When I try to change my password and it's refused, the page doesn't show the User-Friendly message (smpwservices.fcc)

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Running Web Agent, when I go to the Password Services page smpwservices.fcc,
the User-friendly messages don't display on change password page when the
password isn't accepted.

To illustrate :

  Your password change was not accepted

  Your new password does not contain enough nonalphanumeri characters.
  Passwords must contain at least 1 nonalphanumeric character(s).

  It was working on Web Agent 5, but since upgraded to
  12, it doesn't work anymore.

  Issue reproduced with IE, Firefox, Chrome

Other things to check if the password expiration warning doesn't display include(Including for Access gateway):
- smauthreason should equal 19, (20 will not display the message)

- Localized forms should be configured.  This could impact SMPWUSRMSG cookie and display of warning.

Environment

Policy Server 12.52CR00 on SunOS 5.11; User Store on LDAP ODSEE 11g 11.1.1.7.0; Web Agent 12.52CR00 on Sun Java Web Server 6.1SP3 on SunOS 5.11;

Cause

  There's a known issue when on a POST request, the value of the $$SMPWUSRMSG$$
  is not received by the Web Agent

Resolution

  Upgrade the Web Agent and Access Gateway to 12.52SP1CR05 to benefit the fix :

  Defects Fixed in 12.52 SP1 CR05
  00118306 DE139891
  The password change reason is not passed to Change Password form during POST.
  https://docops.ca.com/ca-single-sign-on/12-52-sp1/en/release-notes/cumulative-releases/defects-fixed-in-12-52-sp1-cr05#DefectsFixedin12.52SP1CR05-WebAgent