For one reason or another, I find myself trying to do this.

I have a driver (MAD) that has associated users in the Active Domain.
Through policies, I have been blocking changes to these users, so the
events that updated some attributes have now been thrown away. Now I
need to update the associated user to match what's in the vault. Since I
can't recreate the events, I'm thinking a <sync> event for that user
would take care of it (assuming that my policies are in place to Do The
Right Thing).

So on the Sub/Input Transform, for user Fred, if attr X is changing to
value "foo", can I just build a <sync> event like:

<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.10.20070918 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<sync class-name="User" qualified
-src-dn="O=NIU\OU=Users\CN=FRED" src-dn="\NIU-FLAT\NIU\Users\FRED" />
</input>
</nds>

and let it go through? Or do I need more than that?


---------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu
Novell Support Forums Volunteer SysOp http://forums.novell.com

Please post questions in the newsgroups. No support provided via email.