Release Notes › Known Issues

Known Issues

Apache access_log is Unavailable

Symptom:

By default, CA SiteMinder® SPS does not generate access_log in the httpd.conf file.

Solution:

To generate access_log, uncomment the following line in the httpd.conf file:

CustomLog logs/access_log common|CustomLog logs/access_log combined

Starting SPS on Solaris 10 Systems

There is a known problem with Apache that can prevent SPS from starting on Solaris 10 systems when an SSL connection is being used.

After registering SPS with the Configuration Wizard, the Apache Virtual Host directive $NETE_SPS_ROOT/httpd/conf/httpd-ssl.conf is set shown following:

##
## SSL Virtual Host Context
##
<VirtualHost _default_:443>

For Solaris 10 systems we recommend using the IP address of the machine instead of _default_.

SPS Installation Fails

Symptom:

If you try to install CA SiteMinder® SPS SPS on a machine with CA SiteMinder® Agent for SharePoint 2010 or later, the installer detects that CA SiteMinder® SPS already exists and the installation aborts.

Solution:

The installation of CA SiteMinder® SPS on a machine with CA SiteMinder® Agent for SharePoint is not supported.

Startup Error in SSL Mode on Windows

When enabling CA SiteMinder® SPS for SSL mode on Windows you can possibly see the following error:

C:\Program Files (x86)\CA\secure-proxy\httpd\bin>configssl.bat -enable
Reconfiguring the SiteMinder Secure Proxy service
The SiteMinder Secure Proxy service is successfully installed.
Testing httpd.conf....
Errors reported here must be corrected before the service can be started.
Syntax error on line 62 of C:/Program Files (x86)/CA/secure-proxy/httpd/conf/ext
ra/httpd-ssl.conf:
SSLSessionCache: Invalid argument: size has to be >= 8192 bytes

This error occurs because on 64-bit Windows environments, the 32-bit applications are installed under the Program Files (x86) folder by default. The parentheses are not allowed on Windows in folder names. Apache is aware of this issue; Apache does not have an official release for Windows 64-bit operating environments.

On 64-bit Windows environments, install the CA SiteMinder® SPS at some other location, for example, the C:\CA folder.

JVM Installation Error on Solaris and Linux

When you specify the JDK path during the console mode installation of the SPS on a Solaris or Linux computer, the following error is displayed:

Unable to install the JVM included with this installer

This is a bug with InstallAnywhere 2009. The error does not affect the installation.

SSL-ID Authentication Fails with Mozilla Firefox

When you configure the SSL-ID session scheme, the SessionCreateException occurs during authentication with Mozilla Firefox. To resolve the issue, perform the following steps:

1. Open Mozilla Firefox.
2. Type about:configure in the address bar.
3. In the advanced settings, set the value of security.enable_tls_session_tickets to false.

No Support for SafeWord Server Authentication Scheme

The CA SiteMinder® SPS does not support the SafeWord Server authentication scheme.

Uninstallation Error on Solaris 11

When you try to uninstall the CA SiteMinder® SPS within the same user session in which you installed the CA SiteMinder® SPS, the following error occurs:

Invocation of this Java Application has caused an InvocationTargetException. This application will now exit.

This issuue occurs if you have used JDK 1.7.0.1 to install the CA SiteMinder® SPS on the Solaris 11 computer. To resolve the issue, open a new user session and uninstall the CA SiteMinder® SPS.

No Support for Spaces in Request URLs

If a resource request contains a space in the request URL, the request fails. As a workaround, perform the following steps:

1. Open the ACO you created for CA SiteMinder® SPS in the WAMUI.
2. Delete the %25 value from the BadUrlChars parameter of the ACO.
3. Save the change.

The Certificate Generation Failed Exception Occurs During Upgrade

When you upgrade from CA SiteMinder® SPS r6.0 or 12.0 to 12.5, the following exception occurs:

Certificate generation failed: Certificate contains invalid public key

To resolve the issue, you must perform the following steps:

1. Log on to the CA SiteMinder® SPS Admin UI.
2. Navigate to Administration, SSL Config.
3. Delete the certificates with the following details:

   Serial number=00
   

   Issuer, Subject= Thawte Universal CA Root, Thawte Universal CA Root, Thawte
   

4. Save the changes.