Error: Policy Server crash during LDAP directory re-indexing with error code 10 - Siteminder

Products

• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• SITEMINDER
• VCF Site Reliability Engineering
• VMware Site Recovery Manager
• VMware Site Recovery Manager 8.x
• VMware vCenter Site Recovery Manager 5.x

Issue/Introduction

The Siteminder Policy Server may crash when an integrated LDAP user directory performs a re-indexing operation and returns LDAP referral error code 10.

Environment

• Product: CA Single Sign-On (Siteminder)
• Version: 12.8 SP08 CR01
• Component: Policy Server
• Operating System: Linux (RHEL 7, RHEL 8)

Cause

The Policy Server does not correctly handle the referral response (error code 10) sent by certain LDAP directories when they are undergoing re-indexing.

Resolution

A fix is available for this issue. Please apply the attached fix following the steps below,

1. Stop the Policy Server.
2. Back up the existing libsmdsldap.so file located in the /lib directory of the Policy Server installation.
3. Apply the patch attached to this KB Article (DE667205-128801.tar).
4. Restart the Policy Server.

Additional Information

Permanent Fix: This issue is targeted to be fixed in Siteminder release 12.9. Please subscribe to this article (Reference: 275360) to be updated on the official release status.