Hi I am patching my policy server from R1252CR1 to R1252Cr5 to get SessionDNA feature to work.
First step is to patch the policy server which was successful. I was able to login through CR1 adminui and apps were working fine with CR1 policy store. However I was asked to upgrade the policy store as well to get sessionDNA. So, I have created another AD LDS instance on Windows 2008Sp2 for a new policy store and ran the Policy Server config to initialize the policy store. Went well. With XPSExlorer I cd see the default objects such as Default AAS Trustedhost and:
1-CA.SM::Policy@04-cd5ddc55-3390-4dbe-ad05-880a7a2eb918
(I) Name : "SAML2FWSAttributeServicePolicy"
7-CA.SM::Policy@04-70d60545-5316-49c3-ac96-ae5c75b7efe8
(I) Name : "FederationWSSessionServicePolicy"
Defautl User Directories
1-CA.SM::UserDirectory@0e-3b0f4ccf-71f3-4968-b095-2b5a830c3244
(I) Name : "SAML2FederationCustomUserStore"
(C) Desc : "list of all the service providers"
4-CA.SM::UserDirectory@0e-08c6cadb-e30b-4e06-9e2e-b3d7a866fab8
(I) Name : "FederationWSCustomUserStore"
(C) Desc : "list of all the affiliates exposed as an
user store"
(C) Server : "smdspropc"
(C) Namespace : "Custom:"
However , I have trouble importing my old policy data into the new policy store. I have exported the data using:
XPSExport -xb devpol.xml. I would have modifies Policy store details after successful import. However my import fails with out informative error.
validateOnly command was successful:
[smuser@ bin]$ XPSImport devpol.xml -validateOnly
[XPSImport - XPS Version 12.52.0105.2113]
Log output: /opt/netegrity/siteminder/log/XPSImport.2016-08-11_170624.log
Initializing XPS, please wait...
(ERROR) : [sm-xpsxps-06810] Failed to initialize event handler library "/opt/netegrity/siteminder/lib/libEventIntroscopeprovider.so"
Please enter the passphrase to use for decrypting sensitive information:
Log Time Phase/Section #Objects %age Elapsed
-------- ------------------------ --------------- ----------- -----------------
17:06:30 Initializing
17:06:30 Reading 00:00:00
17:06:33 Reading 00:00:03 00:00:03
17:06:33 Analyzing 0/4099 00:00:03
17:06:33 Analyzing/Reference 157/4099 3% 00:00:03 00:00:00
17:06:36 Analyzing/Policy Data 410/4099 10% 00:00:06 00:00:03
17:06:37 Analyzing/Policy Data 820/4099 20% 00:00:07 00:00:04
17:06:38 Analyzing/Policy Data 1230/4099 30% 00:00:08 00:00:05
17:06:39 Analyzing/Policy Data 1640/4099 40% 00:00:09 00:00:06
17:06:40 Analyzing/Policy Data 2050/4099 50% 00:00:10 00:00:07
17:06:41 Analyzing/Policy Data 2460/4099 60% 00:00:11 00:00:08
17:06:42 Analyzing/Policy Data 2870/4099 70% 00:00:12 00:00:09
17:06:43 Analyzing/Policy Data 3280/4099 80% 00:00:13 00:00:10
17:06:44 Analyzing/Policy Data 3690/4099 90% 00:00:14 00:00:11
17:06:45 Analyzing/Policy Data 4096/4099 99% 00:00:15 00:00:12
17:06:45 Analyzing/Security Data 4099/4099 100% 00:00:15 00:00:12
17:06:46 Analyzing/Security Data 00:00:16 00:00:13
17:06:48 Validating 00:00:18
17:06:48 Validating/Uniqueness 00:00:18 00:00:00
17:06:49 Validating/Uniqueness 00:00:19 00:00:01
17:06:49 Validating/Policy Data 0/3947 00:00:19 00:00:01
17:06:50 Validating/Policy Data 395/3947 10% 00:00:20 00:00:02
*******: 1
17:06:52 Validating/Policy Data 790/3947 20% 00:00:22 00:00:04
17:06:53 Validating/Policy Data 1185/3947 30% 00:00:23 00:00:05
17:06:55 Validating/Policy Data 1579/3947 40% 00:00:25 00:00:07
17:06:56 Validating/Policy Data 1974/3947 50% 00:00:26 00:00:08
17:06:57 Validating/Policy Data 2369/3947 60% 00:00:27 00:00:09
*******: 1
17:06:59 Validating/Policy Data 2763/3947 70% 00:00:29 00:00:11
17:07:00 Validating/Policy Data 3158/3947 80% 00:00:30 00:00:12
17:07:01 Validating/Policy Data 3553/3947 90% 00:00:31 00:00:13
17:07:03 Validating/Policy Data 3947/3947 100% 00:00:33 00:00:15
17:07:03 Validating/Policy Data 3947/3947 100% 00:00:33 00:00:15
17:07:03 Complete 00:00:33
Total elapsed time:00:33
XPSIMport log goes into infinite priniting of :
[6291/-143472944][Thu Aug 11 2016 17:08:09][:0][doFilter][TRACE] Exit doFilter
[6291/-143472944][Thu Aug 11 2016 17:08:09][XPSLineNum.cpp:210][doFilter][TRACE] Enter doFilter
[6291/-143472944][Thu Aug 11 2016 17:08:09][:0][doFilter][TRACE] Exit doFilter
[6291/-143472944][Thu Aug 11 2016 17:08:09][XPSLineNum.cpp:210][doFilter][TRACE] Enter doFilter
[6291/-143472944][Thu Aug 11 2016 17:08:09][:0][doFilter][TRACE] Exit doFilter
[6291/-143472944][Thu Aug 11 2016 17:08:09][XPSLineNum.cpp:210][doFilter][TRACE] Enter doFilter
[6291/-143472944][Thu Aug 11 2016 17:08:09][:0][doFilter][TRACE] Exit doFilter
There is nothing wrong with .xml file as I was able to import it using same version of Policy server and Policy store in my sand box. Any help or insight would be appreciated.