Administration Guide › Troubleshooting › A Pop-up Window Appears in the Browser after SSL Configuration

A Pop-up Window Appears in the Browser after SSL Configuration

Symptom:

When I access CA SiteMinder® SPS using an internet browser after SSL configuration, a pop-up window is displayed.

Solution:

If you use an internet browser with weak encryption algorithm to access CA SiteMinder® SPS for the first time after configuring SSL, a pop-up window is displayed. You can allow the pop-up and can continue to access CA SiteMinder® SPS. If you do not want the pop-up to display, perform one of the following steps:

• Use strong internet browsers such as Internet Explorer 8.0, Chrome, Mozilla Firefox that support strong encryption algorithms.
• If you are not using an X509 based authentication scheme, perform the following steps:
  1. Navigate to <install_path>/httpd\conf\extra\.
  2. Open the httpd-ssl.conf file.
  3. Navigate to SSLVerifyClient and set the value to none.
  4. Save the change.
  5. Restart CA SiteMinder® SPS.

Unable to Start Apache on UNIX systems

Symptom:

When running the CA SiteMinder® SPS on a UNIX system, the Apache server fails to start. In the Apache log file, the following error message appears:

Invalid argument: setgid: unable to set group id to ...

Solution:

This error occurs when the group for the Run-As-User on UNIX systems does not correspond to the group specified in the Apache configuration file (httpd.conf). If you see this error, edit the Group directive in the Apache httpd.conf file.

To edit the Group directive

1. Remove the comment sign (#) before the Group directive
2. Specify the group to which the Run-As-User belongs.
3. Run the CA SiteMinder® SPS startup command again (sps-ctl start or startssl).