What could causes "Error 16 for Variable scontextKey" in the smps.log?

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Description:

These error messages in the policy server log doesn't indicate any end user problem in terms of usuability; users are able to authenticate and autorize properly.

[Sm_Auth_Message.cpp:2161][ERROR] GetVariable(Fetch) ReturnedError 16 for Variable scontextKey[SmSSInDBStore.cpp:1669][INFO] CSmSSInDBStore::DoGetVariable() - failed with code - 1001[Sm_Auth_Message.cpp:76][ERROR] CSmSessionServer::GetVariable() - Provider::GetVariable() failed. Error code : 2[Sm_Auth_Message.cpp:2161][ERROR] GetVariable(Fetch) ReturnedError 16 for Variable scontextDomain[SmSSInDBStore.cpp:1669][INFO] CSmSSInDBStore::DoGetVariable() - failed with code - 1001[Sm_Auth_Message.cpp:76][ERROR] CSmSessionServer::GetVariable() - Provider::GetVariable() failed. Error code : 2[Sm_Auth_Message.cpp:2161][ERROR] GetVariable(Fetch) ReturnedError 16 for Variable scontextUser[SmSSInDBStore.cpp:1669][INFO] CSmSSInDBStore::DoGetVariable() - failed with code - 1001[Sm_Auth_Message.cpp:76][ERROR] CSmSessionServer::GetVariable() - Provider::GetVariable() failed. Error code : 2

Solution:

Ensure that the user directory is not defined in a security context.
Also uncheck the box "Run in Authenticated User's security context" on the "Credentials and Connection" tab of the user directory definition on the policy server admin GUI.

Environment

Release:
Component: SMPLC