XPSExport fails with IMSAdditionalProperties errors

Products

• SITEMINDER
• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Identity Manager
• CA Identity Suite

Issue/Introduction

After IDM integration xpsexport fails.

After building a separate parallel SiteMinder/Policy store (12.8 SP6) and did the IDM integration (14.1) which created the necessary IDM environment(Policy domain etc) without any errors. We run the xpsexport of the policy store, the export fails with the below error. We ran the XPSSweeper and see the below error. How can this be fixed?

D:\Program Files\CA\siteminder\xps\dd>XPSSweeper.exe -a
[XPSSweeper - XPS Version 12.8.0600.2649]
Log output: D:\Program Files\CA\siteminder/log/XPSSweeper.2022-04-12_135918.log
Initializing XPS, please wait...
Starting Integrity Analysis.

START ERROR REPORT*****************************************************

Integrity Errors: 3 errors detected

1) [sm-xpsxps-03491] IMSDirectory[BR_UserStore] has an attribute named 'AdditionalPropertiesLink' that points to an object of type 'IMSAdditionalPropertiesSet' that does not exist. (The unique ID of the IMSAdditionalPropertiesSet object being pointed to is CA.SM::[email protected]6a)
Object ID: CA.SM::[email protected]
Object Name: BR_UserStore
Object Path: IMSDirectory[BR_UserStore]
Object Description:
Fix Information: Automatic fix currently not available.

2) [sm-xpsxps-03491] IMSManagedObject[User] has an attribute named 'AdditionalPropertiesLink' that points to an object of type 'IMSAdditionalPropertiesSet' that does not exist. (The unique ID of the IMSAdditionalPropertiesSet object being pointed to is CA.SM::[email protected]f9)
Object ID: CA.SM::[email protected]
Object Name: User
Object Path: IMSDirectory[BR_UserStore] / IMSManagedObject[User]
Object Description:
Fix Information: Automatic fix currently not available.

3) [sm-xpsxps-03491] IMSEnvironment[BRIME] has an attribute named 'AdditionalPropertiesLink' that points to an object of type 'IMSAdditionalPropertiesSet' that does not exist. (The unique ID of the IMSAdditionalPropertiesSet object being pointed to is CA.SM::[email protected]ca)
Object ID: CA.SM::[email protected]
Object Name: BRIME
Object Path: IMSEnvironment[BRIME]
Object Description:
Fix Information: Automatic fix currently not available.

Cause

These issues usually occur when the link between the IMSDirectory object and the IMSAdditionalPropertiesSet object are broken.

A Siteminder XPS Object uses the following hierarchy:

XID = <Parent>.<ID>::<Object Class>[email protected]<RID>

Object: <Parent>.<ID>::<Object Class>.<AttributeName>

Parent = CA
ID = SM
ObjectClass = <ObjectClassName>
Aatribute = <AtributeName>
RID = Resource Identifier

XID: CA.SM::[email protected]

-------------------------------------------------

"CA.SM::IMSDirectory.AdditionalPropertiesLink" points to the RID of a 'CA.SM::IMSAdditionalPropertiesSet' object.

"CA.SM::IMSAdditionalPropertiesSet.Name points to the RID of the Object Class it is linked too.

CA.SM::[email protected]
-> CA.SM::IMSDirectory.AdditionalPropertiesLink = 20-db5f22c4-8b1f-4265-b162-5cd7c56f506a

CA.SM::[email protected]6a
-> CA.SM::IMSAdditionalPropertiesSet.Name = 32-dc18ffff-1ad0-4c29-b700-81814db0a2d1

Environment

[Siteminder]

Policy Server: r12.8.6
Policy Server OS: 

Policy Store: 
Policy Store OS: 

Access Gateway: 
Access Gateway OS:

 

Resolution

Use XPSexplorer to resolve the issue. 

1) Record the XID of the Object missing the 'IMSAdditionalPropertiesSet' link.

CA.SM::[email protected]

2) Search the 'IMSAdditionalPropertiesSet' for the Name = 32-dc18ffff-1ad0-4c29-b700-81814db0a2d1

3) Record the XID of the 'IMSAdditionalPropertiesSet' object:

CA.SM::[email protected]6a

4) Populate the "CA.SM::IMSDirectory.AdditionalPropertiesLink" with the RID of the 'IMSAdditionalPropertiesSet' object:

CA.SM::IMSDirectory.AdditionalPropertiesLink = 20-db5f22c4-8b1f-4265-b162-5cd7c56f506a