.

webagenttrace.log

[11/23/2021][10:32:33][30437][1921849088][CSmHttpCredCore.cpp:1997][CSmHttpCredCore::DoFormsChallenge][00000000000000000000000079100d0a-76e5-619cc341-728d1700-3db058a3c8cd][*10.0.0.1][][myAgent][/myapp/my.myapplication.01][][Redirecting to credential collector 'https://server.example.com/siteminderagent/login.fcc?CHECKPASSWORD=ON&TYPE=33554432&REALMOID=06-0005c689-312d-1ea8-b4c7-4a120a320000&GUID=&SMAUTHREASON=0&METHOD=POST&SMAGENTNAME=$SM$<value>&TARGET=$SM$HTTPS%3A%2F%2Fserver.example.com%2Fmyapp%2Fmy.myapplication.01'.]
[11/23/2021][10:32:33][30437][1921849088][CSmWeb20Cache.cpp:210][CSmWeb20Cache::GetForm][][][][][][][Form template '/{home_webagent}/samples/ajax/ajax.html' not found in cache.]
[11/23/2021][10:32:33][30437][1921849088][CSmWeb20CacheObj.cpp:236][CSmWeb20CacheObj::LoadFormTemplate][][][][][][][Permission denied]
[11/23/2021][10:32:33][30437][1921849088][CSmWeb20Cache.cpp:284][CSmWeb20Cache::GetForm][][][][][][][Unable to serve form template '/{home_policy_server}/samples/ajax/ajax.html' from disk.]
[11/23/2021][10:32:33][30437][1921849088][CSmWeb20Response.cpp:108][HandleCustomizedResponsRequest][00000000000000000000000079100d0a-76e5-619cc341-728d1700-3db058a3c8cd][*10.0.0.1][][myAgent][/myapp/my.myapplication.01][][Sending WEB 2.0 custom response (Url '' and Reason 'Challenge')]

Resolution

Make the file fully accessible for the account running Apache and Web Agent to solve this issue:

/{home_webagent}/samples/ajax/ajax.html

Additional Information

1. Apply SiteMinder Behavior to a Web Application Client