ClassCastException causes critical aserver failure in RSA Access Manager (AxM)

[#1]

Article Number

000031824

Applies To

RSA Product Set: ClearTrust
RSA Product/Service Type: Access Manager (AxM)
RSA Version/Condition: 6.2.0
Platform: Linux

Issue

A server is unable to process any authentication attempts due to ClassCastException if a duplicate user properties are defined.

Steps to reproduce

1. Create two Admin Groups, AdminGroup1 and AdminGroup2
2. Create a Private user property "postalCode" owned by AdminGroup1
3. Create a Private user property "postalCode" owned by AdminGroup2 (note no error message about duplicate user property.)
4. Create a user with a value for user property "postalCode"
5. Notice user cannot authenticate
6. ClassCastException in aserver.out in DDEBUG mode
7. <Critical> - Critical error: CT_AUTH_UNKNOWN_ERROR in agent.log

Resolution

This issue is resolved in the hotfix for RSA Access Manager 6.2.    Contact RSA Customer Support and request hotfix 6.2.0.20.

Notes

The issue has also been ported to higher versions.