Hi all

I've written the following policy and placed it in the event transofrm
section of my edir-2edir driver. I have added groups > guid, description,
cn to the filter and no other action is permoed or restricts 'groups'

What this is trying to achieve, is when an attribute changes (ie the year
of the course) if the group related to the course doesnt exist then it
creates a new group and adds the current user.

However it doesnt work, i keep getting errors of 'missing guid'
and 'Operation vetoed because of missing src-dn.'

Ive tried lots of ways, changed write=direct to true, to before
operation, after, during etc. Still doesnt work.

can anyone help???????


<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE policy PUBLIC "policy-
builder-dtd" "C:\Program
Files\Novell\Designer\eclipse\plugins\com.novell.d esigner.idm.oldpolicybui
lder_2.0.0.200703152140\DTD\dirxmlscript.dtd"><pol icy>
<rule>
<description>Course 1 Groups - Part 1 - Set variables
for on-the-fly group checking</description>
<conditions>
<or>
<if-op-attr
name="harperCourseCode" op="available"/>
<if-op-attr
name="harperYearOfCourse" op="available"/>
</or>
</conditions>
<actions>
<do-set-local-variable name="target-group">
<arg-string>
<token-text
xml:space="preserve">\HARPER\Harper-Adams\Groups\</token-text>
<token-src-attr
name="harperCourseCode"/>
<token-src-attr
name="harperYearofCourse"/>
</arg-string>
</do-set-local-variable>
<do-set-local-variable name="does-target-
exist">
<arg-string>
<token-dest-attr class-
name="Group" name="objectclass">
<arg-dn>

<token-local-variable name="target-group"/>
</arg-dn>
</token-dest-attr>
</arg-string>
</do-set-local-variable>
</actions>
</rule>
<rule>
<description>Course 1 Groups - Part 2 - Create Course
group &amp; make member on-the-fly</description>
<conditions>
<and>
<if-local-variable name="does-
target-exist" op="available"/>
<if-local-variable name="does-
target-exist" op="equal"/>
</and>
</conditions>
<actions>
<do-add-dest-object class-name="Group"
direct="true">
<arg-dn>
<token-local-variable
name="target-group"/>
</arg-dn>
</do-add-dest-object>
<do-add-dest-attr-value name="Group
Membership">
<arg-value type="string">
<token-local-variable
name="target-group"/>
</arg-value>
</do-add-dest-attr-value>
</actions>
</rule>
<rule>
<description>Course 1 Groups - Part 3 - Course Group
Exists so make member</description>
<conditions>
<and>
<if-local-variable name="does-
target-exist" op="available"/>
<if-local-variable mode="nocase"
name="does-target-exist" op="not-equal"/>
</and>
</conditions>
<actions>
<do-add-dest-attr-value name="Group
Membership">
<arg-value type="string">
<token-local-variable
name="target-group"/>
</arg-value>
</do-add-dest-attr-value>
</actions>
</rule>
</policy>