000035112 - RSA Identity Governance and Lifecycle internal server error in  UI when using SiteMinder SSO login

Document created by RSA Customer Support Employee on May 22, 2017
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000035112
Applies ToRSA Product Set: RSA Identity Governance and Lifecycle 
RSA Product/Service Type: Appliance
Platform: Red Gat
 
Issue

SSO login to RSA Identity Governance and Lifecycle  fails with the following error:


Internal Server Error:
The server encountered an internal error or misconfigration and was unable to complete your request.
Please contact the server administrator, root@localhost and inform them of the time the error occurred, and anything you might have done that may have caused the error.
More information about this error may be available in the server error.log.
Apache/2.2.3 (Red Hat) Server at <hostname> port 80.


User-added image


Analysis


  • RSA Identity Governance and Lifecycle  is accessible through direct login as in:

  • There are no errors in the server.log or the AveksaServer.log.
  • /etc/sysconfig/iptables has the correct settings.
  • You use SiteMinder for SSO login.
  • The SiteMinder log file at /var/log/httpd/error_log is full of these errors:
[30/Apr/2017:04:02:27] [Error] [CA WebAgent IPC] [3505] [CSmSem::SemWait] Error performing decrement operation on semaphore 19267598 - Invalid argument (22)
[30/Apr/2017:04:02:27] [Info] [CA WebAgent IPC] [3505] [CSmSem::getSem] Attempted to attach to non-existent semaphore with key 0x6690874a
[30/Apr/2017:04:02:27] [Error] [CA WebAgent IPC] [3505] [CSmNamedMutex::Lock] Error reinitializing mutex with key base 0x66
[30/Apr/2017:04:02:27] [Error] [CA WebAgent IPC] [3505] [CSmSem::SemWait] Error performing decrement operation on semaphore 19070984 - Invalid argument (22)
[30/Apr/2017:04:02:27] [Info] [CA WebAgent IPC] [3505] [CSmSem::getSem] Attempted to attach to non-existent semaphore with key 0x6b90874a
[30/Apr/2017:04:02:27] [Error] [CA WebAgent IPC] [3505] [CSmNamedMutex::Lock] Error reinitializing mutex with key base 0x6b
[30/Apr/2017:04:02:27] [Error] SiteMinder Agent
        PID Cache error.
        Failed to read PID Cache
CauseThese errors indicate that the SiteMinder application has run out of shared memory.
ResolutionReboot the appliance to free up shared memory.
For further root cause analysis and/or to determine other ways to rectify this issue, please contact your SiteMinder vendor as this is a third party product that we neither license nor deploy.
    
WorkaroundLogin directly (without SSO) to https://<hostname>/aveksa/main.
     

Attachments

    Outcomes