Hi all,

I have installed the Role & Resource Service driver and assigned some
dynamic groups to roles in the User App.
Sometimes a NullPointerException is thrown when recalculating roles of
users.
But I don't really understand where is the issue and how to solve it.
Here is one example:


Code:
--------------------

[07/05/12 07:00:00.478]:role-service ST:Start transaction.
[07/05/12 07:00:00.478]:role-service ST:Processing events for transaction.
[07/05/12 07:00:00.478]:role-service ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.2">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify cached-time="20120705050000.384Z" class-name="User" event-id="CHBSMV-CORPDP05-NDS#20120705050000#3#1:5ea773c7-9564-40b5-a970-68f4ba3490fa" qualified-src-dn="dc=corp\O=mycompany\OU=people\OU=users\CN=rago nef" src-dn="\CD\corp\mycompany\people\users\ragonef" src-entry-id="51368" timestamp="0#0">
<modify-attr attr-name="nrfDynamicGroupMembership">
<remove-value>
<value timestamp="1325451414#26" type="dn">\T=CD\dc=corp\O=mycompany\OU=groups\OU=d yn\OU=org\CN=DYN_GCPM_INT</value>
</remove-value>
</modify-attr>
</modify>
</input>
</nds>
[07/05/12 07:00:00.478]:role-service ST:Applying event transformation policies.
[07/05/12 07:00:00.478]:role-service ST:Applying policy: %+C%14CNOVLRSERVB-sub-etp%-C.
[07/05/12 07:00:00.478]:role-service ST: Applying to modify #1.
[07/05/12 07:00:00.478]:role-service ST: Evaluating selection criteria for rule 'Ignore everything except add, modify, and sync for all classes'.
[07/05/12 07:00:00.478]:role-service ST: (if-operation not-match "add|modify|sync") = FALSE.
[07/05/12 07:00:00.478]:role-service ST: Rule rejected.
[07/05/12 07:00:00.478]:role-service ST: Evaluating selection criteria for rule 'Cleanup the entitlement results for entitlements granted by NRF'.
[07/05/12 07:00:00.494]:role-service ST: (if-operation equal "modify") = TRUE.
[07/05/12 07:00:00.494]:role-service ST: (if-op-attr 'DirXML-EntitlementResult' changing) = FALSE.
[07/05/12 07:00:00.494]:role-service ST: Rule rejected.
[07/05/12 07:00:00.494]:role-service ST: Evaluating selection criteria for rule 'Convert the event into a custom command to send to the driver'.
[07/05/12 07:00:00.494]:role-service ST: Rule selected.
[07/05/12 07:00:00.494]:role-service ST: Applying rule 'Convert the event into a custom command to send to the driver'.
[07/05/12 07:00:00.494]:role-service ST: Action: do-set-local-variable("command",scope="policy",token-map("NOVLRSERVB-sub-CommandMappingTable","class-name","command",token-class-name())).
[07/05/12 07:00:00.494]:role-service ST: arg-string(token-map("NOVLRSERVB-sub-CommandMappingTable","class-name","command",token-class-name()))
[07/05/12 07:00:00.494]:role-service ST: token-map("NOVLRSERVB-sub-CommandMappingTable","class-name","command",token-class-name())
[07/05/12 07:00:00.494]:role-service ST: token-map("NOVLRSERVB-sub-CommandMappingTable","class-name","command",token-class-name())
[07/05/12 07:00:00.494]:role-service ST: token-class-name()
[07/05/12 07:00:00.494]:role-service ST: Token Value: "User".
[07/05/12 07:00:00.494]:role-service ST: Arg Value: "User".
[07/05/12 07:00:00.494]:role-service ST: Token Value: "nrf:identity".
[07/05/12 07:00:00.494]:role-service ST: Arg Value: "nrf:identity".
[07/05/12 07:00:00.494]:role-service ST: Action: do-append-xml-element("$command$","..").
[07/05/12 07:00:00.494]:role-service ST: Expanded variable reference '$command$' to 'nrf:identity'.
[07/05/12 07:00:00.494]:role-service ST: Action: do-set-xml-attr("dn","../nrf:*",token-xpath("@qualified-src-dn")).
[07/05/12 07:00:00.494]:role-service ST: arg-string(token-xpath("@qualified-src-dn"))
[07/05/12 07:00:00.494]:role-service ST: token-xpath("@qualified-src-dn")
[07/05/12 07:00:00.494]:role-service ST: Token Value: "dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef ".
[07/05/12 07:00:00.509]:role-service ST: Arg Value: "dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef ".
[07/05/12 07:00:00.509]:role-service ST: Action: do-if().
[07/05/12 07:00:00.509]:role-service ST: Evaluating conditions.
[07/05/12 07:00:00.509]:role-service ST: (if-op-attr 'nrfChildRoles' changing) = FALSE.
[07/05/12 07:00:00.509]:role-service ST: Action: do-if().
[07/05/12 07:00:00.509]:role-service ST: Evaluating conditions.
[07/05/12 07:00:00.509]:role-service ST: (if-op-attr 'nrfAssignedResources' changing) = FALSE.
[07/05/12 07:00:00.509]:role-service ST: Performing else actions.
[07/05/12 07:00:00.509]:role-service ST: Evaluating selection criteria for rule 'Get rid of any association that might be there and veto the original event'.
[07/05/12 07:00:00.509]:role-service ST: Rule selected.
[07/05/12 07:00:00.509]:role-service ST: Applying rule 'Get rid of any association that might be there and veto the original event'.
[07/05/12 07:00:00.509]:role-service ST: Action: do-if().
[07/05/12 07:00:00.509]:role-service ST: Evaluating conditions.
[07/05/12 07:00:00.509]:role-service ST: (if-association available) = FALSE.
[07/05/12 07:00:00.509]:role-service ST: Performing else actions.
[07/05/12 07:00:00.509]:role-service ST: Action: do-if().
[07/05/12 07:00:00.509]:role-service ST: Evaluating conditions.
[07/05/12 07:00:00.509]:role-service ST: (if-xpath true "association/@state='migrate'") = FALSE.
[07/05/12 07:00:00.509]:role-service ST: Action: do-veto().
[07/05/12 07:00:00.509]:role-service ST:Policy returned:
[07/05/12 07:00:00.509]:role-service ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.2">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<nrf:identity dn="dc=corp\O=mycompany\OU=people\OU=users\CN=rago nef" xmlns:nrf="urn:dirxml:nrf"/>
</input>
</nds>
[07/05/12 07:00:00.509]:role-service ST:Subscriber processing identity for .
[07/05/12 07:00:00.509]:role-service ST:Submitting unknown event to subscriber shim.
[07/05/12 07:00:00.525]:role-service ST:No command transformation policies.
[07/05/12 07:00:00.525]:role-service ST:Filtering out notification-only attributes.
[07/05/12 07:00:00.525]:role-service ST:Fixing up association references.
[07/05/12 07:00:00.525]:role-service ST:No schema mapping policies.
[07/05/12 07:00:00.525]:role-service ST:Applying output transformation policies.
[07/05/12 07:00:00.525]:role-service ST:Applying policy: %+C%14Clib-ManageError%-C.
[07/05/12 07:00:00.525]:role-service ST: Applying to nrf:identity #1.
[07/05/12 07:00:00.525]:role-service ST: Evaluating selection criteria for rule 'Manage status'.
[07/05/12 07:00:00.525]:role-service ST: (if-operation equal "status") = FALSE.
[07/05/12 07:00:00.525]:role-service ST: Rule rejected.
[07/05/12 07:00:00.525]:role-service ST:Policy returned:
[07/05/12 07:00:00.525]:role-service ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.2">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<nrf:identity dn="dc=corp\O=mycompany\OU=people\OU=users\CN=rago nef" event-id="0" xmlns:nrf="urn:dirxml:nrf"/>
</input>
</nds>
[07/05/12 07:00:00.525]:role-service ST:Submitting document to subscriber shim:
[07/05/12 07:00:00.525]:role-service ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.2">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<nrf:identity dn="dc=corp\O=mycompany\OU=people\OU=users\CN=rago nef" event-id="0" xmlns:nrf="urn:dirxml:nrf"/>
</input>
</nds>
[07/05/12 07:00:00.525]:role-service ST:: Recalculating roles for identity: dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef
[07/05/12 07:00:00.619]:role-service YNGRP: dc=corp\O=mycompany\OU=groups\OU=dyn\OU=org\CN=DYN _GCM_INT
[07/05/12 07:00:00.822]:role-service ST:: Role sync operation ignored because container is out of scope
Container DN: dc=corp
User-Group root DN: corp\mycompany
[07/05/12 07:00:00.884]:role-service YNGRP: dc=corp\O=mycompany\OU=groups\OU=dyn\OU=org\CN=DYN _GDS_JPTK_ANY
[07/05/12 07:00:00.931]:role-service YNGRP: dc=corp\O=mycompany\OU=groups\OU=dyn\OU=org\CN=DYN _GDS_USSF_ANY
[07/05/12 07:00:00.978]:role-service YNGRP: dc=corp\O=mycompany\OU=groups\OU=dyn\OU=org\CN=DYN _GDS_USNJ_ANY
[07/05/12 07:00:01.041]:role-service YNGRP: dc=corp\O=mycompany\OU=groups\OU=dyn\OU=org\CN=DYN _GDS_CHAL_ANY
[07/05/12 07:00:01.087]:role-service YNGRP: dc=corp\O=mycompany\OU=groups\OU=dyn\OU=org\CN=DYN _BSO_GMA_INT
[07/05/12 07:00:01.134]:role-service YNGRP: dc=corp\O=mycompany\OU=groups\OU=dyn\OU=org\CN=DYN _IT_CHAL_EXT
[07/05/12 07:00:01.197]:role-service YNGRP: dc=corp\O=mycompany\OU=groups\OU=dyn\OU=org\CN=DYN _IT_CHAL_INT
[07/05/12 07:00:01.244]:role-service YNGRP: dc=corp\O=mycompany\OU=groups\OU=dyn\OU=org\CN=DYN _COO_INT
[07/05/12 07:00:01.337]:role-service YNGRP: dc=corp\O=mycompany\OU=groups\OU=dyn\OU=org\CN=DYN _BSO_INT_M-Z
[07/05/12 07:00:01.369]:role-service ST:: Process Equivalent To Me
Role: Process Equivalent To Me
Role: O=system\OU=idm\CN=cd-driverset-02\CN=user-application\CN=AppConfig\CN=RoleConfig\CN=RoleDefs \CN=Level30\CN=GCPM All
Operation: 7
Identity: dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef
Operation: {1}
Identity: {2}
[07/05/12 07:00:01.447]:role-service YNGRP: dc=corp\O=mycompany\OU=groups\OU=dyn\OU=org\CN=DYN _BSO_INT_A-L
[07/05/12 07:00:01.478]:role-service ST:: Process Equivalent To Me
Role: Process Equivalent To Me
Role: O=system\OU=idm\CN=cd-driverset-02\CN=user-application\CN=AppConfig\CN=RoleConfig\CN=RoleDefs \CN=Level30\CN=GCPM Employees
Operation: 7
Identity: dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef
Operation: {1}
Identity: {2}
[07/05/12 07:00:01.587]:role-service ST:: Process Equivalent To Me
Role: Process Equivalent To Me
Role: O=system\OU=idm\CN=cd-driverset-02\CN=user-application\CN=AppConfig\CN=RoleConfig\CN=RoleDefs \CN=Level30\CN=GCM All
Operation: 5
Identity: dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef
Operation: {1}
Identity: {2}
[07/05/12 07:00:01.650]:role-service ST:SubscriptionShim.execute() returned:
[07/05/12 07:00:01.650]:role-service ST:
<nds dtdversion="3.6.1">
<source>
<product instance="role-service" version="4.0.0.5730">Novell Role Service Driver</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="error">Error recalculating roles
Identity: dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef
Reason: java.lang.NullPointerException</status>
</output>
</nds>
[07/05/12 07:00:01.666]:role-service ST:Applying input transformation policies.
[07/05/12 07:00:01.666]:role-service ST:Applying policy: %+C%14Clib-ManageError%-C.
[07/05/12 07:00:01.666]:role-service ST: Applying to status #1.
[07/05/12 07:00:01.666]:role-service ST: Evaluating selection criteria for rule 'Manage status'.
[07/05/12 07:00:01.666]:role-service ST: (if-operation equal "status") = TRUE.
[07/05/12 07:00:01.666]:role-service ST: (if-xpath true "self::status[@level = 'error']") = TRUE.
[07/05/12 07:00:01.666]:role-service ST: Rule selected.
[07/05/12 07:00:01.666]:role-service ST: Applying rule 'Manage status'.
[07/05/12 07:00:01.666]:role-service ST: Action: do-set-local-variable("description",scope="policy",token-xpath("self::status/text()")).
[07/05/12 07:00:01.666]:role-service ST: arg-string(token-xpath("self::status/text()"))
[07/05/12 07:00:01.666]:role-service ST: token-xpath("self::status/text()")
[07/05/12 07:00:01.666]:role-service ST: Token Value: "Error recalculating roles
Identity: dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef
Reason: java.lang.NullPointerException".
[07/05/12 07:00:01.666]:role-service ST: Arg Value: "Error recalculating roles
Identity: dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef
Reason: java.lang.NullPointerException".
[07/05/12 07:00:01.666]:role-service ST: Action: do-if().
[07/05/12 07:00:01.666]:role-service ST: Evaluating conditions.
[07/05/12 07:00:01.666]:role-service ST: (if-local-variable 'description' equal "") = FALSE.
[07/05/12 07:00:01.681]:role-service ST: Performing else actions.
[07/05/12 07:00:01.681]:role-service ST: Action: do-if().
[07/05/12 07:00:01.681]:role-service ST: Evaluating conditions.
[07/05/12 07:00:01.681]:role-service ST: (if-local-variable 'description' equal "") = FALSE.
[07/05/12 07:00:01.681]:role-service ST: Performing else actions.
[07/05/12 07:00:01.681]:role-service ST: Action: do-trace-message("[TRACE] "+token-xpath("self::status/object-dn")+" - "+token-local-variable("description")).
[07/05/12 07:00:01.681]:role-service ST: arg-string("[TRACE] "+token-xpath("self::status/object-dn")+" - "+token-local-variable("description"))
[07/05/12 07:00:01.681]:role-service ST: token-text("[TRACE] ")
[07/05/12 07:00:01.681]:role-service ST: token-xpath("self::status/object-dn")
[07/05/12 07:00:01.681]:role-service ST: Token Value: "".
[07/05/12 07:00:01.681]:role-service ST: token-text(" - ")
[07/05/12 07:00:01.681]:role-service ST: token-local-variable("description")
[07/05/12 07:00:01.681]:role-service ST: Token Value: "Error recalculating roles
Identity: dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef
Reason: java.lang.NullPointerException".
[07/05/12 07:00:01.681]:role-service ST: Arg Value: "[TRACE] - Error recalculating roles
Identity: dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef
Reason: java.lang.NullPointerException".
[07/05/12 07:00:01.681]:role-service ST:[TRACE] - Error recalculating roles
Identity: dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef
Reason: java.lang.NullPointerException
[07/05/12 07:00:01.681]:role-service ST: Action: do-if().
[07/05/12 07:00:01.697]:role-service ST: Evaluating conditions.
[07/05/12 07:00:01.697]:role-service ST: (if-global-variable 'idv.error.notifications.enabled' equal "true") = TRUE.
[07/05/12 07:00:01.697]:role-service ST: Performing if actions.
[07/05/12 07:00:01.697]:role-service ST: Action: do-send-email-from-template(notification-dn="Security\Default Notification Collection",template-dn="Security\Default Notification Collection\Error Message",token-global-variable("idv.error.notifications.recipients"),"UT F-8",token-global-variable("ConnectedSystemName"),token-xpath("self::status/object-dn"),"General error",token-local-variable("description")).
[07/05/12 07:00:01.697]:role-service ST: to(token-global-variable("idv.error.notifications.recipients"))
[07/05/12 07:00:01.697]:role-service ST: token-global-variable("idv.error.notifications.recipients")
[07/05/12 07:00:01.697]:role-service ST: Token Value: "administrator@mycompany.com".
[07/05/12 07:00:01.697]:role-service ST: Arg Value: "administrator@mycompany.com".
[07/05/12 07:00:01.697]:role-service ST: encoding("UTF-8")
[07/05/12 07:00:01.697]:role-service ST: token-text("UTF-8")
[07/05/12 07:00:01.697]:role-service ST: Arg Value: "UTF-8".
[07/05/12 07:00:01.697]:role-service ST: DriverName(token-global-variable("ConnectedSystemName"))
[07/05/12 07:00:01.697]:role-service ST: token-global-variable("ConnectedSystemName")
[07/05/12 07:00:01.697]:role-service ST: Token Value: "role-service".
[07/05/12 07:00:01.697]:role-service ST: Arg Value: "role-service".
[07/05/12 07:00:01.697]:role-service ST: ObjectCN(token-xpath("self::status/object-dn"))
[07/05/12 07:00:01.712]:role-service ST: token-xpath("self::status/object-dn")
[07/05/12 07:00:01.712]:role-service ST: Token Value: "".
[07/05/12 07:00:01.712]:role-service ST: Arg Value: "".
[07/05/12 07:00:01.712]:role-service ST: Error("General error")
[07/05/12 07:00:01.712]:role-service ST: token-text("General error")
[07/05/12 07:00:01.712]:role-service ST: Arg Value: "General error".
[07/05/12 07:00:01.712]:role-service ST: ErrorDescription(token-local-variable("description"))
[07/05/12 07:00:01.712]:role-service ST: token-local-variable("description")
[07/05/12 07:00:01.712]:role-service ST: Token Value: "Error recalculating roles
Identity: dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef
Reason: java.lang.NullPointerException".
[07/05/12 07:00:01.712]:role-service ST: Arg Value: "Error recalculating roles
Identity: dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef
Reason: java.lang.NullPointerException".
[07/05/12 07:00:01.791]:role-service ST:Policy returned:
[07/05/12 07:00:01.791]:role-service ST:
<nds dtdversion="3.6.1">
<source>
<product instance="role-service" version="4.0.0.5730">Novell Role Service Driver</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="error">Error recalculating roles
Identity: dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef
Reason: java.lang.NullPointerException</status>
</output>
</nds>
[07/05/12 07:00:01.806]:role-service ST:No schema mapping policies.
[07/05/12 07:00:01.806]:role-service ST:Resolving association references.
[07/05/12 07:00:01.806]:role-service YNGRP: dc=corp\O=mycompany\OU=groups\OU=dyn\OU=org\CN=DYN _BSO_EXT
[07/05/12 07:00:01.806]:role-service ST:Processing returned document.
[07/05/12 07:00:01.806]:role-service ST:Processing operation <status> for .
[07/05/12 07:00:01.806]:role-service ST:
DirXML Log Event -------------------
Driver: \CD\system\idm\cd-driverset-02\role-service
Channel: Subscriber
Status: Error
Message: Error recalculating roles
Identity: dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef
Reason: java.lang.NullPointerException
[07/05/12 07:00:01.853]:role-service YNGRP: dc=corp\O=mycompany\OU=groups\OU=dyn\OU=org\CN=DYN _BSO_CHAL_INT
[07/05/12 07:00:01.900]:role-service YNGRP: dc=corp\O=mycompany\OU=groups\OU=dyn\OU=org\CN=DYN _BSO_GCME_INT
[07/05/12 07:00:01.931]:role-service YNGRP: dc=corp\O=mycompany\OU=groups\OU=dyn\OU=org\CN=DYN _BSO_GCE_ANY
[07/05/12 07:00:01.978]:role-service YNGRP: dc=corp\O=mycompany\OU=groups\OU=dyn\OU=org\CN=DYN _BSO_GMAP_ANY
[07/05/12 07:00:02.025]:role-service YNGRP: dc=corp\O=mycompany\OU=groups\OU=dyn\OU=org\CN=DYN _BSO_Finance_CHAL_INT
[07/05/12 07:00:02.041]:role-service ST:End transaction.
[07/05/12 07:00:02.041]:role-service ST:Start transaction.
[07/05/12 07:00:02.041]:role-service ST:Processing events for transaction.
[07/05/12 07:00:02.041]:role-service ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.2">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify cached-time="20120705050000.728Z" class-name="User" event-id="CHBSMV-CORPDP05-NDS#20120705050000#3#2:5ea773c7-9564-40b5-a970-68f4ba3490fa" qualified-src-dn="dc=corp\O=mycompany\OU=people\OU=users\CN=rago nef" src-dn="\CD\corp\mycompany\people\users\ragonef" src-entry-id="51368" timestamp="1341464400#45">
<modify-attr attr-name="nrfDynamicGroupMembership">
<add-value>
<value timestamp="1341464400#45" type="dn">\T=CD\dc=corp\O=mycompany\OU=groups\OU=d yn\OU=org\CN=DYN_GCM_INT</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
[07/05/12 07:00:02.056]:role-service ST:Applying event transformation policies.
[07/05/12 07:00:02.056]:role-service ST:Applying policy: %+C%14CNOVLRSERVB-sub-etp%-C.
[07/05/12 07:00:02.056]:role-service ST: Applying to modify #1.
[07/05/12 07:00:02.056]:role-service ST: Evaluating selection criteria for rule 'Ignore everything except add, modify, and sync for all classes'.
[07/05/12 07:00:02.056]:role-service ST: (if-operation not-match "add|modify|sync") = FALSE.
[07/05/12 07:00:02.056]:role-service ST: Rule rejected.
[07/05/12 07:00:02.056]:role-service ST: Evaluating selection criteria for rule 'Cleanup the entitlement results for entitlements granted by NRF'.
[07/05/12 07:00:02.056]:role-service ST: (if-operation equal "modify") = TRUE.
[07/05/12 07:00:02.056]:role-service ST: (if-op-attr 'DirXML-EntitlementResult' changing) = FALSE.
[07/05/12 07:00:02.056]:role-service ST: Rule rejected.
[07/05/12 07:00:02.056]:role-service ST: Evaluating selection criteria for rule 'Convert the event into a custom command to send to the driver'.
[07/05/12 07:00:02.056]:role-service ST: Rule selected.
[07/05/12 07:00:02.056]:role-service ST: Applying rule 'Convert the event into a custom command to send to the driver'.
[07/05/12 07:00:02.056]:role-service ST: Action: do-set-local-variable("command",scope="policy",token-map("NOVLRSERVB-sub-CommandMappingTable","class-name","command",token-class-name())).
[07/05/12 07:00:02.056]:role-service ST: arg-string(token-map("NOVLRSERVB-sub-CommandMappingTable","class-name","command",token-class-name()))
[07/05/12 07:00:02.056]:role-service ST: token-map("NOVLRSERVB-sub-CommandMappingTable","class-name","command",token-class-name())
[07/05/12 07:00:02.056]:role-service ST: token-map("NOVLRSERVB-sub-CommandMappingTable","class-name","command",token-class-name())
[07/05/12 07:00:02.072]:role-service ST: token-class-name()
[07/05/12 07:00:02.072]:role-service ST: Token Value: "User".
[07/05/12 07:00:02.072]:role-service ST: Arg Value: "User".
[07/05/12 07:00:02.072]:role-service ST: Token Value: "nrf:identity".
[07/05/12 07:00:02.072]:role-service ST: Arg Value: "nrf:identity".
[07/05/12 07:00:02.072]:role-service ST: Action: do-append-xml-element("$command$","..").
[07/05/12 07:00:02.072]:role-service ST: Expanded variable reference '$command$' to 'nrf:identity'.
[07/05/12 07:00:02.072]:role-service ST: Action: do-set-xml-attr("dn","../nrf:*",token-xpath("@qualified-src-dn")).
[07/05/12 07:00:02.072]:role-service ST: arg-string(token-xpath("@qualified-src-dn"))
[07/05/12 07:00:02.072]:role-service ST: token-xpath("@qualified-src-dn")
[07/05/12 07:00:02.072]:role-service ST: Token Value: "dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef ".
[07/05/12 07:00:02.072]:role-service ST: Arg Value: "dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef ".
[07/05/12 07:00:02.072]:role-service ST: Action: do-if().
[07/05/12 07:00:02.072]:role-service ST: Evaluating conditions.
[07/05/12 07:00:02.072]:role-service ST: (if-op-attr 'nrfChildRoles' changing) = FALSE.
[07/05/12 07:00:02.072]:role-service ST: Action: do-if().
[07/05/12 07:00:02.072]:role-service ST: Evaluating conditions.
[07/05/12 07:00:02.072]:role-service ST: (if-op-attr 'nrfAssignedResources' changing) = FALSE.
[07/05/12 07:00:02.072]:role-service ST: Performing else actions.
[07/05/12 07:00:02.072]:role-service ST: Evaluating selection criteria for rule 'Get rid of any association that might be there and veto the original event'.
[07/05/12 07:00:02.072]:role-service ST: Rule selected.
[07/05/12 07:00:02.072]:role-service ST: Applying rule 'Get rid of any association that might be there and veto the original event'.
[07/05/12 07:00:02.072]:role-service ST: Action: do-if().
[07/05/12 07:00:02.072]:role-service ST: Evaluating conditions.
[07/05/12 07:00:02.072]:role-service ST: (if-association available) = FALSE.
[07/05/12 07:00:02.072]:role-service ST: Performing else actions.
[07/05/12 07:00:02.088]:role-service ST: Action: do-if().
[07/05/12 07:00:02.088]:role-service ST: Evaluating conditions.
[07/05/12 07:00:02.088]:role-service ST: (if-xpath true "association/@state='migrate'") = FALSE.
[07/05/12 07:00:02.088]:role-service ST: Action: do-veto().
[07/05/12 07:00:02.088]:role-service ST:Policy returned:
[07/05/12 07:00:02.088]:role-service ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.2">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<nrf:identity dn="dc=corp\O=mycompany\OU=people\OU=users\CN=rago nef" xmlns:nrf="urn:dirxml:nrf"/>
</input>
</nds>
[07/05/12 07:00:02.088]:role-service ST:Subscriber processing identity for .
[07/05/12 07:00:02.088]:role-service ST:Submitting unknown event to subscriber shim.
[07/05/12 07:00:02.088]:role-service ST:No command transformation policies.
[07/05/12 07:00:02.088]:role-service ST:Filtering out notification-only attributes.
[07/05/12 07:00:02.088]:role-service ST:Fixing up association references.
[07/05/12 07:00:02.088]:role-service ST:No schema mapping policies.
[07/05/12 07:00:02.088]:role-service ST:Applying output transformation policies.
[07/05/12 07:00:02.088]:role-service ST:Applying policy: %+C%14Clib-ManageError%-C.
[07/05/12 07:00:02.088]:role-service ST: Applying to nrf:identity #1.
[07/05/12 07:00:02.088]:role-service ST: Evaluating selection criteria for rule 'Manage status'.
[07/05/12 07:00:02.088]:role-service ST: (if-operation equal "status") = FALSE.
[07/05/12 07:00:02.088]:role-service ST: Rule rejected.
[07/05/12 07:00:02.088]:role-service ST:Policy returned:
[07/05/12 07:00:02.088]:role-service ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.2">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<nrf:identity dn="dc=corp\O=mycompany\OU=people\OU=users\CN=rago nef" event-id="0" xmlns:nrf="urn:dirxml:nrf"/>
</input>
</nds>
[07/05/12 07:00:02.088]:role-service ST:Submitting document to subscriber shim:
[07/05/12 07:00:02.103]:role-service ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.0.1.2">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<nrf:identity dn="dc=corp\O=mycompany\OU=people\OU=users\CN=rago nef" event-id="0" xmlns:nrf="urn:dirxml:nrf"/>
</input>
</nds>
[07/05/12 07:00:02.103]:role-service YNGRP: dc=corp\O=mycompany\OU=groups\OU=dyn\OU=org\CN=DYN _BSO_GCA_ANY
[07/05/12 07:00:02.103]:role-service ST:: Recalculating roles for identity: dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef
[07/05/12 07:00:02.119]:role-service ST:: Role sync operation ignored because container is out of scope
Container DN: dc=corp
User-Group root DN: corp\mycompany
[07/05/12 07:00:02.134]:role-service ST:SubscriptionShim.execute() returned:
[07/05/12 07:00:02.134]:role-service ST:
<nds dtdversion="3.6.1">
<source>
<product instance="role-service" version="4.0.0.5730">Novell Role Service Driver</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="success">nrf:identity: dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef</status>
</output>
</nds>
[07/05/12 07:00:02.134]:role-service ST:Applying input transformation policies.
[07/05/12 07:00:02.134]:role-service ST:Applying policy: %+C%14Clib-ManageError%-C.
[07/05/12 07:00:02.134]:role-service ST: Applying to status #1.
[07/05/12 07:00:02.134]:role-service ST: Evaluating selection criteria for rule 'Manage status'.
[07/05/12 07:00:02.134]:role-service ST: (if-operation equal "status") = TRUE.
[07/05/12 07:00:02.134]:role-service ST: (if-xpath true "self::status[@level = 'error']") = FALSE.
[07/05/12 07:00:02.134]:role-service ST: (if-xpath true "self::status[@level = 'fatal']") = FALSE.
[07/05/12 07:00:02.134]:role-service ST: Rule rejected.
[07/05/12 07:00:02.134]:role-service ST:Policy returned:
[07/05/12 07:00:02.134]:role-service ST:
<nds dtdversion="3.6.1">
<source>
<product instance="role-service" version="4.0.0.5730">Novell Role Service Driver</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="success">nrf:identity: dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef</status>
</output>
</nds>
[07/05/12 07:00:02.134]:role-service ST:No schema mapping policies.
[07/05/12 07:00:02.134]:role-service ST:Resolving association references.
[07/05/12 07:00:02.134]:role-service ST:Processing returned document.
[07/05/12 07:00:02.134]:role-service ST:Processing operation <status> for .
[07/05/12 07:00:02.134]:role-service ST:
DirXML Log Event -------------------
Driver: \CD\system\idm\cd-driverset-02\role-service
Channel: Subscriber
Status: Success
Message: nrf:identity: dc=corp\O=mycompany\OU=people\OU=users\CN=ragonef
[07/05/12 07:00:02.134]:role-service ST:End transaction.

--------------------


Did you already face this issue?
Do you know how to solve it?

Thanks in advance for your help.


--
marieno2
------------------------------------------------------------------------
marieno2's Profile: http://forums.novell.com/member.php?userid=108599
View this thread: http://forums.novell.com/showthread.php?t=457581