dynaTrace communication between siteminder and app server
Hi,
I'm trying to configure dynaTrace to monitor web & app servers. I'm installing the dynaTrace on the server machine itself. The IIS version of the machine is IIS 6.0. I added dtagent.dll and dtwsagent.dll in website's ISAPI filter.
My application uses siteminder for login validation. The siteminder validates the login credentials and pass it to app server. After I have added the dynaTrace agents in the server, the siteminder communication to app server has been stopped/interrupted. We are getting the error "You do not have access" from the server. Find below the error log related to this issue:
[5032/5712][Mon Feb 24 2014 08:22:53][CSmHttpPlugin.cpp:1444][WARNING] Unable to process SMSESSION cookie.
[5032/2132][Mon Feb 24 2014 08:28:31][CSmLowLevelAgent.cpp:491][ERROR] LLA: SiteMinder Agent Api function failed - 'Sm_AgentApi_IsProtectedEx' returned '-1'.
[5032/2132][Mon Feb 24 2014 08:28:31][CSmProtectionManager.cpp:192][ERROR] HLA: Component reported fatal error: 'Low Level Agent'.
[5032/2132][Mon Feb 24 2014 08:28:31][CSmHighLevelAgent.cpp:776][ERROR] HLA: Component reported fatal error: 'Session Manager'.
[3912/4580][Mon Feb 24 2014 08:28:49][CSmLowLevelAgent.cpp:491][ERROR] LLA: SiteMinder Agent Api function failed - 'Sm_AgentApi_IsProtectedEx' returned '-1'.
[3912/4580][Mon Feb 24 2014 08:28:49][CSmProtectionManager.cpp:192][ERROR] HLA: Component reported fatal error: 'Low Level Agent'.
[3912/4580][Mon Feb 24 2014 08:28:49][CSmHighLevelAgent.cpp:776][ERROR] HLA: Component reported fatal error: 'Session Manager'.
[5032/816][Mon Feb 24 2014 08:49:17][CSmLowLevelAgent.cpp:491][ERROR] LLA: SiteMinder Agent Api function failed - 'Sm_AgentApi_IsProtectedEx' returned '-1'.
[5032/816][Mon Feb 24 2014 08:49:17][CSmProtectionManager.cpp:192][ERROR] HLA: Component reported fatal error: 'Low Level Agent'.
The site is working fine after removing the dT agents from the website's ISAPI filter. Please let me know what could be the reason for this issue and how we can resolve it.
Thanks
Hi.. Any thoughts/comments?
Hi Ramya,
It may be that someone will see this and have some good info for you but in the meantime I recommend opening a case through the "Support" link at the top of this page so you can get individual attention.
Thanks,
Rick B
Sure, will do.. But we are using trial license for evaluation.. so pls let me know can we raise ticket in this case?
did you take a look at this post? dynaTrace UEM and SiteMinder
Also, I know you have to allow the dynaTrace javascript injection and the monitor signal. We did this at one customer location by allowing traffic through site minder to /dyantrace/ directory then changed UEM configuration to use /dynatrace/ as the Agent Location and the Monitor request path.
Thanks,
Thanks All! The problem was resolved with help of APM support team..
Great to hear. If there is any tips&tricks you want to share with the community let me know. This will help others that also run into similar issues
The root cause of the issue was - mismatched agent name. I have given different names for agent in system profile and while creating agent. After giving same name in both places, it started working fine.
Thanks for sharing. This might be good information for other users that run into the same problem.
The "Agent Overview" Dashlet will show the list of connected agents - and - in case you have a mismatch in namings it would highlight those agents with a warning icon. The details of this warning would say something like "... doesnt match system profile ..." which means that the agent name doesn't match any configuration you have in any of your System Profiles on your dynaTrace Server
In case you are interested - here is a link to the doc explaining the Agents Overview dashlet
Any thought on injecting dynaTrace into SiteMinder.
I assume that it is not a Java technology. If so, you could inject the Java agent into the startup script using the JAVA_OPTS option. . I don't know much about SiteMinder.
