Is there anyway to find out what a trustedhost (agent) uses as ACO and HCO without connecting to each host individually ?
Article ID: 374201
Updated On:
Products
Issue/Introduction
This KB will illustrates how to find out what ACO / HCO used by a specific agent trustedhost without having to connect to each Webserver/Agent host to look into the SmHost.conf and the WebAgent.conf
Environment
Any supported siteminder environment
Resolution
There are couple ways that you can find out the link between an agent trustedhost and what ACO or HCO is being used as follows :
** Method 1 --> use the Policy Object AgentInstances REST API "/ca/api/sso/services/policy/v1/SmAgentInstances" which will give you all registered AgentInstances link.
Follow the Link to each AgentInstance and the response will have all the properties including the trustedhost name , ACO name, HCO name, IP and server host name where the agent resides.
For more information about the REST API , please see --> https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/programming/policy-object-rest-apis/rest-api-reference-documentation/policy-data-api-core-policy-objects.html
** Method 2 --> use the Policy Server trace to pull a Domanagement Call from the agent since the agent will send all these attributes on the call.
below is a sample of what you get in the trace where 128sp8accessgateway being the trustedhost name in this example
[CSmMessage::ParseAgentMessage][128sp8accessgateway][][][][][][][][][][][][][][][][][][][][][][][][][0000000000000000000000000425fd0a-5f49-63484a5a-xxxxxxxxxxxxxxx][][][][][][Receive request attribute 169, data size is 72][][][][][][][
[CSmMessage::ParseAgentMessage][128sp8accessgateway][][][][][][][][][][][][][][][][][][][][][][][][][AccessGateway][][][][][][Receive request attribute 170, data size is 13][][][][][][][][] --> Attribute 170 is the type of the Agent
[CSmMessage::ParseAgentMessage][128sp8accessgateway][][][][][][][][][][][][][][][][][][][][][][][][][12.8.0800.2892][][][][][][Receive request attribute 171, data size is 14][][][][][][][][] --> Attribute 171 is the version of the Agent
[CSmMessage::ParseAgentMessage][128sp8accessgateway][][][][][][][][][][][][][][][][][][][][][][][][][default][][][][][][Receive request attribute 174, data size is 7][][][][][][][][]
[CSmMessage::ParseAgentMessage][128sp8accessgateway][][][][][][][][][][][][][][][][][][][][][][][][][<path to accessGateway>/conf/defaultagent/AgentId.dat][][][][][][Receive request attribute 173, data size is 63][][][][][][][][]
[CSmMessage::ParseAgentMessage][128sp8accessgateway][][][][][][][][][][][][][][][][][][][][][][][][][128aco][][][][][][Receive request attribute 175, data size is 6][][][][][][][][] --> attribute 175 is the ACO name
[CSmMessage::ParseAgentMessage][128sp8accessgateway][][][][][][][][][][][][][][][][][][][][][][][][][128hco][][][][][][Receive request attribute 176, data size is 6][][][][][][][][] --> attribute 176 is the HCO name
[CSmMessage::ParseAgentMessage][128sp8accessgateway][][][][][][][][][][][][][][][][][][][][][][][][][serverexamplehostname-128sp8-ag][][][][][][Receive request attribute 177, data size is 16][][][][][][][][] --> Attribute 177 is the Host name of the server Agent is running on
[CSmMessage::ParseAgentMessage][128sp8accessgateway][][][][][][][][][][][][][][][][][][][][][][][][][10.xx.xx.xx][][][][][][Receive request attribute 182, data size is 14][][][][][][][][] --> Attribute 182 is the IP of the server Agent is running on
[CSmMessage::ParseAgentMessage][128sp8accessgateway][][][][][][][][][][][][][][][][][][][][][][][][][Linux 3.10.0-1160.76.1.el7.x86_64][][][][][][Receive request attribute 179, data size is 33][][][][][][][][] --> Attribute 179 is the OS Agent is running on
[CSmMessage::ParseAgentMessage][128sp8accessgateway][][][][][][][][][][][][][][][][][][][][][][][][][COMPAT][][][][][][Receive request attribute 181, data size is 6][][][][][][][][] --> Attribute 181 is the FIPS mode used by the Agent
[CSmMessage::ParseAgentMessage][128sp8accessgateway][][][][][][][][][][][][][][][][][][][][][][][][][FALSE][][][][][][Receive request attribute 134, data size is 5][][][][][][][][]
[CSmMessage::ParseAgentMessage][128sp8accessgateway][][][][][][][][][][][][][][][][][][][][][][][][][4][][][][][][Receive request attribute 148, data size is 1][][][][][][][][]
Feedback
