Siteminder Policy Server Error: ldap_add_s returned LDAP err=0x44 (Already Exists)
Article ID: 240562
Updated On: 04-21-2025
Products
Issue/Introduction
Observed below error message on the Policy Server (smps.log file):
[HH:MM:SS.ms][3][377758][SmSSInLDAPStore.cpp:8][DoMaintenance][][][][][][][][][][][][][][][][][][][][][Enter function DoMaintenance]
[HH:MM:SS.ms][3][377758][LdapStore.cpp:37][Lock_LdapHandle][][][][][][][][][][][][][][][][][][][][][Lock LDAP handle. slot= ld=x<NAN>]
[HH:MM:SS.ms][3][377758][LdapStore.cpp:85][CLdapStore][][][][][][][][][][][][][][][][][][][][][Trying to create an object, LDAP returned an error message: Already exists, (ldap_add_s returned LDAP err=x]
[HH:MM:SS.ms][3][377758][LdapStore.cpp:37][Lock_LdapHandle][][][][][][][][][][][][][][][][][][][][][Lock LDAP handle. slot= ld=x<NAN>]
[HH:MM:SS.ms][3][377758][LdapStore.cpp:86][ReBind][][][][][][][][][][][][][][][][][][][][][Releasing LDAP connection for <Server Name>:55]
[HH:MM:SS.ms]][3][377758][LdapStore.cpp:8][ReBind][][][][][][][][][][][][][][][xxxx.example.com][55][][][][][Connected to LDAP server <Server Name>:55 as cn=smadminusername,ou=DirectoryAdministrators,ou=Admins,ou=Users,o=xxxx,c=US]
[HH:MM:SS.ms][3][377758][LdapStore.cpp:85][CLdapStore][][][][][][][][][][][][][][][][][][][][][Trying to create an object, LDAP returned an error message: Already exists, (ldap_add_s returned LDAP err=x]
[HH:MM:SS.ms][3][377758][LdapStore.cpp:557][QueryObject][][][][][][][][][][][][][][][][][][][][][Querying for object 'cn=smMaintenance,ou=sessiondb,o=xxxx,c=US', (filter:" (objectClass=smMaintenance) ")]
[HH:MM:SS.ms][3][377758][SmSSInLDAPStore.cpp:33][DoMaintenance][][][][][][][][][][][][][][][][][][][][][Leave function DoMaintenance]
Environment
Release : 12.8.x; 12.9
Operating System: All
Cause
This error is occurring when the Siteminder Policy Server attempts to perform Session Store Maintenance on the Session Store. Session Store maintenance is basically the clearing out of stale sessions from the store.
This message may occur if there are multiple policy servers connecting to the session store. The message indicates that when the policy server attempted to perform session store maintenance, it found that another policy server was already in the process of doing session store maintenance. This process locks out other policy servers from attempting to execute the same maintenance at the same time.
The Policy Server uses the "MaintenancePeriod" registry key which specifies the time interval in seconds in which the session server maintenance thread runs. The default value is 60 seconds.
Siteminder Registry
LINUX
<Install_Dir>/siteminder/registry/sm.registry
WINDOWS
run 'regedit.exe'
The "MaintenancePeriod" registry key can be found in the following registry hive:
HKEY_LOCAL_MACHINE\SOFTWARE\Netegrity\SiteMinder\CurrentVersion\SessionServer\
KeyName: MaintenancePeriod
Type: DWORD
Default: 0x3c (60)
Resolution
This message is expected and can be ignored.
Feedback
