Remote access to policy server admin UI (on two occasions) caused the policy server to crash.

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Description:

We are experiencing an issue with our production policy server, version 6.0 SP5, CR19.

On 2 occasions, after a week of normal operation we tried to connect to the SiteMinder administration console by navigating to http://<servername>/siteminder/ from a workstation. The administrative interface fails to load. More concerning is that within minutes, the policy server begins to fail. The result to the end user is a 500 Internal Server Error page.

Details in the SPS log indicate that it is unable to check if the resource is protected. We have several instances of the following log entries:
07/Oct/2008:12:52:52-737] - Thread-30 - DoIsProtected - Error -1 calling Sm_AgentApi_IsProtected().
[07/Oct/2008:12:52:52-737] - Thread-30 - Exiting with HTTP 500 Server Error: 20-0003

On the Policy Server, we found an Event log popup application error message:

smpolicysrv.exe - Unable to Locate Component

The application has failed to start because xerces-c_1_5_1.dll was not found. Re-installing the application may fix this problem.

Solution:

Install 6SP5 CR23
CQ 73454 The SiteMinder Policy server on the windows platform will no longer display an error box on the system console when a loadlibrary error occurs. This was causing the Policy Server to hang.

Environment

Release:
Component: SMPLC