Policy extensions no longer function/load after updating to 3.2.2

  • 7012722
  • 26-Jun-2013
  • 25-Jul-2013

Environment


NetIQ Access Manager 3.2

Situation

Receive following error when accessing resource with policy extension.

Access forbidden!

Access Gateway couldn't find the needed policy from service provider. It might be just coming up. If refreshing the browser after a few seconds doesn't clear this error condition, please contact your Administrator.

Error: "com.novell.nxpe.NxpeException" found in catalina.out.

Resolution

Reported issue to engineering.

As a workaround go into AdminConsole -> Policies ->
-> Remove Policy extension and then add it back again.

Cause

Upgrade to 3.2.2, but will update once more information is provided from engineering.

Additional Information

snippet from catalina.out


<amLogEntry> 2013-06-21T12:01:21Z VERBOSE NIDS Application: AM#501101030: AMDEVICEID#esp-4A742B75A5E444FB: NXPESID#4:  Reading document at reference: ExternalDocRef - ou=chhaklj4keoe,ou=3v4h8cvx256i67,ou=ContentPublisherContainer,ou=Partition,ou=PartitionsContainer,ou=VCDN_Root,ou=accessManagerContainer,o=novell:romaContentCollectionXMLDoc
: romaName - extension_xpemlCondition_1369835348090#ConditionExtension#xpemlPEP_AGAuthorization#ConditionExtension </amLogEntry>

<amLogEntry> 2013-06-21T12:01:21Z WARNING NIDS Application: AM#101101031: AMDEVICEID#esp-4A742B75A5E444FB: NXPESID#4:  Exception processing configure
Exception message: "com.novell.nxpe.NxpeException"
     null, Line: -1, Method: A
     null, Line: -1, Method: A
     null, Line: -1, Method: B
     null, Line: -1, Method: A
     null, Line: -1, Method: A
     null, Line: -1, Method: A
     null, Line: -1, Method: buildEvaluationObject
     null, Line: -1, Method: configure
     y, Line: 1661, Method: configure
     y, Line: 2694, Method: A
     y, Line: 1645, Method: C
     y, Line: 1960, Method: A
     y, Line: 1082, Method: processSoapRequest
     y, Line: 1536, Method: I
     y, Line: 1985, Method: processSOAPRequest
     y, Line: 39, Method: handleSOAPCommand
     y, Line: 2266, Method: handleSOAPMessage
     y, Line: 1436, Method: handleRequest
     y, Line: 2010, Method: myDoGet
     y, Line: 1516, Method: doGet
     y, Line: 2816, Method: doPost
     HttpServlet.java, Line: 641, Method: service
     HttpServlet.java, Line: 722, Method: service
     ApplicationFilterChain.java, Line: 305, Method: internalDoFilter
     ApplicationFilterChain.java, Line: 210, Method: doFilter
     StandardWrapperValve.java, Line: 222, Method: invoke
     StandardContextValve.java, Line: 123, Method: invoke
     AuthenticatorBase.java, Line: 472, Method: invoke
     StandardHostValve.java, Line: 168, Method: invoke
     ErrorReportValve.java, Line: 99, Method: invoke
     StandardEngineValve.java, Line: 118, Method: invoke
     CoyoteAdapter.java, Line: 407, Method: service
     AjpProcessor.java, Line: 200, Method: process
     AbstractProtocol.java, Line: 585, Method: process
     JIoEndpoint.java, Line: 310, Method: run
     ThreadPoolExecutor.java, Line: 1110, Method: runWorker
     ThreadPoolExecutor.java, Line: 603, Method: run
     Thread.java, Line: 722, Method: run
 </amLogEntry>

com.novell.nxpe.NxpeException: com.novell.nxpe.NxpeException
        at com.novell.nidp.policy.soap.BasicSoapPep.configure(y:2557)
        at com.novell.nidp.policy.soap.PolicySoapHandler.A(y:2694)
        at com.novell.nidp.policy.soap.PolicySoapHandler.C(y:1645)
        at com.novell.nidp.policy.soap.PolicySoapHandler.A(y:1960)
        at com.novell.nidp.policy.soap.PolicySoapHandler.processSoapRequest(y:1082)
        at com.novell.nidp.common.profile.SOAPProfile.I(y:1536)
        at com.novell.nidp.common.profile.SOAPProfile.processSOAPRequest(y:1985)
        at com.novell.nidp.servlets.handler.CommonHandler.handleSOAPCommand(y:39)
        at com.novell.nidp.servlets.handler.BaseHandler.handleSOAPMessage(y:2266)
        at com.novell.nidp.servlets.handler.CommonHandler.handleRequest(y:1436)
        at com.novell.nidp.servlets.NIDPServlet.myDoGet(y:2010)
        at com.novell.nidp.servlets.NIDPBaseServlet.doGet(y:1516)
        at com.novell.nidp.servlets.NIDPBaseServlet.doPost(y:2816)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:641)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)
        at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:200)
        at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:585)
        at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:310)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)
        at java.lang.Thread.run(Thread.java:722)
Caused by: com.novell.nxpe.NxpeException
        at com.novell.nxpe.engine.U.A(Unknown Source)
        at com.novell.nxpe.engine.S.A(Unknown Source)
        at com.novell.nxpe.engine.V.B(Unknown Source)
        at com.novell.nxpe.engine.RuleList.A(Unknown Source)
        at com.novell.nxpe.engine.RuleList.A(Unknown Source)
        at com.novell.nxpe.engine.PolicyEngine.A(Unknown Source)
        at com.novell.nxpe.engine.PolicyEngine.buildEvaluationObject(Unknown Source)
        at com.novell.nxpe.NxpePolicy.configure(Unknown Source)
        at com.novell.nidp.policy.soap.BasicSoapPep.configure(y:1661)
        ... 29 more
com.novell.nxpe.NxpeException: com.novell.nxpe.NxpeException: com.novell.nxpe.NxpeException
        at com.novell.nidp.policy.soap.PolicySoapHandler.C(y:2792)
        at com.novell.nidp.policy.soap.PolicySoapHandler.A(y:1960)
        at com.novell.nidp.policy.soap.PolicySoapHandler.processSoapRequest(y:1082)
        at com.novell.nidp.common.profile.SOAPProfile.I(y:1536)
        at com.novell.nidp.common.profile.SOAPProfile.processSOAPRequest(y:1985)
        at com.novell.nidp.servlets.handler.CommonHandler.handleSOAPCommand(y:39)
        at com.novell.nidp.servlets.handler.BaseHandler.handleSOAPMessage(y:2266)
        at com.novell.nidp.servlets.handler.CommonHandler.handleRequest(y:1436)
        at com.novell.nidp.servlets.NIDPServlet.myDoGet(y:2010)
        at com.novell.nidp.servlets.NIDPBaseServlet.doGet(y:1516)
        at com.novell.nidp.servlets.NIDPBaseServlet.doPost(y:2816)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:641)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)
        at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:200)
        at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:585)
        at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:310)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)
        at java.lang.Thread.run(Thread.java:722)
Caused by: com.novell.nxpe.NxpeException: com.novell.nxpe.NxpeException
        at com.novell.nidp.policy.soap.BasicSoapPep.configure(y:2557)
        at com.novell.nidp.policy.soap.PolicySoapHandler.A(y:2694)
        at com.novell.nidp.policy.soap.PolicySoapHandler.C(y:1645)
        ... 27 more
Caused by: com.novell.nxpe.NxpeException
        at com.novell.nxpe.engine.U.A(Unknown Source)
        at com.novell.nxpe.engine.S.A(Unknown Source)
        at com.novell.nxpe.engine.V.B(Unknown Source)
        at com.novell.nxpe.engine.RuleList.A(Unknown Source)
        at com.novell.nxpe.engine.RuleList.A(Unknown Source)
        at com.novell.nxpe.engine.PolicyEngine.A(Unknown Source)
        at com.novell.nxpe.engine.PolicyEngine.buildEvaluationObject(Unknown Source)
        at com.novell.nxpe.NxpePolicy.configure(Unknown Source)
        at com.novell.nidp.policy.soap.BasicSoapPep.configure(y:1661)
        ... 29 more
<amLogEntry> 2013-06-21T12:01:21Z SEVERE NIDS Application: AM#501101021: AMDEVICEID#esp-4A742B75A5E444FB: NXPESID#4: Exception - com.novell.nxpe.NxpeException: com.novell.nxpe.NxpeException
Exception message: "com.novell.nxpe.NxpeException: com.novell.nxpe.NxpeException"
     y, Line: 2792, Method: C
     y, Line: 1960, Method: A
     y, Line: 1082, Method: processSoapRequest
     y, Line: 1536, Method: I
     y, Line: 1985, Method: processSOAPRequest
     y, Line: 39, Method: handleSOAPCommand
     y, Line: 2266, Method: handleSOAPMessage
     y, Line: 1436, Method: handleRequest
     y, Line: 2010, Method: myDoGet
     y, Line: 1516, Method: doGet
     y, Line: 2816, Method: doPost
     HttpServlet.java, Line: 641, Method: service
     HttpServlet.java, Line: 722, Method: service
     ApplicationFilterChain.java, Line: 305, Method: internalDoFilter
     ApplicationFilterChain.java, Line: 210, Method: doFilter
     StandardWrapperValve.java, Line: 222, Method: invoke
     StandardContextValve.java, Line: 123, Method: invoke
     AuthenticatorBase.java, Line: 472, Method: invoke
     StandardHostValve.java, Line: 168, Method: invoke
     ErrorReportValve.java, Line: 99, Method: invoke
     StandardEngineValve.java, Line: 118, Method: invoke
     CoyoteAdapter.java, Line: 407, Method: service
     AjpProcessor.java, Line: 200, Method: process
     AbstractProtocol.java, Line: 585, Method: process
     JIoEndpoint.java, Line: 310, Method: run
     ThreadPoolExecutor.java, Line: 1110, Method: runWorker
     ThreadPoolExecutor.java, Line: 603, Method: run
     Thread.java, Line: 722, Method: run
 </amLogEntry>

<amLogEntry> 2013-06-21T12:01:21Z INFO NIDS Application: AM#501101021: AMDEVICEID#esp-4A742B75A5E444FB: NXPESID#4:  Response sent: Status - failure:Exception - com.novell.nxpe.NxpeException: com.novell.nxpe.NxpeException </amLogEntry>