000025997 - rules.xml file is not being processed

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000025997
Applies To
RSA ClearTrust Agent 4.6 for Microsoft Internet Information Services (IIS)

Rules.xml
Issuerules.xml file is not being processed
ctagent.log files shows the following lines:

Oct 25, 2006 04:09:45 PM CDT - [2168] - <Info> - Nothing to process. No rules defined
CauseThis error indicates that the xml parser was unable to correctly parse one or more of the rules in the rules.xml file.  The xml parser is quite sensitive to syntax. 
ResolutionEnsure that the first line of the rules.xml file is a valid xml tag.  Ensure that regular expressions do not contain leading or trailing spaces that might change the context of the expression. 
Notes

Note that some of the examples in the rules.xml file are misleading.  Wildcards in the regular expressions are parsed as they would be for 'grep' not as they would be for DOS wildcard filename mapping.  The expression

"/default.ida*"

would match files such as:

/root/defaultXidaXXXXXX

because the "." (dot) matches any one character and the (*) asterisk matches one or more or none of the characters following.  The star is superfluous in this example as the regular expression "/default\.ida" would match "/default.ida" as well. 


Here is what a full request should look like with a rule defined to exclude the resource.    

2009-08-12 15:46:01 -0700 - [696] - <Info> - Incoming request
2009-08-12 15:46:01 -0700 - [696] - <Debug> - [NotifyPreProcHeader]
2009-08-12 15:46:01 -0700 - [696] - <Debug> - Server FQDN: axm60.na.rsa.net
2009-08-12 15:46:01 -0700 - [696] - <Debug> - Server IP: 127.0.0.1
2009-08-12 15:46:01 -0700 - [696] - <Debug> - Server Port: 80
2009-08-12 15:46:01 -0700 - [696] - <Debug> - Heap created
2009-08-12 15:46:01 -0700 - [696] - <Debug> - Host: axm60.na.rsa.net, port: 80, protocol: http
2009-08-12 15:46:01 -0700 - [696] - <Debug> - Full URI: http://axm60.na.rsa.net:80/protected/test.html
2009-08-12 15:46:01 -0700 - [696] - <Debug> - URI: /protected/test.html
2009-08-12 15:46:01 -0700 - [696] - <Debug> - Retrieved METHOD from http header: GET
2009-08-12 15:46:01 -0700 - [696] - <Debug> - URL [ RAW ] /protected/test.html
2009-08-12 15:46:01 -0700 - [696] - <Debug> - Accepted languages: en-us
2009-08-12 15:46:01 -0700 - [696] - <Debug> - Adding: en-us, quality: 100
2009-08-12 15:46:01 -0700 - [696] - <Debug> - Preferred language for this request: en
2009-08-12 15:46:01 -0700 - [696] - <Debug> - No header cookie nor request table cookie
2009-08-12 15:46:01 -0700 - [696] - <Debug> - Processing session, returned: 7900
2009-08-12 15:46:01 -0700 - [696] - <Debug> - No cookie yet
2009-08-12 15:46:01 -0700 - [696] - <Debug> - Update CT_TOKEN_REQUEST header
2009-08-12 15:46:01 -0700 - [696] - <Debug> - Processing the request to see if any rules match
2009-08-12 15:46:01 -0700 - [696] - <Debug> - Processing rule: 0
2009-08-12 15:46:01 -0700 - [696] - <Debug> - Rule: 0 matches
2009-08-12 15:46:01 -0700 - [696] - <Debug> - Setting HTTP response: 200
2009-08-12 15:46:11 -0700 - [696] - <Info> - [NotifyEndOfNetSession]
2009-08-12 15:46:11 -0700 - [696] - <Debug> - Heap freed
2009-08-12 15:46:11 -0700 - [696] - <Debug> - Reference manager count: 1
2009-08-12 15:46:11 -0700 - [696] - <Info> - [NotifyEndOfNetSession]
2009-08-12 15:46:11 -0700 - [696] - <Debug> - Heap freed
2009-08-12 15:46:11 -0700 - [696] - <Debug> - Reference manager count: 0

Note that you must see that the rules are loaded.  If there is any typo in the rules.xml file the rules will not be loaded.  There is no way to know what rule is not being read.  If there are no rules read you will see the following message:

2009-08-12 15:54:24 -0700 - [3468] - <Debug> - Processing the request to see if any rules match
2009-08-12 15:54:24 -0700 - [3468] - <Info> - Nothing to process. No rules defined

Legacy Article IDa32298

Attachments

    Outcomes