XPSExport fails with IMSAdditionalProperties errors

Products

SITEMINDER CA Single Sign On Secure Proxy Server (SiteMinder) CA Identity Manager CA Identity Suite

Issue/Introduction

After IDM integration xpsexport fails.

After building a separate parallel SiteMinder/Policy store (12.8 SP6) and did the IDM integration (14.1) which created the necessary IDM environment(Policy domain etc) without any errors. We run the xpsexport of the policy store, the export fails with the below error. We ran the XPSSweeper and see the below error. How can this be fixed?

D:\Program Files\CA\siteminder\xps\dd>XPSSweeper.exe -a
[XPSSweeper - XPS Version 12.8.0600.2649]
Log output: D:\Program Files\CA\siteminder/log/XPSSweeper.2022-04-12_135918.log
Initializing XPS, please wait...
Starting Integrity Analysis.

START ERROR REPORT*****************************************************

Integrity Errors: 3 errors detected

1) [sm-xpsxps-03491] IMSDirectory[<UserStore>] has an attribute named 'AdditionalPropertiesLink' that points to an object of type 'IMSAdditionalPropertiesSet' that does not exist. (The unique ID of the IMSAdditionalPropertiesSet object being pointed to is CA.SM::IMSAdditionalPropertiesSet@20-XXXXXXX-XXXX-XXXX-XXXX-5cd7c56f506a)
Object ID: CA.SM::IMSDirectory@32-XXXXXXX-XXXX-XXXX-XXXX-81814db0a2d1
Object Name: <UserStore>
Object Path: IMSDirectory[<UserStore>]
Object Description:
Fix Information: Automatic fix currently not available.

2) [sm-xpsxps-03491] IMSManagedObject[User] has an attribute named 'AdditionalPropertiesLink' that points to an object of type 'IMSAdditionalPropertiesSet' that does not exist. (The unique ID of the IMSAdditionalPropertiesSet object being pointed to is CA.SM::IMSAdditionalPropertiesSet@20-XXXXXXX-XXXX-XXXX-XXXX-b3ab507038f9)
Object ID: CA.SM::IMSManagedObject@33-XXXXXXX-XXXX-XXXX-XXXX-f810d936cfb3
Object Name: User
Object Path: IMSDirectory[<UserStore>] / IMSManagedObject[User]
Object Description:
Fix Information: Automatic fix currently not available.

3) [sm-xpsxps-03491] IMSEnvironment[<EnvironmentName>] has an attribute named 'AdditionalPropertiesLink' that points to an object of type 'IMSAdditionalPropertiesSet' that does not exist. (The unique ID of the IMSAdditionalPropertiesSet object being pointed to is CA.SM::IMSAdditionalPropertiesSet@20-XXXXXXX-XXXX-XXXX-XXXX-a614daef7dca)
Object ID: CA.SM::IMSEnvironment@35-XXXXXXX-XXXX-XXXX-XXXX-d56edaba1ef6
Object Name: <EnvironmentName>
Object Path: IMSEnvironment[<EnvironmentName>]
Object Description:
Fix Information: Automatic fix currently not available.

Environment

[Siteminder]

Policy Server: r12.8.6
Policy Server OS:

Policy Store:
Policy Store OS:

Access Gateway:
Access Gateway OS:

Cause

These issues usually occur when the link between the IMSDirectory object and the IMSAdditionalPropertiesSet object are broken.

A Siteminder XPS Object uses the following hierarchy:

XID = <Parent>.<ID>::<Object Class>.@<RID>

Object: <Parent>.<ID>::<Object Class>.<AttributeName>

Parent = CA
ID = SM
ObjectClass = <ObjectClassName>
Aatribute = <AtributeName>
RID = Resource Identifier

XID: CA.SM::IMSDirectory@32-XXXXXXX-XXXX-XXXX-XXXX-81814db0a2d1

-------------------------------------------------

"CA.SM::IMSDirectory.AdditionalPropertiesLink" points to the RID of a 'CA.SM::IMSAdditionalPropertiesSet' object.

"CA.SM::IMSAdditionalPropertiesSet.Name points to the RID of the Object Class it is linked too.

CA.SM::IMSDirectory@32-XXXXXXX-XXXX-XXXX-XXXX-81814db0a2d1
-> CA.SM::IMSDirectory.AdditionalPropertiesLink = 20-XXXXXXX-XXXX-XXXX-XXXX-5cd7c56f506a

CA.SM::IMSAdditionalPropertiesSet@20-XXXXXXX-XXXX-XXXX-XXXX-5cd7c56f506a
-> CA.SM::IMSAdditionalPropertiesSet.Name = 32-XXXXXXX-XXXX-XXXX-XXXX-81814db0a2d1

Resolution

Use XPSexplorer to resolve the issue.

1) Record the XID of the Object missing the 'IMSAdditionalPropertiesSet' link.

CA.SM::IMSDirectory@32-XXXXXXX-XXXX-XXXX-XXXX-81814db0a2d1

2) Search the 'IMSAdditionalPropertiesSet' for the Name = 32-XXXXXXX-XXXX-XXXX-XXXX-81814db0a2d1

3) Record the XID of the 'IMSAdditionalPropertiesSet' object:

CA.SM::IMSAdditionalPropertiesSet@20-XXXXXXX-XXXX-XXXX-XXXX-b162-5cd7c56f506a

4) Populate the "CA.SM::IMSDirectory.AdditionalPropertiesLink" with the RID of the 'IMSAdditionalPropertiesSet' object:

CA.SM::IMSDirectory.AdditionalPropertiesLink = 20-XXXXXXX-XXXX-XXXX-XXXX-5cd7c56f506a