Gateway errors in SiteMinder SDK validation

Products

• CA API Gateway

Issue/Introduction

SSO is currently not working on the API Gateway.  The following messages are written to the log file:

2024-05-21T13:07:19.812-0500 INFO    439 STDOUT: FATAL ERROR: Exception from System.loadLibrary java.lang.UnsatisfiedLinkError: no smcommonutil in java.library.path: [/opt/CA/sdk/bin64, /opt/SecureSpan/Gateway/runtime/lib, /usr/java/packages/lib, /usr/lib64, /lib64, /lib, /usr/lib]

2024-05-21T13:07:19.813-0500 INFO    439 STDOUT: FATAL ERROR: Exception from AgentAPI.initialize() java.lang.UnsatisfiedLinkError: 'void netegrity.siteminder.javaagent.AgentAPI.initialize()'

Environment

API Gateway 11.x

Cause

This error in the SSO SDK is typically related to LD_LIBRARY_PATH. Since the Gateway uses the SSO SDK Custom Agent as JNI, you have to set the following: 

Implement the JNI API 

Linux: Change LD_LIBRARY_PATH to include install_path/sdk/bin so that libsmjavaagentapi.so, libsmerrlog.so and libsmcommonutil.so can be found. 

Make sure the files permissions for the SSO SDK are correct:

/opt/CA:

total 4

drwxr-x---.  4 root root   30 May  3 09:21 .
drwxr-xr-x. 10 root root  146 May 22 08:01 ..
drwxr-xr-x.  3 root root   20 May  3 09:21 CAPKI
drwxr-xr-x. 14 root root 4096 May  3 09:21 sdk

Resolution

Modify the file permissions to the SSO SDK folder.

Command to change permission for /opt/CA:

# chmod -R 755 /opt/CA