we are syncing from eDir 8.7.3 (NW 6.5.3) with IDM 2.0.2 to Active
Directory (Win 2003 Srv with Remote Loader). Sync works fine.

One AD integrated application needs to have CN attribute (Common name,
object name) with lower case letters.

First I though to do the change (lowercase conversion) at the
eDirectory side but I found the eDirectory CN attribute is case
ignorant so in order to do lowercase conversion we would need to do two
(reference: http://www.novell.com/coolsolutions/qna/8719.html)

So maybe it is best to the lowercase conversion when eDirectory users
are created via the subscriber channel to AD.

The policy could (?) look something like this:
<do-reformat-op-attr name="CN">
<arg-value type="string">
<token-op-attr name="CN"/>

What would be best possible AD subscriber policy to place the script?
Creation, command transform or something else?

Appriciate any tips.

Kind Regards, Harri