Symantec Access Management

  • Private Community

  • 1.  IIS webagent common Event ID Summary

    Posted Jun 24, 2015 08:03 PM

    This is my collection of Windows Application Event ID from source Siteminder Agent, which is useful during troubleshooting when no webagent.log is generated.

     

    Minimum working Event sequence is:

    Event 9  :  SiteMinder agent is enabled.

    Event 24:  Configuration file path: 'C:\Program Files\CA\webagent\win64\bin\IIS\WebAgent.conf'.

                     or 'C:\Program Files\CA\webagent\win32\bin\IIS\WebAgent.conf'.

                     depending on your ACO configuration.

    Event 12: SiteMinder agent is running.

     

    When problem happens, you will see:

    (info) Event 36: Registry Entry requestpriority value: '0 (FIRST)'.

    (warning) Event 7  : SiteMinder agent has encountered initialization errors and will not service requests.

    (error)     Event 14: Sm_AgentApi_Init Failed.

    (error)     Event 3  : Unable to load SiteMinder host configuration object or host configuration file.

                                   C:\Program Files\CA\webagent\win64\config\SmHost.conf

    (warning) Event 33: Siteminder Web Agent not having write permissions on host configuration file. Shared secret roll-over may not be supported.

    Permission denied. Please assign write privileges to the user DefaultAppPool for the file C:\Program Files\CA\webagent\win64\config\SmHost.conf



  • 2.  Re: IIS webagent common Event ID Summary

    Posted Jun 24, 2015 08:17 PM

    Common problem case event ID is:

    Working case should be:

    Info 9 -> Info 24 -> Info 12

     

    Non-working case can be:

    Info 9 -> Info 24 -> Warning 33 -> Error 3 -> Warnning 7 

    Info 9 -> Info 24 -> Error 14 -> Warnning 7 



  • 3.  Re: IIS webagent common Event ID Summary

    Posted Jun 24, 2015 10:19 PM

    To get rid of Event ID 33:

    Siteminder Web Agent not having write permissions on host configuration file. Shared secret roll-over may not be supported.

    Permission denied. Please assign write privileges to the user WWW$ for the file C:\Program Files\CA\webagent\win64\config\SmHost.conf

     

    Can refer to:

    Installation and Upgrade Guides › Agent for IIS Installation Guide › Troubleshooting

    Troubleshooting

    Event Viewer Message Describes lack of Permissions on Host Configuration File



  • 4.  Re: IIS webagent common Event ID Summary

    Posted Jun 25, 2015 01:19 AM

    To get rid of Event ID 23:

    Unable to open file.

    LLAWP failed to open log file 'C:\Documents and Settings\Administrator\Desktop\LOGS\webagent.log'.  Check disk space, permissions and configuration.

     

    Solution in my test case:

    A typo error in the folder name. Not necessary permissions in security tab.

    Renaming c:\Users\Win2K8R2\Desktop\log\ to c:\Users\Win2K8R2\Desktop\logs\ has fix this.



  • 5.  Re: IIS webagent common Event ID Summary

    Posted Jun 25, 2015 02:02 AM

    To get rid of Event ID 4:

    Unable to load SiteMinder agent configuration object.

    Check that you are using the right agent configuration object and that it exists in your policy server.

     

    Solution in my test case:

    Open c:\Program Files\CA\webagent\win64\bin\IIS\WebAgent.conf

    check AgentConfigObject="iis.aco", having a dot in the middle.

    Another typo, change it to AgentConfigObject="iisaco"

    run iisreset and visit http://localhost

    Now the old "500 error" in gone and displaying the IIS8 welcome page.