SiteMinder r12.52 smtrace - Failed to locate the user in input user directory

[Bipin Sharma]

Hi All,

 

we are regularly seeing below error messages on our siteminder smtrace logs,

 

smtracedefault_20151120_103224.log:[11/20/2015][10:32:13.477][10:32:13][9163][16][Sm_Auth_Message.cpp:2730][CSm_Auth_Message::ValidateUser][][][][][][][][][][][][][Failed to locate the user in input user directory][][][][][][][][Leave function CSm_Auth_Message::ValidateUser]

smtracedefault_20151120_103224.log:[11/20/2015][10:32:14.127][10:32:14][9163][15][Sm_Auth_Message.cpp:2456][CSm_Auth_Message::LookUpUserInDir][][][][][][][][][][][][][Failed to locate the user in input user directory][][][][][][][][Leave function CSm_Auth_Message::LookUpUserInDir]

smtracedefault_20151120_103224.log:[11/20/2015][10:32:14.127][10:32:14][9163][15][Sm_Auth_Message.cpp:5130][CSm_Auth_Message::FormatAttribute][aaa][WSFEDrp:sp_supplierconn][][Testuser][][wsfedrp:sp_supplierconn][ABC_DOMAIN][Directory][][][][][][][][][][][][Failed to locate the user in input user directory][Send response attribute 158, data size is 49]

smtracedefault_20151120_103224.log:[11/20/2015][10:32:14.127][10:32:14][9163][15][Sm_Auth_Message.cpp:4627][CSm_Auth_Message::SendReply][abc][wsfedrp:sp_supplierconn][][Testuser][][wsfedrp:sp_supplierconn][ABC_DOMAIN][Directory][][][][][][][][][][][][][** Status: Not Validated. Failed to locate the user in input user directory]

smtracedefault_20151120_103224.log:[11/20/2015][10:32:14.127][10:32:14][9163][15][Sm_Auth_Message.cpp:2730][CSm_Auth_Message::ValidateUser][][][][][][][][][][][][][Failed to locate the user in input user directory][][][][][][][][Leave function CSm_Auth_Message::ValidateUser]

 

can anyone please help to find out the root cause of this error notifications.

 

Thanks,

Bipin

[Legacy User]

Hi Bipin,

 

I have seen this error when we delete a logged in user id from user store and refresh the browser session.

Also if we are changing the user DN ie migrating user from one container to another and refresh the browser session.

 

Regards,

Ankit

[Bipin Sharma]

Thank you for your input, Ankit.

 

What do you mean by changing the user DN, can you please explain more on it. We are not deleting any user from the user store. this error is showing almost for every user who are using siteminder federation application. we recently upgraded our siteminder r12.52 to Siteminder r12.52 SR1 CR1 version. after the upgrade we started seeing this error in our environment.

 

Is there any problem with this service pack?

 

Thanks,

Bipin

[Ujwol]

Couple of questions :

 

• So was this working with r12.52 ? And no policy/user directory etc changed from r12.52 to 12.52SP1 CR1?
• Does the user DN does exist in the specified user Directory ? Were you able to search using external LDAP browser like JXplorer ?
• Do you have AuthValidate Mapping configured or should you have one ?
• Are you able to authenticate user ?

[Bipin Sharma]

Hi Ujwol,

 

Please find answers below -

 

• Yes, it was working with r12.52, user and policy store is CA directory which is also upgraded from r12 SP12 to SP15 version.
• Yes, user DN exist and able to search in LDAP browser.
• Yes
• There is no impact on user authentication it seems, we are not seeing any user reporting issues, but in backend logs we are seeing it so we are more curious to know the reason of it.

 

What are all the scenarios we can see this kind of log entries ? is there anything to do with configuration or upgrade ?

 

Thanks,

Bipin

[Hussain Syed]

any one has any input on this ?