Symantec Access Management

  • Private Community

  • 1.  http 500 internal server error

    Posted Mar 09, 2017 02:13 PM

    The error that I’m seeing when testing from my HP laptop on an external connection appears to originate from the webserver.

    Using IE, I get, “http 500 internal server error”, and using firefox, I get, “500: Server Error [00-0011]”.

     

    When I have check the web-agent logs 

     

    ][][][Start new request.]
    [03/08/2017][17:39:26][16576][42352][CSmResourceManager.cpp:75][CSmResourceManager::ProcessResource][000080fe000000006af2e90dbcdc56ea-40c0-58c0962e-a570-0360567e][][][][][][Calling SM_WAF_HTTP_PLUGIN->ProcessResource.]
    [03/08/2017][17:39:26][16576][42352][CSmHttpPlugin.cpp:399][CSmHttpPlugin::ProcessResource][000080fe000000006af2e90dbcdc56ea-40c0-58c0962e-a570-0360567e][][][][][][Resolved HTTP_HOST: 'idm-tst.krft.net'.]
    [03/08/2017][17:39:26][16576][42352][CSmHttpPlugin.cpp:5249][Entered CSmHttpPlugin::ResolveFQServerName sHost: ][][][][][][][idm-tst.krft.net]
    [03/08/2017][17:39:26][16576][42352][CSmHttpPlugin.cpp:490][CSmHttpPlugin::ProcessResource][000080fe000000006af2e90dbcdc56ea-40c0-58c0962e-a570-0360567e][][][][][][Resolved hostname: 'idm-tst.krft.net'.]
    [03/08/2017][17:39:26][16576][42352][CSmHttpPlugin.cpp:509][CSmHttpPlugin::ProcessResource][000080fe000000006af2e90dbcdc56ea-40c0-58c0962e-a570-0360567e][][][][][][Resolved agentname: 'idm-tst.krft.net'.]
    [03/08/2017][17:39:26][16576][42352][CSmHttpPlugin.cpp:5602][CSmHttpPlugin::ResolveClientIp][000080fe000000006af2e90dbcdc56ea-40c0-58c0962e-a570-0360567e][][][idm-tst.krft.net][][][Resolved Client IP address '10.53.53.78'.]

    [03/08/2017][17:39:26][16576][42352][CSmHttpPlugin.cpp:657][CSmHttpPlugin::ProcessResource][000080fe000000006af2e90dbcdc56ea-40c0-58c0962e-a570-0360567e][*10.53.53.78][][idm-tst.krft.net][][][Resolved URL: '/siteminderagent/forms/auth_loginM.fcc?TYPE=33554433&REALMOID=06-2aebee86-afa9-4af8-b921-fb9bd587e26b&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=bc-catalyst-test&TARGET=$SM$https%3A%2F%2Fpartner-x%2Ekrft%2Enet%2Fcfauth%2Fcatalyst_partner_test%2F*%2F%3Fcfru%3DaHR0cDovL3NhcGtyZnRld3gwMS5rcmZ0Lm5ldC8%3D'.]

    [03/08/2017][17:39:26][16576][42352][CSmHttpPlugin.cpp:5681][CSmHttpPlugin::AutoAuthorizedUrl][][][][][][][Auto-authorizing resource, matches IgnoreExt filter.]

    [03/08/2017][17:39:26][16576][42352][CSmHttpPlugin.cpp:698][CSmHttpPlugin::ProcessResource][000080fe000000006af2e90dbcdc56ea-40c0-58c0962e-a570-0360567e][*10.53.53.78][][idm-tst.krft.net]

    [/siteminderagent/forms/auth_loginM.fcc?TYPE=33554433&REALMOID=06-2aebee86-afa9-4af8-b921-fb9bd587e26b&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=bc-catalyst-test&TARGET=$SM$https%3A%2F%2Fpartner-x%2Ekrft%2Enet%2Fcfauth%2Fcatalyst_partner_test%2F*%2F%3Fcfru%3DaHR0cDovL3NhcGtyZnRld3gwMS5rcmZ0Lm5ldC8%3D][][Autoauthorizing URL : 'http://idm-tst.krft.net/siteminderagent/forms/auth_loginM.fcc?TYPE=33554433&REALMOID=06-2aebee86-afa9-4af8-b921-fb9bd587e26b&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=bc-catalyst-test&TARGET=$SM$https%3A%2F%2Fpartner-x%2Ekrft%2Enet%2Fcfauth%2Fcatalyst_partner_test%2F*%2F%3Fcfru%3DaHR0cDovL3NhcGtyZnRld3gwMS5rcmZ0Lm5ldC8%3D' , Method: 'GET' ]

    [03/08/2017][17:39:26][16576][42352][CSmHttpPlugin.cpp:781][CSmHttpPlugin::ProcessResource][000080fe000000006af2e90dbcdc56ea-40c0-58c0962e-a570-0360567e][*10.53.53.78][][idm-tst.krft.net][/siteminderagent/forms/auth_loginM.fcc?TYPE=33554433&REALMOID=06-2aebee86-afa9-4af8-b921-fb9bd587e26b&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=bc-catalyst-test&TARGET=$SM$https%3A%2F%2Fpartner-x%2Ekrft%2Enet%2Fcfauth%2Fcatalyst_partner_test%2F*%2F%3Fcfru%3DaHR0cDovL3NhcGtyZnRld3gwMS5rcmZ0Lm5ldC8%3D][][Resolved METHOD: 'GET'.]

    [03/08/2017][17:39:26][16576][42352][CSmHttpPlugin.cpp:834][CSmHttpPlugin::ProcessResource][000080fe000000006af2e90dbcdc56ea-40c0-58c0962e-a570-0360567e][*10.53.53.78][][idm-tst.krft.net][/siteminderagent/forms/auth_loginM.fcc?TYPE=33554433&REALMOID=06-2aebee86-afa9-4af8-b921-fb9bd587e26b&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=bc-catalyst-test&TARGET=$SM$https%3A%2F%2Fpartner-x%2Ekrft%2Enet%2Fcfauth%2Fcatalyst_partner_test%2F*%2F%3Fcfru%3DaHR0cDovL3NhcGtyZnRld3gwMS5rcmZ0Lm5ldC8%3D][][Resolved cookie domain: '.krft.net'.]

    [03/08/2017][17:39:26][16576][42352][CSmResourceManager.cpp:112][CSmResourceManager::ProcessResource][000080fe000000006af2e90dbcdc56ea-40c0-58c0962e-a570-0360567e][*10.53.53.78][][idm-tst.krft.net][/siteminderagent/forms/auth_loginM.fcc?TYPE=33554433&REALMOID=06-2aebee86-afa9-4af8-b921-fb9bd587e26b&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=bc-catalyst-test&TARGET=$SM$https%3A%2F%2Fpartner-x%2Ekrft%2Enet%2Fcfauth%2Fcatalyst_partner_test%2F*%2F%3Fcfru%3DaHR0cDovL3NhcGtyZnRld3gwMS5rcmZ0Lm5ldC8%3D][][SM_WAF_HTTP_PLUGIN->ProcessResource returned SmSuccess.]

    [03/08/2017][17:39:26][16576][42352][CSmResourceManager.cpp:75][CSmResourceManager::ProcessResource][000080fe000000006af2e90dbcdc56ea-40c0-58c0962e-a570-0360567e][*10.53.53.78][][idm-tst.krft.net][/siteminderagent/forms/auth_loginM.fcc?TYPE=33554433&REALMOID=06-2aebee86-afa9-4af8-b921-fb9bd587e26b&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=bc-catalyst-test&TARGET=$SM$https%3A%2F%2Fpartner-x%2Ekrft%2Enet%2Fcfauth%2Fcatalyst_partner_test%2F*%2F%3Fcfru%3DaHR0cDovL3NhcGtyZnRld3gwMS5rcmZ0Lm5ldC8%3D][][Calling SM_WAF_OAUTH_PLUGIN->ProcessResource.]

    [03/08/2017][17:39:26][16576][42352][CSmResourceManager.cpp:121][CSmResourceManager::ProcessResource][000080fe000000006af2e90dbcdc56ea-40c0-58c0962e-a570-0360567e][*10.53.53.78][][idm-tst.krft.net][/siteminderagent/forms/auth_loginM.fcc?TYPE=33554433&REALMOID=06-2aebee86-afa9-4af8-b921-fb9bd587e26b&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=bc-catalyst-test&TARGET=$SM$https%3A%2F%2Fpartner-x%2Ekrft%2Enet%2Fcfauth%2Fcatalyst_partner_test%2F*%2F%3Fcfru%3DaHR0cDovL3NhcGtyZnRld3gwMS5rcmZ0Lm5ldC8%3D][][SM_WAF_OAUTH_PLUGIN->ProcessResource returned SmNoAction.]

    [03/08/2017][17:39:26][16576][42352][CSmSessionManager.cpp:82][CSmSessionManager::EstablishSession][000080fe000000006af2e90dbcdc56ea-40c0-58c0962e-a570-0360567e][*10.53.53.78][][idm-tst.krft.net][/siteminderagent/forms/auth_loginM.fcc?TYPE=33554433&REALMOID=06-2aebee86-afa9-4af8-b921-fb9bd587e26b&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=bc-catalyst-test&TARGET=$SM$https%3A%2F%2Fpartner-x%2Ekrft%2Enet%2Fcfauth%2Fcatalyst_partner_test%2F*%2F%3Fcfru%3DaHR0cDovL3NhcGtyZnRld3gwMS5rcmZ0Lm5ldC8%3D][][Calling SM_WAF_HTTP_PLUGIN->EstablishSession.]

    [03/08/2017][17:39:26][16576][42352][CSmSessionManager.cpp:126][CSmSessionManager::EstablishSession][000080fe000000006af2e90dbcdc56ea-40c0-58c0962e-a570-0360567e][*10.53.53.78][][idm-tst.krft.net][/siteminderagent/forms/auth_loginM.fcc?TYPE=33554433&REALMOID=06-2aebee86-afa9-4af8-b921-fb9bd587e26b&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=bc-catalyst-test&TARGET=$SM$https%3A%2F%2Fpartner-x%2Ekrft%2Enet%2Fcfauth%2Fcatalyst_partner_test%2F*%2F%3Fcfru%3DaHR0cDovL3NhcGtyZnRld3gwMS5rcmZ0Lm5ldC8%3D][][SM_WAF_HTTP_PLUGIN->EstablishSession returned SmNoAction.]

    [03/08/2017][17:39:26][16576][42352][CSmSessionManager.cpp:82][CSmSessionManager::EstablishSession][000080fe000000006af2e90dbcdc56ea-40c0-58c0962e-a570-0360567e][*10.53.53.78][][idm-tst.krft.net][/siteminderagent/forms/auth_loginM.fcc?TYPE=33554433&REALMOID=06-2aebee86-afa9-4af8-b921-fb9bd587e26b&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=bc-catalyst-test&TARGET=$SM$https%3A%2F%2Fpartner-x%2Ekrft%2Enet%2Fcfauth%2Fcatalyst_partner_test%2F*%2F%3Fcfru%3DaHR0cDovL3NhcGtyZnRld3gwMS5rcmZ0Lm5ldC8%3D][][Calling SM_WAF_OAUTH_PLUGIN->EstablishSession.]

    [03/08/2017][17:39:26][16576][42352][CSmSessionManager.cpp:126][CSmSessionManager::EstablishSession][000080fe000000006af2e90dbcdc56ea-40c0-58c0962e-a570-0360567e][*10.53.53.78][][idm-tst.krft.net][/siteminderagent/forms/auth_loginM.fcc?TYPE=33554433&REALMOID=06-2aebee86-afa9-4af8-b921-fb9bd587e26b&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=bc-catalyst-test&TARGET=$SM$https%3A%2F%2Fpartner-x%2Ekrft%2Enet%2Fcfauth%2Fcatalyst_partner_test%2F*%2F%3Fcfru%3DaHR0cDovL3NhcGtyZnRld3gwMS5rcmZ0Lm5ldC8%3D][][SM_WAF_OAUTH_PLUGIN->EstablishSession returned SmNoAction.]

    [03/08/2017][17:39:26][16576][42352][CSmHighLevelAgent.cpp:405][ProcessRequest][000080fe000000006af2e90dbcdc56ea-40c0-58c0962e-a570-0360567e][*10.53.53.78][][idm-tst.krft.net][/siteminderagent/forms/auth_loginM.fcc?TYPE=33554433&REALMOID=06-2aebee86-afa9-4af8-b921-fb9bd587e26b&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=bc-catalyst-test&TARGET=$SM$https%3A%2F%2Fpartner-x%2Ekrft%2Enet%2Fcfauth%2Fcatalyst_partner_test%2F*%2F%3Fcfru%3DaHR0cDovL3NhcGtyZnRld3gwMS5rcmZ0Lm5ldC8%3D][][ProtectionManager returned SmNo, end new request.]

    [03/08/2017][17:39:26][16576][42352][CSmLowLevelAgent.cpp:3567][ReportHealthData][][][][][][][Accumulating HealthMonitorCtxt.]
    [03/08/2017][17:39:26][16576][42352][CSmHighLevelAgent.cpp:970][ProcessAdvancedAuthentication][000080fe000000006af2e90dbcdc56ea-40c0-58c0962e-a570-

     

     

     

    May I know do we see any error from siteminder webagent logs 



  • 2.  Re: http 500 internal server error
    Best Answer

    Posted Mar 09, 2017 11:32 PM

    Hi,

    It seems some problem on the fcc file. Can you try the out of the box login.fcc and check if error reproduce?

     

    00-0011
    Reason:
    Credential Collector Error.This indicates that a general failure in Forms or SSL-based advanced authentication resulted in blocked access.
    Action:
    Do the following:
    ■ Check the Web Agent and Policy Server logs to determine the root cause of the failure.
    ■ Investigate the advanced authentication scheme setup for issues.

     

    Regards,

    Kar Meng



  • 3.  Re: http 500 internal server error

    Posted Mar 10, 2017 11:06 AM

    [WARNING][sm-AgentFramework-00480] HLA: Missing resource data.

    [ERROR][sm-HTTPAgent-00370] Error opening form template '<d:\Program Files\CA\webagent\win64\samples\forms\HRAOLogin\MDLZ_MyHRLogin_External.fcc>': Permission denied.

    [16576/42352][Thu Mar 09 2017 13:36:01][SmFCC.cpp:1308][ERROR][sm-HTTPAgent-00130] Credential Collector error.  Exiting with HTTP 500 server error '00-0011'.

     



  • 4.  Re: http 500 internal server error

    Posted Mar 12, 2017 07:50 PM

    Ok, so we know this is a permission issue. The identity with which the LLAWP.exe is running donesn't have permission to access your customise login page.

     

    Depending upon what context you are running your web site (webserver) provide the required read permission to the login page.



  • 5.  Re: http 500 internal server error

    Posted Mar 13, 2017 10:22 AM

    ERROR][sm-HTTPAgent-00020] Unable to resolve server host name. Exiting with HTTP 500 server error '10-0004'.
    [30652/36284][Mon Mar 13 2017 09:19:19][CSmResourceManager.cpp:158][WARNING][sm-AgentFramework-00480] HLA: Missing resource data.



  • 6.  Re: http 500 internal server error

    Posted Mar 13, 2017 10:37 AM

    Hi Naveen,

     

    Siteminder web agents only accept HTTP 1.1 requests, because HTTP 1.0 and 0.9 requests do not use HOST headers. The siteminder web agent uses the value of the HOST header in an HTTP request to determine the Agent Name, Server Name, and Server IP Address. Without a HOST header, requests will trigger a server error 10-0004 and the web agent will not be able to determine these parameters.

     

    Refer: 

    https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.tec1605152.html

     

    Regards,

    Leo Joseph.



  • 7.  Re: http 500 internal server error

    Posted Mar 13, 2017 10:50 AM

    Hi Naveen,

     

    ERROR][sm-HTTPAgent-00020] Unable to resolve server host name. Exiting with HTTP 500 server error '10-0004'.

     

    This error may be related to some health check tool polling the web server at random intervals.

     

    Regards,

    Leo Joseph.



  • 8.  Re: http 500 internal server error

    Posted Mar 13, 2017 12:59 PM

    Hi ,

     

    I have checked the tracedefault.log and I see an error 

     

    [Sm_Auth_Message.cpp:500][CSm_Auth_Message::ProcessMessage][][][][][][][][][][][][][][][][][][][][][Enter function CSm_Auth_Message::ProcessMessage][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]
    [03/13/2017][11:52:39.021][11:52:39][78508][32360][AgentAuth.cpp:36][CSm_Auth_Message::ProcessAgentMessage][][][][][][][][][][][][][][][][][][][][][Enter function CSm_Auth_Message::ProcessAgentMessage][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]
    [03/13/2017][11:52:39.021][11:52:39][78508][32360][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][s14/r18][kftusoktuliis43][][][][][][][][][][][][][][][][][][guid not set][Receive request attribute 169, data size is 12][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]
    [03/13/2017][11:52:39.021][11:52:39][78508][32360][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][s14/r18][kftusoktuliis43][][][][][][][][][][][][][][][][][][1485092137][Receive request attribute 199, data size is 10][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]
    [03/13/2017][11:52:39.021][11:52:39][78508][32360][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][s14/r18][kftusoktuliis43][][][][][][][][][][][][][][][][][][1489423959][Receive request attribute 159, data size is 10][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]
    [03/13/2017][11:52:39.021][11:52:39][78508][32360][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][s14/r18][kftusoktuliis43][][][][][][][][][][][][][][][][][][6][Receive request attribute 165, data size is 1][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]
    [03/13/2017][11:52:39.021][11:52:39][78508][32360][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][s14/r18][kftusoktuliis43][][][][][][][][][][][][][][][][][][128][Receive request attribute 166, data size is 3][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]
    [03/13/2017][11:52:39.021][11:52:39][78508][32360][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][s14/r18][kftusoktuliis43][][][][][][][][][][][][][][][][][][1][Receive request attribute 148, data size is 1][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]
    [03/13/2017][11:52:39.021][11:52:39][78508][32360][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][s14/r18][kftusoktuliis43][][][][][][][][][][][][][][][][][][][Receive request attribute 149, data size is 0][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]
    [03/13/2017][11:52:39.021][11:52:39][78508][32360][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][s14/r18][kftusoktuliis43][][][][][][][][][][][][][][][][][][<SMMON:ComponentRegistered xmlns:SMMON='http://netegrity.com/monitor'><Host HostId='2002:1eb5:1017::1eb5:1017'><SmComponent CompPath='Agent;4668'></SmComponent></Host></SMMON:ComponentRegistered><SMMON:ComponentData xmlns:SMMON='http://netegrity.com/monitor'><Host HostId='2002:1eb5:1017::1eb5:1017'><SmComponent CompPath='Agent;4668' Version='12.52QMR01'><Name>kftusoktuliis43.krft.net</Name><Info>Product=WebAgent,Platform=IIS70/Windows,Version=12.52QMR01,Update=HF02,Label=766,FileVersion=12.52.0102.766,UTC=1485092136,TZ=6,Crypto=128</Info><ResourceCacheHits>2953</ResourceCacheHits><ResourceCacheMisses>3549</ResourceCacheMisses><UserSessionCacheHits>0</UserSessionCacheHits><UserSessionCacheMisses>2</UserSessionCacheMisses><IsProtectedCount>3549</IsProtectedCount><IsProtectedErrors>1</IsProtectedErrors><LoginCount>2</LoginCount><LoginErrors>0</LoginErrors><LoginFailures>0</LoginFailures><ValidationCount>0</ValidationCount><ValidationErrors>0</ValidationErrors><ValidationFailures>0</ValidationFailures><AuthorizeCount>0</AuthorizeCount><AuthorizeErrors>0</AuthorizeErrors><AuthorizeFailures>0</AuthorizeFailures><CrosssiteScriptHits>0</CrosssiteScriptHits><BadURLCharsHits>33</BadURLCharsHits><BadCookieHitsCount>18</BadCookieHitsCount><ExpiredCookieHitsCount>1</ExpiredCookieHitsCount><IsProtectedAvgTime>19</IsProtectedAvgTime><LoginAvgTime>1334</LoginAvgTime><ValidationAvgTime>0</ValidationAvgTime><AuthorizeAvgTime>0</AuthorizeAvgTime><ResourceCacheCount>2443</ResourceCacheCount><UserSessionCacheCount>2</UserSessionCacheCount><ResourceCacheMax>1000</ResourceCacheMax><UserSessionCacheMax>1000</UserSessionCacheMax></SmComponent></Host></SMMON:ComponentData>][Receive request attribute 145, data size is 1675][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]



  • 9.  Re: http 500 internal server error

    Posted Mar 14, 2017 09:24 PM

    Hi Naveen,

    It seems you by pass the initial issue and not getting 00-0011 error. From the latest web agent trace log, I didn't find any error. The trace log show agent receive requests. Can you provide more information on what is the current issue? Are you seeing 10-0004 error or some other new error after you provide the permission to the login folder?

     

    Regards,

    Kar Meng