Error: Exception trying to extract entities from metadata in AdminUI

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign-On
• SITEMINDER

Issue/Introduction

When running an AdminUI, and when trying to import a metadata file for an Entity, the AdminUI reports error in the browser:

  Exception trying to extract entities from metadata
  
and the AdminUI server.log shows the following line:

  2022-01-26 13:25:02,923 [ERROR] com.ca.federation.adminui.backingbean.federation.ImportMetadataWizardStepListener [] - **ERROR** com.ca.fedxps.api.remote.FedXPSException during UI operation. com.ca.fedxps.api.remote.FedXPSException: com.ca.federation.client.XPSException: Failed to find the requested Service : CA : XPS : sm-xpssvc-00850

The AdminUI server.log:

  2022-01-26 13:24:42,338 [ERROR] ims.ui [] - Page cannot be found. Please check the URL. (/iam/siteminder/app/ui7/${pageContext.request.contextPath}/resources/css/fr_styles.css)
  
  2022-01-26 13:25:02,923 [ERROR] com.ca.federation.adminui.backingbean.federation.ImportMetadataWizardStepListener [] - **ERROR** com.ca.fedxps.api.remote.FedXPSException during UI operation.
  com.ca.fedxps.api.remote.FedXPSException:
  com.ca.federation.client.XPSException: Failed to find the requested
  Service : CA : XPS : sm-xpssvc-00850
  
   at com.ca.federation.api.remote.FedMetadata.serviceCall(Unknown Source) ~[fedremoteapi.jar:?]
   at com.ca.federation.api.remote.FedMetadata.getEntities(Unknown Source) ~[fedremoteapi.jar:?]
   at
   com.ca.federation.adminui.common.FedUiPersistenceHandler.extractEntities(FedUiPersistenceHandler.java:668)
   ~[fedmgr.jar:?]

  [...]

  Caused by: com.ca.federation.client.XPSException: Failed to find the requested Service : CA : XPS : sm-xpssvc-00850

The Policy Server smps.log :
  
  [1499/139754108565248][Wed Jan 26 2022 13:25:02.917][XPSSvcHandlerServices.cpp:340][InvokeService][ERROR][sm-xpssvc-00850] Failed to find the requested Service
  [1499/139754108565248][Wed Jan 26 2022 13:25:02.918][XPSSvcHandlerServices.cpp:165][ProcessRequest][ERROR][sm-xpssvc-00840] Failed to invoke the requested Service  
  [1499/139754108565248][Wed Jan 26 2022 13:25:02.918][XPSSvc.cpp:255][InvokeHandler][ERROR][sm-xpssvc-00020] Cannot Process the Request.
  

smtracedefault.log :
  
  [01/26/2022][13:25:02.917][13:25:02][1499][139754108565248][XPSSvcHandlerServices.cpp:340][InvokeService][][][][][][][][][][][][][][][][][][][][][LogMessage:ERROR: Failed to find the requested Service][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]
  [01/26/2022][13:25:02.918][13:25:02][1499][139754108565248][XPSSvcHandlerServices.cpp:165][ProcessRequest][][][][][][][][][][][][][][][][][][][][][LogMessage:ERROR: Failed to invoke the requested Service][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]
  [01/26/2022][13:25:02.918][13:25:02][1499][139754108565248][XPSSvc.cpp:255][InvokeHandler][][][][][][][][][][][][][][][][][][][][][LogMessage:ERROR: Cannot Process the Request.][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]
  [01/26/2022][13:25:02.919][13:25:02][1499][139754108565248][CServer.cpp:6975][CServer::Tunnel][][][][][][][][][][][][][292][][][][][][][][Return from tunnel call XPSSvc_Services][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]

 

Cause

The issue occurs when opted to sign the certificate during the metadata export but did not send the certificate/public key in the metadata.

Such an import isn't recommended.

 

Resolution

 
Delete the Signature section

 <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">

 [...]

 </Signature>

from the metadata file and re-import it to solve the issue.