Symantec Access Management

 View Only
  • 1.  Web agent failover

    Posted Jun 08, 2023 07:58 PM
    One of the policy servers was taken down but the web agent did not failover to another policy server. 
    These events were taken from 1 of the agents.
    [23213/4185892608][Tue May 16 2023 16:46:50][CSmHttpPlugin.cpp:2240][WARNING][sm-HTTPAgent-00190] Unable to process SSOSESSION cookie.
    [23213/4211070720][Tue May 16 2023 16:46:50][CSmHttpPlugin.cpp:2240][WARNING][sm-HTTPAgent-00190] Unable to process SSOSESSION cookie.
    [22356/3976075008][Tue May 16 2023 16:46:51][SmAgentAPI.cpp:316][INFO][sm-AgentConMgr-00050] Failover from cluster [0] to cluster [1].
    [23213/4160714496][Tue May 16 2023 16:46:52][CSmHttpPlugin.cpp:2240][WARNING][sm-HTTPAgent-00190] Unable to process SSOSESSION cookie.
    [23213/4194285312][Tue May 16 2023 16:46:52][CSmHttpPlugin.cpp:2240][WARNING][sm-HTTPAgent-00190] Unable to process SSOSESSION cookie.
    [23213/4076787456][Tue May 16 2023 16:46:53][CSmHttpPlugin.cpp:2240][WARNING][sm-HTTPAgent-00190] Unable to process SSOSESSION cookie.
    [21609/3954927424][Tue May 16 2023 16:46:54][SmAgentAPI.cpp:316][INFO][sm-AgentConMgr-00050] Failover from cluster [0] to cluster [1].
    [23213/4060002048][Tue May 16 2023 16:46:56][CSmHttpPlugin.cpp:2240][WARNING][sm-HTTPAgent-00190] Unable to process SSOSESSION cookie.
    [23213/4110358272][Tue May 16 2023 16:46:56][CSmHttpPlugin.cpp:2240][WARNING][sm-HTTPAgent-00190] Unable to process SSOSESSION cookie.
     
    Tried searching for SSOSESSION but could not find any. Is there any reference for this? What else should I check for failover not working?
     
    Thanks.
     
    Regards,
    Ain


  • 2.  RE: Web agent failover

    Broadcom Employee
    Posted Jun 09, 2023 01:49 AM

    SSOSESSION cookie has nothing to do with agent failover.

    You should enable agent trace log using the connection manager config to get more details on which policy servers are seen as available and which ones are not.




  • 3.  RE: Web agent failover

    Posted Jun 09, 2023 03:47 AM
    Hi Kim,
    Thanks for responding. If the issue has already been resolved, will enabling agent trace log help to identify the root cause of agent failover not working?
     
    Regards,
    Ain



  • 4.  RE: Web agent failover

    Broadcom Employee
    Posted Jun 12, 2023 05:42 PM

    Unfortunately, if the issue has been already resolved then the connection manager agent trace will not reveal anything.

    But it would be good to leave the setting in place just in case if the issue would occur again.