Symantec SiteMinder

 View Only

Tech Tip : CA Single Sign-On :: CA SPS:Agent for virtual host : XXXX did not initialized properly

By Ujwol posted Jul 18, 2016 02:27 AM

  

Issue/Problem/Symptoms:

Single Sign-On Secure Proxy Engine fails to start up with the following error :

[ERROR] Agent for virtual host : XXXX did not initialized properly

Where, XXXX is the name of the virtual host.

Environment:

CA Access Gateway (formerly CA Secure Proxy Server ) : ANY

Cause:

There could be multiple cause for this particular error, but one of the most common cause or this error is, the handshake error between the SPS agent and the Policy Server.

You can find this out from looking at the smps.log for the time frame corresponding to the error in the server.log .

[1860/2604][Mon Jul 18 2016 13:59:03][CServer.cpp:1959][ERROR][sm-Tunnel-00050] Handshake error: Shared secret incorrect for this client
[1860/2604][Mon Jul 18 2016 13:59:03][CServer.cpp:2121][ERROR][sm-Server-01070] Failed handshake with 155.35.245.129:49184

Resolution/Workaround:

Re-register trusted host using the following command from <Secure_Proxy>\agentframework\bin

smreghost –i <PS_IP>:44441,44442,44443 -u "siteminder" –p <password>  -hn <trustedhost> -hc <hco> -cf COMPAT

and then copy the SmHost.conf file and replace the existing SmHost.conf.

Additional Information:

N/A

1 comment
5 views