I’m trying to use RBE to create “dynamic” groups in AD. I am using
Netware 6.5, IDM 3.0, eDir 8.7.3 and RL 3.6 on Win2K8. I am trying to
add RBE functionality to a driver that was not created with
entitlements.

I copied the “Group Membership Entitlement”, InputTransformation policy
for “Check Target of Add Association for Group Membership”, Command
policy for “Check User Modify for Group Membership being Granted or
Revoked”, and Creation policy for “Prepare To Check Group Entitlements
after Add“ from the ADentitlements driver. I also added the
DirXML_EntitlementRef attribute to the driver filter.

My AD driver currently only processes user objects in the filter.

I installed the Entitlement Service driver, and created an RBE policy
that assigns membership based on a specific attribute value. The
entitlement for this policy is the “Group Membership” entitlement
defined on my AD driver. I selected an AD group from a list of values
generated from an “External query”.

I started the Entitlement Service driver, and I made a change to a user
(changed the value of the attribute to match the requirements of the RBE
policy). The user was granted membership in the Entitlement (I could
see it in the trace, and the DirXML_EntitlementRef attribute value was
updated), but the AD group was not updated to have this user as a
member.

The user objects are associated in AD and eDir. What am I missing?

Here is my trace file:

tintegrysgroupnet EV: Writing data to cache:
tintegrysgroupnet EV: Event:
type(REMOVE_VALUE)timestamp(1294172967#50)object(\ T=TSTGBL\O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AA DAMS:User)value(SYN_CI_STRING:WPSRorganization:ESO )
Entitlements Service Driver EV: Writing data to cache:
Entitlements Service Driver EV: Event:
type(REMOVE_VALUE)timestamp(1294172967#50)object(\ T=TSTGBL\O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AA DAMS:User)value(SYN_CI_STRING:WPSRorganization:ESO )
ADentitle EV: Writing data to cache:
ADentitle EV: Event:
type(REMOVE_VALUE)timestamp(1294172967#50)object(\ T=TSTGBL\O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AA DAMS:User)value(SYN_CI_STRING:WPSRorganization:ESO )
tintegrysgroupnet EV: Writing data to cache:
tintegrysgroupnet EV: Event:
type(ADD_VALUE)timestamp(1312824616#2)object(\T=TS TGBL\O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS :User)value(SYN_CI_STRING:WPSRorganization:ITS)
Entitlements Service Driver EV: Writing data to cache:
Entitlements Service Driver EV: Event:
type(ADD_VALUE)timestamp(1312824616#2)object(\T=TS TGBL\O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS :User)value(SYN_CI_STRING:WPSRorganization:ITS)
ADentitle EV: Writing data to cache:
ADentitle EV: Event:
type(ADD_VALUE)timestamp(1312824616#2)object(\T=TS TGBL\O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS :User)value(SYN_CI_STRING:WPSRorganization:ITS)
tintegrysgroupnet EV: Writing data to cache:
tintegrysgroupnet EV: Event:
type(MODIFY_ENTRY)timestamp(0#0)object(\T=TSTGBL\O =WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS:User)
Entitlements Service Driver EV: Writing data to cache:
Entitlements Service Driver EV: Event:
type(MODIFY_ENTRY)timestamp(0#0)object(\T=TSTGBL\O =WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS:User)
ADentitle EV: Writing data to cache:
ADentitle EV: Event:
type(MODIFY_ENTRY)timestamp(0#0)object(\T=TSTGBL\O =WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS:User)
tintegrysgroupnet ST: Start transaction.
tintegrysgroupnet ST: type(modify-entry)entry-id(348591)
dn(\T=TSTGBL\O=WPSR\OU=Staff\OU=Employees\OU=Reg\C N=AADAMS)
class-id(401) class-name(User)
tintegrysgroupnet ST: type(remove-value)Syntax=SYNTAX_CI_STRING,
attributeName=WPSRorganization, string=ESO
tintegrysgroupnet ST: type(add-value)Syntax=SYNTAX_CI_STRING,
attributeName=WPSRorganization, string=ITS
tintegrysgroupnet ST: Processing events for transaction.
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="TSTGBL1#20110104202927#4#50"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824616#2">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="WPSRorganization">
<remove-value>
<value timestamp="1294172967#50" type="string">ESO</value>
</remove-value>
<add-value>
<value timestamp="1312824616#2" type="string">ITS</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Applying event transformation policies.
tintegrysgroupnet ST: Applying policy: ET.
tintegrysgroupnet ST: Applying to modify #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Veto
customers and partners changes'.
tintegrysgroupnet ST: (if-src-dn in-subtree
"\TSTGBL\WPSR\Customers") = FALSE.
tintegrysgroupnet ST: (if-src-dn in-subtree
"\TSTGBL\WPSR\Partners") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="TSTGBL1#20110104202927#4#50"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824616#2">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="WPSRorganization">
<remove-value>
<value timestamp="1294172967#50" type="string">ESO</value>
</remove-value>
<add-value>
<value timestamp="1312824616#2" type="string">ITS</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Subscriber processing modify for
\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS.
tintegrysgroupnet ST: Applying command transformation policies.
tintegrysgroupnet ST: Applying policy: Command.
tintegrysgroupnet ST: Applying to modify #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Only
process users and groups'.
tintegrysgroupnet ST: (if-class-name not-equal "User") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'Convert givenname to single value'.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-op-attr 'Given Name' changing) =
FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'Convert company to single-valued'.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-op-attr 'company' changing) = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'Convert initial to single-valued'.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-op-attr 'Initials' changing) = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'Convert title to single-valued'.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-op-attr 'Title' changing) = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'Convert department to single-valued'.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-op-attr 'OU' changing) = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'Convert telephone to single-valued'.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-op-attr 'Telephone Number' changing) =
FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Check
User modify for group membership being granted or revoked'.
tintegrysgroupnet ST: (if-class-name equal "User") = TRUE.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-entitlement 'Group' changing) = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="TSTGBL1#20110104202927#4#50"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824616#2">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="WPSRorganization">
<remove-value>
<value timestamp="1294172967#50" type="string">ESO</value>
</remove-value>
<add-value>
<value timestamp="1312824616#2" type="string">ITS</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Applying policy: 'A set of rules that are
executed when any one of the user name mapping options are selected.'.
tintegrysgroupnet ST: Applying to modify #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'discard renames and deletes'.
tintegrysgroupnet ST: (if-operation equal "rename") = FALSE.
tintegrysgroupnet ST: (if-operation equal "delete") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'consider user objects when name mapping is enabled'.
tintegrysgroupnet ST: (if-class-name not-equal "User") = FALSE.
tintegrysgroupnet ST: (if-global-variable 'FullNameMap' equal
"false") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'map
full name to destination object name'.
tintegrysgroupnet ST: (if-global-variable 'FullNameMap' equal
"true") = TRUE.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-op-attr 'Full Name' available) =
FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="TSTGBL1#20110104202927#4#50"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824616#2">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="WPSRorganization">
<remove-value>
<value timestamp="1294172967#50" type="string">ESO</value>
</remove-value>
<add-value>
<value timestamp="1312824616#2" type="string">ITS</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Applying policy: 'Transform NMAS attribute to
password elements'.
tintegrysgroupnet ST: Applying to modify #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'Convert adds of the nspmDistributionPassword attribute to password
elements'.
tintegrysgroupnet ST: (if-operation equal "add") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Block
modifies for failed password publish operations if reset password is
false'.
tintegrysgroupnet ST: (if-global-variable
'reset-external-password-on-failure' equal "false") = TRUE.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-xpath true
"modify-attr[@attr-name='nspmDistributionPassword' and
@failed-sync='true']") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'Convert modifies of a nspmDistributionPassword attribute to a modify
password operation'.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-op-attr 'nspmDistributionPassword'
available) = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Block
empty modify operations'.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-xpath not-true "modify-attr") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="TSTGBL1#20110104202927#4#50"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824616#2">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="WPSRorganization">
<remove-value>
<value timestamp="1294172967#50" type="string">ESO</value>
</remove-value>
<add-value>
<value timestamp="1312824616#2" type="string">ITS</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Applying policy: Password(Sub)-Default Password
Policy.
tintegrysgroupnet ST: Applying to modify #1.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="TSTGBL1#20110104202927#4#50"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824616#2">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="WPSRorganization">
<remove-value>
<value timestamp="1294172967#50" type="string">ESO</value>
</remove-value>
<add-value>
<value timestamp="1312824616#2" type="string">ITS</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Applying policy: 'Subscribe to password
changes'.
tintegrysgroupnet ST: Applying to modify #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Block
subscribing to password modifications'.
tintegrysgroupnet ST: (if-global-variable
'enable-password-subscribe' equal "false") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="TSTGBL1#20110104202927#4#50"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824616#2">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="WPSRorganization">
<remove-value>
<value timestamp="1294172967#50" type="string">ESO</value>
</remove-value>
<add-value>
<value timestamp="1312824616#2" type="string">ITS</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Applying policy: 'Payloads for subscribe to
password changes'.
tintegrysgroupnet ST: Applying to modify #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Add
operation-data element to password subscribe operations'.
tintegrysgroupnet ST: (if-operation equal "add") = FALSE.
tintegrysgroupnet ST: (if-operation equal "modify-password") =
FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Add
payload data to a reset password from a failed password publish
operation'.
tintegrysgroupnet ST: (if-operation equal "modify-password") =
FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Add
payload data to password subscribe operations'.
tintegrysgroupnet ST: (if-operation equal "add") = FALSE.
tintegrysgroupnet ST: (if-operation equal "modify-password") =
FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="TSTGBL1#20110104202927#4#50"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824616#2">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="WPSRorganization">
<remove-value>
<value timestamp="1294172967#50" type="string">ESO</value>
</remove-value>
<add-value>
<value timestamp="1312824616#2" type="string">ITS</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Filtering out notification-only attributes.
tintegrysgroupnet ST: Fixing up association references.
tintegrysgroupnet ST: Applying schema mapping policies to output.
tintegrysgroupnet ST: Mapping attr-name 'WPSRorganization' to
'division'.
tintegrysgroupnet ST: Mapping class-name 'User' to 'user'.
tintegrysgroupnet ST: Applying output transformation policies.
tintegrysgroupnet ST: Applying policy: 'Convert selected attributes to
a form most commonly used in Active Directory.'.
tintegrysgroupnet ST: Applying to modify #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'Street Address: Convert LF to CR-LF'.
tintegrysgroupnet ST: Rule selected.
tintegrysgroupnet ST: Applying rule 'Street Address: Convert LF to
CR-LF'.
tintegrysgroupnet ST: Action:
do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
tintegrysgroupnet ST: Evaluating selection criteria for rule
'logonHours: Convert to Active Directory form'.
tintegrysgroupnet ST: Rule selected.
tintegrysgroupnet ST: Applying rule 'logonHours: Convert to Active
Directory form'.
tintegrysgroupnet ST: Action:
do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
tintegrysgroupnet ST: Evaluating selection criteria for rule
'accountExpires: Convert to Active Directory form'.
tintegrysgroupnet ST: Rule selected.
tintegrysgroupnet ST: Applying rule 'accountExpires: Convert to
Active Directory form'.
tintegrysgroupnet ST: Action:
do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
tintegrysgroupnet ST: Evaluating selection criteria for rule
'lockoutTime: Convert to Active Directory form'.
tintegrysgroupnet ST: Rule selected.
tintegrysgroupnet ST: Applying rule 'lockoutTime: Convert to Active
Directory form'.
tintegrysgroupnet ST: Action:
do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="user" event-id="TSTGBL1#20110104202927#4#50"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824616#2">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="division">
<remove-value>
<value timestamp="1294172967#50" type="string">ESO</value>
</remove-value>
<add-value>
<value timestamp="1312824616#2" type="string">ITS</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Applying policy: 'Email notifications for failed
password publications'.
tintegrysgroupnet ST: Applying to modify #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Send
e-mail for a failed publish password operation'.
tintegrysgroupnet ST: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="user" event-id="TSTGBL1#20110104202927#4#50"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824616#2">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="division">
<remove-value>
<value timestamp="1294172967#50" type="string">ESO</value>
</remove-value>
<add-value>
<value timestamp="1312824616#2" type="string">ITS</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Submitting document to subscriber shim:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="user" event-id="TSTGBL1#20110104202927#4#50"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824616#2">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="division">
<remove-value>
<value timestamp="1294172967#50" type="string">ESO</value>
</remove-value>
<add-value>
<value timestamp="1312824616#2" type="string">ITS</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Remote Interface Driver: Sending...
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="user" event-id="TSTGBL1#20110104202927#4#50"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824616#2">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="division">
<remove-value>
<value timestamp="1294172967#50" type="string">ESO</value>
</remove-value>
<add-value>
<value timestamp="1312824616#2" type="string">ITS</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Remote Interface Driver: Document sent.
Entitlements Service Driver ST: Start transaction.
Entitlements Service Driver ST: type(modify-entry)entry-id(348591)
dn(\T=TSTGBL\O=WPSR\OU=Staff\OU=Employees\OU=Reg\C N=AADAMS)
class-id(401) class-name(User)
Entitlements Service Driver ST:
type(remove-value)Syntax=SYNTAX_CI_STRING,
attributeName=WPSRorganization, string=ESO
Entitlements Service Driver ST: type(add-value)Syntax=SYNTAX_CI_STRING,
attributeName=WPSRorganization, string=ITS
Entitlements Service Driver ST: Processing events for transaction.
Entitlements Service Driver ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="TSTGBL1#20110104202927#4#50"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824616#2">
<modify-attr attr-name="WPSRorganization">
<remove-value>
<value timestamp="1294172967#50" type="string">ESO</value>
</remove-value>
<add-value>
<value timestamp="1312824616#2" type="string">ITS</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
Entitlements Service Driver ST: No event transformation policies.
Entitlements Service Driver ST: Subscriber processing modify for
\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS.
Entitlements Service Driver ST: No existing association, converting
<modify> to <add>.
Entitlements Service Driver ST: Reading relevant attributes from
\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS.
Entitlements Service Driver ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User"
dest-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" dest-entry-id="348591"
scope="entry">
<read-attr attr-name="WPSRorganization"/>
</query>
</input>
</nds>
Entitlements Service Driver ST: Pumping XDS to eDirectory.
Entitlements Service Driver ST: Performing operation query for
\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS.
Entitlements Service Driver ST: Read result:
Entitlements Service Driver ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="User"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591">
<attr attr-name="WPSRorganization">
<value timestamp="1312824616#2" type="string">ITS</value>
</attr>
</instance>
<status level="success"></status>
</output>
</nds>
Entitlements Service Driver ST: Synthetic add:
Entitlements Service Driver ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="User" event-id="TSTGBL1#20110104202927#4#50"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591">
<add-attr attr-name="WPSRorganization">
<value timestamp="1312824616#2" type="string">ITS</value>
</add-attr>
</add>
</input>
</nds>
Entitlements Service Driver ST: No object matching policies.
Entitlements Service Driver ST: No object creation policies.
Entitlements Service Driver ST: No object placement policies.
Entitlements Service Driver ST: Submitting add to subscriber shim.
Entitlements Service Driver ST: No command transformation policies.
Entitlements Service Driver ST: Filtering out notification-only
attributes.
Entitlements Service Driver ST: Fixing up association references.
Entitlements Service Driver ST: No schema mapping policies.
Entitlements Service Driver ST: No output transformation policies.
Entitlements Service Driver ST: Submitting document to subscriber
shim:
Entitlements Service Driver ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="User" event-id="TSTGBL1#20110104202927#4#50"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591">
<add-attr attr-name="WPSRorganization">
<value timestamp="1312824616#2" type="string">ITS</value>
</add-attr>
</add>
</input>
</nds>
Entitlements Service Driver ST: method: execute
Entitlements Service Driver ST: method: appendSourceInfo
Entitlements Service Driver ST: method: getDriverDN
Entitlements Service Driver ST: method: checkSystemState
Entitlements Service Driver ST: method: dispatch
Entitlements Service Driver ST: method: handleNonSharedProfileObject
Entitlements Service Driver ST: method: getModifyClasses
Entitlements Service Driver ST: method: getEntry
Entitlements Service Driver ST: method: modifyHandler
Entitlements Service Driver ST: BEGIN evaluate object
@dn='WPSR\Staff\Employees\Reg\AADAMS'
Entitlements Service Driver ST: method: determineMembership
Entitlements Service Driver ST: determine policy membership:
Entitlements Service Driver ST: method: getEntitlementPolicies
Entitlements Service Driver ST: method: checkMembershipQueries
Entitlements Service Driver ST: is a member of entitlement policy
'Service\DirXMLDriverSet\Entitlement Policies\PL_ITS_Emp
Entitlements Service Driver ST: method: add
Entitlements Service Driver ST: method: addAuxClass
Entitlements Service Driver ST: add aux class:
Entitlements Service Driver ST: overwrite: Syntax=SYNTAX_CLASS_NAME,
attributeName=Object Class, className=DirXML-EntitlementRecipient
Entitlements Service Driver ST: method: resolveConflicts
Entitlements Service Driver ST: resolve conflicts:
Entitlements Service Driver ST: no conflicts for entitlement
'Service\DirXMLDriverSet\tintegrysgroupnet\Group membership'
Entitlements Service Driver ST: method: addShouldHaveRefs
Entitlements Service Driver ST: method: readLegacyRefs
Entitlements Service Driver ST: read legacy refs:
Entitlements Service Driver ST: object doesn't have any legacy
entitlement refs
Entitlements Service Driver ST: method: readRefs
Entitlements Service Driver ST: object doesn't have any entitlement
refs
Entitlements Service Driver ST: method: readResults
Entitlements Service Driver ST: object doesn't have any entitlement
results
Entitlements Service Driver ST: method: calculateUpdates
Entitlements Service Driver ST: method: handleLegacyRefs
Entitlements Service Driver ST: convert legacy refs:
Entitlements Service Driver ST: method: handleExistingNewRefs
Entitlements Service Driver ST: handle current refs:
Entitlements Service Driver ST: method: handleMissingNewRefs
Entitlements Service Driver ST: handle missing refs:
Entitlements Service Driver ST: grant ref: [state=1, src=RBE,
ent=Service\DirXMLDriverSet\tintegrysgroupnet\Grou p membership,
param=10c559ad52c8754785ee3e188093d828,
id=Service\DirXMLDriverSet\Entitlement Policies\PL_ITS_Emp]
Entitlements Service Driver ST: add: Syntax=SYNTAX_PATH,
volumeDN=Service\DirXMLDriverSet\tintegrysgroupnet \Group membership,
volumePath=<ref><src>RBE</src><id>Service\DirXMLDriverSet\Entitlement
Policies\PL_ITS_Emp</id><param>10c559ad52c8754785ee3e188093d828</param></ref>,
nameSpace=1
Entitlements Service Driver ST: method: addRef
Entitlements Service Driver ST: method: updateEntry
Entitlements Service Driver ST: writing changes...
tintegrysgroupnet EV: Writing data to cache:
tintegrysgroupnet EV: Event:
type(ADD_VALUE)timestamp(1312824621#10)object(\T=T STGBL\O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAM S:User)value(SYN_PATHirXML-EntitlementRef:\T=TSTGBL\O=Service\CN=DirXMLDriver Set\CN=tintegrysgroupnet\CN=Group
membership:1:<ref><src>RBE</src><id>Service\DirXMLDriverSet\Entitlement
Policies\PL_ITS_Emp</id><param>10c559ad52c8754785ee3e188093d828</param></ref>)
tintegrysgroupnet EV: Writing data to cache:
tintegrysgroupnet EV: Event:
type(MODIFY_ENTRY)timestamp(0#0)object(\T=TSTGBL\O =WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS:User)
tintegrysgroupnet : Remote Interface Driver: Received.
tintegrysgroupnet :
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20090313_120000"
instance="\TSTGBL\Service\DirXMLDriverSet\tintegry sgroupnet"
version="3.5.5">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="TSTGBL1#20110104202927#4#50" level="success"/>
</output>
</nds>
tintegrysgroupnet : Remote Interface Driver: Received document for
subscriber channel
tintegrysgroupnet : Remote Interface Driver: Waiting for receive...
tintegrysgroupnet ST: SubscriptionShim.execute() returned:
tintegrysgroupnet ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20090313_120000"
instance="\TSTGBL\Service\DirXMLDriverSet\tintegry sgroupnet"
version="3.5.5">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="TSTGBL1#20110104202927#4#50" level="success"/>
</output>
</nds>
tintegrysgroupnet ST: Applying input transformation policies.
tintegrysgroupnet ST: Applying policy: 'Convert selected attributes to
a form most commonly used in the Identity Vault.'.
tintegrysgroupnet ST: Applying to status #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'lockoutTime: Convert to Identity Vault time format'.
tintegrysgroupnet ST: Rule selected.
tintegrysgroupnet ST: Applying rule 'lockoutTime: Convert to
Identity Vault time format'.
tintegrysgroupnet ST: Action:
do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
tintegrysgroupnet ST: Evaluating selection criteria for rule
'accountExpires: Convert to Identity Vault time format'.
tintegrysgroupnet ST: Rule selected.
tintegrysgroupnet ST: Applying rule 'accountExpires: Convert to
Identity Vault time format'.
tintegrysgroupnet ST: Action:
do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
tintegrysgroupnet ST: Evaluating selection criteria for rule
'accountExpires: strip if 0 in AD'.
tintegrysgroupnet ST: (if-attr 'accountexpires' equal
"9223372036854775807") = FALSE.
tintegrysgroupnet ST: (if-attr 'accountexpires' equal "0") =
FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Check
target of add-association for group membership entitlements'.
tintegrysgroupnet ST: (if-operation equal "add-association") =
FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20090313_120000"
instance="\TSTGBL\Service\DirXMLDriverSet\tintegry sgroupnet"
version="3.5.5">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="TSTGBL1#20110104202927#4#50" level="success"/>
</output>
</nds>
tintegrysgroupnet ST: Applying policy: 'A set of rules that implement
the user name mapping options'.
tintegrysgroupnet ST: Applying to status #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'Append new AD description to eDir object'.
tintegrysgroupnet ST: (if-op-attr 'Description' changing) =
FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20090313_120000"
instance="\TSTGBL\Service\DirXMLDriverSet\tintegry sgroupnet"
version="3.5.5">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="TSTGBL1#20110104202927#4#50" level="success"/>
</output>
</nds>
tintegrysgroupnet ST: Applying policy: 'Email notifications for failed
password subscriptions'.
tintegrysgroupnet ST: Applying to status #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Send
e-mail on a failure when subscribing to passwords'.
tintegrysgroupnet ST: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Send
e-mail on failure to reset connected system password using the Identity
Manager data store password'.
tintegrysgroupnet ST: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20090313_120000"
instance="\TSTGBL\Service\DirXMLDriverSet\tintegry sgroupnet"
version="3.5.5">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="TSTGBL1#20110104202927#4#50" level="success"/>
</output>
</nds>
tintegrysgroupnet ST: Applying schema mapping policies to input.
tintegrysgroupnet ST: Resolving association references.
tintegrysgroupnet ST: Processing returned document.
tintegrysgroupnet ST: Processing operation <status> for .
tintegrysgroupnet ST:
DirXML Log Event -------------------
Driver: \TSTGBL\Service\DirXMLDriverSet\tintegrysgroupnet
Channel: Subscriber
Object: \TSTGBL\WPSR\Staff\Employees\Reg\AADAMS
Status: Success
tintegrysgroupnet ST: End transaction.
tintegrysgroupnet ST: Start transaction.
tintegrysgroupnet ST: type(modify-entry)entry-id(348591)
dn(\T=TSTGBL\O=WPSR\OU=Staff\OU=Employees\OU=Reg\C N=AADAMS)
class-id(401) class-name(User)
tintegrysgroupnet ST: type(add-value)Syntax=SYNTAX_PATH,
volumeDN=\TSTGBL\Service\DirXMLDriverSet\tintegrys groupnet\Group
membership,
volumePath=<ref><src>RBE</src><id>Service\DirXMLDriverSet\Entitlement
Policies\PL_ITS_Emp</id><param>10c559ad52c8754785ee3e188093d828</param></ref>,
nameSpace=1
tintegrysgroupnet ST: Processing events for transaction.
Entitlements Service Driver ST: written
Entitlements Service Driver ST: END evaluate object
@dn='WPSR\Staff\Employees\Reg\AADAMS'
Entitlements Service Driver ST: method: addAssociation
Entitlements Service Driver ST: method: cleanup
Entitlements Service Driver ST: SubscriptionShim.execute() returned:
Entitlements Service Driver ST:
<nds dtdversion="2.0">
<source>
<product build="20060630_0428"
instance="\TSTGBL\Service\DirXMLDriverSet\Entitlem ents Service Driver"
version="2.0.1">DirXML Entitlement Service Driver</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<add-association dest-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS"
dest-entry-id="348591"
event-id="TSTGBL1#20110104202927#4#50">{A0665607-1826-11E0-ABE9-0002B3CABABD}</add-association>
<status event-id="TSTGBL1#20110104202927#4#50" level="success"
type="driver-general"/>
</output>
</nds>
Entitlements Service Driver ST: No input transformation policies.
Entitlements Service Driver ST: No schema mapping policies.
Entitlements Service Driver ST: Resolving association references.
Entitlements Service Driver ST: Processing returned document.
Entitlements Service Driver ST: Processing operation <add-association>
for \TSTGBL\WPSR\Staff\Employees\Reg\AADAMS.
Entitlements Service Driver ST: Processing operation <status> for .
Entitlements Service Driver ST:
DirXML Log Event -------------------
Driver: \TSTGBL\Service\DirXMLDriverSet\Entitlements Service
Driver
Channel: Subscriber
Object: \TSTGBL\WPSR\Staff\Employees\Reg\AADAMS
Status: Success
Entitlements Service Driver ST: End transaction.
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="TSTGBL1#20110808173021#1#10"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824621#10">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="DirXML-EntitlementRef">
<add-value>
<value timestamp="1312824621#10" type="structured">
<component name="nameSpace">1</component>
<component
name="volume">\TSTGBL\Service\DirXMLDriverSet\tint egrysgroupnet\Group
membership</component>
<component name="path.xml">
<ref>
<src>RBE</src>
<id>Service\DirXMLDriverSet\Entitlement
Policies\PL_ITS_Emp</id>
<param>10c559ad52c8754785ee3e188093d828</param>
</ref>
</component>
</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Applying event transformation policies.
tintegrysgroupnet ST: Applying policy: ET.
tintegrysgroupnet ST: Applying to modify #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Veto
customers and partners changes'.
tintegrysgroupnet ST: (if-src-dn in-subtree
"\TSTGBL\WPSR\Customers") = FALSE.
tintegrysgroupnet ST: (if-src-dn in-subtree
"\TSTGBL\WPSR\Partners") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="TSTGBL1#20110808173021#1#10"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824621#10">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="DirXML-EntitlementRef">
<add-value>
<value timestamp="1312824621#10" type="structured">
<component name="nameSpace">1</component>
<component
name="volume">\TSTGBL\Service\DirXMLDriverSet\tint egrysgroupnet\Group
membership</component>
<component name="path.xml">
<ref>
<src>RBE</src>
<id>Service\DirXMLDriverSet\Entitlement
Policies\PL_ITS_Emp</id>
<param>10c559ad52c8754785ee3e188093d828</param>
</ref>
</component>
</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Subscriber processing modify for
\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS.
tintegrysgroupnet ST: Applying command transformation policies.
tintegrysgroupnet ST: Applying policy: Command.
tintegrysgroupnet ST: Applying to modify #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Only
process users and groups'.
tintegrysgroupnet ST: (if-class-name not-equal "User") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'Convert givenname to single value'.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-op-attr 'Given Name' changing) =
FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'Convert company to single-valued'.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-op-attr 'company' changing) = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'Convert initial to single-valued'.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-op-attr 'Initials' changing) = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'Convert title to single-valued'.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-op-attr 'Title' changing) = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'Convert department to single-valued'.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-op-attr 'OU' changing) = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'Convert telephone to single-valued'.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-op-attr 'Telephone Number' changing) =
FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Check
User modify for group membership being granted or revoked'.
tintegrysgroupnet ST: (if-class-name equal "User") = TRUE.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-entitlement 'Group' changing) = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="TSTGBL1#20110808173021#1#10"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824621#10">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="DirXML-EntitlementRef">
<add-value>
<value timestamp="1312824621#10" type="structured">
<component name="nameSpace">1</component>
<component
name="volume">\TSTGBL\Service\DirXMLDriverSet\tint egrysgroupnet\Group
membership</component>
<component name="path.xml">
<ref>
<src>RBE</src>
<id>Service\DirXMLDriverSet\Entitlement
Policies\PL_ITS_Emp</id>
<param>10c559ad52c8754785ee3e188093d828</param>
</ref>
</component>
</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Applying policy: 'A set of rules that are
executed when any one of the user name mapping options are selected.'.
tintegrysgroupnet ST: Applying to modify #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'discard renames and deletes'.
tintegrysgroupnet ST: (if-operation equal "rename") = FALSE.
tintegrysgroupnet ST: (if-operation equal "delete") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'consider user objects when name mapping is enabled'.
tintegrysgroupnet ST: (if-class-name not-equal "User") = FALSE.
tintegrysgroupnet ST: (if-global-variable 'FullNameMap' equal
"false") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'map
full name to destination object name'.
tintegrysgroupnet ST: (if-global-variable 'FullNameMap' equal
"true") = TRUE.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-op-attr 'Full Name' available) =
FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="TSTGBL1#20110808173021#1#10"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824621#10">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="DirXML-EntitlementRef">
<add-value>
<value timestamp="1312824621#10" type="structured">
<component name="nameSpace">1</component>
<component
name="volume">\TSTGBL\Service\DirXMLDriverSet\tint egrysgroupnet\Group
membership</component>
<component name="path.xml">
<ref>
<src>RBE</src>
<id>Service\DirXMLDriverSet\Entitlement
Policies\PL_ITS_Emp</id>
<param>10c559ad52c8754785ee3e188093d828</param>
</ref>
</component>
</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Applying policy: 'Transform NMAS attribute to
password elements'.
tintegrysgroupnet ST: Applying to modify #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'Convert adds of the nspmDistributionPassword attribute to password
elements'.
tintegrysgroupnet ST: (if-operation equal "add") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Block
modifies for failed password publish operations if reset password is
false'.
tintegrysgroupnet ST: (if-global-variable
'reset-external-password-on-failure' equal "false") = TRUE.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-xpath true
"modify-attr[@attr-name='nspmDistributionPassword' and
@failed-sync='true']") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'Convert modifies of a nspmDistributionPassword attribute to a modify
password operation'.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-op-attr 'nspmDistributionPassword'
available) = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Block
empty modify operations'.
tintegrysgroupnet ST: (if-operation equal "modify") = TRUE.
tintegrysgroupnet ST: (if-xpath not-true "modify-attr") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="TSTGBL1#20110808173021#1#10"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824621#10">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="DirXML-EntitlementRef">
<add-value>
<value timestamp="1312824621#10" type="structured">
<component name="nameSpace">1</component>
<component
name="volume">\TSTGBL\Service\DirXMLDriverSet\tint egrysgroupnet\Group
membership</component>
<component name="path.xml">
<ref>
<src>RBE</src>
<id>Service\DirXMLDriverSet\Entitlement
Policies\PL_ITS_Emp</id>
<param>10c559ad52c8754785ee3e188093d828</param>
</ref>
</component>
</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Applying policy: Password(Sub)-Default Password
Policy.
tintegrysgroupnet ST: Applying to modify #1.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="TSTGBL1#20110808173021#1#10"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824621#10">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="DirXML-EntitlementRef">
<add-value>
<value timestamp="1312824621#10" type="structured">
<component name="nameSpace">1</component>
<component
name="volume">\TSTGBL\Service\DirXMLDriverSet\tint egrysgroupnet\Group
membership</component>
<component name="path.xml">
<ref>
<src>RBE</src>
<id>Service\DirXMLDriverSet\Entitlement
Policies\PL_ITS_Emp</id>
<param>10c559ad52c8754785ee3e188093d828</param>
</ref>
</component>
</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Applying policy: 'Subscribe to password
changes'.
tintegrysgroupnet ST: Applying to modify #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Block
subscribing to password modifications'.
tintegrysgroupnet ST: (if-global-variable
'enable-password-subscribe' equal "false") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="TSTGBL1#20110808173021#1#10"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824621#10">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="DirXML-EntitlementRef">
<add-value>
<value timestamp="1312824621#10" type="structured">
<component name="nameSpace">1</component>
<component
name="volume">\TSTGBL\Service\DirXMLDriverSet\tint egrysgroupnet\Group
membership</component>
<component name="path.xml">
<ref>
<src>RBE</src>
<id>Service\DirXMLDriverSet\Entitlement
Policies\PL_ITS_Emp</id>
<param>10c559ad52c8754785ee3e188093d828</param>
</ref>
</component>
</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Applying policy: 'Payloads for subscribe to
password changes'.
tintegrysgroupnet ST: Applying to modify #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Add
operation-data element to password subscribe operations'.
tintegrysgroupnet ST: (if-operation equal "add") = FALSE.
tintegrysgroupnet ST: (if-operation equal "modify-password") =
FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Add
payload data to a reset password from a failed password publish
operation'.
tintegrysgroupnet ST: (if-operation equal "modify-password") =
FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Add
payload data to password subscribe operations'.
tintegrysgroupnet ST: (if-operation equal "add") = FALSE.
tintegrysgroupnet ST: (if-operation equal "modify-password") =
FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="TSTGBL1#20110808173021#1#10"
qualified-src-dn="O=WPSR\OU=Staff\OU=Employees\OU=Reg\CN=AADAMS "
src-dn="\TSTGBL\WPSR\Staff\Employees\Reg\AADAMS" src-entry-id="348591"
timestamp="1312824621#10">
<association
state="associated">9b23e87614235b4ebef641ba5da2c82 b</association>
<modify-attr attr-name="DirXML-EntitlementRef">
<add-value>
<value timestamp="1312824621#10" type="structured">
<component name="nameSpace">1</component>
<component
name="volume">\TSTGBL\Service\DirXMLDriverSet\tint egrysgroupnet\Group
membership</component>
<component name="path.xml">
<ref>
<src>RBE</src>
<id>Service\DirXMLDriverSet\Entitlement
Policies\PL_ITS_Emp</id>
<param>10c559ad52c8754785ee3e188093d828</param>
</ref>
</component>
</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
tintegrysgroupnet ST: Filtering out notification-only attributes.
tintegrysgroupnet ST: Filtered out <modify-attr
attr-name='DirXML-EntitlementRef'>.
tintegrysgroupnet ST: Filtered out <modify class-name='User'>.
tintegrysgroupnet ST: Fixing up association references.
tintegrysgroupnet ST: Applying schema mapping policies to output.
tintegrysgroupnet ST: Applying output transformation policies.
tintegrysgroupnet ST: Applying policy: 'Convert selected attributes to
a form most commonly used in Active Directory.'.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input/>
</nds>
tintegrysgroupnet ST: Applying policy: 'Email notifications for failed
password publications'.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input/>
</nds>
tintegrysgroupnet ST: Submitting document to subscriber shim:
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input/>
</nds>
tintegrysgroupnet ST: Remote Interface Driver: Sending...
tintegrysgroupnet ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input/>
</nds>
tintegrysgroupnet ST: Remote Interface Driver: Document sent.
tintegrysgroupnet : Remote Interface Driver: Received.
tintegrysgroupnet :
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20090313_120000"
instance="\TSTGBL\Service\DirXMLDriverSet\tintegry sgroupnet"
version="3.5.5">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status level="success"/>
</output>
</nds>
tintegrysgroupnet : Remote Interface Driver: Received document for
subscriber channel
tintegrysgroupnet : Remote Interface Driver: Waiting for receive...
tintegrysgroupnet ST: SubscriptionShim.execute() returned:
tintegrysgroupnet ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20090313_120000"
instance="\TSTGBL\Service\DirXMLDriverSet\tintegry sgroupnet"
version="3.5.5">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status level="success"/>
</output>
</nds>
tintegrysgroupnet ST: Applying input transformation policies.
tintegrysgroupnet ST: Applying policy: 'Convert selected attributes to
a form most commonly used in the Identity Vault.'.
tintegrysgroupnet ST: Applying to status #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'lockoutTime: Convert to Identity Vault time format'.
tintegrysgroupnet ST: Rule selected.
tintegrysgroupnet ST: Applying rule 'lockoutTime: Convert to
Identity Vault time format'.
tintegrysgroupnet ST: Action:
do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
tintegrysgroupnet ST: Evaluating selection criteria for rule
'accountExpires: Convert to Identity Vault time format'.
tintegrysgroupnet ST: Rule selected.
tintegrysgroupnet ST: Applying rule 'accountExpires: Convert to
Identity Vault time format'.
tintegrysgroupnet ST: Action:
do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
tintegrysgroupnet ST: Evaluating selection criteria for rule
'accountExpires: strip if 0 in AD'.
tintegrysgroupnet ST: (if-attr 'accountexpires' equal
"9223372036854775807") = FALSE.
tintegrysgroupnet ST: (if-attr 'accountexpires' equal "0") =
FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Check
target of add-association for group membership entitlements'.
tintegrysgroupnet ST: (if-operation equal "add-association") =
FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20090313_120000"
instance="\TSTGBL\Service\DirXMLDriverSet\tintegry sgroupnet"
version="3.5.5">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status level="success"/>
</output>
</nds>
tintegrysgroupnet ST: Applying policy: 'A set of rules that implement
the user name mapping options'.
tintegrysgroupnet ST: Applying to status #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule
'Append new AD description to eDir object'.
tintegrysgroupnet ST: (if-op-attr 'Description' changing) =
FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20090313_120000"
instance="\TSTGBL\Service\DirXMLDriverSet\tintegry sgroupnet"
version="3.5.5">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status level="success"/>
</output>
</nds>
tintegrysgroupnet ST: Applying policy: 'Email notifications for failed
password subscriptions'.
tintegrysgroupnet ST: Applying to status #1.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Send
e-mail on a failure when subscribing to passwords'.
tintegrysgroupnet ST: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Evaluating selection criteria for rule 'Send
e-mail on failure to reset connected system password using the Identity
Manager data store password'.
tintegrysgroupnet ST: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = FALSE.
tintegrysgroupnet ST: Rule rejected.
tintegrysgroupnet ST: Policy returned:
tintegrysgroupnet ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20090313_120000"
instance="\TSTGBL\Service\DirXMLDriverSet\tintegry sgroupnet"
version="3.5.5">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status level="success"/>
</output>
</nds>
tintegrysgroupnet ST: Applying schema mapping policies to input.
tintegrysgroupnet ST: Resolving association references.
tintegrysgroupnet ST: Processing returned document.
tintegrysgroupnet ST: Processing operation <status> for .
tintegrysgroupnet ST:
DirXML Log Event -------------------
Driver: \TSTGBL\Service\DirXMLDriverSet\tintegrysgroupnet
Channel: Subscriber
Object: \TSTGBL\WPSR\Staff\Employees\Reg\AADAMS
Status: Success
tintegrysgroupnet ST: End transaction.


--
misaacs
------------------------------------------------------------------------
misaacs's Profile: http://forums.novell.com/member.php?userid=47519
View this thread: http://forums.novell.com/showthread.php?t=442848