ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Incomplete SM_USERNESTEDGROUPS value at first login in Policy Server

book

Article ID: 240703

calendar_today

Updated On:

Products

CA Single Sign On Agents (SiteMinder) SITEMINDER CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

 

When running a Policy Server, this one doesn't return the full group
list in SM_USERNESTEDGROUPS at the first login attempt. After
refreshing the page, then all the related groups are seen in the value
of SM_USERNESTEDGROUPS.

  At the first login :

  SM_USERNESTEDGROUPS: cn=MY_GROUP_1,dc=training,dc=com^cn=MY_GROUP_2,dc=training,dc=com^cn=MY_GROUP_3,dc=training,dc=com

  after a refresh of the page :

  SM_USERNESTEDGROUPS:
  cn=MY_NESTEDGROUP_1,dc=training,dc=com^cn=MY_NESTEDGROUP_2,dc=training,dc=com^cn=MY_NESTEDGROUP_2,dc=training,dc=com^cn=MY_NESTEDGROUP_3,dc=training,dc=com^cn=MY_NESTEDGROUP_3,dc=training,dc=com^cn=MY_NESTEDGROUP_4,dc=training,dc=com^cn=MY_NESTEDGROUP_5,dc=training,dc=com^cn=MY_NESTEDGROUP_6,dc=training,dc=com^cn=MY_NESTEDGROUP_7,dc=training,dc=com^cn=MY_GROUP_1,dc=training,dc=com^cn=MY_GROUP_2,dc=training,dc=com^cn=MY_GROUP_3,dc=training,dc=com

 

Environment

 

  Policy Server 12.8SP5 on RedHat 7;
  OpenJDK Runtime Environment (AdoptOpenJDK)(build 1.8.0_252-b09)
  User Directory on Oracle OUD 11.1.2.3.160419 (11gR2);

 

Resolution

 

Upgrade Policy Server to 12.8SP7 when this one will be available.