Policy Server returns "AceCheck:Denied---aceRetVal = 1"
book
Article ID: 75000
calendar_today
Updated On:
Products
CA Single Sign On Secure Proxy Server (SiteMinder)AXIOMATICS POLICY SERVERCA Single Sign On SOA Security Manager (SiteMinder)CA Single Sign-On
Issue/Introduction
We're running Policy Server, when ACE authentication Scheme is in use, the Policy Server doesn't communicate with the RSA Server and Policy Server reports error :
[4708/4456][Wed Jan 24 2018 16:38:30][SmAuthAceHtml.cpp:1127] [ERROR][sm-LoginLogout-01130] AceCheck:Denied---aceRetVal = 1
So the user cannot get authenticated. How can we resolve this ?
The issue was with the node secret. On the RSA Server, we clicked on "clear the node secret" check-box from RSA security console and then, the Policy Server could authenticate the user successfully against the RSA Server.