Hello:

I am using IDM Bundled Edition 3.5.1. I have my driver configured to synch for a particular eDir OU (Aberdeen, as shown below) only to a specific AD OU.

I am having some issues:

When I create/modify a user/group via ConsoleOne, each time I get this error (from DSTRACE)

DVRS: [2009/02/09 14:12:30] Active Directory - Aberdeen ST:Start transaction.
DVRS: [2009/02/09 14:12:30] Active Directory - Aberdeen ST:Processing events for transaction.
DVRS: [2009/02/09 14:12:30] Active Directory - Aberdeen ST:
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.10.20070918 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<rename cached-time="20090209191230.836Z" class-name="User" event-id="CAMPUS1#20090209191230#5#1" old-src-dn="\HNNCSB\HNNCSB\ABERDEEN\AberTestUser1" qualified-old-src-dn="O=HNNCSB\OU=ABERDEEN\CN=AberTestUser1" qualified-src-dn="O=HNNCSB\OU=ABERDEEN\CN=AberTestUser2" remove-old-name="true" src-dn="\HNNCSB\HNNCSB\ABERDEEN\AberTestUser2" src-entry-id="44030" timestamp="1234196534#1">
<new-name>AberTestUser2</new-name>
</rename>
</input>
</nds>
DVRS: [2009/02/09 14:12:30] Active Directory - Aberdeen ST:No event transformation policies.
DVRS: [2009/02/09 14:12:30] Active Directory - Aberdeen ST:Subscriber processing rename for \HNNCSB\HNNCSB\ABERDEEN\AberTestUser2.
DVRS: [2009/02/09 14:12:30] Active Directory - Aberdeen ST:Processing returned document.
DVRS: [2009/02/09 14:12:30] Active Directory - Aberdeen ST:Processing operation <status> for .
DVRS: [2009/02/09 14:12:30] Active Directory - Aberdeen ST:
DirXML Log Event -------------------
Driver: \HNNCSB\HNNCSB\IDM\eDir-to-ADv1\Active Directory - Aberdeen
Channel: Subscriber
Object: \HNNCSB\HNNCSB\ABERDEEN\AberTestUser2
Status: Warning
Message: Code(-8019) Operation vetoed on unassociated object.
DVRS: [2009/02/09 14:12:30] Active Directory - Aberdeen ST:End transaction.

The only Novell TID is 10092812, and I already have the authentication context specified (DC). The Remote Loader is already installed on a DC, so I shouldn't really need that anyway. Anyone have any suggestions?

The initial account/group synchronization never occurs. I assume it's related to the problem above.

Any suggestions would be appreciated.

Tom