Layer 7 Access Management

Know Why : Unable to serve form template '' from disk 

09-06-2017 06:23 AM

Ran into an issue for which there wasn't any reference. Hence adding for info.

 

Trying to access https://wam.demo.com/siteminderagent/forms/login.fcc and was returned on the browser with "Internal Server Error".

 

##################################
In WebAgent.login
##################################

[7005/3517228800][Wed Sep 06 2017 03:47:54][SmFCC.cpp:1337][ERROR][sm-HTTPAgent-00130] Credential Collector error. Exiting with HTTP 500 server error '00-0011'.


##################################
In WebAgentTrace.log
##################################

[09/06/2017][03:47:54][7005][3517228800][CSmHighLevelAgent.cpp:986][ProcessAdvancedAuthentication][000000000000000000000000f2d0e590-1b5d-59afb63a-d1a4a700-8df6295b7d89][][][][][][Start new request.]
[09/06/2017][03:47:54][7005][3517228800][CSmResourceManager.cpp:187][CSmResourceManager::ProcessAdvancedAuthResource][000000000000000000000000f2d0e590-1b5d-59afb63a-d1a4a700-8df6295b7d89][][][][][][Calling SM_WAF_HTTP_PLUGIN->ProcessAdvancedAuthResource.]
[09/06/2017][03:47:54][7005][3517228800][CSmHttpPlugin.cpp:8776][CSmHttpPlugin::ProcessAdvancedAuthResource][000000000000000000000000f2d0e590-1b5d-59afb63a-d1a4a700-8df6295b7d89][][][][][][Resolved HTTP_HOST: 'wam.demo.com'.]
[09/06/2017][03:47:54][7005][3517228800][CSmHttpPlugin.cpp:5340][Entered CSmHttpPlugin::ResolveFQServerName sHost: ][][][][][][][wam.demo.com]
[09/06/2017][03:47:54][7005][3517228800][CSmHttpPlugin.cpp:5717][CSmHttpPlugin::ResolveClientIp][000000000000000000000000f2d0e590-1b5d-59afb63a-d1a4a700-8df6295b7d89][][][][][][Resolved Client IP address '10.214.116.29'.]
[09/06/2017][03:47:54][7005][3517228800][SmFCC.cpp:2680][SmFcc::GetDirPathAndName][000000000000000000000000f2d0e590-1b5d-59afb63a-d1a4a700-8df6295b7d89][*10.214.116.29][][][][][, failed dirpath = login.fcc]
[09/06/2017][03:47:54][7005][3517228800][CSmFormTemplateCache.cpp:209][CSmFormTemplateCache::GetForm][][][][][][][Form template '' not found in cache.]
[09/06/2017][03:47:54][7005][3517228800][CSmFormTemplateCache.cpp:283][CSmFormTemplateCache::GetForm][][][][][][][Unable to serve form template '' from disk.]
[09/06/2017][03:47:54][7005][3517228800][SmFCC.cpp:1336][SmFcc::setup][000000000000000000000000f2d0e590-1b5d-59afb63a-d1a4a700-8df6295b7d89][*10.214.116.29][][][][][Unable to process form .]
[09/06/2017][03:47:54][7005][3517228800][CSmResourceManager.cpp:207][CSmResourceManager::ProcessAdvancedAuthResource][000000000000000000000000f2d0e590-1b5d-59afb63a-d1a4a700-8df6295b7d89][*10.214.116.29][][][][][SM_WAF_HTTP_PLUGIN->ProcessAdvancedAuthResource returned SmExit.]
[09/06/2017][03:47:54][7005][3517228800][CSmHighLevelAgent.cpp:1003][ProcessAdvancedAuthentication][000000000000000000000000f2d0e590-1b5d-59afb63a-d1a4a700-8df6295b7d89][*10.214.116.29][][][][][ResourceManager returned SmExit, end new request.]

 


After looking at all CA SSO configuration yielded no results; started looking at Apache and Proxy configuration. Here it was found that /siteminderagent* was defined within the proxy configuration. This was the root cause for Apache not being able to serve the content off its ALIAS mapping & very rightly so was being printed in WebAgentTrace log. After removing the entry for /siteminderagent* from Proxy Configuration the login.fcc worked fine.


##################################
Root Cause
##################################

[apache@lt789 conf]$ cat conf.d/uriworkermap.properties
# Apache will reload this file and update the mount points every 60 seconds
/myapp/*=loadbalancer
/iwam*=loadbalancer;use_server_errors=404
/wartest*=loadbalancer;use_server_errors=404
/siteminderagent*=loadbalancer;use_server_errors=404
/userinfo*=loadbalancer2;use_server_errors=404

Statistics
0 Favorited
1 Views
0 Files
0 Shares
0 Downloads

Tags and Keywords

Comments

03-20-2019 05:32 PM

I have the same issue. It is with CA Access Gateway 12.7SP2.   can somebody help? login.fcc file in the right location, has correct ownership and permissions.

 

 

[03/20/2019][17:14:13][21051][140579786745600][][Entered CSmHttpPlugin::ResolveFQServerName sHost: ][ssologinoh001stg.***.com]
[03/20/2019][17:14:13][21051][140579786745600][36b3c009-87dadc14-7e84322f-d4f496ba-974b566c-a2][SmFcc::getLocalePath][Localized Path = /opt/CA/secure-proxy/Tomcat/webapps/../../proxy-engine/examples/forms/ssologin/login.fcc, working locale = default]
[03/20/2019][17:14:13][21051][140579786745600][][CSmFormTemplateCache::GetForm][Form template '/opt/CA/secure-proxy/Tomcat/webapps/../../proxy-engine/examples/forms/ssologin/login.fcc' not found in cache.]
[03/20/2019][17:14:13][21051][140579786745600][][CSmFormTemplateCache::GetForm][Unable to serve form template '/opt/CA/secure-proxy/Tomcat/webapps/../../proxy-engine/examples/forms/ssologin/login.fcc' from disk.]
[03/20/2019][17:14:13][21051][140579786745600][36b3c009-87dadc14-7e84322f-d4f496ba-974b566c-a2][SmFcc::setup][Unable to process form /opt/CA/secure-proxy/Tomcat/webapps/../../proxy-engine/examples/forms/ssologin/login.fcc.]
[03/20/2019][17:18:36][21051][140579785692928][1eeafe2f-cea47b9e-0e29d651-d61f5a0f-5b3346fa-bae][CSmHttpPlugin::ProcessResource][Resolved URL: '/forms/ssologin/login.fcc'.]
[03/20/2019][17:18:36][21051][140579785692928][1eeafe2f-cea47b9e-0e29d651-d61f5a0f-5b3346fa-bae][CSmHttpPlugin::ProcessResource][Autoauthorizing URL : 'https://myaccess.stg.cxxxxm/forms/ssologin/login.fcc' , Method: 'GET' ]
[03/20/2019][17:18:36][21051][140579785692928][1eeafe2f-cea47b9e-0e29d651-d61f5a0f-5b3346fa-bae][SmFcc::getLocalePath][Localized Path = /opt/CA/secure-proxy/Tomcat/webapps/../../proxy-engine/examples/forms/ssologin/login.fcc, working locale = default]
[03/20/2019][17:18:36][21051][140579785692928][][CSmFormTemplateCache::GetForm][Form template '/opt/CA/secure-proxy/Tomcat/webapps/../../proxy-engine/examples/forms/ssologin/login.fcc' not found in cache.]
[03/20/2019][17:18:36][21051][140579785692928][][CSmFormTemplateCache::GetForm][Unable to serve form template '/opt/CA/secure-proxy/Tomcat/webapps/../../proxy-engine/examples/forms/ssologin/login.fcc' from disk.]
[03/20/2019][17:18:36][21051][140579785692928][1eeafe2f-cea47b9e-0e29d651-d61f5a0f-5b3346fa-bae][SmFcc::setup][Unable to process form /opt/CA/secure-proxy/Tomcat/webapps/../../proxy-engine/examples/forms/ssologin/login.fcc.]
^Csmspsadm@xxxx:/opt/CA/secure-proxy/proxy-engine/logs>
smspsadm@***:/opt/CA/secure-proxy/proxy-engine/logs>
smspsadm@***:/opt/CA/secure-proxy/proxy-engine/logs>
smspsadm@***:/opt/CA/secure-proxy/proxy-engine/logs> cd ../examples/forms

Related Entries and Links

No Related Resource entered.