Policy agent error code 21 after authenticating

Hi,
I get the following error in my amAgent logs after successfully authenticating to Sun Policy Manager 7.1:
PolicyEngine: am_policy_evaluate: InternalException in AuthService::submitRequirements() with error message:Error sending client submitted requirements to server. and code:21
A 500 Internal Server Error page is returned with the message: This server has encountered an internal error which prevents it from fulfilling your request. The most likely cause is a misconfiguration. Please ask the administrator to look for messages in the server's error log.
The Policy Manager auth access log shows: "Login Success" for the login attempt.
My configuration:
Solaris 10
Apache 2.0.54
Sun Java System Access Manager Policy Agent 2.2
Has anyone seen or experienced this error before?
Thanks
Edited by: tutro on Aug 7, 2008 7:31 AM

A control character was being read from the password (even though both the encrypted and unencrypted password did not contain any control characters). A password reset resolved the issue.

Similar Messages

  • Error code after itunes update -42404

    error code after itunes update -42404 cannot connect to ipad it is telling me to restore ipad, and cannot connect to store...
    Message was edited by: CFC.Steve

    I assume you updated itunes on your computer. PC or Mac?
    Look at the posts in the More Like This area to the right side of this page.
    Update and restore alert messages on iPhone, iPad, and iPod touch
    http://www.buybuyla.com/tech/view/012953a0d412000e.shtml
    iOS: Resolving update and restore alert messages
    http://support.apple.com/kb/TS1275
    iPad: Unable to update or restore
    http://support.apple.com/kb/ht4097
    iTunes: Specific update-and-restore error messages and advanced troubleshooting
    http://support.apple.com/kb/TS3694
     Cheers, Tom

  • 2106f Error Code after Internet Recovery Attempt

    Anyone ever get a 2106f Error Code after Internet Recovery Attempt? What next?
    Background: Macbook Pro (late 2011) shows startup progress bar, goes ~ 1/10th of distance, freezes, then goes black after ~2min. Did this:
    1. Clean startup attempt (shift)
    2. Zapped PRAM (option command P R)
    3. Reset SMC, Startup
    4. Attempted Internet Recovery process (Cmd R) over ethernet connection, but after several hours, got the -2106F error.
    MacBook Pro 2.2 i7 Late 2011

    How long were you able to watch this movie before it crashed?
    Now is it everytime you boot up, you get the BSOD  0xc0000001 ?
    Can you start up in SAFE MODE?
    "Knowledge should be unrestricted and the most important commodity we can offer to help one another."

  • Jcshell: Error code: -5 (Authentication failed)

    Hey guys,
    I need help with my JC project. I want to deploy/download a simple applet onto a real card which actually developed by some company and has some applet. Firstly, I got the following error:
    Status: No Error
    jcshell: Error code: -8 (Failed (no diagnosis))
    jcshell: Command failed: No such key: 1/1
    Unexpected error; aborting executionThe Shane explained a solution to the problem in another thread (Which are the keys for JCOP31C232 used in command "init-update" Now I get another error:
    cm> /term "winscard:4|OMNIKEY CardMan 5x21 0"
    /card -a a000000003000000 -c com.ibm.jc.CardManager
    ATR: 3BF81800FF8131FE454A434F507632343143
    ATR:
    T = 1
    cm> set-key 1/1/DES-ECB/404142434445464748494a4b4c4d4e4f 1/2/DES-ECB/404142434445464748494a4b4c4d4e4f 1/3/DES-ECB/404142434445464748494a4b4c4d4e4f
    cm> init-update 1
    jcshell: Error code: -5 (Authentication failed)
    jcshell: Wrong response APDU: 00000353021436954415010200020090758652BBBB0F31871AC812479000
    Unexpected error; aborting executionIs it possible that the card is locked for changes?
    Thanks for any help.
    Regards,
    errno

    is it possible for the card owner company to add additional key(s) which is then only for me useable? Not really. In GP 2.2 it may be possible to have multiple security domains where different developers can load applets but there is still a main issuer than can delete your applets (or security domain). I have not had much of a chance to look at cards that support GP 2.2 so I do not have all the details on this. In GP 2.1.1 it is not possible. If you have the keys for the ISD you can do what ever you like to the card.
    Is this process of authentication described some where? Yes. It is in the GP card spec. Look for the appendix on secure channel protocol 02.
    Is it not possible to protect a single applet slots - why should I lock the card for new deployments when the security of my applet is not a problem?Secured is a card manager state that doesn't look you out of the card, it just means some things are not possible (like starting a secure channel without MAC'ing). When you are developing you can keep the card in OP_READY or INITIALIZED.
    Shane

  • Tried to restore and update but got error code after download, iphone 4 on verizon...ios 4.2.1 tried to restore and update but got error code after download

    iphone 4 on verizon(16 gb) ios 4.2.1 tried to restore and update but got error code after download.... all the iphone does is sit there with the picture to connect to itunes. This is very important, please help!!!!!! updated itunes and restarted and have tried everything... this iphone has never been synced or backed up with itunes. please help!

    error 1015 usually means you have a jailbroken  devices, which per the term of use of the forum, you can't get any help here.

  • Policy Agent Error

    Version:
    Solaris: 8
    IS 6.0
    Policy Agent 2.0
    Webserver: iWS 6.0
    I installed the agent, configured a policy protecting the resources on the webserver. When I access any resource, it throws me a login page (as it should). Once I submit the credentials, I get a 403 error on the page. The agent logs show the following:
    2003-01-30 13:38:23.168 Error 4355:42b508 PolicyEngine: am_policy_evaluate: InternalException in Service::construct_auth_svc with error message:Application authentication failed during service creation. and code:20
    2003-01-30 13:38:23.168 Warning 4355:42b508 PolicyAgent: am_web_is_access_allowed(http://server.sub.com:8081/index.html, GET) denying access: status = access denied (20)
    2003-01-30 13:38:23.169 -1 4355:42b508 PolicyAgent: validate_session_policy() access denied to unknown user
    At the same time I can see the user session active under the IS console.
    Can somebody help me here?
    Thanks

    ahhh, what shared secret did you use to install. You should of used the amldapuser account password rather than amadmin
    Use the cryptutil to hash that password and stick it in the AMAgent file. Restart and all will be well.
    Steve

  • Event ID 1058 Group Policy Preprocessing Error Code 3

    You will see this in the event logs, the processing of group policy failed. It is trying to process a policy that doesn't exist. After reading http://technet.microsoft.c the
    first resolution Error code 3 (The system cannot find the path specified) lead me to this --> http://support.microsoft.c
    4. In the right details pane, double-click DisableDFS.  
    This entry doesn't exist but if I add it, it works. Problem is solved on machine 1. 
    Machine 2. This is a brand new Windows 7 setup to investigate this problem because it appears on a lot of the workstations and I have no idea why. Applying this fix did NOT solve the problem. I am a bit stuck. I have new GPs to roll out but they
    won't apply with this error in place.
    I can ping the logon server just fine and I can get to \\FQDN\sysvol as well. gpupdate /force shows the same error in the event log.

    Hi,
    Have you tried all steps in the link:
    http://support.microsoft.com/kb/314494?
    Verify you can read gpt.ini using the full network path, full network path to the gpt.ini as \\<dcName>\SYSVOL\<domain>\Policies\<guid>\gpt.ini where <dcName> is the name of the domain controller,
    <domain> is the name of the domain, and <guid> is the GUID of the policy folder.
    Please post the full event message for further analysis. In addition, we need to know that what policy did you set that could not be applied.
    Regards,
    Yan Li 
    Regards, Yan Li

  • Reverse Proxy + Policy Agent generates unwanted Basic Authentication

    We have a policy agent installed on the SJWS 7.0u1. It's configured as a reverse proxy to a server running on another port on the same machine as the web server. The policy agent catches the request and redirects to the access manager, which authenticates fine. The access manager then redirects back to the web server, which then issues presents the basic authentication dialog. (We did not configure it for basic authentication).
    In a previous post I was directed to check my DNS entries. Both servers can resolve each other without problem. I can type nslookup server.practicegreenhealth.org, nslookup server (these are the web server addresses) and they both resolve to the correct ip. I can type nslookup access.practicegreenhealth.org and nslookup access and they both resolve to the correct IP.
    I had the application deployed as a JRuby application within the SJWS's servlet container and the setup worked fine. I switched back to using SJWS as a reverse proxy to application running as its own instance and am now presented with the basic auth dialog. I can hit the application fine both from the box it's running on and if I disable the policy agent. It's just the combination of the reverse proxy configuration + the policy agent that doesn't seem to work.
    Edited by: phoehne on Jun 23, 2008 12:40 PM

    what does the server error log say ? you might want to increase the log level to finest (config/server.xml change info to finest) and restart and look at the server error logs. this could provide us some insight on what is happening. most likely some config parameters in obj.conf need to be fine tuned.

  • Error Code After Running Apple Hardware Test

    I ran apple hardware test (I'm having problems where my computer freezes for like 10 seconds with the mouse being movable... but it happens very frequently. like once a minute. it's SOOO ANNOYING)
    this is the error i got after running apple hardware test:
    (it came out as a Mass Storage error... which is Hard Disk i guess)
    **ERROR*CODE***ERROR*CODE**
    2STF/8/3: S-ATA Bus 0-Master
    **ERROR*CODE***ERROR*CODE**
    Does anyone know what I can do to fix it. Apple Hardware Test only allows me to find the error and then restart or shut down... which is useless cause what is the error code supposed to mean. I've only got Apple 1 yr repair support left... so I cant call up Apple or anything. Does anyone know anything about this and what I could do to fix it!?
    I know about this: http://www.apple.com/support/imac/repairextensionprogram/
    I might go to the apple store, but I dont wanna make a trip out there for nothing.
    Does anyone know what I can do or should I just take it to the apple store.

    Actually, i just spent like 1 hr working with disk utility using the os x install disk and i think it finally worked. im so happy for myself! yay... i wouldnt accept no for an answer. Disk utility kept saying "oh first aid failed because it didnt exit right" or something... total garbage response... i kept pressing verify disk and then repair disk and then i did the verify permissions and repair permissions too... didnt really know what i was doing with the permissions... but it finally worked so thats all that mattered! yay... its back to normal!!

  • Error Codes after Apple Hardware Test...

    After someone here told me I've been experiencing kernel panics, I did some digging on the x lab site and re-ran the Apple hardware test in loop mode. after 17 runs, it returned the error:
    4MOT/2/40000005:Right Side
    I can't seem to find a list of error codes anywhere. My MBP has two 1GB RAM chips, both were pre-installed when I got the machine from Apple. I haven't tried switching them to see if the same error is returned on testing or with ONLY one or the other installed to see if this is truly a RAM issue. I thought I'd post to the forum for ideas first...

    I'm afraid I have no idea. If you have AppleCare, I would ask them about the error code. You do have a different error code (/2/ not /1/ and different number after the second slash) than the link, so perhaps it is not a fan motor that is your problem, though I'm hard-pressed to think of what other motors the MBP has (I don't think the hard drive is on the right side, for one.) Alternatively I can imagine, since you said it took you 17 tests to get the result, that this is an intermitent problem--for all I know, just a slightly loose/poorly soldered wire--and so istat hasn't detected the problem yet.
    I think AppleCare or a Mac Genius is your best bet, if you have the one or can get to the other. In particular, unfortunately, Apple does not seem to publish the hardware error codes; it only makes them available to techs.
    Good luck!

  • None exist error  code after a graceful shutdown

    I'd like to return a none zero exit code after a normal graceful shutdown.
    My end task is to be able to send a restart event to a number of machines running my application that will gracefully shutdown and inform the shell script that started it that it wants to be restarted.
    One option would be System.exit with a shutdown hook that monitors the current threads, and does not end until the other threads have also exited, but I would have to inform this hook of threads that should be allowed to finish naturally. But that seams a little [t]icky.
    I guess I could write to a file, and then close down naturally. But this leaves files drifting about. I'm not overly keen on that either.
    Any other suggestions? Thanks, Mike

    The "worker" thread should
    not be interupted, and told to exit, just left to
    exit under there own steam. (when they have finished
    the current job). What is the "worker" thread ? Is it what I meant with "watcher" thread ? Is that what you said or what I said ?
    And, I assumed we are talking about a server-like application, that is one running indefinitely, as opposed to one that would perform a specific task and then terminate. Am I correct ?
    The initalization of this new type of
    shutdown/restart is currently undefined, but will
    likely that the application start listening on a
    socket connection. I'm sorry, I don't understand that at all.
    I want this to ease deployment,
    currently when I deploy a new version I type "ant
    deploy", then VNC on to each of the computer
    (currently just 3, but likely to be more soon) and
    manually restart. What I want is to just type "ant
    deploy" it sends a signal to the running copies, and
    they restart themselfs. (I'm a lazy brsatard).You know this quote by Larry Wall (?) about the three most important characteristics of a programmer, don't you ?
    >
    and thus the exit code is already defined.Not so with what I would consider a "graceful
    shutdown". Then the application would shut down as
    all the threads have completed.It depends on whether having "all threads completed" is a normal part of the application's flow. If I assumed correctly we were talking about a server-like app, then it's not. Ergo the command to terminate has to be issued at some point. The question is how that gets done. For instance, if you send a CTRL-C from the shell, your application shuts down with an error code != 0.
    A graceful shutdown needs to be initiated somewhere. How do you plan to do it ?

  • Error code after cloning

    After cloning my OS HD to another drive using CCC I'm getting "The operation could not be completed, an unexpected error has occurred(error code -43)" when I click on Time Machine in the dashboard.
    Does using CCC somehow negate TM or cause it to not function from the dashboard? I can start it from System Prefs or the recent items list but not from the Dash.

    Don't know anything about a TM widget, but that error states:
    fnfErr = -43, /*File not found*/
    and I surmise the link to the widget is broken.

  • Error code after updating

    I have tried updating my iPod software, but after i did, i got a message saying something about an error code - 1604. I have already tried looking at various parts of the Apple Support website, but none of the things suggested have worked. Whenever i turn my iPod on, i am always getting the same picture about plugging in to iTunes. Can someone please give me suggestions as to what to do to solve this problem???

    I have tried looking it up on Google and seen thousands of YouTube vids on the subject, but nothing is working. This is really starting to annoy me, as no-one I talk to knows what to do!!!!!!!

  • Got an error code after running AHT. Now what?

    I ran the Apple Hardware Test and got the error code:  4sns/1/40000000:th1H-83.265
    I looked it up and it apparently means there's a problem wuth my heat pipe or heat sink. Makes sense because my MBP burns up and fans really start going when running a game, movie, or photoshop. Does this mean I have to replace something or what? How much will it cost me if I take it in for repairs? I no longer have warranty. I had to replace my harddrive after it failed in Feb 2012 so I will not be happy if it turns out the failure was related to this heat problem and never fixed.
    Mid-2009 13" MBP running OSX 10.8

    That error is indeed a sensor failure.  Make an appointment at an Apple store genius bar.  It is a hardware failure that only they can resolve.  They will tell you what costs are involved, I simply do not know that.
    Ciao.

  • Error code after downloading album

    i downloaded the new Evanescence cd and after it started downloading all i got was error code's for every song except for the interactive booklet and the interview that came with the album download. i have been charged the $10.99 for something that i do not have!!!!! How do i get my refund!?!?!?!?!?!

    i looked into the "purchased" tab and none of the songs appear in there, not even the error codes. my bill shows $9.99 for something i never got.
    just checking. are we talking about doing a "Store > check for purchases ..." as per the following document?
    How to resume interrupted iTunes Store downloads
    ... or do you mean "clicking on the 'Purchased' playlist in the itunes sourcelist"?

Maybe you are looking for