Failed to obtain scheme credentials from Java authentication scheme in Policy Server

Products

• SITEMINDER

Issue/Introduction

Running Policy Server, when the Custom Java Authentication Scheme is called, the Policy Server reports the following error:

  [06/24/2024][07:05:00.937][][][][][][][][][][][][][][][LogMessage:ERROR:[sm-JavaApi-00670] SmJavaAPI: Unable to get a JVM environment][][]
  [06/24/2024][07:05:00.937][s478/r28][][][][][][][][][<java_auth_scheme>][][][][][** Status: Error. Reject s478/r28 : internal error - failed to obtain scheme credentials for scheme '<java_auth_scheme>'][][]
  [06/24/2024][07:05:00.937][s478/r28][][][][][][][][][][][][][][Leave function CSm_Az_Message::IsProtected, Failed to obtain scheme credentials.][Reject s478/r28 : internal error - failed to obtain scheme credentials for scheme '<java_auth_scheme>'][]

How does the password correspond between the SDK and the Java Authentication Scheme? Where does the Policy Server write the password in the SDK?

 

Environment

Policy Server 12.8SP8CR01 on RedHat 8;

 

Cause

The problem above is not by passing the data from the Policy Server to the Custom Java Authentication Scheme.

The problem is that the Policy Server faces a problem with its JVM to start it with the Custom Java Authentication Scheme:

  Unable to get a JVM environment

 

Resolution

In /{home_policy_server}/ca_ps_env.ksh, change the NETE_JRE_ROOT to point to a symlink, or give a folder to find the JRE to solve the issue.

To illustrate:

NETE_JRE_ROOT="/opt/jdk-11.0.17+8-jre"; export NETE_JRE_ROOT