Symantec Access Management

 View Only

Tech Tip : CA Single Sign-On : AdminUI does not reflect objects updated by XPSImport 

Apr 06, 2018 07:26 AM

Issue:

 

When updating objects through XPSImport tool the changes are not reflected in AdminUI unless the Policy Server is restarted, although the objects were successfully updated. XPSImport finishes correctly and shows the objects as modified in logs, and we can see the modifications using XPSExplorer tool. Why don't we see the objects updated in the AdminUI and from the Policy Server cache?

 

Environment:

 

Policy Server & AdminUI : R12.52 SP1 CR02
Policy Store : AD LDS 2008

 

Cause:

 

This behavior occurs in Active Directory and AD LDS, and it's by Microsoft design. AD and AD LDS do not modify the timestamps of an object when there are only some attributes modified. This behavior provokes an issue in the AdminUI and Policy Server cache. When you run XPS tools, you will see the modifications applied in the object, but as the timestamps will not be modified on AD and AD LDS, the AdminUI and the Policy Server cache will not reflect that modification. You need to restart the Policy Server to get the modification applied in the Policy Server cache and thus in the AdminUI.

 

Resolution:

 

We have changed the way we handle the timestamps in our code, to make the AdminUI and Policy Server cache are getting the updated objects in R12.52 SP1 CR06:
https://docops.ca.com/ca-single-sign-on/12-52-sp1/en/release-notes/cumulative-releases/defects-fixed-in-12-52-sp1-cr06
(DE157832)

 

KD : KB000006039

Statistics
0 Favorited
2 Views
0 Files
0 Shares
0 Downloads

Tags and Keywords

Related Entries and Links

No Related Resource entered.