Symantec Access Management

  • Private Community
 View Only
Back to discussions
Expand all | Collapse all

FWSB_INVALID_SMSESSION error during SLO

  • 1.  FWSB_INVALID_SMSESSION error during SLO

    Posted Jan 17, 2018 05:26 PM

    Hi All,

     

    Getting below exception when User is performing SP Initiated Single Logout (SLO). There are no errors in siteminder logs during this time. Did any one else came across this issue?

     

    affwebserv.log 

     

    [3734/156011376][Wed Jan 17 2018 18:38:59][FWSBase.java][ERROR][sm-FedClient-02890] Transaction with ID: 6b4fb4b5-6c2713ad-3c5f7fde-fd5f6e7f-9ad26e3f-3f failed. Reason: FWSB_INVALID_SMSESSION (, , )

     

    FWSTrace.log

     

    [01/17/2018][18:38:59][3734][156011376][][agentcommon][][Administration Manager is returning data for ConfigManager ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]
    [01/17/2018][18:38:59][3734][156011376][6b4fb4b5-6c2713ad-3c5f7fde-fd5f6e7f-9ad26e3f-3f][SLOService.java][handleLogout][RequestID: 21bfb469-ad956a61-3b54d491-28c07829-fe42d980-10d]
    [01/17/2018][18:38:59][3734][156011376][6b4fb4b5-6c2713ad-3c5f7fde-fd5f6e7f-9ad26e3f-3f][SLOService.java][handleLogout][RequestID 21bfb469-ad956a61-3b54d491-28c07829-fe42d980-10d maps to TransactionID: 6b4fb4b5-6c2713ad-3c5f7fde-fd5f6e7f-9ad26e3f-3f.]
    [01/17/2018][18:38:59][3734][156011376][6b4fb4b5-6c2713ad-3c5f7fde-fd5f6e7f-9ad26e3f-3f][FWSBase.java][getSessionFromCookie][Fetching session details from cookie [CHECKPOINT = SLO_SESSION_FETCH]]
    [01/17/2018][18:38:59][3734][156011376][6b4fb4b5-6c2713ad-3c5f7fde-fd5f6e7f-9ad26e3f-3f][FWSBase.java][getSessionCookie][SMSESSION Cookie found.]
    [01/17/2018][18:38:59][3734][156011376][6b4fb4b5-6c2713ad-3c5f7fde-fd5f6e7f-9ad26e3f-3f][FWSBase.java][getSessionCookie][SMSESSION Cookie is logged off. Looking for another]
    [01/17/2018][18:38:59][3734][156011376][6b4fb4b5-6c2713ad-3c5f7fde-fd5f6e7f-9ad26e3f-3f][FWSBase.java][getSessionCookie][SESSIONSIGNOUT Cookie found.]
    [01/17/2018][18:38:59][3734][156011376][6b4fb4b5-6c2713ad-3c5f7fde-fd5f6e7f-9ad26e3f-3f][FWSBase.java][validateSessionData][00790742 - The SESSION authTime = 1516203047 idleTimeOut = 1800 lastAccess = 1516208284 maxTimeOut = 631280593]
    [01/17/2018][18:38:59][3734][156011376][6b4fb4b5-6c2713ad-3c5f7fde-fd5f6e7f-9ad26e3f-3f][FWSBase.java][validateSessionData][00790742 - The SESSION idleMax = 1800 idleTime = 6055 totalMax = 631280593 totalTime = 11292]
    [01/17/2018][18:38:59][3734][156011376][6b4fb4b5-6c2713ad-3c5f7fde-fd5f6e7f-9ad26e3f-3f][FWSBase.java][validateSessionData][Transaction with ID: 6b4fb4b5-6c2713ad-3c5f7fde-fd5f6e7f-9ad26e3f-3f failed. Reason: FWSB_INVALID_SMSESSION]
    [01/17/2018][18:38:59][3734][156011376][6b4fb4b5-6c2713ad-3c5f7fde-fd5f6e7f-9ad26e3f-3f][FWSBase.java][validateSessionData][The SESSION cookie is expired or invlaid. Global Logout can not be performed.]
    [01/17/2018][18:38:59][3734][156011376][6b4fb4b5-6c2713ad-3c5f7fde-fd5f6e7f-9ad26e3f-3f][FWSBase.java][validateSessionData][Ending SAML2 Single Logout Service request processing with HTTP error 500]

     

    There are plenty of these below WARNING messages in webagent log

     

    [3734/71822192][Wed Jan 17 2018 22:00:33][CSmHttpPlugin.cpp:2224][WARNING][sm-HTTPAgent-00190] Unable to process SMSESSION cookie.
    [3734/150272880][Wed Jan 17 2018 22:00:33][CSmHttpPlugin.cpp:2224][WARNING][sm-HTTPAgent-00190] Unable to process SMSESSION cookie.
    [3734/72153968][Wed Jan 17 2018 22:00:33][CSmHttpPlugin.cpp:2224][WARNING][sm-HTTPAgent-00190] Unable to process SMSESSION cookie.
    [3734/98229104][Wed Jan 17 2018 22:00:35][CSmHttpPlugin.cpp:2224][WARNING][sm-HTTPAgent-00190] Unable to process SMSESSION cookie.
    [3734/72817520][Wed Jan 17 2018 22:00:35][CSmHttpPlugin.cpp:2224][WARNING][sm-HTTPAgent-00190] Unable to process SMSESSION cookie.
    [3734/150272880][Wed Jan 17 2018 22:00:35][CSmHttpPlugin.cpp:2224][WARNING][sm-HTTPAgent-00190] Unable to process SMSESSION cookie.
    [3734/150272880][Wed Jan 17 2018 22:00:36][CSmHttpPlugin.cpp:2224][WARNING][sm-HTTPAgent-00190] Unable to process SMSESSION cookie.

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     



  • 2.  Re: FWSB_INVALID_SMSESSION error during SLO
    Best Answer

    Posted Jan 17, 2018 05:41 PM

    The session has idled out ..

     

     

    [01/17/2018][18:38:59][3734][156011376][6b4fb4b5-6c2713ad-3c5f7fde-fd5f6e7f-9ad26e3f-3f][FWSBase.java][validateSessionData][00790742 - The SESSION authTime = 1516203047 idleTimeOut = 1800 lastAccess = 1516208284 maxTimeOut = 631280593]

     

    As you can see above :

     

    • Auth Time : 1516203047 : January 17, 2018 3:30:47 PM
    • LastAccess = 1516208284 : January 17, 2018 4:58:04 PM
    • IdleTimeOut = 1800 = 30 minutes
    • MaxTimeOut = 631280593 : 175k hour

     

    So as you can see above, the session was last accessed on January 17, 2018 4:58:04 PM.. ..and during the Federation txn, it was accessed at 18:38:59 which is after the idle time out of 30 minutes..



  • 3.  Re: FWSB_INVALID_SMSESSION error during SLO

    Posted Jan 17, 2018 09:05 PM

    Hi Ujwol,

    I tried to replicate Idle time out scenario i.e., trying to do SLO after idle time out and got different error as shown below. There is some error in smtracedefault log as well

     

    affwebserv.log

    [3734/96902000][Thu Jan 18 2018 01:49:28][SLOService.java][ERROR][sm-FedClient-02890] Transaction with ID: dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1 failed. Reason: SLO_GET_EXCEPTION (, , )
    [3734/96902000][Thu Jan 18 2018 01:49:28][SLOService.java][ERROR][sm-FedClient-01660] Exception caught in class com.netegrity.affiliateminder.webservices.saml2.SLOService, method doGet, message java.lang.NullPointerException. (, )

     

    FWSTrace.log

    [01/18/2018][01:49:28][3734][96902000][][agentcommon][][Administration Manager is returning data for ConfigManager ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]
    [01/18/2018][01:49:28][3734][96902000][dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1][SLOService.java][handleLogout][RequestID: 1957129f-b86c4bbe-b1350096-cd5194b4-079b38ba-d9]
    [01/18/2018][01:49:28][3734][96902000][dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1][SLOService.java][handleLogout][RequestID 1957129f-b86c4bbe-b1350096-cd5194b4-079b38ba-d9 maps to TransactionID: dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1.]
    [01/18/2018][01:49:28][3734][96902000][dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1][FWSBase.java][getSessionFromCookie][Fetching session details from cookie [CHECKPOINT = SLO_SESSION_FETCH]]
    [01/18/2018][01:49:28][3734][96902000][dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1][FWSBase.java][getSessionCookie][SESSIONSIGNOUT Cookie found.]
    [01/18/2018][01:49:28][3734][96902000][dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1][FWSBase.java][getSessionCookie][SMSESSION Cookie is logged off. Looking for another]
    [01/18/2018][01:49:28][3734][96902000][dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1][FWSBase.java][getSessionCookie][SMSESSION Cookie found.]
    [01/18/2018][01:49:28][3734][96902000][dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1][FWSBase.java][validateSessionData][00790742 - The SESSION cookie is valid. Returning CookieData.]
    [01/18/2018][01:49:28][3734][96902000][dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1][SLOService.java][handleLogout][Reading session id from cookie data for session termination [CHECKPOINT = SLOSAML2_SESSIONIDFROMCOOKIEDATA_READ]]
    [01/18/2018][01:49:28][3734][96902000][dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1][SLOService.java][handleLogout][Performing tunnel call for SAML1 SLO [CHECKPOINT = SLOSAML2_TUNNEL_REQUEST]]
    [01/18/2018][01:49:28][3734][96902000][dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1][SAMLTunnelClient.java][callSingleLogout][localURL: http://validation1.sharedinvestigator.com/affwebservices/public/saml2slo]
    [01/18/2018][01:49:28][3734][96902000][dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1][SAMLTunnelClient.java][callSingleLogout][Session ID: +Tou91P8vtG66+ltYThma8UDFsc=.]
    [01/18/2018][01:49:28][3734][96902000][][agentcommon][][Requesting data for ConfigManager ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]
    [01/18/2018][01:49:28][3734][96902000][][agentcommon][][Administration Manager is returning data for ConfigManager ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]
    [01/18/2018][01:49:28][3734][96902000][dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1][SAMLTunnelClient.java][callSingleLogout][Tunnel result code: 1.]
    [01/18/2018][01:49:28][3734][96902000][dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1][SLOService.java][handleLogout][
    TUNNEL STATUS:
    status : 2
    message : Exception when processing an SLO message: java.lang.NullPointerException
    com.netegrity.federationps.tunnel.SingleLogoutTunnelServiceHandler.getProviderWaitingForResponse(Unknown Source)
    com.netegrity.federationps.tunnel.SingleLogoutTunnelServiceHandler.getProviderToRespondTo(Unknown Source)
    com.netegrity.federationps.tunnel.SingleLogoutTunnelServiceHandler.generateSecondaryOutput(Unknown Source)
    com.netegrity.federationps.tunnel.SingleLogoutTunnelServiceHandler.tunnelHandler(Unknown Source)
    com.netegrity.saml2ps.tunnel.SAMLSingleLogoutTunnelService.tunnel(Unknown Source)
    com.netegrity.policyserver.smapi.TunnelServiceContext.tunnel(Unknown Source)]
    [01/18/2018][01:49:28][3734][96902000][dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1][SLOService.java][doGet][Transaction with ID: dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1 failed. Reason: SLO_GET_EXCEPTION]
    [01/18/2018][01:49:28][3734][96902000][dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1][SLOService.java][doGet][Exception caught in class com.netegrity.affiliateminder.webservices.saml2.SLOService, method doGet: java.lang.NullPointerException
    java.lang.NullPointerException

    at com.netegrity.affiliateminder.webservices.saml2.SLOService.a(DashoA10*..:1111)
    at com.netegrity.affiliateminder.webservices.saml2.SLOService.a(DashoA10*..:844)
    at com.netegrity.affiliateminder.webservices.saml2.SLOService.c(DashoA10*..:805)
    at com.netegrity.affiliateminder.webservices.saml2.SLOService.doGet(DashoA10*..:240)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:620)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
    at com.netegrity.affiliateminder.webservices.CAFedFilter.doFilter(DashoA10*..:58)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122)
    at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:504)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:170)
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103)
    at com.netegrity.proxy.ProxyValve.processRequest(ProxyValve.java:819)
    at com.netegrity.proxy.ProxyValve.invoke(ProxyValve.java:492)
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:421)
    at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:190)
    at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:611)
    at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:314)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
    at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
    at java.lang.Thread.run(Thread.java:745)
    ]
    [01/18/2018][01:49:28][3734][96902000][dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1][SLOService.java][doGet][Stack Trace: java.lang.NullPointerException
    at com.netegrity.affiliateminder.webservices.saml2.SLOService.a(DashoA10*..:1111)
    at com.netegrity.affiliateminder.webservices.saml2.SLOService.a(DashoA10*..:844)
    at com.netegrity.affiliateminder.webservices.saml2.SLOService.c(DashoA10*..:805)
    at com.netegrity.affiliateminder.webservices.saml2.SLOService.doGet(DashoA10*..:240)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:620)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
    at com.netegrity.affiliateminder.webservices.CAFedFilter.doFilter(DashoA10*..:58)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220)

    at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
    at com.netegrity.affiliateminder.webservices.CAFedFilter.doFilter(DashoA10*..:58)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122)
    at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:504)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:170)
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103)
    at com.netegrity.proxy.ProxyValve.processRequest(ProxyValve.java:819)
    at com.netegrity.proxy.ProxyValve.invoke(ProxyValve.java:492)
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:421)
    at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:190)
    at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:611)
    at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:314)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
    at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
    at java.lang.Thread.run(Thread.java:745)
    ]
    [01/18/2018][01:49:28][3734][96902000][dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1][SLOService.java][doGet][Ending SAML2 Single Logout Service request processing with HTTP error 500]

     

     

    smtracedefault log

     

    [01/18/2018][01:49:28.831][01:49:28][20700][139700882880256][SmObjCache.cpp:779][CSmObjCache::Lookup][][][][][][][][][][][][][][][][][][][][][Look up a cached object.][][][][06-0004a938-fc96-1981-bec0-dd940a760000][][][][]
    [01/18/2018][01:49:28.831][01:49:28][20700][139700882880256][SmAuthorization.cpp:642][CSmAz::IsProtected][][][/affwebservices/public/saml2slo?time=1516240168685][][][][][][][][][][][][][][][][][][Not Protected: No matching rules found for resource.][][][][][][][][]
    [01/18/2018][01:49:28.831][01:49:28][20700][139700882880256][SmAuthorization.cpp:644][CSmAz::IsProtected][][][][][][][][][][][][][NULL][][][][][][][][Leave function CSmAz::IsProtected][][][][][][][][]
    [01/18/2018][01:49:28.831][01:49:28][20700][139700882880256][Sm_Az_Message.cpp:409][CSm_Az_Message::SendReply][][][][][][][][][][][][][][][][][][][][][Enter function CSm_Az_Message::SendReply][][][][][][][][]
    [01/18/2018][01:49:28.831][01:49:28][20700][139700882880256][Sm_Az_Message.cpp:828][CSm_Az_Message::FormatAttribute][s2/r118][tc01vv-rhspx101-agent][][][][][][][][][][][][][][][][][][][Send response attribute 146, data size is 0][][][][][][][IsProtectedEx][]
    [01/18/2018][01:49:28.831][01:49:28][20700][139700882880256][Sm_Az_Message.cpp:828][CSm_Az_Message::FormatAttribute][s2/r118][tc01vv-rhspx101-agent][][][][][][][][][][][][][][][][][][][Send response attribute 147, data size is 0][][][][][][][IsProtectedEx][]
    [01/18/2018][01:49:28.831][01:49:28][20700][139700882880256][Sm_Az_Message.cpp:598][CSm_Az_Message::SendReply][s2/r118][tc01vv-rhspx101-agent][][][][][][][][][][][][][][][][][][][** Status: Not Protected. ][][][][][][][][]
    [01/18/2018][01:49:28.831][01:49:28][20700][139700882880256][Sm_Az_Message.cpp:602][CSm_Az_Message::SendReply][][][][][][][][][][][][][][][][][][][][][Leave function CSm_Az_Message::SendReply][][][][][][][][]
    [01/18/2018][01:49:28.831][01:49:28][20700][139700882880256][IsProtected.cpp:116][CSm_Az_Message::IsProtected][][][][][][][][][][][][][Not Protected][][][][][][][][Leave function CSm_Az_Message::IsProtected][][][][][][][][]
    [01/18/2018][01:49:28.831][01:49:28][20700][139700882880256][Sm_Az_Message.cpp:380][CSm_Az_Message::ProcessMessage][][][][][][][][][][][][][180][][][][][][][][Leave function CSm_Az_Message::ProcessMessage][][][][][][][][]
    [01/18/2018][01:49:28.831][01:49:28][20700][139700882880256][SmAuthUser.cpp:1519][CSmAuthUser::~CSmAuthUser][][][][][][][][][][][][][][][][][][][][][Enter function CSmAuthUser::~CSmAuthUser][][][][][][][][]
    [01/18/2018][01:49:28.831][01:49:28][20700][139700882880256][SmAuthUser.cpp:1571][CSmAuthUser::~CSmAuthUser][][][][][][][][][][][][][][][][][][][][][Leave function CSmAuthUser::~CSmAuthUser][][][][][][][][]
    [01/18/2018][01:49:28.831][01:49:28][20700][139700882880256][CServer.cpp:6302][CServer::ProcessRequest][][][][][][][][][][][][][180][][][][][][][][Leave function CServer::ProcessRequest][][][][][][][][]
    [01/18/2018][01:49:28.834][01:49:28][20700][139700624934656][CServer.cpp:1939][CAgentMessageHandler::HandleInput][][][][][][][][][][][][][][][::ffff:10.118.221.13][41608][][][][][Enqueuing a Normal Priority Message, from IP ::ffff:10.118.221.13 with Port No 41608. Current count is 1][][][][][][][][]
    [01/18/2018][01:49:28.834][01:49:28][20700][139700924839680][CServer.cpp:1497][ThreadPool::Run][][][][][][][][][][][][][][][::ffff:10.118.221.13][41608][][][][][Dequeuing a Normal Priority message, from IP ::ffff:10.118.221.13 with Port No 41608. Current count is 0][][][][][][][][]
    [01/18/2018][01:49:28.834][01:49:28][20700][139700924839680][CServer.cpp:6116][CServer::ProcessRequest][][][][][][][][][][][][][][][][][][][][][Enter function CServer::ProcessRequest][][][][][][][][]
    [01/18/2018][01:49:28.834][01:49:28][20700][139700924839680][CServer.cpp:6395][CServer::Tunnel][][][][][][][][][][][][][][][][][][][][][Enter function CServer::Tunnel][][][][][][][][]
    [01/18/2018][01:49:28.834][01:49:28][20700][139700924839680][CServer.cpp:6496][CServer::Tunnel][dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1][][][][][][][][][][][][][][::ffff:10.118.221.13][][][][Lib='smjavaapi', Func='JavaTunnelService', Params='com.netegrity.saml2ps.tunnel.SAMLSingleLogoutTunnelService', Server='', Device=''][][Resolved all the input parameters][][][][][][][][]

    [01/18/2018][01:49:28.834][01:49:28][20700][139700924839680][CServer.cpp:6649][CServer::Tunnel][][][][][][][][][][][][][][][][][][][][][Resolving tunnel Service function JavaTunnelService...][][][][][][][][]
    [01/18/2018][01:49:28.834][01:49:28][20700][139700924839680][CServer.cpp:6679][CServer::Tunnel][][][][][][][][][][][][][][][][][][][][][Start of tunnel call JavaTunnelService][][][][][][][][]
    [01/18/2018][01:49:28.834][01:49:28][20700][139700924839680][SingleLogoutTunnelServiceHandler.java][setupLogout][dca769c4-4fa04af3-de6993fd-4f128ea0-77f06fb1-1][][][][][][][][][][][][][][][][][][][][ENTER: setupLogout][][][][][][][][]
    [01/18/2018][01:49:28.835][01:49:28][20700][139700924839680][SingleLogoutTunnelServiceHandler.java][getClientSideInputs][1957129f-b86c4bbe-b1350096-cd5194b4-079b38ba-d9][][][][][][][][][][][][][][][][][][][][Received an SLO message.SamlSloRequestData [sessionId=+Tou91P8vtG66+ltYThma8UDFsc=, sloMessage=time=1516240168685, localResource=http://validation1.sharedinvestigator.com/affwebservices/public/saml2slo, localLogout=false, soap=false, hasRelayState=false, commonData=requestId: 1957129f-b86c4bbe-b1350096-cd5194b4-079b38ba-d9, serviceVersion: 1, serviceMinimumVersion: 0, fedApiVersion: 1, post=false, protocolBinding=, relayState=, disambiguationId=null]][][][][][][][][]
    [01/18/2018][01:49:28.835][01:49:28][20700][139700924839680][SingleLogoutTunnelServiceHandler.java][determineInputSLOMessage][1957129f-b86c4bbe-b1350096-cd5194b4-079b38ba-d9][][][][][][][][][][][][][][][][][][][][ Input Message Protocol: SAML][][][][][][][][]
    [01/18/2018][01:49:28.835][01:49:28][20700][139700924839680][SingleLogoutTunnelServiceHandler.java][getSLOStateFromSessionServerHelper][1957129f-b86c4bbe-b1350096-cd5194b4-079b38ba-d9][][][][][][][][][][][][][][][][][][][][ENTER: getSLOStateFromSessionServerHelper][][][][][][][][]
    [01/18/2018][01:49:28.835][01:49:28][20700][139700924839680][SingleLogoutTunnelServiceHandler.java][getSLOStateFromSessionServerHelper][1957129f-b86c4bbe-b1350096-cd5194b4-079b38ba-d9][][][][][][][][][][][][][][][][][][][][Calling matchVariables with: StateSLO.%.%][][][][][][][][]
    [01/18/2018][01:49:28.835][01:49:28][20700][139700924839680][SmSSProvider.cpp:1084][CSmSSProvider::MatchVariables][][][][][][][][][][][][][][][][][][][][][Enter function CSmSSProvider::MatchVariables][][][][][][][][]
    [01/18/2018][01:49:28.835][01:49:28][20700][139700924839680][LdapStore.cpp:376][Lock_LdapHandle][][][][][][][][][][][][][][][][][][][][][Lock LDAP handle. slot=0 ld=0x<NAN>][][][][][][][][]
    [01/18/2018][01:49:28.835][01:49:28][20700][139700924839680][LdapStore.cpp:1511][SearchObject][][][][][][][][][][][][][][][][][][][][][Searching for objects in container smSessionId=\+Tou91P8vtG66\+ltYThma8UDFsc\=,ou=sessionstore,dc=smsession,dc=com, (filter:"(&(objectClass=smSessionVariable)(smFullVariableName=StateSLO.*.*))")][][][][][][][][]
    [01/18/2018][01:49:28.835][01:49:28][20700][139700924839680][LdapStore.cpp:1897][CLdapStore][][][][][][][][][][][][][][][][][][][][][Trying to get a list of objects from LDAP server, LDAP returned an error message: No such object, (ldap_search_s returned LDAP err=0x20][][][][][][][][]
    [01/18/2018][01:49:28.835][01:49:28][20700][139700924839680][SmSSProvider.cpp:1118][CSmSSProvider::MatchVariables][][][][][][][][][][][][][2][][][][][][][][Leave function CSmSSProvider::MatchVariables][+Tou91P8vtG66+ltYThma8UDFsc=][][][][16][][][]
    [01/18/2018][01:49:28.835][01:49:28][20700][139700924839680][SmSSProvider.cpp:1120][CSmSSProvider::MatchVariables][][][][][][][][][][][][][2][][][][][][][][Leave function CSmSSProvider::MatchVariables][][][][][][][][]
    [01/18/2018][01:49:28.836][01:49:28][20700][139700924839680][SmSessionServer.cpp:978][][][][][][][][][][][][][][][][][][][][][][LogMessage:ERROR:[sm-Server-06007] failed. Error code : 2][][][][][][][][]
    [01/18/2018][01:49:28.836][01:49:28][20700][139700924839680][SingleLogoutTunnelServiceHandler.java][getSLOStateFromSessionServerHelper][1957129f-b86c4bbe-b1350096-cd5194b4-079b38ba-d9][][][][][][][][][][][][][][][][][][][][EXIT getSLOStateFromSessionServerHelper][][][][][][][][]
    [01/18/2018][01:49:28.836][01:49:28][20700][139700924839680][SingleLogoutTunnelServiceHandler.java][setupSession][1957129f-b86c4bbe-b1350096-cd5194b4-079b38ba-d9][][][][][][][][][][][][][][][][][][][][Stage one tunnel status: status=8&message=Error executing a Session Server API call: matchVariables Session ID: +Tou91P8vtG66+ltYThma8UDFsc= Reason: 0][][][][][][][][]
    [01/18/2018][01:49:28.836][01:49:28][20700][139700924839680][SingleLogoutTunnelServiceHandler.java][tunnelHandler][1957129f-b86c4bbe-b1350096-cd5194b4-079b38ba-d9][][][][][][][][][][][][][][][][][][][][Tunnel Status = 8.][][][][][][][][]

    [01/18/2018][01:49:28.836][01:49:28][20700][139700924839680][SingleLogoutTunnelServiceHandler.java][tunnelHandler][1957129f-b86c4bbe-b1350096-cd5194b4-079b38ba-d9][][][][][][][][][][][][][][][][][][][][Clearing all output messages.][][][][][][][][]
    [01/18/2018][01:49:28.862][01:49:28][20700][139700924839680][SingleLogoutTunnelServiceHandler.java][tunnelHandler][1957129f-b86c4bbe-b1350096-cd5194b4-079b38ba-d9][][][][][][][][][][][][][][][][][][][][java.lang.NullPointerException
    com.netegrity.federationps.tunnel.SingleLogoutTunnelServiceHandler.getProviderWaitingForResponse(Unknown Source)
    com.netegrity.federationps.tunnel.SingleLogoutTunnelServiceHandler.getProviderToRespondTo(Unknown Source)
    com.netegrity.federationps.tunnel.SingleLogoutTunnelServiceHandler.generateSecondaryOutput(Unknown Source)
    com.netegrity.federationps.tunnel.SingleLogoutTunnelServiceHandler.tunnelHandler(Unknown Source)
    com.netegrity.saml2ps.tunnel.SAMLSingleLogoutTunnelService.tunnel(Unknown Source)
    com.netegrity.policyserver.smapi.TunnelServiceContext.tunnel(Unknown Source)][][][][][][][][]
    [01/18/2018][01:49:28.862][01:49:28][20700][139700924839680][SingleLogoutTunnelServiceHandler.java][tunnelHandler][1957129f-b86c4bbe-b1350096-cd5194b4-079b38ba-d9][][][][][][][][][][][][][][][][][][][][EXIT: tunnelHelper][][][][][][][][]
    [01/18/2018][01:49:28.863][01:49:28][20700][139700924839680][SingleLogoutTunnelServiceHandler.java][tunnelHandler][1957129f-b86c4bbe-b1350096-cd5194b4-079b38ba-d9][][][][][][][][][][][][][][][][][][][][Returning from SLO tunnel. Status: status=2&message=Exception when processing an SLO message: java.lang.NullPointerException
    com.netegrity.federationps.tunnel.SingleLogoutTunnelServiceHandler.getProviderWaitingForResponse(Unknown Source)
    com.netegrity.federationps.tunnel.SingleLogoutTunnelServiceHandler.getProviderToRespondTo(Unknown Source)
    com.netegrity.federationps.tunnel.SingleLogoutTunnelServiceHandler.generateSecondaryOutput(Unknown Source)
    com.netegrity.federationps.tunnel.SingleLogoutTunnelServiceHandler.tunnelHandler(Unknown Source)
    com.netegrity.saml2ps.tunnel.SAMLSingleLogoutTunnelService.tunnel(Unknown Source)
    com.netegrity.policyserver.smapi.TunnelServiceContext.tunnel(Unknown Source)][][][][][][][][]
    [01/18/2018][01:49:28.863][01:49:28][20700][139700924839680][SmJavaAPI.cpp:1484][JavaTunnelService][][][][][][][][][][][][][719][][][][][][][][Active Expression evaluated for SmJavaAPI: JavaTunnelService successfully invoked. Parameter to follow:][][][][][][][][]
    [01/18/2018][01:49:28.863][01:49:28][20700][139700924839680][CServer.cpp:6781][CServer::Tunnel][][][][][][][][][][][][][719][][][][][][][][Return from tunnel call JavaTunnelService][][][][][][][][]



  • 4.  Re: FWSB_INVALID_SMSESSION error during SLO

    Posted Jan 17, 2018 09:10 PM

    For SLO, you need to enable persistent session for the authentication realm.

    It seems that is not done ?

     

    [01:49:28.835][01:49:28][20700][139700924839680][LdapStore.cpp:1511][SearchObject][][][][][][][][][][][][][][][][][][][][][Searching for objects in container smSessionId=\+Tou91P8vtG66\+ltYThma8UDFsc\=,ou=sessionstore,dc=smsession,dc=com, (filter:"(&(objectClass=smSessionVariable)(smFullVariableName=StateSLO..))")][][][][][][][][]

    [01:49:28.835][01:49:28][20700][139700924839680][LdapStore.cpp:1897][CLdapStore][][][][][][][][][][][][][][][][][][][][][Trying to get a list of objects from LDAP server, LDAP returned an error message: No such object, (ldap_search_s returned LDAP err=0x20][][][][][][][][]



  • 5.  Re: FWSB_INVALID_SMSESSION error during SLO

    Posted Jan 17, 2018 09:22 PM

    Persistent session is enabled in Federation partnership. These issues are happening intermittently. Rest of the time SLO is working perfectly fine. 

    I can mainly see 3 different errors  in SPS logs intermittently as shown below

     

    *************************************************************************************************************************************************

    [58600/81034096][Tue Jan 16 2018 13:58:57][SLOService.java][ERROR][sm-FedClient-02890] Transaction with ID: 32540eb9-92d7751b-8e183ed4-327c510d-d241225c-70 failed. Reason: SLO_GET_EXCEPTION (, , )

    [58600/81034096][Tue Jan 16 2018 13:58:57][SLOService.java][ERROR][sm-FedClient-01660] Exception caught in class com.netegrity.affiliateminder.webservices.saml2.SLOService, method doGet, message java.lang.NullPointerException. (, )

     

    **************************************************************************************************************************************************

    [58600/136108912][Tue Jan 16 2018 08:05:42][FWSBase.java][ERROR][sm-FedClient-02890] Transaction with ID: 3468e9ff-2c01fb97-18dce683-a0cc373f-979217c8-b failed. Reason: FWSB_USER_LOGGED_OFF (, , )
    [58600/81034096][Tue Jan 16 2018 13:22:16][SLOService.java][ERROR][sm-FedClient-02890] Transaction with ID: 17399447-b4c1fb01-530b5892-3b46b910-e0afb0e1-fcf failed. Reason: SLO_GETIMPL_EXCEPTION (, , )

     

    *****************************************************************************************************************************************************

    [58600/46492528][Tue Jan 16 2018 20:57:16][FWSBase.java][ERROR][sm-FedClient-02890] Transaction with ID: 1ef37bc9-9089dade-3b402569-75b42d14-acd8d1fa-b12 failed. Reason: FWSB_INVALID_SMSESSION (, , )



  • 6.  Re: FWSB_INVALID_SMSESSION error during SLO

    Posted Jan 17, 2018 09:24 PM

    Sorry actually 4 different errors

    *************************************************************************************************************************************************

    [58600/81034096][Tue Jan 16 2018 13:58:57][SLOService.java][ERROR][sm-FedClient-02890] Transaction with ID: 32540eb9-92d7751b-8e183ed4-327c510d-d241225c-70 failed. Reason: SLO_GET_EXCEPTION (, , )

    [58600/81034096][Tue Jan 16 2018 13:58:57][SLOService.java][ERROR][sm-FedClient-01660] Exception caught in class com.netegrity.affiliateminder.webservices.saml2.SLOService, method doGet, message java.lang.NullPointerException. (, )

     

    ****************************************************************************************************************************************************************

    [58600/136108912][Tue Jan 16 2018 08:05:42][FWSBase.java][ERROR][sm-FedClient-02890] Transaction with ID: 3468e9ff-2c01fb97-18dce683-a0cc373f-979217c8-b failed. Reason: FWSB_USER_LOGGED_OFF (, , )

     

    *******************************************************************************************************************************************************************
    [58600/81034096][Tue Jan 16 2018 13:22:16][SLOService.java][ERROR][sm-FedClient-02890] Transaction with ID: 17399447-b4c1fb01-530b5892-3b46b910-e0afb0e1-fcf failed. Reason: SLO_GETIMPL_EXCEPTION (, , )

     

    *********************************************************************************************************************************************************************

    [58600/46492528][Tue Jan 16 2018 20:57:16][FWSBase.java][ERROR][sm-FedClient-02890] Transaction with ID: 1ef37bc9-9089dade-3b402569-75b42d14-acd8d1fa-b12 failed. Reason: FWSB_INVALID_SMSESSION (, , )



  • 7.  Re: FWSB_INVALID_SMSESSION error during SLO

    Posted Jan 18, 2018 12:25 AM

    Let's focus this thread only for FWSB_INVALID_SMSESSION error.

     

    Based on your log I already clarified that you are getting that error because the session has idled out.

     

    If you are getting FWSB_INVALID_SMSESSION in any other condition when you believe the session has not idled out , please provide the relevant log snippet.

     

    For other errors, if you would like to discuss, please create new thread and provide the trace logs relevant to those txns.



  • 8.  Re: FWSB_INVALID_SMSESSION error during SLO

    Posted Jan 18, 2018 11:11 AM

    Below are the sequence of events happening when SLO is working fine. From this it is understood  SESSIONSIGNOUT cookie would be set by siteminder after setting session to LOGGEDOFF

     

    1. SiteMinder setting SMSESSION cookie to LOGGEDOFF

    2. Issuing SESSIONSIGNOUT cookie

    3. Redirecting to IDP for SLO

     

    Whereas when there is error, it directly says SESSIONSIGNOUT Cookie found and it is INVALID (see log below in the end). Not sure how SESSIONSIGNOUT cookie is found in the browser even before setting SMSESSION cookie to LOGGEDOFF?

     

     

    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][FWSBase.java][doRequestLog][Requesting Host: 10.118.221.19 Requesting Host IP: 10.118.221.19 Request protocol: HTTP/1.1 Request was secure: false Authentication type: null]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][SLOService.java][doGet][SLORequest: time=1516290506912]
    [01/18/2018][15:48:27][3734][100334448][][SLOService.java][validateRequest][Validate GET request for necessary parameters [CHECKPOINT = SLOSAML2_GETREQUEST_VALIDATE]]
    [01/18/2018][15:48:27][3734][100334448][][agentcommon][][Requesting data for ConfigManager ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]
    [01/18/2018][15:48:27][3734][100334448][][agentcommon][][Administration Manager is returning data for ConfigManager ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][SLOService.java][handleLogout][RequestID: eea744d5-90ce8b13-edec2a4e-347f91e3-4dc1a651-f9]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][SLOService.java][handleLogout][RequestID eea744d5-90ce8b13-edec2a4e-347f91e3-4dc1a651-f9 maps to TransactionID: 2b50086d-d777e1cc-4f899128-d750b480-5484201a-05.]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][FWSBase.java][getSessionFromCookie][Fetching session details from cookie [CHECKPOINT = SLO_SESSION_FETCH]]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][FWSBase.java][getSessionCookie][SESSIONSIGNOUT Cookie found.]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][FWSBase.java][getSessionCookie][SMSESSION Cookie is logged off. Looking for another]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][FWSBase.java][getSessionCookie][SMSESSION Cookie found.]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][FWSBase.java][validateSessionData][00790742 - The SESSION cookie is valid. Returning CookieData.]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][SLOService.java][handleLogout][Reading session id from cookie data for session termination [CHECKPOINT = SLOSAML2_SESSIONIDFROMCOOKIEDATA_READ]]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][SLOService.java][handleLogout][Performing tunnel call for SAML1 SLO [CHECKPOINT = SLOSAML2_TUNNEL_REQUEST]]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][SAMLTunnelClient.java][callSingleLogout][localURL: http://validation1.sharedinvestigator.com/affwebservices/public/saml2slo]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][SAMLTunnelClient.java][callSingleLogout][Session ID: wA7ZoUe+BKCTM+HoTPBM7iZBzLM=.]
    [01/18/2018][15:48:27][3734][100334448][][agentcommon][][Requesting data for ConfigManager ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]
    [01/18/2018][15:48:27][3734][100334448][][agentcommon][][Administration Manager is returning data for ConfigManager ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][SAMLTunnelClient.java][callSingleLogout][Tunnel result code: 1.]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][SLOService.java][handleLogout][
    TUNNEL STATUS:
    status : 0

    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][FWSBase.java][dispatchOutputMessage][Sending LogoutResponse through sloProcessor.processOutputMessage]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][SAML2Base.java][getIdentityProviderInfo][Trying to fetch SAML2.0 IDP Configuration from cache [CHECKPOINT = SSOSAML2_IDPCONFFROMCACHE_REQ]]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][SAML2Base.java][getIdentityProviderInfo][Obtained identity provider information from cache for: sam.]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][FWSBase.java][getPartnershipSourceValue][Partnership source value = 3]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][FWSBase.java][renameSessionCookie][Re-naming sesion cookie to sessionsignout cookie [CHECKPOINT = SLO_SESSION_RENAME]]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][FWSBase.java][renameSessionCookie][Issuing SMSESSION Cookie with value set to LOGGEDOFF.]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][FWSBase.java][renameSessionCookie][Issuing SESSIONSIGNOUT Cookie.]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][SLOService.java][sendLogoutMessageToIdP][ENTER:sendLogoutMessageToIdP]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][SAML2Base.java][getIdentityProviderInfo][Trying to fetch SAML2.0 IDP Configuration from cache [CHECKPOINT = SSOSAML2_IDPCONFFROMCACHE_REQ]]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][SAML2Base.java][getIdentityProviderInfo][Obtained identity provider information from cache for: sam.]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][SLOService.java][sendLogoutMessageToIdP][output of tunnel call=status=1&providerType=IdP&providerID=sam&SLOmessage=SAMLRequest=jZJRT4MwFIX%2FCun7gDJxrGFEEmJCgptxyx58MV17mRhosbfM%2Be%2FtMGq2RONDX07POf1u27TSez3YB3gdAK231HalViavLZgFiUKaTEI6ocmGxiwOWTR7JF7hjI3ittFqQZ6t7ZEFQQ0SzKj5cNRoubHO5gvdBY3sg3W18pF3bUS8sliQp%2Buknu3EPBF8SqmQ4W6WXCfcrTndTWM5FTCPnRVxgFK5NmUvaa6ST5otGBxJIj8k3rFrFS7IYBTTHBtkineAzAq2zu8q5jysN9pqoVuSpQopG88wn0HmhL%2FDHBHMaUqSrcv7bV6VRb4pV0uaBj9lp%2BKILV24LLxbbTpuf2%2BlPh2VRk7q0coGhT2Ipm5Akm%2Bu6N9cHUiOTzGl8xsEMRjo3eblo5xwvxCzdA14usNSSThmz62Qt%2BZ9iONdfrgr2%2F2L9h%2BHN%2F4SH9LgzJkGZ58n%2BwA%3D&RelayState=f3c5e6263ac8950b24b3194682647b60f817afc5&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=NG3S5CZUcMc8YXHyD1xy%2BaSOTx1VDm7NKAW0Ea3%2BPavvAHwRmPFgWUlxPTUhwls%2FJvNGtNZn6wnh0EVJct6m189J5SIrgqYvq6%2FNXU9OwZcawnV%2FcCg5aaWdHFtsv%2BIvv6SzcK7g0YQWrhIHmU1XwKdbrD4THak1Cy7wgBjlMY88OthIoJ76VZqPwgAczrfmsA0N3olTYsNqOJFV6U9Texgb0Fp24yCdG4z5%2BXKYr0xWOTbSUoiqeuw%2BsZaf1DSfMX3xSGmGHpRpVDht64iLuGOg%2Fi2oXDx6gvAZ0maqqhDUBZI0Hgm4dBwgmoDqUPQsRRm9bhNClsct5Y2L4DzQQA%3D%3D&isPOST=false&isSOAPEnabled=false;relayState=f3c5e6263ac8950b24b3194682647b60f817afc5]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][SLOService.java][sendLogoutMessageToIdP][Calling sendLogoutMessageUsingRedirect]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][SLOService.java][sendLogoutMessageUsingRedirect][ENTER: sendLogoutMessageUsingRedirect]
    [01/18/2018][15:48:27][3734][100334448][2b50086d-d777e1cc-4f899128-d750b480-5484201a-05][SLOService.java][sendLogoutMessageUsingRedirect][SLO Service URL: https://xxxx.com/idp/SLO.saml2]

     

    **********************************************************************************************************************************

     

    [01/18/2018][15:22:23][3734][73149296][3b8cbe5d-aa41e108-a066cb1f-69f15077-2a38718d-ff][SLOService.java][doGet][SLORequest: time=1516288942918]
    [01/18/2018][15:22:23][3734][73149296][][SLOService.java][validateRequest][Validate GET request for necessary parameters [CHECKPOINT = SLOSAML2_GETREQUEST_VALIDATE]]
    [01/18/2018][15:22:23][3734][73149296][][agentcommon][][Requesting data for ConfigManager ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]
    [01/18/2018][15:22:23][3734][73149296][][agentcommon][][Administration Manager is returning data for ConfigManager ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /app/CASecureProxy/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]
    [01/18/2018][15:22:23][3734][73149296][3b8cbe5d-aa41e108-a066cb1f-69f15077-2a38718d-ff][SLOService.java][handleLogout][RequestID: 534f4302-fd7b2e7e-e97faebe-a5efc0df-ecf2dd5d-7]
    [01/18/2018][15:22:23][3734][73149296][3b8cbe5d-aa41e108-a066cb1f-69f15077-2a38718d-ff][SLOService.java][handleLogout][RequestID 534f4302-fd7b2e7e-e97faebe-a5efc0df-ecf2dd5d-7 maps to TransactionID: 3b8cbe5d-aa41e108-a066cb1f-69f15077-2a38718d-ff.]
    [01/18/2018][15:22:23][3734][73149296][3b8cbe5d-aa41e108-a066cb1f-69f15077-2a38718d-ff][FWSBase.java][getSessionFromCookie][Fetching session details from cookie [CHECKPOINT = SLO_SESSION_FETCH]]
    [01/18/2018][15:22:23][3734][73149296][3b8cbe5d-aa41e108-a066cb1f-69f15077-2a38718d-ff][FWSBase.java][getSessionCookie][SESSIONSIGNOUT Cookie found.]
    [01/18/2018][15:22:23][3734][73149296][3b8cbe5d-aa41e108-a066cb1f-69f15077-2a38718d-ff][FWSBase.java][validateSessionData][00790742 - The SESSION authTime = 1516218489 idleTimeOut = 1800 lastAccess = 1516219631 maxTimeOut = 631265151]
    [01/18/2018][15:22:23][3734][73149296][3b8cbe5d-aa41e108-a066cb1f-69f15077-2a38718d-ff][FWSBase.java][validateSessionData][00790742 - The SESSION idleMax = 1800 idleTime = 69312 totalMax = 631265151 totalTime = 70454]
    [01/18/2018][15:22:23][3734][73149296][3b8cbe5d-aa41e108-a066cb1f-69f15077-2a38718d-ff][FWSBase.java][validateSessionData][Transaction with ID: 3b8cbe5d-aa41e108-a066cb1f-69f15077-2a38718d-ff failed. Reason: FWSB_INVALID_SMSESSION]
    [01/18/2018][15:22:23][3734][73149296][3b8cbe5d-aa41e108-a066cb1f-69f15077-2a38718d-ff][FWSBase.java][validateSessionData][The SESSION cookie is expired or invlaid. Global Logout can not be performed.]
    [01/18/2018][15:22:23][3734][73149296][3b8cbe5d-aa41e108-a066cb1f-69f15077-2a38718d-ff][FWSBase.java][validateSessionData][Ending SAML2 Single Logout Service request processing with HTTP error 500]



  • 9.  Re: FWSB_INVALID_SMSESSION error during SLO

    Posted Jan 18, 2018 05:57 PM

    Could you provide following from the time of the issue  :

     

    - Fiddler log

    - Fws trace log

    - Web agent trace log



  • 10.  RE: Re: FWSB_INVALID_SMSESSION error during SLO

    Posted Dec 19, 2019 08:08 PM
    Any idea on this SLO issue ? 

    [12/20/2019][00:41:36][24892][139758777112320][][SLOService.java][doInitLog][------------------------------------------------]

    [12/20/2019][00:41:36][24892][139758777112320][][SLOService.java][doInitLog][SAML2 Single Logout Service Initialization.]

    [12/20/2019][00:41:36][24892][139758777112320][][SLOService.java][doInitLog][------------------------------------------------]

    [12/20/2019][00:41:36][24892][139758777112320][][FWSBase.java][init][Fips140Mode = 1]

    [12/20/2019][00:41:36][24892][139758777112320][][SLOService.java][init][SAML2 Single Logout Service has been successfully initialized.]

    [12/20/2019][00:41:36][24892][139758777112320][][agentcommon][][Requesting data for ConfigManager ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]

    [12/20/2019][00:41:36][24892][139758777112320][][agentcommon][][Administration Manager is returning data for ConfigManager ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]

    [12/20/2019][00:41:36][24892][139758777112320][][agentcommon][][Requesting data for ConfigManager ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]

    [12/20/2019][00:41:36][24892][139758777112320][][agentcommon][][Administration Manager is returning data for ConfigManager ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]

    [12/20/2019][00:41:36][24892][139758777112320][][FWSBase.java][getSLOGUIDCookie][Entering [configurationContextData: com.netegrity.siteminder.agentcommon.framework.d@19ba307b]]

    [12/20/2019][00:41:36][24892][139758777112320][][FWSBase.java][getSLOGUIDCookie][Leaving [guid: d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b]]

    [12/20/2019][00:41:36][24892][139758777112320][][agentcommon][][Requesting data for ConfigManager ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]

    [12/20/2019][00:41:36][24892][139758777112320][][agentcommon][][Administration Manager is returning data for ConfigManager ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][SLOService.java][doPost][Receiving request at SAML2 SLO Logout URL through POST method [CHECKPOINT = SLOSAML2_LOGOUTSERVICEPOST_RECEIVE]]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][SLOService.java][doPost][SAML2 Single Logout Service received POST request.]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][FWSBase.java][doRequestLog][Requesting Host: 10.121.89.131 Requesting Host IP: 10.121.89.131 Request protocol: HTTP/1.1 Request was secure: true Authentication type: null]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][SLOService.java][canDoSOAP][Request is NOT SOAP:  /affwebservices/public/saml2slo]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][SLOService.java][doPostImpl][ENTER:doPostImpl]

    [12/20/2019][00:41:36][24892][139758777112320][][SLOService.java][validateRequest][Validate GET request for necessary parameters [CHECKPOINT = SLOSAML2_GETREQUEST_VALIDATE]]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][SLOService.java][doPostImpl][SAML message received=<?xml version="1.0" encoding="UTF-8"?><saml2p:LogoutRequest xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" Destination="https://sit.auth.optus.com.au/affwebservices/public/saml2slo" ID="a585ig4j65iab1h447h4d9ge61fgi11" IssueInstant="2019-12-20T00:41:37.995Z" Version="2.0"><saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">ogqganefubgfipj-xj3atxs4pncp1hlw.apigee-saml-login</saml2:Issuer><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#a585ig4j65iab1h447h4d9ge61fgi11"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>N5hl5YjvLyrX5QbbiLA32H+bTlD4fW/SrtMdXCEelLc=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>dazMyG6d59iHmv6gU72SQWqnhFskGRCIryo0d9XYZOAIDb1DjM1kMoi/igGllHldNr/d2rO3jpExXeQUlZ0El/2gJCRA/KrxlsYWOYWg6KxRoq811LH5+9sxS+vtzRnHJmtYveLBoxq1o/NObY9akcHsCTNmLKw0XDNhaAWDej30wMl3jzKwgZwAC5RohJghuReNP7X/38MyBylBEAI8lLQE8TRSyDRpJNf8thAqql0aXGG2mvcXuvaR9IcZxOtjvnRQucvtClZzD3QjqQoqNoerJMSm4YvFuHGhtA9W15WNS1JWAUjuVGRje3ofc8/0h/Lp1072hTQCZJBfAuF+Mg==</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIFozCCBIugAwIBAgIRAKG9zQebVRRBAQAAAAAaw0swDQYJKoZIhvcNAQELBQAwQjELMAkGA1UE

    BhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczETMBEGA1UEAxMKR1RTIENBIDFP

    MTAeFw0xOTAxMTQxNzQ2NTVaFw0yMDAxMTMxNzQ2NTVaMGoxCzAJBgNVBAYTAlVTMRMwEQYDVQQI

    EwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRMwEQYDVQQKEwpHb29nbGUgTExD

    MRkwFwYDVQQDExBsb2dpbi5hcGlnZWUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC

    AQEAynAEiaNMvscrrw5/dbQdIHsjX6gNCRNe7HWDWspX5su46hk6KGaEX8sYWmHLR5SqTyQpVZ/4

    8GDyk2P5NJNOCzNyJDL+on/ZQ2GA5Pu0Jsq0XcOIGbHWJ7JX2elT3DQ7Cf3zhreLzaUKcnFEat8z

    3dufY/qOblRj9tZ7Q8DwPE3W9ElQOlKDOMl9q+iIxge/W85Bu1nWTjWqEUlmP0np9HplCJ471y6y

    snOxXCZRyqOSx6+bCAXyFL1jQ434LkmIH6snjTfEuYt816aQuCinIgDyCvgtccmmiHCywGZhD6mP

    45oUSdPRqySy42FkC09wa68/urttvD6pWfAnAhTUnwIDAQABo4ICajCCAmYwDgYDVR0PAQH/BAQD

    AgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAl422hm60W2

    sj41v7T9ryc1JzNvMB8GA1UdIwQYMBaAFJjR+G4Q68+b7GCfGJAboOt9Cf0rMGQGCCsGAQUFBwEB

    BFgwVjAnBggrBgEFBQcwAYYbaHR0cDovL29jc3AucGtpLmdvb2cvZ3RzMW8xMCsGCCsGAQUFBzAC

    hh9odHRwOi8vcGtpLmdvb2cvZ3NyMi9HVFMxTzEuY3J0MC8GA1UdEQQoMCaCEGxvZ2luLmFwaWdl

    ZS5jb22CEioubG9naW4uYXBpZ2VlLmNvbTAhBgNVHSAEGjAYMAgGBmeBDAECAjAMBgorBgEEAdZ5

    AgUDMC8GA1UdHwQoMCYwJKAioCCGHmh0dHA6Ly9jcmwucGtpLmdvb2cvR1RTMU8xLmNybDCCAQQG

    CisGAQQB1nkCBAIEgfUEgfIA8AB1ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAAB

    aE2wJd4AAAQDAEYwRAIgE5qO0j6O+mnFgQT5QV2005gT/z4Y9SwIFiJWyilYf+YCIBBwZ2ZvbWj8

    6EOLiwLhQvxV7o47q5TidaespugrwbCUAHcAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFx

    RVgAAAFoTbAl/gAABAMASDBGAiEAuUcc2S29sxMRcifJdHtls/zviIBlD7GNJJES7W3FzssCIQD9

    s1OqoMG5s9hD/OFOiNgLVg1Ga+Qvk+n4IRqAs00cdjANBgkqhkiG9w0BAQsFAAOCAQEAF2FfC4Gv

    4ialJOZZTZXk/hlXWJS8DZhxMLXT/cAzaJjtX64Ps2qY4xNSkuEmszVkwW4KdhKR1u+RGW6PRons

    0fC8rI4P1V6Ov6fq1WUeW2rQETzv+8riTbE9rvnKy2+0xscWvoEyGRK060TrMDFFHY5LI/jVCAIM

    bW1w1Tbopatc7dhWHbRtUUrTChOAS3AnGorXOsucoMzMW7aRxfmMg6HwRPA5jJyPU92wZJLLd3Py

    wLmvEQ3RzxCOoKtbZRM5XXZUmi6ptnyxV73hYjbPSpuv1UCT9AMmSnfrwi7bozz7/DzD9Kv8WES5

    GYUVaiD+1B4OZ8dT/qJ1VrA5ABiwVQ==</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><saml2:NameID xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" Format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified">Internal</saml2:NameID><saml2p:SessionIndex>3fRK+ULeWIAeZbTBw26RQQunS5E=/Gppmg==</saml2p:SessionIndex></saml2p:LogoutRequest]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][SLOService.java][doPostImpl][Relay State received={"redirect":"https://optus-enterprise-nonprod-optusinternal.apigee.io/logout","client_id":"portal-bnj0eaxbar"}]

    [12/20/2019][00:41:36][24892][139758777112320][][agentcommon][][Requesting data for ConfigManager ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]

    [12/20/2019][00:41:36][24892][139758777112320][][agentcommon][][Administration Manager is returning data for ConfigManager ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][SLOService.java][handleLogout][RequestID: 251edc48-fb2416dd-00be157e-320dfa47-b19bc641-f5c]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][SLOService.java][handleLogout][RequestID 251edc48-fb2416dd-00be157e-320dfa47-b19bc641-f5c maps to TransactionID: d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b.]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][FWSBase.java][getSessionFromCookie][Fetching session details from cookie [CHECKPOINT = SLO_SESSION_FETCH]]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][FWSBase.java][getSessionCookie][currentZone + Session cookie suffix: SMSESSION]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][FWSBase.java][getSessionCookie][SESSIONSIGNOUT Cookie found.]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][FWSBase.java][validateSessionData][Transaction with ID: d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b failed. Reason: FWSB_INVALID_SMSESSION]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][FWSBase.java][validateSessionData][The SESSION cookie is expired or invlaid. Global Logout can not be performed.]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][SLOService.java][handleLogout][Warning: Length of Relay state {"redirect":"https://optus-enterprise-nonprod-optusinternal.apigee.io/logout","client_id":"portal-bnj0eaxbar"} is greater than 80 characters.]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][SLOService.java][handleLogout][Performing tunnel call for SAML1 SLO [CHECKPOINT = SLOSAML2_TUNNEL_REQUEST]]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][FWSBase.java][getDisambiguationID][Retrieving the disambiguation ID from the requested URI /affwebservices/public/saml2slo]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][FWSBase.java][getDisambiguationID][serviceURL=/public/saml2slo/]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][FWSBase.java][getDisambiguationID][serviceURL /public/saml2slo/ not found in requestedURI /affwebservices/public/saml2slo]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][FWSBase.java][getDisambiguationID][Retrieving the disambiguation ID from the requested URI /affwebservices/public/saml2slo]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][FWSBase.java][getDisambiguationID][serviceURL=/public/saml2slosoap/]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][FWSBase.java][getDisambiguationID][serviceURL /public/saml2slosoap/ not found in requestedURI /affwebservices/public/saml2slo]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][SAMLTunnelClient.java][callSingleLogout][localURL: https://sit.auth.optus.com.au/affwebservices/public/saml2slo]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][SAMLTunnelClient.java][callSingleLogout][Session ID: .]

    [12/20/2019][00:41:36][24892][139758777112320][][agentcommon][][Requesting data for ConfigManager ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]

    [12/20/2019][00:41:36][24892][139758777112320][][agentcommon][][Administration Manager is returning data for ConfigManager ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/SmHost.conf and SmAgentConfig ID /opt/CA/secure-proxy/proxy-engine/conf/defaultagent/WebAgent.conf]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][SAMLTunnelClient.java][callSingleLogout][Tunnel result code: 1.]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][SLOService.java][handleLogout][

    TUNNEL STATUS:

       status  : 0

       message : ]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][SLOService.java][handleLogout][Transaction with ID: d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b failed. Reason: SLO_TUNNEL_CALL_FAILED]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][SLOService.java][handleLogout][Single Logout Tunnel call failed. Failure code: 0. Message: .]

    [12/20/2019][00:41:36][24892][139758777112320][d521e97d-3cffa725-9d41800c-8dc36ade-fa5deefc-3b][SLOService.java][handleLogout][Ending SAML2 Single Logout Service request processing with HTTP error 500]


    Original Message