500 error seen when POSTing data to protected resources on Oracle iPlanet webserver

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

This KB Article is valid only for Oracle iPlanet webserver

Issue:- When an unauthenticated user does a HTTP POST on protected resource, with post preservation enabled in webagent, gets a 500 error.

In iPlanet webserver error log we see below error:-

[16/May/2016:15:25:50] finest (16316): for host 10.115.248.150 trying to POST /, func_exec reports: executing fn="SmRequireAuth" Directive="PathCheck" 

[16/May/2016:15:25:50] finest (16316): for host 10.115.248.150 trying to POST /, func_exec reports: fn="SmRequireAuth" Directive="PathCheck" returned -1 (REQ_ABORTED) 

Resolution:-

1.    Go to iplanet webserver installation directory.

2.    Open the instance_name-obj.conf file on your web server.

3.    Locate the following line:  AuthTrans fn="SiteMinderAgent"

 

4.    Add UseOutputStreamSize="0" to the end of the previous line, as shown in the following example:

5.    AuthTrans fn="SiteMinderAgent" UseOutputStreamSize="0"

6.    Save the file, and then restart the web server.

 

Additional Information:-

·         Info on UseOutputStreamSize:-  https://docs.oracle.com/cd/E19857-01/820-5713/abuhr/index.html

·          https://docops.ca.com/ca-single-sign-on-12-52-sp1/en/troubleshooting/wss-agent-for-oracle-iplanet-server-troubleshooting

·         https://docops.ca.com/ca-single-sign-on-12-52-sp1/en/configuring/web-agent-configuration/troubleshooting-agent-configuration#TroubleshootingAgentConfiguration-CustomErrorPagesnotAppearing

 

 

 

Environment

Release: ESPSTM99000-12.51-Single Sign On-Extended Support Plus
Component: