How to ensure the SSID matches in prod/dev when creating native users/group

Question

I am running into trouble when I migrate business rules projects-I lose any security assigned to native groups because the SSID in the open LDAP in DEV for that group is different from the SSID in PROD for that group. Is there any way to sync them up now?
Also, for any new groups we create, how do I create them in both environments with the same SSID? I know I can create the group in PROD and use cssimportexport to create the group in DEV, but they end up with different SSIDs
Thanks
Jeff
V 9.2.1 using Active Directory and Native Directory

Answer 1

We are using 9.3.1 so I don't know if this switch is available.
I export the prod ss security with the following switches which gets me all my native groups with sids, and the children of those groups.
export.internal.identities=true
export.provisioning.all=true
export.delegated.lists=false
export.user.filter=none@Native Directory
I hack the file to remove anthing I don't want and then use the import utility to import it twice. First with a properties file that does a delete.
import.operation=delete
The first run fails right after it deletes the native groups I think because deleting the group deletes the children.
The second properties file has this switch
import.operation=create/update
After this is complete you can have DBA do a schema export/import to the target environment. After bouncing planning in the target environment you go in and update the application settings to have the correct shared services server and re-register with shared services. A "Migrate Identities" ensures that you are in synch. The planning security should still be in place on all objects that had security.
Keith