Agent on CA Access Gateway (SPS) loses connection with Policy Server

Products

• SITEMINDER
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

Running CA Access Gateway (SPS), sometimes, and randomly, the browsers get a 500 error.

Wanting to implement "SM_ENABLE_TCP_KEEPALIVE" as environment variable to fix it.

Where to set this environment variable when the CA Access Gateway (SPS) runs on a Linux box?

 

Resolution

When starting from the command line, the place to set it, is in the ca_sps_env.sh file, with the start sequence being:

# cd /{home_sps}/
# source ca_sps_env.sh
# cd /{home_sps}/proxy-engine/
# ./sps-ctl startssl

Note that the network traces from the CA Access Gateway (SPS) machine will show that this variable has been correctly set and taken by the CA Access Gateway (SPS) (1).

 

Additional Information

 

1. Verify SM_ENABLE_TCP_KEEPALIVE is working on Web Agent - Policy Server