CloseRelatedConnectionOnFailure Failed to execute ModifyUserDirectoryEvent when User Directory creation or change in AdminUI

Products

• SITEMINDER
• CA Single Sign-On

Issue/Introduction

Running AdminUI, when trying to change a secure connection of the User Directory, the modification fails and the browser gets the error:

Error: Task failed.
Fatal: Failed to execute ModifyUserDirectoryEvent. ERROR MESSAGE: SmApiWrappedException:Class CA.SM::UserDirectory does not have attribute CA::UserDirectory.CloseRelatedConnectionOnFailure

The same error occured when creating or changing a User Diretory.

Environment

Policy Server 12.8SP8 on RedHat;
AdminUI 12.8SP8 on RedHat;
  Policy Server and AdminUI run on the same machine;
Policy Store on CA Directory 14.1SP6;

Cause

This issue occurred as the Policy Store data structure lacked definition.

This object structure doesn't exist in the Policy Store data:

CA::UserDirectory.CloseRelatedConnectionOnFailure

To work fine, when upgrading the Policy Server and the AdminUI, the Policy Store data definition should be upgraded too (1).

Resolution

To fix this issue, ensure the Policy Store data definitions are at the level of the Policy Server and AdminUI.

1. Take a full backup of the Policy Store data; a clone of the Policy Store instance to another one can also be done, that can be fixed and used the new Policy Store instance;
2. Run the following command against the Policy Store data which will be upgraded:
   
   # XPSSweeper -a -changeset mychangesetfile.txt -report myreportfile.txt
   
   The command should report no errors;
   
   If there are errors, correct them before proceeding with the upgrade;
   
   
3. Stop the AdminUI and the Policy Server;
4. Follow the steps to upgrade the Policy Store (1):
   
   a. Ensure for the Key Store, it uses the Policy Store:
   
       "Use Policy Store database" should be checked;
   
   b. Run the command
   
       # XPSDDInstall SmMaster.xdd
   
   c. If the environment is integrated with Symantec Identity Manager, also run the following command.
   
       If not, you can skip this command.
   
       Go to {siteminder_home}\db
      
       Run the command:
   
       # XPSDDInstall IdmSmObjects.xdd
   
   d. Run the command
       
       # XPSImport smpolicy.xml -npass
   
   e. Run the command
   
       # XPSImport default-fedobjects-config.xml -npass
   
   
5. Start the Policy Server and the AdminUI;
6. Confirm that you can now change an existing User Directory Secure Connection by checking or unchecking it.

Additional Information

1. Upgrade Policy Store