Symantec Access Management

 View Only
  • 1.  Event Handler

    Posted Jan 18, 2017 06:20 PM

    Trying to enable Wily SiteMinder Manager.

    Added the event handler "libEventIntroscopeprovider.so" (with Full path) using XPSConfig.

    When I start policy server, I see "XPS Auditing is enabled", but it don't load event handler library for Wily.  Not even giving any error.

     

    Platform details -

     

    OS - Solaris 11

    Policy Server - R12.52 SP1



  • 2.  Re: Event Hander

    Posted Jan 18, 2017 06:32 PM

    Hi,

     

    Can you perform XPSExport with -xc switch as below and see if the libEventIntroscopeprovider.so is defined properly.

     

    XPSExport c:/xc.xml -xc -npass

     

    Regards,

    Ujwol



  • 3.  Re: Event Hander

    Posted Jan 18, 2017 06:42 PM

    Hi Ujwol,

     

    I just ran that command.  Not seeing any ref for libEventIntroscopeprovider.so in xc.xml file.

     

    What does this mean?  Is there additional steps I need to do to add Event Handler for Wily?

     

    Thanks,

    Chandra



  • 4.  Re: Event Hander

    Posted Jan 18, 2017 06:52 PM

    It means the changes you have done using XPSConfig to add the libEventIntroscopeprovider.so file is not saved.

     

    You should see it like this :

     

    <Product Name="SM">
    <ParameterName Name="DbTokenAdminName"/>
    <ParameterName Name="UDTimeoutODBCGlobal"/>
    <ParameterName Name="AccUdpPort"/>
    ....

    ...
    <ParameterName Name="ServerCmdDelay">10</ParameterName>
    <ParameterName Name="EventProvider">/F6/CA/siteminder/lib/libXPSAudit.so,/F6/CA/siteminder/lib/libEventIntroscopeprovider.so</ParameterName>
    ...

    ..
    </Product>

     

    May be try again. 

    Did you press "q" at the end to save the changes.

    You will also need to restart the Policy server for the changes to be effective.

     



  • 5.  Re: Event Hander

    Posted Jan 18, 2017 07:01 PM

    In xc.xml, I am seeing EventProvider will null value.

     <ParameterName Name="EventProvider"/>

     

    With XPSConfig, I follow below steps

     

    1) XPS (enter)

    2) 5 (enter)

    3) C (enter)

    4) Provided complete path for libEventIntroscopeprovider.so

    5) Q (enter)

    6) Q (enter)

    7) Q (enter) to exit out of XPSConfig

     

    Here is the screen print after step 4

     

    PARAMETER MENU**************************************CA.XPS::$AuditSMHandlers

       Name:               AuditSMHandlers [CA.XPS::$AuditSMHandlers]
       Type:               String
       Scope:              Local
       Export?             no
       Report?             no
       Remote Access:      None
       Description:        Comma-separated list of legacy SiteMinder Custom Event
                           Handler libraries.
       License Type:       None
       Default Value: (not set)
                           1
       Current Value:      "/apps/opt/siteminder/lib/libEventIntroscopeprovider.so"

    -------------------------------------------------------------------
       C  - Change value
       R  - Reset to default
       Q  - Quit



  • 6.  Re: Event Hander

    Posted Jan 18, 2017 07:05 PM

    The XPSConfig steps looks right.

     

    You can try modifying the xc.xml directly with the path to the libEventIntroscopeprovider.so and import using XPSImport.



  • 7.  Re: Event Hander

    Posted Jan 18, 2017 07:11 PM

    Please validate this :

     

    https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.tec1197262.html 

     

     

    Issue:

    Policy server failing to load WILY Interscope library after upgrade policy server software to a newer CR

    Error:

    [25136/1][Fri Dec 09 2016 10:51:21][SmEventWedge.cpp:289][LateInit][ERROR][sm-xpsxps-06810] Failed to initialize event handler library "/disk/apps/policyserver/siteminder/lib/libEventIntroscopep

     

    Environment:

    Policy server running on Solaris 10 integrated with WILY Introscope Enterprise Manager SiteMinderManager 12.0.4.0

    Cause:

    Failed to load library caused by upgrading policy server software from CR1 to CR5 - the install replaced libraries used/linked by SiteMinderManager.  The manager is used to capture data from the policy server, it then sends data Introscope Enterprise Manager

     

     

    Resolution:

    CAWilySiteMinderManager_12.0.1.4_Documentation.pdf

    Step 1 should already have been done, you can check this steps by reviewing the <Policy_Server_home>/siteminder/config/XPS.cfg

    CA.XPS::$AuditSMHandlers=libEventIntroscopeprovider.so

     

    Steps 2 And 3 will need to be redone

    To update Policy Server configuration, perform the following steps:

    1. Launch the XPSConfig to add one of the following files to the Event Handlers list:

    Navigate to the <policy server path>/bin directory and type ./XPSConfig and press ENTER. 

    System prompts for “Enter Option (id, L or Q):”.

    Type XPS and press ENTER.

    System prompts for “Enter Option (D, V, F, # or Q):”.

    Type 5 and press ENTER.

    System prompts for “Enter Option (CQ):”.

    Type C.

    You are asked to enter a new value.

    Enter the complete path for libEventIntroscopeprovider.so.

    System prompts for “Enter Option (D, V, F, # or Q):”.

    Type Q.

    System prompts for “Enter Option (id, L or Q):”.

    Type Q.

    1. From the <installPath>/CAWilySiteMinderManager/

    SiteMinderManagerAgent directory, copy the libIntroscopeNativeDataAPI.so to the policy server’s lib directory.

    1. From the <installPath>/CAWilySiteMinderManager/

    SiteMinderManagerAgent directory, copy the smm_env.sh file to the policy server root directory. Thereafter, source it in the Policy Server profile file ca_ps_env.ksh using the complete path.

     

    For example, if SiteMinder Policy Server is installed in the /opt/netegrity/

    siteminder directory, add the following line to the SiteMinder Policy Server profile file

    . /opt/netegrity/siteminder/smm_env.sh

     

    Support except of SMPS after following the steps above 

    [4969/-1216915760][Fri Dec 16 2016 07:40:46][Database.cpp:689][InitDB][INFO][sm-xpsxps-00120] Initializing XPS Version 12.52.0105.2113

    .

    .

    [4969/-1216915760][Fri Dec 16 2016 07:40:48][XPSAudit.cpp:719][GetAudit][INFO][sm-xpsxps-06870] XPS Auditing is enabled.

    [4969/-1216915760][Fri Dec 16 2016 07:40:48][SmEventWedge.cpp:321][LateInit][INFO][sm-xpsxps-06860] Event handler library loaded: "libEventIntroscopeprovider.so"



  • 8.  Re: Event Hander

    Posted Jan 18, 2017 07:19 PM

    CA document says OPTION 5 under XPS

     

    Also, under SM-->Event Provider is option 55

     

    Just making sure, we are on the same page.



  • 9.  Re: Event Hander

    Posted Jan 18, 2017 07:37 PM

    Yes, I got a bit confused.

    Also, this could be handy for you :

     

    CA Wily Tools for Siteminder - Performance and Historical Monitoring 

    This has in depth review of the configuration steps.