Symantec Access Management

  • 1.  Form post variable

    Posted Jul 25, 2017 11:24 AM

    HI All,

     

    Has anyone used FORM POst variable in Policy evaluation. I am trying to capture a field from user and pass it to Policy server and have attached it to GET/POST policy . However i am always getting a unresolved. I can see the Form field being passed in the browser using fiddler and other tools. 

     

    [07/25/2017][11:15:55.606][11:15:55][1936][2592][FederationAttributeResolver.java][resolveVariables][][][][][][][][][][][][][][][][][][][][][BEGIN RESOLVING VARIABLES][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]
    [07/25/2017][11:15:55.606][11:15:55][1936][2592][FederationAttributeResolver.java][resolveVariables][][][][][][][][][][][][][][][][][][][][][No Federation Attributes to resolve, exiting][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]
    [07/25/2017][11:15:55.653][11:15:55][1936][2592][SmJavaAPI.cpp:1238][JavaActiveExpression][][][][][][][][][][][][][UNRESOLVED][][][][][][][][Active Expression evaluated for SmJavaAPI: JavaActiveExpression successfully invoked. Parameter and result follow:][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][com.netegrity.scriptevaluation.scriptactiveexpression.ActiveScript (ServerCheck=="ON")][][][][][][][]
    [07/25/2017][11:15:55.653][11:15:55][1936][2592][SmAuthUser.cpp:1767][CSmAuthUser::SavePasswordState][][][][][][][][][][][][][][][][][][][][][Enter function CSmAuthUser::SavePasswordState][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]
    [07/25/2017][11:15:55.653][11:15:55][1936][2592][SmAuthUser.cpp:1769][CSmAuthUser::SavePasswordState][][][][][][][][][][][][][0][][][][][][][][Leave function CSmAuthUser::SavePasswordState][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][00:00:00.000000][]
    [07/25/2017][11:15:55.653][11:15:55][1936][2592][SmDsDir.cpp:210][CSmDsDir::FreeConnectionObject][][][][][][][][][][][][][][][][][][][][][Start of call FreeDirConnectionObject.][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]
    [07/25/2017][11:15:55.653][11:15:55][1936][2592][SmDsDir.cpp:211][CSmDsDir::FreeConnectionObject][][][][][][][][][][][][][][][][][][][][][Return from call FreeDirConnectionObject.][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]
    [07/25/2017][11:15:55.653][11:15:55][1936][2592][SmActiveExpr.cpp:520][CSmActiveExprLibrary::GetActiveValue][][][][][][][][][][][][][UNRESOLVED][][][][][][][][Leave function CSmActiveExprLibrary::GetActiveValue][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]
    [07/25/2017][11:15:55.653][11:15:55][1936][2592][SmAuthorization.cpp:2248][CSmAz::ProcessActiveExpression][][][][][][][][][][][][][UNRESOLVED][][][][][][][][Leave function CSmAz::ProcessActiveExpression][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][00:00:00.046876][]



    Any help with this would be appreaciated 

     

    thanks



  • 2.  Re: Form post variable
    Best Answer

    Posted Jul 26, 2017 03:09 AM

    Hi Vivek,


    This is a known defect and is currently being worked upon by engineering

    CA Ref : DE280382

     

    Current Behaviour with FormPost variables:
    FORM Post variables is NOT resolved , when it is not used in expression of a domain policy.
    When Expression is created with FORM Post variable it is being resolved correctly.


    So for FORM Post variables, with expression in Domain Policy flow is working fine but its not working without expression in Domain Policy.

     

    So, at the moment you can try to use it in the Policy expression as an workaround until SE fixes the issue.

     

    Regards,

    Ujwol



  • 3.  Re: Form post variable

    Posted Jul 26, 2017 09:13 AM

    Thanks for the reply ujwol. I was trying to actually incorporate it in the policy expression and was getting the same result before I started this thread.

     

    What I am doing is capturing a checkbox value and passing it to Policy server and then in  expressions in my domain I am creating a formpost  variable and trying to evaluate it to a value in the get post policy using expression tab. I hope this is the same thing you are referring to when you say policy expression.

     

    And before someone asks why am I doing checkbox validation on server side , I need that condition to be evaluated for a subset of users and not everyone.

     

    Thanks



  • 4.  Re: Form post variable

    Posted Jul 26, 2017 03:01 PM

    Hi Vivek,


    Can you post screenshots?



  • 5.  Re: Form post variable

    Posted Jul 26, 2017 04:37 PM

    Policy Expression

     

    This is the Policy I have , where I am trying to evaluate the Form Post variable name ServerCheck to a String "ON"



  • 6.  Re: Form post variable

    Posted Jul 26, 2017 04:38 PM

    This is the actual Form Post variable I am usingForm Post variabl