Symantec Access Management

We are upgrading the policy store as per the document and seeing the below errors, any info on solving will be greatly helpful

How to Upgrade an r12.x Policy Store - CA SiteMinder® - 12.52 SP1 - CA Wiki

PS E:\Program Files\CA\siteminder\db> XPSImport smpolicy-secure.xml -npass

[XPSImport - XPS Version 12.52.0100.499]

Log output: E:\Program Files\CA\siteminder/log/XPSImport.2015-03-09_212359.log

Initializing XPS, please wait...

(ERROR) : [sm-xpsxps-01080] Error occurred during "SearchExt" for "(&(xpsNumber=*)(!(xpsTombstone=*)))", text: Timed out

(WARN) : [sm-xpsxps-01040] No policy data found

Log Time Phase/Section                #Objects       %age        Elapsed

-------- ------------------------ --------------- -----------  -----------------

21:24:54 Initializing

21:24:54 Reading                                               00:00:00

21:24:54 Reading                                               00:00:00  00:00:00

21:24:54 Analyzing                      0/294                  00:00:00

21:24:54 Analyzing/Reference           11/294         3%       00:00:00  00:00:00

(ERROR) : [sm-xpsxps-02242] Object validation failed, class not present in data dictionary. XID: "CA.SM::AgentConfig@21-

eaf30a01-e8f9-11d5-ba50-0010a4911ff4", Class: "CA.SM::AgentConfig" (Line:42)

(FATAL) : [sm-xpsxps-01770] An error was encountered during import of policy data.

21:24:54 Complete                                              00:00:00

(FATAL) : [sm-xpsxps-05810] Import failed.

I have used the KB Solution also but no luck

http://www.ca.com/us/support/ca-support-online/product-content/knowledgebase-articles/tec510841.aspx

Ashok ashokk0987

A bit more info on the below bullets should get us started on what possible scope to look at.

1. May we know from which version are upgrade i.e. what is the current version?
2. It looks like we are missing the Schema OR the Data Definition. Is it also possible to list down the command / steps were executed.
3. We also see smpolicy-secure.xml is being used? May I ask was the initial / current version store also build using the smpolicy-secure* objects.

Regards

Hubert

Hi Hubert

1. Current version is R12SP3CR01 upgrading to R12.52SP1

2. Steps we followed is as per the upgrade document

3. Policy Store is also R12SP3CR01

Let me know if need more info

How to Upgrade an r12.x Policy Store - CA SiteMinder® - 12.52 SP1 - CA Wiki

thanks

Ashok

Ashok ashokk0987

Thank You for the update.

Kindly confirm the Version / Type of Store which is being used as Policy Store.

Review this thread. SM Admin UI error. Make sure if it is SunOne / Oracle Directory, the store has been reindexed.

There are 2 errors in the snippet that has been provided. The 1st error looks to be search failing due to timeout and if the PStore is SunOne / Oracle Directory, then indexing should get you fixed up. The 2nd error looks like the XPSDDInstall did not work correctly, do we have logs available from the XPSDDInstall execution?

Regards

Hubert

policy store is sun one ldap 11g

Thank You Ashok ashokk0987

Kindly reindex the Policy Store and then test. Few of the reindexing commands are listed here and also steps for large Policy Store. Be cautioned, to take backups before performing these steps.

https://wiki.ca.com/display/sm1252sp1/How+to+Configure+an+Oracle+Directory+Server+as+a+Policy+Store.

I would recommend using these step to being with,

• dsadm stop Instance_Path
• dsadm reindex -bl -t "Sort xpsSortKey" Instance_Path policysvr4
• dsadm reindex -bl -t "Sort modifyTimestamp" Instance_Path policysvr4
• dsadm reindex -b -t xpsNumber -t xpsValue -t xpsSortKey -t xpsCategory –t xpsParameter -t xpsIndexedObject -t xpsTombstone instance_path policysvr4
• dsadm start Instance_Path

Now Run the XPSImport.

Regards

Hubert

Thank you Hubert;