Hello,

Trying to get my eDir tree to sync up with AD. I'm having trouble getting
anything to sync.

Below is a DSTRACE, if anyone can figure out what I got wrong it would be
appreciated. I'm at a loss.

dstrace.log
-----------
ADdriver ST:Start transaction.

ADdriver ST:Processing events for transaction.

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<sync class-name="User" event-id="NW2#20070530200119#1#1"
qualified-src-dn="O=MJSDOU=BANCN=ReedP" src-dn="MENASHAMJSDBANReedP"
src-entry-id="32873" timestamp="0#0">
<association state="migrate"></association>
</sync>
</input>
</nds>

ADdriver ST:No event transformation policies.

ADdriver ST:Subscriber processing sync for MENASHAMJSDBANReedP.

ADdriver ST:Reading relevant attributes from MENASHAMJSDBANReedP.

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="MENASHAMJSDBANReedP"
dest-entry-id="32873" scope="entry">
<read-attr attr-name="Description"/>
<read-attr attr-name="Facsimile Telephone Number"/>
<read-attr attr-name="Full Name"/>
<read-attr attr-name="Given Name"/>
<read-attr attr-name="Initials"/>
<read-attr attr-name="Internet EMail Address"/>
<read-attr attr-name="L"/>
<read-attr attr-name="Login Allowed Time Map"/>
<read-attr attr-name="Login Disabled"/>
<read-attr attr-name="nspmDistributionPassword"/>
<read-attr attr-name="Physical Delivery Office Name"/>
<read-attr attr-name="Postal Code"/>
<read-attr attr-name="Postal Office Box"/>
<read-attr attr-name="S"/>
<read-attr attr-name="SA"/>
<read-attr attr-name="Surname"/>
<read-attr attr-name="Telephone Number"/>
<read-attr attr-name="Title"/>
</query>
</input>
</nds>

ADdriver ST:Pumping XDS to eDirectory.

ADdriver ST:Performing operation query for MENASHAMJSDBANReedP.

ADdriver ST:Read result:

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="User" qualified-src-dn="O=MJSDOU=BANCN=ReedP"
src-dn="MENASHAMJSDBANReedP" src-entry-id="32873">
<association state="migrate"></association>
<attr attr-name="Login Disabled">
<value timestamp="1022621624#5435" type="state">false</value>
</attr>
<attr attr-name="Surname">
<value timestamp="1022621624#5499" type="string">Reed</value>
</attr>
<attr attr-name="Full Name">
<value timestamp="1022621624#5505" type="string">Paul Reed</value>
</attr>
<attr attr-name="Given Name">
<value timestamp="1022621624#5507" type="string">Paul</value>
</attr>
<attr attr-name="Internet EMail Address">
<value timestamp="1023374078#10"
type="string">ReedP@mjsd.k12.wi.us</value>
</attr>
</instance>
<status level="success"></status>
</output>
</nds>

ADdriver ST:Synthetic add:

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<add class-name="User" event-id="NW2#20070530200119#1#1"
qualified-src-dn="O=MJSDOU=BANCN=ReedP" src-dn="MENASHAMJSDBANReedP"
src-entry-id="32873">
<association state="migrate"></association>
<add-attr attr-name="Login Disabled">
<value timestamp="1022621624#5435" type="state">false</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1022621624#5499" type="string">Reed</value>
</add-attr>
<add-attr attr-name="Full Name">
<value timestamp="1022621624#5505" type="string">Paul Reed</value>
</add-attr>
<add-attr attr-name="Given Name">
<value timestamp="1022621624#5507" type="string">Paul</value>
</add-attr>
<add-attr attr-name="Internet EMail Address">
<value timestamp="1023374078#10"
type="string">ReedP@mjsd.k12.wi.us</value>
</add-attr>
</add>
<status level="success"></status>
</output>
</nds>
ADdriver ST:Applying object matching policies.

ADdriver ST:Applying policy: 'Find matching object in Active Directory'.

ADdriver ST: Applying to add #1.

ADdriver ST: Evaluating selection criteria for rule 'remember relative
position in hierarchy'.

ADdriver ST: (if-src-dn in-subtree "MJSD") = TRUE.

ADdriver ST: Rule selected.

ADdriver ST: Applying rule 'remember relative position in hierarchy'.

ADdriver ST: Action:
do-set-op-property("unmatched-src-dn",token-unmatched-src-dn(convert="true")).

ADdriver ST: arg-string(token-unmatched-src-dn(convert="true"))

ADdriver ST: token-unmatched-src-dn(convert="true")

ADdriver ST: Token Value: "CN=ReedP,OU=BAN".

ADdriver ST: Arg Value: "CN=ReedP,OU=BAN".

ADdriver ST: Evaluating selection criteria for rule 'veto out-of-scope
events'.

ADdriver ST: (if-op-property 'unmatched-src-dn' not-available) =
FALSE.

ADdriver ST: Rule rejected.

ADdriver ST: Evaluating selection criteria for rule 'generate full name
if not in Identity Vault'.

ADdriver ST: (if-class-name equal "User") = TRUE.

ADdriver ST: (if-global-variable 'FullNameMap' equal "true") = TRUE.

ADdriver ST: (if-attr 'Full Name' not-available) = FALSE.

ADdriver ST: Rule rejected.

ADdriver ST: Evaluating selection criteria for rule 'match users based
on NT logon name'.

ADdriver ST: (if-class-name equal "User") = TRUE.

ADdriver ST: (if-global-variable 'LogonNameMap' equal "true") = TRUE.

ADdriver ST: Rule selected.

ADdriver ST: Applying rule 'match users based on NT logon name'.

ADdriver ST: Action:
do-find-matching-object(scope="subtree",arg-dn("CN=mjsd,DC=menashasd,DC=local"),arg-match-attr("DirXML-ADAliasName",token-replace-all("^a-zA-Z0-9x21x23-x29x2dx2ex40x5e-x60x7bx7dx7exc0-xf6xf8-xffx410-x44f","",token-src-name()))).

ADdriver ST: arg-dn("CN=mjsd,DC=menashasd,DC=local")

ADdriver ST: token-text("CN=mjsd,DC=menashasd,DC=local")

ADdriver ST: Arg Value: "CN=mjsd,DC=menashasd,DC=local".

ADdriver ST:
arg-match-attr("DirXML-ADAliasName",token-replace-all("^a-zA-Z0-9x21x23-x29x2dx2ex40x5e-x60x7bx7dx7exc0-xf6xf8-xffx410-x44f","",token-src-name()))

ADdriver ST:
arg-string(token-replace-all("^a-zA-Z0-9x21x23-x29x2dx2ex40x5e-x60x7bx7dx7exc0-xf6xf8-xffx410-x44f","",token-src-name()))

ADdriver ST:
token-replace-all("^a-zA-Z0-9x21x23-x29x2dx2ex40x5e-x60x7bx7dx7exc0-xf6xf8-xffx410-x44f","",token-src-name())

ADdriver ST:
token-replace-all("^a-zA-Z0-9x21x23-x29x2dx2ex40x5e-x60x7bx7dx7exc0-xf6xf8-xffx410-x44f","",token-src-name())

ADdriver ST: token-src-name()

ADdriver ST: Token Value: "ReedP".

ADdriver ST: Arg Value: "ReedP".

ADdriver ST: Token Value: "ReedP".

ADdriver ST: Arg Value: "ReedP".

ADdriver ST: Query from policy

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="CN=mjsd,DC=menashasd,DC=local"
scope="subtree">
<search-class class-name="User"/>
<search-attr attr-name="DirXML-ADAliasName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Fixing up association references.

ADdriver ST: Applying schema mapping policies to output.

ADdriver ST: Applying policy: SchemaMapping.

ADdriver ST: Mapping attr-name 'DirXML-ADAliasName' to
'sAMAccountName'.

ADdriver ST: Mapping class-name 'User' to 'user'.

ADdriver ST: Mapping class-name 'User' to 'user'.

ADdriver ST: Applying output transformation policies.

ADdriver ST: Applying policy: 'Convert selected attributes to a
form most commonly used in Active Directory.'.
token-replace-all("^a-zA-Z0-9x21x23-x29x2dx2ex40x5e-x60x7bx7dx7exc0-xf6xf8-xffx410-x44f","",token-src-name())

ADdriver ST: token-src-name()

ADdriver ST: Token Value: "ReedP".

ADdriver ST: Arg Value: "ReedP".

ADdriver ST: Token Value: "ReedP".

ADdriver ST: Arg Value: "ReedP".

ADdriver ST: Query from policy

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="CN=mjsd,DC=menashasd,DC=local"
scope="subtree">
<search-class class-name="User"/>
<search-attr attr-name="DirXML-ADAliasName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Fixing up association references.

ADdriver ST: Applying schema mapping policies to output.

ADdriver ST: Applying policy: SchemaMapping.

ADdriver ST: Mapping attr-name 'DirXML-ADAliasName' to
'sAMAccountName'.

ADdriver ST: Mapping class-name 'User' to 'user'.

ADdriver ST: Mapping class-name 'User' to 'user'.

ADdriver ST: Applying output transformation policies.

ADdriver ST: Applying policy: 'Convert selected attributes to a
form most commonly used in Active Directory.'.

ADdriver ST: Applying to query #1.

ADdriver ST: Evaluating selection criteria for rule 'Street
Address: Convert LF to CR-LF'.

ADdriver ST: Rule selected.

ADdriver ST: Applying rule 'Street Address: Convert LF to
CR-LF'.

ADdriver ST: Action:
do-reformat-op-attr("streetAddress",token-replace-all("[^r]n","rn",token-local-variable("current-value"))).

ADdriver ST: Evaluating selection criteria for rule
'logonHours: Convert to Active Directory form'.

ADdriver ST: Rule selected.

ADdriver ST: Applying rule 'logonHours: Convert to Active
Directory form'.

ADdriver ST: Action:
do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).

ADdriver ST: Evaluating selection criteria for rule
'accountExpires: Convert to Active Directory form'.

ADdriver ST: Rule selected.

ADdriver ST: Applying rule 'accountExpires: Convert to Active
Directory form'.

ADdriver ST: Action:
do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).

ADdriver ST: Evaluating selection criteria for rule
'lockoutTime: Convert to Active Directory form'.

ADdriver ST: Rule selected.

ADdriver ST: Applying rule 'lockoutTime: Convert to Active
Directory form'.

ADdriver ST: Action:
do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).

ADdriver ST: Evaluating selection criteria for rule 'Add: User
- convert multi-valued Telephone to single value'.

ADdriver ST: (if-operation equal "add") = FALSE.

ADdriver ST: Rule rejected.

ADdriver ST: Evaluating selection criteria for rule 'update
Active Directory logon name'.

ADdriver ST: (if-xpath true "self::status[@level =
'success']/operation-data/windows-2000-logon-name") = FALSE.

ADdriver ST: Rule rejected.

ADdriver ST: Policy returned:

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="CN=mjsd,DC=menashasd,DC=local"
event-id="0" scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Applying policy: 'Email notifications for failed
password publications'.

ADdriver ST: Applying to query #1.

ADdriver ST: Evaluating selection criteria for rule 'Send
e-mail for a failed publish password operation'.

ADdriver ST: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.

ADdriver ST: (if-operation equal "status") = FALSE.

ADdriver ST: Rule rejected.

ADdriver ST: Policy returned:

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="CN=mjsd,DC=menashasd,DC=local"
event-id="0" scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Submitting document to subscriber shim:

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="CN=mjsd,DC=menashasd,DC=local"
event-id="0" scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Remote Interface Driver: Sending...

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="CN=mjsd,DC=menashasd,DC=local"
event-id="0" scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Remote Interface Driver: Document sent.

ADdriver :Remote Interface Driver: Received.

ADdriver :
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20070122_093000"
instance="MENASHAMJSDServersimdmjsdADdriver" version="3.5.0">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="success"/>
</output>
</nds>

ADdriver :Remote Interface Driver: Received document for subscriber channel

ADdriver :Remote Interface Driver: Waiting for receive...

ADdriver ST: SubscriptionShim.execute() returned:

ADdriver ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20070122_093000"
instance="MENASHAMJSDServersimdmjsdADdriver" version="3.5.0">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="success"/>
</output>
</nds>
token-replace-all("^a-zA-Z0-9x21x23-x29x2dx2ex40x5e-x60x7bx7dx7exc0-xf6xf8-xffx410-x44f","",token-src-name())

ADdriver ST: token-src-name()

ADdriver ST: Token Value: "ReedP".

ADdriver ST: Arg Value: "ReedP".

ADdriver ST: Token Value: "ReedP".

ADdriver ST: Arg Value: "ReedP".

ADdriver ST: Query from policy

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="CN=mjsd,DC=menashasd,DC=local"
scope="subtree">
<search-class class-name="User"/>
<search-attr attr-name="DirXML-ADAliasName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Fixing up association references.

ADdriver ST: Applying schema mapping policies to output.

ADdriver ST: Applying policy: SchemaMapping.

ADdriver ST: Mapping attr-name 'DirXML-ADAliasName' to
'sAMAccountName'.

ADdriver ST: Mapping class-name 'User' to 'user'.

ADdriver ST: Mapping class-name 'User' to 'user'.

ADdriver ST: Applying output transformation policies.

ADdriver ST: Applying policy: 'Convert selected attributes to a
form most commonly used in Active Directory.'.

ADdriver ST: Applying to query #1.

ADdriver ST: Evaluating selection criteria for rule 'Street
Address: Convert LF to CR-LF'.

ADdriver ST: Rule selected.

ADdriver ST: Applying rule 'Street Address: Convert LF to
CR-LF'.

ADdriver ST: Action:
do-reformat-op-attr("streetAddress",token-replace-all("[^r]n","rn",token-local-variable("current-value"))).

ADdriver ST: Evaluating selection criteria for rule
'logonHours: Convert to Active Directory form'.

ADdriver ST: Rule selected.

ADdriver ST: Applying rule 'logonHours: Convert to Active
Directory form'.

ADdriver ST: Action:
do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).

ADdriver ST: Evaluating selection criteria for rule
'accountExpires: Convert to Active Directory form'.

ADdriver ST: Rule selected.

ADdriver ST: Applying rule 'accountExpires: Convert to Active
Directory form'.

ADdriver ST: Action:
do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).

ADdriver ST: Evaluating selection criteria for rule
'lockoutTime: Convert to Active Directory form'.

ADdriver ST: Rule selected.

ADdriver ST: Applying rule 'lockoutTime: Convert to Active
Directory form'.

ADdriver ST: Action:
do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).

ADdriver ST: Evaluating selection criteria for rule 'Add: User
- convert multi-valued Telephone to single value'.

ADdriver ST: (if-operation equal "add") = FALSE.

ADdriver ST: Rule rejected.

ADdriver ST: Evaluating selection criteria for rule 'update
Active Directory logon name'.

ADdriver ST: (if-xpath true "self::status[@level =
'success']/operation-data/windows-2000-logon-name") = FALSE.

ADdriver ST: Rule rejected.

ADdriver ST: Policy returned:

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="CN=mjsd,DC=menashasd,DC=local"
event-id="0" scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Applying policy: 'Email notifications for failed
password publications'.

ADdriver ST: Applying to query #1.

ADdriver ST: Evaluating selection criteria for rule 'Send
e-mail for a failed publish password operation'.

ADdriver ST: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.

ADdriver ST: (if-operation equal "status") = FALSE.

ADdriver ST: Rule rejected.

ADdriver ST: Policy returned:

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="CN=mjsd,DC=menashasd,DC=local"
event-id="0" scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Submitting document to subscriber shim:

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="CN=mjsd,DC=menashasd,DC=local"
event-id="0" scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Remote Interface Driver: Sending...

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="CN=mjsd,DC=menashasd,DC=local"
event-id="0" scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Remote Interface Driver: Document sent.

ADdriver :Remote Interface Driver: Received.

ADdriver :
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20070122_093000"
instance="MENASHAMJSDServersimdmjsdADdriver" version="3.5.0">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="success"/>
</output>
</nds>

ADdriver :Remote Interface Driver: Received document for subscriber channel

ADdriver :Remote Interface Driver: Waiting for receive...

ADdriver ST: SubscriptionShim.execute() returned:

ADdriver ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20070122_093000"
instance="MENASHAMJSDServersimdmjsdADdriver" version="3.5.0">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="success"/>
</output>
</nds>
token-replace-all("^a-zA-Z0-9x21x23-x29x2dx2ex40x5e-x60x7bx7dx7exc0-xf6xf8-xffx410-x44f","",token-src-name())

ADdriver ST: token-src-name()

ADdriver ST: Token Value: "ReedP".

ADdriver ST: Arg Value: "ReedP".

ADdriver ST: Token Value: "ReedP".

ADdriver ST: Arg Value: "ReedP".

ADdriver ST: Query from policy

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="CN=mjsd,DC=menashasd,DC=local"
scope="subtree">
<search-class class-name="User"/>
<search-attr attr-name="DirXML-ADAliasName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Fixing up association references.

ADdriver ST: Applying schema mapping policies to output.

ADdriver ST: Applying policy: SchemaMapping.

ADdriver ST: Mapping attr-name 'DirXML-ADAliasName' to
'sAMAccountName'.

ADdriver ST: Mapping class-name 'User' to 'user'.

ADdriver ST: Mapping class-name 'User' to 'user'.

ADdriver ST: Applying output transformation policies.

ADdriver ST: Applying policy: 'Convert selected attributes to a
form most commonly used in Active Directory.'.

ADdriver ST: Applying to query #1.

ADdriver ST: Evaluating selection criteria for rule 'Street
Address: Convert LF to CR-LF'.

ADdriver ST: Rule selected.

ADdriver ST: Applying rule 'Street Address: Convert LF to
CR-LF'.

ADdriver ST: Action:
do-reformat-op-attr("streetAddress",token-replace-all("[^r]n","rn",token-local-variable("current-value"))).

ADdriver ST: Evaluating selection criteria for rule
'logonHours: Convert to Active Directory form'.

ADdriver ST: Rule selected.

ADdriver ST: Applying rule 'logonHours: Convert to Active
Directory form'.

ADdriver ST: Action:
do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).

ADdriver ST: Evaluating selection criteria for rule
'accountExpires: Convert to Active Directory form'.

ADdriver ST: Rule selected.

ADdriver ST: Applying rule 'accountExpires: Convert to Active
Directory form'.

ADdriver ST: Action:
do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).

ADdriver ST: Evaluating selection criteria for rule
'lockoutTime: Convert to Active Directory form'.

ADdriver ST: Rule selected.

ADdriver ST: Applying rule 'lockoutTime: Convert to Active
Directory form'.

ADdriver ST: Action:
do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).

ADdriver ST: Evaluating selection criteria for rule 'Add: User
- convert multi-valued Telephone to single value'.

ADdriver ST: (if-operation equal "add") = FALSE.

ADdriver ST: Rule rejected.

ADdriver ST: Evaluating selection criteria for rule 'update
Active Directory logon name'.

ADdriver ST: (if-xpath true "self::status[@level =
'success']/operation-data/windows-2000-logon-name") = FALSE.

ADdriver ST: Rule rejected.

ADdriver ST: Policy returned:

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="CN=mjsd,DC=menashasd,DC=local"
event-id="0" scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Applying policy: 'Email notifications for failed
password publications'.

ADdriver ST: Applying to query #1.

ADdriver ST: Evaluating selection criteria for rule 'Send
e-mail for a failed publish password operation'.

ADdriver ST: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.

ADdriver ST: (if-operation equal "status") = FALSE.

ADdriver ST: Rule rejected.

ADdriver ST: Policy returned:

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="CN=mjsd,DC=menashasd,DC=local"
event-id="0" scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Submitting document to subscriber shim:

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="CN=mjsd,DC=menashasd,DC=local"
event-id="0" scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Remote Interface Driver: Sending...

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="CN=mjsd,DC=menashasd,DC=local"
event-id="0" scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Remote Interface Driver: Document sent.

ADdriver :Remote Interface Driver: Received.

ADdriver :
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20070122_093000"
instance="MENASHAMJSDServersimdmjsdADdriver" version="3.5.0">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="success"/>
</output>
</nds>

ADdriver :Remote Interface Driver: Received document for subscriber channel

ADdriver :Remote Interface Driver: Waiting for receive...

ADdriver ST: SubscriptionShim.execute() returned:

ADdriver ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20070122_093000"
instance="MENASHAMJSDServersimdmjsdADdriver" version="3.5.0">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="success"/>
</output>
</nds>
token-replace-all("^a-zA-Z0-9x21x23-x29x2dx2ex40x5e-x60x7bx7dx7exc0-xf6xf8-xffx410-x44f","",token-src-name())

ADdriver ST: token-src-name()

ADdriver ST: Token Value: "ReedP".

ADdriver ST: Arg Value: "ReedP".

ADdriver ST: Token Value: "ReedP".

ADdriver ST: Arg Value: "ReedP".

ADdriver ST: Query from policy

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="CN=mjsd,DC=menashasd,DC=local"
scope="subtree">
<search-class class-name="User"/>
<search-attr attr-name="DirXML-ADAliasName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Fixing up association references.

ADdriver ST: Applying schema mapping policies to output.

ADdriver ST: Applying policy: SchemaMapping.

ADdriver ST: Mapping attr-name 'DirXML-ADAliasName' to
'sAMAccountName'.

ADdriver ST: Mapping class-name 'User' to 'user'.

ADdriver ST: Mapping class-name 'User' to 'user'.

ADdriver ST: Applying output transformation policies.

ADdriver ST: Applying policy: 'Convert selected attributes to a
form most commonly used in Active Directory.'.

ADdriver ST: Applying to query #1.

ADdriver ST: Evaluating selection criteria for rule 'Street
Address: Convert LF to CR-LF'.

ADdriver ST: Rule selected.

ADdriver ST: Applying rule 'Street Address: Convert LF to
CR-LF'.

ADdriver ST: Action:
do-reformat-op-attr("streetAddress",token-replace-all("[^r]n","rn",token-local-variable("current-value"))).

ADdriver ST: Evaluating selection criteria for rule
'logonHours: Convert to Active Directory form'.

ADdriver ST: Rule selected.

ADdriver ST: Applying rule 'logonHours: Convert to Active
Directory form'.

ADdriver ST: Action:
do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).

ADdriver ST: Evaluating selection criteria for rule
'accountExpires: Convert to Active Directory form'.

ADdriver ST: Rule selected.

ADdriver ST: Applying rule 'accountExpires: Convert to Active
Directory form'.

ADdriver ST: Action:
do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).

ADdriver ST: Evaluating selection criteria for rule
'lockoutTime: Convert to Active Directory form'.

ADdriver ST: Rule selected.

ADdriver ST: Applying rule 'lockoutTime: Convert to Active
Directory form'.

ADdriver ST: Action:
do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).

ADdriver ST: Evaluating selection criteria for rule 'Add: User
- convert multi-valued Telephone to single value'.

ADdriver ST: (if-operation equal "add") = FALSE.

ADdriver ST: Rule rejected.

ADdriver ST: Evaluating selection criteria for rule 'update
Active Directory logon name'.

ADdriver ST: (if-xpath true "self::status[@level =
'success']/operation-data/windows-2000-logon-name") = FALSE.

ADdriver ST: Rule rejected.

ADdriver ST: Policy returned:

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="CN=mjsd,DC=menashasd,DC=local"
event-id="0" scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Applying policy: 'Email notifications for failed
password publications'.

ADdriver ST: Applying to query #1.

ADdriver ST: Evaluating selection criteria for rule 'Send
e-mail for a failed publish password operation'.

ADdriver ST: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.

ADdriver ST: (if-operation equal "status") = FALSE.

ADdriver ST: Rule rejected.

ADdriver ST: Policy returned:

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="CN=mjsd,DC=menashasd,DC=local"
event-id="0" scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Submitting document to subscriber shim:

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="CN=mjsd,DC=menashasd,DC=local"
event-id="0" scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Remote Interface Driver: Sending...

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="user" dest-dn="CN=mjsd,DC=menashasd,DC=local"
event-id="0" scope="subtree">
<search-class class-name="user"/>
<search-attr attr-name="sAMAccountName">
<value type="string">ReedP</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>

ADdriver ST: Remote Interface Driver: Document sent.

ADdriver :Remote Interface Driver: Received.

ADdriver :
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20070122_093000"
instance="MENASHAMJSDServersimdmjsdADdriver" version="3.5.0">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="success"/>
</output>
</nds>

ADdriver :Remote Interface Driver: Received document for subscriber channel

ADdriver :Remote Interface Driver: Waiting for receive...

ADdriver ST: SubscriptionShim.execute() returned:

ADdriver ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20070122_093000"
instance="MENASHAMJSDServersimdmjsdADdriver" version="3.5.0">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="success"/>
</output>
</nds>
ADdriver ST: No matches found.

ADdriver ST: Evaluating selection criteria for rule 'match everything
else'.

ADdriver ST: (if-class-name not-equal "User") = FALSE.

ADdriver ST: Rule rejected.

ADdriver ST:Policy returned:

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="User" event-id="NW2#20070530200119#1#1"
qualified-src-dn="O=MJSDOU=BANCN=ReedP" src-dn="MENASHAMJSDBANReedP"
src-entry-id="32873">
<add-attr attr-name="Login Disabled">
<value timestamp="1022621624#5435" type="state">false</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1022621624#5499" type="string">Reed</value>
</add-attr>
<add-attr attr-name="Full Name">
<value timestamp="1022621624#5505" type="string">Paul Reed</value>
</add-attr>
<add-attr attr-name="Given Name">
<value timestamp="1022621624#5507" type="string">Paul</value>
</add-attr>
<add-attr attr-name="Internet EMail Address">
<value timestamp="1023374078#10"
type="string">ReedP@mjsd.k12.wi.us</value>
</add-attr>
<operation-data unmatched-src-dn="CN=ReedP,OU=BAN"/>
</add>
</input>
</nds>

ADdriver ST:No match found.

ADdriver ST:Applying object creation policies.

ADdriver ST:Applying policy: Creation.

ADdriver ST: Applying to add #1.

ADdriver ST: Evaluating selection criteria for rule 'Veto if
nspmDistributionPassword is not available'.

ADdriver ST: (if-class-name equal "User") = TRUE.

ADdriver ST: (if-global-variable 'enable-password-subscribe' equal
"true") = TRUE.

ADdriver ST: Rule selected.

ADdriver ST: Applying rule 'Veto if nspmDistributionPassword is not
available'.

ADdriver ST: Action:
do-veto-if-op-attr-not-available("nspmDistributionPassword").

ADdriver ST:Policy returned:

ADdriver ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.1.20070411 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input/>
</nds>

ADdriver ST:Processing returned document.

ADdriver ST:Processing operation <status> for .

ADdriver ST:
DirXML Log Event -------------------
Driver: MENASHAMJSDServersimdmjsdADdriver
Channel: Subscriber
Object: MENASHAMJSDBANReedP
Status: Warning
Message: Code(-8017) Operation vetoed by object creation policy.

ADdriver ST:End transaction.