Hello all,

I am Engineering a LDAP Driver with IDM 3.5.1. The Problem is - after a
few days it always stops working. I was never able to reproducable recover
the problem - but after Bouncing the NetWare 6.5 SP6 Server runing IDM
Engine, Disabling the Driver a few times, from one moment to another it
works again

Please find below the Level 3 Trace I have with the Error. Possibly I have
to open a case tomorrow:

The LDAP Directory is SiemensDirX

Tuesday, Dec 11, 2007
SiemensDirX2meta PT:SiemensDirX2meta: LDAPPublisher.buildModifyTree()
Error: java.io.IOException: Bad or invalid handle
SiemensDirX2meta PT:Receiving DOM document from application.
SiemensDirX2meta PT:
<nds dtdversion="2.0">
<source>
<product build="20070918_0739 " instance="SiemensDirX2meta"
version="3.5.2">Identity Manager Driver for LDAP</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<status level="warning">Couldn't complete LDAP search. Waiting for next
polling cycle.</status>
</input>
</nds>
SiemensDirX2meta PT:Applying input transformation policies.
SiemensDirX2meta PT:Applying policy: 'Email notifications for failed
password subscriptions'.
SiemensDirX2meta PT: Applying to status #1.
SiemensDirX2meta PT: Evaluating selection criteria for rule 'Send e-mail
on a failure when subscribing to passwords'.
SiemensDirX2meta PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
SiemensDirX2meta PT: (if-operation equal "status") = TRUE.
SiemensDirX2meta PT: (if-xpath true "self::status[@level !=
'success'][text() !=
'']/operation-data/password-subscribe-status/association[text() != '']") =
FALSE.
SiemensDirX2meta PT: Rule rejected.
SiemensDirX2meta PT: Evaluating selection criteria for rule 'Send e-mail
on failure to reset connected system password using the Identity Vault
password'.
SiemensDirX2meta PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
SiemensDirX2meta PT: (if-operation equal "status") = TRUE.
SiemensDirX2meta PT: (if-xpath true "self::status[@level !=
'success']/operation-data/password-reset-status") = FALSE.
SiemensDirX2meta PT: Rule rejected.
SiemensDirX2meta PT:Policy returned:
SiemensDirX2meta PT:
<nds dtdversion="2.0">
<source>
<product build="20070918_0739 " instance="SiemensDirX2meta"
version="3.5.2">Identity Manager Driver for LDAP</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<status level="warning">Couldn't complete LDAP search. Waiting for next
polling cycle.</status>
</input>
</nds>
SiemensDirX2meta PT:Applying policy: itp-PostalAddress.
SiemensDirX2meta PT: Applying to status #1.
SiemensDirX2meta PT: Evaluating selection criteria for rule
'Postal_Address'.
SiemensDirX2meta PT: (if-attr 'postalAddress' available) = FALSE.
SiemensDirX2meta PT: Rule rejected.
SiemensDirX2meta PT:Policy returned:
SiemensDirX2meta PT:
<nds dtdversion="2.0">
<source>
<product build="20070918_0739 " instance="SiemensDirX2meta"
version="3.5.2">Identity Manager Driver for LDAP</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<status level="warning">Couldn't complete LDAP search. Waiting for next
polling cycle.</status>
</input>
</nds>
SiemensDirX2meta PT:Applying schema mapping policies to input.
SiemensDirX2meta PT:Applying policy: smp-SchemaMapping.
SiemensDirX2meta PT:Resolving association references.
SiemensDirX2meta PT:Applying event transformation policies.
SiemensDirX2meta PT:Applying policy: 'This Policy will - CREATE the
Fullname at Association or Creation Process'.
SiemensDirX2meta PT: Applying to status #1.
SiemensDirX2meta PT: Evaluating selection criteria for rule 'Set FullName'.
SiemensDirX2meta PT: (if-association not-associated) = TRUE.
SiemensDirX2meta PT: Rule selected.
SiemensDirX2meta PT: Applying rule 'Set FullName'.
SiemensDirX2meta PT: Action: do-set-dest-attr-value("Full
Name",class-name="User",token-op-attr("Surname")+" "+token-op-attr("Given
Name")).
SiemensDirX2meta PT: arg-string(token-op-attr("Surname")+"
"+token-op-attr("Given Name"))
SiemensDirX2meta PT: token-op-attr("Surname")
SiemensDirX2meta PT: Token Value: "".
SiemensDirX2meta PT: token-text(" ")
SiemensDirX2meta PT: token-op-attr("Given Name")
SiemensDirX2meta PT: Token Value: "".
SiemensDirX2meta PT: Arg Value: " ".
SiemensDirX2meta PT:Policy returned:
SiemensDirX2meta PT:
<nds dtdversion="2.0">
<source>
<product build="20070918_0739 " instance="SiemensDirX2meta"
version="3.5.2">Identity Manager Driver for LDAP</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<status level="warning">Couldn't complete LDAP search. Waiting for next
polling cycle.</status>
<modify class-name="User">
<modify-attr attr-name="Full Name">
<remove-all-values/>
<add-value>
<value type="string"> </value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
SiemensDirX2meta PT:Applying publisher filter.
SiemensDirX2meta PT:Publisher processing status for .
SiemensDirX2meta PT:Applying command transformation policies.
SiemensDirX2meta PT:Applying policy: pub-ctp-DefaultPassword.
SiemensDirX2meta PT: Applying to status #1.
SiemensDirX2meta PT: Evaluating selection criteria for rule 'On User add,
provide default password if none exists'.
SiemensDirX2meta PT: (if-operation equal "add") = FALSE.
SiemensDirX2meta PT: Rule rejected.
SiemensDirX2meta PT:Policy returned:
SiemensDirX2meta PT:
<nds dtdversion="2.0">
<source>
<product build="20070918_0739 " instance="SiemensDirX2meta"
version="3.5.2">Identity Manager Driver for LDAP</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<status level="warning">Couldn't complete LDAP search. Waiting for next
polling cycle.</status>
</input>
</nds>
SiemensDirX2meta PT:Applying policy: 'Publish Passwords'.
SiemensDirX2meta PT: Applying to status #1.
SiemensDirX2meta PT: Evaluating selection criteria for rule 'Block
publishing passwords to the Identity Vault when adding a object'.
SiemensDirX2meta PT: (if-global-variable 'enable-password-publish' equal
"false") = FALSE.
SiemensDirX2meta PT: Rule rejected.
SiemensDirX2meta PT: Evaluating selection criteria for rule 'Block sending
modify-password changes to the Identity Vault'.
SiemensDirX2meta PT: (if-global-variable 'enable-password-publish' equal
"false") = FALSE.
SiemensDirX2meta PT: Rule rejected.
SiemensDirX2meta PT:Policy returned:
SiemensDirX2meta PT:
<nds dtdversion="2.0">
<source>
<product build="20070918_0739 " instance="SiemensDirX2meta"
version="3.5.2">Identity Manager Driver for LDAP</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<status level="warning">Couldn't complete LDAP search. Waiting for next
polling cycle.</status>
</input>
</nds>
SiemensDirX2meta PT:Applying policy: 'Publish passwords to NMAS
distribution password'.
SiemensDirX2meta PT: Applying to status #1.
SiemensDirX2meta PT: Evaluating selection criteria for rule 'Add
nspmDistributionAttribute attribute to add operation'.
SiemensDirX2meta PT: (if-global-variable 'publish-password-to-dp' equal
"true") = TRUE.
SiemensDirX2meta PT: (if-operation equal "add") = FALSE.
SiemensDirX2meta PT: Rule rejected.
SiemensDirX2meta PT: Evaluating selection criteria for rule 'Change
modify-password operations to a modify'.
SiemensDirX2meta PT: (if-global-variable 'publish-password-to-dp' equal
"true") = TRUE.
SiemensDirX2meta PT: (if-operation equal "modify-password") = FALSE.
SiemensDirX2meta PT: Rule rejected.
SiemensDirX2meta PT:Policy returned:
SiemensDirX2meta PT:
<nds dtdversion="2.0">
<source>
<product build="20070918_0739 " instance="SiemensDirX2meta"
version="3.5.2">Identity Manager Driver for LDAP</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<status level="warning">Couldn't complete LDAP search. Waiting for next
polling cycle.</status>
</input>
</nds>
SiemensDirX2meta PT:Applying policy: 'Publish passwords to NDS password'.
SiemensDirX2meta PT: Applying to status #1.
SiemensDirX2meta PT: Evaluating selection criteria for rule 'Block
publishing passwords to NDS password'.
SiemensDirX2meta PT: (if-global-variable 'publish-password-to-nds' equal
"false") = FALSE.
SiemensDirX2meta PT: Rule rejected.
SiemensDirX2meta PT: Evaluating selection criteria for rule 'Block sending
modify-password changes to the NDS password'.
SiemensDirX2meta PT: (if-global-variable 'publish-password-to-nds' equal
"false") = FALSE.
SiemensDirX2meta PT: Rule rejected.
SiemensDirX2meta PT:Policy returned:
SiemensDirX2meta PT:
<nds dtdversion="2.0">
<source>
<product build="20070918_0739 " instance="SiemensDirX2meta"
version="3.5.2">Identity Manager Driver for LDAP</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<status level="warning">Couldn't complete LDAP search. Waiting for next
polling cycle.</status>
</input>
</nds>
SiemensDirX2meta PT:Applying policy: 'Publish password payloads'.
SiemensDirX2meta PT: Applying to status #1.
SiemensDirX2meta PT: Evaluating selection criteria for rule 'Add
operation-data element to password operations'.
SiemensDirX2meta PT: (if-operation equal "add") = FALSE.
SiemensDirX2meta PT: (if-operation equal "add") = FALSE.
SiemensDirX2meta PT: (if-operation equal "modify-password") = FALSE.
SiemensDirX2meta PT: (if-operation equal "modify") = FALSE.
SiemensDirX2meta PT: Rule rejected.
SiemensDirX2meta PT: Evaluating selection criteria for rule 'Add payload
data to password operations'.
SiemensDirX2meta PT: (if-operation equal "add") = FALSE.
SiemensDirX2meta PT: (if-operation equal "add") = FALSE.
SiemensDirX2meta PT: (if-operation equal "modify-password") = FALSE.
SiemensDirX2meta PT: (if-operation equal "modify") = FALSE.
SiemensDirX2meta PT: Rule rejected.
SiemensDirX2meta PT:Policy returned:
SiemensDirX2meta PT:
<nds dtdversion="2.0">
<source>
<product build="20070918_0739 " instance="SiemensDirX2meta"
version="3.5.2">Identity Manager Driver for LDAP</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<status level="warning">Couldn't complete LDAP search. Waiting for next
polling cycle.</status>
</input>
</nds>
SiemensDirX2meta PT:Applying policy: 'This Policy will MODIFY Fullname on
Surname or GivenName change'.
SiemensDirX2meta PT: Applying to status #1.
SiemensDirX2meta PT: Evaluating selection criteria for rule 'Set FullName'.
SiemensDirX2meta PT: (if-op-attr 'Surname' changing) = FALSE.
SiemensDirX2meta PT: (if-op-attr 'Given Name' changing) = FALSE.
SiemensDirX2meta PT: Rule rejected.
SiemensDirX2meta PT:Policy returned:
SiemensDirX2meta PT:
<nds dtdversion="2.0">
<source>
<product build="20070918_0739 " instance="SiemensDirX2meta"
version="3.5.2">Identity Manager Driver for LDAP</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<status level="warning">Couldn't complete LDAP search. Waiting for next
polling cycle.</status>
</input>
</nds>
SiemensDirX2meta PT:Applying policy: pub-ctp-ExpieryDateCalculation.
SiemensDirX2meta PT: Applying to status #1.
SiemensDirX2meta PT: Evaluating selection criteria for rule 'Set Expiery
DATE'.
SiemensDirX2meta PT: (if-op-attr 'bdzhLastWorkDay' changing) = FALSE.
SiemensDirX2meta PT: Rule rejected.
SiemensDirX2meta PT: Evaluating selection criteria for rule 'Set Expiery
DATE 31.12.2037'.
SiemensDirX2meta PT: (if-operation equal "add") = FALSE.
SiemensDirX2meta PT: Rule rejected.
SiemensDirX2meta PT:Policy returned:
SiemensDirX2meta PT:
<nds dtdversion="2.0">
<source>
<product build="20070918_0739 " instance="SiemensDirX2meta"
version="3.5.2">Identity Manager Driver for LDAP</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<status level="warning">Couldn't complete LDAP search. Waiting for next
polling cycle.</status>
</input>
</nds>
SiemensDirX2meta PT:Applying policy: pub-ctp-RemoveAssociation.
SiemensDirX2meta PT: Applying to status #1.
SiemensDirX2meta PT: Evaluating selection criteria for rule 'Remove
Association'.
SiemensDirX2meta PT: (if-class-name equal "User") = FALSE.
SiemensDirX2meta PT: Rule rejected.
SiemensDirX2meta PT:Policy returned:
SiemensDirX2meta PT:
<nds dtdversion="2.0">
<source>
<product build="20070918_0739 " instance="SiemensDirX2meta"
version="3.5.2">Identity Manager Driver for LDAP</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<status level="warning">Couldn't complete LDAP search. Waiting for next
polling cycle.</status>
</input>
</nds>
SiemensDirX2meta PT:Applying policy: 'Will generate / change the
bdzhDirektion + bdzhAmt Attribute'.
SiemensDirX2meta PT: Applying to status #1.
SiemensDirX2meta PT: Evaluating selection criteria for rule 'bdzhDirektion
changing'.
SiemensDirX2meta PT: (if-op-attr 'bdzhDirektion' changing) = FALSE.
SiemensDirX2meta PT: (if-operation equal "add") = FALSE.
SiemensDirX2meta PT: (if-operation equal "add-association") = FALSE.
SiemensDirX2meta PT: Rule rejected.
SiemensDirX2meta PT:Policy returned:
SiemensDirX2meta PT:
<nds dtdversion="2.0">
<source>
<product build="20070918_0739 " instance="SiemensDirX2meta"
version="3.5.2">Identity Manager Driver for LDAP</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<status level="warning">Couldn't complete LDAP search. Waiting for next
polling cycle.</status>
</input>
</nds>
SiemensDirX2meta PT:Filtering out notification-only attributes.
SiemensDirX2meta PT:Pumping XDS to eDirectory.
SiemensDirX2meta PT:Performing operation status for .
SiemensDirX2meta PT:
DirXML Log Event -------------------
Driver: BDIDMTKTKTSERVICESIDMBDZHBDZHSiemensDirX2meta
Channel: Publisher
Status: Warning
Message: Couldn't complete LDAP search. Waiting for next polling cycle.
SiemensDirX2meta PT:Missing valid association or dest-dn.
SiemensDirX2meta PT:Applying publisher filter.
SiemensDirX2meta PT: Filtered out <modify-attr attr-name='Full Name'>.
SiemensDirX2meta PT: Filtered out <modify class-name='User'>.
SiemensDirX2meta PT:Fixing up association references.
SiemensDirX2meta PT:Applying schema mapping policies to output.
SiemensDirX2meta PT:Applying policy: smp-SchemaMapping.
SiemensDirX2meta PT:Applying output transformation policies.
SiemensDirX2meta PT:Applying policy: 'Email notifications for failed
password publications'.
SiemensDirX2meta PT: Applying to status #1.
SiemensDirX2meta PT: Evaluating selection criteria for rule 'Send e-mail
for a failed publish password operation'.
SiemensDirX2meta PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
SiemensDirX2meta PT: (if-operation equal "status") = TRUE.
SiemensDirX2meta PT: (if-xpath true "self::status[@level !=
'success']/operation-data/password-publish-status") = FALSE.
SiemensDirX2meta PT: Rule rejected.
SiemensDirX2meta PT: Applying to status #2.
SiemensDirX2meta PT: Evaluating selection criteria for rule 'Send e-mail
for a failed publish password operation'.
SiemensDirX2meta PT: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
SiemensDirX2meta PT: (if-operation equal "status") = TRUE.
SiemensDirX2meta PT: (if-xpath true "self::status[@level !=
'success']/operation-data/password-publish-status") = FALSE.
SiemensDirX2meta PT: Rule rejected.
SiemensDirX2meta PT:Policy returned:
SiemensDirX2meta PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.10.20070918 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="success"></status>
<status level="warning">Code(-8015) Operation vetoed by filter.</status>
</output>
</nds>
SiemensDirX2meta PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.10.20070918 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status event-id="0" level="success"></status>
<status level="warning">Code(-8015) Operation vetoed by filter.</status>
</output>
</nds>