Hello,

Just found another weird thing regarding queries and the eDirectory driver. This is probably an engine "feature" and not a
driver feature...

If I use two token-attr in a rule for different attributes and one of them is available in the document the query created to get
the other attribute value contains the existing attribute as well?!?

Driver version 3.5.10.20070918


13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.10.20070918 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify cached-time="20080909110015.351Z" class-name="User" event-id="Meta-S1#20080909110015#1#1"
qualified-src-dn="O=UK\OU=Meta\OU=Identities\uniqueID=1972092356 59\CN=7209235659-2848504"
src-dn="\UK-META-TREE\UK\Meta\Identities\197209235659\7209235659-2848504" src-entry-id="97438" timestamp="1220958015#2">
<association state="associated">{5361A6C8-A271-6b48-8DA3-5361A6C8A271}</association>
<modify-attr attr-name="pidAbsenceTo">
<remove-value>
<value timestamp="1220957790#2" type="string">2008-09-31 00:00:00</value>
</remove-value>
<add-value>
<value timestamp="1220958015#2" type="string">2008-12-31 00:00:00</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT:Applying policy: Set Login Disabled.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: Applying to modify #1.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: Evaluating selection criteria for rule 'Break if class-name not eq User'.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-class-name not-equal "User") = FALSE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: Rule rejected.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: Evaluating selection criteria for rule 'pidStatus, false'.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-class-name equal "User") = TRUE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-operation equal "modify") = TRUE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-op-attr 'pidStatus' changing-to "false") = FALSE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-class-name equal "User") = TRUE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-operation equal "modify") = TRUE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-op-attr 'pidToAdm' changing-to "false") = FALSE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-class-name equal "User") = TRUE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-operation equal "modify") = TRUE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-op-attr 'pidProtectedAddress' changing-to "true") = FALSE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: Rule rejected.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: Evaluating selection criteria for rule 'pidStatus, true'.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-class-name equal "User") = TRUE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-operation equal "modify") = TRUE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-op-attr 'pidStatus' changing-to "true") = FALSE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-class-name equal "User") = TRUE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-operation equal "modify") = TRUE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-op-attr 'pidToAdm' changing-to "true") = FALSE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-class-name equal "User") = TRUE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-operation equal "modify") = TRUE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-op-attr 'pidProtectedAddress' changing-to "false") = FALSE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: Rule rejected.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: Evaluating selection criteria for rule 'Check pidAbsenceTo'.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: (if-op-attr 'pidAbsenceTo' available) = TRUE.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: Rule selected.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: Applying rule 'Check pidAbsenceTo'.
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: Action:
do-set-local-variable("pidAbsenceTo",scope="policy",token-convert-time(dest-format="!CTIME",dest-tz="UTC",src-format="yyyy-MM-dd
hh:mm:ss",src-tz="Europe/Stockholm",token-attr("pidAbsenceTo"))).
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT:
arg-string(token-convert-time(dest-format="!CTIME",dest-tz="UTC",src-format="yyyy-MM-dd
hh:mm:ss",src-tz="Europe/Stockholm",token-attr("pidAbsenceTo")))
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT:
token-convert-time(dest-format="!CTIME",dest-tz="UTC",src-format="yyyy-MM-dd
hh:mm:ss",src-tz="Europe/Stockholm",token-attr("pidAbsenceTo"))
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT:
token-convert-time(dest-format="!CTIME",dest-tz="UTC",src-format="yyyy-MM-dd
hh:mm:ss",src-tz="Europe/Stockholm",token-attr("pidAbsenceTo"))
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: token-attr("pidAbsenceTo")
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: Token Value: "2008-12-31 00:00:00".
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: Arg Value: "2008-12-31 00:00:00".
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: Token Value: "1230678000".
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: Arg Value: "1230678000".
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: Action:
do-set-local-variable("pidAbsenceExtent",scope="policy",token-attr("pidAbsenceExtent")).
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: arg-string(token-attr("pidAbsenceExtent"))
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: token-attr("pidAbsenceExtent")
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: Query from policy
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.10.20070918 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<query class-name="User" dest-dn="\UK-META-TREE\UK\Meta\Identities\197209235659\7209235659-2848504" dest-entry-id="97438"
scope="entry">
<association>{5361A6C8-A271-6b48-8DA3-5361A6C8A271}</association>
<read-attr attr-name="pidAbsenceExtent"/>
<read-attr attr-name="pidAbsenceTo"/>
</query>
</input>
</nds>
13:00:25 9C27E5A0 Drvrs: eDirectory_UK-META-TREE PT: Fixing up association references.