I have been trying to move users in ConsoleOne in an attempt to test that
the synched user would also move in Active Directory. I get an error
massage in the trace log of "Attempt to move an object to an uassociated

I have two hierachical structures and they are neither flat nor mirrored.
I use the location attribute on the eDIr OU to match that of the OU in
It works great except for this part. I guess when the user object is
it has no association with the new OU. I am guessing. I am new at doing
this so I am not well versed in the XML syntax for IDM3.

I have tried to come up with a rule after doing some reading on the
newsgroups and the knowledgebase at Novell. I put it in the Command
Trasformation Policies. I made it the first one above all the default

<description>Moving user in eDIR to move in AD also
<comment xml:space="preserve">16.3.2006</comment>
<if-class-name mode="nocase" op="equal">User</if-
<if-operation op="equal">move</if-operation>
<if-attr name="L" op="available"/>
<if-class-name op="equal">Organizational Unit
<token-src-attr class-name="Organizational
Unit" name="L">
<token-src-dn length="-2"/>

Any help would be greatly appreciated. It is drive me crazy!