Another option to resolve the proxyui error "Error: Exception User might not have required permissions to get group information". (Additional information to TEC1304259)

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

When logging into the R12.52 SP1 Single Sign-On (fka SiteMinder) Access Gateway (fka Secure Proxy Server) ProxyUI an error message is displayed stating:

"Error: Exception User might not have required permissions to get group information".

Environment

Single Sign-On Access Gateway (fka Secure Proxy Server) R12.52 SP1 , R12.6OS: All

Cause

As TEC1304259 explained, the error is due to that the user is not considered to be a SiteMinder Administrator and these error messages will be encountered.

Resolution

In addition to the resolution of TEC1304259, here is another option to resolve the error. You may make the Proxy UI login ID as the super user. Create the super user from the Policy Server AdminUI.

Suppose the ID used to access the Proxy UI is 'myAdmin' which is located in the LDAP server. To make this ID the super user you need to create an 'Administrator' using the same ID and LDAP path.

Here are the steps

1. Select the 'Administration' section in the Policy Server AdminUI, then 'Administrator' and then select 'Create Administrator'.
2. In the 'name' section, provide 'myAdmin' and in the 'user path' provide the path using the DN, such an example as:
   LDAP://192.168.10.20:389/uid=myAdmin,ou=people,dc=example,dc=com
3. Select 'Super User' in the 'Details' section and submit the form.
   Note: You may get a warning message "Warning: [General] The user could not be found in the current authentication directory" just ignore it and submit your form.
4. The Administrator setting looks like below.
   
   
5. Clear the Policy Server Cache.
6. Now, try to access the Proxy UI again using the 'myAdmin' ID.

 

Additional Information

TEC1304259 How to resolve the "Error: Exception User might not have required permissions to get group information" when logging into the R12.52 SP1 ProxyUI.myAdmin.png