Working with the loopback driver to add group memberships based on an
attribute value. The code works fine if its an exsisting user or if the
user is created with C1....but if i create the user through ldap admin it
only process the first value in the multi-valued attribute....Can some
review and give me some advice?

<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE policy PUBLIC
"policy-builder-dtd" "C:Program
FilesNovellDesigner3Designereclipsepluginscom.nove ll.designer.idm.oldpolicybuilder_2.0.0.20070620120 6DTDdirxmlscript.dtd"><policy>
<rule>
<description>Set Local Variables</description>
<conditions>
<and>
<if-class-name mode="nocase" op="equal">User</if-class-name>
</and>
</conditions>
<actions>
<do-set-local-variable name="GROUPNAME">
<arg-string>
<token-text xml:space="preserve">FBICPORTAL</token-text>
<token-text xml:space="preserve"></token-text>
<token-text xml:space="preserve">EB</token-text>
<token-op-attr name="EB-External-Groups"/>
</arg-string>
</do-set-local-variable>
</actions>
</rule>
<rule>
<description>Check EB-External-Groups for Group Memberships</description>
<conditions>
<and>
<if-class-name mode="nocase" op="equal">User</if-class-name>
</and>
</conditions>
<actions>
<do-for-each>
<arg-node-set>
<token-local-variable name="GROUPNAME"/>
</arg-node-set>
<arg-actions>
<do-add-src-object class-name="Group" disabled="true">
<arg-dn>
<token-text xml:space="preserve">FBICPORTAL</token-text>
<token-text xml:space="preserve"></token-text>
<token-text xml:space="preserve">EB</token-text>
<token-local-variable name="GROUPNAME"/>
</arg-dn>
</do-add-src-object>
<do-add-src-attr-value name="Group Membership">
<arg-value>
<token-local-variable name="GROUPNAME"/>
</arg-value>
</do-add-src-attr-value>
<do-clone-op-attr dest-name="Security Equals" src-name="Group Membership"/>
</arg-actions>
</do-for-each>
</actions>
</rule>
</policy>