migrateIn fails with : Execution failed. Reason: Error writing object 'null'.: - "(name) must be unique" - errorType="UniqueKeyConflict"

Products

• CA API Gateway

Issue/Introduction

Exported from Source:  
GatewayMigrationUtility.bat migrateOut --defaultAction NewOrUpdate --argFile config\%Properties% --dest bundles\Migrate-export.xml --trustCertificate  --folderName "Migrate" 

Importing on target : 
GatewayMigrationUtility.bat migrateIn --argFile config\Gw2.properties --bundle bundles\Migrate-export.xml --results result\Migrate-export_results.txt

This import fails with the following error: Execution failed. Reason: Error writing object 'null'.:there is a !UniqueKeyConflict" with a stored password "migrate-service":

grep -i error /opt/SecureSpan/Gateway/node/default/var/logs/ssg_0_0.log

2024-06-18T21:32:19.397+0200 WARNING 314 com.l7tech.server.bundling.EntityBundleImporter: Error importing bundle on processing mapping 10 of 12. Mapping: EntityHeader. Name=migrate-service, id=a41e1d877b2739edited162d0187543e, description=null, type = SECURE_PASSWORD
2024-06-18T21:32:19.492+0200 INFO    314 com.l7tech.server.bundling.EntityBundleImporter: Error importing bundle (1/1)
2024-06-18T21:32:19.499+0200 INFO    314 com.l7tech.server.MessageProcessor: 3017: Policy evaluation for service Gateway REST Management Service [a20badb3cbc100ea9cd10531c561e2f1] resulted in status 601 (Error in Assertion Processing)
2024-06-18T21:32:19.499+0200 WARNING 314 com.l7tech.external.assertions.gatewaymanagement.server.ServerRESTGatewayManagementAssertion: 9050: Error processing management request: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
            <l7:Mapping action="NewOrUpdate" errorType="UniqueKeyConflict" srcId="a41e1d877b2739eedited162d0187543e" srcUri="https://<Gw1.example.com>:9443/restman/1.0/passwords/a41e1d877b2739eedited162d0187543e" type="SECURE_PASSWORD">
                    <l7:Property key="ErrorMessage">

-- No Results file is created with this use case.

Environment

CA API Gateway 11.0 CR02 

GatewayMigrationUtility-1.9.00-1659

Cause

The migrateIn is trying to create or update a user account on which the password was changed on the target system. The command fails because the user account already exists on the target system but with a different SECURE_PASSWORD.

Resolution

1. Edit the ssg log file and search by the Name=migrate-service and the id=a41e1d877b2739edited162d0187543e 

***  Check if has type="USER".  If it does, then this id  belongs to a user account from one of the identity providers.

Example from ssg log :

</l7:Mapping>
            <l7:Mapping action="NewOrUpdate" actionTaken="UpdatedExisting" srcId="a41e1d877b2739edited162d014c7a7c" 
srcUri="https://<Gw1.example.com>:9443/restman/1.0/identityProviders/0000000000000000fffffffffffffffe/users/a41e1d877b2739eedited162d014c7a7c" 
targetId="a41e1d877b2739eed338162d014c7a7c" 
targetUri="https://<Gw2.Domain.com>:9443/restman/1.0/identityProviders/0000000000000000fffffffffffffffe/users/a41e1d877b2739eedited162d014c7a7c" type="USER"/>
            <l7:Mapping action="NewOrUpdate" errorType="UniqueKeyConflict" srcId="a41e1d877b2739eedited162d0187543e" 
srcUri="https://<Gw1.example.com>:9443/restman/1.0/passwords/a41e1d877b2739eedited162d0187543e" type="SECURE_PASSWORD">
                <l7:Properties>
                    <l7:Property key="ErrorMessage">
                        <l7:StringValue>(name)  must be unique</l7:StringValue>
                    </l7:Property>
                </l7:Properties>
            </l7:Mapping>

2.  Delete the conflicting user account on the target system