Symantec Access Management

Hi,

I have a new install of SMPS 12.52 SP1.

I'm trying to import one single agent from another environment.

I get this trace. Can anyone point me to what could be wrong?

[XPSImport - XPS Version 12.52.0100.499]

Log output: /opt/ca/siteminder/log/XPSImport.2015-04-22_124516.log

Initializing XPS, please wait...

(INFO) : [sm-xpsxps-00120] Initializing XPS Version 12.52.0100.499

(INFO) : [sm-xpsxps-01160] LDAP Provider Info String = CA Directory

(INFO) : [sm-xpsxps-01120] LDAP Provider Version: supportedLdapVersion = 3

(INFO) : [sm-xpsxps-01120] LDAP Provider Version: dxServerVersion = DXserver r12.0 SP14 (build 9119) Linux/DXgrid 64-Bit

(INFO) : [sm-xpsxps-01160] LDAP Provider Info String = CA Directory

(INFO) : [sm-xpsxps-00560] Database Transactions are 0.

(INFO) : [sm-xpsxps-00300] 1 Parameter(s) loaded from Policy Store, 1 total.

(INFO) : [sm-xpsxps-00330] Caching Policy Data...

(INFO) : [sm-xpsxps-00310] 3657 object(s) loaded from the Policy Store.

(INFO) : [sm-xpsxps-00430] Policy Store ID is "000af6ce-48ad-1535-88ad-002a0ac2906d".

(INFO) : [sm-xpsxps-06870] XPS Auditing is enabled.

(INFO) : [sm-xpsxps-03460] No validation warnings will be logged (controlled by CA.XPS::$LogValidationWarnings).

(INFO) : [sm-xpsxps-00150] XPS Initialized. (328, 0, 0)

(INFO) : [sm-xpsxps-00150] XPS Initialized.

(INFO) : [sm-xobfed-02577] Successfully loaded smobjadapter.

(INFO) : [sm-xpsxps-05950] Import Operation is entering the "Queued" phase.

(INFO) : [sm-xpsxps-05950] Import Operation is entering the "Initializing" phase.

Log Time Phase/Section                #Objects       %age        Elapsed

-------- ------------------------ --------------- -----------  -----------------

12:45:19 Initializing

(INFO) : [sm-xpsxps-05950] Import Operation is entering the "Reading" phase.

12:45:19 Reading                                               00:00:00

12:45:19 Reading                                               00:00:00  00:00:00

(INFO) : [sm-xpsxps-05950] Import Operation is entering the "Analyzing" phase.

12:45:19 Analyzing                      0/2                    00:00:00

12:45:19 Analyzing/Reference            1/2          50%       00:00:00  00:00:00

12:45:19 Analyzing/Policy Data          2/2         100%       00:00:00  00:00:00

(INFO) : [sm-xpsxps-05950] Import Operation is entering the "Validating" phase.

12:45:19 Validating                                            00:00:00

12:45:19 Validating/Uniqueness                                 00:00:00  00:00:00

(WARN) : [sm-xpsxps-03220] 000240e9-4c2d-1535-8b94-002b0ac290bd: Duplicate value for CA.XPS::Administrator.UserPath="SM-ADMIN-DIRECTORY": 000240e9-4c2d-1535-8b94-002b0ac290bd,000ca08c-4c0f-1535-8b2d-002a0ac2906d.

(WARN) : [sm-xpsxps-03220] 000240e9-4c2d-1535-8b94-002b0ac290bd: Duplicate value for CA.XPS::Administrator.Name="SiteMinder Administrative UI Directory User": 000240e9-4c2d-1535-8b94-002b0ac290bd,000ca08c-4c0f-1535-8b2d-002a0ac2906d.

12:45:19 Validating/Uniqueness                                 00:00:00  00:00:00

12:45:19 Validating/Policy Data         0/6                    00:00:00  00:00:00

12:45:19 Validating/Policy Data         5/6          83%       00:00:00  00:00:00

12:45:19 Validating/Policy Data         6/6         100%       00:00:00  00:00:00

12:45:19 Validating/Policy Data         6/6         100%       00:00:00  00:00:00

(INFO) : [sm-xpsxps-05950] Import Operation is entering the "Complete" phase.

(INFO) : [sm-xpsxps-05870] 1 policy data object(s) imported.

(INFO) : [sm-xpsxps-05880] 0 configuration parameter(s) imported.

(INFO) : [sm-xpsxps-05890] 0 security object(s) imported.

12:45:19 Complete                                              00:00:00

(INFO) : [sm-xpsxps-05820] Import complete.

(INFO) : [sm-xpsxps-07535] Policy server notified.

(FATAL) : [sm-xpsxps-05810] Import failed.

(INFO) : [sm-xpsxps-00160] Shutting down XPS...

(INFO) : [sm-xpsxps-00170] Shutting down XPS housekeeping...

(INFO) : [sm-xpsxps-00160] Shutting down XPS...

(INFO) : [sm-xpsxps-00210] Releasing SiteMinder object store connection to XPS...

(INFO) : [sm-xpsxps-00180] Releasing XPS configuration cache...

(INFO) : [sm-xpsxps-00240] XPS Shutdown Complete.

Regards,

Anand.

To add.

I had this PS pointed to a policy store (CA Directory)

Then i had to uninstall and install CA Directory again. Then i pointed this PS to the new CA Directory as the policy store.

I'm guessing this is why it says there is a duplicate value. I'm trying very hard to locate this using XPSExplorer as to where the class CA.XPS::Administrator exists. Can anyone point me to the correct spot?

Update.

I finally found the place where it says there is a duplicate. But I'm not able to remove it.

I run XPSDictionary and select list security categories, select 14 for admin administration, 2 for CA.XPS::Administrator then S to list all objects in this category.

After this, any object number i enter, I get "Segmentation Fault. Core dumped". I'm kinda stumped at this point how to resolve this error.

Any ideas?

Regards,

Anand.

Anand anand3g

Could you be more clear on what is being imported? Are you importing default objects OR Are you importing some Policy Data from elsewhere?

I see that your PStore is new? If it is new have you already run the XPSImport command for importing default objects. Then on top of that you are running another XPSImport with Policy Data exported from another PStore.

Please confirm. My focus is why are we getting a DUPLICATE value in the first place. Do we understand why is there a DUPLICATE value?

Regards

Hubert

• Are you able to login to Admin UI ?
• Can you check from your XPSSecurity tool if you can load all Administrators ? (XPSSecurity --> A )
• Best is if you could delete the all Admin UI related administrator including "CA.XPS::Administrator.Name="SiteMinder Administrative UI Directory User" and re-register Admin UI.

Ujwol Thank you. Spot on.

I used XPSSecurity and deleted the superflous administrator. Then I was able to import without issues.

Thanks HubertDennis for your help as always!

I think the duplicate is because i changed policy stores after installation. I did import the default objects both times.

Thanks all for your help!

Regards,

Anand.

No worries.

Could you please mark this thread as answered if your problem is now resolved ?

Cheers,

Ujwol