Hello,

IDM 3.5.1

I'm trying to sync the GroupWise (webaccess) password from the VAULT
(NW6.5 SP7).

When a user change his password in the User Application, the password is
correctly synchronized to the NDS network. No problem so far....

I created the GroupWise Driver and use the documentation from this
driver and the Cool Solution tip:
http://www.novell.com/communities/no...+passwords+idm

Our GroupWise server has one Domain and two PO's and this server is in
our NDS network. (GroupWise 7.02 on NW6.5 SP7)

With creating the driver I had no problems at all and the driver will
start in the VAULT. When a user change his password, the password for
GroupWise Webaccess is not changed.

This is a Trace 3 level log from the VAULT server.

Frank


[03/11/08 13:17:54.301]:Groupwise ST:Start transaction.
[03/11/08 13:17:54.306]:Groupwise ST:Processing events for transaction.
[03/11/08 13:17:54.306]:Groupwise ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.10.20070918 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify cached-time="20080311121754.299Z" class-name="User"
event-id="IDMVAULT#20080311121754#1#1"
qualified-src-dn="O=Users\OU=HESOCT\OU=Onderwijs\OU=Studenten\CN =Student"
src-dn="\IDMEDIR\Users\HESOCT\Onderwijs\Studenten\Stud ent"
src-entry-id="33210" timestamp="1205237874#6">
<modify-attr attr-name="nspmDistributionPassword"><!-- content
suppressed -->
</modify-attr>
</modify>
</input>
</nds>
[03/11/08 13:17:54.307]:Groupwise ST:Password synchronization event
detected.
[03/11/08 13:17:54.307]:Groupwise ST:Applying event transformation policies.
[03/11/08 13:17:54.307]:Groupwise ST:Applying policy:
%+C%14Csub-etp-Default Event Policies%-C.
[03/11/08 13:17:54.308]:Groupwise ST: Applying to modify #1.
[03/11/08 13:17:54.308]:Groupwise ST: Evaluating selection criteria
for rule 'Check Source Location'.
[03/11/08 13:17:54.308]:Groupwise ST: (if-src-dn not-in-subtree
"Users") = FALSE.
[03/11/08 13:17:54.308]:Groupwise ST: Rule rejected.
[03/11/08 13:17:54.308]:Groupwise ST: Evaluating selection criteria
for rule 'Add identification to <sync> command'.
[03/11/08 13:17:54.308]:Groupwise ST: (if-operation equal "sync") =
FALSE.
[03/11/08 13:17:54.309]:Groupwise ST: Rule rejected.
[03/11/08 13:17:54.309]:Groupwise ST:Policy returned:
[03/11/08 13:17:54.310]:Groupwise ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.10.20070918 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify cached-time="20080311121754.299Z" class-name="User"
event-id="IDMVAULT#20080311121754#1#1"
qualified-src-dn="O=Users\OU=HESOCT\OU=Onderwijs\OU=Studenten\CN =Student"
src-dn="\IDMEDIR\Users\HESOCT\Onderwijs\Studenten\Stud ent"
src-entry-id="33210" timestamp="1205237874#6">
<modify-attr attr-name="nspmDistributionPassword"><!-- content
suppressed -->
</modify-attr>
</modify>
</input>
</nds>
[03/11/08 13:17:54.310]:Groupwise ST:Subscriber processing modify for
\IDMEDIR\Users\HESOCT\Onderwijs\Studenten\Student.
[03/11/08 13:17:54.310]:Groupwise ST:Password synchronization command
detected.
[03/11/08 13:17:54.310]:Groupwise ST:Converting <modify> to <add>
[03/11/08 13:17:54.310]:Groupwise ST:Reading relevant attributes from
\IDMEDIR\Users\HESOCT\Onderwijs\Studenten\Student.
[03/11/08 13:17:54.311]:Groupwise ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.10.20070918 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User"
dest-dn="\IDMEDIR\Users\HESOCT\Onderwijs\Studenten\Stud ent"
dest-entry-id="33210" scope="entry">
<read-attr attr-name="CN"/>
<read-attr attr-name="company"/>
<read-attr attr-name="Description"/>
<read-attr attr-name="DirXML-EntitlementRef"/>
<read-attr attr-name="Facsimile Telephone Number"/>
<read-attr attr-name="Generational Qualifier"/>
<read-attr attr-name="Given Name"/>
<read-attr attr-name="Initials"/>
<read-attr attr-name="Login Disabled"/>
<read-attr attr-name="Login Expiration Time"/>
<read-attr attr-name="NGW: GroupWise ID"/>
<read-attr attr-name="nspmDistributionPassword"/>
<read-attr attr-name="OU"/>
<read-attr attr-name="personalTitle"/>
<read-attr attr-name="Surname"/>
<read-attr attr-name="Telephone Number"/>
<read-attr attr-name="Title"/>
</query>
</input>
</nds>
[03/11/08 13:17:54.311]:Groupwise ST:Pumping XDS to eDirectory.
[03/11/08 13:17:54.311]:Groupwise ST:Performing operation query for
\IDMEDIR\Users\HESOCT\Onderwijs\Studenten\Student.
[03/11/08 13:17:54.314]:Groupwise ST:Read result:
[03/11/08 13:17:54.315]:Groupwise ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.10.20070918 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="User"
qualified-src-dn="O=Users\OU=HESOCT\OU=Onderwijs\OU=Studenten\CN =Student"
src-dn="\IDMEDIR\Users\HESOCT\Onderwijs\Studenten\Stud ent"
src-entry-id="33210">
<attr attr-name="CN">
<value naming="true" timestamp="1204881068#30"
type="string">Student</value>
</attr>
<attr attr-name="Given Name">
<value timestamp="1204881068#5" type="string">Student</value>
</attr>
<attr attr-name="nspmDistributionPassword"><!-- content
suppressed -->
</attr>
<attr attr-name="Surname">
<value timestamp="1204881068#12" type="string">Student</value>
</attr>
<attr attr-name="Telephone Number">
<value timestamp="1204881068#13"
type="teleNumber">0748516151</value>
</attr>
</instance>
<status level="success"></status>
</output>
</nds>
[03/11/08 13:17:54.315]:Groupwise ST:Synthetic add:
[03/11/08 13:17:54.316]:Groupwise ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.10.20070918 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<add class-name="User" event-id="IDMVAULT#20080311121754#1#1"
qualified-src-dn="O=Users\OU=HESOCT\OU=Onderwijs\OU=Studenten\CN =Student"
src-dn="\IDMEDIR\Users\HESOCT\Onderwijs\Studenten\Stud ent"
src-entry-id="33210">
<add-attr attr-name="CN">
<value naming="true" timestamp="1204881068#30"
type="string">Student</value>
</add-attr>
<add-attr attr-name="Given Name">
<value timestamp="1204881068#5" type="string">Student</value>
</add-attr>
<add-attr attr-name="nspmDistributionPassword"><!-- content
suppressed -->
</add-attr>
<add-attr attr-name="Surname">
<value timestamp="1204881068#12" type="string">Student</value>
</add-attr>
<add-attr attr-name="Telephone Number">
<value timestamp="1204881068#13"
type="teleNumber">0748516151</value>
</add-attr>
</add>
</input>
</nds>
[03/11/08 13:17:54.316]:Groupwise ST:Applying object matching policies.
[03/11/08 13:17:54.316]:Groupwise ST:Applying policy:
%+C%14Csub-mp-Default Matching Policies%-C.
[03/11/08 13:17:54.316]:Groupwise ST: Applying to add #1.
[03/11/08 13:17:54.316]:Groupwise ST: Evaluating selection criteria
for rule 'Account Entitlement: Veto if not present'.
[03/11/08 13:17:54.316]:Groupwise ST: (if-class-name equal "User")
= TRUE.
[03/11/08 13:17:54.316]:Groupwise ST: Query from policy
[03/11/08 13:17:54.316]:Groupwise ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.10.20070918 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User"
dest-dn="\IDMEDIR\Users\HESOCT\Onderwijs\Studenten\Stud ent"
dest-entry-id="33210" scope="entry">
<read-attr attr-name="DirXML-EntitlementRef"/>
</query>
</input>
</nds>
[03/11/08 13:17:54.317]:Groupwise ST: Pumping XDS to eDirectory.
[03/11/08 13:17:54.317]:Groupwise ST: Performing operation query
for \IDMEDIR\Users\HESOCT\Onderwijs\Studenten\Student.
[03/11/08 13:17:54.317]:Groupwise ST: Query from policy result
[03/11/08 13:17:54.317]:Groupwise ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.10.20070918 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<instance class-name="User"
qualified-src-dn="O=Users\OU=HESOCT\OU=Onderwijs\OU=Studenten\CN =Student"
src-dn="\IDMEDIR\Users\HESOCT\Onderwijs\Studenten\Stud ent"
src-entry-id="33210"/>
<status level="success"></status>
</output>
</nds>
[03/11/08 13:17:54.318]:Groupwise ST: (if-entitlement 'gwAccount'
not-available) = TRUE.
[03/11/08 13:17:54.318]:Groupwise ST: Rule selected.
[03/11/08 13:17:54.318]:Groupwise ST: Applying rule 'Account
Entitlement: Veto if not present'.
[03/11/08 13:17:54.318]:Groupwise ST: Action: do-veto().
[03/11/08 13:17:54.318]:Groupwise ST:Policy returned:
[03/11/08 13:17:54.318]:Groupwise ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.10.20070918 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input/>
</nds>
[03/11/08 13:17:54.318]:Groupwise ST:Processing returned document.
[03/11/08 13:17:54.318]:Groupwise ST:Processing operation <status> for .
[03/11/08 13:17:54.318]:Groupwise ST:
DirXML Log Event -------------------
Driver: \IDMEDIR\IDM Driver Set\Identity Manager Drivers\GroupWise
Channel: Subscriber
Object: \IDMEDIR\Users\HESOCT\Onderwijs\Studenten\Student
Status: Warning
Message: Code(-8016) Operation vetoed by object matching policy.
[03/11/08 13:17:54.681]:Groupwise ST:Password synchronization command
status detected.
[03/11/08 13:17:54.683]:Groupwise ST:Password synchronization event
status recorded.
[03/11/08 13:17:54.683]:Groupwise ST:End transaction.
[03/11/08 13:21:23.618]:Groupwise ST:Received state change event.
[03/11/08 13:21:23.618]:Groupwise ST:Transitioned from state
'%+C%14CRunning%-C' to state '%+C%14CShutdown Pending%-C'.
[03/11/08 13:21:23.619]:Groupwise ST:Successfully processed state change
event.
[03/11/08 13:21:23.619]:Groupwise ST:Leaving event loop.
[03/11/08 13:21:23.619]:Groupwise ST:Shutting down DirXML driver
\IDMEDIR\IDM Driver Set\Identity Manager Drivers\GroupWise.
[03/11/08 13:21:23.619]:Groupwise ST:GroupWise:
GWdriverShim.shutdown(): No reason given
[03/11/08 13:21:23.619]:Groupwise ST:GroupWise: Closing
172.31.1.40\Mail:\Edith\wpdomain.db
[03/11/08 13:21:23.746]:Groupwise ST:GroupWise: Closing
172.31.1.40\Mail:\Edith\wpdomain.db
[03/11/08 13:21:23.879]:Groupwise STriverShim.shutdown() returned:
[03/11/08 13:21:23.879]:Groupwise ST:
<nds dtdversion="2.0" ndsversion="8.x">
<source>
<product build="20070626_2242" instance="GroupWise"
version="3.5.1">DirXML Driver for GroupWise</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status level="success"/>
</output>
</nds>
[03/11/08 13:21:23.879]:Groupwise ST:Waiting for Publisher thread to
terminate...
[03/11/08 13:21:24.724]:Groupwise PT:PublicationShim.start() returned:
[03/11/08 13:21:24.725]:Groupwise PT:
<nds dtdversion="2.0" ndsversion="8.x">
<source>
<product build="20070626_2242" instance="GroupWise"
version="3.5.1">DirXML Driver for GroupWise</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status level="success"/>
</output>
</nds>
[03/11/08 13:21:24.725]:Groupwise PT:Applying input transformation policies.
[03/11/08 13:21:24.725]:Groupwise PT:Applying policy:
%+C%14Citp-Entitlement Input Policy%-C.
[03/11/08 13:21:24.725]:Groupwise PT: Applying to status #1.
[03/11/08 13:21:24.725]:Groupwise PT: Evaluating selection criteria
for rule 'Check target of add-association for group membership
entitlements that need to be granted'.
[03/11/08 13:21:24.725]:Groupwise PT: (if-operation equal
"add-association") = FALSE.
[03/11/08 13:21:24.725]:Groupwise PT: Rule rejected.
[03/11/08 13:21:24.725]:Groupwise PT:Policy returned:
[03/11/08 13:21:24.725]:Groupwise PT:
<nds dtdversion="2.0" ndsversion="8.x">
<source>
<product build="20070626_2242" instance="GroupWise"
version="3.5.1">DirXML Driver for GroupWise</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status level="success"/>
</output>
</nds>
[03/11/08 13:21:24.726]:Groupwise PT:Applying schema mapping policies to
input.
[03/11/08 13:21:24.726]:Groupwise PT:Applying policy:
%+C%14Csmp-Default+Mapping+Rule%-C.
[03/11/08 13:21:24.726]:Groupwise PT:Applying policy: %+C%14C'Handle
variations in schema mapping based on GroupWise Domain version.'%-C.
[03/11/08 13:21:24.726]:Groupwise PT: Applying to status #1.
[03/11/08 13:21:24.726]:Groupwise PT: Evaluating selection criteria
for rule 'Strip nspmDistributionPassword'.
[03/11/08 13:21:24.726]:Groupwise PT: Rule selected.
[03/11/08 13:21:24.726]:Groupwise PT: Applying rule 'Strip
nspmDistributionPassword'.
[03/11/08 13:21:24.726]:Groupwise PT: Action:
do-strip-op-attr("nspmDistributionPassword").
[03/11/08 13:21:24.726]:Groupwise PT: Evaluating selection criteria
for rule 'GW 6.5+ from eDir'.
[03/11/08 13:21:24.726]:Groupwise PT: (if-global-variable
'domainVersion' not-equal "550") = TRUE.
[03/11/08 13:21:24.726]:Groupwise PT: (if-global-variable
'domainVersion' not-equal "600") = TRUE.
[03/11/08 13:21:24.726]:Groupwise PT: (if-local-variable 'fromNds'
equal "true") = FALSE.
[03/11/08 13:21:24.726]:Groupwise PT: Rule rejected.
[03/11/08 13:21:24.726]:Groupwise PT: Evaluating selection criteria
for rule 'GW 6.5+ from GW'.
[03/11/08 13:21:24.726]:Groupwise PT: (if-global-variable
'domainVersion' not-equal "550") = TRUE.
[03/11/08 13:21:24.726]:Groupwise PT: (if-global-variable
'domainVersion' not-equal "600") = TRUE.
[03/11/08 13:21:24.727]:Groupwise PT: (if-local-variable 'fromNds'
equal "false") = TRUE.
[03/11/08 13:21:24.727]:Groupwise PT: (if-class-name equal "User")
= FALSE.
[03/11/08 13:21:24.727]:Groupwise PT: Rule rejected.
[03/11/08 13:21:24.727]:Groupwise PT: Evaluating selection criteria
for rule 'GW 5.5/6.0 from eDir'.
[03/11/08 13:21:24.727]:Groupwise PT: (if-global-variable
'domainVersion' equal "600") = FALSE.
[03/11/08 13:21:24.727]:Groupwise PT: (if-global-variable
'domainVersion' equal "550") = FALSE.
[03/11/08 13:21:24.727]:Groupwise PT: Rule rejected.
[03/11/08 13:21:24.727]:Groupwise PT: Evaluating selection criteria
for rule 'GW 5.5/6.0 from GW'.
[03/11/08 13:21:24.727]:Groupwise PT: (if-global-variable
'domainVersion' equal "600") = FALSE.
[03/11/08 13:21:24.727]:Groupwise PT: (if-global-variable
'domainVersion' equal "550") = FALSE.
[03/11/08 13:21:24.727]:Groupwise PT: Rule rejected.
[03/11/08 13:21:24.727]:Groupwise PT:Policy returned:
[03/11/08 13:21:24.727]:Groupwise PT:
<nds dtdversion="2.0" ndsversion="8.x">
<source>
<product build="20070626_2242" instance="GroupWise"
version="3.5.1">DirXML Driver for GroupWise</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status level="success"/>
</output>
</nds>
[03/11/08 13:21:24.727]:Groupwise PT:Resolving association references.
[03/11/08 13:21:24.727]:Groupwise PT:Ending publisher thread.
[03/11/08 13:21:24.728]:Groupwise ST:Publisher thread terminated.
[03/11/08 13:21:24.857]:Groupwise STriver terminated.