Is there a trick to add an auxiliary class to user ID's in Active
Directory when creating the AD user ID?

I can add the aux class during modifies fine, but during creates I get
"LDAP_OBJECT_CLASS_VIOLATION"

I can create an AD user ID and add the aux class fine with and LDIF,
but having problems doing this with the AD driver.

IDM 3.6.1
Windows 2008 R2

I have this rule in my Sub create policy:
<rule>
<description>UsersefaultAttributes</description>
<conditions>
<and>
<if-class-name op="equal">User</if-class-name>
</and>
</conditions>
<actions>
<do-add-dest-attr-value name="objectClass">
<arg-value type="string">
<token-text xml:space="preserve">nwPersonInfo</token-text>
</arg-value>
</do-add-dest-attr-value>
</actions>
</rule>


--
heerj
------------------------------------------------------------------------
heerj's Profile: http://forums.novell.com/member.php?userid=9211
View this thread: http://forums.novell.com/showthread.php?t=425498