For one reason or another, I find myself trying to do this.

I have a driver (MAD) that has associated users in the Active Domain.
Through policies, I have been blocking changes to these users, so the
events that updated some attributes have now been thrown away. Now I
need to update the associated user to match what's in the vault. Since I
can't recreate the events, I'm thinking a <sync> event for that user
would take care of it (assuming that my policies are in place to Do The
Right Thing).

So on the Sub/Input Transform, for user Fred, if attr X is changing to
value "foo", can I just build a <sync> event like:

<nds dtdversion="3.5" ndsversion="8.x">
<product version=" ">DirXML</product>
<contact>Novell, Inc.</contact>
<sync class-name="User" qualified
-src-dn="O=NIU\OU=Users\CN=FRED" src-dn="\NIU-FLAT\NIU\Users\FRED" />

and let it go through? Or do I need more than that?

David Gersic
Novell Support Forums Volunteer SysOp

Please post questions in the newsgroups. No support provided via email.