Symantec Access Management

  • 1.  export policies

    Posted Aug 15, 2017 05:48 PM

    Hi There,

    Am looking to export all policy objects(agent,hco,aco,directory objects,Authschems,trustedhosts,Domains) in a bunch for backup purpose before i perform any change to policy domains .So for I have planned to use the below command,please correct me if this below one is correct or not.SM version 12.7.

     

     XPSExport outputexport.xml -xb –npass -vT

     

    Thanks

    p



  • 2.  Re: export policies

    Posted Aug 15, 2017 06:42 PM

    Yes, thats the correct command for full backup.



  • 3.  Re: export policies

    Posted Aug 15, 2017 07:08 PM

    But i am getting this bottom below error which in bold,while executing the below command

    [root@lab policyImport_17082017]# XPSExport filename_date.xml -xb –npass -vT
    [XPSExport - XPS Version 12.7.0000.1194]
    Log output: /opt/CA/siteminder/log/XPSExport.2017-08-15_165448.log
    (FATAL) : [sm-xpsxps-04090] Unknown argument "–npass".



  • 4.  Re: export policies

    Broadcom Employee
    Posted Aug 15, 2017 08:00 PM

    try : xpsexport -xb backup.xml -npass



  • 5.  Re: export policies

    Posted Aug 15, 2017 10:06 PM

    Still same issue.

    XPSExport -xb backup.xml –npass
    (FATAL) : [sm-xpsxps-04090] Unknown argument "–npass".



  • 6.  Re: export policies

    Broadcom Employee
    Posted Aug 16, 2017 12:12 AM

    Hmm, that is a bit odd.  I am using PS R12.7 as well,  

     

    • It may be good to confirm the exact version of the policy server that you are running (the smps.log will have it).  

     

    There was a small time when xpsexport was new, (I think that was R12.51 timeframe) when -npass was not available, but it was added pretty quickly and not removed as far as I know.   I do know there is balance of security risk exposing passwords, vs usability of recovering of passwords, that this parameter keeps getting asked about.

     

    • If you just put in : XPSExport it should list all the valid options - - it would be interesting to see if you've got the npass in your list of options.  Here was the list I have:

    Syntax:

    XPSExport <Output File> <options> <general options>

    <options>:
    -xb ::= Export objects (backup).
    -xc ::= Export configuration objects.
    -xe ::= Export object types that are related to the
    execution environment.
    -xi ::= Export object types that were initially installed.
    -xp ::= Export object types that are related to policies.
    -xs ::= Export security objects.
    -xf <file> ::= Export objects specified in <file>.
    -xm <object> ::= Export objects specified in an ExtractManifest.
    -xo <object> ::= Export specified object.
    -xo-d <object> ::= Export specified object (default method from data
    dictionary).
    -xo-a <object> ::= Export specified object (method=add).
    -xo-r <object> ::= Export specified object (method=replace).
    -xo-o <object> ::= Export specified object (method=overlay).
    -x? ::= Specify objects to be exported interactively.
    -ma ::= Set default method to Add for objects appearing
    after this option on the command line.
    -mr ::= Set default method to Replace for objects
    appearing after this option on the command line.
    -mo ::= Set default method to Overlay for objects
    appearing after this option on the command line.
    -mm ::= Set default method to Merge for objects appearing
    after this option on the command line.
    -md ::= Restore default method to dictionary default for
    appearing after this option on the command line.
    -ra ::= Set method to Add for objects referenced by those
    appearing after this option on the command line.
    -rr ::= Set method to Replace for objects referenced by
    those appearing after this option on the command
    line.
    -ro ::= Set default method to Overlay for objects
    appearing after this option on the command line.
    -rm ::= Set default method to Merge for objects appearing
    after this option on the command line.
    -f ::= Force overwrite the output file.
    -fm ::= Use less memory (at the cost of performance).
    -q ::= Suppress progress messages.
    -m <number>[%] ::= Indicates that progress messages should be output
    every <number> objects. If the optional percent
    sign ("%%") is included, then <number> is a
    percentage of the total objects, not a number of
    objects. Default is 10%%.
    -pass <passphrase> ::= Specifies passphrase for encryption.

    -npass ::= Specifies that no passphrase is to be used.
    Sensitive data will be exported in clear text.
    -comment <comment> ::= Specifies a comment to put in the output file.
    -cf <commentpath> ::= Obtains a comment to put in the output file from
    <commentpath>.
    <general options>

    -? ::= Display help
    -nb ::= Do not sound beeps on error
    -vT ::= Set verbosity level to TRACE
    -vI ::= Set verbosity level to INFO
    -vW ::= Set verbosity level to WARNING
    -vE ::= Set verbosity level to ERROR
    -vF ::= Set verbosity level to FATAL
    -l <logpath> ::= Output log to <logpath>
    -e <errpath> ::= Output exceptions to <errpath> (default is stderr) "stdout
    " and
    "stderr" are recognized for <logpath> and <errpath>



  • 7.  Re: export policies
    Best Answer

    Posted Aug 16, 2017 12:33 AM

    I am pretty sure its the issue with the copy and paste

    This worked for me :

    XPSExport -xb backup.xml -npass

     

    This didn't work for me (the command that you provided)

    XPSExport -xb backup.xml npass

     

    Notice the difference in dash.

    Do you mind trying to type the full command as is and see if that works ?



  • 8.  Re: export policies

    Posted Aug 16, 2017 06:55 AM

    Infact this command worked for me in 12.5,however the issue as said is with copy and paste .I have typed it manully now it works.Thanks Guys.