Symantec Access Management

Tech Tip : CA Single Sign-On : Cannot disable Agent Discovery feature in Novell eDirectory Policy Store 

Mar 09, 2017 09:29 AM

Problem:

When trying to disable Agent Discovery feature using XPSConfig, we cannot disable it as we are getting the following error:

 

PARAMETER MENU*********************************CA.SM::$AgentDiscoveryEnabled

 

Name: AgentDiscoveryEnabled [CA.SM::$AgentDiscoveryEnabled]
Type: Numeric
Scope: Global
Export? yes
Report? yes
Remote Access: ReadWrite
Description: Indicates whether the Agent Discovery feature is set to Disabled|Auto Discover|Enabled: 0=Disabled, 1=Auto Discover, Greater than 1=Enabled.
License Type: None
*Default Value: 1

 

-------------------------------------------------------------------
C - Change value
Q - Quit
-------------------------------------------------------------------
Enter Option (C, or Q): C
Enter New Value:0
(ERROR) : [sm-xpsxps-01080] Error occurred during "Modify" for "xpsParameter=CA.SM::$AgentDiscoveryEnabled,ou=XPS,ou=policysvr4,ou=siteminder,ou=netegrity,o=PS", text: No such object
Database error - see logs.

Environment:

Policy Server : R12.52 SP1 Policy Store : Novell eDirectory 8.8 SP6

Workaround:

 

To workaround this issue, you can run XPSExplorer.

The CA.SM::$AgentDiscoveryEnabled object can be modified through the XPSExplorer tool with the following steps:

1) Login to Policy Server, and open a CLI.
2) Go to /bin folder under your Policy Server install path, and run the XPSExplorer tool.
3) On the main menu, type F and hit enter, in order to do an object search (as this is a parameter which we cannot browse).
4) When asking for the XID/RID to be found, type:
CA.SM::$AgentDiscoveryEnabled
and hit enter.
5) The object will be displayed and you would see the current parameters. Type W and hit enter to modify the object.
6) Type the number 1 for DefaultValue field and hit enter.
7) Type 0 and hit enter, as we will set this new value.
8) Type U and hit enter, to verify the value is set to 0.
9) Type Q and hit enter to return to the main menu, and type P to sync the changes with the Policy Server.
10) Type Q and hit enter again to exit the tool. Now, launch the XPSSweeper tool to ensure the data is synced.

 

Additional Information:

KD : TEC1343336

Statistics
0 Favorited
0 Views
0 Files
0 Shares
0 Downloads

Related Entries and Links

No Related Resource entered.