We have a delimited-text driver which will create xml files to send to
our partner's LDAP where they process the xml files to add, modify,
delete users.
For most processes this works fine but we are trying to handle moves
which is proving more difficult.
The mechanics of what we do is:
Our eDirectory LDAP holds all users in a single OU, the partner system
groups them into OUs.
a user is "moved" on our side by changing an attribute on the user.
The value of the attribute equates to an OU on the partner's LDAP.
The partner's LDAP does not move users, they have to delete the user
from one OU and add them to the new OU.
Therefore, to create the move to be processed by the partner's LDAP we
need to send a delete record to remove the user from the current OU and
an add record to create it in the new OU.
We do not have a direct link between the 2 LDAPs, so we send transfer
files to and from both systems twice a day. For the move events the IDM
driver generates a file which contains two records, the delete and the
On our side we rollup all XML files generated since the last transfer
by the events processed by the IDM driver.
When the other side process the transfer files the delete and add
records for a move will be processed in sequence. The delete record
will remove the users from the existing OU but the add record fails to
create them in the new OU because the delete has not finished
processing. If we subsequently send the add records in the following
transfer, the users are created in the new OU.
Therefore, our partner has asked that we delay the processing of a user
move by sending the deletes in one transfer and the add records in the
following transfer.

My question is as we create the two records from one event is it
possible in policy to delay the second record from being created for a
few hours so it misses the next transfer but is added to the following
Hope that all makes sense.


ratclma's Profile: http://forums.novell.com/member.php?userid=9588
View this thread: http://forums.novell.com/showthread.php?t=422785