RSA SecureID Auth Scheme is not working -- Failed to load library 'smauthacehtml'. Error: Unknown Error

Products

• SITEMINDER

Issue/Introduction

Error from smps.log:

[SmAuthServer.cpp:242][ERROR][sm-Server-02910] Failed to load library 'smauthacehtml'. Error: Unknown Error

Environment

SiteMinder:
Policy Server 12.8.x / 12.9.x

Cause

Under SiteMinder lib folder:

$ ls -l *ace*
-rwxrwxr-x. 1 ssosvc ssosvc 3742672 Dec  6 00:14 libaceclnt.so
-rwxrwxrwx. 1 ssosvc ssosvc  216416 Dec  6 00:14 libsmauthacehtml.so
-rwxrwxr-x. 1 ssosvc ssosvc   78837 Dec  6 00:14 libsmauthace.so

$ ldd libaceclnt.so
        linux-vdso.so.1 (0x00007ffd7f98a000)
        libnsl.so.1 => not found
        libdl.so.2 => /lib64/libdl.so.2 (0x00007f0c961c2000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f0c961bd000)
        libc.so.6 => /lib64/libc.so.6 (0x00007f0c95800000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f0c961d4000)

The dependant libnsl.so.1 is not installed.

Resolution

Check for missing dependencies

On the Policy Server, navigate to the SiteMinder /lib directory and run the command, "ldd libaceclnt.so".

Look for libnsl.so.1

Check the output for libnsl.so.1 => not found. This is a common requirement that may be missing on Linux 8 and 9 distributions.

Install the library

If libnsl.so.1 is missing, please install the library using your system package manager (e.g., yum install libnsl).

Re-run the LDD command on libaceclnt.so

Verify that the dependencies have been linked correctly.

Be sure to follow each library recursively to ensure all dependencies are met.

Locate any libraries that still show "not found" and install them or correct the path so they can be found.

Repeat for libsmauthacehtml.so and libsmauthace.so

Verify Environment Variables

Ensure that USR_ACE and VAR_ACE are correctly defined in your smprofile.ksh and pointing to the directory containing your sdconf.rec file.

Restart the Policy Server and test the login page again


Additional information:

Incorrect Auth Scheme Settings

If the library name in the error message is not a default SiteMinder library, the authentication scheme may be misconfigured.

Check Scheme Library and verify the "Library" field in the Administrative UI for the affected Auth Scheme.