When running any of the XPSTools, seeing DN Normalize Lazy normalization of ou=xps,ou=PolicySvr4,ou=siteminder,ou=netegrity,policystore

Products

• CA Single Sign-On

Issue/Introduction

While attempting to re-index a Policy Store, the customer was seeing this error afterwards when they ran XPSExplorer, XPSConfig etc:

[19/Feb/2022:09:18:28 +0000] - WARNING<4154> - DN  - conn=-1 op=-1 msgId=-1 - DN Normalize Lazy normalization of ou=xps,ou=PolicySvr4,ou=siteminder,ou=netegrity,policystore

Viewing the policy store through an LDAP client was successful however, all objects were seen.

Environment

SiteMinder 12.8 ANY

Sun-Directory-Server/11.1.1.7.190716 B2019.0627.0913 (64-bit)

Cause

The error is actually referring to a problem with the DN being used. In this case there was a typo, the o= was missing.

ou=xps,ou=PolicySvr4,ou=siteminder,ou=netegrity,policystore should have been ou=xps,ou=PolicySvr4,ou=siteminder,ou=netegrity,o=policystore

This is why the LDAP client was successful, it was configured with the proper DN whereas SiteMinder was not.

Resolution

 

Check the smconsole Policy Store settings and any LDIF files used in the store creation for the proper DN value. Once the DN value was corrected, the error was no longer seen and they could use the XPSTools successfully.