Novell ACCESS MANAGER 3.1 SP2 - README 2010 Manual page 29

4.8.3 Enterprise Mode Issues
"Jgroups Does Not Perform a Complete State Transfer If One of the Cluster Nodes Fails to
Come Up after Upgrading." on page 29
"Full Tunneling with a Forward Proxy Enabled Is Not Supported for Web Client Applications"
on page 29
"Tunnel Logs Display Full Tunnel Information in Split Tunnel Mode" on page 29
"No Error Message Is Displayed for an Invalid Credential Entry on Windows 2000 Machines"
on page 29
4.8.3.1 Jgroups Does Not Perform a Complete State Transfer If One of the Cluster Nodes
Fails to Come Up after Upgrading.
In an SSL VPN cluster, if one of the cluster nodes fails to come up after you upgrade the SSL VPN
servers, stop all the services in all the cluster nodes and restart the services in all the nodes.
4.8.3.2 Full Tunneling with a Forward Proxy Enabled Is Not Supported for Web Client
Applications
Full tunneling with a forward proxy on a client network is not supported for Web client applications.
This is because, in Enterprise Mode, a route is added in order to enable forward proxy. Any Web
clients from that workstation can use this route to bypass the SSL VPN server by using the forward
proxy.
4.8.3.3 Tunnel Logs Display Full Tunnel Information in Split Tunnel Mode
If client debug logs are enabled, tunnel logs displayed in the Enterprise mode might contain
information for full tunneling, even though only split tunneling is enabled for the user.
4.8.3.4 No Error Message Is Displayed for an Invalid Credential Entry on Windows 2000
Machines
On Windows 2000 machines, if a non-admin user tries to establish an SSL VPN connection in the
Enterprise mode and specifies the wrong credentials for the admin user, no error messages are
displayed. However, the user is denied access after trying to establish the connection.
4.9 J2EE Agent Known Issues
The following sections discuss the known issues in J2EE agents for JBoss, WebSphere, and
WebLogic
"Authentication Error Is Displayed When a User Tries to Access Resources" on page 29
"Base URL and SOAP URL Cannot Be Configured with Port 65535" on page 30
4.9.1 Authentication Error Is Displayed When a User Tries to Access Resources
In WebLogic J2EE agents, when users who do not have sufficient rights try to access resources for
which they have been denied authorization, the following message is displayed:
There was a problem with your authentication
The required Web page is displayed if you refresh the page once.
Novell Access Manager 3.1 SP2 Readme 29