Hello everyall!

I would like to really understand how works merge authority of my
driver filter. I've an AD IDM driver and I need to send user password
over subscriber chanell when matching found user in AD but when matchin
occours only sAMAccountName (DirXML-ADAliasName) comes from AD and
anyone eDrectory attribute is sent to AD over subscriber.

This is my filter:

<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE filter PUBLIC
"dirxmlfilter" "C:\Program Files
(x86)\Novell\Designer\plugins\com.novell.idm.filte r_3.5.0.200909160331\DTD\dirxmlfilter.dtd"><filter >
<filter-class class-name="Group" publisher="sync" subscriber="sync">
<filter-attr attr-name="CN" merge-authority="none" publisher="notify"
subscriber="notify"/>
<filter-attr attr-name="Description" merge-authority="edir"
publisher="ignore" publisher-optimize-modify="false"
subscriber="sync"/>
<filter-attr attr-name="midGroup-System" merge-authority="none"
publisher="ignore" publisher-optimize-modify="false"
subscriber="notify"/>
<filter-attr attr-name="midGroup-Type" merge-authority="none"
publisher="ignore" publisher-optimize-modify="false"
subscriber="notify"/>
<filter-attr attr-name="midGroup-Name" merge-authority="none"
publisher="ignore" publisher-optimize-modify="false"
subscriber="notify"/>
<filter-attr attr-name="DirXML-ADAliasName" merge-authority="default"
publisher="sync" publisher-optimize-modify="true" subscriber="ignore"/>
</filter-class>
<filter-class class-name="User" publisher="sync"
publisher-create-homedir="false" subscriber="sync">
<!--filter-attr attr-name="DirXML-ADContext" publisher="notify"
subscriber="sync"/-->
<!-- login disabled is not synchronized if account is controlled by
entitlements-->
<filter-attr attr-name="nspmDistributionPassword"
merge-authority="none" publisher="ignore"
publisher-optimize-modify="true" subscriber="sync"/>
<!-- turn on entitlement notifications when entitlements are
enabled.
if the user enables entitlements after import this will need to
be
updated manually in the driver filter config via iManager or
Designer. -->
<filter-attr attr-name="DirXML-EntitlementRef" merge-authority="none"
publisher="ignore" publisher-optimize-modify="true"
subscriber="notify"/>
<filter-attr attr-name="midExchangeUser-MDB" merge-authority="none"
publisher="sync" publisher-optimize-modify="true" subscriber="ignore"/>
<filter-attr attr-name="midExchangeUser-Nickname"
merge-authority="none" publisher="sync" publisher-optimize-modify="true"
subscriber="ignore"/>
<filter-attr attr-name="midExchEntAtt7" merge-authority="none"
publisher="ignore" publisher-optimize-modify="true"
subscriber="ignore"/>
<filter-attr attr-name="Surname" merge-authority="none"
publisher="ignore" publisher-optimize-modify="true" subscriber="sync"/>
<filter-attr attr-name="Telephone Number" merge-authority="none"
publisher="ignore" publisher-optimize-modify="true" subscriber="sync"/>
<filter-attr attr-name="Given Name" merge-authority="none"
publisher="ignore" publisher-optimize-modify="true" subscriber="sync"/>
<filter-attr attr-name="midGivennameAltr" merge-authority="none"
publisher="ignore" publisher-optimize-modify="true"
subscriber="notify"/>
<filter-attr attr-name="midSurnameAltr" merge-authority="none"
publisher="ignore" publisher-optimize-modify="true"
subscriber="notify"/>
<filter-attr attr-name="midLogin" merge-authority="none"
publisher="ignore" publisher-optimize-modify="true" subscriber="sync"/>
<filter-attr attr-name="employeeType" merge-authority="none"
publisher="ignore" publisher-optimize-modify="true" subscriber="sync"/>
<filter-attr attr-name="workforceID" merge-authority="none"
publisher="ignore" publisher-optimize-modify="true" subscriber="sync"/>
<filter-attr attr-name="personalTitle" merge-authority="none"
publisher="ignore" publisher-optimize-modify="true" subscriber="sync"/>
<filter-attr attr-name="Title" merge-authority="none"
publisher="ignore" publisher-optimize-modify="true" subscriber="sync"/>
<filter-attr attr-name="company" merge-authority="none"
publisher="ignore" publisher-optimize-modify="true" subscriber="sync"/>
<filter-attr attr-name="Full Name" merge-authority="none"
publisher="ignore" publisher-optimize-modify="true" subscriber="sync"/>
<filter-attr attr-name="OU" merge-authority="none" publisher="ignore"
publisher-optimize-modify="true" subscriber="sync"/>
<filter-attr attr-name="Facsimile Telephone Number"
merge-authority="none" publisher="ignore"
publisher-optimize-modify="true" subscriber="sync"/>
<filter-attr attr-name="DirXML-ADAliasName" merge-authority="app"
publisher="sync" publisher-optimize-modify="true" subscriber="ignore"/>
<filter-attr attr-name="Internet EMail Address" merge-authority="app"
publisher="sync" publisher-optimize-modify="true" subscriber="ignore"/>
<filter-attr attr-name="Login Disabled" merge-authority="none"
publisher="ignore" publisher-optimize-modify="true" subscriber="sync"/>
<filter-attr attr-name="midDnRede" merge-authority="none"
publisher="ignore" publisher-optimize-modify="true"
subscriber="notify"/>
<filter-attr attr-name="Group Membership" merge-authority="none"
publisher="ignore" publisher-optimize-modify="true" subscriber="sync"/>
<filter-attr attr-name="midExchangeUser-CMD" merge-authority="none"
publisher="ignore" publisher-optimize-modify="true"
subscriber="notify"/>
<filter-attr attr-name="Login Expiration Time"
merge-authority="default" publisher="ignore"
publisher-optimize-modify="true" subscriber="sync"/>
<filter-attr attr-name="midFullNameAltr" merge-authority="default"
publisher="ignore" publisher-optimize-modify="true" subscriber="sync"/>
<filter-attr attr-name="assistantPhone" merge-authority="default"
publisher="notify" publisher-optimize-modify="true"
subscriber="ignore"/>
<filter-attr attr-name="employeeStatus" merge-authority="default"
publisher="ignore" publisher-optimize-modify="true"
subscriber="notify"/>
</filter-class>
</filter>

What can I change in my filter to send only user password in merge and
when matching rule found a AD user?

Thank you!


--
* Alan Cota | Open Consult | Brazil, Novell Platinum Partner.
CNE | ISM & Security Specialist.
http://www.alancota.net*
------------------------------------------------------------------------
AlanCota's Profile: http://forums.novell.com/member.php?userid=1961
View this thread: http://forums.novell.com/showthread.php?t=425782