Symantec Access Management

  • Private Community

  • 1.  SM Policystore import Error.

    Posted Apr 09, 2013 11:49 AM
    Hi,

    I am doing upgrading siteminder r6 to r12.i installed policyserver R12.I am configuring R12 policyserver to R6 policystore.

    iam using ./smobjimport import the r6 backup.smdif file.. I am getting error.

    Not saving AgentKey object 1b-000130ac-700f-1023-b008-79b9ac19d0a4. Agent Key imports has been turned off.
    Not saving AgentKey object 1b-000130b0-700f-1023-b008-79b9ac19d0a4. Agent Key imports has been turned off.
    -> Retrying failed objects ...
    Potential Error: Cannot overwrite.

    Please give me u r suggestions for resolve this error.

    Thanks & Regards,
    Venkat.


  • 2.  RE: SM Policystore import Error.

    Posted Apr 09, 2013 01:58 PM
    If you are configuring the r12 policy server to read the 6.x policy store them why do you need to import the policies?

    Provide the full smobjimport command you are using. It could be as simple as not using the -f switch to force overwrite the keys during import.

    Is your keystore stored in the policy store or do you have it separated out?

    Also if there are still r6 policy servers being used by agents during 12.x upgrade I suggest you disable agent key generation on all 12.x policy servers. I have seen key corruption if not doing this.

    HTH

    Jack Saunders
    CA Technologies
    Senior Services Architect


  • 3.  RE: SM Policystore import Error.

    Posted Apr 10, 2013 01:00 AM
    [font=Verdana][size=12][size][font]

    Hi,

    Thanks for given the reply. I am using the smobjectimport command.

    ./smobjimport -i/u01/CA/siteminder/sm111enc20130327.smdif -dsiteminder -wpwd.

    I am using policystore only.I am not using sperate key store .


  • 4.  RE: SM Policystore import Error.

    Posted Apr 10, 2013 11:57 AM
    Add the -f to force overwrite.

    ./smobjimport -i/u01/CA/siteminder/sm111enc20130327.smdif -dsiteminder -wpwd -f


  • 5.  RE: SM Policystore import Error.
    Best Answer

    Posted Apr 22, 2013 08:46 AM
    Hi Bvsnraju

    In 12.5 keys are handled through a different means.

    Please see the documentationfor full details, however your policy store export should nto include keys and key store export shoudl be handled through the key tool.

    https://support.ca.com/cadocs/0/CA%20SiteMinder%20r12%205-ENU/Bookshelf.html

    Sincerely,
    Josh Perlmutter
    CA Technologies SiteMinder Support
    SiteMinder Team Line: 800-CALL-CAI (225-5224)
    My Direct Line: 508-628-8808
    My Working Hours: 8 AM to 4 PM US Eastern Time
    Center Hours: 8 AM to 8 PM US Eastern Time