I have a netware 6.5 with IDM3 and win2k3 remote loader. Everything
seems to be ok in my DSTrace.log file on my win2k3 server. When i
create a user in AD this is what the log file says and there is no user
created in eDir ( the other way around doesn't work either):

<nds dtdversion="2.2">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="user" event-id="Active
Directory##109211d31fb##0"
src-dn="CN=test dude,OU=Iisg,DC=microiisg,DC=com">

<association>48ae9f611f0a6349a469a90fd3aa0011</association>
<add-attr attr-name="cn">
<value type="string">test dude</value>
</add-attr>
<add-attr attr-name="dirxml-uACAccountDisable">
<value type="state">false</value>
</add-attr>
<add-attr attr-name="displayName">
<value type="string" naming="false">test
dude</value>
</add-attr>
<add-attr attr-name="givenName">
<value type="string"
naming="false">test</value>
</add-attr>
<add-attr attr-name="sAMAccountName">
<value type="string"
naming="false">tdude</value>
</add-attr>
<add-attr attr-name="sn">
<value type="string"
naming="false">dude</value>
</add-attr>
</add>
</input>
</nds>
DirXML: [01/31/06 16:38:15.05]: Loader: Received 'publisher reply'
document
DirXML: [01/31/06 16:38:15.05]: Loader: XML Document:
DirXML: [01/31/06 16:38:15.05]: <nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="Active Directory##109211d31fb##0"
level="warning">Code(-8016) Operation vetoed by object matching
policy.<application>DirXML</application>
<module>Active Directory</module>
<object-dn>CN=test
dude,OU=Iisg,DC=microiisg,DC=com</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
DirXML: [01/31/06 16:38:15.05]: Loader: DirXML returned:
DirXML: [01/31/06 16:38:15.05]: Loader: XML Document:
DirXML: [01/31/06 16:38:15.05]: <nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="Active Directory##109211d31fb##0"
level="warning">Code(-8016) Operation vetoed by object matching
policy.<application>DirXML</application>
<module>Active Directory</module>
<object-dn>CN=test
dude,OU=Iisg,DC=microiisg,DC=com</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
DirXML: [01/31/06 16:38:15.05]:
DirXML Log Event -------------------
Driver = \MICRO\micro\ADeDirDriver\Active Directory
Thread = Publisher Channel
Object = CN=test dude,OU=Iisg,DC=microiisg,DC=com
Level = warning
Message = Code(-8016) Operation vetoed by object matching
policy.<application>DirXML</application>
<module>Active Directory</module>
<object-dn>CN=test dude,OU=Iisg,DC=microiisg,DC=com</object-dn>
<component>Publisher</component>
DirXML: [01/31/06 16:38:15.05]: ADDriver: [PWD]
PasswordSync::getUserData()
DirXML: [01/31/06 16:38:15.05]: ADDriver: [PWD]
PasswordSync::getUserData().... checking that RPC Server is listening
DirXML: [01/31/06 16:38:15.05]: ADDriver: [PWD]
PasswordSync::getUserData().... checking that RPC Server is listening
DirXML: [01/31/06 16:38:15.05]: ADDriver: [PWD 1800]
PassSyncCache::GetPwdInfoByUser()
DirXML: [01/31/06 16:38:15.05]: ADDriver: [PWD 1800]
PassSyncCache::GetPwdInfoByUser() Looking for specific Username[tdude]
DirXML: [01/31/06 16:38:15.08]: ADDriver: [PWD 1800] GetPwdInfoByUser()
- open the cache. Key = SOFTWARE\Novell\PassSync\Data\MICROIISG.COM
DirXML: [01/31/06 16:38:15.09]: ADDriver: [PWD 1800] GetPwdInfoByUser()
- acquire the mutex.
DirXML: [01/31/06 16:38:15.09]: ADDriver: [PWD 1800] GetPwdInfoByUser()
- mutex acquired.
DirXML: [01/31/06 16:38:15.09]: ADDriver: [PWD 1800] GetPwdInfoByUser()
- get number of registry keys.
DirXML: [01/31/06 16:38:15.09]: ADDriver: [PWD 1800] GetPwdInfoByUser()
- dwSubKeys[0] dwPrefMaxEntries[1] *lpdwResumeHandle[0]
lpszUserName[tdude].
DirXML: [01/31/06 16:38:15.10]: ADDriver: [PWD 1800] GetPwdInfoByUser()
- release the mutex.
DirXML: [01/31/06 16:38:15.10]: ADDriver: [PWD 1800] GetPwdInfoByUser()
- mutex released.
DirXML: [01/31/06 16:38:15.10]: ADDriver: [PWD 1800] GetPwdInfoByUser()
- close the cache.
DirXML: [01/31/06 16:38:15.10]: ADDriver: [PWD 1800]
PassSyncCache::GetPwdInfoByUser() returned 0x00000000
DirXML: [01/31/06 16:38:15.10]: ADDriver: [PWD]
PasswordSync::getUserData() returned 0x00000000
DirXML: [01/31/06 16:38:15.11]: ADDriver: [PWD 1800]
PassSyncCache::FreeSyncData()
DirXML: [01/31/06 16:38:15.11]: ADDriver: [PWD 1800]
PassSyncCache::FreeSyncData() returned.
DirXML: [01/31/06 16:38:15.11]: ADDriver: [PWD]
PasswordSync:ataEnum()
DirXML: [01/31/06 16:38:15.11]: ADDriver: [PWD]
PasswordSync:ataEnum().... checking that RPC Server is listening
DirXML: [01/31/06 16:38:15.11]: ADDriver: [PWD]
PasswordSync:ataEnum().... checking that RPC Server is listening
DirXML: [01/31/06 16:38:15.12]: ADDriver: [PWD 1800]
PassSyncCache::GetPwdInfo()
DirXML: [01/31/06 16:38:15.12]: ADDriver: [PWD 1800]
PassSyncCache::GetPwdInfo() Looking for specific Username[(null)]
DirXML: [01/31/06 16:38:15.12]: ADDriver: [PWD 1800] GetPwdInfo() -
open the cache. Key = SOFTWARE\Novell\PassSync\Data\MICROIISG.COM
DirXML: [01/31/06 16:38:15.12]: ADDriver: [PWD 1800] GetPwdInfo() -
acquire the mutex.
DirXML: [01/31/06 16:38:15.13]: ADDriver: [PWD 1800] GetPwdInfo() -
mutex acquired.
DirXML: [01/31/06 16:38:15.13]: ADDriver: [PWD 1800] GetPwdInfo() - get
number of registry keys.
DirXML: [01/31/06 16:38:15.13]: ADDriver: [PWD 1800] GetPwdInfo() -
dwSubKeys[0] dwPrefMaxEntries[-2] *lpdwResumeHandle[0]
lpszUserName[(null)].
DirXML: [01/31/06 16:38:15.13]: ADDriver: [PWD 1800] GetPwdInfo() -
Query only returned 0.
DirXML: [01/31/06 16:38:15.14]: ADDriver: [PWD 1800] GetPwdInfo() -
release the mutex.
DirXML: [01/31/06 16:38:15.14]: ADDriver: [PWD 1800] GetPwdInfo() -
mutex released.
DirXML: [01/31/06 16:38:15.14]: ADDriver: [PWD]
PasswordSync:ataEnum() returned 0x00000000
DirXML: [01/31/06 16:38:15.14]: Loader: Received document from
publicationShim
DirXML: [01/31/06 16:38:15.14]: Loader: XML Document:
DirXML: [01/31/06 16:38:15.15]: <nds dtdversion="2.2">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<init-params>
<publisher-state>

<cookie>TVNEUwMAAACw3K5ZfCbGAQAAAAAAAAAAKAAAAFXwAQ AAAAAAAAAAAAAAAABV8AEAAAAAALkMY6HymVJJm5mqA99KzKIB AAAAAAAAAAEAAAAAAAAAuQxjofKZUkmbmaoD30rMolXwAQAAAA AA</cookie>
</publisher-state>
</init-params>
</input>
</nds>
DirXML: [01/31/06 16:38:15.15]: Loader: Writing driver state to file
DirXML: [01/31/06 16:38:15.15]: Loader: Document consists only of
state; not sending to remote side
DirXML: [01/31/06 16:38:15.15]: Loader: Returning to publisher:
DirXML: [01/31/06 16:38:15.15]: Loader: XML Document:
DirXML: [01/31/06 16:38:15.16]: <nds ndsversion="8.6" dtdversion="1.0">
<output>
<status level="success"/>
</output>
</nds>
DirXML: [01/31/06 16:38:15.16]: ADDriver: object changes complete
DirXML: [01/31/06 16:39:14.91]: ADDriver: Publisher Poll
DirXML: [01/31/06 16:39:14.91]: ADDriver: get object changes - 0x0000
DirXML: [01/31/06 16:39:14.91]: ADDriver: process object change entry
DirXML: [01/31/06 16:39:14.91]: ADDriver: Processing change from AD:
isDeleted: NULL, whenCreated NULL, name NULL
DirXML: [01/31/06 16:39:14.91]: ADDriver: Publisher MODIFY
DirXML: [01/31/06 16:39:14.92]: ADDriver: Publisher Modify-
effectiveClassQuery dn=CN=test dude,OU=Iisg,DC=microiisg,DC=com
className=user
DirXML: [01/31/06 16:39:14.92]: ADDriver: cn
DirXML: [01/31/06 16:39:14.92]: ADDriver: description
DirXML: [01/31/06 16:39:14.92]: ADDriver: dirxml-uACAccountDisable
DirXML: [01/31/06 16:39:14.93]: ADDriver: displayName
DirXML: [01/31/06 16:39:14.93]: ADDriver: facsimileTelephoneNumber
DirXML: [01/31/06 16:39:14.93]: ADDriver: givenName
DirXML: [01/31/06 16:39:14.93]: ADDriver: initials
DirXML: [01/31/06 16:39:14.93]: ADDriver: l
DirXML: [01/31/06 16:39:14.94]: ADDriver: logonHours
DirXML: [01/31/06 16:39:14.94]: ADDriver: mail
DirXML: [01/31/06 16:39:14.94]: ADDriver: physicalDeliveryOfficeName
DirXML: [01/31/06 16:39:14.94]: ADDriver: postOfficeBox
DirXML: [01/31/06 16:39:14.94]: ADDriver: postalCode
DirXML: [01/31/06 16:39:14.94]: ADDriver: sAMAccountName
DirXML: [01/31/06 16:39:14.95]: ADDriver: sn
DirXML: [01/31/06 16:39:14.95]: ADDriver: st
DirXML: [01/31/06 16:39:14.95]: ADDriver: streetAddress
DirXML: [01/31/06 16:39:14.95]: ADDriver: telephoneNumber
DirXML: [01/31/06 16:39:14.95]: ADDriver: title
DirXML: [01/31/06 16:39:14.96]: Loader: Received document from
publicationShim
DirXML: [01/31/06 16:39:14.96]: Loader: XML Document:
DirXML: [01/31/06 16:39:14.96]: <nds dtdversion="2.2">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="user" event-id="Active
Directory##109211e1c6b##0"
src-dn="CN=test dude,OU=Iisg,DC=microiisg,DC=com">

<association>48ae9f611f0a6349a469a90fd3aa0011</association>
<modify-attr attr-name="mail">
<remove-all-values/>
<add-value>
<value type="string"
naming="false">t...@microiisg.com</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
DirXML: [01/31/06 16:39:15.05]: Loader: Received 'publisher query back'
document
DirXML: [01/31/06 16:39:15.05]: Loader: XML Document:
DirXML: [01/31/06 16:39:15.05]: <nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" event-id="0" scope="entry">

<association>48ae9f611f0a6349a469a90fd3aa0011</association>
<read-attr attr-name="cn"/>
<read-attr attr-name="description"/>
<read-attr attr-name="sAMAccountName"/>
<read-attr attr-name="facsimileTelephoneNumber"/>
<read-attr attr-name="displayName"/>
<read-attr attr-name="givenName"/>
<read-attr attr-name="initials"/>
<read-attr attr-name="mail"/>
<read-attr attr-name="physicalDeliveryOfficeName"/>
<read-attr attr-name="logonHours"/>
<read-attr attr-name="dirxml-uACAccountDisable"/>
<read-attr attr-name="nspmDistributionPassword"/>
<read-attr attr-name="l"/>
<read-attr attr-name="postalCode"/>
<read-attr attr-name="postOfficeBox"/>
<read-attr attr-name="st"/>
<read-attr attr-name="streetAddress"/>
<read-attr attr-name="sn"/>
<read-attr attr-name="telephoneNumber"/>
<read-attr attr-name="title"/>
</query>
</input>
</nds>
DirXML: [01/31/06 16:39:15.05]: Loader: DirXML returned:
DirXML: [01/31/06 16:39:15.05]: Loader: XML Document:
DirXML: [01/31/06 16:39:15.05]: <nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" event-id="0" scope="entry">

<association>48ae9f611f0a6349a469a90fd3aa0011</association>
<read-attr attr-name="cn"/>
<read-attr attr-name="description"/>
<read-attr attr-name="sAMAccountName"/>
<read-attr attr-name="facsimileTelephoneNumber"/>
<read-attr attr-name="displayName"/>
<read-attr attr-name="givenName"/>
<read-attr attr-name="initials"/>
<read-attr attr-name="mail"/>
<read-attr attr-name="physicalDeliveryOfficeName"/>
<read-attr attr-name="logonHours"/>
<read-attr attr-name="dirxml-uACAccountDisable"/>
<read-attr attr-name="nspmDistributionPassword"/>
<read-attr attr-name="l"/>
<read-attr attr-name="postalCode"/>
<read-attr attr-name="postOfficeBox"/>
<read-attr attr-name="st"/>
<read-attr attr-name="streetAddress"/>
<read-attr attr-name="sn"/>
<read-attr attr-name="telephoneNumber"/>
<read-attr attr-name="title"/>
</query>
</input>
</nds>
DirXML: [01/31/06 16:39:15.05]: ADDriver: parse command

className user
destDN
eventId 0
association 48ae9f611f0a6349a469a90fd3aa0011
DirXML: [01/31/06 16:39:15.05]: ADDriver: query
DirXML: [01/31/06 16:39:15.05]: ADDriver: query constraints
DirXML: [01/31/06 16:39:15.05]: ADDriver: Connect using ldap_bind:
user=administrator, domain=microiisg, password=***, method=negotiate,
server=sbs.microiisg.com, sign=no, seal=no ssl=no
DirXML: [01/31/06 16:39:15.08]: ADDriver: ldap_bind connection
succeeded
DirXML: [01/31/06 16:39:15.08]: ADDriver: warning: read-attr
nspmDistributionPasswordnot in schema
DirXML: [01/31/06 16:39:15.09]: ADDriver: query
base DN: CN=test dude,OU=Iisg,DC=microiisg,DC=com,
filter: (objectClass=*),
return: (attribute values) objectClass, objectGUID, cn, description,
userAccountControl, displayName, facsimileTelephoneNumber, givenName,
initials, l, logonHours, mail, physicalDeliveryOfficeName,
postOfficeBox, postalCode, sAMAccountName, sn, st, streetAddress,
telephoneNumber, title,
DirXML: [01/31/06 16:39:15.09]: ADDriver: query
base DN: CN=test dude,OU=Iisg,DC=microiisg,DC=com,
filter: (objectClass=*),
return: (attribute values) objectClass, objectGUID, cn, description,
userAccountControl, displayName, facsimileTelephoneNumber, givenName,
initials, l, logonHours, mail, physicalDeliveryOfficeName,
postOfficeBox, postalCode, sAMAccountName, sn, st, streetAddress,
telephoneNumber, title,
DirXML: [01/31/06 16:39:15.09]: ADDriver: ldap get next page (
2147483647)
DirXML: [01/31/06 16:39:15.09]: ADDriver: ldap get next page (
2147483647)
DirXML: [01/31/06 16:39:15.16]: Loader: Received 'publisher reply'
document
DirXML: [01/31/06 16:39:15.16]: Loader: XML Document:
DirXML: [01/31/06 16:39:15.16]: <nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="Active Directory##109211e1c6b##0"
level="warning">Code(-8016) Operation vetoed by object matching
policy.<application>DirXML</application>
<module>Active Directory</module>
<object-dn>CN=test
dude,OU=Iisg,DC=microiisg,DC=com</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
DirXML: [01/31/06 16:39:15.16]: Loader: DirXML returned:
DirXML: [01/31/06 16:39:15.17]: Loader: XML Document:
DirXML: [01/31/06 16:39:15.17]: <nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="Active Directory##109211e1c6b##0"
level="warning">Code(-8016) Operation vetoed by object matching
policy.<application>DirXML</application>
<module>Active Directory</module>
<object-dn>CN=test
dude,OU=Iisg,DC=microiisg,DC=com</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
DirXML: [01/31/06 16:39:15.17]:
DirXML Log Event -------------------
Driver = \MICRO\micro\ADeDirDriver\Active Directory
Thread = Publisher Channel
Object = CN=test dude,OU=Iisg,DC=microiisg,DC=com
Level = warning
Message = Code(-8016) Operation vetoed by object matching
policy.<application>DirXML</application>
<module>Active Directory</module>
<object-dn>CN=test dude,OU=Iisg,DC=microiisg,DC=com</object-dn>
<component>Publisher</component>
DirXML: [01/31/06 16:39:15.17]: ADDriver: [PWD]
PasswordSync::getUserData()
DirXML: [01/31/06 16:39:15.17]: ADDriver: [PWD]
PasswordSync::getUserData().... checking that RPC Server is listening
DirXML: [01/31/06 16:39:15.17]: ADDriver: [PWD]
PasswordSync::getUserData().... checking that RPC Server is listening
DirXML: [01/31/06 16:39:15.18]: ADDriver: [PWD 1800]
PassSyncCache::GetPwdInfoByUser()
DirXML: [01/31/06 16:39:15.19]: ADDriver: [PWD 1800]
PassSyncCache::GetPwdInfoByUser() Looking for specific Username[tdude]
DirXML: [01/31/06 16:39:15.19]: ADDriver: [PWD 1800] GetPwdInfoByUser()
- open the cache. Key = SOFTWARE\Novell\PassSync\Data\MICROIISG.COM
DirXML: [01/31/06 16:39:15.19]: ADDriver: [PWD 1800] GetPwdInfoByUser()
- acquire the mutex.
DirXML: [01/31/06 16:39:15.19]: ADDriver: [PWD 1800] GetPwdInfoByUser()
- mutex acquired.
DirXML: [01/31/06 16:39:15.20]: ADDriver: [PWD 1800] GetPwdInfoByUser()
- get number of registry keys.
DirXML: [01/31/06 16:39:15.20]: ADDriver: [PWD 1800] GetPwdInfoByUser()
- dwSubKeys[0] dwPrefMaxEntries[1] *lpdwResumeHandle[0]
lpszUserName[tdude].
DirXML: [01/31/06 16:39:15.20]: ADDriver: [PWD 1800] GetPwdInfoByUser()
- release the mutex.
DirXML: [01/31/06 16:39:15.20]: ADDriver: [PWD 1800] GetPwdInfoByUser()
- mutex released.
DirXML: [01/31/06 16:39:15.20]: ADDriver: [PWD 1800] GetPwdInfoByUser()
- close the cache.
DirXML: [01/31/06 16:39:15.21]: ADDriver: [PWD 1800]
PassSyncCache::GetPwdInfoByUser() returned 0x00000000
DirXML: [01/31/06 16:39:15.21]: ADDriver: [PWD]
PasswordSync::getUserData() returned 0x00000000
DirXML: [01/31/06 16:39:15.21]: ADDriver: [PWD 1800]
PassSyncCache::FreeSyncData()
DirXML: [01/31/06 16:39:15.21]: ADDriver: [PWD 1800]
PassSyncCache::FreeSyncData() returned.
DirXML: [01/31/06 16:39:15.21]: ADDriver: [PWD]
PasswordSync:ataEnum()
DirXML: [01/31/06 ...