I can't reference the destination DN in subscriber channel in an AD
driver.

I have a policy that performs an operation if the AD user is in a
specific OU (and if the operation is a modify) but the 'if destinationDN
in subtree...' condition always comes back as false as it the
DestinationDN is not actually available.

Should I use the query function to get the distinguishedName from AD,
if so how?

Many thanks

I've included a level 3 trace below:

16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST:Applying policy: Move
User Accounts Policy.
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: Applying to modify
#1.
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: Evaluating selection
criteria for rule 'Display values for debugging'.
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: (if-class-name equal
"User") = TRUE.
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: (if-operation equal
"modify") = TRUE.
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: Rule selected.
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: Applying rule
'Display values for debugging'.
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: Action:
do-trace-message("Destination DN is: "+token-dest-dn()).
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST:
arg-string("Destination DN is: "+token-dest-dn())
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST:
token-text("Destination DN is: ")
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: token-dest-dn()
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: Token Value: "".
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: Arg Value:
"Destination DN is: ".
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory STestination DN is:
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: Evaluating selection
criteria for rule 'Move to Students OU'.
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: (if-class-name equal
"User") = TRUE.
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: (if-operation equal
"modify") = TRUE.
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: Query from policy
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST:
(nds dtdversion="3.5" ndsversion="8.x")
(source)
(product version="3.6.10.4747")DirXML(/product)
(contact)Novell, Inc.(/contact)
(/source)
(input)
(query class-name="User" dest-dn="\IDVault\Users\idmtest101"
dest-entry-id="68290" scope="entry")
(read-attr attr-name="IDV-IsStaff"/)
(read-attr attr-name="IDV-IsStu"/)
(/query)
(/input)
(/nds)
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: Pumping XDS to
eDirectory.
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: Performing operation
query for \IDVault\Users\idmtest101.
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: Query from policy
result
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST:
(nds dtdversion="3.5" ndsversion="8.x")
(source)
(product version="3.6.10.4747")DirXML(/product)
(contact)Novell, Inc.(/contact)
(/source)
(output)
(instance class-name="User"
qualified-src-dn="O=bla\OU=IDVault\OU=Users\CN=idmtest101"
src-dn="\IDVault\Users\idmtest101" src-entry-id="68290")
(association
state="associated")9feef1ce47888f438201a8682e12347 a(/association)
(attr attr-name="IDV-IsStu")
(value timestamp="1262770806#67" type="string")Yes(/value)
(/attr)
(/instance)
(status level="success")(/status)
(/output)
(/nds)
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: (if-src-attr
'IDV-IsStu' available) = TRUE.
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: (if-src-attr
'IDV-IsStaff' not-available) = TRUE.
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: (if-dest-dn
not-in-container "OU=Users,OU=MMU,DC=ad,DC=mmu,DC=ac,DC=uk") = TRUE.
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: Rule selected.
16:45:39 9BFB8BA0 Drvrs: MMU Active Directory ST: Applying rule 'Move
to Students OU'.


--
Mike
Manchester Met Uni
------------------------------------------------------------------------
mikepreece's Profile: http://forums.novell.com/member.php?userid=611
View this thread: http://forums.novell.com/showthread.php?t=397867