Take long time to login AdminUI and fail to load the content

Products

• SITEMINDER

Issue/Introduction

Following error can be found in adminUI log,

[ERROR] com.ca.siteminder.uiagent.UIAgent [] - Failed to execute the UIAgent wamui login command 
com.netegrity.llsdk6.imsapi.exception.SmApiWrappedException: Could not connect to Policy Server.

...

Caused by: com.netegrity.sdk.apiutil.SmApiException: Tunnel Agent failure

...

[ERROR] com.ca.siteminder.framework.xps.security.AdministratorRelationship [] - Failed to fetch administrator record for user: [***] CN=***
com.ca.siteminder.uiagent.UIAgentException: Cause: com.ca.siteminder.rpc.rpc.SystemError: AGENTAPI_FAILURE 

...

Caused by: com.ca.siteminder.rpc.rpc.SystemError: AGENTAPI_FAILURE 

...

[INFO] ims.ui [] - Security provider 'SUN' is being used to generate the random token.

 

The adminUI and policy server are on the same server,  there is no networking issue.

Cause

When checking the entropy value by using command

cat /proc/sys/kernel/random/entropy_avail

it showed 1 

This is too low and results in blocking the adminUI, and eventually timing out .

The adminUI is running on a virutal machine.

Resolution

Increase entropy as per document,

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/installing/install-the-administrative-ui/install-the-administrative-ui-on-linux-stand-alone.html

 

The adminUI should be working fine with entropy value as 2500 or above, or using urandom device(Least secure; not FIPS compliant).