During data migration to new Policy Store, getting this error: LDAP Error creating new IMS directory object

Products

• SITEMINDER
• CA Identity Manager

Issue/Introduction

When importing the data, the XPSImport log shows these messages:

[SmObjLDAP_IMSDirectory6.cpp:898][ERROR][sm-log-00000] LDAP error code '16' Message 'No such attribute'
[SmObjProvider.cpp:188][ERROR][sm-Server-03090] Policy store failed operation 'Save'  for object type 'IMS6Directory' . LDAP Error creating new IMS directory object
[SmAdapterObject.cpp:1264][CSmAdapterObject::Create][ERROR][sm-xadobj-00110] CA.SM::IMSDirectory@<OID>: Create failed. (Unknown Failure)
[SmStore.cpp:338][CSmStore::Create][ERROR][sm-xobsm-00960] Failed to create object. (CA.SM::IMSDirectory@<OID>(AD-NAME))
[XPSIO.cpp:1735][CXPSIO::CreateObject][ERROR][sm-xpsxps-00540] Previous error occurred on object "CA.SM::IMSDirectory@<OID>(AD-NAME)"
[XPSPolicyData.cpp:1421][CXPSPolicyData::CommitOrTestRollback][ERROR][sm-xpsxps-00740] XPS Transaction COMMIT has failed.
[XPSImport.cpp:982][CXPSImport::DoImport][FATAL][sm-xpsxps-05810] Import failed.
[XPSImport.cpp:520][XPSImport][FATAL][sm-xpsxps-05810] Import failed.

The existing environment is a SiteMinder Identity Manager integration.

 

Environment

Policy Server 12.8.0800.2892

Windows 2022

Policy Store is ADAM

Cause

The key error message is this one:

Policy store failed operation 'Save'  for object type 'IMS6Directory' . LDAP Error creating new IMS directory object

We can see there is a problem with the schema being incomplete.

Resolution

There are 2 specific steps for preparing the Policy Store for the Identity Manager integration.

1) Adding the Data Definitions - XPSDDInstall IdmSmObjects.xdd

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/upgrading/parallel-upgrade/step-3-replicate-the-policy-store.html

2) Updating the Schema - adam_ims8.ldif 

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-manager/14-5/configuring/siteminder-integration/integrate-siteminder-with-identity-manager/configure-the-siteminder-policy-store.html

 

After performing these two steps, the data migration was successful