I can sync groups from eDir to AD just fine but if I make a change to
the group membership in AD it doesn't get synced back to eDir. Here is
a trace of the log.

DirXML: [07/16/10 22:20:21.25]: Loader: Received document from
publicationShim
DirXML: [07/16/10 22:20:21.25]: Loader: XML Document:
DirXML: [07/16/10 22:20:21.25]: <nds dtdversion="2.2">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="group" event-id="0"
src-dn="CN=TimAD_Test,OU=Groups,DC=ad,DC=wellstar,DC=o rg">
<association>479958189c4d3140b16f73bf1751fdb4</association>
<modify-attr attr-name="member">
<remove-all-values/>
<add-value>
<value type="dn"
association-ref="35459313228c5c4ca0bcf91923be23dc"
naming="false">CN=c3545,OU=Windy Hill
Exchange,DC=ad,DC=wellstar,DC=org</value>
<value type="dn"
association-ref="ea7c81b3d79f624bb1baad078aa982ac"
naming="false">CN=c3418,OU=Windy Hill
Exchange,DC=ad,DC=wellstar,DC=org</value>
<value type="dn"
association-ref="27c4ad66a9d29443b5bf5491f0c0621d"
naming="false">CN=c3419,OU=Windy Hill
Exchange,DC=ad,DC=wellstar,DC=org</value>
<value type="dn"
association-ref="6796ff7e9d532a4f9fddc124a3ab3158"
naming="false">CN=47227,OU=Windy Hill
Exchange,DC=ad,DC=wellstar,DC=org</value>
<value type="dn"
association-ref="bb51883aceb933449c833d272d5a4d20"
naming="false">CN=38408,OU=Windy Hill
Exchange,DC=ad,DC=wellstar,DC=org</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
DirXML: [07/16/10 22:20:21.32]: Loader: Received 'publisher reply'
document
DirXML: [07/16/10 22:20:21.32]: Loader: XML Document:
DirXML: [07/16/10 22:20:21.32]: <nds dtdversion="3.0"
ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status level="error">Code(-9131) Error in
vnd.nds.stream://EIV/Wellnet/Services/Driver Set/Active
Directory/Publisher/Command Transform#XmlData:88 : Error evaluating
XPATH expression 'token-xpath("query:readObject($destQueryProcessor, "",
$memberDN,"", "")[not(association/text())]")' :
com.novell.xml.xpath.XPathEvaluationException: function
'query:readObject' not found.<application>DirXML</application>
<module>Active Directory</module>
<object-dn>CN=TimAD_Test,OU=Groups,DC=ad,DC=wellstar,DC=or g
(Wellnet\Egroups\TimAD_Test)</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
DirXML: [07/16/10 22:20:21.32]: Loader: DirXML returned:
DirXML: [07/16/10 22:20:21.32]: Loader: XML Document:
DirXML: [07/16/10 22:20:21.32]: <nds dtdversion="3.0"
ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status level="error">Code(-9131) Error in
vnd.nds.stream://EIV/Wellnet/Services/Driver Set/Active
Directory/Publisher/Command Transform#XmlData:88 : Error evaluating
XPATH expression 'token-xpath("query:readObject($destQueryProcessor, "",
$memberDN,"", "")[not(association/text())]")' :
com.novell.xml.xpath.XPathEvaluationException: function
'query:readObject' not found.<application>DirXML</application>
<module>Active Directory</module>
<object-dn>CN=TimAD_Test,OU=Groups,DC=ad,DC=wellstar,DC=or g
(Wellnet\Egroups\TimAD_Test)</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
DirXML: [07/16/10 22:20:21.32]:
DirXML Log Event -------------------
Driver = \EIV\Wellnet\Services\Driver Set\Active Directory
Thread = Publisher Channel
Object = CN=TimAD_Test,OU=Groups,DC=ad,DC=wellstar,DC=org
Level = error
Message = Code(-9131) Error in
vnd.nds.stream://EIV/Wellnet/Services/Driver Set/Active
Directory/Publisher/Command Transform#XmlData:88 : Error evaluating
XPATH expression 'token-xpath("query:readObject($destQueryProcessor, "",
$memberDN,"", "")[not(association/text())]")' :
com.novell.xml.xpath.XPathEvaluationException: function
'query:readObject' not found.<application>DirXML</application>
<module>Active Directory</module>
<object-dn>CN=TimAD_Test,OU=Groups,DC=ad,DC=wellstar,DC=or g
(Wellnet\Egroups\TimAD_Test)</object-dn>
<component>Publisher</component>
DirXML: [07/16/10 22:20:21.32]: Loader: Received document from
publicationShim
DirXML: [07/16/10 22:20:21.32]: Loader: XML Document:
DirXML: [07/16/10 22:20:21.32]: <nds dtdversion="2.2">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<init-params>
<publisher-state>
<cookie>TVNEUwMAAAAh4DKbViXLAQAAAAAAAAAAiAAAAPoOkQ UAAAAAAAAAAAAAAAD6DpEFAAAAAH7LcKiGpd9IkpHKztzzr+wB AAAAAAAAAAUAAAAAAAAAjbo4Txe960eWaPqsPMIuQQzZ5wAAAA AAQBeicgNEzEiUS6QUVM9ssUS8QAEAAAAAZPcxiqW8bEqPyueJ zMD4JmCFDAcAAAAAfstwqIal30iSkcrO3POv7PoOkQUAAAAA5J Uq0yqXikqqVUTNKE8gA0eSiwYAAAAA</cookie>
</publisher-state>
</init-params>
</input>
</nds>
DirXML: [07/16/10 22:20:21.32]: Loader: Writing driver state to file
DirXML: [07/16/10 22:20:21.32]: Loader: Document consists only of
state; not sending to remote side
DirXML: [07/16/10 22:20:21.32]: Loader: Returning to publisher:

Here is the xml that I believe is causing the problem
<rule>
<description>Prevent unassociated users from being removed from
groups</description>
<conditions>
<and>
<if-operation op="equal">modify</if-operation>
<if-class-name op="equal">Group</if-class-name>
<if-op-attr name="Member" op="changing"/>
</and>
</conditions>
<actions>
<do-for-each>
<arg-node-set>
<token-removed-attr name="Member"/>
</arg-node-set>
<arg-actions>
<do-set-local-variable name="memberDN">
<arg-node-set>
<token-local-variable name="current-node"/>
</arg-node-set>
</do-set-local-variable>
<do-for-each>
<arg-node-set>
<token-xpath expression='query:readObject($destQueryProcessor,
"", $memberDN,"", "")[not(association/text())]'/>
</arg-node-set>
<arg-actions>
<do-strip-xpath expression="$memberDN"/>
</arg-actions>
</do-for-each>
</arg-actions>
</do-for-each>
</actions>
</rule>

Any ideas why group memberships changes won't sync back from AD to
eDir?


--
goodmant
------------------------------------------------------------------------
goodmant's Profile: http://forums.novell.com/member.php?userid=17547
View this thread: http://forums.novell.com/showthread.php?t=415927