Using XPSTools to manipulate objects in the policy store, you may want to delete some objects.
You have to delete each object individually and when deleting each object they are not refreshed from the list until you exit from the object menu.
SEARCH MENU ***************************************************** CA.SM::Admin
There are 4 objects in the result.
1-CA.SM::[email protected]
(I) Name : "siteminder"
(C) Rights : ManageAllDomains,ManageEverything,ManageObjects,ManageSecurity,ManageUsers,None,RegisterTrustedHosts
2-CA.SM::[email protected]
(I) Name : "SMWAMUI:XXXXXX.ca.com"
(C) Rights : ManageAllDomains,ManageSecurity,ManageUsers,None
3-CA.SM::[email protected]
(I) Name : "SMWAMUI:YYYYY.ca.com"
(C) Rights : ManageAllDomains,ManageSecurity,ManageUsers,None
4-CA.SM::[email protected]
(I) Name : "user8"
(C) Rights : None
* indicates that the object is in the XCart.
-------------------------------------------------------------------
+ - Add attribute to Sort (ascending)
- - Add attribute to Sort (descending)
B - Build Filter
X - Add all to XCart (using mode: DEFAULT)
Y - Remove all from XCart
M - Change XCart Add Mode
Q - Quit
-------------------------------------------------------------------
Enter Option (#,+,-,B,X,Y,M or Q): 4
OBJECT MENU ************************************************************ #1255
......................... Object Meta Data ........................
XID: CA.SM::[email protected]
Actual Class: CA.SM::Admin
Base Class: CA.SM::Admin
In Cache: no (2)
Created: 2016-01-26 09:39:36 GMT
Last Updated: 2016-01-26 09:39:36 GMT
By: siteminder (via GUI)
............ Attributes from CA.SM::Admin (Base Class) ............
01: AuthSchemeLink
02: Desc
03: DirectoryAuth = false
04: DomainsLink
05: Name = "user8"
06: Password = <***>
07: Rights = None
08: UserDirectoryLink
-------------------------------------------------------------------
M - Display Meta Data
J - Display Joined Attribute value
P - Polymorph object (2 classes)
B - Blank out an Attribute
G - Generate GUID
V - Validate record
U - Update record
D - Delete Object
A - List 8 Attributes
X - Add to XCart (use Mode: DEFAULT)
+ - Change XCart Mode
Q - Quit
=================================================
Enter Option (# or MJPBGVUDAX+Q): d
DELETE SUCCESS.
SEARCH MENU ***************************************************** CA.SM::Admin
There are 4 objects in the result.
1-CA.SM::[email protected]
(I) Name : "siteminder"
(C) Rights : ManageAllDomains,ManageEverything,ManageObjects,ManageSecurity,ManageUsers,None,RegisterTrustedHosts
2-CA.SM::[email protected]
(I) Name : "SMWAMUI:XXXXXX.ca.com"
(C) Rights : ManageAllDomains,ManageSecurity,ManageUsers,None
3-CA.SM::[email protected]
(I) Name : "SMWAMUI:YYYYY.ca.com"
(C) Rights : ManageAllDomains,ManageSecurity,ManageUsers,None
4-CA.SM::[email protected]
(I) Name : "user8"
(C) Rights : None
* indicates that the object is in the XCart.
-------------------------------------------------------------------
+ - Add attribute to Sort (ascending)
- - Add attribute to Sort (descending)
B - Build Filter
X - Add all to XCart (using mode: DEFAULT)
Y - Remove all from XCart
M - Change XCart Add Mode
Q - Quit
Enter Option (#,+,-,B,X,Y,M or Q): s
SEARCH MENU ***************************************************** CA.SM::Admin
There are 4 objects in the result.
1-CA.SM::[email protected]
(I) Name : "siteminder"
(C) Rights : ManageAllDomains,ManageEverything,ManageObjects,ManageSecurity,ManageUsers,None,RegisterTrustedHosts
2-CA.SM::[email protected]
(I) Name : "SMWAMUI:XXXXXX.ca.com"
(C) Rights : ManageAllDomains,ManageSecurity,ManageUsers,None
3-CA.SM::[email protected]
(I) Name : "SMWAMUI:YYYYY.ca.com"
(C) Rights : ManageAllDomains,ManageSecurity,ManageUsers,None
4-CA.SM::[email protected]
(I) Name : "user8"
(C) Rights : None
* indicates that the object is in the XCart.
-------------------------------------------------------------------
+ - Add attribute to Sort (ascending)
- - Add attribute to Sort (descending)
B - Build Filter
X - Add all to XCart (using mode: DEFAULT)
Y - Remove all from XCart
M - Change XCart Add Mode
Q - Quit
Enter Option (#,+,-,B,X,Y,M or Q): q
CLASS MENU **************************************************************** #2
Class: Admin [CA.SM::Admin]
Description: (not set)
SiteMinder Type: 18
Export Type: Add
Category: Dictionary (1)
Data Category: Object Store (2)
-------------------------------------------------------------------
A - List 8 Attributes
N - Create a New instance of this class
F - Find an object by XID or RID
S - Search objects
Q - Quit
-------------------------------------------------------------------
Enter Option (ANFSQ): s
SEARCH MENU ***************************************************** CA.SM::Admin
There are 3 objects in the result.
1-CA.SM::[email protected]
(I) Name : "siteminder"
(C) Rights : ManageAllDomains,ManageEverything,ManageObjects,ManageSecurity,ManageUsers,None,RegisterTrustedHosts
2-CA.SM::[email protected]
(I) Name : "SMWAMUI:XXXXXX.ca.com"
(C) Rights : ManageAllDomains,ManageSecurity,ManageUsers,None
3-CA.SM::[email protected]
(I) Name : "SMWAMUI:YYYYY.ca.com"
(C) Rights : ManageAllDomains,ManageSecurity,ManageUsers,None
* indicates that the object is in the XCart.
-------------------------------------------------------------------
+ - Add attribute to Sort (ascending)
- - Add attribute to Sort (descending)
B - Build Filter
X - Add all to XCart (using mode: DEFAULT)
Y - Remove all from XCart
M - Change XCart Add Mode
Q - Quit
-------------------------------------------------------------------
Enter Option (#,+,-,B,X,Y,M or Q):
Documentation on XPSTools:
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/administrating/policy-server-tools.html
https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/administrating/policy-server-tools/xpsexplorer.html