APS Errors when attempting to process CGI programs CPW APSAdmin

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

When client attempts to use APS applications errors occur 

Client side errors APSAdmin

Browser Chrome: 

Message: APSAdmin SM-APS-15003 APS Administration Service must run under a WebAgent, fiddler trace shows HTTP/1.1 503 SERVICE UNAVAILABLE

Browser Firefox fails to run program – download only, same service error

Client side errors CPW

Initial change password page is displayed however after changing password error occurs HTTP/1.1 503 SERVICE UNAVAILABLE

 

Cause

Apache 2.4 processing APS programs (CGI) unable to process variables  SMSESSION Cookie 

 

Environment

Linux Server 6.1APACHE 2.4 WebAgent, Version 12.5X and above

Resolution

Change Agent Configuration Object Parameter from Yes to No

legacyvariables='no'.

Modified httpd.conf  

Add the loadmod for built in module for apachge 2.4 

LoadModule cgid_module modules/mod_cgid.so

 

Final httpd.conf Alias

Alias /APSAdmin/ "/F6/CA/webagent/bin/web/APSAdmin/"

       <Directory "/F6/CA/webagent/bin/web/APSAdmin/">

           Options Indexes MultiViews FollowSymLinks ExecCGI

SetEnv SMPORTAL /F6/CA/webagent/bin/SmPortal.cfg

SetEnv APS_LANG_PATH  /F6/CA/webagent/bin/Language

SetEnv LD_LIBRARY_PATH /F6/CA/webagent/bin:/F6/CA/webagent/bin/thirdparty

SetHandler cgi-script

            AllowOverride None

Order allow,deny

Allow from all

Require all granted

       </Directory>

 

Alias /CPW/ "/F6/CA/webagent/bin/web/CPW/"

       <Directory "/F6/CA/webagent/bin/web/CPW/">

            Options Indexes MultiViews FollowSymLinks ExecCGI

SetEnv SMPORTAL /F6/CA/webagent/bin/SmPortal.cfg

SetEnv APS_LANG_PATH  /F6/CA/webagent/bin/Language

SetEnv LD_LIBRARY_PATH /usr/sfw/lib:/F6/CA/webagent/bin:/F6/CA/webagent/bin/thirdparty

SetHandler cgi-script

            AllowOverride None

Order allow,deny

Allow from all

Require all granted

       </Directory>

 

 

Validate SmPortal configure (SmPortal.cfg) by executing /F6/CA/webagent/bin/SmPortalVfy 

[[email protected] bin]$ ./SmPortalVfy

[APS Version 12.51.0006.1315 - SmPortalVfy Rev 12.51.0006.1315]

1/27/17 1:50 PM Path: SmPortal.cfg

1/27/17 1:50 PM Loading Configuration File

1/27/17 1:50 PM [SM-APS-61046] File Loaded, 25 Lines, 17 with directives, 0 errors

Analyzing Configuration

1/27/17 1:50 PM [SM-APS-61069] Analysis Complete

Validating Settings

1/27/17 1:50 PM [SM-APS-61099] FIPS 140 Cryptographic Mode is non-FIPS ('compatibility').

1/27/17 1:50 PM [SM-APS-61103] Server MyServer at 10.130.158.77...

1/27/17 1:50 PM [SM-APS-61080]     SiteMinder Policy Server Version used for APS build is 12.52.0102.766

1/27/17 1:50 PM [SM-APS-61081]     APSTransponder Version 12.52.0102.766 Revision 12.52.0102.766

1/27/17 1:50 PM [SM-APS-61084]     SmTransact: Version 2 (discovered) installed and loadable

1/27/17 1:50 PM [SM-APS-61104] Server MyServer as Agent APSAdmin...

1/27/17 1:50 PM [SM-APS-61104] Server MyServer as Agent FPS...

1/27/17 1:50 PM [SM-APS-61104] Server MyServer as Agent SMCPW...

1/27/17 1:50 PM [SM-APS-61105] Server MyServer as Agent SMCPW for Service API.smaps...

1/27/17 1:51 PM [SM-APS-61105] Server MyServer as Agent APSAdmin for Service APSAdmin.smaps...

1/27/17 1:51 PM [SM-APS-61105] Server MyServer as Agent FPS for Service FPS.smaps...

 

Verification Successful