Config file invalid with Siteminder ERP Agent for SAP Web AS

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign-On
• CA Single Sign On Agents (SiteMinder)
• SITEMINDER

Issue/Introduction

Upon initial installation and configuration of the ERP Agent for SAP Web AS, the error

"Config file invalid"

shows up in the SAP "security.log" file, as with the following log excerpt:

#1.5#<value>#/System/Security/Audit/
J2EE#sap.com/irj#com.sap.engine.services.security.roles.SecurityRoleImpl#Guest#111##n/a##f239a030b5af11ddc5b9001125c0eeb8
#Thread[Thread-54,5,SAPEngine_Application_Thread[impl:3]_Group]##0#0#Info#1#com.sap.engine.services.security.roles.SecurityRoleImpl#Java###{0}:
Authorization check for caller assignment to J2EE security role [{1} : {2}].#3#ACCESS.OK#SAP-J2EE-Engine#guests#

#1.5#<value>#/System/Security#sap.com/irj#com.netegrity.
siteminder.sap.webas.jaas.SiteMinderLoginModule.initialize()#Guest#0##n/a##fb66e900b5b011ddc2bf001125c0eeb8#SAPEngine_Application_Thread[impl:3]_36##0#0
#Info#1#com.netegrity.siteminder.sap.webas.jaas.SiteMinderLoginModule#Plain###Login module initialized#

#1.5#<value>#<value>#/System/Security#sap.com/irj#com.
netegrity.siteminder.sap.webas.jaas.SiteMinderLoginModule.login()#Guest#0##n/a##fb66e900b5b011ddc2bf001125c0eeb8#SAPEngine_Application_Thread[impl:3]_36##0#0
#Error#1#com.netegrity.siteminder.sap.webas.jaas.SiteMinderLoginModule#Plain###Config file invalid#

#1.5#<value>#<value>#/System/Security#sap.com/irj#com.
netegrity.siteminder.sap.webas.jaas.SiteMinderLoginModule.errorURL()#Guest#0##n/a##fb66e900b5b011ddc2bf001125c0eeb8#SAPEngine_Application_Thread[impl:3]_36
##0#0#Info#1#com.netegrity.siteminder.sap.webas.jaas.SiteMinderLoginModule#Plain###SiteMinder login module authentication failed. No Error URL configured, sending error message...#

#1.5#<value>#<value>#/System/Security/Authentication#sap.
com/irj#com.sap.engine.services.security.authentication.logincontext#Guest#0##n/a##fb66e900b5b011ddc2bf001125c0eeb8#
SAPEngine_Application_Thread[impl:3]_36
##0#0#Error#1#com.sap.engine.services.security.authentication.logincontext#Plain###LOGIN.FAILED

Resolution

The only reason this exception should occur is when either the path to the 'SmWebAsSSO.conf' file is invalid (1), or permissions preclude it from loading.

If the above property is configured correctly, ensure that all permissions (777) are opened to the "SmWebAsSSO.conf file and its subdirectories, in case a component of the SAP J2EE Engine is running as a user differing from the start user.

When changing these settings, completely shut down and restart all SAP J2EE Engine components.

Additional Information

1. smwebas.home property not set