SMTRYNO Cookie is not created/generated after invalid credential login attempts

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Problem: 

SMTRYNO Cookie is not created/generated after invalid credential login attempts

Environment:  

Web Agents 12.51 through 12.52 SP1 CRXX

 

 

Environment

Release: ESPSTM99000-12.51-Single Sign On-Extended Support Plus
Component:

Cause

Cause: 

FCC Internationalization is the use of locale-specific directories for FCCs for authentication schemes, basic password services files, and error response pages.  Web Agents 12.51 and newer support internationalization by default.  Internationalization can be disabled by setting the “Localization” ACO parameter to “No”.  That being said, disabling internationalization is not recommended. For a longer term solution, we recommend migrating your existing FCCs to work on an internationalized agent.

 The SMTRYNO cookie is only created and incremented if @smretires is set to a number other than zero. The parameter is set in the login*.fcc file used in the authentication scheme.

 

Resolution

 

Resolution:

1. If the Localization ACO parameter is commented out or set to Yes, internationalization is enabled.
2. Log on to the Administrative UI.
3. Click Infrastructure, Agent, Agent Configuration Objects.
4. Navigate to and click the Agent configuration object of your web agent.
5. Navigate to the Localizationparameter to see its value.
6. Since internationalization is enabled, you need to edit the login*.fcc file corresponding to the locale. If you are unsure about the locale, review the web agent trace log and search for “CSmFormTemplateCache::GetForm”.

 [CSmFormTemplateCache::GetForm][Serving form template 'C:\Program Files\CA\webagent\win64\samples/forms_en-US/login_en-US.fcc' from disk.]

3. Edit the localized fcc form and set @smretires accordingly. If the fcc form is cached, you may need to restart the web agent service.  You can verify by reviewing the web agent trace log.

 […]Serving form template 'C:\Program Files\CA\webagent\win64\samples/forms_en-US/login_en-US.fcc' from cache.]

 

Additional Information

Additional Information:

For additional information regarding Internationalization:

https://docops.ca.com/ca-single-sign-on-12-52-sp1/en/configuring/web-agent-configuration/fcc-internationalization

 For additional information regarding ACO Parameter Localization:

https://docops.ca.com/ca-single-sign-on-12-52-sp1/en/release-notes/installation-and-upgrade-considerations/web-agent-installation-and-upgrade-considerations