Before this trace was the original creation of user object with the
creation policy of not allowing user object to be created if no "Full
Name" attribute.

The trace below is the event triggered when I enter Full Name and click
apply button. The only thing is that it does not seem to be seeing the
"FULL NAME" attribute and so vetos the creation. Before that occurs the
attribute shows up with the FULL NAME I entered visable.

Even though it is vetoed, more events for this user continue until the
user object is finally created in AD. I guess I am not seeing ssomething.

Thanks, Bob

[2006/06/26 7:46:28] MAD ST: Start transaction.
[2006/06/26 7:46:28] MAD ST: Processing events for transaction.
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="MINOS#20060626124628#1#29"
qualified-src-dn="O=nisd\OU=Schools\OU=Evers\CN=EVE101" src-dn="\NW-WIN-
TREE\nisd\Schools\Evers\EVE101" src-entry-id="41451"
timestamp="1151325988#29">
<association state="pending"></association>
<modify-attr attr-name="nspmDistributionPassword"><!-- content
suppressed -->
</modify-attr>
</modify>
</input>
</nds>
[2006/06/26 7:46:28] MAD ST: Applying event transformation policies.
[2006/06/26 7:46:28] MAD ST: Applying policy: 'policy allows events
through only for users who are contained within the subtree, are not
disabled'.
[2006/06/26 7:46:28] MAD ST: Applying to modify #1.
[2006/06/26 7:46:28] MAD ST: Evaluating selection criteria for rule
'Scope Filtering - Disabled Logins'.
[2006/06/26 7:46:28] MAD ST: (if-class-name equal "User") = TRUE.
[2006/06/26 7:46:28] MAD ST: Query from policy
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="\NW-WIN-TREE\nisd\Schools\Evers
\EVE101" dest-entry-id="41451" scope="entry">
<read-attr attr-name="Login Disabled"/>
</query>
</input>
</nds>
[2006/06/26 7:46:28] MAD ST: Pumping XDS to eDirectory.
[2006/06/26 7:46:28] MAD ST: Performing operation query for \NW-
WIN-TREE\nisd\Schools\Evers\EVE101.
[2006/06/26 7:46:28] MAD ST: Query from policy result
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="User" qualified-src-dn="O=nisd\OU=Schools
\OU=Evers\CN=EVE101" src-dn="\NW-WIN-TREE\nisd\Schools\Evers\EVE101" src-
entry-id="41451">
<association state="pending"></association>
</instance>
<status level="success"></status>
</output>
</nds>
[2006/06/26 7:46:28] MAD ST: (if-attr 'Login Disabled' equal
"TRUE") = FALSE.
[2006/06/26 7:46:28] MAD ST: Rule rejected.
[2006/06/26 7:46:28] MAD ST: Policy returned:
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="MINOS#20060626124628#1#29"
qualified-src-dn="O=nisd\OU=Schools\OU=Evers\CN=EVE101" src-dn="\NW-WIN-
TREE\nisd\Schools\Evers\EVE101" src-entry-id="41451"
timestamp="1151325988#29">
<association state="pending"></association>
<modify-attr attr-name="nspmDistributionPassword"><!-- content
suppressed -->
</modify-attr>
</modify>
</input>
</nds>
[2006/06/26 7:46:28] MAD ST: Subscriber processing modify for \NW-WIN-
TREE\nisd\Schools\Evers\EVE101.
[2006/06/26 7:46:28] MAD ST: No existing association, converting
<modify> to <add>.
[2006/06/26 7:46:28] MAD ST: Reading relevant attributes from \NW-WIN-
TREE\nisd\Schools\Evers\EVE101.
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="\NW-WIN-TREE\nisd\Schools\Evers
\EVE101" dest-entry-id="41451" scope="entry">
<read-attr attr-name="Description"/>
<read-attr attr-name="Facsimile Telephone Number"/>
<read-attr attr-name="Full Name"/>
<read-attr attr-name="Given Name"/>
<read-attr attr-name="Initials"/>
<read-attr attr-name="Internet EMail Address"/>
<read-attr attr-name="L"/>
<read-attr attr-name="Login Allowed Time Map"/>
<read-attr attr-name="Login Disabled"/>
<read-attr attr-name="nspmDistributionPassword"/>
<read-attr attr-name="Physical Delivery Office Name"/>
<read-attr attr-name="Postal Code"/>
<read-attr attr-name="Postal Office Box"/>
<read-attr attr-name="S"/>
<read-attr attr-name="SA"/>
<read-attr attr-name="Surname"/>
<read-attr attr-name="Telephone Number"/>
<read-attr attr-name="Title"/>
<read-attr attr-name="uniqueID"/>
</query>
</input>
</nds>
[2006/06/26 7:46:28] MAD ST: Pumping XDS to eDirectory.
[2006/06/26 7:46:28] MAD ST: Performing operation query for \NW-WIN-TREE
\nisd\Schools\Evers\EVE101.
[2006/06/26 7:46:28] MAD ST: Read result:
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="User" qualified-src-dn="O=nisd\OU=Schools
\OU=Evers\CN=EVE101" src-dn="\NW-WIN-TREE\nisd\Schools\Evers\EVE101" src-
entry-id="41451">
<association state="pending"></association>
<attr attr-name="Surname">
<value timestamp="1151325968#3" type="string">merrill</value>
</attr>
<attr attr-name="uniqueID">
<value timestamp="1151325968#5" type="string">EVE101</value>
</attr>
<attr attr-name="nspmDistributionPassword"><!-- content suppressed
-->
</attr>
</instance>
<status level="success"></status>
</output>
</nds>
[2006/06/26 7:46:28] MAD ST: Synthetic add:
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="User" event-id="MINOS#20060626124628#1#29"
qualified-src-dn="O=nisd\OU=Schools\OU=Evers\CN=EVE101" src-dn="\NW-WIN-
TREE\nisd\Schools\Evers\EVE101" src-entry-id="41451">
<association state="pending"></association>
<add-attr attr-name="Surname">
<value timestamp="1151325968#3" type="string">merrill</value>
</add-attr>
<add-attr attr-name="uniqueID">
<value timestamp="1151325968#5" type="string">EVE101</value>
</add-attr>
<add-attr attr-name="nspmDistributionPassword"><!-- content
suppressed -->
</add-attr>
</add>
</input>
</nds>
[2006/06/26 7:46:28] MAD ST: Applying object matching policies.
[2006/06/26 7:46:28] MAD ST: Applying policy: 'Find matching object in
Active Directory'.
[2006/06/26 7:46:28] MAD ST: Applying to add #1.
[2006/06/26 7:46:28] MAD ST: Evaluating selection criteria for rule
'Match on UID (SUB)'.
[2006/06/26 7:46:28] MAD ST: (if-attr 'uniqueID' available) =
TRUE.
[2006/06/26 7:46:28] MAD ST: Rule selected.
[2006/06/26 7:46:28] MAD ST: Applying rule 'Match on UID (SUB)'.
[2006/06/26 7:46:28] MAD ST: Action: do-find-matching-object
(scope="subtree",arg-dn("dc=nisdtest,dc=net"),arg-match-attr
("sAMAccountName",token-src-attr("uniqueID"))).
[2006/06/26 7:46:28] MAD ST: arg-dn("dc=nisdtest,dc=net")
[2006/06/26 7:46:28] MAD ST: token-text("dc=nisdtest,dc=net")
[2006/06/26 7:46:28] MAD ST: Arg Value: "dc=nisdtest,dc=net".
[2006/06/26 7:46:28] MAD ST: arg-match-attr
("sAMAccountName",token-src-attr("uniqueID"))
[2006/06/26 7:46:28] MAD ST: arg-string(token-src-attr
("uniqueID"))
[2006/06/26 7:46:28] MAD ST: token-src-attr("uniqueID")
[2006/06/26 7:46:28] MAD ST: Query from policy
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="\NW-WIN-TREE\nisd\Schools\Evers
\EVE101" dest-entry-id="41451" scope="entry">
<read-attr attr-name="uniqueID"/>
</query>
</input>
</nds>
[2006/06/26 7:46:28] MAD ST: Pumping XDS to eDirectory.
[2006/06/26 7:46:28] MAD ST: Performing operation query
for \NW-WIN-TREE\nisd\Schools\Evers\EVE101.
[2006/06/26 7:46:28] MAD ST: Query from policy result
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="User" qualified-src-dn="O=nisd\OU=Schools
\OU=Evers\CN=EVE101" src-dn="\NW-WIN-TREE\nisd\Schools\Evers\EVE101" src-
entry-id="41451">
<association state="pending"></association>
<attr attr-name="uniqueID">
<value timestamp="1151325968#5" type="string">EVE101</value>
</attr>
</instance>
<status level="success"></status>
</output>
</nds>
[2006/06/26 7:46:28] MAD ST: Token Value: "EVE101".
[2006/06/26 7:46:28] MAD ST: Arg Value: "EVE101".
[2006/06/26 7:46:28] MAD ST: Query from policy
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="dc=nisdtest,dc=net"
scope="subtree">
<search-class class-name="User"/>
<search-attr attr-name="sAMAccountName">
<value>EVE101</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>
[2006/06/26 7:46:28] MAD ST: Fixing up association references.
[2006/06/26 7:46:28] MAD ST: Applying schema mapping policies to
output.
[2006/06/26 7:46:28] MAD ST: Mapping class-name 'User' to
'user'.
[2006/06/26 7:46:28] MAD ST: Mapping class-name 'User' to
'user'.
[2006/06/26 7:46:28] MAD ST: Applying output transformation
policies.
[2006/06/26 7:46:28] MAD ST: Applying policy: 'Convert selected
attributes to a form most commonly used in Active Directory.'.
[2006/06/26 7:46:28] MAD ST: Applying to query #1.
[2006/06/26 7:46:28] MAD ST: Evaluating selection criteria
for rule 'First character of name upper, the rest lower'.
[2006/06/26 7:46:28] MAD ST: Rule selected.
[2006/06/26 7:46:28] MAD ST: Applying rule 'First character
of name upper, the rest lower'.
[2006/06/26 7:46:28] MAD ST: Action: do-reformat-op-attr
("Surname",token-upper-case(token-substring(length="1",token-local-
variable("current-value")))+token-lower-case(token-substring(length="-
2",start="1",token-local-variable("current-value")))).
[2006/06/26 7:46:28] MAD ST: Action: do-reformat-op-attr
("Given Name",token-upper-case(token-substring(length="1",token-local-
variable("current-value")))+token-lower-case(token-substring(length="-
2",start="1",token-local-variable("current-value")))).
[2006/06/26 7:46:28] MAD ST: Evaluating selection criteria
for rule 'Street Address: Convert LF to CR-LF'.
[2006/06/26 7:46:28] MAD ST: Rule selected.
[2006/06/26 7:46:28] MAD ST: Applying rule 'Street Address:
Convert LF to CR-LF'.
[2006/06/26 7:46:28] MAD ST: Action: do-reformat-op-attr
("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable
("current-value"))).
[2006/06/26 7:46:28] MAD ST: Evaluating selection criteria
for rule 'logonHours: Convert to Active Directory form'.
[2006/06/26 7:46:28] MAD ST: Rule selected.
[2006/06/26 7:46:28] MAD ST: Applying rule 'logonHours:
Convert to Active Directory form'.
[2006/06/26 7:46:28] MAD ST: Action: do-reformat-op-attr
("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-
value)")).
[2006/06/26 7:46:28] MAD ST: Evaluating selection criteria
for rule 'accountExpires: Convert to Active Directory form'.
[2006/06/26 7:46:28] MAD ST: Rule selected.
[2006/06/26 7:46:28] MAD ST: Applying rule 'accountExpires:
Convert to Active Directory form'.
[2006/06/26 7:46:28] MAD ST: Action: do-reformat-op-attr
("accountExpires",token-xpath("jadutil:translateEpoch2FileTime($current-
value)")).
[2006/06/26 7:46:28] MAD ST: Evaluating selection criteria
for rule 'lockoutTime: Convert to Active Directory form'.
[2006/06/26 7:46:28] MAD ST: Rule selected.
[2006/06/26 7:46:28] MAD ST: Applying rule 'lockoutTime:
Convert to Active Directory form'.
[2006/06/26 7:46:28] MAD ST: Action: do-reformat-op-attr
("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-
value)")).
[2006/06/26 7:46:28] MAD ST: Evaluating selection criteria
for rule 'Add: User - convert multi-valued Telephone to single value'.
[2006/06/26 7:46:28] MAD ST: (if-operation equal "add") =
FALSE.
[2006/06/26 7:46:28] MAD ST: Rule rejected.
[2006/06/26 7:46:28] MAD ST: Evaluating selection criteria
for rule 'update Active Directory logon name'.
[2006/06/26 7:46:28] MAD ST: (if-xpath true "self::status
[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
[2006/06/26 7:46:28] MAD ST: Rule rejected.
[2006/06/26 7:46:28] MAD ST: Policy returned:
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="dc=nisdtest,dc=net" event-id="0"
scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value>EVE101</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>
[2006/06/26 7:46:28] MAD ST: Applying policy: 'Email
notifications for failed password publications'.
[2006/06/26 7:46:28] MAD ST: Applying to query #1.
[2006/06/26 7:46:28] MAD ST: Evaluating selection criteria
for rule 'Send e-mail for a failed publish password operation'.
[2006/06/26 7:46:28] MAD ST: (if-global-variable 'notify-
user-on-password-dist-failure' equal "true") = FALSE.
[2006/06/26 7:46:28] MAD ST: Rule rejected.
[2006/06/26 7:46:28] MAD ST: Policy returned:
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="dc=nisdtest,dc=net" event-id="0"
scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value>EVE101</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>
[2006/06/26 7:46:28] MAD ST: Submitting document to subscriber
shim:
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="dc=nisdtest,dc=net" event-id="0"
scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value>EVE101</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>
[2006/06/26 7:46:28] MAD ST: Remote Interface Driver: Sending...
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="dc=nisdtest,dc=net" event-id="0"
scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value>EVE101</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>
[2006/06/26 7:46:28] MAD ST: Remote Interface Driver: Document
sent.
[2006/06/26 7:46:28] MAD : Remote Interface Driver: Received.
[2006/06/26 7:46:28] MAD :
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20051114_120000" instance="\NW-WIN-TREE
\nisd\services\ADTest\MAD" version="3.1">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="success"/>
</output>
</nds>
[2006/06/26 7:46:28] MAD : Remote Interface Driver: Received document
for subscriber channel
[2006/06/26 7:46:28] MAD : Remote Interface Driver: Waiting for
receive...
[2006/06/26 7:46:28] MAD ST: SubscriptionShim.execute()
returned:
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20051114_120000" instance="\NW-WIN-TREE
\nisd\services\ADTest\MAD" version="3.1">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="success"/>
</output>
</nds>
[2006/06/26 7:46:28] MAD ST: Applying input transformation
policies.
[2006/06/26 7:46:28] MAD ST: Applying policy: 'Convert selected
attributes to a form most commonly used in the Identity Vault.'.
[2006/06/26 7:46:28] MAD ST: Applying to status #1.
[2006/06/26 7:46:28] MAD ST: Evaluating selection criteria
for rule 'streetAddress: Convert CR-LF to LF'.
[2006/06/26 7:46:28] MAD ST: Rule selected.
[2006/06/26 7:46:28] MAD ST: Applying rule 'streetAddress:
Convert CR-LF to LF'.
[2006/06/26 7:46:28] MAD ST: Action: do-reformat-op-attr
("streetAddress",token-replace-all("\r\n","\r",token-local-variable
("current-value"))).
[2006/06/26 7:46:28] MAD ST: Evaluating selection criteria
for rule 'logonHours: Convert to Login Allowed Time Map form'.
[2006/06/26 7:46:28] MAD ST: Rule selected.
[2006/06/26 7:46:28] MAD ST: Applying rule 'logonHours:
Convert to Login Allowed Time Map form'.
[2006/06/26 7:46:28] MAD ST: Action: do-reformat-op-attr
("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-
value)")).
[2006/06/26 7:46:28] MAD ST: Evaluating selection criteria
for rule 'accountExpires: Convert to Identity Vault time format'.
[2006/06/26 7:46:28] MAD ST: Rule selected.
[2006/06/26 7:46:28] MAD ST: Applying rule 'accountExpires:
Convert to Identity Vault time format'.
[2006/06/26 7:46:28] MAD ST: Action: do-reformat-op-attr
("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-
value)")).
[2006/06/26 7:46:28] MAD ST: Evaluating selection criteria
for rule 'lockoutTime: Convert to Identity Vault time format'.
[2006/06/26 7:46:28] MAD ST: Rule selected.
[2006/06/26 7:46:28] MAD ST: Applying rule 'lockoutTime:
Convert to Identity Vault time format'.
[2006/06/26 7:46:28] MAD ST: Action: do-reformat-op-attr
("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-
value)")).
[2006/06/26 7:46:28] MAD ST: Policy returned:
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20051114_120000" instance="\NW-WIN-TREE
\nisd\services\ADTest\MAD" version="3.1">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="success"/>
</output>
</nds>
[2006/06/26 7:46:28] MAD ST: Applying policy: 'Email
notifications for failed password subscriptions'.
[2006/06/26 7:46:28] MAD ST: Applying to status #1.
[2006/06/26 7:46:28] MAD ST: Evaluating selection criteria
for rule 'Send e-mail on a failure when subscribing to passwords'.
[2006/06/26 7:46:28] MAD ST: (if-global-variable 'notify-
user-on-password-dist-failure' equal "true") = FALSE.
[2006/06/26 7:46:28] MAD ST: Rule rejected.
[2006/06/26 7:46:28] MAD ST: Evaluating selection criteria
for rule 'Send e-mail on failure to reset connected system password using
the Identity Manager data store password'.
[2006/06/26 7:46:28] MAD ST: (if-global-variable 'notify-
user-on-password-dist-failure' equal "true") = FALSE.
[2006/06/26 7:46:28] MAD ST: Rule rejected.
[2006/06/26 7:46:28] MAD ST: Policy returned:
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20051114_120000" instance="\NW-WIN-TREE
\nisd\services\ADTest\MAD" version="3.1">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="success"/>
</output>
</nds>
[2006/06/26 7:46:28] MAD ST: Applying schema mapping policies to
input.
[2006/06/26 7:46:28] MAD ST: Resolving association references.
[2006/06/26 7:46:28] MAD ST: Query from policy result
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20051114_120000" instance="\NW-WIN-TREE
\nisd\services\ADTest\MAD" version="3.1">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="success"/>
</output>
</nds>
[2006/06/26 7:46:28] MAD ST: No matches found.
[2006/06/26 7:46:28] MAD ST: Policy returned:
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="User" event-id="MINOS#20060626124628#1#29"
qualified-src-dn="O=nisd\OU=Schools\OU=Evers\CN=EVE101" src-dn="\NW-WIN-
TREE\nisd\Schools\Evers\EVE101" src-entry-id="41451">
<add-attr attr-name="Surname">
<value timestamp="1151325968#3" type="string">merrill</value>
</add-attr>
<add-attr attr-name="uniqueID">
<value timestamp="1151325968#5" type="string">EVE101</value>
</add-attr>
<add-attr attr-name="nspmDistributionPassword"><!-- content
suppressed -->
</add-attr>
</add>
</input>
</nds>
[2006/06/26 7:46:28] MAD ST: No match found.
[2006/06/26 7:46:28] MAD ST: Applying object creation policies.
[2006/06/26 7:46:28] MAD ST: Applying policy: Creation.
[2006/06/26 7:46:28] MAD ST: Applying to add #1.
[2006/06/26 7:46:28] MAD ST: Evaluating selection criteria for rule
'Create User objects'.
[2006/06/26 7:46:28] MAD ST: (if-class-name equal "User") = TRUE.
[2006/06/26 7:46:28] MAD ST: Rule selected.
[2006/06/26 7:46:28] MAD ST: Applying rule 'Create User objects'.
[2006/06/26 7:46:28] MAD ST: Action: do-veto-if-op-attr-not-
available("Full Name").
[2006/06/26 7:46:28] MAD ST: Policy returned:
[2006/06/26 7:46:28] MAD ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.0.20051118 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input/>
</nds>
[2006/06/26 7:46:28] MAD ST: Processing returned document.
[2006/06/26 7:46:28] MAD ST: Processing operation <status> for .
[2006/06/26 7:46:28] MAD ST:
DirXML Log Event -------------------
Driver: \NW-WIN-TREE\nisd\services\ADTest\MAD
Channel: Subscriber
Object: \NW-WIN-TREE\nisd\Schools\Evers\EVE101
Status: Warning
Message: Code(-8017) Operation vetoed by object creation policy.
[2006/06/26 7:46:28] MAD ST: End transaction.