How to export Application specific policy data in OES 10g?
Long time ago I wrote a post on exporting and importing policies in OES 10g but that is full export and import. However if you want to only application specific policy data then this post is useful.
policyIX.sh is the tool used to export and import policies, however there are other ways/tools used for import but in different contexts but that subject is for another day.
The command syntax is ./policyIX.sh -export policy_config_xml_file export_file
policy_config_xml_file contains the scope of the application to be exported. This file is usually located at $OES_HOME/ales32-admin/config. The generic file is policyIX_config.xml. Take a backup of thsi file and rename it accordingly.
To export specific application contents then the config xml file contents is shown in below screenshot.
Verify the scope of the export in the tag export_configuration as shown below.
<export_configuration>
<clipping_scope value=”RootOrg!MahendraOrg!SampleOESApplication”/>
<target_ssm_version value=”3.x”/>
</export_configuration>
There is another important tag under import_configuration policy_load_procedure that specifies the mode of importing policies. The possible values for this tag are override or delete_existing.
<policy_load_procedure value=”override”/>
override: It overrides the existing policies
delete_existing: It deletes the existing policies and then creates a new policy
The sample output of policyIX.sh export is shown below.
$ ./policyIX.sh -export ../config/policyIX_config_sampleApp.xml policies_sampleapp.xml
Uploading file:/opt/oracle/bea/wls10_3/ales32-admin/bin/../config/policyIX_config_sampleApp.xml
Upload complete
Exporting application RootOrg!MahendraOrg!SampleOESApplication…
Exporting admin roles …
all admin roles finished
Exporting resources …
all resources finished
Exporting action and action groups …
all action and action groups finished
Exporting dynamic attributes …
all dynamic attributes finished
Exporting roles …
all roles finished
Exporting membership rules …
all membership rules finished
Exporting authorization policies …
all authorization policies finished
Policy Propagation is finished
Downloading exported policy file…
Downloading finished
$
About the Author Mahendra
I am engulfed in Oracle Identity & Access Management domain. I have expertise on providing the optimized solutions for user provisioning, web access management, Single Sign-On and federation capabilities etc., I am also well versed with complex integrations within Identity Management and other product domains. I have expertise on building demos and implementation experience on products Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Entitlement Server, Oracle Virtual Directory, Oracle Internet Directory etc., Look @ my blog: http://talkidentity.blogspot.com