DX Application Performance Management

Expand all | Collapse all

How to Generate "Login Error etc" in SiteMinder for SMM

Jump to Best Answer
  • 1.  How to Generate "Login Error etc" in SiteMinder for SMM

    Posted 09-28-2016 05:36 AM

    Hi,

    We have SiteMinder Manager(SMM) r12.0.4 (32 bit) on SiteMinder Policy Server r12.52 in Windows Platform(64 bit). I see only the below metrics are reported by SMM.

     

    E:\CAWily\CAWilySiteMinderManager\SiteMinderManagerAgent>IntroscopeNativeDataReporter.exe -list
    Shared File: E:\CAWily\CAWilySiteMinderManager\SiteMinderManagerAgent\data\IntroscopeAPI.shm


    Metric Counters:

    Type: PerIntervalCounter Name: SiteMinder|Policy Server|CWSST2001|Database|Operations|PolicyStore:Responses Per Interval
    Type: FlucuatingCounter Name: SiteMinder|Policy Server|CWSST2001|Health|Worker Threads:Max Count
    Type: FlucuatingCounter Name: SiteMinder|Policy Server|CWSST2001|Health|Request Queue:Current Length
    Type: AverageCounter Name: SiteMinder|Policy Server|CWSST2001|Operations|Logout:Average Response Time (ms)
    Type: PerIntervalCounter Name: SiteMinder|Policy Server|CWSST2001|Operations|Logout:Responses Per Interval
    Type: PerIntervalCounter Name: SiteMinder|Policy Server|CWSST2001|Caching|PolicyStore:Hits Per Interval
    Type: AverageCounter Name: SiteMinder|Policy Server|CWSST2001|Operations|Authorize:Average Response Time (ms)
    Type: AverageCounter Name: SiteMinder|Policy Server|CWSST2001|Operations|Login:Average Response Time (ms)
    Type: FlucuatingCounter Name: SiteMinder|Policy Server|CWSST2001|Health|Sockets:Currently In Use
    Type: FlucuatingCounter Name: SiteMinder|Policy Server|CWSST2001|Health|Sockets:Max Count
    Type: AverageCounter Name: SiteMinder|Policy Server|CWSST2001|Operations|IsProtected:Average Response Time (ms)
    Type: AverageCounter Name: SiteMinder|Policy Server|CWSST2001|LDAPDatabase|CONA User Store|Operations|UserStore:Average Response Time (ms)
    Type: PerIntervalCounter Name: SiteMinder|Policy Server|CWSST2001|Operations|IsProtected:Responses Per Interval
    Type: PerIntervalCounter Name: SiteMinder|Policy Server|CWSST2001|Operations|Authorize:Responses Per Interval
    Type: FlucuatingCounter Name: SiteMinder|Policy Server|CWSST2001|Health|Worker Threads:Currently in Use
    Type: PerIntervalCounter Name: SiteMinder|Policy Server|CWSST2001|Operations|Login:Responses Per Interval
    Type: PerIntervalCounter Name: SiteMinder|Policy Server|CWSST2001|Operations|Validate:Responses Per Interval
    Type: PerIntervalCounter Name: SiteMinder|Policy Server|CWSST2001|Database|Operations|PolicyStore:Errors Per Interval
    Type: PerIntervalCounter Name: SiteMinder|Policy Server|CWSST2001|LDAPDatabase|CONA User Store|Operations|UserStore:Responses Per Interval
    Type: FlucuatingCounter Name: SiteMinder|Policy Server|CWSST2001|Health|High Priority Request Queue:Max Length
    Type: AverageCounter Name: SiteMinder|Policy Server|CWSST2001|Database|Operations|PolicyStore:Average Response Time (ms)
    Type: FlucuatingCounter Name: SiteMinder|Policy Server|CWSST2001|Health|High Priority Request Queue:Current Length
    Type: FlucuatingCounter Name: SiteMinder|Policy Server|CWSST2001|Health|Request Queue:Max Length
    Type: AverageCounter Name: SiteMinder|Policy Server|CWSST2001|Operations|Validate:Average Response Time (ms)

    Traces:


    Trace Threshold: -1


    Connections: 1

     

    The metrics related to " Error per Interval"  like  - UserStore:Errors Per Interval, Login:Errors Per Interval, Validate:Errors Per Interval, Logout:Errors Per Interval etc. are not being reported.

    I got an update from APM community that these will be reported once there are some errors in SiteMinder.

    To generate error in SiteMinder, I executed some test cases.

    Ex- to generate "UserStore:Errors Per Interval", I stopped the user Store service, tried application login, still this is not reporting.

    Also, to generate "Login:Errors Per Interval", I entered wrong password, wrong id etc in login page, still its not reporting.

    etc.. etc..

    Can you guide what is the exact test case for these metrics to be reported.

     

    Regards,

    Rikash



  • 2.  Re: How to Generate "Login Error etc" in SiteMinder for SMM
    Best Answer

    Posted 09-28-2016 09:59 AM

    Hi Rikash :

    You have posted similar questions before. See 

     

    https://communities.ca.com/message/241915119


    https://communities.ca.com/thread/241761319

     

    Although the environment versions are different

     

    At that time, we posted the most common causes and suggestions. At that time, it was suggested to open a case. The only other thing to check is see if there are clamped metrics. Failing that, please open a case. Marking as answered because a case is appropriate at this time. You are welcome to post follow up comments and case resolution.

     

    Thanks

    Hal German



  • 3.  Re: How to Generate "Login Error etc" in SiteMinder for SMM

    Posted 09-30-2016 09:39 AM

    Hi Rikash,

    Ref Support case: 00519408

    There is no specific configuration required to enable "Error per Interval"
    metric to be reported for User Store or Login, it will only show up if there are
    actual errors reported by Policy Server Event Handler library. If no errors
    are reported than it's normal to not see this metric reporting in first
    place, once it gets reported than it will continue to report 0 values if no
    further errors happen.
    For e.g if Policy Server fails to access the required User Store it should
    generate a error and consecutively should be reported by Siteminder
    Manager. Technically Wily Siteminder Manager Agent is consuming data produced by
    Siteminder Policy Server plugin so unless they report an error to Agent, it 
    won't report it.

     

    As you can from the command "IntroscopeNativeDataReporter.sh -list "

     "UserStore:Errors Per Interval" and "Login:Errors Per Interval" are not listed, means, it is not reporting any "Errors Per Interval" metric for any of the UserStores nor "Login" to the shared segment which is Agent is not reporting those.

    1. Please check with Siteminder Team

    2. Wily SMM Agent needs to create a shared memory segment of size 10 mb.
    Ensure shared memory settings have been set as per documentation.
    You need to reboot the server.
    set shmsys:shminfo_shmmax=10485760
    set shmsys:shminfo_shmmin=10485760

     

     

     

    Here are some additional notes:

    The Login (Errors Per Interval) shows up under Operations Node

    SiteMinder Policy Server > Policy Server Metrics > Operations | Login (Errors per Interval)

    - Below is a list of scenarios where Login would return a Failure.

    Login Failures:
    . User Name may not be enclosed within parentheses.
    . Illegal characters in username.
    . Failed to resolve realm.
    . Failed to resolve user directories of domain.
    . Failed to resolve user directory.
    . Failed to create persistent session in Session Services.

    - To get Login Error Per Interval
    Access a resource protected with Basic authentication scheme using a user name that starts and ends with parentheses (i.e. if the actual user name is ¡°user1¡±, type ¡°(user1)¡±). You should get the Login failed messages

    Expected Result:
    - In the left hand pane on the Investigator, drill down the tree structure along this path:
    SiteMinderManager | SiteMinderReporter | SiteMinder|Policy Server|<PSName> node | Operations
    - User should see method Login which has 3 associated metrics:
    Responses Per Interval
    Average Response Time (ms)
    Errors Per Interval
    - Select Errors Per Interval, in the right hand pane, a graph shows the corresponding data

     

    Hope these info help.

     

    Thanks

    Yanna