APS Errors when attempting to process CGI programs CPW APSAdmin

Article Id: 5445

Status: Published

Updated On: 14-02-2018 08:11

Legacy Id: TEC1324148

Products:

CA Single Sign On Secure Proxy Server (SiteMinder) AXIOMATICS POLICY SERVER CA Single Sign On SOA Security Manager (SiteMinder) CA Single Sign-On CA Single Sign-On

Issue/Introduction:

When client attempts to use APS applications errors occur

Client side errors APSAdmin

Browser Chrome:

Message: APSAdmin SM-APS-15003 APS Administration Service must run under a WebAgent, fiddler trace shows HTTP/1.1 503 SERVICE UNAVAILABLE

Browser Firefox fails to run program – download only, same service error

Client side errors CPW

Initial change password page is displayed however after changing password error occurs HTTP/1.1 503 SERVICE UNAVAILABLE

Cause:

Apache 2.4 processing APS programs (CGI) unable to process variables SMSESSION Cookie

Environment:

Linux Server 6.1APACHE 2.4 WebAgent, Version 12.5X and above

Resolution:

Change Agent Configuration Object Parameter from Yes to No

legacyvariables='no'.

Modified httpd.conf

Add the loadmod for built in module for apachge 2.4

LoadModule cgid_module modules/mod_cgid.so

Final httpd.conf Alias

Alias /APSAdmin/ "/F6/CA/webagent/bin/web/APSAdmin/"

Options Indexes MultiViews FollowSymLinks ExecCGI

SetEnv SMPORTAL /F6/CA/webagent/bin/SmPortal.cfg

SetEnv APS_LANG_PATH /F6/CA/webagent/bin/Language

SetEnv LD_LIBRARY_PATH /F6/CA/webagent/bin:/F6/CA/webagent/bin/thirdparty

SetHandler cgi-script

AllowOverride None

Order allow,deny

Allow from all

Require all granted

</Directory>

Alias /CPW/ "/F6/CA/webagent/bin/web/CPW/"

Options Indexes MultiViews FollowSymLinks ExecCGI

SetEnv SMPORTAL /F6/CA/webagent/bin/SmPortal.cfg

SetEnv APS_LANG_PATH /F6/CA/webagent/bin/Language

SetEnv LD_LIBRARY_PATH /usr/sfw/lib:/F6/CA/webagent/bin:/F6/CA/webagent/bin/thirdparty

SetHandler cgi-script

AllowOverride None

Order allow,deny

Allow from all

Require all granted

</Directory>

Validate SmPortal configure (SmPortal.cfg) by executing /F6/CA/webagent/bin/SmPortalVfy

[[email protected] bin]$ ./SmPortalVfy

[APS Version 12.51.0006.1315 - SmPortalVfy Rev 12.51.0006.1315]

1/27/17 1:50 PM Path: SmPortal.cfg

1/27/17 1:50 PM Loading Configuration File

1/27/17 1:50 PM [SM-APS-61046] File Loaded, 25 Lines, 17 with directives, 0 errors

Analyzing Configuration

1/27/17 1:50 PM [SM-APS-61069] Analysis Complete

Validating Settings

1/27/17 1:50 PM [SM-APS-61099] FIPS 140 Cryptographic Mode is non-FIPS ('compatibility').

1/27/17 1:50 PM [SM-APS-61103] Server MyServer at 10.130.158.77...

1/27/17 1:50 PM [SM-APS-61080] SiteMinder Policy Server Version used for APS build is 12.52.0102.766

1/27/17 1:50 PM [SM-APS-61081] APSTransponder Version 12.52.0102.766 Revision 12.52.0102.766

1/27/17 1:50 PM [SM-APS-61084] SmTransact: Version 2 (discovered) installed and loadable

1/27/17 1:50 PM [SM-APS-61104] Server MyServer as Agent APSAdmin...

1/27/17 1:50 PM [SM-APS-61104] Server MyServer as Agent FPS...

1/27/17 1:50 PM [SM-APS-61104] Server MyServer as Agent SMCPW...

1/27/17 1:50 PM [SM-APS-61105] Server MyServer as Agent SMCPW for Service API.smaps...

1/27/17 1:51 PM [SM-APS-61105] Server MyServer as Agent APSAdmin for Service APSAdmin.smaps...

1/27/17 1:51 PM [SM-APS-61105] Server MyServer as Agent FPS for Service FPS.smaps...

Verification Successful