Environment
Novell Access Manager 3 Linux Access Gateway
Novell Access Manager 3 Support Pack 4 applied
Novell Access Manager 3 Support Pack 4 applied
Situation
Access Manager Support Pack (SP) 2 setup and working fine - users accessing protected resources on the Linux Access Gateway can authenticate to the IDP server and access their web applications successfully. After upgrading to Access Manager 3.0 Support Pack 3 (from SP2), users accessing applications on the assigned Embedded Service Provider (ESP) assigned proxy service would get a "Page can not be displayed message" message on Internet Explorer (IE) 7 browsers. Users accessing the same applications with IE6 would work fine. Users accessing applications on the non ESP proxy services with IE7 would work fine.
Resolution
Touch the /var/novell/.useHTMLBodyIn302 on the LAG.
.useHTMLBodyIn302 will cause 302 redirects to be sent without any content. If /var/novell/.useHTMLBodyIn302 file is preset during a configuration apply, we will send the following content for any 302 redirects:
<html><head><title>Redirection</title></head><body>Your browser should support redirection.</body></html>
Whislt debugging the issue, the strace output on the IE7 browser (http://www.microsoft.com/downloads/details.aspx?familyid=f5ec767f-27f2-4fb3-90a5-4bf0d5f4810a&displaylang=en) showed multiple 'memory insufficient' errors. Because of this, redirection did not happen and the authentication process failed. By dropping the amount of data in the redirects, no memory issues were seen and the authentication and redirection succeeded.
.useHTMLBodyIn302 will cause 302 redirects to be sent without any content. If /var/novell/.useHTMLBodyIn302 file is preset during a configuration apply, we will send the following content for any 302 redirects:
<html><head><title>Redirection</title></head><body>Your browser should support redirection.</body></html>
Whislt debugging the issue, the strace output on the IE7 browser (http://www.microsoft.com/downloads/details.aspx?familyid=f5ec767f-27f2-4fb3-90a5-4bf0d5f4810a&displaylang=en) showed multiple 'memory insufficient' errors. Because of this, redirection did not happen and the authentication process failed. By dropping the amount of data in the redirects, no memory issues were seen and the authentication and redirection succeeded.