Side note for those who run into this, SR opened, no sign of this in the KB.

If you install JVM, Tomcat, OSP, SSPR on one box on Linux, no UA, then
run the /opt/netiq/idm/apps/osp_sspr/bin/ tool, all is
good till you go to save.

Aside from the painful bug that is apparently not a bug, that you must
fill in the settings for UA, even when not using it, you will fail to
save, since it is missing a file:

Search your feelings, oh no, sorry, your Designer instance, and you will
find the file 3 or 4 times. Copy it to /opt/netiq/idm/apps/osp_sspr/bin
and all is good.

But for some reason, the installer does not include it. Not sure if the
UA version has this issue or not, but I have only seen it on the
OSP_SSPR install case.

Error looks like:
/opt/netiq/idm/apps/osp_sspr/bin # ./
11:23:21,822 DEBUG [PropertiesConfiguration] FileName set to
11:23:21,825 DEBUG [ConfigurationUtils] ConfigurationUtils.locate():
base is null, name is
11:23:21,825 DEBUG [DefaultFileSystem] Could not locate file
/opt/netiq/idm/apps/tomcat/conf/ at null: no
protocol: /opt/netiq/idm/apps/tomcat/conf/
11:23:21,825 DEBUG [ConfigurationUtils] Loading configuration from the
absolute path /opt/netiq/idm/apps/tomcat/conf/
11:23:21,831 DEBUG [PropertiesConfiguration] Base path set to
com.netiq.internal.installer.idm.ldap.ConfigStoreE xception: Error
storing configuration.
com.netiq.internal.installer.idm.ldap.IdmConfigSou rce.commit(
com.netiq.internal.installer.idm.ldap.LdapConfig.c ommit(
com.netiq.internal.installer.idm.ldap.LdapConfig.m ain(
Caused by:
/opt/netiq/idm/apps/osp_sspr/bin/framework-config_3_0.dtd (No such file
or directory)
at Method)

Hopefully this will help the next person who googles the problem.