Hi, I'm trying to configure web agent for an apache which serve has reverse proxy with AJP connector in 8009 port to tomcat server . So here web agent calling for login.cc which searching over 'proxy:ajp://localhost:8009/login.fcc' . Not sure which document root the file is searching for . I’m sure something needs to be fixed in httpd.conf ,Please help me in fixing this . Here basic authentication working fine but not html form base auth.
[3401/2274853568][Sun Oct 18 2015 16:45:28][CSmFormTemplateObj.cpp:226][ERROR][sm-HTTPAgent-00370] Error opening form template 'proxy:ajp://localhost:8009/login.fcc': No such file or directory.
[3401/2274853568][Sun Oct 18 2015 16:45:28][SmFCC.cpp:1308][ERROR][sm-HTTPAgent-00130] Credential Collector error. Exiting with HTTP 500 server error '00-0011'
Try look for login.fcc at following path
and try copy login.fcc to
Thanks Kar , For the update . I haven't used SPS before . Is any way to fix this issue using web agent ? Instead using SPS.
I thought you were using Siteminder SPS and causing the issue. If this is just a normal web agent with apache reverse proxy configure, you might need to check the Apache httpd.conf for where the document root refer to. In general, web agent will configure Alias in httpd.conf for the files that it refer to.
For example, when the user redirect to login.fcc
The httpd.conf will have following to refer to where the file located
Alias /siteminderagent/ "/apps/www/netegrity/webagent/samples/"
Options Indexes MultiViews
Allow from all
In your case, it seems refer to the document root of Apche server (localhost:8009/login.fcc). Try copy the login.fcc from <WA_INSTALL_PATH>/samples/forms to the document root.
Beside, if you are configuring the Apache web server to function as a reverse proxy server with any CA SiteMinder® agent, check following document:
https://support.ca.com/cadocs/0/CA SiteMinder 12 52 SP1-ENU/Bookshelf_Files/HTML/idocs/index.htm?toc.htm?764843.html
As stated previously, login.fcc is typically in <install_dir>\webagent\samples\forms, and the Apache virtual directory name is "siteminderagent"
So your authentication scheme should point to /siteminderagent/forms/login.fcc
Make sure that your AJP configuration excludes the /siteminderagent directory. I.e. you don't forward requests to this directory to the Tomcat server.
If you were using mod_proxy to forward everything to Tomcat, you could use the following to exclude /siteminderagent
ProxyPass /siteminderagent !
I'm not sure what the mod_jk equivalent is.
Thanks , As per your suggestion reverse proxy applied via httpd proxy module been worked ..
Glad it works for you kasis3