CA Directory OOTB Certificate

No comment

Hi,   We are using CA Directory as the policy store for the Siteminder Policy Server.  We noticed in the policystoreA_warn.log has the following entries: cannot open certificate file policystoreA.pem cannot get personality cannot create an SSL context invalid protocol 47 45 54 20 invalid protocol 48 45 4c 50 invalid protocol 80 40 01 […]

Unable to install 12.8SP2 AdminUI

No comment

Hello,   When trying to install new 12.8SP2 adminUI get the following error when lauching the installer wint LAX_DEBUG=1   ===============================================================================Please Wait———–***********Tags replace command Executed*********** “/opt/application/CA/siteminder/adminui/runtime/bin/java” -classpath “/opt/application/CA/623910.tmp/*” com.netegrity.wamui.RemoveIMManagementConsoleEntries /opt/application/CA/siteminder/adminui/ ***********Password Tool output*********** STDOUT = STDERROR = java.net.UnknownHostException: java.sun.com at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:184) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:589) at java.net.Socket.connect(Socket.java:538) at sun.net.NetworkClient.doConnect(NetworkClient.java:180) at sun.net.www.http.HttpClient.openServer(HttpClient.java:463) at sun.net.www.http.HttpClient.openServer(HttpClient.java:558) at sun.net.www.http.HttpClient.<init>(HttpClient.java:242) […]

Help on Attribute Mapping – SAML Expression

No comment

Hi Team, This is the continuation of Need help on SiteMinder SAML expression . Few users mail attribute value is empty so, we have to use another mail attribute(altemail) value from LDAP. I have written the expression as #{empty attr[“mail”] ? attr[“altemail”] : attr[“mail”]} in the value of Assertion Configuration(Partner Federation). I am able to pass the […]

JWT Integration with R12.8 SSO

No comment

Trying to integrate JWT Auth Scheme to exchange JWT token with SMSESSION , was able to validate the JWT token with HMAC shared secret and pull the sub which is the uid to the backend LDAP. While Authenticating the uid it is throwing below error.   ******JWT Token is Valid***** ****User is disambiguated as:##### ***** […]

Adding multi-factor (OTP) authentication to SiteMinder

No comment

We are currently on SiteMinder r12.52 SP1 and in progress of doing a parallel upgrade to r12.8 SP2.  We have several large scale web applications that are being protected by the webagent installed on Apache web servers as the web front end.  Our Info Security department is looking into adding an additional layer of security […]

SDK get realm timeouts

No comment

I am trying to read the realm timeouts using java SDK which looks like below. Appreciate any help, thanks in advance!!   Considering I have an agentapi initialized. SmApiConnection apiConnection = new SmApiConnection(agentapi); apiConnection.isValidApiConnection()    –> returning true   SmApiSession apiSession = new SmApiSession(apiConnection); SmApiConnection smAPIConnection = apiSession.getApiConnection(); smAPIConnection.isValidApiConnection()    –> returning true   SmPolicyApiImpl policyApi = new SmPolicyApiImpl(apiSession); […]