Maintenance object not found defaulting to the lowest version supported - 5

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

The CA Single Sign On (p.k.a Siteminder) SMPS.log on the Policy Server repeatedly prints the following error:

[SmSSInLDAPStore.cpp:573][INFO][sm_LoginLogout_01021] LDAPGetMaintenanceInfo() - Maintenance object not found defaulting to the lowest version supported - 5 

 

Cause

The Session Store is enabled on the Policy Server in the SMConsole, however the connection properties are mis-configured.  

Session Store Connection Properties:

LDAP Server IP:

RootDN:

Admin UserName:

Password:

Confirm Password

 

This error can only occur if the connection to the CA Directory Server is succeeding, however the LDAP Query itself is failing.

Possible Causes:

• Session Store Schema is not installed
• Incorrect LDAP Root for the Session Store
• Insufficient Admin Permissions
• Maintenance Object value empty

 

Environment

Policy Server: r12.52; r12.52 SP1; r12.52 SP2; r12.6.1; r12.7Policy Server OS: ANYSession Store: CA Directory Server

Resolution

• Verify the schema is installed
• Verify the LDAP Root is correct of the Session Store
• Verify the Session Store Admin. has sufficient privileges 
• Verify the 'smVersion' value from the 'smMaintenance' object.

Additional Information

https://docops.ca.com/ca-single-sign-on/12-52-sp1/en/installing/install-a-policy-server/configure-ldap-directory-server-policy-session-and-key-stores/configure-ca-directory-as-a-session-store#ConfigureCADirectoryasaSessionStore-CreatetheSessionStoreSchema

https://docops.ca.com/ca-single-sign-on/12-52-sp2/en/installing/install-a-policy-server/configure-ldap-directory-server-policy-session-and-key-stores/configure-ca-directory-as-a-session-store

https://docops.ca.com/ca-single-sign-on/12-6-01/en/installing/install-a-policy-server/configure-ldap-directory-servers-as-policy-session-and-key-stores/configure-ca-directory-as-a-session-store

https://docops.ca.com/ca-single-sign-on/12-7/en/installing/install-a-policy-server/configure-ldap-directory-servers-as-policy-session-and-key-stores/configure-ca-directory-as-a-session-store