I am trying to create a job that will "sync" all users that are active.
I think my problem is with the veto, but I am not sure. If I include
the veto, only the first user is sync'd. If I leave out the veto, only
the last user is sync'd.

Here is my policy:

<rule>
<description>Sync Data Job - All Users</description>
<conditions>
<and>
<if-operation mode="nocase" op="equal">trigger</if-operation>
<if-op-property mode="nocase" name="source" op="equal">Sync
Data</if-op-property>
</and>
</conditions>
<actions>
<do-for-each>
<arg-node-set>
<token-query class-name="User" datastore="src">
<arg-dn>
<token-text xml:space="preserve">IDVAULT\USERS</token-text>
</arg-dn>
<arg-match-attr name="employeeStatus">
<arg-value>
<token-text xml:space="preserve">A</token-text>
</arg-value>
</arg-match-attr>
</token-query>
</arg-node-set>
<arg-actions>
<do-set-op-src-dn>
<arg-dn>
<token-xpath expression="$current-node/@src-dn"/>
</arg-dn>
</do-set-op-src-dn>
<do-append-xml-element expression=".." name="sync"/>
<do-clone-xpath dest-expression="../sync" src-expression="@* |
association"/>
<do-veto/>
</arg-actions>
</do-for-each>
</actions>
</rule>

Any help would be appreciated.


--
cj_hayes
------------------------------------------------------------------------
cj_hayes's Profile: http://forums.novell.com/member.php?userid=5206
View this thread: http://forums.novell.com/showthread.php?t=368502