Siteminder: Identifying creation/update of Policy objects using Policy export file.
search cancel

Siteminder: Identifying creation/update of Policy objects using Policy export file.

book

Article ID: 31719

calendar_today

Updated On:

Products

CA Single Sign On Secure Proxy Server (SiteMinder) CA Single Sign On SOA Security Manager (SiteMinder) CA Single Sign-On

Issue/Introduction

Is there a way to identify how a policy object was created or last updated from the policy export file?

 

 

 

Environment

Siteminder Release: 12.8.x

Resolution

This KB article illustrates the details logged in the policy export file and highlights the approach which the policy object was created or last updated.

 

Policy Object’s attributes:

·       Object Class – Policy object type

·       Xid – ID associated with the policy object

·       CreatedDateTime Policy object creation date and time

·       ModifiedDateTime Policy object last modification date and time

·       UpdatedBy Siteminder administrator/ Siteminder feature that created/ last updated the policy object

·       UpdateMethod Defines the approach used to update the policy object

·       ExportType Defines the import mode - Add, Replace, Overlay or Default options

 

For granular exports, the export type is specified explicitly on the command line or is retrieved from the data dictionary. For dump exports, the export type attribute for all objects is Replace. A load import of the policy data overwrites all of the policy data in the policy store.

 

Policy Object created via WAM UI:

 The following object was created via WAM UI with ‘siteminder’ admin account:

 

<Object Class="CA.SM::AgentConfig" Xid="CA.SM::AgentConfig@21-de2ed58f-123b-4ab6-ab22-6d5c20c6e60f" CreatedDateTime="2015-07-08T16:01:38" ModifiedDateTime="2015-07-09T08:18:49"UpdatedBy="siteminder" UpdateMethod="GUI" ExportType="Replace">

 

Policy Object created via policy import:

 The following object was created via XPSImport:

 

<Object class="CA.SM::HostConfig" Xid="CA.SM::HostConfig@21-eaf30a00-e8f9-11d5-ba50-0010a4911ff4" CreatedDateTime="2015-07-08T13:31:00" ModifiedDateTime="2015-07-08T13:31:00" UpdatedBy="XPSDictionary::Import" UpdateMethod="Internal" ExportType="Replace">

 

 

Policy Object created via XPSRegClient:

 The following object was created via XPSRegClient:

 

<Object Class="CA.SM::TrustedHost" Xid="CA.SM::TrustedHost@24-xpsagent-fwrk-4385-9985-391X559CB120" CreatedDateTime="2015-07-08T15:12:00" ModifiedDateTime="2015-07-08T15:12:00"UpdatedBy="RegisterService" UpdateMethod="Internal" ExportType="Replace">

 

Policy Object created via trusted host registration:

The following object was created via smRegHost:

 

<Object Class="CA.SM::TrustedHost" Xid="CA.SM::TrustedHost@24-3e9a245d-3051-48a0-b6ba-e5e44d9e44c0" CreatedDateTime="2015-07-09T11:19:30" ModifiedDateTime="2015-07-09T11:19:30"UpdatedBy="os:KELLY/psaccount" UpdateMethod="Internal" ExportType="Replace">

 

Policy Object created via XPSExplorer:

 The following object was created via XPSExplorer:

 

<Object Class="CA.SM::Agent" Xid="CA.SM::Agent@01-20dab8d6-a5ae-46c9-8b4e-665c1cc82334" CreatedDateTime="2015-09-11T15:46:37" ModifiedDateTime="2015-09-11T15:46:37"UpdatedBy="os:KELLY/Administrator" UpdateMethod="Explorer" ExportType="Replace">

 

Policy Object created automatically when Federation Partnership is created:

 The following object was created by Policy Server automatically:

 

<Object Class="CA.SM::Realm" Xid="CA.SM::Realm@06-1f7f8d03-c3cf-4eb3-a861-8398a30290ea" CreatedDateTime="2015-07-15T10:02:15" ModifiedDateTime="2015-07-15T10:02:15" UpdatedBy="PRODUCT: CA.FED LIBRARY: FedObjects" UpdateMethod="Internal">

 

Policy Object updated by XPSSweeper:

 The following object was updated via XPSSweeper:

 

 <Object Class="CA.SM::UserPolicy" Xid="CA.SM::UserPolicy@0f-6f46c02c-82d6-4c10-86a5-1861c96452cd" CreatedDateTime="2015-07-15T09:33:51" ModifiedDateTime="2015-09-02T16:09:30"UpdatedBy="XPSSweeper" UpdateMethod="Internal">

 

Additional Information

For details in exporting the policy store data into a policy export file, please refer to the Policy Server Administration Guide, lookup Policy Server Tools >> XPSExport section.