Installation guide

Troubleshooting
102 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • September 2004
The agent goes into an infinite loop if the users who are redirected to the resource
mentioned in the property com.sun.am.policy.agents.accessDeniedURL do not have
the “Get/allow policy” assigned to them.
Solution: Assign “Get/allow policy” to all users of the resource mentioned in the
com.sun.am.policy.agents.accessDeniedURL property.
Microsoft IIS 5.0 Policy Agent
If you are experiencing problems with your installation, try the following:
• Check the installation log file for errors:
%TEMP%\Sun_ONE_Identity_Server_Policy_Agent_uninstall.nnnn
• Re-install the agent by uninstalling and then installing.
• Verify agent loading in IIS:
a. Launch Internet Services Manager.
b. From the Start menu, choose Programs > Administrative Tools > Internet
Services Manager.
c. Open the properties for the host computer in the Tree Pane of the Internet
Services Manager window that is titled Internet Information Services.
d. Thehost computernameshould appearin the treeunderneath the Internet
Information Services root.
e. Click Edit in the Master Properties section of the Internet Information
Services tab.
f. Select the ISAPI Filters tab in the WWW Service Master Properties dialog
that appears.
g. Look for the filter name “Sun ONE Identity Server agent.”
If the Filter name “Sun ONE Identity Server Agent” does not appear at all,
then check that the installation program was run, and look for any errors
during installation. The install log is located at:
%TEMP%\Sun_ONE_Identity_Server_Policy_Agent_uninstall.nnnn
A green arrow pointing up in the Status column to the right of the “Sun
ONE Identity Server Agent” indicates the agent loaded successfully into
IIS. A red arrow pointing down indicates that the filter failed to load. The
most likely cause of the filter not loading successfully (red arrow) is that it
cannot locate the required dll files.