This has got to be something simple...

IDM 3.01, eDir 8.8.1

I have an eDir-eDir driver, it is successfully creating a new user on the
publisher using the add-operation-template-dn (sic) verb with the template
applied OK. But I need it to also write back the group memberships on the
subscriber channel. I suspect it is being supressed by loopback
protection. How do I and where do I trigger a forced sync of the
attributes added by the template?

trace follows (client name was changed to protect the innocent)
Thanx
Rob


Wednesday, August 22, 2007
09:49:04 1464 Drvrs: ZEN-IDM PT: : Received.
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="User" event-id="Active Directory##1148dd559d6##0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412"
timestamp="1187790543#30">
<add-attr attr-name="BNAPwdLastSet">
<value timestamp="1187790543#6" type="time">1187790541</value>
</add-attr>
<add-attr attr-name="GUID">
<value timestamp="1187790543#30"
type="octet">F5OdFvmeuUKLdiqeDuQ1EQ==</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1187790543#29" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1187790543#8" type="string">Livering-Cole</value>
</add-attr>
<add-attr attr-name="Given Name">
<value timestamp="1187790543#5" type="string">Amanda</value>
</add-attr>
<add-attr attr-name="DirXML-ADContext">
<value timestamp="1187790543#10" type="string">CN=Amanda
Livering-Cole,OU=Users,OU=Miami, Latin HQ,OU=BNA Regional
Offices,OU=BNA,DC=BNA-hq,DC=com</value>
</add-attr>
<add-attr attr-name="DirXML-ADAliasName">
<value timestamp="1187790543#7" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Full Name">
<value timestamp="1187790543#4" type="string">Amanda Livering-Cole</value>
</add-attr>
<password><!-- content suppressed --></password>
</add>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Receiving DOM document from application.
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="User" event-id="Active Directory##1148dd559d6##0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412"
timestamp="1187790543#30">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<add-attr attr-name="BNAPwdLastSet">
<value timestamp="1187790543#6" type="time">1187790541</value>
</add-attr>
<add-attr attr-name="GUID">
<value timestamp="1187790543#30"
type="octet">F5OdFvmeuUKLdiqeDuQ1EQ==</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1187790543#29" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1187790543#8" type="string">Livering-Cole</value>
</add-attr>
<add-attr attr-name="Given Name">
<value timestamp="1187790543#5" type="string">Amanda</value>
</add-attr>
<add-attr attr-name="DirXML-ADContext">
<value timestamp="1187790543#10" type="string">CN=Amanda
Livering-Cole,OU=Users,OU=Miami, Latin HQ,OU=BNA Regional
Offices,OU=BNA,DC=BNA-hq,DC=com</value>
</add-attr>
<add-attr attr-name="DirXML-ADAliasName">
<value timestamp="1187790543#7" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Full Name">
<value timestamp="1187790543#4" type="string">Amanda Livering-Cole</value>
</add-attr>
<password><!-- content suppressed --></password>
</add>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying input transformation policies.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Email notifications for
failed password subscriptions'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying to add #1.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail on a failure when subscribing to passwords'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail on failure to reset connected system password using the
Identity Manager data store password'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="User" event-id="Active Directory##1148dd559d6##0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412"
timestamp="1187790543#30">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<add-attr attr-name="BNAPwdLastSet">
<value timestamp="1187790543#6" type="time">1187790541</value>
</add-attr>
<add-attr attr-name="GUID">
<value timestamp="1187790543#30"
type="octet">F5OdFvmeuUKLdiqeDuQ1EQ==</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1187790543#29" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1187790543#8" type="string">Livering-Cole</value>
</add-attr>
<add-attr attr-name="Given Name">
<value timestamp="1187790543#5" type="string">Amanda</value>
</add-attr>
<add-attr attr-name="DirXML-ADContext">
<value timestamp="1187790543#10" type="string">CN=Amanda
Livering-Cole,OU=Users,OU=Miami, Latin HQ,OU=BNA Regional
Offices,OU=BNA,DC=BNA-hq,DC=com</value>
</add-attr>
<add-attr attr-name="DirXML-ADAliasName">
<value timestamp="1187790543#7" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Full Name">
<value timestamp="1187790543#4" type="string">Amanda Livering-Cole</value>
</add-attr>
<password><!-- content suppressed --></password>
</add>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying schema mapping policies to input.
09:49:04 1464 Drvrs: ZEN-IDM PT: No mapping for class-name 'User'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Resolving association references.
09:49:04 1464 Drvrs: ZEN-IDM PT: No event transformation policies.
09:49:04 1464 Drvrs: ZEN-IDM PT: No associated objects.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying publisher filter.
09:49:04 1464 Drvrs: ZEN-IDM PT: Filtered out <add-attr attr-name='GUID'>.
09:49:04 1464 Drvrs: ZEN-IDM PT: Publisher processing add for
IDMBNAActiveACOLETEST.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying object matching policies.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying policy: Matching Rule.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying to add #1.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Users'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-class-name equal "User") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule selected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying rule 'Users'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-find-matching-object(scope="subtree",arg-dn("BNA"),arg-match-attr("CN"),arg-match-attr("Given
Name"),arg-match-attr("Surname")).
09:49:04 1464 Drvrs: ZEN-IDM PT: arg-dn("BNA")
09:49:04 1464 Drvrs: ZEN-IDM PT: token-text("BNA")
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "BNA".
09:49:04 1464 Drvrs: ZEN-IDM PT: arg-match-attr("CN")
09:49:04 1464 Drvrs: ZEN-IDM PT: arg-match-attr("Given Name")
09:49:04 1464 Drvrs: ZEN-IDM PT: arg-match-attr("Surname")
09:49:04 1464 Drvrs: ZEN-IDM PT: Query from policy
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="BNA" scope="subtree">
<search-class class-name="User"/>
<search-attr attr-name="CN">
<value timestamp="1187790543#29" type="string">ACOLETEST</value>
</search-attr>
<search-attr attr-name="Given Name">
<value timestamp="1187790543#5" type="string">Amanda</value>
</search-attr>
<search-attr attr-name="Surname">
<value timestamp="1187790543#8" type="string">Livering-Cole</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Pumping XDS to eDirectory.
09:49:04 1464 Drvrs: ZEN-IDM PT: Performing operation query for BNA.
09:49:04 1464 Drvrs: ZEN-IDM PT: Query from policy result
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="success"></status>
</output>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: No matches found.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Groups'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-class-name equal "Group") = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="User" event-id="Active Directory##1148dd559d6##0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412"
timestamp="1187790543#30">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<add-attr attr-name="BNAPwdLastSet">
<value timestamp="1187790543#6" type="time">1187790541</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1187790543#29" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1187790543#8" type="string">Livering-Cole</value>
</add-attr>
<add-attr attr-name="Given Name">
<value timestamp="1187790543#5" type="string">Amanda</value>
</add-attr>
<add-attr attr-name="DirXML-ADContext">
<value timestamp="1187790543#10" type="string">CN=Amanda
Livering-Cole,OU=Users,OU=Miami, Latin HQ,OU=BNA Regional
Offices,OU=BNA,DC=BNA-hq,DC=com</value>
</add-attr>
<add-attr attr-name="DirXML-ADAliasName">
<value timestamp="1187790543#7" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Full Name">
<value timestamp="1187790543#4" type="string">Amanda Livering-Cole</value>
</add-attr>
<password><!-- content suppressed --></password>
</add>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: No match found.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying object creation policies.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying policy: Create Rule.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying to add #1.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Users'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-class-name equal "User") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule selected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying rule 'Users'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-veto-if-op-attr-not-available("Given Name").
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-veto-if-op-attr-not-available("Surname").
09:49:04 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="User" event-id="Active Directory##1148dd559d6##0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412"
timestamp="1187790543#30">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<add-attr attr-name="BNAPwdLastSet">
<value timestamp="1187790543#6" type="time">1187790541</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1187790543#29" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1187790543#8" type="string">Livering-Cole</value>
</add-attr>
<add-attr attr-name="Given Name">
<value timestamp="1187790543#5" type="string">Amanda</value>
</add-attr>
<add-attr attr-name="DirXML-ADContext">
<value timestamp="1187790543#10" type="string">CN=Amanda
Livering-Cole,OU=Users,OU=Miami, Latin HQ,OU=BNA Regional
Offices,OU=BNA,DC=BNA-hq,DC=com</value>
</add-attr>
<add-attr attr-name="DirXML-ADAliasName">
<value timestamp="1187790543#7" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Full Name">
<value timestamp="1187790543#4" type="string">Amanda Livering-Cole</value>
</add-attr>
<password><!-- content suppressed --></password>
</add>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying object placement policies.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying policy: Placement Rule.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying to add #1.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'[BNA] Set Local Variables'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-class-name equal "User") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-attr 'DirXML-ADContext' available) =
TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule selected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying rule '[BNA] Set Local Variables'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-set-local-variable("AD-CONTEXT",token-attr("DirXML-ADContext")).
09:49:04 1464 Drvrs: ZEN-IDM PT: arg-string(token-attr("DirXML-ADContext"))
09:49:04 1464 Drvrs: ZEN-IDM PT: token-attr("DirXML-ADContext")
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "CN=Amanda
Livering-Cole,OU=Users,OU=Miami, Latin HQ,OU=BNA Regional
Offices,OU=BNA,DC=BNA-hq,DC=com".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "CN=Amanda
Livering-Cole,OU=Users,OU=Miami, Latin HQ,OU=BNA Regional
Offices,OU=BNA,DC=BNA-hq,DC=com".
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-set-local-variable("AD-TOP-LEVEL",token-parse-dn(dest-dn-format="dot",length="1",src-dn-format="ldap",start="3",token-local-variable("AD-CONTEXT"))).
09:49:04 1464 Drvrs: ZEN-IDM PT:
arg-string(token-parse-dn(dest-dn-format="dot",length="1",src-dn-format="ldap",start="3",token-local-variable("AD-CONTEXT")))
09:49:04 1464 Drvrs: ZEN-IDM PT:
token-parse-dn(dest-dn-format="dot",length="1",src-dn-format="ldap",start="3",token-local-variable("AD-CONTEXT"))
09:49:04 1464 Drvrs: ZEN-IDM PT:
token-parse-dn(dest-dn-format="dot",length="1",src-dn-format="ldap",start="3",token-local-variable("AD-CONTEXT"))
09:49:04 1464 Drvrs: ZEN-IDM PT: token-local-variable("AD-CONTEXT")
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "CN=Amanda
Livering-Cole,OU=Users,OU=Miami, Latin HQ,OU=BNA Regional
Offices,OU=BNA,DC=BNA-hq,DC=com".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "CN=Amanda
Livering-Cole,OU=Users,OU=Miami, Latin HQ,OU=BNA Regional
Offices,OU=BNA,DC=BNA-hq,DC=com".
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "BNA Regional Offices".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "BNA Regional Offices".
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-set-local-variable("AD-2ND-LEVEL",token-parse-dn(dest-dn-format="dot",length="1",src-dn-format="ldap",start="4",token-local-variable("AD-CONTEXT"))).
09:49:04 1464 Drvrs: ZEN-IDM PT:
arg-string(token-parse-dn(dest-dn-format="dot",length="1",src-dn-format="ldap",start="4",token-local-variable("AD-CONTEXT")))
09:49:04 1464 Drvrs: ZEN-IDM PT:
token-parse-dn(dest-dn-format="dot",length="1",src-dn-format="ldap",start="4",token-local-variable("AD-CONTEXT"))
09:49:04 1464 Drvrs: ZEN-IDM PT:
token-parse-dn(dest-dn-format="dot",length="1",src-dn-format="ldap",start="4",token-local-variable("AD-CONTEXT"))
09:49:04 1464 Drvrs: ZEN-IDM PT: token-local-variable("AD-CONTEXT")
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "CN=Amanda
Livering-Cole,OU=Users,OU=Miami, Latin HQ,OU=BNA Regional
Offices,OU=BNA,DC=BNA-hq,DC=com".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "CN=Amanda
Livering-Cole,OU=Users,OU=Miami, Latin HQ,OU=BNA Regional
Offices,OU=BNA,DC=BNA-hq,DC=com".
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "Miami, Latin HQ".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "Miami, Latin HQ".
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'[BNA] Users'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-class-name equal "User") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule selected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying rule '[BNA] Users'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-set-op-dest-dn(arg-dn("BNAAmericas"+"Users"+token-src-name())).
09:49:04 1464 Drvrs: ZEN-IDM PT:
arg-dn("BNAAmericas"+"Users"+token-src-name())
09:49:04 1464 Drvrs: ZEN-IDM PT: token-text("BNAAmericas")
09:49:04 1464 Drvrs: ZEN-IDM PT: token-text("Users")
09:49:04 1464 Drvrs: ZEN-IDM PT: token-src-name()
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "ACOLETEST".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "BNAAmericasUsersACOLETEST".
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'[BNA] Regional Offices'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-class-name equal "User") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-local-variable 'AD-TOP-LEVEL' equal
"BNA Regional Offices") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule selected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying rule '[BNA] Regional Offices'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-set-local-variable("DEST-DN","BNA").
09:49:04 1464 Drvrs: ZEN-IDM PT: arg-string("BNA")
09:49:04 1464 Drvrs: ZEN-IDM PT: token-text("BNA")
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "BNA".
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-set-local-variable("SEARCH-VALUE",token-local-variable("AD-2ND-LEVEL")).
09:49:04 1464 Drvrs: ZEN-IDM PT:
arg-string(token-local-variable("AD-2ND-LEVEL"))
09:49:04 1464 Drvrs: ZEN-IDM PT: token-local-variable("AD-2ND-LEVEL")
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "Miami, Latin HQ".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "Miami, Latin HQ".
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-set-local-variable("QUERY-RESULT",arg-node-set(token-xpath("query:search($destQueryProcessor,'subtree', '',$DEST-DN,'','BNAADPlacement',$SEARCH-VALUE,'')"))).
09:49:04 1464 Drvrs: ZEN-IDM PT:
arg-node-set(token-xpath("query:search($destQueryProcessor,'subtree', '',$DEST-DN,'','BNAADPlacement',$SEARCH-VALUE,'')"))
09:49:04 1464 Drvrs: ZEN-IDM PT:
token-xpath("query:search($destQueryProcessor,'subtree', '',$DEST-DN,'','BNAADPlacement',$SEARCH-VALUE,'')")
09:49:04 1464 Drvrs: ZEN-IDM PT: Query from policy
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query dest-dn="BNA" scope="subtree">
<search-attr attr-name="BNAADPlacement">
<value>Miami, Latin HQ</value>
</search-attr>
<read-attr/>
</query>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Pumping XDS to eDirectory.
09:49:04 1464 Drvrs: ZEN-IDM PT: Performing operation query for BNA.
09:49:04 1464 Drvrs: ZEN-IDM PT: Query from policy result
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="Organizational Unit" event-id="0"
qualified-src-dn="O=BNAOU=Americas" src-dn="ZENBNAAmericas"
src-entry-id="32898">
<association></association>
</instance>
<status event-id="0" level="success"></status>
</output>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: {<instance> @class-name =
"Organizational Unit" @event-id = "0" @qualified-src-dn =
"O=BNAOU=Americas" @src-dn = "ZENBNAAmericas" @src-entry-id = "32898"}.
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: {<instance> @class-name =
"Organizational Unit" @event-id = "0" @qualified-src-dn =
"O=BNAOU=Americas" @src-dn = "ZENBNAAmericas" @src-entry-id = "32898"}.
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-set-local-variable("DEST-OU",token-xpath("$QUERY-RESULT/@src-dn")).
09:49:04 1464 Drvrs: ZEN-IDM PT:
arg-string(token-xpath("$QUERY-RESULT/@src-dn"))
09:49:04 1464 Drvrs: ZEN-IDM PT: token-xpath("$QUERY-RESULT/@src-dn")
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "ZENBNAAmericas".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "ZENBNAAmericas".
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-set-op-dest-dn(arg-dn(token-local-variable("DEST-OU")+"Users"+token-src-name())).
09:49:04 1464 Drvrs: ZEN-IDM PT:
arg-dn(token-local-variable("DEST-OU")+"Users"+token-src-name())
09:49:04 1464 Drvrs: ZEN-IDM PT: token-local-variable("DEST-OU")
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "ZENBNAAmericas".
09:49:04 1464 Drvrs: ZEN-IDM PT: token-text("Users")
09:49:04 1464 Drvrs: ZEN-IDM PT: token-src-name()
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "ACOLETEST".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "ZENBNAAmericasUsersACOLETEST".
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'[BNA] Apply Template'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-class-name equal "User") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule selected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying rule '[BNA] Apply Template'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-set-op-template-dn(arg-dn(token-dest-dn(length="3")+""+token-class-name())).
09:49:04 1464 Drvrs: ZEN-IDM PT:
arg-dn(token-dest-dn(length="3")+""+token-class-name())
09:49:04 1464 Drvrs: ZEN-IDM PT: token-dest-dn(length="3")
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "ZENBNAAmericas".
09:49:04 1464 Drvrs: ZEN-IDM PT: token-text("")
09:49:04 1464 Drvrs: ZEN-IDM PT: token-class-name()
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "User".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "ZENBNAAmericasUser".
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'[BNA] Groups'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-class-name equal "Group") = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'[BNA] Veto if no placement'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-dest-dn not-available) = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="User" dest-dn="ZENBNAAmericasUsersACOLETEST"
event-id="Active Directory##1148dd559d6##0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412"
template-dn="ZENBNAAmericasUser" timestamp="1187790543#30">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<add-attr attr-name="BNAPwdLastSet">
<value timestamp="1187790543#6" type="time">1187790541</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1187790543#29" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1187790543#8" type="string">Livering-Cole</value>
</add-attr>
<add-attr attr-name="Given Name">
<value timestamp="1187790543#5" type="string">Amanda</value>
</add-attr>
<add-attr attr-name="DirXML-ADContext">
<value timestamp="1187790543#10" type="string">CN=Amanda
Livering-Cole,OU=Users,OU=Miami, Latin HQ,OU=BNA Regional
Offices,OU=BNA,DC=BNA-hq,DC=com</value>
</add-attr>
<add-attr attr-name="DirXML-ADAliasName">
<value timestamp="1187790543#7" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Full Name">
<value timestamp="1187790543#4" type="string">Amanda Livering-Cole</value>
</add-attr>
<password><!-- content suppressed --></password>
</add>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Found non-class attribute BNAPwdLastSet.
09:49:04 1464 Drvrs: ZEN-IDM PT: Found non-class attribute
DirXML-ADContext.
09:49:04 1464 Drvrs: ZEN-IDM PT: Found non-class attribute
DirXML-ADAliasName.
09:49:04 1464 Drvrs: ZEN-IDM PT: Adding auxiliary class
DirXML-ApplicationAttrs to operation.
09:49:04 1464 Drvrs: ZEN-IDM PT: Adding auxiliary class BNA to operation.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying command transformation policies.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Publish Passwords'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying to add #1.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Block publishing passwords to Identity Manager data store when adding a
object'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'enable-password-publish' equal "false") = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Block sending modify-password changes to the Identity Manager data store'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'enable-password-publish' equal "false") = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="User" dest-dn="ZENBNAAmericasUsersACOLETEST"
event-id="Active Directory##1148dd559d6##0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412"
template-dn="ZENBNAAmericasUser" timestamp="1187790543#30">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<add-attr attr-name="BNAPwdLastSet">
<value timestamp="1187790543#6" type="time">1187790541</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1187790543#29" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1187790543#8" type="string">Livering-Cole</value>
</add-attr>
<add-attr attr-name="Given Name">
<value timestamp="1187790543#5" type="string">Amanda</value>
</add-attr>
<add-attr attr-name="DirXML-ADContext">
<value timestamp="1187790543#10" type="string">CN=Amanda
Livering-Cole,OU=Users,OU=Miami, Latin HQ,OU=BNA Regional
Offices,OU=BNA,DC=BNA-hq,DC=com</value>
</add-attr>
<add-attr attr-name="DirXML-ADAliasName">
<value timestamp="1187790543#7" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Full Name">
<value timestamp="1187790543#4" type="string">Amanda Livering-Cole</value>
</add-attr>
<password><!-- content suppressed --></password>
<add-attr attr-name="Object Class">
<value>DirXML-ApplicationAttrs</value>
<value>BNA</value>
09:49:04 1464 Drvrs: </add-attr>
</add>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Publish passwords to
NMAS distribution password'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying to add #1.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Add nspmDistributionAttribute attribute to add operation'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'publish-password-to-dp' equal "true") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-password available) = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule selected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying rule 'Add
nspmDistributionAttribute attribute to add operation'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-add-dest-attr-value("nspmDistributionPassword",token-password()).
09:49:04 1464 Drvrs: ZEN-IDM PT: arg-string(token-password())
09:49:04 1464 Drvrs: ZEN-IDM PT: token-password()
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "-- suppressed --".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "-- suppressed --".
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-set-xml-attr("enforce-password-policy","add-attr[@attr-name =
'nspmDistributionPassword'][last()]",token-global-variable("enforce-password-policy")).
09:49:04 1464 Drvrs: ZEN-IDM PT:
arg-string(token-global-variable("enforce-password-policy"))
09:49:04 1464 Drvrs: ZEN-IDM PT:
token-global-variable("enforce-password-policy")
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "true".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "true".
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Change modify-password operations to a modify'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'publish-password-to-dp' equal "true") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "modify-password") =
FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="User" dest-dn="ZENBNAAmericasUsersACOLETEST"
event-id="Active Directory##1148dd559d6##0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412"
template-dn="ZENBNAAmericasUser" timestamp="1187790543#30">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<add-attr attr-name="BNAPwdLastSet">
<value timestamp="1187790543#6" type="time">1187790541</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1187790543#29" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1187790543#8" type="string">Livering-Cole</value>
</add-attr>
<add-attr attr-name="Given Name">
<value timestamp="1187790543#5" type="string">Amanda</value>
</add-attr>
<add-attr attr-name="DirXML-ADContext">
<value timestamp="1187790543#10" type="string">CN=Amanda
Livering-Cole,OU=Users,OU=Miami, Latin HQ,OU=BNA Regional
Offices,OU=BNA,DC=BNA-hq,DC=com</value>
</add-attr>
<add-attr attr-name="DirXML-ADAliasName">
<value timestamp="1187790543#7" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Full Name">
<value timestamp="1187790543#4" type="string">Amanda Livering-Cole</value>
</add-attr>
<add-attr attr-name="nspmDistributionPassword"
enforce-password-policy="true"><!-- content suppressed -->
</add-attr>
09:49:04 1464 Drvrs: <password><!-- content suppressed --></password>
<add-attr attr-name="Object Class">
<value>DirXML-ApplicationAttrs</value>
<value>BNA</value>
</add-attr>
</add>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Publish passwords to
NDS password.'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying to add #1.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Block publishing passwords to NDS password'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'publish-password-to-nds' equal "false") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule selected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying rule 'Block publishing passwords
to NDS password'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Action: do-strip-xpath("password").
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Block sending modify-password changes to the NDS password'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'publish-password-to-nds' equal "false") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "modify-password") =
FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="User" dest-dn="ZENBNAAmericasUsersACOLETEST"
event-id="Active Directory##1148dd559d6##0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412"
template-dn="ZENBNAAmericasUser" timestamp="1187790543#30">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<add-attr attr-name="BNAPwdLastSet">
<value timestamp="1187790543#6" type="time">1187790541</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1187790543#29" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1187790543#8" type="string">Livering-Cole</value>
</add-attr>
<add-attr attr-name="Given Name">
<value timestamp="1187790543#5" type="string">Amanda</value>
</add-attr>
<add-attr attr-name="DirXML-ADContext">
<value timestamp="1187790543#10" type="string">CN=Amanda
Livering-Cole,OU=Users,OU=Miami, Latin HQ,OU=BNA Regional
Offices,OU=BNA,DC=BNA-hq,DC=com</value>
</add-attr>
<add-attr attr-name="DirXML-ADAliasName">
<value timestamp="1187790543#7" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Full Name">
<value timestamp="1187790543#4" type="string">Amanda Livering-Cole</value>
</add-attr>
<add-attr attr-name="nspmDistributionPassword"
enforce-password-policy="true"><!-- content suppressed -->
</add-attr>
<add-attr attr-name="Object Class">
09:49:04 1464 Drvrs: <value>DirXML-ApplicationAttrs</value>
<value>BNA</value>
</add-attr>
</add>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Publish password
payloads'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying to add #1.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Add operation-data element to password operations'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-password available) = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-xpath true
"add-attr[@attr-name='nspmDistributionPassword']") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-xpath not-true "operation-data") =
TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule selected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying rule 'Add operation-data element
to password operations'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-append-xml-element("operation-data",".").
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Add payload data to password operations'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-password available) = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-xpath true
"add-attr[@attr-name='nspmDistributionPassword']") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule selected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying rule 'Add payload data to
password operations'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-append-xml-element("password-publish-status","operation-data").
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-append-xml-element("association","operation-data/password-publish-status").
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-append-xml-text("operation-data/password-publish-status/association",token-association()).
09:49:04 1464 Drvrs: ZEN-IDM PT: arg-string(token-association())
09:49:04 1464 Drvrs: ZEN-IDM PT: token-association()
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value:
"{17939D16-F99E-b942-8B76-2A9E0EE43511}".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value:
"{17939D16-F99E-b942-8B76-2A9E0EE43511}".
09:49:04 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="User" dest-dn="ZENBNAAmericasUsersACOLETEST"
event-id="Active Directory##1148dd559d6##0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412"
template-dn="ZENBNAAmericasUser" timestamp="1187790543#30">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<add-attr attr-name="BNAPwdLastSet">
<value timestamp="1187790543#6" type="time">1187790541</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1187790543#29" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1187790543#8" type="string">Livering-Cole</value>
</add-attr>
<add-attr attr-name="Given Name">
<value timestamp="1187790543#5" type="string">Amanda</value>
</add-attr>
<add-attr attr-name="DirXML-ADContext">
<value timestamp="1187790543#10" type="string">CN=Amanda
Livering-Cole,OU=Users,OU=Miami, Latin HQ,OU=BNA Regional
Offices,OU=BNA,DC=BNA-hq,DC=com</value>
</add-attr>
<add-attr attr-name="DirXML-ADAliasName">
<value timestamp="1187790543#7" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Full Name">
<value timestamp="1187790543#4" type="string">Amanda Livering-Cole</value>
</add-attr>
<add-attr attr-name="nspmDistributionPassword"
enforce-password-policy="true"><!-- content suppressed -->
</add-attr>
<add-attr attr-name="Object Class">
09:49:04 1464 Drvrs: <value>DirXML-ApplicationAttrs</value>
<value>BNA</value>
</add-attr>
<operation-data>
<password-publish-status>
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
</password-publish-status>
</operation-data>
</add>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying policy: Password(Pub)-Password
Expiration Time.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying to add #1.
Wednesday, August 22, 2007
09:49:04 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="User" dest-dn="ZENBNAAmericasUsersACOLETEST"
event-id="Active Directory##1148dd559d6##0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412"
template-dn="ZENBNAAmericasUser" timestamp="1187790543#30">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<add-attr attr-name="BNAPwdLastSet">
<value timestamp="1187790543#6" type="time">1187790541</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1187790543#29" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1187790543#8" type="string">Livering-Cole</value>
</add-attr>
<add-attr attr-name="Given Name">
<value timestamp="1187790543#5" type="string">Amanda</value>
</add-attr>
<add-attr attr-name="DirXML-ADContext">
<value timestamp="1187790543#10" type="string">CN=Amanda
Livering-Cole,OU=Users,OU=Miami, Latin HQ,OU=BNA Regional
Offices,OU=BNA,DC=BNA-hq,DC=com</value>
</add-attr>
<add-attr attr-name="DirXML-ADAliasName">
<value timestamp="1187790543#7" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Full Name">
<value timestamp="1187790543#4" type="string">Amanda Livering-Cole</value>
</add-attr>
<add-attr attr-name="nspmDistributionPassword"
enforce-password-policy="true"><!-- content suppressed -->
</add-attr>
<add-attr attr-name="Object Class">
09:49:04 1464 Drvrs: <value>DirXML-ApplicationAttrs</value>
<value>BNA</value>
</add-attr>
<operation-data>
<password-publish-status>
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
</password-publish-status>
</operation-data>
</add>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying policy: [BNA] Email Events.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying to add #1.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'[BNA] Add'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-class-name equal "User") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule selected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying rule '[BNA] Add'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Action:
do-send-email-from-template(notification-dn="SecurityDefault Notification
Collection",template-dn="SecurityDefault Notification
CollectionUser-Add","desktop_engineering@BNA.com",token-dest-dn(),token-attr("Given
Name"),token-attr("Surname"),token-attr("Internet EMail
Address"),token-attr("L"),token-attr("Description"),token-src-dn()).
09:49:04 1464 Drvrs: ZEN-IDM PT: arg-string("desktop_engineering@BNA.com")
09:49:04 1464 Drvrs: ZEN-IDM PT: token-text("desktop_engineering@BNA.com")
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "desktop_engineering@BNA.com".
09:49:04 1464 Drvrs: ZEN-IDM PT: arg-string(token-dest-dn())
09:49:04 1464 Drvrs: ZEN-IDM PT: token-dest-dn()
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value:
"ZENBNAAmericasUsersACOLETEST".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "ZENBNAAmericasUsersACOLETEST".
09:49:04 1464 Drvrs: ZEN-IDM PT: arg-string(token-attr("Given Name"))
09:49:04 1464 Drvrs: ZEN-IDM PT: token-attr("Given Name")
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "Amanda".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "Amanda".
09:49:04 1464 Drvrs: ZEN-IDM PT: arg-string(token-attr("Surname"))
09:49:04 1464 Drvrs: ZEN-IDM PT: token-attr("Surname")
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "Livering-Cole".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "Livering-Cole".
09:49:04 1464 Drvrs: ZEN-IDM PT: arg-string(token-attr("Internet EMail
Address"))
09:49:04 1464 Drvrs: ZEN-IDM PT: token-attr("Internet EMail Address")
09:49:04 1464 Drvrs: ZEN-IDM PT: Query from policy
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="IDMBNAActiveACOLETEST"
dest-entry-id="36412" scope="entry">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<read-attr attr-name="Internet EMail Address"/>
</query>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Fixing up association references.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying schema mapping policies to
output.
09:49:04 1464 Drvrs: ZEN-IDM PT: No mapping for class-name 'User'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying output transformation policies.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Email notifications for
failed password publications'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying to query #1.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail for a failed publish password operation'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="IDMBNAActiveACOLETEST"
dest-entry-id="36412" event-id="0" scope="entry">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<read-attr attr-name="Internet EMail Address"/>
</query>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Querying publisher shim.
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="IDMBNAActiveACOLETEST"
dest-entry-id="36412" event-id="0" scope="entry">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<read-attr attr-name="Internet EMail Address"/>
</query>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: : Querying remote Subscriber...
09:49:04 1464 Drvrs: ZEN-IDM PT: : Sending...
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="IDMBNAActiveACOLETEST"
dest-entry-id="36412" event-id="0" scope="entry">
<read-attr attr-name="Internet EMail Address"/>
</query>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: : Document sent.
09:49:04 1464 Drvrs: ZEN-IDM PT: : Waiting for receive...
09:49:04 1464 Drvrs: ZEN-IDM PT: : Received.
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="User" event-id="0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association state="pending"></association>
</instance>
<status event-id="0" level="success"></status>
</output>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Publisher shim returned:
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="User" event-id="0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association state="pending"></association>
</instance>
<status event-id="0" level="success"></status>
</output>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying input transformation policies.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Email notifications for
failed password subscriptions'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying to instance #1.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail on a failure when subscribing to passwords'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail on failure to reset connected system password using the
Identity Manager data store password'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying to status #2.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail on a failure when subscribing to passwords'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-xpath true "self::status[@level !=
'success'][text() !=
'']/operation-data/password-subscribe-status/association[text() != '']") =
FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail on failure to reset connected system password using the
Identity Manager data store password'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-xpath true "self::status[@level !=
'success']/operation-data/password-reset-status") = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="User" event-id="0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association state="pending"></association>
</instance>
<status event-id="0" level="success"></status>
</output>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying schema mapping policies to input.
09:49:04 1464 Drvrs: ZEN-IDM PT: No mapping for class-name 'User'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Resolving association references.
09:49:04 1464 Drvrs: ZEN-IDM PT: Query from policy result
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="User" event-id="0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association state="pending"></association>
</instance>
<status event-id="0" level="success"></status>
</output>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "".
09:49:04 1464 Drvrs: ZEN-IDM PT: arg-string(token-attr("L"))
09:49:04 1464 Drvrs: ZEN-IDM PT: token-attr("L")
09:49:04 1464 Drvrs: ZEN-IDM PT: Query from policy
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="IDMBNAActiveACOLETEST"
dest-entry-id="36412" scope="entry">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<read-attr attr-name="L"/>
</query>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Fixing up association references.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying schema mapping policies to
output.
09:49:04 1464 Drvrs: ZEN-IDM PT: No mapping for class-name 'User'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying output transformation policies.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Email notifications for
failed password publications'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying to query #1.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail for a failed publish password operation'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="IDMBNAActiveACOLETEST"
dest-entry-id="36412" event-id="0" scope="entry">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<read-attr attr-name="L"/>
</query>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Querying publisher shim.
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="IDMBNAActiveACOLETEST"
dest-entry-id="36412" event-id="0" scope="entry">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<read-attr attr-name="L"/>
</query>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: : Querying remote Subscriber...
09:49:04 1464 Drvrs: ZEN-IDM PT: : Sending...
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="IDMBNAActiveACOLETEST"
dest-entry-id="36412" event-id="0" scope="entry">
<read-attr attr-name="L"/>
</query>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: : Document sent.
09:49:04 1464 Drvrs: ZEN-IDM PT: : Waiting for receive...
09:49:04 1464 Drvrs: ZEN-IDM PT: : Received.
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="User" event-id="0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association state="pending"></association>
</instance>
<status event-id="0" level="success"></status>
</output>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Publisher shim returned:
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="User" event-id="0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association state="pending"></association>
</instance>
<status event-id="0" level="success"></status>
</output>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying input transformation policies.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Email notifications for
failed password subscriptions'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying to instance #1.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail on a failure when subscribing to passwords'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail on failure to reset connected system password using the
Identity Manager data store password'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying to status #2.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail on a failure when subscribing to passwords'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-xpath true "self::status[@level !=
'success'][text() !=
'']/operation-data/password-subscribe-status/association[text() != '']") =
FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail on failure to reset connected system password using the
Identity Manager data store password'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-xpath true "self::status[@level !=
'success']/operation-data/password-reset-status") = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="User" event-id="0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association state="pending"></association>
</instance>
<status event-id="0" level="success"></status>
</output>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying schema mapping policies to input.
09:49:04 1464 Drvrs: ZEN-IDM PT: No mapping for class-name 'User'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Resolving association references.
09:49:04 1464 Drvrs: ZEN-IDM PT: Query from policy result
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="User" event-id="0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association state="pending"></association>
</instance>
<status event-id="0" level="success"></status>
</output>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "".
09:49:04 1464 Drvrs: ZEN-IDM PT: arg-string(token-attr("Description"))
09:49:04 1464 Drvrs: ZEN-IDM PT: token-attr("Description")
09:49:04 1464 Drvrs: ZEN-IDM PT: Query from policy
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="IDMBNAActiveACOLETEST"
dest-entry-id="36412" scope="entry">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<read-attr attr-name="Description"/>
</query>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Fixing up association references.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying schema mapping policies to
output.
09:49:04 1464 Drvrs: ZEN-IDM PT: No mapping for class-name 'User'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying output transformation policies.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Email notifications for
failed password publications'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying to query #1.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail for a failed publish password operation'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="IDMBNAActiveACOLETEST"
dest-entry-id="36412" event-id="0" scope="entry">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<read-attr attr-name="Description"/>
</query>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Querying publisher shim.
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="IDMBNAActiveACOLETEST"
dest-entry-id="36412" event-id="0" scope="entry">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<read-attr attr-name="Description"/>
</query>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: : Querying remote Subscriber...
09:49:04 1464 Drvrs: ZEN-IDM PT: : Sending...
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="IDMBNAActiveACOLETEST"
dest-entry-id="36412" event-id="0" scope="entry">
<read-attr attr-name="Description"/>
</query>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: : Document sent.
09:49:04 1464 Drvrs: ZEN-IDM PT: : Waiting for receive...
09:49:04 1464 Drvrs: ZEN-IDM PT: : Received.
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="User" event-id="0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association state="pending"></association>
</instance>
<status event-id="0" level="success"></status>
</output>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Publisher shim returned:
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="User" event-id="0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association state="pending"></association>
</instance>
<status event-id="0" level="success"></status>
</output>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying input transformation policies.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Email notifications for
failed password subscriptions'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying to instance #1.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail on a failure when subscribing to passwords'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail on failure to reset connected system password using the
Identity Manager data store password'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying to status #2.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail on a failure when subscribing to passwords'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-xpath true "self::status[@level !=
'success'][text() !=
'']/operation-data/password-subscribe-status/association[text() != '']") =
FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail on failure to reset connected system password using the
Identity Manager data store password'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-xpath true "self::status[@level !=
'success']/operation-data/password-reset-status") = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="User" event-id="0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association state="pending"></association>
</instance>
<status event-id="0" level="success"></status>
</output>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Applying schema mapping policies to input.
09:49:04 1464 Drvrs: ZEN-IDM PT: No mapping for class-name 'User'.
09:49:04 1464 Drvrs: ZEN-IDM PT: Resolving association references.
09:49:04 1464 Drvrs: ZEN-IDM PT: Query from policy result
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="User" event-id="0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association state="pending"></association>
</instance>
<status event-id="0" level="success"></status>
</output>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "".
09:49:04 1464 Drvrs: ZEN-IDM PT: arg-string(token-src-dn())
09:49:04 1464 Drvrs: ZEN-IDM PT: token-src-dn()
09:49:04 1464 Drvrs: ZEN-IDM PT: Token Value: "IDMBNAActiveACOLETEST".
09:49:04 1464 Drvrs: ZEN-IDM PT: Arg Value: "IDMBNAActiveACOLETEST".
09:49:04 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'[BNA] Delete'.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-class-name equal "User") = TRUE.
09:49:04 1464 Drvrs: ZEN-IDM PT: (if-operation equal "delete") = FALSE.
09:49:04 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:04 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:04 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="User" dest-dn="ZENBNAAmericasUsersACOLETEST"
event-id="Active Directory##1148dd559d6##0"
qualified-src-dn="O=BNAOU=ActiveCN=ACOLETEST"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412"
template-dn="ZENBNAAmericasUser" timestamp="1187790543#30">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<add-attr attr-name="BNAPwdLastSet">
<value timestamp="1187790543#6" type="time">1187790541</value>
</add-attr>
<add-attr attr-name="CN">
<value timestamp="1187790543#29" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1187790543#8" type="string">Livering-Cole</value>
</add-attr>
<add-attr attr-name="Given Name">
<value timestamp="1187790543#5" type="string">Amanda</value>
</add-attr>
<add-attr attr-name="DirXML-ADContext">
<value timestamp="1187790543#10" type="string">CN=Amanda
Livering-Cole,OU=Users,OU=Miami, Latin HQ,OU=BNA Regional
Offices,OU=BNA,DC=BNA-hq,DC=com</value>
</add-attr>
<add-attr attr-name="DirXML-ADAliasName">
<value timestamp="1187790543#7" type="string">ACOLETEST</value>
</add-attr>
<add-attr attr-name="Full Name">
<value timestamp="1187790543#4" type="string">Amanda Livering-Cole</value>
</add-attr>
<add-attr attr-name="nspmDistributionPassword"
enforce-password-policy="true"><!-- content suppressed -->
</add-attr>
<add-attr attr-name="Object Class">
09:49:04 1464 Drvrs: <value>DirXML-ApplicationAttrs</value>
<value>BNA</value>
</add-attr>
<operation-data>
<password-publish-status>
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
</password-publish-status>
</operation-data>
</add>
</input>
</nds>
09:49:04 1464 Drvrs: ZEN-IDM PT: Filtering out notification-only
attributes.
09:49:04 1464 Drvrs: ZEN-IDM PT: Filtered out <add-attr
attr-name='DirXML-ADContext'>.
09:49:04 1464 Drvrs: ZEN-IDM PT: Filtered out <add-attr
attr-name='DirXML-ADAliasName'>.
09:49:04 1464 Drvrs: ZEN-IDM PT: Pumping XDS to eDirectory.
09:49:04 1464 Drvrs: ZEN-IDM PT: Performing operation add for
ZENBNAAmericasUsersACOLETEST.
09:49:04 1464 Drvrs: ZEN-IDM PT: Using template ZENBNAAmericasUser.
09:49:04 1464 Drvrs: ZEN-IDM PT: Adding entry ZENBNAAmericasUsersACOLETEST.
09:49:04 1464 Drvrs: ZEN-IDM PT: Creating RDN ACOLETEST in context
ZENBNAAmericasUsers.
09:49:05 1464 Drvrs: ZEN-IDM PT: Fixing link from
ZENBNAAmericasUsersACOLETEST#Group Membership.
09:49:05 1464 Drvrs: ZEN-IDM PT: Fixing link from
ZENBNAAmericasUsersACOLETEST#Group Membership.
09:49:05 1464 Drvrs: ZEN-IDM PT: Fixing link from
ZENBNAAmericasUsersACOLETEST#Group Membership.
09:49:05 1464 Drvrs: ZEN-IDM PT: Fixing link from
ZENBNAAmericasUsersACOLETEST#Group Membership.
09:49:05 1464 Drvrs: ZEN-IDM PT: Fixing link from
ZENBNAAmericasUsersACOLETEST#Group Membership.
09:49:05 1464 Drvrs: ZEN-IDM PT: Fixing link from
ZENBNAAmericasUsersACOLETEST#Group Membership.
09:49:05 1464 Drvrs: ZEN-IDM PT: Fixing link from
ZENBNAAmericasUsersACOLETEST#Group Membership.
09:49:05 1464 Drvrs: ZEN-IDM PT:
DirXML Log Event -------------------
Driver: ZENBNADriver-SetZEN-IDM
Channel: Publisher
Object: IDMBNAActiveACOLETEST (ZENBNAAmericasUsersACOLETEST)
Status: Success
09:49:05 1464 Drvrs: ZEN-IDM PT: Fixing up association references.
09:49:05 1464 Drvrs: ZEN-IDM PT: Applying schema mapping policies to
output.
09:49:05 1464 Drvrs: ZEN-IDM PT: Applying output transformation policies.
09:49:05 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Email notifications for
failed password publications'.
09:49:05 1464 Drvrs: ZEN-IDM PT: Applying to status #1.
09:49:05 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail for a failed publish password operation'.
09:49:05 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:05 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = TRUE.
09:49:05 1464 Drvrs: ZEN-IDM PT: (if-xpath true "self::status[@level !=
'success']/operation-data/password-publish-status") = FALSE.
09:49:05 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:05 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:05 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="Active Directory##1148dd559d6##0"
level="success"><operation-data>
<password-publish-status>
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
</password-publish-status>
</operation-data>
<application>DirXML</application>
<module>ZEN-IDM</module>
<object-dn>IDMBNAActiveACOLETEST (ZENBNAAmericasUsersACOLETEST)</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
09:49:05 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="Active Directory##1148dd559d6##0"
level="success"><operation-data>
<password-publish-status>
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
</password-publish-status>
</operation-data>
<application>DirXML</application>
<module>ZEN-IDM</module>
<object-dn>IDMBNAActiveACOLETEST (ZENBNAAmericasUsersACOLETEST)</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
09:49:05 1464 Drvrs: ZEN-IDM PT: : Sending...
09:49:05 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="Active Directory##1148dd559d6##0"
level="success"><operation-data>
<password-publish-status>
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
</password-publish-status>
</operation-data>
<application>DirXML</application>
<module>ZEN-IDM</module>
<object-dn>IDMBNAActiveACOLETEST (ZENBNAAmericasUsersACOLETEST)</object-dn>
<component>Publisher</component>
</status>
<add-association dest-dn="IDMBNAActiveACOLETEST"
dest-entry-id="36412">{17939D16-F99E-b942-8B76-2A9E0EE43511}</add-association>
</output>
</nds>
09:49:05 1464 Drvrs: ZEN-IDM PT: : Document sent.
09:49:05 1464 Drvrs: ZEN-IDM PT: : Reusing connection
09:49:05 1464 Drvrs: ZEN-IDM PT: : Waiting for receive...
09:49:06 1464 Drvrs: ZEN-IDM PT: : Received.
09:49:06 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify-password class-name="User" event-id="pwd-subscribe"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<password><!-- content suppressed --></password>
</modify-password>
</input>
</nds>
09:49:06 1464 Drvrs: ZEN-IDM PT: Receiving DOM document from application.
09:49:06 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify-password class-name="User" event-id="pwd-subscribe"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<password><!-- content suppressed --></password>
</modify-password>
</input>
</nds>
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying input transformation policies.
Wednesday, August 22, 2007
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Email notifications for
failed password subscriptions'.
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying to modify-password #1.
09:49:06 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail on a failure when subscribing to passwords'.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = FALSE.
09:49:06 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:06 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail on failure to reset connected system password using the
Identity Manager data store password'.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = FALSE.
09:49:06 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:06 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:06 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify-password class-name="User" event-id="pwd-subscribe"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<password><!-- content suppressed --></password>
</modify-password>
</input>
</nds>
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying schema mapping policies to input.
09:49:06 1464 Drvrs: ZEN-IDM PT: No mapping for class-name 'User'.
09:49:06 1464 Drvrs: ZEN-IDM PT: Resolving association references.
09:49:06 1464 Drvrs: ZEN-IDM PT: No event transformation policies.
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying publisher filter.
09:49:06 1464 Drvrs: ZEN-IDM PT: Publisher processing modify-password for
IDMBNAActiveACOLETEST.
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying command transformation policies.
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Publish Passwords'.
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying to modify-password #1.
09:49:06 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Block publishing passwords to Identity Manager data store when adding a
object'.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'enable-password-publish' equal "false") = FALSE.
09:49:06 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:06 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Block sending modify-password changes to the Identity Manager data store'.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'enable-password-publish' equal "false") = FALSE.
09:49:06 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:06 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:06 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify-password class-name="User" dest-dn="BNAAmericasUsersACOLETEST"
dest-entry-id="38249" event-id="pwd-subscribe"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<password><!-- content suppressed --></password>
</modify-password>
</input>
</nds>
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Publish passwords to
NMAS distribution password'.
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying to modify-password #1.
09:49:06 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Add nspmDistributionAttribute attribute to add operation'.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'publish-password-to-dp' equal "true") = TRUE.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = FALSE.
09:49:06 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:06 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Change modify-password operations to a modify'.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'publish-password-to-dp' equal "true") = TRUE.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-operation equal "modify-password") =
TRUE.
09:49:06 1464 Drvrs: ZEN-IDM PT: Rule selected.
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying rule 'Change modify-password
operations to a modify'.
09:49:06 1464 Drvrs: ZEN-IDM PT: Action:
do-add-dest-attr-value("nspmDistributionPassword",token-password()).
09:49:06 1464 Drvrs: ZEN-IDM PT: arg-string(token-password())
09:49:06 1464 Drvrs: ZEN-IDM PT: token-password()
09:49:06 1464 Drvrs: ZEN-IDM PT: Token Value: "-- suppressed --".
09:49:06 1464 Drvrs: ZEN-IDM PT: Arg Value: "-- suppressed --".
09:49:06 1464 Drvrs: ZEN-IDM PT: Action:
do-set-xml-attr("event-id","../modify","pwd-publish").
09:49:06 1464 Drvrs: ZEN-IDM PT: arg-string("pwd-publish")
09:49:06 1464 Drvrs: ZEN-IDM PT: token-text("pwd-publish")
09:49:06 1464 Drvrs: ZEN-IDM PT: Arg Value: "pwd-publish".
09:49:06 1464 Drvrs: ZEN-IDM PT: Action:
do-set-xml-attr("enforce-password-policy","../modify/modify-attr[@attr-name='nspmDistributionPassword']",token-global-variable("enforce-password-policy")).
09:49:06 1464 Drvrs: ZEN-IDM PT:
arg-string(token-global-variable("enforce-password-policy"))
09:49:06 1464 Drvrs: ZEN-IDM PT:
token-global-variable("enforce-password-policy")
09:49:06 1464 Drvrs: ZEN-IDM PT: Token Value: "true".
09:49:06 1464 Drvrs: ZEN-IDM PT: Arg Value: "true".
09:49:06 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:06 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify-password class-name="User" dest-dn="BNAAmericasUsersACOLETEST"
dest-entry-id="38249" event-id="pwd-subscribe"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<password><!-- content suppressed --></password>
</modify-password>
<modify class-name="User" dest-dn="BNAAmericasUsersACOLETEST"
dest-entry-id="38249" event-id="pwd-publish"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<modify-attr attr-name="nspmDistributionPassword"
enforce-password-policy="true"><!-- content suppressed -->
</modify-attr>
</modify>
</input>
</nds>
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Publish passwords to
NDS password.'.
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying to modify-password #1.
09:49:06 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Block publishing passwords to NDS password'.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'publish-password-to-nds' equal "false") = TRUE.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = FALSE.
09:49:06 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:06 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Block sending modify-password changes to the NDS password'.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'publish-password-to-nds' equal "false") = TRUE.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-operation equal "modify-password") =
TRUE.
09:49:06 1464 Drvrs: ZEN-IDM PT: Rule selected.
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying rule 'Block sending
modify-password changes to the NDS password'.
09:49:06 1464 Drvrs: ZEN-IDM PT: Action: do-veto().
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying to modify #2.
09:49:06 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Block publishing passwords to NDS password'.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'publish-password-to-nds' equal "false") = TRUE.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = FALSE.
09:49:06 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:06 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Block sending modify-password changes to the NDS password'.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'publish-password-to-nds' equal "false") = TRUE.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-operation equal "modify-password") =
FALSE.
09:49:06 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:06 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:06 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" dest-dn="BNAAmericasUsersACOLETEST"
dest-entry-id="38249" event-id="pwd-publish"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<modify-attr attr-name="nspmDistributionPassword"
enforce-password-policy="true"><!-- content suppressed -->
</modify-attr>
</modify>
</input>
</nds>
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Publish password
payloads'.
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying to modify #1.
09:49:06 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Add operation-data element to password operations'.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = FALSE.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = FALSE.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-operation equal "modify-password") =
FALSE.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-operation equal "modify") = TRUE.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-xpath true
"modify-attr[@attr-name='nspmDistributionPassword']") = TRUE.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-xpath not-true "operation-data") =
TRUE.
09:49:06 1464 Drvrs: ZEN-IDM PT: Rule selected.
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying rule 'Add operation-data element
to password operations'.
09:49:06 1464 Drvrs: ZEN-IDM PT: Action:
do-append-xml-element("operation-data",".").
09:49:06 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Add payload data to password operations'.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = FALSE.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = FALSE.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-operation equal "modify-password") =
FALSE.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-operation equal "modify") = TRUE.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-xpath true
"modify-attr[@attr-name='nspmDistributionPassword']") = TRUE.
09:49:06 1464 Drvrs: ZEN-IDM PT: Rule selected.
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying rule 'Add payload data to
password operations'.
09:49:06 1464 Drvrs: ZEN-IDM PT: Action:
do-append-xml-element("password-publish-status","operation-data").
09:49:06 1464 Drvrs: ZEN-IDM PT: Action:
do-append-xml-element("association","operation-data/password-publish-status").
09:49:06 1464 Drvrs: ZEN-IDM PT: Action:
do-append-xml-text("operation-data/password-publish-status/association",token-association()).
09:49:06 1464 Drvrs: ZEN-IDM PT: arg-string(token-association())
09:49:06 1464 Drvrs: ZEN-IDM PT: token-association()
09:49:06 1464 Drvrs: ZEN-IDM PT: Token Value:
"{17939D16-F99E-b942-8B76-2A9E0EE43511}".
09:49:06 1464 Drvrs: ZEN-IDM PT: Arg Value:
"{17939D16-F99E-b942-8B76-2A9E0EE43511}".
09:49:06 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:06 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" dest-dn="BNAAmericasUsersACOLETEST"
dest-entry-id="38249" event-id="pwd-publish"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<modify-attr attr-name="nspmDistributionPassword"
enforce-password-policy="true"><!-- content suppressed -->
</modify-attr>
<operation-data>
<password-publish-status>
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
</password-publish-status>
</operation-data>
</modify>
</input>
</nds>
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying policy: Password(Pub)-Password
Expiration Time.
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying to modify #1.
09:49:06 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:06 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" dest-dn="BNAAmericasUsersACOLETEST"
dest-entry-id="38249" event-id="pwd-publish"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<modify-attr attr-name="nspmDistributionPassword"
enforce-password-policy="true"><!-- content suppressed -->
</modify-attr>
<operation-data>
<password-publish-status>
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
</password-publish-status>
</operation-data>
</modify>
</input>
</nds>
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying policy: [BNA] Email Events.
09:49:06 1464 Drvrs: ZEN-IDM PT: Applying to modify #1.
09:49:06 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'[BNA] Add'.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-class-name equal "User") = TRUE.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = FALSE.
09:49:06 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:06 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'[BNA] Delete'.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-class-name equal "User") = TRUE.
09:49:06 1464 Drvrs: ZEN-IDM PT: (if-operation equal "delete") = FALSE.
09:49:06 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:06 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:06 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" dest-dn="BNAAmericasUsersACOLETEST"
dest-entry-id="38249" event-id="pwd-publish"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<modify-attr attr-name="nspmDistributionPassword"
enforce-password-policy="true"><!-- content suppressed -->
</modify-attr>
<operation-data>
<password-publish-status>
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
</password-publish-status>
</operation-data>
</modify>
</input>
</nds>
09:49:06 1464 Drvrs: ZEN-IDM PT: Filtering out notification-only
attributes.
09:49:06 1464 Drvrs: ZEN-IDM PT: Pumping XDS to eDirectory.
09:49:06 1464 Drvrs: ZEN-IDM PT: Performing operation modify for
BNAAmericasUsersACOLETEST.
09:49:06 1464 Drvrs: ZEN-IDM PT: Modifying entry BNAAmericasUsersACOLETEST.
09:49:07 1464 Drvrs: ZEN-IDM PT:
DirXML Log Event -------------------
Driver: ZENBNADriver-SetZEN-IDM
Channel: Publisher
Object: IDMBNAActiveACOLETEST (BNAAmericasUsersACOLETEST)
Status: Success
09:49:07 1464 Drvrs: ZEN-IDM PT: Fixing up association references.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying schema mapping policies to
output.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying output transformation policies.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Email notifications for
failed password publications'.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying to status #1.
09:49:07 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail for a failed publish password operation'.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-xpath true "self::status[@level !=
'success']/operation-data/password-publish-status") = FALSE.
09:49:07 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:07 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:07 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="pwd-publish" level="success"><operation-data>
<password-publish-status>
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
</password-publish-status>
</operation-data>
<application>DirXML</application>
<module>ZEN-IDM</module>
<object-dn>IDMBNAActiveACOLETEST (BNAAmericasUsersACOLETEST)</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
09:49:07 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="pwd-publish" level="success"><operation-data>
<password-publish-status>
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
</password-publish-status>
</operation-data>
<application>DirXML</application>
<module>ZEN-IDM</module>
<object-dn>IDMBNAActiveACOLETEST (BNAAmericasUsersACOLETEST)</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
09:49:07 1464 Drvrs: ZEN-IDM PT: : Sending...
09:49:07 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="pwd-publish" level="success"><operation-data>
<password-publish-status>
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
</password-publish-status>
</operation-data>
<application>DirXML</application>
<module>ZEN-IDM</module>
<object-dn>IDMBNAActiveACOLETEST (BNAAmericasUsersACOLETEST)</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
09:49:07 1464 Drvrs: ZEN-IDM PT: : Document sent.
09:49:07 1464 Drvrs: ZEN-IDM PT: : Reusing connection
09:49:07 1464 Drvrs: ZEN-IDM PT: : Waiting for receive...
09:49:07 1464 Drvrs: ZEN-IDM PT: : Received.
09:49:07 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify-password class-name="User" event-id="pwd-subscribe"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<password><!-- content suppressed --></password>
</modify-password>
</input>
</nds>
09:49:07 1464 Drvrs: ZEN-IDM PT: Receiving DOM document from application.
09:49:07 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify-password class-name="User" event-id="pwd-subscribe"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<password><!-- content suppressed --></password>
</modify-password>
</input>
</nds>
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying input transformation policies.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Email notifications for
failed password subscriptions'.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying to modify-password #1.
09:49:07 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail on a failure when subscribing to passwords'.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = FALSE.
09:49:07 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:07 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail on failure to reset connected system password using the
Identity Manager data store password'.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = FALSE.
09:49:07 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:07 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:07 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify-password class-name="User" event-id="pwd-subscribe"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<password><!-- content suppressed --></password>
</modify-password>
</input>
</nds>
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying schema mapping policies to input.
09:49:07 1464 Drvrs: ZEN-IDM PT: No mapping for class-name 'User'.
09:49:07 1464 Drvrs: ZEN-IDM PT: Resolving association references.
09:49:07 1464 Drvrs: ZEN-IDM PT: No event transformation policies.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying publisher filter.
09:49:07 1464 Drvrs: ZEN-IDM PT: Publisher processing modify-password for
IDMBNAActiveACOLETEST.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying command transformation policies.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Publish Passwords'.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying to modify-password #1.
09:49:07 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Block publishing passwords to Identity Manager data store when adding a
object'.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'enable-password-publish' equal "false") = FALSE.
09:49:07 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:07 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Block sending modify-password changes to the Identity Manager data store'.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'enable-password-publish' equal "false") = FALSE.
09:49:07 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:07 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:07 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify-password class-name="User" dest-dn="BNAAmericasUsersACOLETEST"
dest-entry-id="38249" event-id="pwd-subscribe"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<password><!-- content suppressed --></password>
</modify-password>
</input>
</nds>
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Publish passwords to
NMAS distribution password'.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying to modify-password #1.
09:49:07 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Add nspmDistributionAttribute attribute to add operation'.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'publish-password-to-dp' equal "true") = TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = FALSE.
09:49:07 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:07 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Change modify-password operations to a modify'.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'publish-password-to-dp' equal "true") = TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "modify-password") =
TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: Rule selected.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying rule 'Change modify-password
operations to a modify'.
09:49:07 1464 Drvrs: ZEN-IDM PT: Action:
do-add-dest-attr-value("nspmDistributionPassword",token-password()).
09:49:07 1464 Drvrs: ZEN-IDM PT: arg-string(token-password())
09:49:07 1464 Drvrs: ZEN-IDM PT: token-password()
09:49:07 1464 Drvrs: ZEN-IDM PT: Token Value: "-- suppressed --".
09:49:07 1464 Drvrs: ZEN-IDM PT: Arg Value: "-- suppressed --".
09:49:07 1464 Drvrs: ZEN-IDM PT: Action:
do-set-xml-attr("event-id","../modify","pwd-publish").
09:49:07 1464 Drvrs: ZEN-IDM PT: arg-string("pwd-publish")
09:49:07 1464 Drvrs: ZEN-IDM PT: token-text("pwd-publish")
09:49:07 1464 Drvrs: ZEN-IDM PT: Arg Value: "pwd-publish".
09:49:07 1464 Drvrs: ZEN-IDM PT: Action:
do-set-xml-attr("enforce-password-policy","../modify/modify-attr[@attr-name='nspmDistributionPassword']",token-global-variable("enforce-password-policy")).
09:49:07 1464 Drvrs: ZEN-IDM PT:
arg-string(token-global-variable("enforce-password-policy"))
09:49:07 1464 Drvrs: ZEN-IDM PT:
token-global-variable("enforce-password-policy")
09:49:07 1464 Drvrs: ZEN-IDM PT: Token Value: "true".
09:49:07 1464 Drvrs: ZEN-IDM PT: Arg Value: "true".
09:49:07 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:07 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify-password class-name="User" dest-dn="BNAAmericasUsersACOLETEST"
dest-entry-id="38249" event-id="pwd-subscribe"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<password><!-- content suppressed --></password>
</modify-password>
<modify class-name="User" dest-dn="BNAAmericasUsersACOLETEST"
dest-entry-id="38249" event-id="pwd-publish"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<modify-attr attr-name="nspmDistributionPassword"
enforce-password-policy="true"><!-- content suppressed -->
</modify-attr>
</modify>
</input>
</nds>
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Publish passwords to
NDS password.'.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying to modify-password #1.
09:49:07 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Block publishing passwords to NDS password'.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'publish-password-to-nds' equal "false") = TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = FALSE.
09:49:07 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:07 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Block sending modify-password changes to the NDS password'.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'publish-password-to-nds' equal "false") = TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "modify-password") =
TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: Rule selected.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying rule 'Block sending
modify-password changes to the NDS password'.
09:49:07 1464 Drvrs: ZEN-IDM PT: Action: do-veto().
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying to modify #2.
09:49:07 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Block publishing passwords to NDS password'.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'publish-password-to-nds' equal "false") = TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = FALSE.
09:49:07 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:07 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Block sending modify-password changes to the NDS password'.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'publish-password-to-nds' equal "false") = TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "modify-password") =
FALSE.
09:49:07 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:07 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:07 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" dest-dn="BNAAmericasUsersACOLETEST"
dest-entry-id="38249" event-id="pwd-publish"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<modify-attr attr-name="nspmDistributionPassword"
enforce-password-policy="true"><!-- content suppressed -->
</modify-attr>
</modify>
</input>
</nds>
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Publish password
payloads'.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying to modify #1.
09:49:07 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Add operation-data element to password operations'.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = FALSE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = FALSE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "modify-password") =
FALSE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "modify") = TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-xpath true
"modify-attr[@attr-name='nspmDistributionPassword']") = TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-xpath not-true "operation-data") =
TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: Rule selected.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying rule 'Add operation-data element
to password operations'.
09:49:07 1464 Drvrs: ZEN-IDM PT: Action:
do-append-xml-element("operation-data",".").
09:49:07 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Add payload data to password operations'.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = FALSE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = FALSE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "modify-password") =
FALSE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "modify") = TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-xpath true
"modify-attr[@attr-name='nspmDistributionPassword']") = TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: Rule selected.
Wednesday, August 22, 2007
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying rule 'Add payload data to
password operations'.
09:49:07 1464 Drvrs: ZEN-IDM PT: Action:
do-append-xml-element("password-publish-status","operation-data").
09:49:07 1464 Drvrs: ZEN-IDM PT: Action:
do-append-xml-element("association","operation-data/password-publish-status").
09:49:07 1464 Drvrs: ZEN-IDM PT: Action:
do-append-xml-text("operation-data/password-publish-status/association",token-association()).
09:49:07 1464 Drvrs: ZEN-IDM PT: arg-string(token-association())
09:49:07 1464 Drvrs: ZEN-IDM PT: token-association()
09:49:07 1464 Drvrs: ZEN-IDM PT: Token Value:
"{17939D16-F99E-b942-8B76-2A9E0EE43511}".
09:49:07 1464 Drvrs: ZEN-IDM PT: Arg Value:
"{17939D16-F99E-b942-8B76-2A9E0EE43511}".
09:49:07 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:07 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" dest-dn="BNAAmericasUsersACOLETEST"
dest-entry-id="38249" event-id="pwd-publish"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<modify-attr attr-name="nspmDistributionPassword"
enforce-password-policy="true"><!-- content suppressed -->
</modify-attr>
<operation-data>
<password-publish-status>
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
</password-publish-status>
</operation-data>
</modify>
</input>
</nds>
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying policy: Password(Pub)-Password
Expiration Time.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying to modify #1.
09:49:07 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:07 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" dest-dn="BNAAmericasUsersACOLETEST"
dest-entry-id="38249" event-id="pwd-publish"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<modify-attr attr-name="nspmDistributionPassword"
enforce-password-policy="true"><!-- content suppressed -->
</modify-attr>
<operation-data>
<password-publish-status>
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
</password-publish-status>
</operation-data>
</modify>
</input>
</nds>
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying policy: [BNA] Email Events.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying to modify #1.
09:49:07 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'[BNA] Add'.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-class-name equal "User") = TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "add") = FALSE.
09:49:07 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:07 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'[BNA] Delete'.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-class-name equal "User") = TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "delete") = FALSE.
09:49:07 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:07 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:07 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" dest-dn="BNAAmericasUsersACOLETEST"
dest-entry-id="38249" event-id="pwd-publish"
src-dn="IDMBNAActiveACOLETEST" src-entry-id="36412">
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
<modify-attr attr-name="nspmDistributionPassword"
enforce-password-policy="true"><!-- content suppressed -->
</modify-attr>
<operation-data>
<password-publish-status>
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
</password-publish-status>
</operation-data>
</modify>
</input>
</nds>
09:49:07 1464 Drvrs: ZEN-IDM PT: Filtering out notification-only
attributes.
09:49:07 1464 Drvrs: ZEN-IDM PT: Pumping XDS to eDirectory.
09:49:07 1464 Drvrs: ZEN-IDM PT: Performing operation modify for
BNAAmericasUsersACOLETEST.
09:49:07 1464 Drvrs: ZEN-IDM PT: Modifying entry BNAAmericasUsersACOLETEST.
09:49:07 1464 Drvrs: ZEN-IDM PT: Optimize Password determined operation
not needed.
09:49:07 1464 Drvrs: ZEN-IDM PT:
DirXML Log Event -------------------
Driver: ZENBNADriver-SetZEN-IDM
Channel: Publisher
Object: IDMBNAActiveACOLETEST (BNAAmericasUsersACOLETEST)
Status: Success
09:49:07 1464 Drvrs: ZEN-IDM PT: Fixing up association references.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying schema mapping policies to
output.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying output transformation policies.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying policy: 'Email notifications for
failed password publications'.
09:49:07 1464 Drvrs: ZEN-IDM PT: Applying to status #1.
09:49:07 1464 Drvrs: ZEN-IDM PT: Evaluating selection criteria for rule
'Send e-mail for a failed publish password operation'.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-operation equal "status") = TRUE.
09:49:07 1464 Drvrs: ZEN-IDM PT: (if-xpath true "self::status[@level !=
'success']/operation-data/password-publish-status") = FALSE.
09:49:07 1464 Drvrs: ZEN-IDM PT: Rule rejected.
09:49:07 1464 Drvrs: ZEN-IDM PT: Policy returned:
09:49:07 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="pwd-publish" level="success"><operation-data>
<password-publish-status>
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
</password-publish-status>
</operation-data>
<application>DirXML</application>
<module>ZEN-IDM</module>
<object-dn>IDMBNAActiveACOLETEST (BNAAmericasUsersACOLETEST)</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
09:49:07 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="pwd-publish" level="success"><operation-data>
<password-publish-status>
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
</password-publish-status>
</operation-data>
<application>DirXML</application>
<module>ZEN-IDM</module>
<object-dn>IDMBNAActiveACOLETEST (BNAAmericasUsersACOLETEST)</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
09:49:07 1464 Drvrs: ZEN-IDM PT: : Sending...
09:49:07 1464 Drvrs: ZEN-IDM PT:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="pwd-publish" level="success"><operation-data>
<password-publish-status>
<association>{17939D16-F99E-b942-8B76-2A9E0EE43511}</association>
</password-publish-status>
</operation-data>
<application>DirXML</application>
<module>ZEN-IDM</module>
<object-dn>IDMBNAActiveACOLETEST (BNAAmericasUsersACOLETEST)</object-dn>
<component>Publisher</component>
</status>
</output>
</nds>
09:49:07 1464 Drvrs: ZEN-IDM PT: : Document sent.
09:49:07 1464 Drvrs: ZEN-IDM PT: : Reusing connection
09:49:07 1464 Drvrs: ZEN-IDM PT: : Waiting for receive...