Sun Java System Access Manager Policy Agent 2.2 Guide for IBM Lotus Domino 6.5.4

Windows Systems: Troubleshooting Symptoms in Agent for IBM Lotus Domino 6.5.4

This section includes various problems you might encounter with this agent on Windows systems. The symptom of the problem is followed by possible causes and solutions.

Windows Systems: Troubleshooting Symptom 1

Symptom: Cannot install the web agent after a previous installation has been removed.

Possible Causes:

Possible Solution: To resolve the issue, manually remove the web agent as explained in the following task description.

ProcedureTo Manually Remove Agent for IBM Lotus Domino 6.5.4

  1. Stop all of the web sites.

  2. Stop all of the application pools.

  3. Remove Agent for IBM Lotus Domino 6.5.4.

    1. In the Start menu, select Control Panel->Add/Remove programs

    2. Select Sun Java System Access ManagerLotus Domino Agent

    3. Click Remove

  4. Remove entries from product registry

    1. Issue the following command in the command line:

      regedit
    2. Traverse to the following:

      HKEY_LOCAL_MACHINE
    3. Click Software

    4. Click Sun Microsystems

    5. Remove the following entry:

      Access Manager Lotus Domino Agent

  5. Remove the PolicyAgent-base directory from the server.

    where PolicyAgent-base represents the directory in which the web agent was originally installed.

  6. Remove the following entries from the PATH variable:

    • PolicyAgent-base\bin

    • PolicyAgent-base\domino\bin

  7. Restart the server.

Windows Systems: Troubleshooting Symptom 2

Symptom: Unable to uninstall the agent from a Windows system using the Add/Remove Program option in the Control Panel.

Possible Cause: Java’s class path might not be set correctly on the machine.

Possible Solution: Perform the following task.

ProcedureTo Uninstall a Web Agent on a Windows System When the GUI Uninstallation Fails

  1. Open Command Prompt Window.

  2. Change directories to PolicyAgent-base

  3. Execute the following command:

    java uninstall_Sun_Java_tm_System_Access_Manager_Policy_Agent

Windows Systems: Troubleshooting Symptom 3

Symptom: IBM Lotus Domino 6.5.4 server starts with the following error message:


Unable to load filter

Possible Cause: The DSAPI filter is configured incorrectly. Generally, if any path issue or associated library issue occurs while the DSAPI filter is being added, this error is generated.

Possible Solution: Ensure that the DSAPI filter has been configured with the correct information. For example, verify that the following path has been specified:

PolicyAgent-base\\domino\\bin\\amdomino6.dll

Windows Systems: Troubleshooting Symptom 4

Symptom: The DSAPI filter is not functioning properly on a server instance.

Possible Causes:

Possible Solutions:

Windows Systems: Troubleshooting Symptom 5

Symptom: The agent goes into an infinite loop.

Possible Cause: The value for the following property in the web agent AMAgent.properites configuration file is a resource to which users are assigned:

com.sun.am.policy.agents.config.accessdenied.url

The users assigned to this resource, do not have allow in the policy definition.

Possible Solution: For the get method, specify allow in the policy definition.

Windows Systems: Troubleshooting Symptom 6

Symptom:When a user attempts to access a resource using Internet Explorer as the browser, access is denied.

Possible Cause: Internet Explorer overrides the port number of the web agent with the Access Manager port number. In such cases, the agent log file lists the URL that is being evaluated. The port number for that URL is incorrect.

Possible Solution: You can ensure this problem does not occur by setting the following property in the web agent AMAgent.properties configuration file to true as shown:

com.sun.am.policy.agents.config.override_port = true

Windows Systems: Troubleshooting Symptom 7

Symptom: After the agent is installed, the web server fails to start.

Possible Cause: Libraries that agents depend on for Windows systems are missing. Ensuring that the libraries msvcp70.dll and msvcr70.dll are available is a pre-installation step in this guide. If the libraries were not properly added, the web server might not start.

Possible Solution: Obtain the appropriate libraries as described in Preparing to Install Agent for IBM Lotus Domino 6.5.4 on Windows Systems.