Common questions on using smobjexport and XPSExport

Discussion created by masvi10 Employee on Jul 26, 2011
Latest reply on Dec 19, 2014 by rminnj

Tuesday Tip by Vijay Masurkar, Principal Support Engineer, for 7-26-2011

This brief note assumes that you’ve some experience with installation and/or configuration of the Site Minder r6.x and R12 environments.

Q1: In regards to the use of smobjexport & smobjimport commands and when to use XPSExport & XPSImport commands, does it make any difference which command should be used for exporting policy store data?

A1: Yes, it does. When there’s XPS added to (pre-R12) legacy schema (or when there is pure XPS, as in R12, you need to use XPSExport. And, if the exported file has XPS, XPSImport is needed for import. Also, the following is recommended. For upgrade from version r5.5 to r6.x of the policy store data, use smobjexport/import. For upgrade from r6.x to R12.x, use XPSExport/Import after importing the data definitions in r6.x with the XDDinstall commands.

Q2: Is the use of XPSSweeper in the context of above commands ever required if only one policy store is in use (i.e. when multiple policy servers pointing to a single policy store)?

A2: Yes, certainly; but note that it is also useful for synching after the use of legacy and current tools within one store.

Q3: It appears that smobjexport tool exports the entire policy store (in smdif format) and XPSExport will do the same exact thing in XML format.

A3: Yes, but there is a difference. There is another configuration specific file created with smobjexport; but, with XPSExport, only one “.xml” file is created which may have dependency information based on the exported policy. That’s why one needs to be careful how to use that information for the target environment. So, when moving SiteMinder policies from one environment to another, either as part of an upgrade or a policy migration, some objects that are environment–specific are included in the export file. Examples of these objects include:

-- Trusted hosts
-- HCO Policy Server settings
-- Authentication scheme URLs
-- Password services redirects
-- Redirect responses

For more details, refer to the CA Site Minder R12 Policy Server Installation, Administration and Upgrade Guides. When you’re ready to plan an upgrade or migration of an environment, it is recommended that you refer to the Upgrade Guide first to get an overview, and, subsequently, refer to the Installation and Administration Guides for details on any specific topics.