XPSImport failed

book

Article ID: 205702

calendar_today

Updated On:

Products

CA Single Sign On Secure Proxy Server (SiteMinder) CA Single Sign On Agents (SiteMinder) CA Single Sign On Federation (SiteMinder) CA Single Sign On SOA Security Manager (SiteMinder) SITEMINDER

Issue/Introduction

 

We're running the XPSImport command and the import fails and the
command returns error :

# XPSImport Fullexport_07Dec.xml

  (FATAL) : [sm-xpsxps-05810] Import failed.

If we add the option to the command to overwrite the existing objects,
then you can import the data successfully.

How can we only import the unexisting objects ?

 

Environment

 

Policy Server 12.8SP3 on RedHat 6;

 

Resolution

 

You can't import a full Policy Store data set without overwrite the
existing data.

The only way to only import the different data is to do a selective
export of the data set.

In order to avoid to overwrite existing objects, you have to list all
those objects which exists in your 2 Stores, and then export only the
ones that need to be added in the target Policy Store. According to
the documentation, the combination of the XPSExplorer and XPSExport
command will allow you to do it.

  XPSExport

    You can export a subset of policy data by specifying the
    identifier of a root object. Specify this identifier in the
    command line or in a file (using the -xf parameter). Only those
    objects that do not have a parent class can be exported. For
    example, to export a realm object, you specify the identifier
    (XID) of the parent domain for the realm.

    You can also create and edit a custom export file using the
    "shopping cart", or XCart, capability in XPSExplorer (XPSExplorer
    -xf). You can set the import mode (ADD, OVERLAY, REPLACE, or
    DEFAULT) on a per object basis in the XCart file. You can then
    pass the XCart file to XSPExport using the -xf parameter.

  https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/administrating/policy-server-tools/xpsexport.html
  XPSExplorer

    XPSExplorer is an interactive command-line utility that allows an
    administrator or application developer to view the data in a
    policy store. XPSExplorer has two uses:

    To determine the identifiers of objects for a granular export or
    import by exploring a list of domains or realms

  https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/administrating/policy-server-tools/xpsexplorer.html

Unfortunatly, there's no automatic way to do this and you should
proceed manually those operation.