Symantec Access Management

 View Only
  • 1.  How to access .(dot)xxxxx file on Apache

    Posted Sep 07, 2020 02:03 AM

    Hello,

     

    One of our users is using Apache with a web agent.

    If a file name on Doumentroot starts with .(dot) and they try to access it, 500(Internal Server Error) error occurs.

    But if they disable siteminder, they can access it without any errors.

     

    So, is there any way to enable siteminder users to access .(dot)-start file?

    Or, they have to change file names?

     

    We looked over the below page but cannot resolve it.

    https://techdocs.broadcom.com/us/en/ca-enterprise-software/layer7-identity-and-access-management/single-sign-on/12-8/configuring/web-agent-configuration/user-protection/handle-complex-uris.html

     

    Regards,

    UCHIDA Akio



  • 2.  RE: How to access .(dot)xxxxx file on Apache

    Posted Sep 08, 2020 02:10 AM
    Hi,
    I think you should remove the .* in the BadUrlChars in the AgentConfigObject.

    https://techdocs.broadcom.com/us/en/ca-enterprise-software/layer7-identity-and-access-management/single-sign-on/12-8/configuring/web-agent-configuration/user-protection/help-prevent-attacks.html#concept.dita_a4f1c9b394b5b45650256db5105c5886a242345b_SpecifyBadURLCharacters

    Regards

    /Per

    ------------------------------
    Senior System Architect
    Tieto
    ------------------------------



  • 3.  RE: How to access .(dot)xxxxx file on Apache

    Posted Sep 09, 2020 06:52 AM
    Hello Per,

    Thank you for your kind explanation.
    I got it.

    Regards,
    UCHIDA Akio            ​