Incomplete SM_USERNESTEDGROUPS value at first login in Policy Server

Products

• CA Single Sign On Agents (SiteMinder)
• SITEMINDER
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

 

When running a Policy Server, this one doesn't return the full group list in SM_USERNESTEDGROUPS at the first login attempt. After refreshing the page, then all the related groups are seen in the value of SM_USERNESTEDGROUPS.

At the first login:

  SM_USERNESTEDGROUPS: cn=MY_GROUP_1,dc=training,dc=com^cn=MY_GROUP_2,dc=training,dc=com^cn=MY_GROUP_3,dc=training,dc=com

after a refresh of the page:

  SM_USERNESTEDGROUPS:
  cn=MY_NESTEDGROUP_1,dc=training,dc=com^cn=MY_NESTEDGROUP_2,dc=training,dc=com^cn=MY_NESTEDGROUP_2,dc=training,dc=com^cn=MY_NESTEDGROUP_3,dc=training,dc=com^cn=MY_NESTEDGROUP_3,dc=training,dc=com^cn=MY_NESTEDGROUP_4,dc=training,dc=com^cn=MY_NESTEDGROUP_5,dc=training,dc=com^cn=MY_NESTEDGROUP_6,dc=training,dc=com^cn=MY_NESTEDGROUP_7,dc=training,dc=com^cn=MY_GROUP_1,dc=training,dc=com^cn=MY_GROUP_2,dc=training,dc=com^cn=MY_GROUP_3,dc=training,dc=com

 

Environment

 

  Policy Server 12.8SP5 on RedHat 7;
  OpenJDK Runtime Environment (AdoptOpenJDK)(build 1.8.0_252-b09)
  User Directory on Oracle OUD 11.1.2.3.160419 (11gR2);

 

Resolution

 

Upgrade Policy Server to 12.8SP7 when this one will be available to benefit fix DE532405.