If any of your SiteMinder user stores are on Microsoft Active Directory servers, you need to map the inetOrgPerson in each Active Directory server before counting the SiteMinder users in it.
To map the inetOrgPerson attribute
The search screen appears.
The Modify User Directory: Directory_Name window opens.
The Create Attribute Mapping dialog appears.
The Create Attribute Mapping: dialog appears.
inetOrgPerson
Custom Mapping to Count Active Directory Users (with XPSCounter)
User
The Modify User Directory window appears.
Your changes are saved and the inetOrgPerson attribute is mapped.
To comply with the SiteMinder licensing terms, you can determine how many users in your organization are associated with SiteMinder policies.
Note: If you do not have write access to the SiteMinder binary files (XPS.dll, libXPS.so, libXPS.sl), an Administrator must grant you permission to use the related XPS command line tools using the Administrative UI or the XPSSecurity tool.
To determine the number of users
XPSCounter
The tool starts and displays the name of the log file for this session, and the License Parameters menu opens.
The Parameter menu appears.
The Counter menu appears.
Note: This tool counts the number of user objects in each directory that you specify. It does not account for the same user object being listed in multiple directories or multiple user objects for the same user in a directory. You must consider this when interpreting the results provided by this tool.
The users are counted and a confirmation message appears.
The following information appears for each directory counted:
Displays the unique identifier for the specified user directory.
Example: CA.SM::UserDirectory@0e-50ea30f0-b5c0-450c-a135-1e317dd25f11
Displays the name of the specified user directory (as defined in the Administrative UI).
Displays the most-recent user count of the specified user directory. You do not have to delete any previous values stored in the counter because this value is updated automatically every time the counter is run.
Example: : 23
Displays the total of number of users from all of the user directories you counted. For example, if you counted number of users for two different directories, and each directory has 23 users, the total shown will be 46.
XPSConfig is an interactive command-line utility that allows administrators and members of operations to view product parameters and, if allowed, edit their settings. While you may have your own product-specific configuration tool using XPS programming interfaces, XPSConfig is available so that this is not a requirement.
For each vendor and installed product, XPSConfig manages the parameters or named settings that are defined in the product's Data Dictionary. Each product can read, write, and validate its own parameter settings.
To use XPSConfig, you must be an administrator with XPSConfig rights.
Parameters have the following attributes:
Specifies the name of the parameter.
Limits:
Specifies the data type of the parameter value:
Logical | Numeric | String
Specifies a Boolean value: TRUE or FALSE.
Specifies an integer.
Specifies a string of characters.
Specifies the value or scope of the parameter:
Ask | Global | Local | Managed | Overrideable | Read Only
Specifies that the value is managed by the product, not by XPS, and that the value is read only.
Specifies that the value is stored in the policy store and accessible by all Policy Servers sharing that policy store.
Specifies that each Policy Server stores its own value.
Specifies that the value is managed by the product, not by XPS, and that the value is read-write.
Specifies that a value stored locally on a Policy Server can override a value stored globally on a shared policy store.
Specifies that the value is both the default value and read only.
Specifies whether the parameter is included in exports of the policy store.
Type: Boolean
Specifies whether the parameter is included in capabilities reporting for the Policy Server.
Type: Boolean
Specifies what type of access the remote API has to the parameter:
None | Read | ReadWrite
Describes the purpose of the parameter.
Specifies the type of license limit:
None | SoftLimit | HardLimit | ExpDate
Specifies that the parameter is not a license limit.
Specifies that the parameter is a soft or advisory license limit.
Specifies that the parameter is a hard or absolute license limit.
Specifies that the parameter is the date on which the license expires.
Specifies a default value for use when the current value is undefined.
Note: If the default value is undefined, its value is specified according to its data type:
space
zero
FALSE
Specifies whether the parameter is visible to XPSConfig.
Type: Boolean
XPSConfig has the following format:
XPSConfig [-vendor vendor] [-product product] [-?] [-vT | -vI | -vW | -vE | -vF] [-l log_path] [-e err_path] [-r rec_path]
XPSConfig includes the following options:
(Optional) Specifies the name of the vendor whose data you want to view.
(Optional) Specifies the name of the product whose data you want to view.
(Optional) Displays help information for this utility.
(Optional) Specifies when to log error information to the error file and how much information to log.
Logs detailed information so that you can TRACE errors.
Logs information in case there is an error.
Logs error information in the event of a WARNING, ERROR, or FATAL error.
Logs error information in the event of an ERROR or FATAL error.
Logs error information in the event of a FATAL error.
(Optional) Outputs logging information to the specified location.
Default: stdout
(Optional) Outputs error information to the specified location.
Default: stderr
(Optional) Outputs a record of the session to the specified location.
XPSEvaluate is an interactive command-line utility that allows administrators and application developers to evaluate expressions and test performance. To use XPSEvaluate, you must be an administrator with XPSEvaluate rights.
XPSEvaluate has the following format:
XPSEvaluate [-np] [-trace] [-dbg debuglist] [-f DB | formulapath] [-c contextpath] [-u userpath] [-step] [-?] [-vT | -vI | -vW | -vE | -vF] [-l log_path] [-e err_path] [-r rec_path]
XPSEvaluate includes the following options:
(Optional) Specifies no prompt.
(Optional) Turns on tracing.
(Optional) Specifies the debug list.
(Optional) Specifies the location of the named expressions.
Note: DB specifies the policy store.
(Optional) Specifies the location of the context values.
(Optional) Specifies the location of the user attributes.
(Optional) Shows evaluation steps.
(Optional) Displays help information for this utility.
(Optional) Specifies when to log error information to the error file and how much information to log.
Logs detailed information so that you can TRACE errors.
Logs information in case there is an error.
Logs error information in the event of a WARNING, ERROR, or FATAL error.
Logs error information in the event of an ERROR or FATAL error.
Logs error information in the event of a FATAL error.
(Optional) Outputs logging information to the specified location.
Default: stdout
(Optional) Outputs error information to the specified location.
Default: stderr
(Optional) Outputs a record of the session to the specified location.
XPSExplorer is an interactive command-line utility that allows an administrator or application developer to view the data in a policy store. XPSExplorer has two uses:
To use XPSExplorer, you must be an administrator with XPSExplorer rights.
XPSExplorer has the following format:
XPSExplorer [-?] [-vT | -vI | -vW | -vE | -vF] [-l log_path] [-e err_path] [-r rec_path]
XPSExplorer includes the following options:
(Optional) Displays help information for this utility.
(Optional) Specifies when to log error information to the error file and how much information to log.
Logs detailed information so that you can TRACE errors.
Logs information in case there is an error.
Logs error information in the event of a WARNING, ERROR, or FATAL error.
Logs error information in the event of an ERROR or FATAL error.
Logs error information in the event of a FATAL error.
(Optional) Outputs logging information to the specified location.
Default: stdout
(Optional) Outputs error information to the specified location.
Default: stderr
(Optional) Outputs a record of the session to the specified location.
To export a subset of policy store data, you need the identifiers of the objects (XIDs) that you want to export. You can use XPSExplorer to locate object identifiers. To use XPSExplorer, you must be an administrator with XPSExplorer rights.
In this use case, you export the following accounting applications:
Export a subset of policy store data
XPSExplorer
The main menu opens and lists vendors, products, and classes.
Note: Only objects in top-level classes can be exported. Top-level classes are marked with asterisks.
The Class Menu opens.
Example: If the number 15 corresponds to accounting, enter 15.
The Search Menu opens and the objects in the class are listed.
Example Search Results:
1-CA.SM::Accounting@0e-08c6cadb-e30b-4e06-9e2e-b3d7a866fab8
(I) Name : "Accounts Payable"
(C) Desc : "accounts payable"
2-CA.SM::Accounting@0e-3b0f4ccf-71f3-4968-b095-2b5a830c3244
(I) Name : "Accounts Receivable"
(C) Desc : "accounts receivable"
3-CA.SM::Accounting@03-1c7ac22e-6646-4c61-8f2f-6261a0ef3a92
(I) Name : "General Ledger"
(C) Desc : "general ledger"
4-CA.SM::Accounting@10-8d78bb81-ae15-11d1-9cdd-006008aac24b
(I) Name : "Payroll"
(C) Desc : "payroll"
5-CA.SM::Accounting@@12-88f119a0-3fd1-46d0-b8ac-c1e83f00f97d
(I) Name : "Job Costing"
(C) Desc : "job costing"
Example Object Identifiers (XIDs):
CA.SM::Accounting@0e-08c6cadb-e30b-4e06-9e2e-b3d7a866fab8
CA.SM::Accounting@0e-3b0f4ccf-71f3-4968-b095-2b5a830c3244
CA.SM::Accounting@03-1c7ac22e-6646-4c61-8f2f-6261a0ef3a92
CA.SM::Accounting@10-8d78bb81-ae15-11d1-9cdd-006008aac24b
CA.SM::Accounting@@12-88f119a0-3fd1-46d0-b8ac-c1e83f00f97d
XPSExport output_file -xo object_XID_1 -xo object_XID_2 -xo object_XID_3 -xo object_XID_4
Specifies the XML file to which the policy store data is exported.
Specifies the identifier of each object that you want to export.
Note: You can copy the object identifiers (XIDs) from the Search results and paste them in the command line.
Example:
XPSExport accounting.xml -xo CA.SM::Accounting@0e-08c6cadb-e30b-4e06-9e2e-b3d7a866fab8 -xo CA.SM::Accounting@0e-3b0f4ccf-71f3-4968-b095-2b5a830c3244 -xo CA.SM::Accounting@03-1c7ac22e-6646-4c61-8f2f-6261a0ef3a92 -xo CA.SM::Accounting@10-8d78bb81-ae15-11d1-9cdd-006008aac24b
The policy store data for the specified accounting applications is exported to accounting.xml.
XPSExplorer includes the XCart feature. XCart allows you to collect the identifiers of the objects (XIDs) that you want to export and save them to a file for later use without manually copying and pasting each one. To use XPSExplorer, you must be an administrator with XPSExplorer rights.
To access XCart, enter X for XCart Management in the Main Menu of XPSExplorer. The XCart Menu opens and displays any objects that are in the XCart. The following options are context-sensitive and may or may not be displayed depending on the context:
Empties the XCart.
Note: The name of the XCart file does not change.
Saves the contents of the XCart to the XCart file.
Important! The S command overwrites the contents of the XCart file without prompting first.
Saves the contents of the XCart to the specified file and remembers the specified file name as the XCart file.
Note: The N Command prompts before overwriting the specified file.
Each object is tagged with an import mode that determines how it will be imported from the XPS file to the policy store:
Adds new objects; does not replace existing objects.
Replaces existing objects; does not add new objects.
Replaces existing objects and adds new objects.
Specifies the default import mode.
Note: For each product class, there is a default import mode defined in the product's data dictionary.
Exits the XCart Menu and returns to the Main Menu.
To export a subset of policy store data, you need the identifiers of the objects (XIDs) that you want to export. You can use the XCart feature of XPSExplorer to locate objects and save them in an XCart file for later use when you export. For example, an administrator can set up an XCart file for members of operations to use as needed. To use XPSExplorer, you must be an administrator with XPSExplorer rights.
In this use case, you save the following four accounting applications in a file for later use:
Export a subset of policy store data using XCart
XPSExplorer
The Main Menu opens and lists vendors, products, and classes.
Note: Only objects in top-level classes can be exported. Top-level classes are marked with asterisks.
The XCart Menu opens.
Example: C:\xcart\accounting.txt
Note: This is where you want the contents of the XCart to be saved.
The specified file name is remembered as the XCart file.
Example: C:\xcart\accounting.txt
Note: The file must exist. If not, L has no effect.
The Class Menu opens.
Example: If the number 15 corresponds to Accounting, enter 15.
The Search Menu opens and the objects in the class are listed.
Example Search Results:
1-CA.SM::Accounting@0e-08c6cadb-e30b-4e06-9e2e-b3d7a866fab8
(I) Name : "Accounts Payable"
(C) Desc : "accounts payable"
2-CA.SM::Accounting@0e-3b0f4ccf-71f3-4968-b095-2b5a830c3244
(I) Name : "Accounts Receivable"
(C) Desc : "accounts receivable"
3-CA.SM::Accounting@03-1c7ac22e-6646-4c61-8f2f-6261a0ef3a92
(I) Name : "General Ledger"
(C) Desc : "general ledger"
4-CA.SM::Accounting@10-8d78bb81-ae15-11d1-9cdd-006008aac24b
(I) Name : "Payroll"
(C) Desc : "payroll"
5-CA.SM::Accounting@@12-88f119a0-3fd1-46d0-b8ac-c1e83f00f97d
(I) Name : "Job Costing"
(C) Desc : "job costing"
Note: An asterisk before an application indicates that it is in the XCart.
XPSExport output_file -xf xcart_file
Specifies the XML file to which the policy store data is exported.
Specifies the path and name of the XCart file containing the identifiers of the objects (XIDs) to export.
Example:
XPSExport accounting.xml C:\xcart\accounting.txt
The policy store data for the accounting applications saved in the XCart file is exported to accounting.xml.
In this use case, you add a fifth accounting application, Job Costing, to the following four accounting applications already in the XCart file, accounting.txt, using the XCart feature of XPSExplorer:
Note: To use XPSExplorer, you must be an administrator with XPSExplorer rights.
Add an application to an XCart file
XPSExplorer
The Main Menu opens and lists vendors, products, and classes.
Note: Only objects in top-level classes can be exported. Top-level classes are marked with asterisks.
The XCart Menu opens.
The specified file name is remembered as the XCart file.
Example: C:\xcart\accounting.txt
The Class Menu opens.
Example: If the number 15 corresponds to accounting, enter 15.
The Search Menu opens and the objects in the class are listed.
Example Search Results:
1-CA.SM::Accounting@0e-08c6cadb-e30b-4e06-9e2e-b3d7a866fab8
(I) Name : "Accounts Payable"
(C) Desc : "accounts payable"
2-CA.SM::Accounting@0e-3b0f4ccf-71f3-4968-b095-2b5a830c3244
(I) Name : "Accounts Receivable"
(C) Desc : "accounts receivable"
3-CA.SM::Accounting@03-1c7ac22e-6646-4c61-8f2f-6261a0ef3a92
(I) Name : "General Ledger"
(C) Desc : "general ledger"
4-CA.SM::Accounting@10-8d78bb81-ae15-11d1-9cdd-006008aac24b
(I) Name : "Payroll"
(C) Desc : "payroll"
5-CA.SM::Accounting@@12-88f119a0-3fd1-46d0-b8ac-c1e83f00f97d
(I) Name : "Job Costing"
(C) Desc : "job costing"
Note: An asterisk before an application indicates that it is in the XCart.
The asterisk before the application indicates that it is in the XCart.
Job Costing is added to accounting.txt.
XPSSecurity is an interactive command-line utility that allows administrators and members of operations to create and delete administrators and edit their rights. To use XPSSecurity, you must be an administrator with XPSSecurity rights.
XPSSecurity has the following format:
XPSSecurity [-?] [-vT | -vI | -vW | -vE | -vF] [-l log_path] [-e err_path] [-r rec_path]
XPSSecurity includes the following options:
(Optional) Displays help information for this utility.
(Optional) Specifies when to log error information to the error file and how much information to log.
Logs detailed information so that you can TRACE errors.
Logs information in case there is an error.
Logs error information in the event of a WARNING, ERROR, or FATAL error.
Logs error information in the event of an ERROR or FATAL error.
Logs error information in the event of a FATAL error.
(Optional) Outputs logging information to the specified location.
Default: stdout
(Optional) Outputs error information to the specified location.
Default: stderr
(Optional) Outputs a record of the session to the specified location.
A super user is defined when the connection to the external administrator store is configured. The super user is used to create and manage all other administrator accounts. If the super user is unavailable, use XPSSecurity to make any user in the external store a super user.
To make an administrator a super user
Note: If an administrator with XPSSecurity rights is not available, you can log in as one the following:
Specifies the Policy Server installation path.
Note: If the utility is not present, you can find it in the Policy Server installation media available on the Support site.
XPSSecurity
The main menu appears.
The administrator menu lists the SiteMinder administrators in the external store. Each administrator is prefixed with a number.
The administrator menu displays attributes specific to the administrator you chose. Each attribute is prefixed with a number.
The administrator menu updates with flag settings.
The Disabled and Super User flags appear. Each flag is prefixed with a number.
The Super User flag is selected.
The administrator menu displays attributes specific to the administrator. The Flags attribute is set to Super User.
The administrator record is updated.
The administrator menu lists the SiteMinder administrators in the external store. The administrator you chose appears as a super user.
The administrator you chose is a super user. Use this administrator to restore modified or deleted permissions.
XPSSweeper is a command-line utility that can also be run as a batch job. You can use XPSSweeper to synchronize XPS and SiteMinder policy stores. Usually, XPS synchronizes the different policy stores. However, when legacy tools are used, the policy stores may need to be resynchronized using XPSSweeper. In any case, XPSSweeper does not harm the policy stores and can be run as a precaution.
XPSSweeper has the following format:
XPSSweeper [-f] [-s seconds] [-m entries] [-?] [-vT | -vI | -vW | -vE | -vF] [-l log_path] [-e err_path]
XPSSweeper includes the following options:
(Optional) Runs XPSSweeper in a loop forever.
Note: Use Control-C to exit.
(Optional) Sleeps for the specified number of seconds between iterations of XPSSweeper.
(Optional) Outputs a milestone message every time the specified number of entries has been logged.
(Optional) Displays help information for this utility.
(Optional) Specifies when to log error information to the error file and how much information to log.
Logs detailed information so that you can TRACE errors.
Logs INFOrmation in case there is an error.
Logs error information in the event of a WARNING, ERROR, or FATAL error.
Logs error information in the event of an ERROR or FATAL error.
Logs error information in the event of a FATAL error.
(Optional) Outputs logging information to the specified location.
Default: stdout
(Optional) Outputs error information to the specified location.
Default: stderr
You can run XPSSweeper as a batch job by setting the following two XPS configuration parameters using XPSConfig:
Specifies whether to run XPSweeper according to the Autosweep schedule or not to run XPSSweeper at all.
Type: Boolean
Specifies the Autosweep schedule in GMT using the following format:
DDD@{HH:MM}[,DDD@{HH:MM}] ... [,DDD@{HH:MM}]
(Optional) Specifies the day of the week:
Sun | Mon | Tue | Wed | Thu | Fri | Sat
Specifies the hour.
Range: 00-23
Specifies the number of minutes past the hour.
Range: 00-59
Every Sunday at 8:30am GMT
Every Tuesday at 2:00pm GMT
Everyday at 3:15pm GMT
Every Sunday at 8:30am, every Tuesday at 2:00pm, and everyday at 3:15pm except Tuesday
Note: Multiple Autosweep times can be separated by commas, spaces, or semicolons.
Policy Servers manage XPSSweeper Autosweep times as follows:
Example: If XPSSweeper is scheduled to run at 2:00pm on Tuesday and daily at 3:15pm, the latter sweep is not run on Tuesdays.
Copyright © 2012 CA.
All rights reserved.
|
|