I just noticed today that doing a "Migrate from Vault" on an eDirectory
driver will generate an "Operation vetoed by Filter"

The problem appears to be the GUID. I have not changed anything recently and
do not recall seeing this.

I am using the default GUID paramaters that the filter uses. On both
eDirectory drivers the GUID is set to Synchronize on the subscriber and
Ignore on the publisher. Merge authority is set to default.

On a Level-3 trace I can see that after the Migrate a modify of the GUID
comes through which is vetoed appropriately due to the filter. Should merge
authority be set to None? I am running IDM v3.6.

<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.6.1.4427">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" dest-dn="\IDM-T\xcorp\users\frankjo"
dest-entry-id="365112" event-id="slesidm2#20090224144347#1#1"
from-merge="true" qualified-src-OU=xcorp\OU=users\uniqueID=frankjo"
src-dn="xcorp\users\frankjo" src-entry-id="363525">
<association>{56D03082-B952-5847-3A8E-56D03082B952}</association>
<modify-attr attr-name="GUID">
<remove-all-values/>
</modify-attr>
<modify-attr attr-name="GUID">
<add-value>
<value timestamp="1231439057#57"
type="octet">2xZDUCfwNUrRutsWQ1An8A==</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>