AdminUI does not reflect objects updated by XPSImport (AD LDS Policy Store)

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

When updating objects through XPSImport tool the changes are not reflected in AdminUI unless the Policy Server is restarted, although the objects were successfully updated. XPSImport finishes correctly and shows the objects as modified in logs, and we can see the modifications using XPSExplorer tool. Why don't we see the objects updated in the AdminUI and from the Policy Server cache?
 

Environment

Policy Server & AdminUI : R12.52 SP1 CR02
Policy Store : AD LDS 2008

Cause

This behavior occurs in Active Directory and AD LDS, and it's by Microsoft design. AD and AD LDS do not modify the timestamps of an object when there are only some attributes modified. This behavior provokes an issue in the AdminUI and Policy Server cache. When you run XPS tools, you will see the modifications applied in the object, but as the timestamps will not be modified on AD and AD LDS, the AdminUI and the Policy Server cache will not reflect that modification. You need to restart the Policy Server to get the modification applied in the Policy Server cache and thus in the AdminUI.

Resolution

We have changed the way we handle the timestamps in our code, to make the AdminUI and Policy Server cache are getting the updated objects in R12.52 SP1 CR06:
https://docops.ca.com/ca-single-sign-on/12-52-sp1/en/release-notes/cumulative-releases/defects-fixed-in-12-52-sp1-cr06
(DE157832)