Steps to Re-register Admin UI with the Policy server.
search cancel

Steps to Re-register Admin UI with the Policy server.

book

Article ID: 9742

calendar_today

Updated On:

Products

CA Single Sign On Secure Proxy Server (SiteMinder) CA Single Sign On SOA Security Manager (SiteMinder) CA Single Sign-On

Issue/Introduction

This Knowledge base article goes through the Steps of Re-registering the SSO Administrative UI with the Policy server.

The Instructions are for Default JBOSS application server as well as for the deployment on WebLogic application server



Environment

This applies to 12.x SSO product on all platforms

Resolution

The below Instructions are for the Default JBOSS application server

Summary of Steps:

1.Shut down Administrative UI JBOSS application server

2.Delete the "data, log, tmp & work" folder under "<adminui dir>\server\default\" directory

3.XPSExplorer: remove the trusted host created by XPSRegClient

4.XPSSecurity: remove the WAM UI Admin Directory

5. Delete the SMWAMUI Administrator Account

6.Run XPSRegClient command on the Policy Server

- Example: XPSRegClient siteminder:<password> -adminui-setup -vT

7.Start Administrative UI service/ Jboss application server

8.Access the Administrative UI webpage to complete the registration (e.g.:

http://<fqdn>:8080/iam/siteminder/adminui  or with SSLport https://<fqdn>:8443/iam/siteminder/adminui)

 

Detailed Steps Instructions:

** Shut down JBOSS

1.Navigate to <Siteminder_AdminUI_Home>/siteminder/adminui/bin

2.shutdown.sh (UNIX) or stop the "SiteMinder Administrative UI" service on Windows

** Delete the "data, log, tmp & work" folder under "<adminui dir>\server\default\" directory

** XPSExplorer -delete trustedhost

1.Open the command prompt / shell on the Policy Server

2.Change to the <PS Install Dir>/bin

3.Launch "XPSExplorer":

4.Run: xpsexplorer

5.Type 110 or 139  TrustedHost* ((or whatever number corresponds to TrustedHost*), then hit ENTER

6.Type 's' for Search Objects , then hit ENTER

7.Locate the Trusted Host Object with the Desc: "XPSRegClient" with the host name of the WAMUI possibly listed as an FQDN. It will look

Something like this:

1.    3-CA.SM::TrustedHost@24-xpsagent-fwrk-1cc9-991a-062X4CC9A2EB

           (I) Name : "siteminder"

           (C) Desc : "Generated by XPSRegClient"

           (C) IpAddr : "0000:0000:0000:0000:0000:FFFF:"

           (C) RolloverEnabled : false

8.Confirm the Object ID for the Trusted Host Object with the name Desc

 

That corresponds to the WAMUI host

(The object id prefaces CA.SM::TrustedHost@24-xpsagent-fwrk~ .In the example above, the object id is 3 )

9.Type the object id number which corresponds to the WAMUI Trusted host object, then hit ENTER

10.Type d to delete the selected object id, then hit ENTER.

11.Type 'q' to go back, and then 'q' again, and then 'q' again (Until you get the big list where it says 'MAIN MENU')

12.Choose 'q' again to exit XPSExplorer



** XPSSecurity -delete Admin Directory User

1. Run XPSSecurity and delete the below entry ('SiteMinder Administrative UI Directory User')

NOTE: XPSSecurity is found in the installation binaries along with smreg and is not copied to the \bin directory during installation.

MAIN MENU*******************************************************************

   A  - Administrators

   S  - Security Categories

   C  - Classes

   W  - Workspaces

   B  - Begin Transaction

   P  - Synchronize with Policy Server (if running)

   Q  - Quit

-------------------------------------------------------------------

 

Enter Option (A,S,C,W,B,P or Q): A

Look for SM_ADMIN-DIRECTORY

  7 - SiteMinder Administrative UI Directory User

 SM-ADMIN-DIRECTORY

 Used by the UI for authenticating administrators

2. Enter "D" for Delete

 ----------------------------- Metadata ----------------------------

   XID: CA.XPS::Administrator@000eface-b8a0-1345-b89c-9e4e0a82d04b(4103)

 In Cache? no

  (1)

Created: 2014-04-09 21:16:44 GMT

By: XPSDictionary::Import (via Internal)

 -------- Attributes from CA.XPS::Administrator (Base Class) -------

 01: Description                     "Used by the UI for authenticating administrators"

 02: Flags                           0(0x0):

 03: MethodsAllowed                  4(0x4): AdminUI

 04: Name                            "SiteMinder Administrative UI Directory User                                       "

 05: UserPath                        "SM-ADMIN-DIRECTORY"

 06: Workspaces

 -------------------------------------------------------------------

    B  - Blank out an Attribute

    G  - Generate GUID

    V  - Validate

    U  - Update

    D  - Delete

    R  - List Rights

    A  - List 6 Attributes

    Q  - Quit

 -------------------------------------------------------------------

Enter Option (# or BGVUDRAQ):  D

Note : From R12.52SP2 onwards, the folder structure for Administrative UI is changed as the embedded JBoss has now been upgraded from 5.0 to 8.2

So, instead of doing following above :

1.Delete the "data, log, tmp & work" folder under "<adminui dir>\server\default\" directory

You should : Delete the "data,log,tmp" folder under "<adminui dir>\standalone" directory.

 

** Delete the SMWAMUI Administrator Account

1. Open the command prompt / shell on the Policy Server 

2.  Navigate the file system  to the <PS Install Dir>/bin 

3.  Launch "XPSExplorer"

4.  Type ‘93’ for Administrators, then hit ENTER

Example:  “ 93–     Admin*”

5.  Type  'S' for Search Objects, then hit ENTER 

Example:  “ S – Search Objects”

6.  Locate the Admin object with the name "SMWAMUI:<WAMUI FQDN>".  It will look something like this:

         2-CA.SM::Admin@12-6d192e45-48e4-4870-be9d-a5v8r31t596u

         (I)  Name  :"SMWAMUI:myserver.host.com__0"

7.  Confirm the Object ID number for the Admin Object with the name "SMWAMUI:<FQDN>_n". 

NOTE: (The object id prefaces “CA.SM::Admin@<OID>”.  In the example above, the object id is “2”)

8. Type the object id number which corresponds to the name  "SMWAMUI:siteminder", (“2”), and  then hit ENTER

9. Type ‘D’ to delete the selected object id, and then hit ENTER.

10. Type 'Q' to go back,  and then 'Q' again,  and then 'Q' again (until you get the big list where it says 'MAIN MENU').

 

** Run XPSRegClient command on the Policy Server

Example: XPSRegClient siteminder:<password> -adminui-setup -vT

** Start Administrative UI service/ Jboss application server

** Access the Administrative UI webpage to complete the registration (e.g.:

http://<fqdn>:8080/iam/siteminder/adminui or with SSLport https://<fqdn>:8443/iam/siteminder/adminui)

 

The below Instructions are for the Weblogic application server

1.    Shut down weblogic <weblogic_path_to_domain>\bin\stopWebLogic.sh

2.    Delete the "data" folder under "<weblogic_path_to_domain>" directory. The default location is,<welbogic install>\user_projects\domains\<user_domain>\

3.    Run XPSRegClient command on the Policy Server

Example:  XPSRegClient siteminder:<password> -adminui-setup -vT

4.    Start Policy Server

5.    Start weblogic

6.    Access the Administrative UI webpage to complete the registration (e.g.:

      http://<fqdn>:<port>/iam/siteminder/adminui



 

Additional Information

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/installing/install-the-administrative-ui/re-register-administrative-ui.html

Powered by Wolken Software