SBL-SEC-00002: An error occurred loading the security adapter library;
Applies to:
Siebel Sales - Version 7.5.3.5 [16183] and later
Information in this document applies to any platform.
*** Checked for Relevancy 27-Feb-2013 ***
Symptoms
When starting an application object manager (AOM) that uses the
Siebel standard LDAP Security Adapter (LDAPSecAdpt), the process fails
with the following error in the log file:
SBL-SEC-00002: An error occurred loading the security adapter library. Please contact your system administrator for assistance.
This is applicable for Siebel versions 7.3.5 and higher.
Cause
This error pattern is typically the result of the required IBM LDAP
client software not being installed on the Siebel server(s). The Siebel
standard LDAP Security Adapter (LDAPSecAdpt) relies on code libraries
provided by the IBM software. This is true regardless of what external
LDAP directory the adapter will be connecting to.
This requirement is documented in the Security Guide's section on External Security Adapter Authentication.
Solution
To resolve this behavior, please install the appropriate version of the IBM LDAP Client software:
- Siebel 7.5, 7.7, and 7.8 requires the IBM 5.1 LDAP Client.
- Siebel 8 requires the IBM 6.0 LDAP Client.
The software is provided free of charge in the Server Ancillary
Programs folder of the Siebel installation media. It will also be
created if the appropriate option is checked when extracting an
installation image from http://edelivery.oracle.com.
Instructions for installing and configuring the IBM software can be
found in the Security Guide on the appropriate Siebel Bookshelf.
Applies to:
Siebel System Software - Version: 7.8.2 [19213] and later [Release: V7 and later ]
Oracle Solaris on SPARC (64-bit)
Product Release: V7 (Professional)
Version: 7.8.2 [19213]
Database: Oracle 9.2.0.4
Application Server OS: Sun Solaris 9
Database Server OS: Sun Solaris 9
This document was previously published as Siebel SR 38-3009105001.
Symptoms
SBL-SEC-00002, SBL-SEC-00001We have set up a vanilla 7.8 environment in which to test our custom security adapter originally
built for Siebel 7.5. We have built and deployed the library (DLL), but continue to receive
"SBL-SEC-00002: An error occurred loading the security adapter library" in both the OM and SWSE
logs. We need assistance troubleshooting this error.
Cause
Change request 12-1E3A060
Solution
Message 1
The customer had compiled a custom security adapter using the security
adapter SDK found in Technical Note 415: “Siebel Security Adapter
Software Developers Kit for Siebel Versions 7.5, 7.7 and 7.8”. This
custom security adapter was working as expected in Siebel version 7.5 on
the Solaris platform. The customer is upgrading to Siebel version 7.8
on the Solaris platform.
Beginning in Siebel version 7.7, the security adapter enterprise profile
was introduced to move the security adapter parameters into the named
subsystem in the Gateway server instead of the Object Manager
config(.cfg) file.
To troubleshoot this behavior, security adapter logging was enabled
following the information in FAQ 2168. Since the actual code in a custom
security adapter is beyond the scope of Siebel technical support and
requires assistance from other resources like Siebel Expert or
Professional Services, the troubleshooting approach was simplified by
compiling the sample security adapter that is contained in the security
adapter SDK. This sample security adapter has very little infrastructure
dependencies and does not require entities such as a LDAP directory in
order to function.
<continued>
Message 2
The sample security adapter successfully loaded in Siebel version 7.5
with the Object Manager .cfg file security adapter configuration. The
secsamp.so was then moved to the Siebel version 7.8 siebsrvr/lib
directory and the following setup was configured:
OM component parameters
Security Adapter Name : SampleSec
Security Adapter Mode: CUSTOM
New SampleSec(alias) Enterprise Profile(subsystem type: InfraSecAdpt_Custom)
CustomSecAdpt_CRC = <checksum value>
CustomSecAdpt_SecAdptDllName = secsamp
ConfigFileName = /vol1/public2/siebsrvr/bin/enu/sample.cfg
ConfigSectionName = Sample
sample.cfg(located in siebsrvr/bin/enu/) :
[Sample]
dbUsername = sadmin
dbPassword = sadmin
<continued>
Message 3
The following error occurred:
n++1021 2006-05-01 09:58:09 2006-05-01 09:58:10 -0600 00000011 001 003f
0001 09 SSEObjMgr_enu 4143 5047 13 /vol1/public2/siebsrvr/
enterprises/public2/pubapp01/log/SSEObjMgr_enu_4143.log 7.8.2 [19213] ENU
GenericLog GenericError 1 0 2006-05-01
09:58:09 (secmgr.cpp (1587) err=7000002 sys=0) SBL-SEC-00002: An
error occurred loading the security adapter library. Please contact your
system administrator for assistance.
SecMgrLog Debug 5 0 2006-05-01 09:58:09 SecAdptName = SampleSec
SecMgrLog Debug 5 0 2006-05-01 09:58:09 SecAdptMode = 3
SecMgrLog Debug 5 0 2006-05-01 09:58:09 SecAdptDllName = secsamp
SecMgrLog Debug 5 0 2006-05-01 09:58:09 PropagteChange = FALSE
SecMgrLog Debug 5 0 2006-05-01 09:58:09 computed checksum of security adapter library = ''
SecMgrLog Debug 5 0 2006-05-01 09:58:09 HashUserPwd = FALSE
SecMgrLog Debug 5 0 2006-05-01 09:58:09 HashDBPwd = FALSE
SecMgrLog Debug 5 0 2006-05-01 09:58:09 HashAlgorithm = RSASHA1
SecMgrLog Debug 5 0 2006-05-01 09:58:09 bMFCShell = TRUE
SecMgrLog Debug 5 0
SecMgrLog Debug 5 0 2006-05-01 09:58:09 dbusername = sadmin
<continued>
Message 4
SecMgrLog Debug 5 0 2006-05-01 09:58:09 singlesignon = FALSE
SecMgrLog Debug 5 0 2006-05-01 09:58:09 dbpassword = sadmin
SecMgrLog Debug 5 0 2006-05-01 09:58:09 useadapterusername = FALSE
GenericLog GenericError 1 0 2006-05-01
09:58:09 (secmgr.cpp (2278) err=7000002 sys=0) SBL-SEC-00002: An e
ror occurred loading the security adapter library. Please contact your system administrator for assistance.
The above indicated that parameters for the security adapter was loading but the adapter itself failed to load.
This behavior was resolved by changing the settings:
CustomSecAdpt_CRC = 0
CustomSecAdpt_SecAdptDllName = /vol1/public2/siebsrvr/lib/secsamp.so
ConfigFileName = /vol1/public2/siebsrvr/bin/enu/sample.cfg
Various combinations of the above parameters were attempted and it was
found that CustomSecAdpt_CRC = 0 (disabled) and
CustomSecAdpt_SecAdptDllName needed to be set to the full path of the
security adapter including the .so extension.
<continued>
Message 5
Change request 12-1E3A060 “secsamp.so(Sample security adapter) does not
load in 7.8 but works in 7.5” was entered as a product defect as all the
features of the custom profile were not available on the Solaris
platform
Change request 12-1E6ZJ83 “More logging information for SBL-SEC-00002
error when loading a security adapter” was entered as a product
enhancement for detail on why the security adapter itself does not
load(examples: permissions, .dlopen() call etc..)
Applies to:
Siebel Finance Sales - Version 7.5.3.15 SIA [16279] and later
Information in this document applies to any platform.
*** Checked for relevancy 21-Feb-2013 ***
Goal
Will a custom security adapter developed for Siebel 7.5 and using the
interface defined in Note 476962.1 work unchanged with version 8?
Fix
Since the software developer kit (SDK) discussed in Note 476962.1
creates custom software, Oracle cannot provide you with a definitive
answer to this question. As stated in Note 476962.1, neither the use of
the SDK or adapters created with it are supported by Oracle Global
Customer Support. Furthermore, Oracle cannot guarantee compatibility
with future releases of the product. That being said, we can provide
some general observations that may be of use to you.
First of
all, the SDK itself has not changed between 7.5 and the current 8.0.0.x
releases. So at the very least the basic code libraries should be
compatible.
There have been, however, significant changes in how
the Siebel application interacts with security adapters between 7.5,
7.7/7.8, and 8.x. The changes that are the most probable to have
potential impacts are the ones that happened between 7.5 and 7.7. This
is the point at which security adapter parameters were moved out of the
individual application configuration files (for example siebel.cfg,
uagent.cfg, etc.) and into named enterprise profiles within the Siebel
Enterprise Backing Store (LDAPSecAdpt, ADSISecAdptADSISecAdpt,
etc.). The second major change is that Windows Integrated
Authentication (WIA) based web single sign-on (SSO) became a standard
feature in 7.7 no longer requiring the use of a custom security adapter
as described in Note 477108.1. Finally, Siebel 7.7 no longer supported
Siebel password hashing and required the use of SHA-1 hashing.
Between
7.7/7.8 and 8.0, there was the introduction of a more robust
LDAPSecAdpt that was capable of communicating with Active Directory
servers on all supported platforms. This was due to the change from
underlying IBM 5.0 LDAP Client libraries to the IBM 6.0 LDAP Client
libraries. Obviously if your customer adapter utilizes the shipped LDAP
security adapter functionality and libraries, it will probably require
updating to work with Siebel 8.0.
Oracle Support's experience
with these types of issues has been that most of the custom security
adapters work after some relatively minor tweaking of the configuration
(as opposed to the code). In some cases, however, the specific
functionality being invoked by the custom adapter were not compatible
and the alternative solutions had to be found or designed. The only way
you will know for sure is to thoroughly test your custom security
adapter in a development Siebel 8 environment prior to rolling it out to
production.
There are a variety of Metalink notes available on
custom security adapters and the SDK. You may find the following to be
particularly useful: 478022.1, 484645.1, 497314.1, and 529726.1.
תגובות
הוסף רשומת תגובה