Symantec Access Management

Know Why : Unable to serve form template '' from disk 

Sep 06, 2017 06:23 AM

Ran into an issue for which there wasn't any reference. Hence adding for info.

 

Trying to access https://wam.demo.com/siteminderagent/forms/login.fcc and was returned on the browser with "Internal Server Error".

 

##################################
In WebAgent.login
##################################

[7005/3517228800][Wed Sep 06 2017 03:47:54][SmFCC.cpp:1337][ERROR][sm-HTTPAgent-00130] Credential Collector error. Exiting with HTTP 500 server error '00-0011'.


##################################
In WebAgentTrace.log
##################################

[09/06/2017][03:47:54][7005][3517228800][CSmHighLevelAgent.cpp:986][ProcessAdvancedAuthentication][000000000000000000000000f2d0e590-1b5d-59afb63a-d1a4a700-8df6295b7d89][][][][][][Start new request.]
[09/06/2017][03:47:54][7005][3517228800][CSmResourceManager.cpp:187][CSmResourceManager::ProcessAdvancedAuthResource][000000000000000000000000f2d0e590-1b5d-59afb63a-d1a4a700-8df6295b7d89][][][][][][Calling SM_WAF_HTTP_PLUGIN->ProcessAdvancedAuthResource.]
[09/06/2017][03:47:54][7005][3517228800][CSmHttpPlugin.cpp:8776][CSmHttpPlugin::ProcessAdvancedAuthResource][000000000000000000000000f2d0e590-1b5d-59afb63a-d1a4a700-8df6295b7d89][][][][][][Resolved HTTP_HOST: 'wam.demo.com'.]
[09/06/2017][03:47:54][7005][3517228800][CSmHttpPlugin.cpp:5340][Entered CSmHttpPlugin::ResolveFQServerName sHost: ][][][][][][][wam.demo.com]
[09/06/2017][03:47:54][7005][3517228800][CSmHttpPlugin.cpp:5717][CSmHttpPlugin::ResolveClientIp][000000000000000000000000f2d0e590-1b5d-59afb63a-d1a4a700-8df6295b7d89][][][][][][Resolved Client IP address '10.214.116.29'.]
[09/06/2017][03:47:54][7005][3517228800][SmFCC.cpp:2680][SmFcc::GetDirPathAndName][000000000000000000000000f2d0e590-1b5d-59afb63a-d1a4a700-8df6295b7d89][*10.214.116.29][][][][][, failed dirpath = login.fcc]
[09/06/2017][03:47:54][7005][3517228800][CSmFormTemplateCache.cpp:209][CSmFormTemplateCache::GetForm][][][][][][][Form template '' not found in cache.]
[09/06/2017][03:47:54][7005][3517228800][CSmFormTemplateCache.cpp:283][CSmFormTemplateCache::GetForm][][][][][][][Unable to serve form template '' from disk.]
[09/06/2017][03:47:54][7005][3517228800][SmFCC.cpp:1336][SmFcc::setup][000000000000000000000000f2d0e590-1b5d-59afb63a-d1a4a700-8df6295b7d89][*10.214.116.29][][][][][Unable to process form .]
[09/06/2017][03:47:54][7005][3517228800][CSmResourceManager.cpp:207][CSmResourceManager::ProcessAdvancedAuthResource][000000000000000000000000f2d0e590-1b5d-59afb63a-d1a4a700-8df6295b7d89][*10.214.116.29][][][][][SM_WAF_HTTP_PLUGIN->ProcessAdvancedAuthResource returned SmExit.]
[09/06/2017][03:47:54][7005][3517228800][CSmHighLevelAgent.cpp:1003][ProcessAdvancedAuthentication][000000000000000000000000f2d0e590-1b5d-59afb63a-d1a4a700-8df6295b7d89][*10.214.116.29][][][][][ResourceManager returned SmExit, end new request.]

 


After looking at all CA SSO configuration yielded no results; started looking at Apache and Proxy configuration. Here it was found that /siteminderagent* was defined within the proxy configuration. This was the root cause for Apache not being able to serve the content off its ALIAS mapping & very rightly so was being printed in WebAgentTrace log. After removing the entry for /siteminderagent* from Proxy Configuration the login.fcc worked fine.


##################################
Root Cause
##################################

[apache@lt789 conf]$ cat conf.d/uriworkermap.properties
# Apache will reload this file and update the mount points every 60 seconds
/myapp/*=loadbalancer
/iwam*=loadbalancer;use_server_errors=404
/wartest*=loadbalancer;use_server_errors=404
/siteminderagent*=loadbalancer;use_server_errors=404
/userinfo*=loadbalancer2;use_server_errors=404

Statistics
0 Favorited
6 Views
0 Files
0 Shares
0 Downloads

Related Entries and Links

No Related Resource entered.