Webagent for IIS 500 Error

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

I recently configured 12.52 SP1 Web Agent on IIS7.5, and i am getting 500 errors while accesssing protected resources on the webserver.

 

The Web Agent log reports below errors:

 

[5960/5468][Wed Aug 02 2017 12:25:20][CSmPluginManager.cpp:187][ERROR][sm-AgentFramework-00120] sm-AgentFramework-00120 (C:\Program Files\CA\webagent\win32\bin\HttpPlugin.dll)

[5960/5468][Wed Aug 02 2017 12:25:20][CSmPluginManager.cpp:96][ERROR][sm-AgentFramework-00110] sm-AgentFramework-00110 (C:\Program Files\CA\webagent\win32\bin\HttpPlugin.dll)

[5960/5468][Wed Aug 02 2017 12:25:20][CSmAdminManager.cpp:190][ERROR][sm-AgentFramework-00270] sm-AgentFramework-00270

[5960/5468][Wed Aug 02 2017 12:25:20][CSmHighLevelAgent.cpp:122][ERROR][sm-AgentFramework-00400] sm-AgentFramework-00400 (Administration Manager)

Environment

Web Agent 12.52 SP1 on IIS7.5

Cause

Siteminder Web Agent for IIS installs libraries for both 32bit and 64bit applications.

In this case, the Web Agent was pulling 32bit binaries for a 64bit application pool

Application pool was set to 64bits(Enable 32-Bit Applications was set to false) in IIS

LoadPlugin="C:\Program Files\CA\webagent\win32\bin\HttpPlugin.dll"

64bit Application Pools should be configured to pull from 64bit agent libraries

Resolution

Configure the Webagent to pull the HttpPlugin.dll from the 64bit directory path.

 

The Webagent.conf file in the below directory:

C:\Program Files\CA\webagent\win64\bin\IIS

 

Should reflect as below and the line should be un commented:

 

LoadPlugin="C:\Program Files\CA\webagent\win64\bin\HttpPlugin.dll"