Determining the Policy Store version

Products

• SITEMINDER
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

How can the version of a Policy Store be determined with certainty?

 

Environment

Release : 12.8.3 through 12.8.7

 

Resolution

From 12.8.4 to 12.8.7 there are default data differences between each release, so the Policy Stores can be searched for the presence of a specific object.

SP5 adds:

  AuthorizationCacheTimeout

This is a new ACO parameter added to the ApacheDefaultSettings ACO template.

If this parameter exists in this template, the Policy Store is at least version 12.8.5.

SP6 adds:

  VIP Authentication Hub Template

This is a new Authentication Scheme template that is not present in previous releases.

If the Policy Store contains this object, the store is at least 12.8.6.

SP7 adds:

  AMRType

This is a new type of policy object that will not exist in Policy Store version prior to 12.8.7.

If the Policy Store contains this object, the Policy Store is at least 12.8.7.

The versions 12.8.3 and 12.8.4 have the identical default data, so the differences are only within the data definitions.

The version 12.8.4 adds the ApplicationURL attribute to federation SP partnerships:

  [Attribute]
  PARENT=CA.FED::SPPartnership
  Name=ApplicationURL
  DataType=String
  MinElements=0
  MaxElements=1

The best ways to check for this is either browsing the directory via a tool like JExplorer (or equivalent client tool if the store is ODBC), or using XPSExplorer to verify whether this attribute exists in one of the SPPartnership objects.