SA-15457

Summary

Developer is setting up WebSeal integration as per https://pdn.pega.com/security/how-to-configure-sign-on-using-ibm-webseal-and-tivoli-access-manager. And developer has implemented a custom servlet definition in web.xml:

<servlet>
   <servlet-name>WebSeal</servlet-name>
     <display-name>WebSeal</display-name>
     <description>WebSeal Servlet</description>
     <servlet-class>com.pega.pegarules.web.servlet.WebStandard</servlet-class>
  <init-param>
       <param-name>PegaEtierClass</param-name>
       <param-value>com.pega.pegarules.services.HttpAPI</param-value>
  </init-param>
  <init-param>
    <param-name>AuthenticationType</param-name>
    <param-value>PRExternal</param-value>
  </init-param>
  <init-param>
     <param-name>RuntimeServletName</param-name>
     <param-value>WebSealServlet</param-value>
  </init-param>
  <init-param>
     <param-name>SecureServletName</param-name>
     <param-value>WebSealSecureServlet</param-value>
  </init-param>
  <init-param>
     <param-name>AuthService</param-name>
     <param-value>WebSealService</param-value>
  </init-param>
</servlet>
 

Error Messages

java.lang.ClassNotFoundException: class java.lang.ClassNotFoundException: com.pega.pegarules.web.servlet.WebStandard
        at java.beans.Beans.instantiate(Beans.java:195)
        at java.beans.Beans.instantiate(Beans.java:80)

Steps to Reproduce

Not Applicable.
 

Root Cause

The servlet class and PegaEtierClass referenced in ther web.xml servlet definition have not existed for a very long time.  

This is causing the ClassNotFoundException. Processing is yet to call the Data-Admin-AuthService login activity.


Changed to the following:

<servlet>
   <servlet-name>WebSeal</servlet-name>
     <display-name>WebSeal</display-name>2
     <description>WebSeal Servlet</description>
     <servlet-class>com.pega.pegarules.internal.web.servlet.WebStandardBoot</servlet-class>
  <init-param>
       <param-name>PegaEtierClass</param-name>
       <param-value>com.pega.pegarules.session.internal.engineinterface.service.HttpAPI</param-value>
  </init-param>

 

Also the AuthenticationType parameter is defined as PRExternal that is been depreciated is PRPC 5.4.

Resolution

Perform the following local-change steps:

1. Adjust the web.xml to include the proper servlet-class and PegaEtierClass references.
2. Change the AuthenticationType to PRCustom and rebuilt the authentication activity.