Error : services failed or missing dependencies AdminUI startup hangs

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On
• SITEMINDER

Issue/Introduction

 

When running and AdminUI, when clicking to see objects, then the error
in the browser shows up :

  java.lang.NullPointerException 

More, the Policy Server logs reports some missing data structures :

smps.log 

  [11046/139995791681344][Thu Apr 26 2018 16:37:37][IdPPartSvc.cpp:122]
  [validateAttrTypes][INFO][sm-xobfed-01641] 
  Referenced attribute CA.FED::IdPPartnership.SendACSUrlInAuthnRequest is not present in schema 

  [11046/139995791681344][Thu Apr 26 2018 16:37:37][IdPPartSvc.cpp:122]
  [validateAttrTypes][INFO][sm-xobfed-01641] 
  Referenced attribute CA.FED::SPPartnership.SecureAuthURL is not present in schema 

  [11046/139995791681344][Thu Apr 26 2018 16:37:37][IdPPartSvc.cpp:122]
  [validateAttrTypes][INFO][sm-xobfed-01641] 
  Referenced attribute CA.FED::SPPartnership.GUIDCookieValidityDuration is not present in schema 

  [11046/139995791681344][Thu Apr 26 2018 16:37:37]
  [IdPPartSvc.cpp:122][validateAttrTypes][INFO][sm-xobfed-01641] 
  Referenced attribute CA.FED::IdPPartnership.NameIDPolicyFormat is not present in schema 

  [11046/139995791681344][Thu Apr 26 2018 16:37:37]
  [IdPPartSvc.cpp:122][validateAttrTypes][INFO][sm-xobfed-01641] 
  Referenced attribute CA.FED::IdPPartnership.IssuerFormat is not present in schema 

  [11046/139995791681344][Thu Apr 26 2018 16:37:37]
  [IdPPartSvc.cpp:122][validateAttrTypes][INFO][sm-xobfed-01641] 
  Referenced attribute CA.FED::SAML1xProdToConsPartnership.SecureAuthURL is not present in schema 

  [11046/139995791681344][Thu Apr 26 2018 16:37:37]
  [IdPPartSvc.cpp:122][validateAttrTypes][INFO][sm-xobfed-01641] 
  Referenced attribute CA.FED::WSFEDIPToRPPartnership.AuthenticationLevel is not present in schema 

  [11046/139995791681344][Thu Apr 26 2018 16:37:37]
  [IdPPartSvc.cpp:122][validateAttrTypes][INFO][sm-xobfed-01641] 
  Referenced attribute CA.FED::WSFEDIPToRPPartnership.SecureAuthURL is not present in schema 

  [11046/139995791681344][Thu Apr 26 2018 16:37:37]
  [IdPPartSvc.cpp:122][validateAttrTypes][INFO][sm-xobfed-01641] 
  Referenced attribute CA.FED::WSFEDIPToRPPartnership.DontSendRecipient is not present in schema 

 

Environment

 

Policy Server 12.8 on RedHat 7; 
Policy Store on ODBC MSSQL 2014; 
 

Cause

 

According to the above Policy Server log lines, there are some
Federation data structure missing in the Policy Store. The AdminUI
needs a healthy and complete Policy Store data to works fine.

 

Resolution

 

To solve the issue, run the following (1) :

  XPSImport ampolicy.xml -npass 
  XPSImport fedpolicy-12.5.xml -npass 
  XPSImport default-fedobjects-config.xml -npass

 

Additional Information

 

(1)

    Import the Default Policy Store Objects
    https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/installing/install-a-policy-server/configure-odbc-databases-as-policy-session-key-and-audit-stores/configure-an-odbc-database-as-a-policy-store/how-to-configure-a-sql-server-policy-store.html