Symantec Access Management

  • 1.  NETE_PWSERVICES_REDIRECT is not working

    Posted Nov 09, 2017 06:34 AM

    Hi All,

     

    My SSO Policy Server version is r12.51 and I want to use "NETE_PWSERVICES_REDIRECT" features to send the password must change user to custom password service page instead of default smpwservices.fcc when no password policy is active.

    I have set the "NETE_PWSERVICES_REDIRECT" environment variable in my linux environment through "ca_ps_env.ksh" file to the custom relative page path. Disable all password policy which are available in my environment.

     

    Now when I am trying to login the application with the user (password expired) then it is redirecting me to default smpwservices.fcc, not the custom one which I have set through "NETE_PWSERVICES_REDIRECT" environment variable.

     

    Regards

    Avishek Das

     

     



  • 2.  Re: NETE_PWSERVICES_REDIRECT is not working

    Posted Nov 09, 2017 08:51 AM

    At first glance, It seems like a Password Policy is taking effect, otherwise how would the policy server know to serve the default password services page. If Password Policy was disabled and no ENV variable was set / loaded, the policy server throws login page (I believe).

     

    • Set "NETE_PWSERVICES_REDIRECT" Env variable, then Restart the Policy Server.
    • Check smtracedefault.log if any applicable password policies are being applied.

     

    https://support.ca.com/us/knowledge-base-articles.TEC1741076.html

    https://communities.ca.com/thread/108591191

     

     

    Regards

    Hubert



  • 3.  Re: NETE_PWSERVICES_REDIRECT is not working

    Posted Nov 10, 2017 09:15 AM

    Hi Hubert Dennis,

     

    Thanks for your email.

     

    First of all if no password policy available and your auth scheme enable for password policy then siteminder by default redirect to "/siteminderagent/forms/smpwservices.fcc" page.

    As I have mentioned earlier that no password policy enabled in my current environment and I have set siteminder server environment variable as "NETE_PWSERVICES_REDIRECT" as "/siteminderagent/forms/custom-smpwservices.fcc". and restarted the siteminder policy server but still it is redirecting to default "/siteminderagent/forms/smpwservices.fcc"

     

    Please find below siteminder trace log.

     

    [11/09/2017][21:02:06.277][21465][3982101360][Return from call AuthenticateUser.][][][][][][][][][][CSmDsUser::Authenticate][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function AuthenticateDsUser][][][][][][][][][][AuthenticateDsUser][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function SmAuthenticate][][][][][][][][][][SmAuthenticate][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSmAuthUser::SavePasswordState][][][][][][][][][][CSmAuthUser::SavePasswordState][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmAuthUser::SavePasswordState][][][][][][][][][][CSmAuthUser::SavePasswordState][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSmAuthUser::ValidateAuth][][][][][][][][][][CSmAuthUser::ValidateAuth][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSmAuthUser::CheckPasswordPolicies][][][][][][][][][][CSmAuthUser::CheckPasswordPolicies][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSmPasswordCheck::ValidateLoginAttempt][][][][][][][][][][CSmPasswordCheck::ValidateLoginAttempt][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSmPasswordCheck::FindApplicablePasswordPolicies][][][][][][][][][][CSmPasswordCheck::FindApplicablePasswordPolicies][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmPasswordCheck::ValidateLoginAttempt][][][][][][][][][][CSmPasswordCheck::ValidateLoginAttempt][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmAuthUser::CheckPasswordPolicies][][][][][][][][][][CSmAuthUser::CheckPasswordPolicies][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmAuthUser::ValidateAuth][][][][][][][][][][CSmAuthUser::ValidateAuth][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmAuthUser::Authenticate][][][][][][][][][][CSmAuthUser::Authenticate][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Start of call GetDisabledUserState.][][][][][][][][][][CSmDsUser::GetDisabled][][][][][][][][][][][][][][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][]
    [11/09/2017][21:02:06.277][21465][3982101360][Return from call GetDisabledUserState.][][][][][][][][][][CSmDsUser::GetDisabled][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][User's password must change][][][XXXXX][][][][][][][CSmAuthUser::AuthenticateUserDir][][][][][][][][][][][][][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Start of call FreeDirConnectionObject.][][][][][][][][][][CSmDsDir::FreeConnectionObject][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Return from call FreeDirConnectionObject.][][][][][][][][][][CSmDsDir::FreeConnectionObject][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmAuthUser::AuthenticateUserDir][][][][][][][][][][CSmAuthUser::AuthenticateUserDir][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSmDsUser::FlushModifiedAttributeCache][][][][][][][][][][CSmDsUser::FlushModifiedAttributeCache][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmDsUser::FlushModifiedAttributeCache][][][][][][][][][][CSmDsUser::FlushModifiedAttributeCache][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Evaluating OnAuthReject policy][000000000000000000000000ad23220a-5c5c-5a05089e-1c8b9940-2230141bc8c][][XXXXX][apache.test.com][][Mobile][][][/TEMP/index.html][CSm_Auth_Message::AuthenticateUser][Html-Mobile][20][3][][][GetResource][][][][SmJavaAdmin][][][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSmAz::IsOk][][][][][][][][][][CSmAz::IsOk][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Start of user policy analysis for realm.][][][XXXXX][][][Mobile][][][][CSmAz::IsOk][][][][][][GetResource][][][][][][][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.277][21465][3982101360][IsOk? No.][][][][][][][][][][CSmAz::IsOk][][][][No applicable Policy found. ][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmAz::IsOk][][][][][][][][][][CSmAz::IsOk][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSmAz::IsOkGlobal][][][][][][][][][][CSmAz::IsOkGlobal][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Evaluating OnAuthReject global policies in the realm.][][][XXXXX][][][Mobile][][OnAuthReject][][CSmAz::IsOkGlobal][][][][][][GetResource][][][][][][][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSmAz::IsOk][][][][][][][][][][CSmAz::IsOk][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Start of user policy analysis for realm.][][][XXXXX][][][Mobile][][][][CSmAz::IsOk][][][][][][GetResource][][][][][][][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.277][21465][3982101360][IsOk? No.][][][][][][][][][][CSmAz::IsOk][][][][No applicable Policy found. ][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmAz::IsOk][][][][][][][][][][CSmAz::IsOk][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmAz::IsOkGlobal][][][][][][][][][][CSmAz::IsOkGlobal][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Accumulating OnAuthReject policy responses...][000000000000000000000000ad23220a-5c5c-5a05089e-1c8b9940-2230141bc8c][][XXXXX][apache.test.com][][Mobile][][][/TEMP/index.html][CSm_Auth_Message::AuthenticateUser][Html-Mobile][20][3][][][GetResource][][][][SmJavaAdmin][][][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.277][21465][3982101360][SmSamlDataContext::~SmSamlDataContext: Cleaning up][][][][][][][][][][g_ServerTrace][][][][][][][][][][][][Cleaning up][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSm_Auth_Message::SendReply][][][][][][][][][][CSm_Auth_Message::SendReply][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function SmAuthQuery][][][][][][][][][][SmAuthQuery][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Use Relative Target enabled for HTML form Scheme][][][][][][][][][][SmAuthQuery][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function SmAuthQuery][][][][][][][][][][SmAuthQuery][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.278][21465][3982101360][Send response attribute 212, data size is 4][s62/r2][Login][XXXXX][apache.test.com][][Mobile][][][][CSm_Auth_Message::FormatAttribute][Html-Mobile][][][][][GetResource][][][][SmJavaAdmin][][....][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.278][21465][3982101360][Send response attribute 227, data size is 210][s62/r2][Login][XXXXX][apache.test.com][][Mobile][][][][CSm_Auth_Message::FormatAttribute][Html-Mobile][][][][][GetResource][][][][SmJavaAdmin][][/siteminderagent/forms/smpwservices.fcc?SMENC=UTF-8&SMTOKEN={RC2}Jl+CN6W3XwZqgroUu7aua000P3EjEA+DVj67vaOMv8rUudeNxI5yUPtt2nopoJjoIOXCoBQ1RxBlxkTwyC9ElCRL3HoIwCfTftU/2lg0UWahVETTX5HTzs7oo2xPpp82&USERNAME=XXXXX][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.278][21465][3982101360][** Status: Not Authenticated. ][s62/r2][][XXXXX][apache.test.com][][Mobile][][][][CSm_Auth_Message::SendReply][Html-Mobile][][][][][GetResource][][][][SmJavaAdmin][][][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.278][21465][3982101360][Leave function CSm_Auth_Message::SendReply][][][][][][][][][][CSm_Auth_Message::SendReply][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.278][21465][3982101360][Leave function CSm_Auth_Message::AuthenticateUser][][][][][][][][][][CSm_Auth_Message::AuthenticateUser][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.278][21465][3982101360][Leave function CSm_Auth_Message::ProcessAgentMessage][][][][][][][][][][CSm_Auth_Message::ProcessAgentMessage][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.278][21465][3982101360][Leave function CSm_Auth_Message::ProcessMessage][][][][][][][[11/09/2017][21:02:06.277][21465][3982101360][Return from call AuthenticateUser.][][][][][][][][][][CSmDsUser::Authenticate][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function AuthenticateDsUser][][][][][][][][][][AuthenticateDsUser][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function SmAuthenticate][][][][][][][][][][SmAuthenticate][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSmAuthUser::SavePasswordState][][][][][][][][][][CSmAuthUser::SavePasswordState][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmAuthUser::SavePasswordState][][][][][][][][][][CSmAuthUser::SavePasswordState][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSmAuthUser::ValidateAuth][][][][][][][][][][CSmAuthUser::ValidateAuth][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSmAuthUser::CheckPasswordPolicies][][][][][][][][][][CSmAuthUser::CheckPasswordPolicies][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSmPasswordCheck::ValidateLoginAttempt][][][][][][][][][][CSmPasswordCheck::ValidateLoginAttempt][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSmPasswordCheck::FindApplicablePasswordPolicies][][][][][][][][][][CSmPasswordCheck::FindApplicablePasswordPolicies][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmPasswordCheck::ValidateLoginAttempt][][][][][][][][][][CSmPasswordCheck::ValidateLoginAttempt][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmAuthUser::CheckPasswordPolicies][][][][][][][][][][CSmAuthUser::CheckPasswordPolicies][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmAuthUser::ValidateAuth][][][][][][][][][][CSmAuthUser::ValidateAuth][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmAuthUser::Authenticate][][][][][][][][][][CSmAuthUser::Authenticate][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Start of call GetDisabledUserState.][][][][][][][][][][CSmDsUser::GetDisabled][][][][][][][][][][][][][][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][]
    [11/09/2017][21:02:06.277][21465][3982101360][Return from call GetDisabledUserState.][][][][][][][][][][CSmDsUser::GetDisabled][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][User's password must change][][][XXXXX][][][][][][][CSmAuthUser::AuthenticateUserDir][][][][][][][][][][][][][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Start of call FreeDirConnectionObject.][][][][][][][][][][CSmDsDir::FreeConnectionObject][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Return from call FreeDirConnectionObject.][][][][][][][][][][CSmDsDir::FreeConnectionObject][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmAuthUser::AuthenticateUserDir][][][][][][][][][][CSmAuthUser::AuthenticateUserDir][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSmDsUser::FlushModifiedAttributeCache][][][][][][][][][][CSmDsUser::FlushModifiedAttributeCache][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmDsUser::FlushModifiedAttributeCache][][][][][][][][][][CSmDsUser::FlushModifiedAttributeCache][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Evaluating OnAuthReject policy][000000000000000000000000ad23220a-5c5c-5a05089e-1c8b9940-2230141bc8c][][XXXXX][apache.test.com][][Mobile][][][/TEMP/index.html][CSm_Auth_Message::AuthenticateUser][Html-Mobile][20][3][][][GetResource][][][][SmJavaAdmin][][][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSmAz::IsOk][][][][][][][][][][CSmAz::IsOk][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Start of user policy analysis for realm.][][][XXXXX][][][Mobile][][][][CSmAz::IsOk][][][][][][GetResource][][][][][][][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.277][21465][3982101360][IsOk? No.][][][][][][][][][][CSmAz::IsOk][][][][No applicable Policy found. ][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmAz::IsOk][][][][][][][][][][CSmAz::IsOk][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSmAz::IsOkGlobal][][][][][][][][][][CSmAz::IsOkGlobal][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Evaluating OnAuthReject global policies in the realm.][][][XXXXX][][][Mobile][][OnAuthReject][][CSmAz::IsOkGlobal][][][][][][GetResource][][][][][][][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSmAz::IsOk][][][][][][][][][][CSmAz::IsOk][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Start of user policy analysis for realm.][][][XXXXX][][][Mobile][][][][CSmAz::IsOk][][][][][][GetResource][][][][][][][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.277][21465][3982101360][IsOk? No.][][][][][][][][][][CSmAz::IsOk][][][][No applicable Policy found. ][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmAz::IsOk][][][][][][][][][][CSmAz::IsOk][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function CSmAz::IsOkGlobal][][][][][][][][][][CSmAz::IsOkGlobal][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Accumulating OnAuthReject policy responses...][000000000000000000000000ad23220a-5c5c-5a05089e-1c8b9940-2230141bc8c][][XXXXX][apache.test.com][][Mobile][][][/TEMP/index.html][CSm_Auth_Message::AuthenticateUser][Html-Mobile][20][3][][][GetResource][][][][SmJavaAdmin][][][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.277][21465][3982101360][SmSamlDataContext::~SmSamlDataContext: Cleaning up][][][][][][][][][][g_ServerTrace][][][][][][][][][][][][Cleaning up][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function CSm_Auth_Message::SendReply][][][][][][][][][][CSm_Auth_Message::SendReply][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Enter function SmAuthQuery][][][][][][][][][][SmAuthQuery][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Use Relative Target enabled for HTML form Scheme][][][][][][][][][][SmAuthQuery][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.277][21465][3982101360][Leave function SmAuthQuery][][][][][][][][][][SmAuthQuery][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.278][21465][3982101360][Send response attribute 212, data size is 4][s62/r2][Login][XXXXX][apache.test.com][][Mobile][][][][CSm_Auth_Message::FormatAttribute][Html-Mobile][][][][][GetResource][][][][SmJavaAdmin][][....][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.278][21465][3982101360][Send response attribute 227, data size is 210][s62/r2][Login][XXXXX][apache.test.com][][Mobile][][][][CSm_Auth_Message::FormatAttribute][Html-Mobile][][][][][GetResource][][][][SmJavaAdmin][][/siteminderagent/forms/smpwservices.fcc?SMENC=UTF-8&SMTOKEN={RC2}Jl+CN6W3XwZqgroUu7aua000P3EjEA+DVj67vaOMv8rUudeNxI5yUPtt2nopoJjoIOXCoBQ1RxBlxkTwyC9ElCRL3HoIwCfTftU/2lg0UWahVETTX5HTzs7oo2xPpp82&USERNAME=XXXXX][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.278][21465][3982101360][** Status: Not Authenticated. ][s62/r2][][XXXXX][apache.test.com][][Mobile][][][][CSm_Auth_Message::SendReply][Html-Mobile][][][][][GetResource][][][][SmJavaAdmin][][][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.278][21465][3982101360][Leave function CSm_Auth_Message::SendReply][][][][][][][][][][CSm_Auth_Message::SendReply][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.278][21465][3982101360][Leave function CSm_Auth_Message::AuthenticateUser][][][][][][][][][][CSm_Auth_Message::AuthenticateUser][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.278][21465][3982101360][Leave function CSm_Auth_Message::ProcessAgentMessage][][][][][][][][][][CSm_Auth_Message::ProcessAgentMessage][][][][][][][][][][][][][][][][][][][]
    [11/09/2017][21:02:06.278][21465][3982101360][Leave function CSm_Auth_Message::ProcessMessage][][][][][][][



  • 4.  Re: NETE_PWSERVICES_REDIRECT is not working

    Posted Nov 10, 2017 10:59 AM

     

    This is from a R12.52 SP1 CR02 Windows Policy Server.

     

    • Defined NETE_PWSERVICES_REDIRECT as http://www.ca.com
    • Restarted the Policy Server.
    • There is no Password Policy Created.
    • UStore is LDAP. UD object has the following attributes.
      • Universal ID (R) uid
      • Disabled Flag (RW) carLicense
      • Password (RW) userPassword
      • Password Data (RW) audio
    • Authentication Scheme is a HTML forms Auth with "Password Policies enabled for this Authentication Scheme" checked.
    • Manually forced a User to Change Password from WAMUI (Administration --> Users --> Manage Users Accounts).
    • Then test using SMTESTTOOL.

     

     

    smtracedefault.log
    [11/10/2017][10:46:58.214][Sm_Auth_Message.cpp:500][CSm_Auth_Message::ProcessMessage][][Enter function CSm_Auth_Message::ProcessMessage][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][AgentAuth.cpp:36][CSm_Auth_Message::ProcessAgentMessage][][Enter function CSm_Auth_Message::ProcessAgentMessage][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][][Receive request attribute 208, data size is 27][fe80::250:56ff:fe86:3dc5%12][wa_smtest][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][][Receive request attribute 200, data size is 0][wa_smtest][wa_smtest][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][][Receive request attribute 217, data size is 9][localhost][wa_smtest][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][][Receive request attribute 201, data size is 20][/FormsAuth/indx.thml][wa_smtest][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][][Receive request attribute 202, data size is 3][GET][wa_smtest][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][][Receive request attribute 204, data size is 39][06-7093844e-e2af-4d21-9497-3258a2200de7][wa_smtest][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][][Receive request attribute 205, data size is 0][][wa_smtest][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][][Receive request attribute 209, data size is 0][][wa_smtest][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][][Receive request attribute 212, data size is 4][][wa_smtest][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][][Receive request attribute 210, data size is 6][BAAAAA][wa_smtest][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][][Receive request attribute 211, data size is 8][** Not Shown **][wa_smtest][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmMessage.cpp:525][CSmMessage::ParseAgentMessage][][Receive request attribute 134, data size is 5][FALSE][wa_smtest][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][AgentAuth.cpp:87][CSm_Auth_Message::ProcessAgentMessage][Login][** Received request from agent][][wa_smtest][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][AgentAuth.cpp:326][CSm_Auth_Message::AnalyzeAgentAuthMessage][][Enter function CSm_Auth_Message::AnalyzeAgentAuthMessage][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][AgentAuth.cpp:371][CSm_Auth_Message::AnalyzeAgentAuthMessage][][Leave function CSm_Auth_Message::AnalyzeAgentAuthMessage][][][][][][][][][][][][][][true][][][][][][][][][][]
    [11/10/2017][10:46:58.214][Sm_Auth_Message.cpp:751][CSm_Auth_Message::AuthenticateUser][][Enter function CSm_Auth_Message::AuthenticateUser][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][Sm_Auth_Message.cpp:783][CSm_Auth_Message::AuthenticateUser][][Authenticating user.][][wa_smtest][/FormsAuth/indx.thml][BAAAAA][][pd_application1_prot_FormsAuth_realm][pd_application1][][][][][][][][][][][][][][as_sps_html_forms][0][5][]
    [11/10/2017][10:46:58.214][SmSSProvider.cpp:364][CSmSSProvider::GenerateSessionId][][Enter function CSmSSProvider::GenerateSessionId][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmSSProvider.cpp:416][CSmSSProvider::GenerateSessionId][][Leave function CSmSSProvider::GenerateSessionId][][][][][][][][][][][][][][5KQj7iaaJKtc2UJlKU6yRdzbvbE=][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmSSProvider.cpp:1104][CSmSSProvider::Free][][Enter function CSmSSProvider::Free][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmSSProvider.cpp:1133][CSmSSProvider::Free][][Leave function CSmSSProvider::Free][][][][][][][][][][][][][][0][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmAuthUser.cpp:6080][CSmAuthUser::InitRequestContext][][Enter function CSmAuthUser::InitRequestContext][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmAuthUser.cpp:6097][CSmAuthUser::InitRequestContext][][Leave function CSmAuthUser::InitRequestContext][][][][][][][][][][][][][][ok][][][][][][][][][][]
    [11/10/2017][10:46:58.214][Sm_Auth_Message.cpp:555][CSm_Auth_Message::BreakupPassword][][Enter function CSm_Auth_Message::BreakupPassword][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][Sm_Auth_Message.cpp:646][CSm_Auth_Message::BreakupPassword][][Leave function CSm_Auth_Message::BreakupPassword][][][][][][][][][][][][][][ok][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmAuthUser.cpp:3917][CSmAuthUser::AuthenticateUserDir][][Enter function CSmAuthUser::AuthenticateUserDir][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsObj.cpp:75][CSmDsObj::CSmDsObj][][Start of call LookupProvider.][][][][][][][][][][][][][][][][][][][][LDAP:][][][][]
    [11/10/2017][10:46:58.214][SmDsProviderMap.cpp:109][CSmDsProviderMap::LookupProvider][][Enter function CSmDsProviderMap::LookupProvider][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsProviderMap.cpp:204][CSmDsProviderMap::LookupProvider][][Leave function CSmDsProviderMap::LookupProvider][][][][][][][][][][][][][][Ok][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsObj.cpp:77][CSmDsObj::CSmDsObj][][Return from call LookupProvider.][][][][][][][][][][][][][][Ok][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsDir.cpp:66][CSmDsDir::CSmDsDir][][Start of call InitDir.][][][][][][][][][][][][][][][][][][][][About to initialize directory, Oid='0e-ce2d22f1-d412-4899-bb34-482a839afcab', Name='ud_sjds7'][][][][]
    [11/10/2017][10:46:58.214][SmDsDir.cpp:81][CSmDsDir::CSmDsDir][][Return from call InitDir.][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsObj.cpp:94][CSmDsObj::IsValid][][Start of call IsValid.][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsObj.cpp:96][CSmDsObj::IsValid][][Return from call IsValid.][][][][][][][][][][][][][][true][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsDir.cpp:194][CSmDsDir::GetConnectionObject][][Start of call GetDirConnectionObject.][][][][][][][][][][][][][][][][][][][][Get dir connection object.][][][][]
    [11/10/2017][10:46:58.214][SmDsDir.cpp:196][CSmDsDir::GetConnectionObject][][Return from call GetDirConnectionObject.][][][][][][][][][][][][][][Ok][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsDir.cpp:202][CSmDsDir::GetRawHandle][][Start of call GetDirRawHandle.][][][][][][][][][][][][][][][][][][][][Get dir raw handle][][][][]
    [11/10/2017][10:46:58.214][SmDsDir.cpp:204][CSmDsDir::GetRawHandle][][Return from call GetDirRawHandle.][][][][][][][][][][][][][][Ok][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmAuthUser.cpp:5108][CSmAuthUser::Authenticate][][Enter function CSmAuthUser::Authenticate][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmAuthHtml.cpp:279][SmAuthenticate][][Enter function SmAuthenticate][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmAuthHtml.cpp:284][SmAuthenticate][][Leave function SmAuthenticate][][][][][][][][][][][][][][6][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmAuthUser.cpp:1695][CSmAuthUser::SavePasswordState][][Enter function CSmAuthUser::SavePasswordState][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmAuthUser.cpp:1697][CSmAuthUser::SavePasswordState][][Leave function CSmAuthUser::SavePasswordState][][][][][][][][][][][][][][false][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmAuthUser.cpp:5376][CSmAuthUser::Authenticate][][Leave function CSmAuthUser::Authenticate][][][][][][][][][][][][][][6][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsDir.cpp:272][CSmDsDir::IsValidUsername][][Start of call IsValidUsername.][][][][][][][][][][][][][][][][][][][][User ='BAAAAA'][][][][]
    [11/10/2017][10:46:58.214][SmDsDir.cpp:274][CSmDsDir::IsValidUsername][][Return from call IsValidUsername.][][][][][][][][][][][][][][true][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsDir.cpp:425][CSmDsDir::Search][][Start of call Search.][][][][][][][][][][][][][][][][][][][][Advanced search, Root='dc=ca,dc=com',Filter='(cn=BAAAAA)'][][][][]
    [11/10/2017][10:46:58.214][SmDsAliases.cpp:328][CSmDsAliases::GetSmDsAliases][][Enter function CSmDsAliases::GetSmDsAliases][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsAliases.cpp:377][CSmDsAliases::GetSmDsAliases][][Leave function CSmDsAliases::GetSmDsAliases][][][][][][][][][][][][][][true][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsAliases.cpp:428][CSmDsAliases::GetAttributeMapping][][Enter function CSmDsAliases::GetAttributeMapping][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsAliases.cpp:435][CSmDsAliases::GetAttributeMapping][][Leave function CSmDsAliases::GetAttributeMapping][][][][][][][][][][][][][][false][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsAliases.cpp:428][CSmDsAliases::GetAttributeMapping][][Enter function CSmDsAliases::GetAttributeMapping][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsAliases.cpp:435][CSmDsAliases::GetAttributeMapping][][Leave function CSmDsAliases::GetAttributeMapping][][][][][][][][][][][][][][false][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsLdapProvider.cpp:1729][CSmDsLdapProvider::SearchImpl][][search filter is : (cn=BAAAAA)][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsLdapProvider.cpp:2244][CSmDsLdapProvider::Search][][Ldap Search callout succeeds.][][][][][][][][][][][][][][][][][][][][(Search) Base: 'dc=ca,dc=com', Filter: '(cn=BAAAAA)'. Status: 1 entries][][][][]
    [11/10/2017][10:46:58.214][SmDsDir.cpp:446][CSmDsDir::Search][][Return from call Search.][][][][][][][][][][][][][][true][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsObj.cpp:75][CSmDsObj::CSmDsObj][][Start of call LookupProvider.][][][][][][][][][][][][][][][][][][][][LDAP:][][][][]
    [11/10/2017][10:46:58.214][SmDsProviderMap.cpp:109][CSmDsProviderMap::LookupProvider][][Enter function CSmDsProviderMap::LookupProvider][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsProviderMap.cpp:204][CSmDsProviderMap::LookupProvider][][Leave function CSmDsProviderMap::LookupProvider][][][][][][][][][][][][][][Ok][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsObj.cpp:77][CSmDsObj::CSmDsObj][][Return from call LookupProvider.][][][][][][][][][][][][][][Ok][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsUser.cpp:95][CSmDsUser::CSmDsUser][][Start of call InitUser.][][][][][][][][][][][][][][][][][][][][About to initialize User 'cn=BAAAAA,ou=OrgUnit0,dc=ca,dc=com' in dir 'ud_sjds7'][][][][]
    [11/10/2017][10:46:58.214][SmDsUser.cpp:106][CSmDsUser::CSmDsUser][][Return from call InitUser.][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsObj.cpp:94][CSmDsObj::IsValid][][Start of call IsValid.][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsObj.cpp:96][CSmDsObj::IsValid][][Return from call IsValid.][][][][][][][][][][][][][][true][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmPasswordCheck.cpp:2730][CSmPasswordCheck::PreProcessPassword][][Enter function CSmPasswordCheck::PreProcessPassword][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmPasswordCheck.cpp:2737][CSmPasswordCheck::PreProcessPassword][][Pre processing the new password...][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmPasswordCheck.cpp:397][CSmPasswordCheck::FindApplicablePasswordPolicies][][Enter function CSmPasswordCheck::FindApplicablePasswordPolicies][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmPasswordCheck.cpp:448][CSmPasswordCheck::FindApplicablePasswordPolicies][][Leave function CSmPasswordCheck::FindApplicablePasswordPolicies][][][][][][][][][][][][][][true][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmPasswordCheck.cpp:2768][CSmPasswordCheck::PreProcessPassword][][Leave function CSmPasswordCheck::PreProcessPassword][][][][][][][][][][][][][][true][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmAuthUser.cpp:5108][CSmAuthUser::Authenticate][][Enter function CSmAuthUser::Authenticate][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmAuthUser.cpp:5259][CSmAuthUser::Authenticate][][Authenticating user by the auth scheme][LDAP://denhu01-U111450.ca.com:1111/cn=BAAAAA,ou=OrgUnit0,dc=ca,dc=com][][][BAAAAA][][][][ud_sjds7][][][][][][][][][][][][][as_sps_html_forms][][][]
    [11/10/2017][10:46:58.214][SmAuthHtml.cpp:279][SmAuthenticate][][Enter function SmAuthenticate][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmAuthUser.cpp:841][AuthenticateDsUser][][Enter function AuthenticateDsUser][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsObj.cpp:94][CSmDsObj::IsValid][][Start of call IsValid.][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsObj.cpp:96][CSmDsObj::IsValid][][Return from call IsValid.][][][][][][][][][][][][][][true][][][][][][][][][][]
    [11/10/2017][10:46:58.214][SmDsUser.cpp:229][CSmDsUser::Authenticate][][Start of call AuthenticateUser.][][][][][][][][][][][][][][][][][][][][User ='cn=BAAAAA,ou=OrgUnit0,dc=ca,dc=com'][][][][]
    [11/10/2017][10:46:58.229][SmDsUser.cpp:238][CSmDsUser::Authenticate][][Return from call AuthenticateUser.][][][][][][][][][][][][][][true][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthUser.cpp:875][AuthenticateDsUser][][Leave function AuthenticateDsUser][][][][][][][][][][][][][][0][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthHtml.cpp:526][SmAuthenticate][][Leave function SmAuthenticate][][][][][][][][][][][][][][2][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthUser.cpp:1695][CSmAuthUser::SavePasswordState][][Enter function CSmAuthUser::SavePasswordState][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthUser.cpp:1697][CSmAuthUser::SavePasswordState][][Leave function CSmAuthUser::SavePasswordState][][][][][][][][][][][][][][false][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthUser.cpp:5399][CSmAuthUser::ValidateAuth][][Enter function CSmAuthUser::ValidateAuth][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthUser.cpp:5606][CSmAuthUser::CheckPasswordPolicies][][Enter function CSmAuthUser::CheckPasswordPolicies][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmPasswordCheck.cpp:77][CSmPasswordCheck::ValidateLoginAttempt][][Enter function CSmPasswordCheck::ValidateLoginAttempt][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmPasswordCheck.cpp:397][CSmPasswordCheck::FindApplicablePasswordPolicies][][Enter function CSmPasswordCheck::FindApplicablePasswordPolicies][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmPasswordCheck.cpp:89][CSmPasswordCheck::ValidateLoginAttempt][][Leave function CSmPasswordCheck::ValidateLoginAttempt][][][][][][][][][][][][][][true][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthUser.cpp:5699][CSmAuthUser::CheckPasswordPolicies][][Leave function CSmAuthUser::CheckPasswordPolicies][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthUser.cpp:5506][CSmAuthUser::ValidateAuth][][Leave function CSmAuthUser::ValidateAuth][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthUser.cpp:5376][CSmAuthUser::Authenticate][][Leave function CSmAuthUser::Authenticate][][][][][][][][][][][][][][2][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmDsUser.cpp:271][CSmDsUser::GetDisabled][][Start of call GetDisabledUserState.][][][][][][][][][][][][][][][][][][][][User ='cn=BAAAAA,ou=OrgUnit0,dc=ca,dc=com'][][][][]
    [11/10/2017][10:46:58.229][SmDsObj.cpp:94][CSmDsObj::IsValid][][Start of call IsValid.][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmDsObj.cpp:96][CSmDsObj::IsValid][][Return from call IsValid.][][][][][][][][][][][][][][true][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmDsUser.cpp:577][GetCachedAttr][][Property 'passwordError' for user 'cn=BAAAAA,ou=OrgUnit0,dc=ca,dc=com' NOT found in cache][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmDsUser.cpp:290][CSmDsUser::GetDisabled][][Return from call GetDisabledUserState.][][][][][][][][][][][][][][true][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthUser.cpp:4635][CSmAuthUser::AuthenticateUserDir][][User's password must change][][][][BAAAAA][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmDsDir.cpp:210][CSmDsDir::FreeConnectionObject][][Start of call FreeDirConnectionObject.][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmDsDir.cpp:211][CSmDsDir::FreeConnectionObject][][Return from call FreeDirConnectionObject.][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthUser.cpp:5069][CSmAuthUser::AuthenticateUserDir][][Leave function CSmAuthUser::AuthenticateUserDir][][][][][][][][][][][][][][false][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmDsUser.cpp:980][CSmDsUser::FlushModifiedAttributeCache][][Enter function CSmDsUser::FlushModifiedAttributeCache][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmDsUser.cpp:1007][CSmDsUser::FlushModifiedAttributeCache][][Leave function CSmDsUser::FlushModifiedAttributeCache][][][][][][][][][][][][][][true][][][][][][][][][][]
    [11/10/2017][10:46:58.229][Sm_Auth_Message.cpp:1237][CSm_Auth_Message::AuthenticateUser][][Evaluating OnAuthReject policy][][wa_smtest][/FormsAuth/indx.thml][BAAAAA][][pd_application1_prot_FormsAuth_realm][pd_application1][ud_sjds7][][][][][][][][][][][][][as_sps_html_forms][20][3][]
    [11/10/2017][10:46:58.229][SmAuthorization.cpp:1409][CSmAz::IsOk][][Enter function CSmAz::IsOk][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthorization.cpp:1447][CSmAz::IsOk][][Start of user policy analysis for realm.][][][][BAAAAA][][pd_application1_prot_FormsAuth_realm][pd_application1][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthorization.cpp:1862][CSmAz::IsOk][][IsOk? No.][][][][][][][][][][][][][][][No applicable Policy found. ][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthorization.cpp:1864][CSmAz::IsOk][][Leave function CSmAz::IsOk][][][][][][][][][][][][][][false][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthorization.cpp:2311][CSmAz::IsOkGlobal][][Enter function CSmAz::IsOkGlobal][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthorization.cpp:2333][CSmAz::IsOkGlobal][][Evaluating OnAuthReject global policies in the realm.][][][][BAAAAA][][pd_application1_prot_FormsAuth_realm][pd_application1][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthorization.cpp:1409][CSmAz::IsOk][][Enter function CSmAz::IsOk][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthorization.cpp:1447][CSmAz::IsOk][][Start of user policy analysis for realm.][][][][BAAAAA][][pd_application1_prot_FormsAuth_realm][pd_application1][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthorization.cpp:1862][CSmAz::IsOk][][IsOk? No.][][][][][][][][][][][][][][][No applicable Policy found. ][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthorization.cpp:1864][CSmAz::IsOk][][Leave function CSmAz::IsOk][][][][][][][][][][][][][][false][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthorization.cpp:2347][CSmAz::IsOkGlobal][][Leave function CSmAz::IsOkGlobal][][][][][][][][][][][][][][false][][][][][][][][][][]
    [11/10/2017][10:46:58.229][Sm_Auth_Message.cpp:1714][CSm_Auth_Message::AuthenticateUser][][Accumulating OnAuthReject policy responses...][][wa_smtest][/FormsAuth/indx.thml][BAAAAA][][pd_application1_prot_FormsAuth_realm][pd_application1][ud_sjds7][][][][][][][][][][][][][as_sps_html_forms][20][3][]
    [11/10/2017][10:46:58.229][Sm_Auth_Message.cpp:101][g_ServerTrace][][SmSamlDataContext::~SmSamlDataContext: Cleaning up][Cleaning up][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][Sm_Auth_Message.cpp:4295][CSm_Auth_Message::SendReply][][Enter function CSm_Auth_Message::SendReply][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthHtml.cpp:114][SmAuthQuery][][Enter function SmAuthQuery][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthHtml.cpp:157][SmAuthQuery][][Use Relative Target enabled for HTML form Scheme][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][SmAuthHtml.cpp:241][SmAuthQuery][][Leave function SmAuthQuery][][][][][][][][][][][][][][0][][][][][][][][][][]
    [11/10/2017][10:46:58.229][Sm_Auth_Message.cpp:5132][CSm_Auth_Message::FormatAttribute][Login][Send response attribute 212, data size is 4][....][wa_smtest][][BAAAAA][][pd_application1_prot_FormsAuth_realm][pd_application1][ud_sjds7][][][][][][][][][][][][][as_sps_html_forms][][][]
    [11/10/2017][10:46:58.229][Sm_Auth_Message.cpp:5132][CSm_Auth_Message::FormatAttribute][Login][Send response attribute 227, data size is 179][http://www.ca.com?SMENC=UTF-8&SMTOKEN={RC2}+ilHgxBmiQkr/qSq5tf9ZmIcfnepWXrykZLTQWF5SoGSbsSYCocgON5UaZMf56yoLGMRDalfGqBfBaZMqQekNzzTVm38u7QJZ7FL2JK+lyN7e8KIhBO71w==&USERNAME=BAAAAA][wa_smtest][][BAAAAA][][pd_application1_prot_FormsAuth_realm][pd_application1][ud_sjds7][][][][][][][][][][][][][as_sps_html_forms][][][]
    [11/10/2017][10:46:58.229][Sm_Auth_Message.cpp:4629][CSm_Auth_Message::SendReply][][** Status: Not Authenticated. ][][wa_smtest][][BAAAAA][][pd_application1_prot_FormsAuth_realm][pd_application1][ud_sjds7][][][][][][][][][][][][][as_sps_html_forms][][][]
    [11/10/2017][10:46:58.229][Sm_Auth_Message.cpp:4633][CSm_Auth_Message::SendReply][][Leave function CSm_Auth_Message::SendReply][][][][][][][][][][][][][][][][][][][][][][][][]
    [11/10/2017][10:46:58.229][Sm_Auth_Message.cpp:1850][CSm_Auth_Message::AuthenticateUser][][Leave function CSm_Auth_Message::AuthenticateUser][][][][][][][][][][][][][][ok][][][][][][][][][][]
    [11/10/2017][10:46:58.229][AgentAuth.cpp:317][CSm_Auth_Message::ProcessAgentMessage][][Leave function CSm_Auth_Message::ProcessAgentMessage][][][][][][][][][][][][][][363][][][][][][][][][][]
    [11/10/2017][10:46:58.229][Sm_Auth_Message.cpp:513][CSm_Auth_Message::ProcessMessage][][Leave function CSm_Auth_Message::ProcessMessage][][][][][][][][][][][][][][363][][][][][][][][][][]


  • 5.  Re: NETE_PWSERVICES_REDIRECT is not working

    Posted Nov 10, 2017 11:07 AM

    Are you using some Custom Authentication Scheme or Custom Agent? What is SmJavaAdmin?

     

    Comparison

    [11/09/2017][21:02:06.278][21465][3982101360][Send response attribute 212, data size is 4][s62/r2][Login][XXXXX][apache.test.com][][Mobile][][][][CSm_Auth_Message::FormatAttribute][Html-Mobile][][][][][GetResource][][][][SmJavaAdmin][][....][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.278][21465][3982101360][Send response attribute 227, data size is 210][s62/r2][Login][XXXXX][apache.test.com][][Mobile][][][][CSm_Auth_Message::FormatAttribute][Html-Mobile][][][][][GetResource][][][][SmJavaAdmin][][/siteminderagent/forms/smpwservices.fcc?SMENC=UTF-8&SMTOKEN={RC2}Jl+CN6W3XwZqgroUu7aua000P3EjEA+DVj67vaOMv8rUudeNxI5yUPtt2nopoJjoIOXCoBQ1RxBlxkTwyC9ElCRL3HoIwCfTftU/2lg0UWahVETTX5HTzs7oo2xPpp82&USERNAME=XXXXX][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]
    [11/09/2017][21:02:06.278][21465][3982101360][** Status: Not Authenticated. ][s62/r2][][XXXXX][apache.test.com][][Mobile][][][][CSm_Auth_Message::SendReply][Html-Mobile][][][][][GetResource][][][][SmJavaAdmin][][][][][][][uid=******,ou=people,o=xxxxx,l=xxxx,dc=xxxxx,dc=***][][]

    [11/10/2017][10:46:58.229][Sm_Auth_Message.cpp:5132][CSm_Auth_Message::FormatAttribute][Login][Send response attribute 212, data size is 4][....][wa_smtest][][BAAAAA][][pd_application1_prot_FormsAuth_realm][pd_application1][ud_sjds7][][][][][][][][][][][][][as_sps_html_forms][][][]
    [11/10/2017][10:46:58.229][Sm_Auth_Message.cpp:5132][CSm_Auth_Message::FormatAttribute][Login][Send response attribute 227, data size is 179][http://www.ca.com?SMENC=UTF-8&SMTOKEN={RC2}+ilHgxBmiQkr/qSq5tf9ZmIcfnepWXrykZLTQWF5SoGSbsSYCocgON5UaZMf56yoLGMRDalfGqBfBaZMqQekNzzTVm38u7QJZ7FL2JK+lyN7e8KIhBO71w==&USERNAME=BAAAAA][wa_smtest][][BAAAAA][][pd_application1_prot_FormsAuth_realm][pd_application1][ud_sjds7][][][][][][][][][][][][][as_sps_html_forms][][][]
    [11/10/2017][10:46:58.229][Sm_Auth_Message.cpp:4629][CSm_Auth_Message::SendReply][][** Status: Not Authenticated. ][][wa_smtest][][BAAAAA][][pd_application1_prot_FormsAuth_realm][pd_application1][ud_sjds7][][][][][][][][][][][][][as_sps_html_forms][][][]



  • 6.  Re: NETE_PWSERVICES_REDIRECT is not working

    Posted Nov 11, 2017 09:14 AM

    Hi Hubert Dennis ,

     

    Thanks for your reply.

     

    SmJavaAdmin is a directory name.

     

    We are using custom agent and custom authentication scheme. But I have checked with normal authentication scheme (HTML Form) but no luck.

     

    In my POC windows environment it is working but client dev linux environment it is not working.

     

    Regards

    Avishek Das



  • 7.  Re: NETE_PWSERVICES_REDIRECT is not working
    Best Answer

    Posted Nov 12, 2017 06:43 PM

    The only two reasons why I think this may not work are :

     

    - Environment variable is not set correctly.

      Did you try running "printenv" after sourcing ca_ps_env.ksh script ? Does it show the variable correctly ?

    - Password policies may still be enabled.

      In your ps trace profiler did you select all components underneath Login_Logout ?

      Particularly if you have "Password_Service" component enabled and if you have any applicable password policy for the auth scheme, you should see something like this in the trace log :

    "Have X Password Policies to apply" Where X is the count of applicable password policy