We're running the XPSImport command and the import fails and the
command returns error :
# XPSImport Fullexport_07Dec.xml
(FATAL) : [sm-xpsxps-05810] Import failed.
If we add the option to the command to overwrite the existing objects,
then you can import the data successfully.
How can we only import the unexisting objects ?
Policy Server 12.8SP3 on RedHat 6;
You can't import a full Policy Store data set without overwrite the
The only way to only import the different data is to do a selective
export of the data set.
In order to avoid to overwrite existing objects, you have to list all
those objects which exists in your 2 Stores, and then export only the
ones that need to be added in the target Policy Store. According to
the documentation, the combination of the XPSExplorer and XPSExport
command will allow you to do it.
You can export a subset of policy data by specifying the
identifier of a root object. Specify this identifier in the
command line or in a file (using the -xf parameter). Only those
objects that do not have a parent class can be exported. For
example, to export a realm object, you specify the identifier
(XID) of the parent domain for the realm.
You can also create and edit a custom export file using the
"shopping cart", or XCart, capability in XPSExplorer (XPSExplorer
-xf). You can set the import mode (ADD, OVERLAY, REPLACE, or
DEFAULT) on a per object basis in the XCart file. You can then
pass the XCart file to XSPExport using the -xf parameter.
XPSExplorer is an interactive command-line utility that allows an
administrator or application developer to view the data in a
policy store. XPSExplorer has two uses:
To determine the identifiers of objects for a granular export or
import by exploring a list of domains or realms
Unfortunatly, there's no automatic way to do this and you should
proceed manually those operation.